The data controller who is responsible for the processing of your personal data is:

Audi Motorsport AG, Wildbachstrasse 9, 8340 Hinwil, Switzerland.

If you have any questions or concerns regarding data protection, you may also reach out to us at: privacy@audif1.com

In accordance with the FADP, and, if applicable, the GDPR, we may, for example, collect, receive, or store the following personal data when you interact with us through or use our Webshop:

• Identity, Contact and Account Data, such as identity and contact information of end customers, such as name, username, email address or customer ID, billing and delivery address, date of birth,gender (if provided).
• Account and authentication data, such as account/username, passwords, account ID and multi-factor authentication status.
• Size, Fit and Profile Data, such as clothing and shoe sizes, body measurements, fit-related information and other profile details provided voluntarily.
• Transactional and shopping-related data, such as items placed in a shopping cart, historical order references, preferences, size, activity or profile information, insofar as such data is either (i) associated with a registered customer account, or (ii) temporarily processed in connection with a guest session.
• Usage, Preference and Behavioral Data, such as browsing and purchase behavior, wishlists, product and size preferences, language and shop settings, feedback, ratings, and participation in campaigns or promotions.
• Communication data, such as support requests or technical correspondence, responses to newsletters, or other general communications where personal data is included in the context of maintenance, troubleshooting, inquiries or other interactions with us
• Technical and usage data, such as IP addresses, device identifiers, cookie IDs, session IDs, browser type and version, operating system and timestamps, insofar as required for the operation, monitoring and maintenance of the Webshop.
• System configuration and security-related data, including access logs, to the extent necessary to ensure availability, integrity and security of the Webshop.
• Marketing, Social Media and Loyalty Data, such as you interactions with our marketing activities, loyalty, rewards, and referrals, such as loyalty ID; point balances; tier status; earn/redeem history; referral codes; referred/advocate relationships.

We will only use your personal data if and to the extent that applicable law allows. We process your personal data for various purposes in accordance with the provisions of the FADP and the GDPR.

3.1 How we process personal data under the FADP

Within the scope of the FADP, the principle of lawfulness (Articles 6, 30 FADP) applies, whereby private persons may process data without an explicit justification, provided that they comply with the general principles of data processing. These are set out in the FADP and include, for example, the principle of purpose limitation (data may only be collected and processed for a specific purpose) and the principle of data minimisation (data must be limited to the amount necessary for the purpose of the processing).

3.2 How we process personal data under the GDPR

Within the scope of the GDPR, the processing of your personal data must be based on one of the following legal bases:

• You have given your consent (Art. 6 para. 1. (a) GDPR)
• The processing is necessary in order to fulfil a contract with you or to fulfil pre-contractual measures taking place at your request (Art. 6 para. 1. (b) GDPR)
• The processing is necessary to fulfil a legal obligation under EU law or the law of an EU Member State to which we are subject (Art. 6 para. 1. (c) GDPR)
• The processing is necessary to protect your vital interests or those of another person (Art. 6 para. 1. (d) GDPR)
• The processing is necessary in order to perform a task assigned to us that is carried out in the public interest or in the exercise of official authority (Art. 6 para. 1. (e) GDPR)
• The processing is necessary in order to safeguard the legitimate interests of Audi Motorsport AG or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, in particular when pertaining to a child (Art. 6 para. 1. (f) GDPR)

If, in exceptional cases, we process special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data to uniquely identify a person, health data or data concerning sexual life or sexual orientation) about you, one of the following legal bases must also apply:

• You have given your express consent (Art. 9 para. 2. (a) GDPR)
• The processing is necessary in order to protect your vital interests or those of another person, and the data subject is unable to give his or her consent for physical or legal reasons (Art. 9 para. 2. (c) GDPR)
• The processing refers to personal data that you have manifestly made public (Art. 9 para. 2. (e) GDPR)
• The processing is necessary to assert, exercise, or defend legal claims (Art. 9 para. 2. (f) GDPR)
• The processing is necessary for reasons of substantial public interest on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject (Art. 9 para. 2. (g) GDPR)

Building on the above remarks, we process your personal data on the basis of the following legal bases for the following purposes:

Purpose	Legal Basis	Legitimate Interest in Balancing Interests
Provision, operation and maintenance of the Webshop to the general public, including enabling access, navigation and basic functionality, and for the purpose of making contact possible for customers and interested parties	Legitimate interests	We have a legitimate interest in making the Webshop available to users, ensuring that it can be accessed and used smoothly, and enabling users to get in touch with us.
Ensuring security, availability and integrity of the Webshop, including detecting and preventing misuse, unauthorised access and technical malfunctions	Compliance with legal obligations in the field of data security or legitimate interests	We have a legitimate interest in eliminating malfunctions, ensuring system security and detecting and tracking unauthorised access or attempted access.
Processing enquiries, feedback and other communications	Legitimate interests	We have a legitimate interest in responding to messages sent to us, addressing questions and comments, and maintaining effective communication with users.
Statistical analysis of website usage and continuous improvement of the Webshop’s functionality, performance and user experience (web analytics)	Legitimate interests, consent where required	We have a legitimate interest in receiving information about the use of the website, in particular to improve our offering.
Marketing (including newsletters and personalised marketing emails), campaign measurement and optimisation, including social media interactions and loyalty features (if applicable)	Legitimate interests, consent where required (note that you can unsubscribe from our newsletter and personalised email communications at any time by using the unsubscribe link at the bottom of our emails, adjusting your preferences in your customer account settings, or by contacting us at contact@audif1team.com	We have a legitimate interest in understanding how our content and initiatives are received, assessing their effectiveness and maintaining user engagement across different channels.
Safeguarding, exercising and defending legal claims	Legitimate interests	We have a legitimate interest in asserting and defending our rights.

