PRIVACY NOTICE

    1. What does this Privacy Notice tell you?
    2. Who is responsible for your Personal Data?
    3. How do you exercise your rights for your Personal Data?
    4. What Personal Data do we collect and use (“Categories of Personal Data”)?
    5. How and why do we use your Personal Data? (Purpose, Processing, Legal Basis)?
    6. Recipients of your Personal Data
    7. What does adidas do when we transfer your Personal Data outside of the EU/EEA?
    8. How do we secure your Personal Data?
    9. General Questions, Support
    10. Data Protection Officer

    PRIVACY NOTICE

    UPDATED: 10 March 2022

    1. What does this Privacy Notice tell you?
        This Privacy Notice (“ Notice ”) provides information on how adidas (“ adidas ”, “ we “, „ us ”) collects and uses your “Personal Data” (information provided by you or others that we can connect to you). We encourage you to review this Notice and other privacy notices published by us frequently as they may be updated to reflect latest developments without prior notification.

    2. Who is responsible for your Personal Data?
        For the purposes described in this Notice and compliance with local privacy laws and the GDPR, the following adidas entities are responsible:
        • adidas AG – Adi-Dassler-Str. 1, 91074 Herzogenaurach, Germany („ adidas AG “)
        • adidas (UK) Limited – Pepper Road, Hazel Grove, The adidas Centre, Stockport, Cheshire, SK7 5SA, England („ adidas UK “)
        Also, for the purposes of:
        • PROVIDING YOU ACCESS TO ADIDAS RUNNING AND TRAINING PREMIUM FEATURES VIA A SUBSCRIPTION PURCHASED FROM RUNTASTIC GMBH
        the adidas entities below are responsible for your Personal Data:
        • adidas AG
        • Runtastic GmbH – Pluskaufstraße 7, 4061 Pasching, Austria (“ adidas Runtastic ”)
        For some scenarios described in this Notice, there may be other adidas and/or non-adidas entities also responsible for using your Personal Data, please refer to the specific scenario for more information.

        They are known as the adidas “Joint Controllers” under the GDPR and local privacy laws. They are jointly responsible for determining why (“ Purpose ”), how (“ Processing ”), and if (“ Lawful Basis ”) we use your Personal Data. In this Notice, we call them “ Responsible Entities ” to make it easier for you to understand.
        adidas AG handles your requests to exercise your rights with respect to your personal data (as described in this notice). You contact any of the responsible entities with your requests.

        adidas AG also handles any data security incident and lead the cooperation and communication with data protection authorities. Our lead authority is the Bavarian State Office for Data Protection Supervision located in Ansbach, Germany.


    3. How do you exercise your rights for your Personal Data?
        You have all the rights described below for all your Personal Data provided to Responsible Entities, please read and follow the instructions to exercise your rights in a timely manner. If a non-adidas company is independently responsible for your Personal Data, you will need to contact and read the privacy notice of the non-adidas company to exercise your rights with them. Your request cannot be processed if we cannot verify your identity. We may ask for additional verification questions if we have reasonable doubts about your identity to protect all our consumers’ Personal Data and rights.

        If you have any general questions or require immediate assistance and support concerning your rights or how we use your Personal Data, please contact our Customer Service team. You can find their contact information and channels by clicking on this link: https://adidas.com/help .

      1. Access your personal data

      2. Obtain a machine-readable, portable copy of your personal data which you can share with another Company

      3. Delete your account and all Personal Data connected to your email address.
      4. To access your Personal Data and information about how adidas collects and uses your Personal Data, obtain a machine-readable, portable copy of your file, or to delete your Personal Data, please use our self-service tool by following the instructions below.
        Your email address is required as we cannot otherwise identify you and execute your request.
        If you need help, please contact our Customer Service team: https://adidas.com/help .


        ADIDAS WEBSITE
        Step 1
        Scroll to the bottom of the page, and click on “Data settings”.
        Step 2
        Select one of the following options: 1) “Send me my data”; or 2) “Send me my machine readable data”; or 3) or “Delete my data & account”.
        Step 3
        Enter your Last Name and Email address that you have provided to adidas – if the Last Name and email address does not match the information we have on file, your request will be rejected. You can contact our local Customer Service team https://adidas.com/help if you need help.
        Step 4
        Check your email and follow instructions we provided in the email to verify your email address – please note that your request will not be processed if you do not verify your email address, and the request will be deleted after 30 days.
        Step 5
        Check your email again within 30 days and click on the link to retrieve your file you requested OR get confirmation for your data deletion.
        Step 6
        Repeat Steps 1- 5 if you wish to execute another request.


        ADIDAS APP & CONFIRMED APP
        Step 1
        Go to “SETTINGS”.
        Step 2
        Click on “MANAGE ACCOUNT”.
        Step 3
        Select one of the following options: 1) “Send me my data”; or 2) “Send me my machine-readable data”; or 3) or “Delete my data & account”.
        Step 4
        Enter your Last Name and Email address that you have provided to adidas – please note these fields are pre-populated.
        Step 5
        Check your email and follow instructions we provided in the email to verify your email address – please note that your request will not be processed if you do not verify your email address, and the request will be deleted after 30 days.
        Step 6
        Check your email again within 30 days and click on the link to retrieve your file you requested OR get confirmation for your data deletion.


