Identity information (“Identity Information”) – includes: any information that identifies you as an individual, living person, name [first, last, initials], date of birth, e-mail address, phone number, unique consumer identifier number (including your adiClub membership number or identification (“ID”), or ID from any adidas Platform), nickname, password, social media identifiers and handles, information passed along to us via your Facebook or adidas Running account, your device fingerprint (including your browser fingerprint), gift card codes that are assigned to you and the IP address of your browser. We use it to verify your identity.

Contact information (“Contact Information”)- includes: any information we can use to contact you, your phone number, shipping and billing address, e-mail address, messenger ID, social media handle, any other communication channel you have used to contact us for more information. We use it to contact you for different reasons depending on the purposes stated below.

Location information (“Location Information”)- includes: any information we can use to determine your location, real-time or otherwise, your residential location, current log-in location [IP address], real-time device location information via devices sensors and signals, GPS location (if you wish to share with us, for example through your mobile device settings), or information that helps us determine where you are, or when you “check-in” to an event or website on a social media page indicating location and if it is shared with us. We use it to help you find what you are looking for at your current location.

Size information (“Size Information”)- includes: shoe size, clothes size, height, weight, chest, waist, hip, inseam, body shape, heel-toe measurement. We use it to make sure your gear fits.

Payment, purchase and transaction information (“Payment Information”)- includes: any information we use to complete or in relation to your purchase record and invoice, your payment information (credit card details or payment platform details), payment risk profile (provided to us by our payment risk solution), shopping cart (your ordered items), delivery details, shipping and billing address, customer order number, purchase history with adidas, receipt number, transaction ID, invoice ID, retail store transaction ID, purchase value, order confirmation number, order tracking number, and any other information related to your purchase. We use it to complete your order on adidas Platforms, in adidas stores, or other selling platforms.

Behavioural and profile information (“Behavioural and Profile Information”)- includes: any information which indicates your preference, whether explicitly – if provided by you- or inferred, activity preference (sports), event participation information, exercise plans, in-store digital interactions, site/brand preference, language preference, product and product attributes preferences, store location preferences, your shopping history (all items in shopping carts), wishlist items, your browsing behaviour, your browsing preferences, any shopping “preference” details you provided to us in your profile and adidas Platform setting, any information you provide to us when you interact with our communities such as adidas Runners, participate in events or campaigns as a trainer, team members, a participant or promoter of our events, in-store interactions, your workout history, product reviews, social media interactions with us, and any other intelligence we have about you to help us learn you as a consumer better, including “Community Information” (as defined below). We use it to know you better as a consumer, so we can send you marketing messages containing only products and services that we think you might be interested in.

Community information (“Community Information”) – includes: information provided by you when you participate various adidas events and communities either as a trainer, team member, a participant or as a promotor of our events, including for example: pictures, videos, your nickname, your team, your interests and preferences, your feedback, leader boards, event participation, joined groups, and registration details. We use this information to organise the events and communities, and to know more about you as a consumer.

Social media interaction and activity information (“Social Media Information”) – includes: any information about you that we obtain through different social media channels such as Facebook, Instagram, Google, etc. when we use these channels for advertising, analytics purposes or to enrich your profile with adidas, including: any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”, comments or messages you shared with us publicly or privately on social media platforms. Also, we may be able to obtain this information indirectly from social media companies (e.g. Facebook, Snapchat, Google, Instagram, etc.) when we advertise on these platforms, which may include your participation and membership on particular topics and/or groups, your profile settings and preference, your behaviour on different platforms owned by the same company.

Mobile device information (“Mobile Device Information”)– includes: information about your device or browser that give us an idea about your browsing behaviour or device usage, device extended unique identifier (“EUI”), device ID, device fingerprint, IP/Wifi information, operating system, data stored on device when access is granted, log information when access to device (such as camera) is granted. Your device information is collected by adidas Platforms, specifically adidas mobile applications, and your browser information is collected by our cookies, tags, and pixels. This is often required for network security purposes. This includes, but not limited to: IP address, date and time of the visit, how long you remained on our website, the referral URL (if you came to our site via a different site or an advertisement), the pages visited on our site, your browser type, device type, versions, operating system.

Fitness activity information (“Fitness Activity Information”) - Any information connected to your fitness activity which you track using our Platforms (including adidas Running). This may include: activity type, distance, exercise duration, exercise routine (start and finish time), fitness score, pace, space utilisation data, speed.

Health information (“Health Information”) – Any information that relates to your health or vitals such as your body mass index (BMI), heartbeat per minute, or information of any disability. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes.

Correspondence (“Correspondence”) – includes: any correspondence you have with our customer service teams, and/or our employees and personnel, conversation we have when you contact customer service, the emails you write us about our products or services, the complaints you address to us via post, e-mail, fax, or call or messages to adidas Platforms, notes we prepared on your feedback, call back from our customer service to you, voice recordings made by customer service when we have the right to do so, and any other communication between you and adidas personnel. We record all customer service calls for quality assurance purposes.

