The data controller who is responsible for the processing of your personal data is:

Audi Motorsport AG, Wildbachstrasse 9, 8340 Hinwil, Switzerland.

If you have any questions or concerns regarding data protection, you may also reach out to us at: privacy@audif1.com

In accordance with the FADP, and, if applicable, the GDPR, we may, for example, collect, receive, or store the following personal data when you interact with us through or use our Webshop:

• Identity, Contact and Account Data, such as name, username, email address or customer ID, billing and delivery address, date of birth and gender (if provided).
• Account and authentication data, such as account/username, passwords, account ID and multi-factor authentication status.
• Size, Fit and Profile Data, such as clothing and shoe sizes, body measurements, fit-related information and other profile details provided voluntarily.
• Transactional and shopping-related data, such as items placed in a shopping cart, historical order references, preferences, size, activity or profile information, insofar as such data is either (i) associated with a registered customer account, or (ii) temporarily processed in connection with a guest session.
• Usage, Preference and Behavioral Data, such as browsing and purchase behavior, wishlists, product and size preferences, language and shop settings, feedback, ratings, and participation in campaigns or promotions.
• Communication data, such as support requests or technical correspondence, where personal data is included in the context of maintenance or troubleshooting.
• Technical and usage data, such as IP addresses, device identifiers, cookie IDs, session IDs, browser type and version, operating system and timestamps, insofar as required for the operation, monitoring and maintenance of the Webshop.
• System configuration and security-related data, including access logs, to the extent necessary to ensure availability, integrity and security of the Webshop.
• Marketing, Social Media and Loyalty Data, such as loyalty, rewards and referrals, including loyalty ID, point balances, tier status, earn/redeem history, referral codes and referred/advocate relationships.

We will only use your personal data if and to the extent that applicable law allows. We process your personal data for various purposes in accordance with the provisions of the Swiss Federal Data Protection Act (FADP) and the General Data Protection Regulation (GDPR).

3.1 How we process personal data under the FADP

Within the scope of the FADP, the principle of lawfulness (Articles 6, 30 FADP) applies, whereby private persons may process data without an explicit justification, provided that they comply with the general principles of data processing. These include, in particular, the principle of purpose limitation and the principle of data minimisation.

3.2 How we process personal data under the GDPR

Within the scope of the GDPR, the processing of your personal data must be based on one of the following legal bases:

• You have given your consent (Art. 6 para. 1 (a) GDPR)
• The processing is necessary for the performance of a contract or pre-contractual measures (Art. 6 para. 1 (b) GDPR)
• The processing is necessary to comply with a legal obligation (Art. 6 para. 1 (c) GDPR)
• The processing is necessary to protect vital interests (Art. 6 para. 1 (d) GDPR)
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 (e) GDPR)
• The processing is necessary to safeguard legitimate interests of Audi Motorsport AG or a third party, unless overridden by your interests or fundamental rights (Art. 6 para. 1 (f) GDPR)

If, in exceptional cases, we process special categories of personal data, one of the following additional legal bases must apply:

• You have given your explicit consent (Art. 9 para. 2 (a) GDPR)
• The processing is necessary to protect vital interests where consent cannot be given (Art. 9 para. 2 (c) GDPR)
• The data has been manifestly made public by you (Art. 9 para. 2 (e) GDPR)
• The processing is necessary to establish, exercise or defend legal claims (Art. 9 para. 2 (f) GDPR)
• The processing is necessary for reasons of substantial public interest (Art. 9 para. 2 (g) GDPR)

Building on the above, we process your personal data on the basis of the following legal bases for the following purposes:

Purpose	Legal Basis	Legitimate Interest in Balancing Interests
Provision, operation and maintenance of the Webshop to the general public, including enabling access, navigation and basic functionality, and making contact possible for customers and interested parties	Legitimate interests	We have a legitimate interest in making the Webshop available to users, ensuring that it can be accessed and used smoothly, and enabling users to get in touch with us.
Ensuring security, availability and integrity of the Webshop, including detecting and preventing misuse, unauthorised access and technical malfunctions	Compliance with legal obligations in the field of data security or legitimate interests	We have a legitimate interest in eliminating malfunctions, ensuring system security and detecting and tracking unauthorised access or attempted access.
Processing enquiries, feedback and other communications	Legitimate interests	We have a legitimate interest in responding to messages sent to us, addressing questions and comments, and maintaining effective communication with users.
Statistical analysis of website usage and continuous improvement of the Webshop’s functionality, performance and user experience (web analytics)	Legitimate interests, consent where required	We have a legitimate interest in receiving information about the use of the website, in particular to improve our offering.
Marketing, campaign measurement and optimisation, including social media interactions and loyalty features (if applicable)	Legitimate interests, consent where required	We have a legitimate interest in understanding how our content and initiatives are received, assessing their effectiveness and maintaining user engagement across different channels.
Safeguarding, exercising and defending legal claims	Legitimate interests	We have a legitimate interest in asserting and defending our rights.

Given the scope and complexity of the data processing activities carried out by Audi Motorsport AG, it is not feasible to name every individual recipient of personal data in this Privacy Policy. Instead, recipients are generally described by category.

Within Audi Motorsport AG, personal data is shared with those departments and entities that require access in order to meet contractual or legal obligations or to pursue legitimate interests (for example, IT or sales).

