Privacy Statement

PRIVACY NOTICE - ADIDAS CAREER PORTAL

NOVEMBER 2018

1.         WHAT IS THIS ABOUT?

At adidas, privacy means fair play and transparency. This Privacy Notice describes how adidas processes your personal data concerning candidate searching and recruiting. This Privacy Notice also provides you with information on your rights under applicable data protection laws, and how you can exercise those rights.

2.         CONTROLLER

The controller of this career portal is:

adidas AG

Adi-Dassler-Str. 1

91074 Herzogenaurach

Germany

By creating a profile, you are able to apply for a specific job directly or to show your interest in working for adidas. As soon as you apply for a specific position, the application will be transferred to the entity of adidas which is offering the job description. When this document refers to “adidas”, “we” or “us”, the adidas AG is meant.

3.         YOUR PERSONAL DATA – WHAT INFORMATION DO WE PROCESS?

Profile – For creation of a profile it is necessary that you provide at least your first and last name, email address, mobile phone number, current employer, current title and primary area of interest.

Further required information – Additionally, when applying for a specific job we may ask you for further job related personal data. Depending on the country this may vary in scope and type. It is possible that sensitive information such as trade union membership or health information are questioned. This depends on the local requirements of the country the specific job is offered in. This information will be added to your profile automatically.

Further submitted information – In order to complete your profile, you can voluntarily add other job-related information. By uploading your CV, it will be added to your profile automatically.

Important Note – Currently, when applying for US jobs additional data (typed signature, minimum age of 18 and EEO information such as ethnicity, veteran status and disability status) will be asked. Non-US-residents/-citizens must not fill in these fields even when they apply for US jobs.

Information captured during the searching and recruiting process – During the searching and recruiting process we may collect further job-related information such as information about your previous work experiences, your work preferences and your salary expectations. This information will be added to your profile.

Information concerning social media – We may collect certain personal data (full name, current position titles and current employer, and links) from your work related social media profiles (e.g. LinkedIn or Xing) for the purpose of engaging with you in respect of a vacancy. Such abovementioned personal data will not be collected from your publicly available private social media profile (e.g. Facebook or Instagram) unless they are clearly apparently work related.

4.         PURPOSES – WHY AND HOW DO WE PROCESS YOUR PERSONAL DATA?

Searching and Recruiting – adidas uses your personal data in order to find potential candidates and to fill vacancies. In the section ´search option and privacy`, you can influence to whom your profile will be visible. Please see below how your choice influences the visibility of your profile and for which purposes we use your personal data:

International candidate pool (´any adidas Group recruiting stakeholder worldwide`) – Your personal data will be processed within adidas entities worldwide for filling purposes if you opt for this on your profile under section ‘search option and privacy`. Every recruiter and every individual who is involved in a recruiting process worldwide will have access to your personal data;

National candidate pool (´only adidas Group recruiting stakeholder responsible for recruiting process in my country of residence`) – Your personal data will be available for filling open positions of adidas entities within the country of your choice if you opt for this on your profile under the section ‘search option and privacy`. Every recruiter and every individual who is involved in the recruiting process for this country will have access to your personal data;

Candidate pool for a specific job (´only adidas recruiting stakeholders managing jobs I apply to`) – Your personal data will be processed only for filling the specific position you have applied for if you opt for this on your profile under the section ‘search option and privacy`. In this case, just those individuals who are involved in the recruiting process for this particular job will have access to your personal data;

Getting in touch with you – If you created a job alert/search under section `Contact Preferences` or ´Career Interests` on your profile you will be informed about current job offers automatically via email. You can use the relevant subscribe/unsubscribe-button under the contact preferences to deactivate this job alert/search. If you activate your profile for the national or international candidate pool, recruiters may contact you to inform you about relevant job offers.

adidas may send you an email invitation to an online survey related to your recruiting experience after the recruiting process is finished. In the career portal you can object to this e-mailing. To do so, please use the relevant subscribe/unsubscribe-button under the contact preferences.

If adidas has collected personal data from your work related social media profiles (e.g. LinkedIn or Xing) or from your publicly available private social media profile (e.g. Facebook or Instagram), recruiters may contact you within the respective social media tool to check general interest to work for adidas and to engage with you in respect of a vacancy.

Improvement of our services, processes and other purposes – Your personal data is processed in order to enhance our career portal and our searching and recruiting processes, to offer you a first-class user experience, to guarantee technical security, to exercise our legal rights or to defend legal actions and to fulfill our legal obligations.

5.         LEGAL BASIS – WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

Contractual Obligations – We will process your personal data to fulfil our duties related to the recruiting relationship.

Your consent – Where you have given consent regarding the usage of your personal data, adidas will use your personal data as consented. You are free to revoke this consent for the future without giving any reason.

Legitimate interests – We process your personal data for the purposes of our legitimate interests. Our interests contain the enhancement of our career portal and of the searching and recruiting processes, the assurance of the functionality and safety of the website and our systems, the offer of a first-class user experience, the processing of requests, the exercise of legal rights or the defense of legal actions.

Compliance with laws – We will process your personal data to comply with legal obligations, e.g. answering authority requests in the course of investigation proceedings.