Preference information (“Preference Information”) – includes: preferred language, log-in location, wishlist items, preferred shipping address, browsing preferences, our correspondence with you, your adidas product reviews. We use it to give you convenience when you visit and/or shop on our sites and mobile applications (“apps”).

adiClub membership information (“Membership Administration Information”)– includes: Identity Information (such as first and last name, email address, mobile phone number), unique member identifier (member ID), date you became a member, store ID (if you signed up in a retail store), source ID, country and brand of your original membership, member tier, membership tier achievement date, membership points, engagement history, rewards history, membership vouchers associated to members, discount coupons available, acquisition source ID. All the information the listed here will be kept for as long as you are an adiClub member.

Browsing information (“Browsing Information”) – includes any information on your browsing behaviour. This may include: browser name, IP address (including hashed IP address), clickstream data, date and time of site visits, time remained on site, pages visited, and the links you have clicked in our marketing messages or website, the referral URL that brought you to our site.

Image and recording (“Image and Recording”) – includes any image, voice or video recordings we have captured or obtained where you may be identified. This may include: CCTV footages, photos taken in our retail stores and/or at events, video recordings made during events or specific interactions, voice recording made during events or interactions (excluding correspondence with customer service), any images you share with us through social media.

Personal opinion (“Personal Opinion”) – includes any opinion you share with us that indicate your point of view and comments. This may include when you provide us feedback and review rating our service or products, or if you participate in any product research and development discussions.

Sensitive personal data (“Sensitive Personal Data”) – includes any information you share that may indicate or reveal certain characteristics about you including your political views, religious or philosophical beliefs, or health. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes as set out in this Privacy Policy.

I. SITE (ADIDAS DOMAIN) OPERATION AND APP OPERATION

PROCESSING

To run the sites that are connected to the adidas domain and the adidas app, fix bugs to make sure you always see the site the way we intended, and monitor compliance with our terms and conditions, we screen all traffic to our site and analyse data that is received by our servers.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

CATEGORIES OF PERSONAL DATA

Mobile Device Information

Identity Information

Behavioural and Profile Information

Browsing information

Preference Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Site administration support / service providers

II. DOMAIN AND NETWORK SECURITY AND USER AUTHENTICATION

PROCESSING

To protect our domains, detect unusual activities, and prevent security threats and protect our site-visitors from unauthorised accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such as the credentials you have provided directly to adidas or other platforms (such as adidas Running or Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

CATEGORIES OF PERSONAL DATA

Mobile device information

Identity Information

Behavioural and profile information

Browsing information

Preference Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Site administration support / service providers

III. GLOBAL CREDENTIAL TO ALL ADIDAS PLATFORMS – USER EXPERIENCE

PROCESSING

We know you don’t like to remember usernames and passwords, or having to register multiple times.

To enable our users to log on to adidas Platforms, including the portals, services, communities and apps operated by or on behalf of adidas Data Users (which includes the adidas Running mobile application and service) with one set of log-in credentials (“adidas Log-In”), we store your adidas Log-In in our global authentication platform. When you use your adidas Log-In to enter any adidas Platform, we will use a token to verify your identity from our global authentication platform. This also further ensures our network and domain security.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

CATEGORIES OF PERSONAL DATA

Identity Information (username, password, email)

Browsing Information

adiClub information (for adiClub members only)

Membership Administration Information

Preference Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Site administration support providers

IV. SALES OF ADIDAS PRODUCTS - ONLINE AND OFF-LINE ORDER

PROCESSING

To process your online and/or in-app orders, make sure your payment is received, comply with the requirements under our adidas terms and conditions (as set out at www.adidas.com.my/en/terms_and_conditions) (for selling you the products) including invoice processing, delivery, personalisation services, exchanges and refunds, click and collect. Your order cannot be completed if our payment fraud detection solutions flag your transaction as suspicious and potentially fraudulent. Please note the payment fraud detection system is an automated decision-making process. It is required to allow us to conclude the contract with you.

CATEGORIES OF PERSONAL DATA

Identity Information

Browsing Information

Contact Information

Location Information

Size Information

Payment Information

Correspondence

Image and Recording

Mobile Device Information

adiClub information (for adiCreators Club members only)

Membership Administration Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Selling partners (where applicable)

Manufacturing providers

Delivery service providers

Payment risk solution providers

Payment processing providers

IT cloud solution providers

V. PAYMENT FRAUD DETECTION

PROCESSING

We combine the purchase information you provide to us with other information we obtain through our third-party payment risk and fraud prevention service providers to ensure any purchases are legitimate, or you do not purchase our products in violation with our terms and conditions. This means depending on the outcome of the analysis of your information, we may reject your order, and decline your payment. This is an automated decision-making process that is required to conclude our sales contract with you.

CATEGORIES OF PERSONAL DATA

Identity Information

Browsing Information

Contact Information

Behavioural and Profile Information

Payment Information

Mobile Device Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Payment risk solution providers

Payment processing providers

IT cloud solution providers

VI. PRODUCT DELIVERY

PROCESSING

Once you have successfully placed an order, we use your contact details (home and/or shipping address) and other purchase information to deliver the products you purchased to you.

CATEGORIES OF PERSONAL DATA

Identity Information: Name

Contact Information: Shipping address

CATEGORIES OF RECIPIENTS

adidas Data Users

Delivery service providers

IT cloud solution providers

VII. ELECTRONIC DELIVERY TRACKING

PROCESSING

This is a service provided on request of the consumer by our delivery service providers (“Delivery Partners”).