        RUNTASTIC.COM
        Step 1
        Log in to Runtastic.com.
        Step 2
        Click "Home”.
        Step 3
        Click “Account & Data” on the left-hand side of the screen.
        Step 4
        Select one of the following options: 1) “EXPORT DATA”; or 2) “REQUEST DELETION” on the right-hand side of the screen.
        Step 5
        Check your email and follow instructions we provided in the email. Please note that your request will not be processed if you did not verify your email address, and the request will be deleted after 30 days. If you haven’t verified your email yet, you can request a new confirmation link by clicking "Send a new confirmation email" on Runtastic.com.
        Step 6
        Check your email again within 30 days and click on the link to retrieve your file you requested OR get confirmation for your data deletion.
        Step 7
        Repeat Steps 1- 6 if you wish to execute another request.

        Please note that the standard processing time via our self-service tool is one month.

        Depending on the complexity of your demand and the number of other requests we are currently processing, our processing time may be extended for two additional months for the following reasons:
        1) we cannot successfully identify you using your email and/or other identifier, and may be unable to process your request at all; and/or
        2) you do not or cannot use our self-service tool and require further assistance; and/or
        3) you request your response to be provided by means other than e-mail.

        In addition, please refer to the details provided in this privacy notice to have information about:
        a) why we have your Personal Data;
        b) what categories of data we have;
        c) what we do with your Personal Data;
        d) who has access to your Personal Data (and where they are);
        e) where your Personal Data might be transferred to;
        f) how long we are keeping your Personal Data;
        g) if you didn’t provide your Personal Data directly to us, how did we get them;
        h) your rights under applicable laws and the possibility to restrict processing;
        i) if we use your Personal Data for any automated decision-making; and
        j) in some cases, you have the right to know how our automated decision-making works, if the decision significantly affects you.

      5. Make sure your Personal Data are correct
      6. Please contact Customer Service ( https://adidas.com/help ) to make any changes to your information, and access your account at adidas to make changes directly.

      7. Unsubscribe from our email marketing messages
      8. You can unsubscribe from our email marketing messages at any time. Please use the “Unsubscribe” function at the bottom of each email marketing message.
        If you need help, or if your request to unsubscribe failed, please contact our customer service ( https://adidas.com/help ) to report the failure and request for your email address to be removed and unsubscribed from the adidas email marketing list.

      9. Restrict how we use your Personal Data

      10. Withdraw your consent

      11. Object when we process your Personal Data based on “Legitimate Interest” (including unsubscribing from our direct marketing messages)

      12. Challenge a decision generated solely by automated decision-making process without human intervention

      13. General assistance
      14. Please contact our Customer Service team ( https://adidas.com/help ) for general support. You can find their contact details under the “ASK CUSTOMER SERVICE” section via HELP.

      15. File a complaint with your local data protection supervisory authority
      16. You have the right to file a complaint with the local authority if you are not happy with how we have handled any of your rights listed above.

        We invite you to first share and discuss your concerns and complaints about how we handle your individual rights and use your Personal Data with our Privacy team and our Data Protection Officer by writing to our adidas Privacy Compliance Query and Complaint Inbox ( dataprotection@adidas.com ) so we can promptly address, and hopefully resolve your concerns and complaints.

      17. Use Third-Party Tools to Exercise Your Individual Rights
      18. We understand that there are tools, apps, solutions, and websites operated by non-adidas companies which help you exercise your individual rights. Depending on the design of these tools, we may need to contact you directly still to verify your identity before we can process your requests via 3rd-party solutions.
        We can’t process your request unless we have verified your identity and have no concern that you are the person who the personal data actually identifies. We can’t and don’t upload any files to 3rd-party portals as that is a serious data security risk to adidas systems and infrastructure, and it could consequently lead to a significant data breach incident.
        Therefore, even when you made a request using a 3rd-party tool, we may still request that you use our automated solution or contact our customer service by following the instructions above for our website or adidas apps in order to verify your identity, and ensure your request is processed in a timely and secure manner.
        If you are not clear about any of the rights listed here, please consult your local authority about your Personal Data rights under the law and to best understand what these rights mean.

    4. What Personal Data do we collect and use (“Categories of Personal Data”)?
        Most of the time, you give us your Personal Data for specific purposes. However, sometimes, this Personal Data may also be used for other purposes if we have the right and permission (“Lawful Basis”) to do so. Also, we may use your Personal Data from other companies or sources for some purposes, if it is legally allowed. Please see the Categories of Personal Data below to help you understand how we uses your Personal Data. The Categories include Personal Data you provided directly and indirectly to Responsible Entities.

        Identity Information - Any information that identifies you as an individual, living person. This may include: name [first, last, initials], Date of Birth, e-mail address including your name, phone number, unique consumer identifier number (including your Membership member ID, or ID from any adidas Platform), nickname, password, social media identifiers and handles, your device fingerprint, gift card codes that are assigned to you, gender identity and expression.

        Contact Information - Any information we can use to contact you. This may include: your phone number, shipping and billing address, e-mail address, Messenger ID, social media handle, any other communication channel you have used to contact us for more information.

