Information notice on the processing of personal data

Your privacy is extremely important to us, please read this information notice carefully.

We wish to inform you in a complete and transparent manner about the personal data processing that the companies listed in paragraph 1 below will carry out on your personal data provided by you and/or collected in the context of the contacts you will possibly have with us, including for example the following:

• visiting our stores;
• visiting the website www.diesel.com (hereinafter the “Site”) and/or the other websites referring to the brand, interacting with our pages on the social networks (e.g., Facebook, Twitter, Instagram, Weibo, Wechat, etc.);
• contacting our Customer Service.
• using the Global-e service for purchasing activities.

If you provide personal data on behalf of someone else, you must ensure, in advance, that the interested parties have read this information notice.

1. WHO COLLECTS YOUR PERSONAL DATA

The companies collecting and processing personal data as autonomous data controllers [or as joint controllers under the EU Regulation 679/2016 (hereinafter the “GDPR”)] are:

• OTB S.p.A. (hereinafter “OTB”), with registered office in Italy, Breganze (Vi), Via dell’Industria 2, 36042, telephone +390445306555, email privacy@otb.net; OTB’s Data Protection Officer (hereinafter “DPO”) can be contacted at dpo@otb.net
• Diesel S.p.A. (hereinafter “Diesel”), with registered office in Italy, Breganze (Vi), Via dell’Industria 4-6, 36042, telephone +390424477555, email privacy@diesel.com; the Diesel Data Protection Officer (“DPO”) can be contacted at dpo@otb.net.
• OTB KOREA (hereinafter “Local Affiliate”), with registered office in 11F, 76 Saemunan-ro, Sinmunno 1(il)-ga, Jongno-gu, Seoul, Republic of Korea, telephone +822-1670-0786, email privacy@diesel.com.

While OTB, Diesel and Local Affiliate jointly decide the purposes and means of personal data processing and may act as joint controllers for purposes of the GDPR, with regards to Korean users, only Local Affiliate (hereinafter also the “Data Controller” or the “Company”) shall act as data controller under the applicable Korean privacy laws, and OTB and Diesel act as independent third party data controllers that receive personal data from the Local Affiliate.

Please consider that said processing activities are not intended for minors and the Data Controller does not knowingly collect or solicit personal data from anyone under the age of 18. This does not affect the applicable contract law such as the rules on the validity, formation or effect of a contract in relation to a child.

 2. WHAT PERSONAL DATA WE PROCESS

Company collects different categories of personal data according to the purpose for which it processes them.

Herein below we specify which categories of personal data are collected; in the following paragraph we will explain for what purposes each category of data is processed by the Company as appropriate (hereinafter “Personal Data”).

• Biographical Data: name, middle name, surname, date of birth, gender;
• Contact Data: address of residence (street, city, province, state, cap code), domicile, email address, telephone number, mobile number;
• Sales Data: shipping and billing address, method of delivery and payment, name of the credit card holder and expiry date of the card, information requested by the customer service, VAT number and/or tax code, passport number, Global Blue card number;
• Tracking of Newsletters and Actions Data: information relating to the opening of newsletters or links;
• Data collected in the shop: birthday, presumed age group, in some countries the social network ID, gender, method and date of registration, store and sales assistant preferences, language, product categories of interest, methods of use services, preferences on services possibly noted in the shop, redemption campaign, events attendance, other brands purchased, products tried in the dressing room but not purchased;
• Purchase Data: detail of the purchased products (e.g., size, price, discount, model, collection, calculated spending level, abandoned cart, etc.);
• Loyalty Data: your data collected as part of the “House of Diesel” loyalty program, whose Regulation is available at the following link, and based on your engagement with the brand (e.g., social media “like”, “comment”, “share”, “save”, “follow Diesel’s official account”, “share photos on community platform”, “create Wishlist and e-store avatar” etc.);
• VTO Service Data: Company may collect your image only to provide you the Virtual Try-On service. In any case, the processing occurs in real time and it is limited to the duration of the session. All the data thereof will be automatically deleted at the end of each session.
• Navigation Data: data relating to browsing behaviour and/or use of the websites of the Data Controllers using, for example, cookies or information relating to the pages that have been visited or searched for or related to the wishlist collected while browsing or when shopping on the online store. As for the use of cookies, please refer to the Cooke Policy available here.

3. FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA

In this paragraph, we explain for what purposes each category of data is processed by Data Controller.

a. Sales activities and response to other requests made by customers

If you purchase Diesel’s products through the Site using the e-commerce services provided by Global-e NL B.V (“Global-e”), which is an independent data controller operating as Diesel’s international fulfilment partner, Diesel will process your Purchase Data received by Global-e to prepare the sale for the delivery. When completing a purchase, you will be directed to the Global-e’s platform, where you will be asked to provide your Personal Data directly to Global-e according to its own Privacy Policy and Terms and Conditions. A specific wording will inform you about this transition. Completed the purchase on Global-e’s platform, Global-e will communicate to Diesel your Purchase Data, via a specific and secure interface, so that Diesel can manage the order placed by you in the Global-e platform, including the preparing of the parcels with the goods you have purchased.

Similarly, the Company may need to process your Biographical Data or Contact Data to respond to any further requests that you may formulate through the Site or through the Customer Service, through telephone or chat, such as information or assistance requests.

Legal basis: this processing is based on the performance of a purchase contract to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise the Company will not be able to process your request.

b. Registration on the Site and use of the services offered

Company will process your Personal Data in order to allow you to register on the Site and use the services offered. Your data will be stored until you request to delete your profile.

Legal basis: this processing is based on the performance of a contract to which you are a party; the provision of the Personal Data is necessary for this purpose, since otherwise the Company will not be able to allow your registration and offer its services.

c. Loyalty program Registration

The Biographical Data, Contact Data, Purchase Data and Loyalty Data will also be collected by Diesel to manage your request to join the loyalty program (called “House of Diesel”, whose Regulation is available at the following link). These data will be processed to complete your membership and for all purposes strictly connected to it or instrumental, including - firstly - all the activities provided for in the loyalty program. Registration could take place: i) online through the Site; ii) offline in the participating shops, by completing the application form present in electronic (tablet or another smart tool) format or through flyers (distributed in shops) with a special QR code, through which customers can join the program themselves via the Site, iii) through further official channels of Diesel S.p.A., (for example, but not limited to social networks such as Facebook, Instagram, WeChat etc.), or iv) through the Customer Service.

All communications relating to the loyalty program may be made by Diesel via the Site, SMS, MMS, Wallet, e-mail, newsletter, social networks and/or any other official communication channel of Diesel. All these communications relating to the program itself are sent solely for the purpose of making available the benefits related to it and do not constitute marketing communications.

Furthermore, by creating an account on the Site in the reserved area, the user will become part of the Diesel’s loyalty program. If you wish to take advantage of the services available on the Site (e.g., purchase products) without joining the program, simply choose the “Guest” option where available (e.g., during checkout for payments).

Legal basis: this processing is based on the performance of a contract for joining the loyalty program to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.

d. Participation in prize contests

Diesel will be able to process your Biographical Data to allow you to participate in prize contest that Diesel could organize. In certain situations, for example to proceed with the delivery of the prize, your Contact Data could also be processed. If participation in the contest requires further information, these will be requested to you upon release of a specific privacy policy.

Legal basis: this processing is based on the performance of a contract for attending the relevant prize contest to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.

e. Virtual Try-On Service

The Company makes available a Virtual Try-On (“VTO”) service, provided by specialised providers such as Luxottica Group S.p.A. and Tangiblee (the “VTO Provider/s”), which allows the user to view a real-time simulation of the wearability of certain products (such as glasses, jewellery or watches), by temporarily detecting images of specific body parts, such as neck or hands.

Before accessing the VTO service, you will be shown a pop-up disclaimer requesting your consent to the processing of personal data in connection with the VTO functionality. Only after you have provided such consent, you may be redirected to the platform of the VTO Provider, where you will perform the virtual try-on session. The processing occurs in real time, is limited to the duration of the session, and is automatically deleted at the end. The data is not stored, nor is it associated with persistent identifiers. The technologies used do not perform facial recognition, biometric identification, or extract any personal characteristics such as age, gender or ethnicity. No cookies or tracking tools are used for profiling purposes.

The VTO Provider and the Company processes your image exclusively to provide the VTO service and they do not retain or further process your image.

For further details on the processing activities carried out by the VTO Provider please refer to its privacy policy, which can be accessed via the pop-up disclaimer prior to activation of the VTO service.

Legal basis: this processing is based on the consent you have given prior to accessing the VTO service.

f. Customer satisfaction

Company may use your Contact Data to conduct surveys to measure the level of satisfaction (i.e., customer satisfaction) with the service provided (by way of example but not limited to: online post-sales surveys; in-store post-sales surveys; second hand gold shopping surveys etc.). Please note that your Contact Data will be used by the Company to re-contact you in case you respond negatively to the survey because it is important for the company to improve its relationship with you. In this latter case, the data will be kept for as long as necessary to obtain feedback. In any case, the communications made for this purpose will not have an advertising content, or direct sales or will be used for market research or commercial communication.