You have the option to track your delivery using services provided directly by our Delivery Partners; however, we will only be able to share your information with our Delivery Partners for this purpose with your consent. The service is hosted on the Delivery Partner’s platform. You should read their privacy policy for the processing of your Personal Data for this purpose.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information

Any other information you may directly and voluntarily provide to the Delivery Partner

CATEGORIES OF RECIPIENTS

Delivery Partners

VIII. BUSINESS OPERATIONAL ANALYTICS

PROCESSING

We need to know how we do as a business. This is in the interest of our shareholders, our board members, our employees, and our partners. For this purpose, we need to analyse different categories of information to understand how our products are selling in different markets, what are the popular features of our products, what worked and what didn’t in terms of our marketing and advertising campaigns, our product designs and distribution strategy, our website design and overall user experience, so we can establish, implement, and evaluate our business strategy.

This includes analysing data to understand how users browse the adidas Platforms to improve our user experience design to make sure you will continue to purchase our products and interact with us on the adidas Platforms.

To minimise the risk to you as an individual, we will only use either the unique consumer identifier or the IP address for this purpose.

You can learn more about how our Data Analytics Solution Providers provide analytics services by using your data here:

Adobe Analytics Data Collection:

https://marketing.adobe.com/resources/help/en_US/reference/c_Privacy_Overview.html

Google Analytics Data Collection:

https://support.google.com/analytics/answer/6318039?hl=en

CATEGORIES OF PERSONAL DATA

Identity Information: Unique consumer identifier (only)

Size Information

Payment Information

Behavioural and Profile Information

Browsing information

Community Information

Fitness Activity Information: if we collect and process your activity and health information, we will explicitly ask for your consent

Mobile Device information

Correspondence

adiClub information (for adiClub members only)

Membership Administration information

CATEGORIES OF RECIPIENTS

adidas Data Users

Prospective buyers and investors

Business consulting service providers

Data analytics solution providers

IT cloud solution providers

IX. CUSTOMER SERVICE

PROCESSING

We collect your Personal Data to tell you when the product you like is available upon your request and respond to your questions and concerns through various communications channels we make available to you.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information

Location Information

Size Information

Payment Information

Correspondence

Image and Recording

adiClub information (for adiClub members only)

Membership Administration Information

CATEGORIES OF RECIPIENTS

Customer service provider

adidas Data Users

Selling partners (where applicable)

Delivery service providers

Payment risk solution providers

Payment processing providers

IT cloud solution providers

X. PERSONALISED MARKETING MESSAGES VIA EMAIL (Newsletter Sign-Up)

PROCESSING

We send you marketing messages that we think you would be interested (“personalised”) to the email address you provide to us because you signed up to our email newsletters.

To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various Categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information (if available to adidas)

Location Information

Size Information (if available to adidas)

Payment Information (if available to adidas)

Behavioural and Profile Information (if available to adidas)

Browsing Information

Community Information (if available to adidas)

Social Media Information (if available to adidas)

Fitness Activity and Health Information (if available to adidas): if we collect and process your activity information, we will explicitly ask for your consent.

Mobile Device information

Preference Information (if available to adidas)

CATEGORIES OF RECIPIENTS

adidas Data Users

Email marketing support providers

IT cloud solution providers

XI. PERSONALISED MARKETING MESSAGES VIA EMAIL (via existing contract)

PROCESSING

We send you marketing messages that we think you would be interested in (“personalised”) to the email address you provide to us during a purchasing contract. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various Categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information (if available to adidas)

Location Information

Size Information (if available to adidas)

Payment Information (if available to adidas)

Behavioural and Profile Information (if available to adidas)

Community Information (if available to adidas)

Browsing Information

Social Media Information (if available to adidas)

Fitness Activity Information (if available to adidas): if we collect and process your activity information, we will explicitly ask for your consent.

Mobile Device Information

Preference Information (if available to adidas)

adiClub information (for adiClub members only)

Membership Administration Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Email marketing support / service providers

IT cloud solution providers

XII. TARGETED MESSAGES ON 3RD-PARTY ADVERTISING PLATFORMS

PROCESSING

We use third-party advertising platforms, such as Facebook, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns. We use third-party solutions such as Google Audience and Facebook Custom Audience to help us do a better job at targeting our campaigns and messages for our consumers (“Advertising Partners”). Your Personal Data is shared with the platforms of our Advertising Partners, and they will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from adidas. We also need to analyse necessary information to understand the impact of our campaigns. If you don’t accept that we track you for this purpose, you will still see adidas advertisements on other platforms at random.

You can learn more about how our Advertising Partners help us achieve this purpose by visiting their sites:

Google Personalised Advertising:

https://support.google.com/adspolicy/answer/143465?hl=en

Google Advertising Policies: https://support.google.com/adspolicy/answer/6020956

Facebook Lookalike Audiences:

https://www.facebook.com/business/help/164749007013531

Facebook Custom Audience Terms:

https://www.facebook.com/legal/terms/customaudience

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information (if available to adidas)

Location Information

Size Information (if available to adidas)

Payment Information (if available to adidas)

Behavioural and Profile Information (if available to adidas)

Community Information (if available to adidas)

Browsing information

Social Media Information (if available to adidas)

Fitness Activity Information and Health Information (if available to adidas): if we collect and process your activity and health information, we will explicitly ask for your consent.