        Payment, Purchase and Transaction Information - Any information we use to complete or in relation to your purchase record and invoice. This may include: your payment information (credit card details, or bank details, or payment platform details), payment risk profile (provided to us by our payment risk solution), shopping cart details (your ordered items), delivery details, shipping and billing address, customer order number, purchase history with adidas, receipt number, transaction ID, invoice ID, retail store transaction ID, purchase value, order confirmation number, order tracking number.

        Measurements - Any information we can use to make sure your gear fits. This may include: shoe size, clothes size, height, weight, chest, waist, hip, inseam, body shape, heel-toe measurement.

        Location Information - Any information we can use to know or guess where you are, real time or otherwise. This may include: your residential location, current log-in location [IP address], real-time device location information via device sensors and signals, GPS location (if you wish to share us, for example through your mobile device settings), or information that helps us guess where you may be such as the specific adidas site you have visited that might give us clues about where you are, or when you “check-in” to an event or website on a social media page indicating location and if it is shared with us.

        Membership Administration Information - Any information related to your adiClub membership. This may include: acquisition source ID (where you signed up to our membership), your membership country, Creators Club Member ID, date you became a member, store ID (if you signed up in a retail store including a franchised store), membership points, engagement history, rewards history, membership vouchers assigned to you.

        Behavioural and Preference Information - Any information which indicates your preference whether explicitly – if provided by you – or inferred. This may include: activity preference (sports), event participation information, exercise plans, in-store digital interactions, site/brand preference, language preference, product and product attributes preferences, store location preferences, your shopping history (all items in shopping carts), Wishlist items, any “preference” details you provided to us in your profile and Platform setting, any information you provide to us when you interact with our communities such as adidas Runners, participate in events or campaigns as a trainer, team member, a participant or as a promotor of our events.

        Browsing Information - Any information on. your browsing behaviour. This may include: browser name, IP address (including hashed IP address), clickstream data, data and time of site visits, time remained on site, pages visited, and the links you have clicked in our marketing messages or website, the referral URL that brought you to our site.

        Mobile Device Information - Any information related to your mobile device. This may include: device EUI, device ID, device fingerprint, IP/Wifi Information, operating system, data stored on device when access is granted, log information when access to device (such as camera) is granted.

        Profile and Community Information - Any information you provide to us in your social profile and/or when interacting with our communities and other users, including but not limited to: follower information in the Runtastic community, information provided when you participating in Runtastic or adidas events/challenges and groups/communities either as a trainer, team member, a participant or as a promoter, pictures and videos you share, information you provide in your profile biography, team memberships and roles there, interests, feedback, likes and comments, leaderboard rankings, event participation, joined groups including roles as well as challenge participations and success.

        Social Media Interaction and Activity - Any information about you we obtain through different social media channels such as Facebook, Instagram, Google, etc., when we use these channels for advertising, analytics purposes or to enrich your profile with adidas. This may include: any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”, comments or messages you shared with us publicly or privately on social media platforms. Also, we may be able to obtain information indirectly from social media companies (Facebook, Google, etc.) when we advertise on these platforms, which may include your participation and membership on particular topics and/or groups, your profile settings and preference, your behaviour on different platforms owned by the same company.

        Correspondence - Any correspondence you have with Customer Service teams, and/or our employees and personnel. This may include: written correspondence with us (email or post or messages to our platforms), and voice recording made by Customer Service when we have the right to do so.

        Image and Recording - Any image, voice or video recordings we have captured or obtained where you may be identified. This may include: CCTV footages, photos taken in our retail stores and/or at events, video recordings made during events or specific interactions, voice recording made during events or interactions (excluding correspondence with Customer Service), any images you share with us through social media.

        Fitness Activity Information - Any information connected to your fitness activity which you track using our Platforms (including adidas Running and Training). This may include: activity type, distance, exercise duration, exercise routine (start and finish time), fitness score, pace, space utilisation data, speed.

        Health Information - Any information that relates to your health or vitals such as your body mass index (BMI), heartbeat per minute, or information of any disability. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes.

        Personal Opinion - Any opinion you share with us that indicate your point of view and comments. This may include when you provide us feedback and review rating our service or products, or if you participate in any product research and development discussions.

    5. How and why do we use your Personal Data? (Purpose, Processing, Legal Basis)?
        In this section, we provide details to all the scenarios and reasons (“Purposes”) where we may collect (directly and indirectly) and use your Personal Data from all our Platforms.

        PURPOSES - Why do we collect and use your Personal Data?

        PROCESSING - What do we do with your Personal Data?

        LEGAL BASIS - Why the purpose is allowed and necessary?

        CATEGORIES OF PERSONAL DATA - What kind of Personal Data do we need to collect and use for the specific purpose?
        Specifically, these are the Categories of Personal you may or may not have given to us for this specific purpose, but we either have it on file, or have obtained it from a different source for a different purpose, and we know it is connected to you.

        RETENTION PERIOD - How long do we keep your Personal Data for the specific purpose?

        CATEGORIES OF RECIPIENTS - With whom (types of service providers or companies) do we share your Personal Data to achieve the purpose?


