La Sportiva S.p.A., having its registered office at Via Ischia n. 2, 38030 - Ziano di Fiemme (TN), ITALY, (hereinafter "La Sportiva"), acting in its capacity as the data controller of personal data pursuant to (EU) Regulation 679/2016 ("GDPR"), recognizes the importance of protecting personal data and considers its protection one of the main objectives of its activities. Before providing any personal data, La Sportiva invites you to carefully read this privacy policy ("Privacy Policy"), which is intended for users of the website www.lasportiva.com ("Website"), prepared pursuant to Articles 13-14 of the GDPR, and includes all details regarding the processing of your personal data ("Data") and their use.

It should be noted that this Privacy Policy applies only to the processing of Data carried out on the Website and not to processing carried out on different and additional websites, even if accessible via links within the Website itself.

Data Controller and Contact Information

The data controller is La Sportiva S.p.A., tax code and VAT number 01039930225, located at Via Ischia n. 2, 38030 - Ziano di Fiemme (TN), ITALY, ("Controller" or "Company"). Email address: gdpr@lasportiva.com

Categories of processed Data

a. Browsing Data:

This category of Data includes your IP addresses or domain names of the computers you use when connecting to the Website, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to your operating system and computing environment. These Data are used only for statistical information (thus they are anonymous), to check the correct functioning of the Website, and are deleted immediately after processing. The Data could be used to ascertain responsibility in case of hypothetical computer crimes against the Website. Except for this possibility, web contact Data do not persist for more than 7 days; however, logs relevant to the analysis and resolution of any technical issues related to the Website or errors in the data flows connected to it are kept by the Controller for a period of 12 months, in accordance with current regulatory provisions.

b. Data voluntarily provided by the user

The Website offers you the opportunity to voluntarily provide personal information through various tools, such as filling out the "Create an account" form. In this way, you can provide personal data, such as name and email address, to benefit from dedicated promotions (e.g., birthday discount), by subscribing to the newsletter, for the management of orders placed online and related shipments (carried out on behalf of La Sportiva by the company Drop S.r.l.), as well as to participate in surveys or other marketing initiatives. Although providing these Data is optional, your refusal to do so may prevent access to the aforementioned services.

c. Data collected through tracking (cookies)

The Website collects Data using cookies or other online tracking tools. Tracking occurs through code executed within websites, both at the server level (e.g., services, procedures) and at the client level (e.g., tags, pixels), also with the support of code installed on your browser (e.g., cookies). For the purposes and management of consents related to tracking, please visit the specific "Cookie Policy" on the Website.

d. Location Data

The Website may collect, following your specific authorization, the location data (approximate) provided by your IP address.

Services offered on the Website

Below is an illustration of the services offered on the Website. For each service, the purposes of data processing, the legal bases for the processing, and the retention periods of the processed Data are indicated.

a. Registration on the Website and Account Creation

The Website offers the possibility to create a personal account and to take advantage of the products and services dedicated to you which are available to you as a registered user. You can delete your registered user account at any time by sending your request to: gdpr@lasportiva.com

Purpose of processing: Registration and account creation on the Website.

Legal basis for the processing: Article 6, paragraph 1, letter b) of the GDPR, "performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract".

Retention period: Personal data will be retained until the account is deleted (upon user request) and, after termination/deletion, for a maximum of an additional 10 (ten) years.

You can view the complete specific information notice at the following link: https://www.lasportiva.com/en/privacy-policy-account

b. Management of online sales activities and order fulfillment

The personal data provided will be processed to manage the purchase orders made by users on the e-commerce platform hosted by the website www.lasportiva.com, owned by La Sportiva, including for the purposes of managing the cart, payment of the purchase price, invoicing, shipping of purchased products, as well as handling any returns, refunds, or complaints. For the performance of these activities, La Sportiva uses the company Drop S.r.l., which processes the personal data provided by users for the use of the e-commerce platform on behalf of La Sportiva and as the Data Processor.

Legal basis for processing: Article 6, paragraph 1, letter b) of the GDPR, "performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."

Retention period: The data will be retained for the entire duration of the contract and for the subsequent 10 years following the conclusion of the contract, in compliance with legal obligations in civil and fiscal matters, or for a longer period if necessary for the management of any disputes or legal proceedings, both judicial and extrajudicial.

You can view the complete specific information at the link: https://www.lasportiva.com/en/privacy-policy-ecommerce

c. Abandoned Cart Management

La Sportiva may process your personal data to send you reminder communications regarding products you add to your cart while visiting our e-commerce platform but do not proceed to purchase, with the aim of facilitating the completion of your order.