Mobile Device information

Preference Information (if available to adidas)

adiClub information (for adiClub members only)

Membership Administration Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Advertising Partners

Social media platforms

Targeted marketing service providers

IT cloud solution providers

XIII. ADICLUB MEMBERSHIP ADMINISTRATION – WHERE APPLICABLE

PROCESSING

This section applies when you create and register a membership account and become an adiClub member.

Please note that some of the adidas retail stores participating in the adiClub Membership Program are not managed and operated by us (“Non-adidas Managed Stores”) (as set out in Annex A, but which may be updated from time to time). In order for you to register, accumulate points, redeem rewards or otherwise use or benefit from the Club in our Non-adidas Managed Stores, we need to disclose your personal data to those Stores and in return, such Stores will need to disclose information on your purchases in their Stores to us. Please note that Non-adidas Managed Stores might collect, use or process your Personal Data for their own purposes, so please ask for and carefully read through their privacy policy. Non-adidas Managed Stores’ privacy policies do not constitute a part of our Privacy Policy, and they will be solely responsible for their own privacy policies and data use.

adidas collects and uses your adiClub membership Personal Data for the purposes of:

1. Compliance with membership Terms and Conditions; and

2. Profiling for personalised content, experience, business & marketing analytics and targeted marketing messages

Compliance with Membership Terms and Conditions

When you register and created a membership account, we collect your Personal Data to administer your account and comply with the adiClub Terms and Conditions.

This includes the following:

collecting, storing, and processing the Personal Data you provided in the registration form to create a membership profile and account for you;

assigning a membership ID to your profile and account and using the membership ID along with other identity information you provided to identify you;

storing your membership account log-in details in our global authentication platform to allow you to log in to all eligible adidas platforms (adidas website, adidas app, CONFIRMED app, and adidas Running app) with one set of log-in details;

displaying your current membership status, including your profile information, level, points, and other relevant information in all adidas Platforms worldwide;

sending you membership administration messages via email including messages about your account status (level up and/or down), management (rewards unlocked for you and how to retrieve them) and maintenance requests (for example, password reset);

sending you membership administration messages via push notification in adidas apps about your account status (level up and/or down), and management (rewards unlocked for you) and maintenance requests (for example, password reset) - you can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your membership;

verifying and using your profile and account information for the purpose of participating in member-exclusive challenges and/or promotions - this will also include sharing your contact details with partners who support us with administering the promotions especially in the case where you have won a prize;

calculating your adiClub points to provide you with rewards - this will include sharing your Personal Data with partners who support us with administering the reward, where the reward may be provided via a partner or exclusively by the partner;

updating your point status once you have used points to redeem awards;

keeping track of your redemption activity and history;

providing you with access to special offers and promotions;

sending you invitations to exclusive events;

allowing you access to limited edition products;

providing you with access to adidas Running features as part of membership offering in accordance with membership Terms and Conditions;

storing your shipping address and payment details to shorten check-out time online and in the app;

storing your complete order history so that you can access it at any time;

allowing you to track your order delivery from your account;

accessing your membership profile and providing you with services and support – including updating your account information following your instructions, providing you with support and answering your queries about your account, your purchases, technical support for using our apps, supporting you with your privacy queries - when you contact adidas through various communication channels using your membership ID and profile; and

storing all Personal Data we collect from you directly or indirectly that have been identified via your membership ID or email with your membership profile, including details you may have shared at a participating adidas retail store and/or outlet store or online or on our apps, for the purposes of calculating points and levels to enable all the points listed above.

sharing adiClub Membership Administration Information (as defined in section 4 above) with Non-adidas Managed Stores, adidas Data Users and/or any other parties with whom we collaborate in relation to adiClub (“adiClub Partners”) and receiving data from adiClub Partners for the purposes of the adiClub membership program, including but not limited to earning and redemption of points and rewards, and all other purposes as specified in the adiClubterms and conditions. If you wish to stop sharing data with the adiClub Partner or with adidas, you can withdraw your consent at any time, however, please note, after you withdraw the consent, you will be unable to earn points or rewards in any participating store.

providing you with access to adidas Running basic features (subject to change) as part of membership offering;

Also, for the purposes of:

PROVIDING YOU ACCESS TO ADIDAS RUNNING FEATURES

The adidas entities below are responsible for your Personal Data:

adidas AG

adidas (Malaysia) Sdn Bhd

Profiling for personalised content, experience, business & marketing analytics and targeted marketing messages

We use your Personal Data to create personalised content for you and to make sure we interact with you in a manner that you are more likely to keep and maintain your adiClub membership, respond to our targeted marketing messages, and to continue to purchase adidas products and use adidas Platforms.