Given the scope and complexity of the data processing activities carried out by Audi Motorsport AG, it is not feasible to name every individual recipient of personal data in this Privacy Policy. Instead, recipients are generally described by category.

Within Audi Motorsport AG, personal data is shared with those departments and entities that require access in order to meet contractual or legal obligations or to pursue legitimate interests (for example, IT or sales).

In addition, we may share your personal data with the following recipients (in compliance with the applicable legal requirements):

• Our affiliates
• Service providers (e.g. Webshop’s provider, Tracking service providers, web agencies, hosting providers and IT service providers, content delivery network providers)
• External consultants of Audi Motorsport AG (e.g., law firms, tax consulting firms, auditing firms)
• Insurance providers
• Government authorities within the scope of their jurisdiction (e.g., the tax authorities, police, public prosecutor's office, courts)
• Other third parties, insofar as you instruct us to pass on data or give your consent.

Personal data may be transferred to third countries (i.e. outside Switzerland, the European Union or the European Economic Area) where this is necessary for the provision of services to you, where required by law, or where you have provided your consent. In certain cases, personal data may also be disclosed to processors located in such third countries. This may include, in particular, your IP address.

Audi Motorsport AG will only transfer your personal data to third countries insofar as this is permissible under Articles 16–18 FADP and Articles 44–49 (GDPR). Insofar as Audi Motorsport AG is entitled to appropriate guarantees for transfer of data to third countries in accordance with Article 16 para. 2 FADP and Article 46 para. 2. GDPR (e.g., standard contractual clauses ("SCCs") or binding corporate rules), Audi Motorsport AG will take additional technical and/or organisational measures to the extent necessary to maintain adequate protection of your personal data

To the extent necessary for the aforementioned purposes, we may transfer your personal data to the following countries that offer adequate protection pursuant to the FADP and GDPR: EEA countries, Israel and USA (if the recipient is certified under the EU–US and Swiss–US Data Protection Framework ("DPF")).

We may also transfer your personal data to the following countries, which do not offer adequate protection pursuant to the FADP and/or GDPR: USA (if the recipient is not certified under the DPF), and potentially other countries. Such transfer is secured by appropriate safeguards (such as SCCs including amendments necessary under Swiss law) or based on a statutory exemption (e.g., if you have given your consent to the transfer, if the transfer is directly connected with the conclusion or performance of a contract with you or if the transfer is necessary for the establishment, exercise or enforcement of legal claims before a foreign authority).

Within the scope of the GDPR, you may ask us for a copy of the relevant safeguards by contacting us as indicated at the beginning of this Privacy Policy.

We store your data for as long as this is necessary to provide our services to you or for as long as we have a legitimate interest in its further storage.

We only process and retain your personal data for as long as our processing purposes, the legal retention periods and our legitimate interests regarding documentation require it. Except in case of contrary legal or contractual obligations, we will erase or anonymize your personal data once the applicable storage or processing period has expired.

In general, we retain your personal data as follows:

• Webshop: Your personal data collected through our Webshop will be processed for as long as required to enable the requested access, secure the stability and integrity of the relevant systems or required to perform the analysis. Thereafter, it will be deleted or anonymized.
• Communication: Your personal data used to communicate with you will be deleted after responding to / completing your inquiry if and to the extent (i) we are not legally obliged to retain such personal data (e.g., for accounting or document retention purposes), and (ii) we do not have an overriding or legitimate interest to retain such personal data for documentation, quality assurance or similar business purposes or for the assessment or exercise of, or defense against, legal claims.
• Business Development: We generally keep your personal data used for business development or marketing purposes for as long as necessary to achieve the respective purposes. Such data will be deleted thereafter if and to the extent (i) we are not legally obliged to retain such personal data (e.g., for accounting or document retention purposes), and (ii) we do not have an overriding or legitimate interest to retain such data for documentation, quality assurance or similar business purposes or for the assessment or exercise of, or defense against, legal claims.

As a data subject, you generally have the following data protection rights:

Right of access

You have the right to request information about the data stored about you by Audi Motorsport AG and the scope of the data processing and transfer carried out by Audi Motorsport AG and to receive a copy of the personal data stored about you.

Right to rectification

You have the right to demand the immediate rectification of incorrect personal data concerning you as well as the completion of incomplete personal data stored by Audi Motorsport AG about you.