      1. Administer adidas Membership Programmes and Organise Events and Activities


      2. 5.1a adiClub Membership Administration
        This section applies when you create and register a membership account and become an adiClub member.
        adidas collects and uses your adiClub membership Personal Data for the purposes of:
        • Compliance with Membership Terms and Conditions; and
        • Profiling for Personalised Content, Experience, Business & Marketing Analytics and Targeted Marketing Messages
        1. Compliance with Membership Terms and Conditions
        PROCESSING
        When you apply and create a membership account, we collect and use your Personal Data to administer your account and comply with the adiClub Terms and Conditions.
        This includes the following:
        • collecting, storing, and processing the Personal Data you provided in the registration form to create a membership profile and account for you;
        • assigning a membership ID to your profile and account and using the membership ID along with other Identity Information you provided to identify you;
        • enabling your membership account details to be used as your adidas “Global Credential” for accessing all adidas brand domains and apps;
        • displaying your current membership status, including your profile information, level, points, and other relevant information in all adidas domains and apps;
        • sending you membership administration messages via email including messages about your account status (level up and/or down), management (rewards unlocked for you and how to retrieve them) and maintenance requests (for example, password reset);
        • sending you membership administration messages via push notification in adidas apps about your account status (level up and/or down), and management (rewards unlocked for you) and maintenance requests (for example, password reset) - you can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your membership;
        • verifying and using your profile and account information for the purpose of participating in member-exclusive challenges and/or raffles - this will also include sharing your contact details with partners who support us with administering the raffles especially in the case where you have won a prize;
        • calculating your club points to provide you rewards - this will include sharing your data with partners who support us with administering the reward, where the reward may be provided via a partner or exclusively by the partner;
        • updating your point status once you have used points to redeem awards;
        • keeping track of your redemption activity and history;
        • providing you access to special offers and promotions;
        • sending you invitations to exclusive events;
        • allowing you access to limited edition products;
        • providing you adidas running and training Basic Features (subject to change) as part of membership offering;
        • providing you access to adidas running and training Premium Features offered as a reward of membership in accordance with membership Terms and Conditions;
        • providing you access to adidas running and training Premium Features via a subscription purchased from runtastic GmbH;
        • storing your shipping address and payment details to shorten check-out time online and in the app;
        • storing your complete order history so you can access it at any time;
        • allowing you to track your order delivery from your account;
        • accessing your membership profile and providing you services and support – including updating your account information following your instructions, providing you with support and answer your queries about your account, your purchases, technical support for using our apps, supporting you with your privacy queries - when you contact adidas through various communication channels using your membership ID and profile;
        • storing all Personal Data we collect from you directly or indirectly that has been identified via your membership ID or email with your membership profile, including details you may have shared at a adidas brand retail store and outlet and participating adidas franchised stores to enable for the purposes of calculating points and levels to enable all the points listed above; and
        • sharing Membership Administration Information with adiClub Partnerss and receiving data from adiClub Partnerss for the purpose of Earning Points and Rewards as specified in the Terms and Conditions – this is strictly based on your explicit consent at the time where the data is collected by adiClub Partnerss; if you wish to stop sharing data with the adiClub Partners or with adidas, you can withdraw your consent at any time.
        LEGAL BASIS
        • Performance of Contract
        • Consent
        CATEGORIES OF PERSONAL DATA
        • Membership Administration InformationIdentity Information
        • Identity Information
        • Contact Information
        • Browsing Information
        • Profile and Community Information
        • Mobile Device Information
        • Correspondence
        • Image and Recording (if available to adidas)
        • Personal Opinionen (if available to adidas)
        • Measurements (if available to adidas)
        • Payment, Purchase and Transaction Information (if available to adidas)
        • Social Media Interaction and Activity (if available to adidas)
        • Fitness Activity Information (if available to adidas)
        • Behavioural and Preference Information (if available to adidas)
        RETENTION PERIOD
        • Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Prospective Buyers and Investors
        • Business Consulting Service Providers
        • Data Analytics Solution Providers
        • adiClub Partners

        2. Profiling for Personalised Content, Experience, Business & MARKETING ANALYTICS and Targeted Marketing Messages
        PROCESSING
        We use your Personal Data to create personalised content for you and make sure we interact with you in a manner that you are more likely to keep and maintain your membership, respond to our targeted marketing messages, and to continue purchase adidas products and use adidas platforms.
        This includes the following:
        • sending you personalised email messages about how to gain club points or retain your level including promotional messages about adidas products, services and lifestyle recommendations - you can unsubscribe from this message at any time by using the “Unsubscribe” function in the message;
        • sending you push notification via adidas apps about how to gain club points or retain your level including promotional messages about adidas products, services and lifestyle recommendations - you can switch off push notifications at any time using “Settings” in your mobile devices. However, you may still receive email messages which you can unsubscribe directly in the email messages;
        • tracking and monitoring your online browsing behaviour (if you have logged in and accepted our use of certain tracking technologies on the website and in our apps including using Cookies, Pixels, Tags); and
        • storing all Personal Data we collect from you directly or indirectly that has been identified via your membership ID or email with your membership profile, including details you may have shared at a adidas brand retail store and outlet and participating adidas franchised stores to enable for the purposes of calculating points and levels, and using them to enrich your membership profile as detailed below; and
        • analysing and assessing all Personal Data we collect from you directly or indirectly that has been identified via your membership ID or email with your membership profile, including details you may have shared at a adidas brand retail store and outlet and participating adidas franchised stores. More specifically, this includes using your Personal Data in the following ways:
        • PROFILING (AUDIENCE MANAGEMENT)
          • We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to establish a personalised interaction with you that is based on our past interaction, and other information we can use to infer your likes and dislikes. We use audience management technologies to ensure the right messages and information reach you at the right moment through the right channel. This includes sending you marketing messages of deals and products or addressing you across digital media through ads on adidas brand platforms. The level of personalisation depends on the permission you have provided to us.
        • MARKETING ANALYTICS
          • We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; f) and whether overall user experience worked for you or not. We use this analysis to improve the relevance of our marketing communication to you and the quality of our personalisation experience across our channels and platforms.
        • DATA ENRICHMENT
          • We create a single, unified consumer profile of you by matching all personal data which you can be identified. This includes personal data we collected directly or indirectly from you across digital media or offline, the feedback you provide to us, your interaction and communication with us through our various platforms and communication channels.
        • IMPROVE DATA MODELS
          • We use data science and your profile and personal data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.