This includes the following:

sending you personalised email messages about how to gain adiClub points or retain your level including promotional messages about adidas products, services and lifestyle recommendations - you can unsubscribe from this message at any time by using the “Unsubscribe” function in the message;

sending you push notifications via adidas apps about how to gain adiClub points or retain your level including promotional messages about adidas products, services, and fitness and lifestyle recommendations - you can switch off push notifications at any time using “Settings” in your mobile devices. However, you may still receive email messages from which you can unsubscribe directly in the email;

tracking and monitoring your online browsing behaviour by using certain tracking technologies (e.g. Cookies, pixels, tags) on the adidas Platforms;

storing all Personal Data we collect from you directly or indirectly that have been identified via your membership ID or email with your membership profile, including details you may have shared at a participating adidas retail store and/or outlet store for the purposes of using them to enrich your membership profile as detailed below; and

analysing and assessing all Personal Data we collect from you directly or indirectly that have been identified via your membership ID or email with your membership profile, including details you may have shared at a participating adidas retail store and outlet store. More specifically, this includes using your Personal Data in the following ways:

§ PROFILING (AUDIENCE MANAGEMENT)

We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to establish a personalised interaction with you that is based on our past interaction, and other information we can use to infer your likes and dislikes. We use audience management technologies to ensure the right messages and information reach you at the right moment through the right channel. This includes sending you marketing messages of deals and products or addressing you across digital media through ads on adidas Platforms.

§ MARKETING ANALYTICS

We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; and f) whether overall user experience worked for you or not. We use this analysis to improve the relevance of our marketing communication to you and the quality of our personalisation experience across our channels and platforms.

§ DATA ENRICHMENT

We create a single, unified consumer profile of you by matching all Personal Data from which you can be identified. This includes Personal Data we collected directly or indirectly from you across digital media or offline, the feedback you provide to us, your interaction and communication with us through our various platforms and communication channels.

§ IMPROVING DATA MODELS

We use data science and your profile and Personal Data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.

CATEGORIES OF PERSONAL DATA

adiClub information

Membership Administration Information

Size Information (if available to adidas)

Payment Information (if available to adidas)

Behavioural and Profile Information (if available to adidas)

Community Information (if available to adidas)

Browsing Information

Social Media Information (if available to adidas)

Fitness Activity Information (if available to adidas)

Mobile Device Information (if available to adidas)

Preference Information (if available to adidas)

CATEGORIES OF RECIPIENTS

adidas Data Users

Prospective buyers and investors

Business consulting service providers

Data analytics solution providers

adiClub Partners

XIV. PRIVATE EVENT REGISTRATION

PROCESSING

When you sign up for an event we organise that have limited spots, we use the Personal Data you provide to reserve a spot for you. Your Personal Data will be used according to the terms and conditions associated with the event.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information

Location Information

Fitness Activity Information and Health Information: any information we may collect from you on the day of the event. We will explicitly ask for your consent, before collecting and processing your activity and health information.

adiClub information (for adiClub members only)

Membership Administration Information

Image and Recording

CATEGORIES OF RECIPIENTS

adidas Data Users

Event partners (where applicable)

IT cloud solution providers (where applicable)

XV. OPEN EVENT REGISTRATION

PROCESSING

We often also organize events that are open to everyone. We use the Personal Data you provide to keep you inform of the events you are interested in.

CATEGORIES OF PERSONAL DATA

Identity Information

Contact Information

Location Information

Fitness Activity Information and Health Information: any information we may collect from you on the day of the event. We will explicitly ask for your consent, before collecting and processing your activity and health information.

adiClub information (for adiClub members only)

Membership Administration Information

Image and Recording

CATEGORIES OF RECIPIENTS

adidas Data Users

Event partners (where applicable)

IT cloud solution providers (where applicable)

XVI. PRODUCT RESEARCH AND DEVELOPMENT

PROCESSING

We conduct analysis to research and improve our products and services. This includes asking you questions in surveys, asking you for feedback, asking you to test our products and provide us with a review, asking other service providers to conduct market and product research for us, try new technologies in our product that might collect Personal Data to stay ahead of the competition. We process this information based on your consent, so by participating in any product review or survey, you consent to us processing your Personal Data for this purpose. Where you wish to object to us processing your Personal Data for this purpose, we will anonymise your information, so it is no longer Personal Data.

CATEGORIES OF PERSONAL DATA

Identity Information (only if required by the project)

Contact Information (only if required by the project)

Location Information (only if required by the project)

Size Information

Payment Information (only if required by the project)

Behavioural and Profile Information (only if required by the project)

Community Information: this is the response you provided whichever format agreed at the time of the project.

Browsing Information

Social Media Information (only if required by the project)

Fitness Activity Information (only if required by the project): if we collect and process your activity information, we will explicitly ask for your consent.

Mobile Device Information (only if required by the project)

Correspondence (only if required by the project)

Image and Recording

Preference Information

adiClub information (for adiClub members only)

Membership Administration Information

Health Information: if a project requires you to also provide health information, we will explicitly ask for your consent.

Personal Opinion and Sensitive Personal Data

CATEGORIES OF RECIPIENTS

adidas Data Users

Prospective buyers and investors

Business consulting service providers

Data analytics solution providers

Manufacturing providers

IT cloud solution providers

XVII. LEGAL OBLIGATION - COOPERATION WITH LAW ENFORCEMENT AND REGULATORY AUTHORITIES (INCLUDING COURTS)

PROCESSING

When we are legally required to provide your Personal Data for national and public security reasons, crime prevention, investigation and prosecution, anti-money laundering, judicial proceedings, protection of other individuals’ rights and freedoms, and enforcement of civil claims, we will provide information as requested by the authorities or parties once we are satisfied that the request is mandated by law. We may not be able to notify you if it is against the law to do so.