6.         SHARING – WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

For the abovementioned purposes your personal data may be shared with the following categories of recipients (including recipients outside the European Economic Area) in accordance with applicable laws:

Affiliates – adidas and its entities is a global enterprise comprised of several companies operating globally which is headquartered in Germany. adidas will share your personal data with other adidas entities if it is necessary for the purposes explained in this Privacy Notice. A list of adidas entities with whom your personal data may be shared can be found under ´List of Shareholdings` of the financial statements of adidas AG.

Service Providers – We share your personal data with service providers, who help us to manage the overall business. Such service providers include hosting providers, IT service providers or consultants.

Other third parties – If required during the recruiting process, adidas will pass a limited subset of your personal data, mainly name and contact to other third parties such as assessment providers. You may be invited to provide further information directly to these third parties. You will enter into a direct relationship with these companies for this purpose and as such your personal data will be used and protected in accordance with the privacy policies of those third parties.

Government Authorities, Law Enforcement Officials, Courts - Your personal data may be shared with government authorities, law enforcement officials and/or courts if mandated by law or if required for the legal protection of our legitimate interests.

7.         INTERNATIONAL DATA TRANSFERS – WHICH SAFEGUARDS DO WE UNDERTAKE DURING INTERNATIONAL DATA TRANSFERS?

adidas will protect your data, regardless of whether it is inside or outside the European Economic Area. We share your personal details with recipients outside the European Economic Area only after having assessed their reliability and after having made sure that that personal data is adequately protected for example by having them sign E.U. Commission approved standard contractual clauses.

8.         RETENTION – HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will delete your personal data, if a storage of those data is no longer necessary. This depends on the purpose for what is was collected.

Profile – If you create a profile with us, we will keep the profile and retain the data in it for a period of 24 months after your last login (period of 6 months if you are located in Germany or Austria; period of 36 months if you are located in the USA). You will be informed about the deletion of your profile via email. You may delete your profile at any time before the expiry of this period.

Job application – If you applied for a job with us, we will retain your application for the duration of the recruiting process and to the extent permitted by applicable law after the end of the recruiting process. Most applications will be deleted after 6 months after rejection. Please note that some local laws may require or allow to retain your data for longer periods.

Note – We will keep your personal data if you take legal action against any adidas entity. The personal data will be deleted at the end of the legal proceeding.

9.         SECURITY – HOW DO WE SECURE YOUR PERSONAL DATA?

We have appropriate technical and organizational measures in place and signed contractual agreements with our service providers to protect your personal data, including among other things against loss, alteration, or unauthorized access to personal data. Please note that any transmission of your personal data through the internet is at your own risk. Once we have received your personal data we will protect your data.

10.       YOUR RIGHTS – WHAT ARE YOUR PERSONAL DATA RIGHTS?

We would like to give you an overview over what personal data rights you have:

Right of access – You have the right to obtain access to your personal data and to get a copy of the personal data undergoing processing.

Right to rectification – You have the right to obtain the rectification of inaccurate personal Data or to add information to your provided data. Please log in on your profile and make the necessary modifications. You can edit your application until it is rejected.

Right to erasure – You have the right to request the erasure of your profile, if you don´t want to be a part of the searching and recruiting process. To do so, please log in on your profile and delete your account under section ´Password Settings`.

Right to data portability – You have the right to receive your personal data in a structured, commonly used and machine-readable format. Additionally, you can request the transmission of your data to another company.

Right to restriction of processing – You can prevent adidas from processing your personal data. This restriction takes place especially during the assessment period of other personal data rights.

Right to object – You have the right to object to the processing if you doubt our legitimate interests in processing your personal data.

Right to lodge a complaint – You have the right to lodge a complaint with your local Data Protection Authority, or with the local Data Protection Authority in Bavaria, Germany which is in charge for adidas.

Important note – We may need to confirm your identity, before we can deal with your enquiry. Please note that some of the rights are also subject to restrictions. Where your request has been rejected, we will provide you with relevant reason.

11.       QUESTIONS AND COMPLAINTS – WHO ARE MY CONTACTS?

If you wish to exercise the rights you have in relation to your personal data, if you have questions about this Privacy Notice, complaints or wish to contact adidas for any other reason in relation to the processing of your personal data, please reach out to the Global Privacy Officer or the Global Privacy Team.

They can be reached at:

adidas AG / Global Privacy Team

Adi-Dassler-Straße 1

91074 Herzogenaurach

Germany

email: adidasPrivacy@adidas.com

Contact of Data Protection Authority which is in charge for adidas:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

https://www.lda.bayern.de/de/kontakt.html

Promenade 27

91522 Ansbach

Deutschland

Tel.: +49 (0) 981 53 1300

E-Mail: poststelle@lda.bayern.de

12.       UPDATES TO THIS NOTICE – WILL THERE BE UPDATES TO THIS NOTICE?

This Privacy Notice may be updated periodically. adidas will update the date at the top of its first page accordingly and encourage you to check for changes that it has made, which will be available on the website. On some occasions, adidas may also actively advise you of significant changes to this Privacy Notice.