        LEGAL BASIS
        • Legitimate Interest
        You have the right to object to our legitimate interest at any time.
        CATEGORIES OF PERSONAL DATA
        • Membership Administration Information
        • Identity Information
        • Contact Information
        • Browsing Information
        • Profile and Community Information
        • Mobile Device Information
        • Correspondence
        • Image and Recording (if available to adidas)
        • Personal Opinionen (if available to adidas)
        • Measurements (if available to adidas)
        • Payment, Purchase and Transaction Information (if available to adidas)
        • Social Media Interaction and Activity (if available to adidas)
        • Fitness Activity Information (if available to adidas)
        • Behavioural and Preference Information (if available to adidas)
        RETENTION PERIOD
        • Duration of membership and for as long as you do not object to our legitimate interest by deleting your Personal Data
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Prospective Buyers and Investors
        • Business Consulting Service Providers
        • Email Marketing Support Providers
        • Data Analytics Solution Providers
        • adiClub Partners


        5.1b Sweepstakes and Competitions Participation
        PROCESSING
        • We use your information to verify your eligibility to enter the sweepstake and competition, and to contact you using the contact details you share with us. In case you are the winner of the competition or the sweepstake, we will use your information to send you the prize, and to take care of other administrative and legal requirements as necessary.
        LEGAL BASIS
        • Performance of Contract
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Behavioural and Preference Information (nur wenn für das Projekt erforderlich)
        • Fitness Activity Information (if available to adidas)
        • Measurements
        • Payment, Purchase and Transaction Information
        RETENTION PERIOD
        • Duration of the Competition + two months
        CATEGORIES OF RECIPIENTS
        • adidas Controller organizing the event
        • adidas AG Subsidiaries and Affiliates
        • Event Partners (where applicable)
        • Delivery Service Providers


        5.1c Private Event Registration
        PROCESSING
        • When you sign up for an event which we organise that have limited spots, we use the Personal Data you provide to reserve a spot for you. Your Personal Data will be used according to the Terms and Conditions associated with the event. Please read the specific privacy notice we may publish at the time of the registration if available.
        LEGAL BASIS
        • Performance of Contract
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Profile and Community Information
        • Location Information
        • Fitness Activity Information: any information we may collect from you on the day of the event.
        • Behavioural and Preference Information (if collected for the specific event)
        • Image and Recording (if collected for the specific event)
        • Personal Opinionen (if collected for the specific event)
        • Social Media Interaction and Activity (if collected for the specific event)
        • Membership Administration Information (where adidas brand membership applies / if available to adidas)
        RETENTION PERIOD
        • Duration of the event and statutory limitation period in case of any disputes
        CATEGORIES OF RECIPIENTS
        • adidas Controller organizing the event
        • adidas AG Subsidiaries and Affiliates
        • Event Partners (where applicable)
        • IT Cloud Solution Providers (where applicable)


        5.1d Open Event Registration
        PROCESSING
        • We often also organize events that are open to everyone. We use the Personal Data you provide to keep you inform of the events you are interested in. Please read the specific privacy notice we may publish at the time of the registration if available.
        LEGAL BASIS
        • Legitimate Interest
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Location Information
        • Fitness Activity Information: any information we may collect from you on the day of the event.
        • Membership Administration Information (where adidas brand membership applies / if available to adidas)
        RETENTION PERIOD
        • For the duration of the event + 36 months if the data from a particular event is used for BUSINESS OPERATIONAL ANALYTICS purpose.
        CATEGORIES OF RECIPIENTS
        • adidas Controller organizing the event
        • adidas AG Subsidiaries and Affiliates
        • Event Partners (where applicable)
        • IT Cloud Solution Providers (where applicable)

      3. Operate adidas Online Shop and adidas Platforms

      4. 5.2a Site Operation and App Operation
        PROCESSING
        • We screen all traffic to our sites and apps, and analyse data that is received by our servers to: a) run the sites that are connected to our domain and apps, b) fix bugs to make sure the layout and design are displayed properly, and c) fix bugs to make sure the sites and the apps function properly, and d) to monitor compliance with our Terms and Conditions.
        LEGAL BASIS
        • Legitimate Interest
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Browsing Information
        • Mobile Device Information
        RETENTION PERIOD
        • Browsing Session
        • We need your data for as long as you are on the site. We keep it for the duration of your browsing session.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Site Administration Support Providers