Legal basis: this processing is based on the legitimate interest of the Company to verify and improve the quality of its services. For Korean users, this processing is based on the performance of a contract to which you are a party, or your consent.

g. Other administrative-accounting activities

Company may also process your Personal Data for administrative, accounting and internal statistical analysis for business planning purposes.

Legal basis: this processing is based on the legitimate interest of the Company to improve the quality of its services and business.

h. Aggregate analysis for strategic orientation and Business Intelligence

Company processes Purchase Data and Navigation Data to perform aggregate strategic orientation and “Business Intelligence” analyses on the data and information processed, considering the entrepreneurial and market need to conduct general analysis and forecasting activities. By developing statistical processing and strategic business models, the Company aims to improve the products and services offered to its customers and measure the return on the company’s investments in organized digital campaigns. This type of analysis is carried out based on aggregated/hashed data, where traceability to individuals is merely incidental, and in any case, it is not conducted within the applications used for this purpose.

Legal basis: this processing is based on the Company’s legitimate interest in evaluating the effectiveness of its business strategies and measuring the level of its investments.

i. Marketing

Only with your consent, the Company will process the Biographical Data, Contact Data and Purchase Data for marketing purposes, that is for advertising on social networks to which you are registered or sending advertising or direct sales material, carrying out market research, commercial communication with automated contact methods (e-mail, newsletter, SMS, MMS, online messaging platforms, etc.) and traditional contact methods (mail).

With reference to advertising activity on social networks, your email address may be shared, through secure and encrypted transmission mechanisms, with the involved social network, so that the latter can match it with the information available on its platform. In this case, the social media provider will compare the data uploaded by the Company with the data it already holds on to its users, and users who match will be added to or excluded from the target audience (i.e., the "group" of people to whom the advertisement will be shown on the social media platform).

Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one.

You can at any time withdraw your consent to receive the above-mentioned communications by clicking on the appropriate option in each marketing email received, as well as by writing to the address privacy@diesel.com, or otherwise by contacting the companies at the addresses indicated in paragraph 1. 

j. Customer profiling

With your consent, the Company will be entitled to process Biographical Data, Contact Data, Sales Data, Purchase Data, Data collected in the shop, Tracking of Newsletters Data and Actions Data and the Navigation Data for profiling purposes and for business analysis, that is for analysis on your purchase preferences consisting of automated processing of the above-mentioned Personal Data. This processing is aimed at analytically knowing or predicting your purchasing preferences also in order to create customer profiles and customize the commercial offer so that it is more in line with your preferences.

Legal basis: this processing is based on the consent you have given.

You will be entitled at any time to withdraw your consent to be subject to profiling by writing to privacy@diesel.com or otherwise by contacting the Company at the addresses indicated in paragraph 1.

k. Sales related services

Company may need to process your Biographical Data and certain Sales Data (tax code and/or VAT number, passport number and Global Blue card number) to manage your purchase when it is concluded in the shops, by phone or other methods provided by the Company itself, or issue an invoice, should you request it. Moreover, these data will be processed also to re-contact you for reasons connected with your purchase, for example in case of complaints, to recall a faulty and/or unsafe product, or in general, for technical reasons, e.g., related to the management of problems with refused credit card payments and similar.

Legal basis: this processing is based on the performance of a contract to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise the Company will not be able to process your request. For Korean users, the processing of passport numbers is based on applicable laws or your consent.

l. After-sales services

Company may collect your Biographical Data and Contact Data to process specific requests that you may formulate in the shop, during post-sales; for example, to arrange a repair, a customization, a home delivery or to manage a return.

Legal basis: this processing is based on the performance of a contract of which you are a part; the provision of the Personal Data listed above is necessary for this purpose, since otherwise the Company will not be able to process your request.

m. Contact management – re-contacting the customer

Company may need to use your Biographical Data and Contact Data in order to re-contact you in the post-sales process if necessary (by way of example but not limited to, re-contact may be required to deal with forgotten items in the shop, to return lost items etc.).

Legal basis: this processing is based on the legitimate interest of the Company in the pursuit of improving its performance and its relationship with the clients.

n. Purposes related to the obligations established by laws or regulations, by decisions/requests of competent authorities or by supervisory and control bodies

Company may process your Personal Data to comply with a legal obligation to which it is subject.

