PRIVACY WAIVER AND CONSENT FOR THE USE OF PERSONAL DATA AND IMAGES

i) taking into account the provisions of Italian Law No. 633 of 1941 on copyright and image rights, as well as those of the new EU Regulation 2016/679 on the protection and processing of personal data, acknowledging, in particular, the statement on data processing pursuant to Article 13 of the aforementioned Regulation, attached hereto;
ii) having decided to participate to the event organized by Golden Goose S.p.A., with registered office in Milan, Via Privata Ercole Marelli No. 10, CF and PI 08347090964 (hereinafter referred to as "Golden Goose" or "GG") called “Golden Goose Arena MDW Party” on April 21st, 2026, at Viale Duilio 9, 20145, Milano (hereinafter the “Event”) and being informed that during the Event GG will take photos and videos of the participants for promotional purposes

AUTHORISE

Golden Goose and/or companies belonging to the group to which Golden Goose belongs to the use, reproduce, disseminate and publish, directly and/or indirectly (including but not limited to partners, consultants, suppliers, agencies, influencers), without territorial limits, of my image (hereinafter referred to as the “Image”) taken during the Event through: i) internal uses to the group to which Golden Goose belongs, through a) company email account, internal platforms, internal communications, and comparable channels, internal social media pages (including but not limited to the GoldenGooseFamily Instagram profile, Yammer, HRIS systems such as Cezanne, and/or Zucchetti), b) GG public social media account with business content (i.e., Linkedin), c) custom systems for training such as Training Hub, (d) other materials such as posters/frames for corporate head offices for internal communication and employer branding purposes; ii) external uses through a) digital tools – including but not limited – Golden Goose’s social media account (including but not limited to Linkedin, Instagram, Facebook, Tik Tok, we-chat, you tube, etc.), websites, e-commerce, applications, email account, communications and documents of a corporate/business nature (including but not limited to presentations, periodic reports, sustainability report), promotional and advertising contents and all other multimedia tools comparable, all the above referable to Golden Goose or to their business partners, b) not-digital - including but not limited – promotional and advertising contents, communications and documents of a corporate/business nature (including but not limited to presentations, periodic reports, sustainability report), communication and editorial material and tools comparable The undersigned is hereby informed that GG may decide a) not to use and/or share and/or reproduce and/or publish the Image or to use and/or share and/or reproduce and/or publish it only in some of the channels mentioned above, b) to use and/or share and/or reproduce and/or publish the Image for a time period decided by GG at its sole discretion, for a maximum of 12 months. The undersigned will not claim any compensation for the using and/or sharing and/or reproduction and/or publication of his/her Image through the above channels and activities that are the subject of this authorization.

INFORMATION PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679

A. Data Controller and Data Protection Officer

Your personal data will be processed by Golden Goose S.p.A., as better identified above as the autonomous data controller. Golden Goose has appointed a data protection officer who can be contacted at the following address privacy@goldengoose.com.

B. Purpose of processing

– Upon your express consent, Golden Goose intends to use your name, surname, email account and image collected during the Event (jointly referred to as the “Data”) for: i) internal uses to the group to which Golden Goose belongs, through a) company email account, internal platforms, internal communications, and comparable channels, internal social media pages (including but not limited to the GoldenGooseFamily Instagram profile, Yammer, HRIS systems such as Cezanne, and/or Zucchetti), b) GG public social media account with business content (i.e., Linkedin), c) custom systems for training such as Training Hub, (d) other materials such as posters/frames for corporate head offices for internal communication and employer branding purposes; ii) external uses through a) digital tools – including but not limited – Golden Goose’s social media account (including but not limited to Linkedin, Instagram, Facebook, Tik Tok, we-chat, you tube, etc.), websites, e-commerce, applications, email account, communications and documents of a corporate/business nature (including but not limited to presentations, periodic reports, sustainability report), promotional and advertising contents and all other multimedia tools comparable, all the above referable to Golden Goose or to their business partners, b) not-digital - including but not limited – promotional and advertising contents, communications and documents of a corporate/business nature (including but not limited to presentations, periodic reports, sustainability report), communication and editorial material and tools comparable v

C. Method of processing

- The data shall be mainly processed through computerised and data transmission instruments for reasons strictly related to the purposes for which they have been collected and, in any case, in such a way as to ensure their security and confidentiality in compliance with the applicable legislation.

D. Data retention period

- The data shall be stored for a time strictly related to the purpose for which they have been collected and processed and, in any case, for a maximum period of 12 months from the collection.

E. Provision of personal data and legal basis

- The provision of data is voluntary. Failure to provide such data will make it impossible for Golden Goose to use them for the purposes set out above. The legal basis for the processing is your consent. 

F. Transfer of Data

Your Data may be known and processed by (i) employees and consultants of Golden Goose, (ii) companies within the same group (iii) service providers and companies operating in the communications sector. Your Data may be transferred to third countries or to international organizations as a result of the transnational nature of the companies referred to in (ii) above. In this case, the Data will be transferred abroad only by ensuring adequate levels of protection and safeguards for the protection of such Data, in accordance with applicable regulations. The data centres used by GG to process the Data collected, are located on the territory of the European Union. In order to enable the processing of Data for the above purposes by Golden Goose group companies, the Data will be transferred to the relevant countries (including countries outside the EU). In this regard, GG with its subsidiaries and with its suppliers and business partners based in countries outside the EU, takes every measure needed to ensure a level of protection of personal data in accordance with the provisions of national and European legislation on the protection of personal data.
In any case, you may contact the owner for more information on the location of your Data.

G. Rights of the Data Subject

You may exercise your rights at any time by submitting your requests directly to the DPO (by writing to privacy@goldengoose.com), to ask for confirmation of the existence of your data, origin, purpose, updating, deletion, and to exercise your right to object, to be forgotten and to data portability. Please note that if you believe your rights have been infringed, you can always lodge a complaint with the competent authority (Autorità Garante per la Protezione dei Dati Personali [Italian Data Protection Authority]).



Reading and understood the above authorize Golden Goose to record and use my image as indicated above.

Authorize Golden Goose to process my personal Data as described above. I also understand that the use of my personal data may involve their using, reproduction, publication, dissemination for the uses above reported which may require necessary a transfer outside the EU, in accordance with applicable laws.