For guest users (not registered) who have provided their email address in the checkout form, two automatic messages are scheduled: the first 2 hours after the cart is abandoned, and the second on the following day. For registered users, three messages are scheduled: the first two follow the same timing as for guest users; the third message is sent 3 days after the cart is abandoned and consists of a newsletter tailored based on the data of the products added to the cart (e.g., similar items and/or relevant product category). This final message will be sent only once, with the purpose of helping complete the purchase.

Legal basis for processing: Art. 6.1, letter b) GDPR, “performance of pre-contractual measures at your request”.

Retention period: the data strictly necessary for sending reminder communications are retained for the minimum technical time required to provide the service, as follows: (i) for guest users (not registered), 24 hours from cart abandonment; (ii) for registered users, up to 72 hours from cart abandonment, to allow for the third scheduled message to be sent.

d. Contact Section

The Website includes a "Contact" section. This allows you to submit your requests for information, reports, and complaints to the Company. For the provision of this service, the following personal data are necessarily required: name, surname, country, email address.

Purpose of processing: To respond to user requests for information, as well as to open specific tickets for customer care activities in response to reports or complaints.

Legal basis for processing: Article 6, paragraph 1, letter b) of the GDPR, "performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract".

Retention period: Personal data will be retained for a period not exceeding 10 years from the time of their provision, unless retention for a longer period is necessary for the exercise of the Controller's rights in court.

Additional Purposes of Processing

As part of the processing of personal data carried out through the Site, the Controller pursues the following additional specific purposes:

a. Compliance with Legal Obligations

Where necessary, the Controller processes Data collected through the Website to ensure compliance with legal obligations, regulations, and European provisions to which it is subject.

Legal basis for processing: Article 6, paragraph 1, letter c) of the GDPR, "processing is necessary for compliance with a legal obligation to which the controller is subject".

Retention period: Personal data will be retained for the period strictly necessary to allow the Controller to comply with the legal obligations to which it is subject.

b. Verification, Exercise, and Defense of Rights in Court

Where necessary, the Controller processes Data collected through the Site to verify, exercise, or defend its rights in court, or whenever judicial authorities exercise their judicial functions.

Legal basis for processing: Article 6, paragraph 1, letter f) of the GDPR, "processing is necessary for the purposes of the legitimate interests pursued by the controller".

Retention period: Personal data will be retained for the period strictly limited to the duration of the litigation, until the expiration of the terms for the exercise of appeal actions.

c. Direct Marketing Activities

Your Data, with your free and specific consent, will be processed by the Controller to update you on promotional, commercial, and advertising initiatives, events, or other initiatives organized by the Controller (newsletter), or for the purpose of conducting market studies or analyses, in accordance with the Italian Data Protection Authority’s order called "Guidelines on promotional activities and combating spam – July 4, 2013 [2542348]". We inform you that these activities may be carried out by sending emails (so-called "automated methods"). Additionally, we will process your Data to carry out analysis and reporting activities related to promotional communication systems. Without your specific consent for this purpose, we will not be able to process your personal data for direct marketing purposes and therefore will not be able to inform you about new products and/or ongoing promotions.

Legal basis for processing: Consent of the data subject pursuant to Article 6, paragraph 1, letter a) of the GDPR, "the data subject has given consent to the processing of his or her personal data for one or more specific purposes".

Retention period: Personal data collected based on consent will be retained for a maximum of 24 months from the last communication sent. In any case, the Controller may retain personal data strictly necessary to demonstrate compliance with the accountability principle pursuant to Article 5 GDPR for a further period. The consent given will be valid until you decide to revoke it by unsubscribing from the newsletter service.

You can view the dedicated privacy notice at the following link: https://www.lasportiva.com/en/privacy-policy-newsletter

d. Technical Monitoring and Optimization of the Website Performance

Browsing data is processed to identify malfunctions, technical errors, and to improve the overall performance of the Website, ensuring optimal user experience.

Legal basis for processing: Processing is necessary for the purposes of the legitimate interests pursued by the Controller to ensure the security, proper functioning, and continuous improvement of the Website.

Retention period: Your Data will be processed for the time strictly necessary to identify and resolve any technical issues or to improve the performance of the Website, and in any case no longer than 12 months from collection. Data may be deleted or anonymized and subsequently retained for aggregated statistical purposes.

e. Events

Your personal Data will be processed to allow you to register and participate in events organized by La Sportiva, to send you useful and functional communications for participating in such events, as well as to update you on further events or initiatives promoted by La Sportiva.