Legal basis: compliance with a legal obligation

The provision of data for this purpose is mandatory because in the absence of data the Company will not be in a position to comply with their legal obligations.

o. Defence of rights during judicial, administrative or extra-judicial proceedings and in disputes arising in connection with the services offered

Your Personal Data may be processed by Data Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of frauds.

Legal basis: this processing is based on the legitimate interest pursued by the Data Controller to protect their rights.

4. WHAT PROCESSING ACTIVITIES WE CARRY OUT WHEN YOU’RE USING OUR SITE AND YOU NAVIGATE WITHOUT BEING LOGGED IN

The Site is managed by Diesel. It is possible to browse the Site without having to actively communicate your Personal Data if you are not logged in. In this case, while browsing the Site, we inform you that the computer systems and software procedures used to operate the Site acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not directly associated with identified users, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, information regarding access, information regarding location, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the information regarding the user’s visit including data clickstream of the URL, within and from the Site, the duration of the visit on some pages and the interaction on these pages and other parameters relating to the operating system and the user’s IT environment.

These data are collected through the use of “cookies”. We specifically use browser cookies for various purposes, including cookies strictly necessary for the operation of the Site and the use of services through the appropriate features, and the cookies that are used for personalization, performance/analysis and promotional activities. You can configure your web browser options to allow or block cookies. Our Cookie Policy available at the following link contains more information regarding the use of cookies on the Site, as well as the options for accepting or rejecting them.

The data collected while browsing the Site will be processed to (i) manage the Site and resolve any operating problems, (ii) make sure that the content of the Site is presented in the most effective way for its devices, developing, testing and making improvements to the Site, (iii) as far as possible, to keep the Site safe and secure, (iv) to obtain anonymous statistical information on the use of the Site and to check its correct functioning, (v) identify anomalies and/or abuses in the use of the Site. The data could also be used to ascertain responsibility in case of possible computer crimes committed against the Site or third parties and may be presented to the Judicial Authority, if this makes an explicit request.

5. WHAT HAPPENS IF YOU DO NOT PROVIDE PERSONAL DATA

Some Personal Data that we will indicate you from time to time during the registration or purchase process are necessary for the completion of the purchase contract and for administrative and accounting purposes.

In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Controller to act as described (for example, the impossibility to carry out marketing activities).

6. HOW AND HOW LONG WE WILL PROCESS PERSONAL DATA

The Personal Data provided to and/or collected by the Data Controller are processed and stored with automated tools and, in some cases, may be processed and stored on a paper backing. In particular, the Personal Data processed for purposes of marketing and customer profiling will be entered and stored in the CRM systems (Customer Relationship Management) that allow the processing of Personal Data for these purposes. The Data Controller take the following measures to ensure the security of personal data:

• Administrative Measures: Establishment and implementation of an internal management plan, operation of a dedicated organization, regular employee training;
• Technical Measures: Management of access rights to personal data processing systems, installation of access control systems, encryption of personal data, installation and updating of security programs;
• Physical Measures: Restrict access to computer rooms, data storage rooms, etc.

The Personal Data will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply:

• data collected to enter into and perform purchase contracts on the Site or in shops, including payments: up to the conclusion of administrative and accounting obligations. The billing data will be kept for 10 years from the billing date;
• data related to data subjects’ requests: the data will be stored until the request is satisfied;
• data collected and processed for survey of customer satisfaction will be retained for 30 days, except where the data are needed to obtain further feedback from you; in this case data will be retain not longer than what is necessary for manage your feedback;
• if you have provided your consent, the data processed for purposes of marketing and customer profiling will be stored for a period of 7 years, unless you revoke your consent. In any case, you will not be contacted again for marketing and customer profiling activities 7 years after your last interaction with us or even earlier if you revoke the consent previously given. The events that identify this “interaction” may include, but are not limited to, a purchase, opening an email sent, participation in a survey, contest or event, interaction with Customer Service etc. For completeness, we would like to point out that, at any time, it is possible to review and modify your previously expressed consents contacting Diesel at privacy@diesel.com or the Customer Service.

In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. The Data Controller identify personal data subject to destruction when a reason for destruction arises and proceeds with the destruction upon the approval of the Chief Privacy Officer. Personal data stored in electronic file format is destroyed in a manner that prevents recovery, while personal information stored in paper documents is destroyed by shredding or incineration.

With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right.

