ADIDAS PRIVACY NOTICE FOR SUPPLIERS IN SUPPLY CHAIN AUGUST 2019

  1. WHAT THIS IS ABOUT AND CONTROLLER
    adidas is committed to comply with all relevant privacy laws and regulations. This Privacy Notice describes how adidas processes the personal data related to suppliers, its sub-contractors, agents and other service providers in the supply chain (“suppliers”). This Privacy Notice also provides you with information on your rights under applicable data protection laws, and how you can exercise those rights. Your personal data is controlled by adidas AG / Adi-Dassler-Str. 1 / D-91074 Herzogenaurach, Germany.
  2. YOUR PERSONAL DATA – WHAT INFORMATION DO WE PROCESS?
    In relation to the supplier relationship, we collect, and process work related contact details (first and last name, phone, fax numbers, email or physical address), bank details, tax identification number and further information submitted by you related to the supplier relationship.
  3. PURPOSES – WHY DO WE PROCESS YOUR PERSONAL DATA?
    Personal data is processed solely for supplier registration, for supplier management, for communication purposes, for payment, to enhance our procurement purposes, to guarantee technical security, to comply with laws, to exercise our legal rights and to protect ourselves from legal claims.
  4. LEGAL BASIS – WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
    Legitimate interests – We process your personal data for the purposes of our legitimate interests. Our interests contain a proper supplier management and communication, the enhancement of our procurement processes, the assurance of the functionality and safety of our systems, the exercise of our legal rights or the protection from legal claims. Compliance with laws – We will process your personal data to comply with laws, e.g. answering authority requests in the course of investigation proceedings.
  5. SHARING – WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
    For the abovementioned purposes your personal data may be shared with the following categories of recipients (including recipients outside the European Economic Area) in accordance with applicable laws:

    Affiliates – The adidas enterprise is comprised of several companies operating globally which is headquartered in Germany. We will share your personal data with adidas affiliates if it is necessary for the purposes explained in this Privacy Notice. A list of adidas affiliates with whom your personal data may be shared can be found under ´List of Shareholdings` of the financial statements of adidas AG.

    Service Providers – We share your personal data with service providers, who help us to manage the overall business. Such service providers include hosting providers, IT service providers or consultants.

    Government Authorities, Law Enforcement Agencies, Courts - Your personal data may be shared with government authorities, law enforcement agencies and/or courts if mandated by law or if required for the legal protection of our legitimate interests.
  6. INTERNATIONAL DATA TRANSFERS – WHICH SAFEGUARDS DO WE UNDERTAKE DURING INTERNATIONAL DATA TRANSFERS?
    adidas will protect your data, regardless of whether it is inside or outside the European Economic Area. We share your personal details with recipients outside the European Economic Area only after having assessed their reliability and after having made sure that personal data is adequately protected for example by having them sign E.U. Commission approved standard contractual clauses.
  7. RETENTION – HOW LONG DO WE KEEP YOUR PERSONAL DATA?
    We will delete your personal data, if a storage of those data is no longer necessary. Particularly, your personal data will be retained during the contractual relationship and for an appropriate period thereafter, to comply with laws, to exercise our legal rights and to protect ourselves from legal claims.
  8. SECURITY – HOW DO WE SECURE YOUR PERSONAL DATA?
    We have appropriate technical and organizational measures in place and signed contractual agreements with our service providers to protect your personal data, including among other things against loss, alteration, or unauthorized access to personal data. Please note that any transmission of your personal data through the internet is at your own risk. Once we have received your personal data we will protect these data.
  9. YOUR RIGHTS – WHAT ARE YOUR RIGHTS?
    We would like to give you an overview over the rights you have under applicable data protection laws. We may need to confirm your identity before we can deal with your enquiry. Some of the rights are subject to restrictions. Where your enquiry has been rejected, we will provide you with the relevant reason.

    You can ask adidas for access to your personal data and to get a copy of the personal data undergoing processing. You have the right to obtain the rectification or the erasure of your personal data and to restrict its processing. You can object to the processing if you doubt our legitimate interests in processing your personal data. Additionally, you have the right to lodge a complaint with your local Data Protection Authority, or with the local Data Protection Authority in Bavaria, Germany which is in charge for adidas.
  10. QUESTIONS AND COMPLAINTS – WHO ARE YOUR CONTACTS?
    If you wish to exercise your rights, if you have questions about this Privacy Notice, complaints or wish to contact adidas for any other reason in relation to the processing of your personal data, please reach out to the Global Privacy Officer or the Global Privacy Team with subject “supplier request”. They can be reached at:

    adidas AG / Global Privacy Team
    Adi-Dassler-Straße 1 / 91074 Herzogenaurach / Germany
    email: adidasPrivacy@adidas.com

    Contact of Data Protection Authority which oversees adidas:
    Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
    https://www.lda.bayern.de/de/kontakt.html
    Promenade 27 / 91522 Ansbach
    Tel.: +49 (0) 981 53 1300
    email: poststelle@lda.bayern.de