Legal basis for processing: Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract as provided by Article 6.1, letter b) of the GDPR to participate in events and manage organizational activities; the consent of the data subject, as provided by Article 6.1, letter a) of the GDPR, to send you communications and/or information about further initiatives organized by La Sportiva.

Retention period: Personal data will be retained for the entire duration of the events and, at the end of the same event, for a period of 1 year, for purposes related to the participation in the event and sending follow-up communications and/or satisfaction questionnaires related to the event. For marketing purposes, such as sending information about initiatives and further events promoted by La Sportiva, data will be retained for 24 months from the release of consent, unless the data subject revokes consent before that term.

For details regarding the processing of personal data, please refer to the specific information prepared for each event.

Recipients of Data

Data may be processed by entities acting as independent data controllers, such as, by way of example: authorities and supervisory and control bodies and, in general, public or private entities entitled to request Data.

Data may also be processed, on behalf of the Company, by external entities designated as Data Processors (pursuant to Article 28 of the GDPR), to whom appropriate operational instructions are given. These entities are essentially included in the following categories:

a. companies that offer email sending services;

b. companies that offer services instrumental to the pursuit of the purposes indicated in this notice (media agencies, IT suppliers, shippers...);

c. companies that provide management and/or maintenance services for the Company's website.

Data may be processed by employees and/or collaborators of any kind of the Controller and/or the Data Processor appointed to pursue the above purposes, who have been expressly authorized to process and have received adequate operational instructions.

Transfer of Personal Data

For some of the purposes indicated above, Data may be processed by Data Processors located in countries outside the European Union, whose level of data protection has been deemed adequate by the European Commission pursuant to Article 45 of the GDPR.

In these cases, the Controller will adopt all appropriate contractual measures to ensure an adequate level of protection of personal data, ensuring that the transfer will take place in compliance with applicable legal provisions and therefore stipulating, if and as necessary, specific agreements that ensure an adequate level of protection of personal data, or in any case adopting the Standard Contractual Clauses approved by the European Commission for the transfer of personal data outside the EU pursuant to Article 46, paragraph 2, letter c) of the GDPR.

Revocation of Consent and Exercise of Data Subject Rights

As a data subject, you may exercise, at any time, the rights provided by the GDPR listed below, by sending a specific written request to the email address: gdpr@lasportiva.com

You may revoke at any time the consents given for the processing described in this Privacy Policy in the same way and/or using the links in the newsletter communications and/or the specific section within the account. The request to delete the personal account must be addressed to the email address: gdpr@lasportiva.com

Any communications and actions taken by the Company in response to the exercise of the rights listed below will be carried out free of charge. However, if your requests are manifestly unfounded or excessive, particularly due to their repetitive nature, the Company may charge you a fee, taking into account the administrative costs incurred, or refuse to comply with your requests.

You may request from the Controller access to your data, their deletion, the rectification of inaccurate data, the integration of incomplete data, the restriction of processing in the cases provided by Article 18 GDPR, as well as opposition to processing, for reasons related to your particular situation, in the cases of legitimate interest of the Controller.

In the event of exercising your right to deletion, the Controller will delete Data relating to you not only from the Website but also from all the Company's databases: this may therefore include the possible deletion from other platforms of the Controller on which you are registered. Therefore, considering the impact that such deletion may have on you, the Controller may adopt procedures better aimed at verifying your identity. Furthermore, the Controller will retain only the Data strictly necessary to comply with any requests from the authority or in case of litigation.

Additionally, if the processing is based on consent or contract and is carried out by automated means, you have the right to receive the Data in a structured, commonly used, and machine-readable format, and, if technically feasible, to transmit them to another controller without hindrance.

You have the right to revoke the consent given at any time for marketing purposes, as well as the right to lodge a complaint with the competent supervisory authority in the Member State where you usually reside or work or in the State where the alleged violation occurred.

Changes

This Privacy Policy is effective from 27/10/2025. La Sportiva reserves the right to modify or simply update its content, in part or completely. In such cases, La Sportiva will inform you of such changes as soon as they are introduced; such changes will be binding as soon as they are published on the Website. La Sportiva will notify you in such a way that you can review the changes, make your evaluations, and, if necessary, oppose or cancel any services or functions.

In any case, we encourage you to periodically review the Privacy Policy and the notices on the processing of personal data referred to herein, to check for any minor changes or interactive improvements, also considering that this documentation is always available for your consultation on the Website.