7. WHERE PERSONAL DATA MAY BE TRANSFERRED OVERSEAS

For the purposes indicated above, the Company may also transfer your Personal Data to third countries, which may possibly do not guarantee the same level of protection. The transfer to third countries will always take place in accordance with the provisions of the GDPR or other applicable local laws, adopting any other measures necessary to ensure the security of the Personal Data being transferred. These measures possibly include your consent, delegation of processing and storage necessary for the execution and performance of a contract, agreements incorporating the so-called “standard contractual clauses” issued by the European Commission. You can ask for information regarding these third countries and how to obtain a copy of the appropriate safeguards using the following email: privacy@diesel.com or the contact details indicated in paragraph 1. The details regarding the overseas transfer of personal data by the Company are as follows:

You may refuse the overseas transfer of your personal data by contacting us via email (privacy@diesel.com).

8. WHO WILL PROCESS PERSONAL DATA

Personal Data will be processed by:

• employees and collaborators of the Data Controllers processing data under the authority of the Data Controller;
• employees and collaborators of the Data Processors designated by the Data Controller, including (i) the companies managing the shops and the online store and who will be entitled to view, modify and update the Personal Data entered in the CRM systems through which the Data Controller carry out the processing activities for marketing and profiling purposes (ii) the companies managing the storage of the Personal Data of the Data Controller based on agreements or local regulations;
• third parties established in the European Union and also outside the European Union, Data Processors, used by the Data Controller in particular for services of: Personal Data acquisition and data entry, shipping, mailing of promotional material, after sales assistance and Customer Service, market research, management and maintenance of the CRM systems through which the Data Controller carry out processing activities for marketing and profiling purposes and of the other corporate information systems of the Data Controller of the processing. The complete list of Data Processors appointed by the Data Controller can be requested to the following email address privacy@diesel.com or writing to the postal addresses indicated above.

Personal Data may also be disclosed to third parties, independent data controllers, in particular to freelancers or companies providing legal or tax advice and assistance and to companies managing payments made by debit or credit cards or for fraud prevention and management activities. Furthermore, in order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna you can find here. Your personal data is handled by Klarnas as Data Controller in accordance with applicable data protection law and in accordance with the information in Klarnas privacy statement.

Personal Data will not be disseminated in any way.

9. YOUR RIGHTS

Pursuant to Chapter V of the PIPA and Chapter III of the GDPR, you have the right to ask Data Controller:

• to access to your Personal Data,
• to receive the copy of the Personal Data you provided us (so-called “data portability”) and to have data transmitted to another controller, if technically possible,
• the rectification of the Personal Data in our possession,
• the erasure of any Personal Data in relation to which we no longer have any legal basis for processing,
• the limitation of the way in which we process your Personal Data, within the limits set by the applicable law data protection law.

Right to object: in addition to the rights listed above, you always have the right to object at any time to the processing of your Personal Data carried out by the Data Controller for the pursuit of its legitimate interest. You have the right to object to direct marketing, which includes profiling. If you prefer that the processing of your Personal Data is carried out solely through traditional contact methods, you can object to the processing of your Personal Data carried out through automated contact methods. 

You also have the right to withdraw, in whole or in part, the consent to the processing of Personal Data concerning you for the purpose of sending advertisements or direct selling or for carrying out market research or commercial communication with automated contact methods (e-mail, other remote communication systems via communication networks such as, for instance: SMS, MMS, messaging platforms, etc.) and traditional contact methods (mail).

Finally, we remind you that, among the rights you are granted, you have the right to refuse the consent without any disadvantages from refusal.

The exercise of these rights, which can be done through the contact details indicated in paragraph 1, is not subject to formal constraints. In the event that you exercise any of the above-mentioned rights, it will be the responsibility of the Data Controller that you contacted to verify if you are entitled to exercise the right and to provide you with an answer, in accordance with Applicable Laws. In addition, the exercise of the above-mentioned rights may also be carried out through a legal representative or an authorized agent.

If you believe that the processing of your Personal Data is carried out in breach of the provisions of the GDPR or the PIPA, you have the right to lodge a complaint with the Supervisory Authority or to start the appropriate legal actions before the competent courts.

To exercise your rights, you can send a request to the Data Controller or (where relevant) to companies indicated in paragraph 1 by writing to the address.

• The Company’s Department in Charge of Privacy: privacy@diesel.com

The OTB’s Data Protection Officer can be contacted at the email address dpo@otb.net.

LAST UPDATE: June 2025