        5.2b Operation of adidas Running and adidas Training Features
        PROCESSING
        • We process your personal data to be able to provide you with a seamless user experience when using adidas Running and adidas Training. This includes any data processing that is necessary for the use of the specific features you want to use, e.g. the comparison of activity data with those of other users, if you participate in a leaderboard ranking or a challenge.
        LEGAL BASIS
        • Performance of Contract
        CATEGORIES OF PERSONAL DATA
        • Membership Administration Information
        • Identity Information
        • Contact Information
        • Browsing Information
        • Mobile Device Information
        • Profile and Community Information
        • Correspondence
        • Image and Recording (if available to adidas)
        • Personal Opinionen (if available to adidas)
        • Measurements (if available to adidas)
        • Payment, Purchase and Transaction Information (if available to adidas)
        • Social Media Interaction and Activity (if available to adidas)
        • Fitness Activity Information (if available to adidas)
        • Behavioural and Preference Information (if available to adidas)
        RETENTION PERIOD
        • Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Data Analytics Solution Providers
        • IT Cloud Solution Providers
        • CRM Solution Providers


        5.2c Domain and Network Security and User Authentication
        PROCESSING
        • To protect our domains, detect unusual activities, and prevent security threats and protect our site-visitors from unauthorised accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such us the credentials you have provided directly to us or other platforms (such as Runtastic or Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites.
        reCAPTCHA
        • We reCaptcha operated by Google on our websites and apps to authenticate user identity and secure our platforms from malicious software (or known as a “bot”) that might engage in abusive activities on our platforms. reCAPTCHA works by collecting information about your hardware, and software (for example, device and application data) This data is shared with Google for analysis. Data captured by reCAPTCHA is also subject to the Google Privacy Policy and Terms of Use.
        LEGAL BASIS
        • Legitimate Interest
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Browsing Information
        • Mobile Device Information
        RETENTION PERIOD
        • Browsing Session
        • We need your data for as long as you are on the site. We keep it for the duration of your browsing session.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Site Administration Support Providers


        5.2d Global Credential to All Adidas Platforms – User Experience
        PROCESSING
        • User log-in identities and account management are administered centrally, so users can use one set of credentials to log in to participating* adidas platforms. You adidas log-in credentials are stored in our global authentication platform. You can then use the same set of credential to log in to your account which is registered with the participating platforms. When you use your adidas Log-In to access any participating platforms, we will use a token to verify your identity from our global authentication platform. This further ensures our network and domain security. adidas Responsible Entities use your Personal Data provide for this purpose to administer your account, including sending account management related messages, such as password reset, and processing your rights requests as explained in the “How do you exercise your rights for your Personal Data?” section.
        *currently, this is applicable to adidas websites, the adidas app, adidas training app**, adidas running app**, GMR app, Confirmed app.
        ** runtastic GmbH (Pluskaufstraße 7, 4061 Pasching, Austria) is a brand of adidas AG, and the responsible entity for the adidas training app, and the adidas running app.
        LEGAL BASIS
        • Legitimate Interest
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Mobile Device Information
        RETENTION PERIOD
        • Your account duration or Inactivity+25 months
        • To allow you to sign in with your adidas Log-In on adidas Platforms, we need to maintain your data for as long as you have an account with us, or if you stop using our services without requesting to delete your data, we will keep it for 25 months after your last log in.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Site Administration Support Providers

      5. Display Targeted Advertisements and Send Individualised Marketing Messages

      6. 5.3a Personalised Marketing Messages Via Email (Via Existing Contract)
        PROCESSING
        • When you purchase our products or conclude any contracts with us, we consider that to be an indication of interests to our products, services, promotions, and various offerings. We send you marketing messages that we think you would be interested in (“personalised”) to the email address you provide to us or via push-notifications when you have installed our app. To send you “personalised” messages, we observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.
        • PROFILING (AUDIENCE MANAGEMENT)
          • We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to establish a personalised interaction with you that is based on our past interaction, and other information we can use to infer your likes and dislikes. We use audience management technologies to ensure the right messages and information reach you at the right moment through the right channel. This includes sending you marketing messages of deals and products or addressing you across digital media through ads on adidas brand platforms. The level of personalisation depends on the permission you have provided to us.
        • MARKETING ANALYTICS
          • We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; f) and whether overall user experience worked for you or not. We use this analysis to improve the relevance of our marketing communication to you and the quality of our personalisation experience across our channels and platforms.
        • DATA ENRICHMENT
          • We create a single, unified consumer profile of you by matching all personal data which you can be identified. This includes personal data we collected directly or indirectly from you across digital media or offline, the feedback you provide to us, your interaction and communication with us through our various platforms and communication channels. "
        • IMPROVE DATA MODELS
          • We use data science and your profile and personal data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.