Right to erasure

You have the right to request the immediate erasure of the personal data stored about you by Audi Motorsport AG if the legal requirements are met. This applies in particular if:

• Your personal data is no longer needed for the purposes for which it was collected;
• The legal basis for the processing was exclusively your consent, and you have revoked it;
• You have objected to processing on the legal basis of balancing of interests for personal reasons and we cannot demonstrate that there are overriding legitimate grounds for processing;
• Your personal data has been processed unlawfully; or
• Your personal data must be erased in order to comply with legal requirements.

If we have passed your data on to third parties, we will inform them of its erasure, insofar as this is legally required. Please note that your right to erasure is subject to restrictions. For example, we may not have to, or are not allowed to, erase any data that we have to keep for longer due to legal retention periods. Data that we need in order to assert, exercise or defend legal claims is also excluded from your right to erasure.

Right to restriction of processing

You have the right, under certain conditions, to request the restriction of processing (i.e., the marking of stored personal data with the aim of restricting its future processing). The preconditions for this are:

• You dispute the accuracy of the personal data, and Audi Motorsport AG must check the accuracy of the personal data;
• The processing is unlawful, yet you do not wish to have the personal data erased and instead demand the restriction of its use;
• Audi Motorsport AG no longer needs your personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims;
• You have objected to the processing and it is not yet clear whether the legitimate interests of Audi Motorsport AG outweigh yours.

In the event of a restriction of processing, the data is marked accordingly and, apart from its storage, is processed only with your consent or to assert, exercise or defend legal claims, or to protect the rights of another natural or legal person or for reasons of an important public interest of Switzerland, the EU or an EU Member State.

Right to data portability

Insofar as we process personal data about you that you have provided to us automatically on the basis of your consent or a contract with you, you have the right to receive the data in a structured, common and machine-readable format and to transmit this data to another controller without hindrance by Audi Motorsport AG. You also have the right to have the personal data transmitted to another controller directly by Audi Motorsport AG, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.

Right to object

If we process your personal data for legitimate interests or in the public interest, you have the right to object to the processing of your data for personal reasons. A prerequisite for this is that the data processing must be in the public interest or have taken place following a balancing of interests of the parties involved. This also applies to profiling.

Insofar as we base the processing of your personal data on a balancing of interests, we generally assume that we can prove compelling reasons worthy of protection, but will, of course, examine each individual case.

In the event of an objection, we will no longer process your personal data, unless:

• we can prove compelling grounds for the processing of this data that are worthy of protection and which outweigh your interests, rights and freedoms;
or
• your personal data serves to assert, exercise or defend legal claims

Furthermore, you have an unlimited right to object if we process your data for our direct marketing. Objections can be lodged in a non-formal manner and should, if possible, be sent to the contact details listed at the beginning of the Privacy Policy.

Right to revoke consent

If you have given your consent to the processing of your personal data, you can revoke it at any time. Please note that such revocation will only be effective for the future. Processing that took place before the revocation will not be affected by it.

Right to lodge a complaint

In addition, you have the right to lodge a complaint with a supervisory authority for data protection if you believe that your personal data is not being processed lawfully. This right to lodge a complaint exists without prejudice to any other administrative or judicial legal remedy.

The contact of the competent data protection supervisory authority within the scope of the FADP is:

Federal Data Protection and Information Commissioner
Feldeggweg 1
CH-3003 Berne
Switzerland
https://www.edoeb.admin.ch

Based on your residence, you may have the possibility to lodge a complaint with the appropriate data protection authority of your place of residence.

When you visit our Webshop, either through your customer account or as a guest, we do not use automated decision-making in any of our data processing activities.

We may use your browsing behaviour to better understand what interests you, whether you are logged into your customer account or visiting as a guest (e.g., through cookies or similar technologies), in accordance with your consent preferences.

For marketing and analytical purposes, we may create customer profiles. For this, your data may be linked by us with socio-economic data and publicly available information (e.g. weather data). This allows us to provide you with relevant content and personalised offers, to assign you status or loyalty badges and benefits within loyalty programmes, and to evaluate and improve the success of our advertising, campaigns, products, and services.

We also use audience management technologies to ensure that marketing messages and information reach you at the right time through the appropriate channels. This may, with your consent, include sending you communications about offers and products or showing you advertisements via digital media on platforms of the Audi Motorsport AG. The degree of personalisation depends on the permissions and choices you have provided. You may also revoke your consent to the receipt of marketing communications at any time (see section 7).

In addition, we analyse how you interact with our Webshop in order to better understand your interests and preferences. This includes assessing how you browse and use our services, which products and features you find most relevant, how you respond to marketing and advertising campaigns, and how we can improve our customer service, product design, website experience, and overall user experience.

Where appropriate, we may also use artificial intelligence technologies to support these activities and to deliver a more personalised experience.

This Privacy Policy does not form part of any contract with you, and we may amend it at any time.

The version published on our Website is the version that currently applies.

Last update: February 2026.