CATEGORIES OF PERSONAL DATA

All Categories of Personal Data as requested by the enforcement authority.

CATEGORIES OF RECIPIENTS

adidas Data Users

Local and national government authorities, including tax authorities

Local and national law enforcement agencies

Local and national judiciary

XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES (“COOKIES NOTICE”)

When you visit the adidas site, we store data collectors such as cookies, tags, pixels, tag containers, beacons, among others, in your browser to obtain certain information about your current browsing session. These technologies are often referred to as “Cookies” collectively by other websites. Cookies also enable our website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. We use Cookies for different purposes, which also mean they have different legal bases. Please review the information below to understand how we use different types of Cookies to fulfil different purposes.

PROCESSING

“REQUIRED” – site functionality and business operation.

We use “Required Cookies” to operate our site. This includes storing a unique identifier to manage and identify you as a unique visitor to our site, to provide a consistent and accurate service to you. This includes making sure that we remember the products you have placed in your cart, or your language preferences. These Cookies are stored for the duration of your browsing session. Without these Cookies, you will not be able to view our site properly.

PROCESSING

“FUNCTIONAL” – website improvement and performance

We use “Functional Cookies” to continuously improve our website performance. This includes using the data we collected from you to do the following:

§ Web analytics —Based on your browsing behaviour, we will analyse the data to improve the functionality and design of our site.

§ Ad response rates— Based on how you come to our site, we will measure our ad response rates by analysing our ad click-through rates to improve the effectiveness of advertising purchased on a site external to ours.

§ Affiliate tracking— We need to let our affiliate marketing partners, or service providers have certain information if you came to our site, and purchased products, through a visit to theirs. This is required as we may need to provide them a fee for such services. For this purpose, we will share information about your visit, including the products you have purchased.

§ Error management— We measure errors presented on a website, to make sure we fix bugs or any issues promptly.

§ Testing designs— We need to use A/B testing or multivariate testing, to ensure a consistent look and feel is maintained for the user of the site in the current and subsequent sessions.

PROCESSING

“MARKETING”

We use “Marketing Cookies” provided by our advertising partners to make sure our advertising messages are shown to you at the right time and the right place. These Cookies are persistent but time-limited cookies. These Cookies contain a unique key to distinguish individual users’ browsing habits. We also use these Cookies to limit the number of times a user sees a particular ad on a website and to measure the effectiveness of a particular campaign. The identifier stored by these Cookies are provided by our partners. We cannot use the same identifier in our own systems. We also use these Cookies to serve ads that are relevant to your immediate geo-location, for example to provide you with the nearest store where the product you are browsing may be available.

CATEGORIES OF PERSONAL DATA

Mobile Device Information

Location Information

Behavioural and Profile Information: this is collected through observing your browsing behaviour

Preference Information (if available to adidas)

Browsing Information

CATEGORIES OF RECIPIENTS

adidas Data Users

Site administration support providers

Business consulting service providers

Data analytics solution providers

Advertising agency partners

Social media platforms

Targeted marketing service providers

You can change your browser settings to delete or prevent certain Cookies from being stored on your computer or mobile device without your explicit consent. The ‘help’ section in your browser should provide information on how to manage your cookie settings.

Find out how this works for your browser here:

Internet Explorer:

https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: http://support.mozilla.com/en-US/kb/Cookies

Google Chrome:

http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647

Safari: http://support.apple.com/kb/PH5042

Opera: http://www.opera.com/browser/tutorials/security/privacy/

Adobe (flash cookies): http://www.adobe.com/privacy/policies/flash-player.html

Google Chrome App:

https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DAndroid&hl=en

These websites will also help you understand more about how Cookie-based advertising works and how you can manage your Cookie Settings:

http://www.aboutads.info/choices

http://www.youronlinechoices.eu/

Network Advertising Initiative opt-out page: http://optout.networkadvertising.org/?c=1

You can learn more about the laws governing the use of “Cookies” here: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm

XIX. USER-GENERATED CONTENT (UGC) ACQUISITION FROM SOCIAL MEDIA

PROCESSING

We invite you to provide your images to us via social media platforms by following specific instructions such as “#yesadidas”. We will be using the images you provide for our campaign communications. We will obtain rights to your image through a licence agreement in the form of our terms and conditions. By submitting your images via social media platforms to us, you will agree for us to use your images as described in the licence agreement.

CATEGORIES OF PERSONAL DATA

Identity Information: your social media handler

Community Information: images, videos, comments, sound recordings and other files provided through the social media platform promoting adidas

Social Media Information

Image and Recording

Personal Opinion and Sensitive Personal Data

CATEGORIES OF RECIPIENTS

adidas Data Users

Event partners (where applicable)

User-generated content (“UGC”) support partners

Advertising agency partners

Social media platforms

IT cloud solution providers (where applicable)

XX. PUSH NOTIFICATIONS (IN-APP COMMUNICATION)

PROCESSING

When you use the adidas app, we use push notifications in this app to communicate with you concerning the purposes stated in this Policy. This includes information that relates to purposes based on the performance of contract (such as your purchase). You can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your purchase.