        LEGAL BASIS
        • Legitimate Interest
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Location Information
        • Measurements (if available to adidas)
        • Payment, Purchase and Transaction Information (if available to adidas)
        • Social Media Interaction and Activity (if available to adidas)
        • Fitness Activity Information (if available to adidas)
        • Browsing Information
        • Mobile Device Information
        • Behavioural and Preference Information (if available to adidas)
        • Membership Administration Information (where adidas brand membership applies / if available to adidas)
        RETENTION PERIOD
        • We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Email Marketing Support Providers
        • IT Cloud Solution Providers


        5.3b Personalised Marketing Messages Via Email (Newsletter Sign-Up)
        PROCESSING
        • We send you marketing messages that we think you would be interested (“personalised”) to the email address you provide to us or via push-notifications when you have installed our app. To send you “personalised” messages, we observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.
        • PROFILING (AUDIENCE MANAGEMENT)
          • We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to establish a personalised interaction with you that is based on our past interaction, and other information we can use to infer your likes and dislikes. We use audience management technologies to ensure the right messages and information reach you at the right moment through the right channel. This includes sending you marketing messages of deals and products or addressing you across digital media through ads on adidas brand platforms. The level of personalisation depends on the permission you have provided to us.
        • MARKETING ANALYTICS
          • We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; f) and whether overall user experience worked for you or not. We use this analysis to improve the relevance of our marketing communication to you and the quality of our personalisation experience across our channels and platforms.
        • DATA ENRICHMENT
          • We create a single, unified consumer profile of you by matching all personal data which you can be identified. This includes personal data we collected directly or indirectly from you across digital media or offline, the feedback you provide to us, your interaction and communication with us through our various platforms and communication channels.
        • IMPROVE DATA MODELS
          • We use data science and your profile and personal data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.

        LEGAL BASIS
        • Consent
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact Information
        • Location Information
        • Measurements (if available to adidas)
        • Payment, Purchase and Transaction Information (if available to adidas)
        • Social Media Interaction and Activity (if available to adidas)
        • Fitness Activity Information (if available to adidas)
        • Browsing Information
        • Mobile Device Information
        • Behavioural and Preference Information (if available to adidas)
        • Membership Administration Information (where adidas brand membership applies / if available to adidas)
        RETENTION PERIOD
        • We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes.
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Email Marketing Support Providers
        • IT Cloud Solution Providers


        5.3c Targeted Messages On 3rd-Party Advertising Platforms
        PROCESSING
        • We use third-party advertising platforms, such as Facebook, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns. In order to do this, we share your Personal Data with our Advertising Agency Partners as well as Social Media Platforms. We use third-party solutions such as Google Analytics and Facebook Business Manager tools to help us do a better job at targeting our campaigns and messages for our consumers. Social Media Platforms will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from adidas. We also need to analyse necessary information to understand the impact of our campaigns. If you don’t accept that we track you for this purpose, you will still see adidas advertisements on Social Media Platforms and other third-party platforms at random. Please also read the privacy notice on the Social Media Platforms to understand how your Personal Data is used by them for this purpose.
        • PROFILING (AUDIENCE MANAGEMENT)
          • We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to establish a personalised interaction with you that is based on our past interaction, and other information we can use to infer your likes and dislikes. We use audience management technologies to ensure the right messages and information reach you at the right moment through the right channel. This includes sending you marketing messages of deals and products or addressing you across digital media through ads on adidas brand platforms. The level of personalisation depends on the permission you have provided to us.
        • MARKETING ANALYTICS
          • We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; f) and whether overall user experience worked for you or not. We use this analysis to improve the relevance of our marketing communication to you and the quality of our personalisation experience across our channels and platforms.
        • DATA ENRICHMENT
          • We create a single, unified consumer profile of you by matching all personal data which you can be identified. This includes personal data we collected directly or indirectly from you across digital media or offline, the feedback you provide to us, your interaction and communication with us through our various platforms and communication channels.
        • IMPROVE DATA MODELS
          • We use data science and your profile and personal data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.

        You can learn more about how our Advertising Partners and Social Media Platforms help us achieve this purpose by visiting their sites:
        LEGAL BASIS
        • Consent
        CATEGORIES OF PERSONAL DATA
        • Identity Information
        • Contact information (if available to adidas)
        • Location Information
        • Measurements (if available to adidas)
        • Payment, Purchase and Transaction Information (if available to adidas)
        • Social Media Interaction and Activity (if available to adidas)
        • Fitness Activity Information (if available to adidas)
        • Browsing Information
        • Mobile Device Information
        • Behavioural and Preference Information (if available to adidas)
        • Personal Opinion
        • Membership Administration Information (where adidas brand membership applies / if available to adidas)
        RETENTION PERIOD
        • We retain it for as long as you do not withdraw your consent
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Advertising Agency Partners
        • Social Media Platforms
        • Targeted Marketing Service Providers
        • IT Cloud Solution Providers

      7. Comply with Legal Obligations

      8. 5.4a Legal Obligation - Cooperation with Law Enforcement And Regulatory Authorities (Including Courts)
        PROCESSING
        • When we are legally required to provide your Personal Data for national and public security reasons, crime prevention, investigation and prosecution, anti-money laundering, judicial proceedings, protection of other individuals’ rights and freedoms, and enforcement of civil claims, we will provide information as requested by the authorities or parties once we are satisfied that the request is mandated by law. We may not be able to notify you if it is against the law to do so.
        LEGAL BASIS
        • Legal Obligation
        CATEGORIES OF PERSONAL DATA
        • All Categories of Personal Data as requested by the enforcement authority
        RETENTION PERIOD
        • For as long as required by law
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates
        • Local and national government authorities, including tax authorities
        • Local and national judiciary
        • Local and national law enforcement agencies


        54b. Evidence – Contract Dispute and/or Legal Compliance
        PROCESSING
        • We need to keep evidence in case of any contractual dispute, or to defend ourselves in case of any investigatory audits or privacy compliance disputes and complaints, including how we have handled your individual rights.
        LEGAL BASIS
        • Legal Obligation
        CATEGORIES OF PERSONAL DATA
        • All Categories of Personal Data as required to be used as evidence
        RETENTION PERIOD
        • Statutory Limitation period depending on the contractual period and/or the legal requirement
        CATEGORIES OF RECIPIENTS
        • adidas AG Subsidiaries and Affiliates


    6. Recipients of your Personal Data
        You can find a list of Data Recipients who processes your Personal Data under Responsible Entities’ instructions below. The list is subject to change as necessary.
        COMPANY - SERVICE
        • adidas International Marketing B.V. - Webshop operations & Marketing Services
        • Demandware Inc.| USA - Website Hosting
        • Klarna | Sweden - Payment Processes
        • Adyen | Netherlands - Payment Processes
        • InfoSys Technologies Ltd. | India, EPAM | Belarus - Website Development
        • Adobe Analytics | Ireland, Google Analytics | USA - Web Analytics
        • Sprinklr | USA, Olapic Inc. | USA - Social Media Analytics
        • Flurry | USA, Apps Flyer | Israel - Mobile App Analytics
        • Qualtrics LLC | USA – Survey, Net Promoter Score
        • act.3 | Germany, cip Trademarketing GmbH | Germany - Event Management
        • Neolane Ltd. | France - Marketing
        • Batterii LLC | USA - Consumer Insights
        • TBWA Worldwide Inc. | USA, Media Monk Netherlands, IRIS | Australia - CRM Agencies
        • Olapic, Inc. | USA - UGC Support Partners
        • adidas affiliates | globally - Consumer Relationship Management
        • Teleperformance | Germany - Customer Service
        • DHL | Germany - Product Delivery
        • Feedzai | Germany - Fraud Prevention
        • PayPal | USA - Payment Service
        • Apple Pay, Google Pay | USA - Mobile Payment
        • Facebook (WhatsApp, Instagram) | USA - Social Media Interaction
        • Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 | Ireland - Social Media Interaction
        • Twitter | USA - Social Media Interaction
        • Google | USA - Social Media Interaction
        • Runtastic GmbH | Austria - Health and Fitness Community
        • Google Analytics | USA - Analytics
        • Adobe Analytics | USA - Analytics
        • Anatwine Limited | UK - Consumer Experience
        • MediaCom | UK - Advertising Partner
        • Salesforce - CRM Software | Data Analytics
        • Wunderman - Email Marketing Services
        • Stuffstr Limited - Selling Partner
        • Webhelp – Customer Service Provider
        • Fit Analytics GmbH – Size Reccomnedation Provider
        • Bazaarvoice, Inc | USA – Ratings analytics Provider
        • mParticle Inc | USA – Mobile App analytics
        • Amplitude Inc | USA – Mobile App analytics
        • Appsflyer Ltd | Israel – Mobile App analytics
        • Visenze Pte. Ltd | Singapore - Visual Search Provider
        • Vyking Limited | UK - Augmented Reality Services Provider
        • nShift | UK - Multicarrier Delivery Management Platform
        In case you are using adidas Running and/or adidas Training apps please also consult: https://www.runtastic.com/pdfs/terms/recipients_of_personal_data.pdf for more information on the potential recipients of app related data , the data categories affected and the purpose of the respective data sharing.

        Where your personal data may be used by non-adidas Data Controllers via adidas platforms, applications or elsewhere for their own purposes, please consult the privacy notice of the non-adidas Data Controller for more information about how they handle your personal data.

    7. What does adidas do when we transfer your Personal Data outside of the EU/EEA?
        Depending on the Personal Data processing activity, your Personal Data is shared with different “Categories of Recipients”. Where the recipient is located outside the EU/EEA, we have implemented necessary measures such as singing the EU Standard Contractual Clauses approved by the EU Commission and appropriate security safeguards.

    8. How do we secure your Personal Data?
        We implement appropriate technical and organisational measures to address the risks corresponding to our use of your Personal Data, including loss, alteration, or unauthorised access to your Personal Data, and empowering you to exercise your rights. We require our service providers to do the same through contractual agreements. However, you should be aware that any transmission of your Personal Data through the internet is at your own risk. We can only protect your Personal Data when we have it.

    9. General Questions, Support
        adidas CUSTOMER SERVICE - ( https://adidas.com/help )
        If you have any general questions or require immediate assistance and support concerning your rights or how we use your Personal Data, please contact our Customer Service team. You can find their contact information and channels by clicking on this link: https://adidas.com/help .

        LOCAL AUTHORITIES
        If you have any questions about your rights, please consult your local authorities’ websites and offices.

    10. Data Protection Officer
        DataProtection@adidas.com
        Global Legal (Privacy) | DPO | adidas AG | Adi-Dassler-Straße 1 | 91074 Herzogenaurach | Germany