CATEGORIES OF PERSONAL DATA

Mobile Device Information

CATEGORIES OF RECIPIENTS

adidas Data Users

XXI. OPERATION OF ADIDAS RUNNING FEATURES

PROCESSING

We process your personal data to be able to provide you with a seamless user experience when using adidas Running. This includes any data processing that is necessary for the use of the specific features you want to use, e.g. the comparison of activity data with those of other users, if you participate in a leaderboard ranking or a challenge.

CATEGORIES OF PERSONAL DATA

Membership Administration Information

Identity Information

Contact Information

Browsing Information

Mobile Device Information

Correspondence

Image and Recording (if available to adidas)

Personal Opinion (if available to adidas)

Measurements (if available to adidas)

Payment, Purchase and Transaction Information (if available to adidas)

Social Media Interaction and Activity (if available to adidas)

Fitness Activity Information (if available to adidas)

Behavioural and Preference Information (if available to adidas)

CATEGORIES OF RECIPIENTS

adidas AG Subsidiaries and Affiliates

Data Analytics Solution Providers

IT Cloud Solution Providers

CRM Solution Providers

YOUR RIGHT

HOW TO EXERCISE YOUR RIGHT

Get a copy of your Personal Data

You have the right to obtain a copy of your Personal Data, if it does not have negative effect on other people.

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: A Copy of My Personal Data.

Access to information about your Personal Data

You have the right to know whether or not we use your Personal Data, as well as the following information: a) why we have your Personal Data; b) what categories of data we have; c) what we do with your Personal Data; d) who has access to your Personal Data (and where they are); e) where your Personal Data might be transferred to; f) how long we are keeping your Personal Data; g) if you didn’t provide your Personal Data directly to us, how did we get them; h) your rights under applicable laws and the possibility to restrict processing; and i) if we use your Personal Data for any automated decision-making; and j) in some cases, you have the right to know how our automated decision-making works, if the decision significantly affects you.

Please review the adidas Privacy Policy.

If you have any questions about the Privacy Policy, please contact the adidas Privacy Team.

For adidas Running app users:

Step 1

Log in to Running app.com.

Step 2

Click "Home”.

Step 3

Click “Account & Data” on the left-hand side of the screen.

Step 4

Select one of the following options: 1) “EXPORT DATA”; or 2) “REQUEST DELETION” on the right-hand side of the screen.

Step 5

Check your email and follow instructions we provided in the email. Please note that your request will not be processed if you did not verify your email address, and the request will be deleted after 30 days. If you haven’t verified your email yet, you can request a new confirmation link by clicking "Send a new confirmation email" on Running app.com.

Step 6

Check your email again within 30 days and click on the link to retrieve your file you requested OR get confirmation for your data deletion.

Step 7

Repeat Steps 1- 6 if you wish to execute another request.

Make sure your Personal Data is correct

You have the right to make sure we are using the accurate details about you.

Log in to your account and make the corrections yourself; or

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Delete your Personal Data

You have the right to ask us to delete your Personal Data if: a) we no longer need it for a specific purpose, for example, a contract or a legal requirement; or b) you withdraw the consent you provided if we asked for your consent when we collected your Personal Data.

Log in to your account and make the corrections yourself; or

Contact Customer Service for support.

Reason: Privacy and Data Handling.

For adidas Running app users, please see the Steps 1 through 7 under “Access to information about your Personal Data” in the second row of this table. For Step 4, choose “REQUEST DELETION”.

Restrict how we use your Personal Data

You have the right to stop us from processing your Personal Data if the processing of that Personal Data is causing or likely to cause substantial damage or substantial distress to you and the damage or distress is or would be unwarranted.

Log in to your account and make the corrections yourself; or Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: Privacy – Restrict Processing

Withdraw your consent

When we use your Personal Data based on your consent, you have the right to change your mind and withdraw your consent at any time.

Unsubscribe from our Newsletters:

Click ‘Unsubscribe’ at the bottom of the newsletter or marketing email that you want to unsubscribe from; or update your communication preferences in your account if you have one.

If there are any technical issues:

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: Unsubscribe Me from Emails

Withdrawing other consent:

Contact us for support.

Subject: Privacy – Withdraw My Consent

To unsubscribe from adidas Running - related newsletters:

1. Log into your adidas Running app account.

2. Click “Notifications”.

3. Deselect “App News”, “Offers & Discounts, or “General News & Special Offers”.

File a complaint with your local data protection supervisory authority

If you are not happy with how we have handled your Personal Data, or how we have responded to your rights provided here, you have the right to make a complaint against us with your local data protection supervisory authority.

Contact a data protection supervisory authority

adidas Customer Service

ASK CUSTOMER SERVICE: www.adidas.com.my/en/help/sea-contact/contact-us

adidas Privacy Team and the Data Protection Officer

my.pdpo@adidas.com

adidas (Malaysia) Sdn. Bhd. 199401034635 (320318-A)

19-1, Nucleus Tower

No. 10, Jalan P JU 7 /6

Mutiara Damansara

47800 Petaling Jaya

Malaysia

City

Store Name

Store address

Kuala Lumpur

adidas Performance Store Publika

Lot 14 & 15, Level G2, Publika Shopping Gallery, Solaris Dutamas, Jalan Dutamas 1, 50480 Kuala Lumpur

Kuala Lumpur

adidas Performance Store Sunway Velocity

Unit No. 1-43, 1-45 & 1-46, First Floor, Sunway Velocity Mall, Lingkaran SV, Sunway Velocity KL, 55100 Kuala Lumpur, Wilayah Persekutuan, Malaysia.

Klang

adidas Performance Store AEON Bukit Tinggi

Lot G67, AEON Mall Bukit Tinggi, No. 1, Jalan Persiaran Batu Nilam 1/KS 6, Bandar Bukit Tinggi, 41200, Klang, Selangor

Seremban

adidas Performance Store AEON Seremban 2

Lot G05, Ground Floor, AEON Mall Seremban 2,Persiaran S2 B1, 70300 Seremban, Negeri Sembilan

Johor Bahru

adidas Peformance Store AEON Tebrau City

Lot F107, First Floor, AEON Mall Tebrau City, No. 1, Jalan Desa Tebrau, Taman Desa Tebrau, 81100 Johor Bahru, Johor

Shah Alam

adidas Performance Store Central i-City

Lot L2-11, Central I City, Persiaran Multimedia, Seksyen 7, I City, 40000, Shah Alam, Selangor

Kuantan

adidas Performance Store East Coast Mall

Lot GF-11, Ground Floor, East Coast Mall, Jalan Putra Square 6, Putra Square, 25200 Kuantan, Pahang.

Georgetown

adidas Performance Store Gurney Plaza

Lot 170-01-75, 1st Floor, Plaza Gurney, Persiaran Gurney, 10250 Pulau Pinang

Kuala Lumpur

adidas Performance Store MyTOWN

Lot G-043 & 043A, Ground Floor, MyTOWN Shopping Centre,Taman Maluri, Cheras, 55100 Kuala Lumpur.

Johor Bahru

adidas Performance Store Paradigm Mall JB

Lot 4F-69 & 4F-70, Paradigm Mall Johor Bahru, Jalan Skudai, 81200 Johor Bahru, Johor.

Seberang Jaya

adidas Performance Store Sunway Carnival

1F-06 & 07, First Floor, Sunway Carnival Mall,Jalan Todak, Pusat Bandar Seberang Jaya, 14400 Pulau Pinang

Johor Bahru

adidas Performance Store South Key

T-058, 3rd Floor, The Mall Mid Valley South Key, Persiaran South Key, 80150 Johor Bahru, Johor

Georgetown

adidas Orginals Store Gurney Plaza

170-G-66, Ground Floor, Plaza Gurney, Persiaran Gurney, 10250 Pulau Pinang.

Johor Bahru

adidas Originals Store South Key

G-024-01, Ground Floor, The Mall Mid Valley South Key, 1, Persiaran South Key, 80150 Johor Bahru, Johor

Kuala Lumpur

adidas Kids Store Suria KLCC

Level 2, 226B, Suria KLCC, Kuala Lumpur City Centre, 50088, Kuala Lumpur

Johor Bahru

adidas Originals Store Paradigm Mall JB

GF 73, Ground Floor, Paradigm Mall Johor Bahru, Jalan Skudai, 81200, Johor Bahru

Melaka

adidas Performance Store Dataran Pahlawan

LG BD-073, Dataran Pahlawan, Jalan Merdeka, Bandar Hilir, 75000 Melaka

Genting Highlands

adidas Performance Store Genting Sky Avenue

Lot T2B-16 & 17 Level T2B, Genting Sky Avenue, Genting Highlands Resort, 69000, Pahang

Genting Highlands

adidas Originals Store Genting Sky Avenue

Lot T2B-56, Level T2B, Genting Sky Avenue, Genting Highlands Resort, 69000, Pahang

Putrajaya

adidas Performance Store IOI City Mall

G40 & G41, Ground Floor, IOI City Mall, Lebuh IRC, IOI Resort City, 62502 Putrajaya

Bayan Lepas

adidas Performance Store Queensbay Mall

F-57, 58, 59 & 60, Queensbay Mall, Persiaran Bayan Indah, Bayan Lepas, 11900, Pulau Pinang

Kuala Lumpur

adidas Performance Store Pavilion Bukit Jalil

Lot 4.17.00, Level 4, Pavilion Bukit Jalil, Pusat Bandar, 2, Persiaran Jalil Utama, Bukit Jalil, 47000, Kuala Lumpur

Genting Highlands

adidas Kids Store Genting Sky Avenue

Lot T-2B-15, Level T2B, Sky Avenue, Genting Highlands Resort, 69000, Pahang

Shah Alam

adidas Performance Store Setia City Mall

L1-28 & 29, Setia City Mall, No. 7, Persiaran Setia Dagang, Setia Alam, 40170 Shah Alam, Selangor

Ipoh

adidas Performance Store Ipoh Parade

G06, Ground Floor, Ipoh Parade, Jalan Sultan Abdul Jalil, Greentown, 30450 Ipoh, Perak

Kuala Lumpur

adidas Performance Store Pavilion Damansara Heights

Lot 4.37.00 Level 4, Pavilion Damansara Heights, Jalan Beringin, Bukit Damansara, 50490, Kuala Lumpur

Puchong

adidas Performance Store IOI Puchong

G18G, Ground Floor, IOI Puchong, Batu 9, Jalan Puchong, Bandar Puchong Jaya, 47100 Selangor