In addition, we may share your personal data with the following recipients, in compliance with the applicable legal requirements:

• Our affiliates
• Service providers (e.g. Webshop provider, tracking service providers, web agencies, hosting providers, IT service providers and content delivery network providers)
• External consultants of Audi Motorsport AG (e.g. law firms, tax consulting firms, auditing firms)
• Insurance providers
• Government authorities within the scope of their jurisdiction (e.g. tax authorities, police, public prosecutor’s office, courts)
• Other third parties, insofar as you instruct us to pass on data or give your consent

Personal data may be transferred to third countries (i.e. outside Switzerland, the European Union or the European Economic Area) where this is necessary for the provision of services to you, where required by law, or where you have provided your consent. In certain cases, personal data may also be disclosed to processors located in such third countries. This may include, in particular, your IP address.

Audi Motorsport AG will only transfer your personal data to third countries insofar as this is permissible under Articles 16–18 of the Swiss Federal Data Protection Act (FADP) and Articles 44–49 of the General Data Protection Regulation (GDPR). Where Audi Motorsport AG relies on appropriate safeguards for transfers to third countries in accordance with Article 16 para. 2 FADP and Article 46 para. 2 GDPR (e.g. standard contractual clauses (SCCs) or binding corporate rules), Audi Motorsport AG will take additional technical and/or organisational measures where necessary to ensure an adequate level of protection for your personal data.

To the extent necessary for the aforementioned purposes, we may transfer your personal data to countries that offer an adequate level of protection pursuant to the FADP and GDPR, in particular EEA countries and the United States (provided that the recipient is certified under the EU–US and Swiss–US Data Protection Framework (DPF)).

We may also transfer your personal data to countries which do not offer an adequate level of protection pursuant to the FADP and/or GDPR, such as the United States (if the recipient is not certified under the DPF), Netherlands and potentially other countries. In such cases, the transfer is secured by appropriate safeguards (such as SCCs, including amendments required under Swiss law) or is based on a statutory exemption (for example, where you have given your consent, where the transfer is directly connected with the conclusion or performance of a contract with you, or where the transfer is necessary for the establishment, exercise or enforcement of legal claims before a foreign authority).

Within the scope of the GDPR, you may request a copy of the relevant safeguards by contacting us as indicated at the beginning of this Privacy Policy.

We store your personal data for as long as this is necessary to provide our services to you or for as long as we have a legitimate interest in its further storage.

We only process and retain your personal data for as long as our processing purposes, the applicable legal retention periods and our legitimate interests regarding documentation require it. Except in the case of contrary legal or contractual obligations, we will erase or anonymise your personal data once the applicable storage or processing period has expired.

In general, we retain your personal data as follows:

• Webshop: Personal data collected through our Webshop is processed for as long as required to enable the requested access, ensure the stability and integrity of the relevant systems or perform analyses. Thereafter, such data is deleted or anonymised.
• Communication: Personal data used to communicate with you is deleted after responding to or completing your enquiry, provided that (i) we are not legally obliged to retain such data (e.g. for accounting or document retention purposes), and (ii) we do not have an overriding or legitimate interest in retaining the data for documentation, quality assurance, similar business purposes, or for the establishment, exercise or defence of legal claims.
• Business Development: Personal data used for business development or marketing purposes is generally retained for as long as necessary to achieve the respective purposes. Such data is deleted thereafter, provided that (i) no legal retention obligations apply, and (ii) no overriding or legitimate interests require its further retention for documentation, quality assurance, similar business purposes, or for the establishment, exercise or defence of legal claims.

As a data subject, you generally have the following data protection rights:

Right of access

You have the right to request information about the personal data stored about you by Audi Motorsport AG, the scope of the data processing and transfers carried out, and to receive a copy of the personal data stored about you.

Right to rectification

You have the right to request the immediate rectification of incorrect personal data concerning you, as well as the completion of incomplete personal data stored by Audi Motorsport AG.

Right to erasure

You have the right to request the immediate erasure of personal data stored about you by Audi Motorsport AG, provided that the legal requirements are met. This applies in particular if:

• Your personal data is no longer required for the purposes for which it was collected;
• The legal basis for the processing was exclusively your consent and you have revoked it;
• You have objected to processing based on a balancing of interests and no overriding legitimate grounds for processing can be demonstrated;
• Your personal data has been processed unlawfully; or
• Your personal data must be erased to comply with legal obligations.

If we have disclosed your personal data to third parties, we will inform them of the erasure where legally required. Please note that the right to erasure may be subject to statutory retention obligations or exclusions where data is required to assert, exercise or defend legal claims.

Right to restriction of processing

Under certain conditions, you have the right to request the restriction of processing of your personal data. This applies, in particular, if:

• You dispute the accuracy of your personal data and verification is required;
• The processing is unlawful, but you oppose erasure and request restriction instead;
• Audi Motorsport AG no longer requires the data, but you need it to assert, exercise or defend legal claims; or
• You have objected to processing and it has not yet been determined whether overriding legitimate grounds exist.

Where processing is restricted, the data will only be processed with your consent or for the establishment, exercise or defence of legal claims, or for reasons of overriding public interest.

Right to data portability

Where we process personal data based on your consent or a contract with you, you have the right to receive such data in a structured, commonly used and machine- readable format and to transmit it to another controller. Where technically feasible, you may also request direct transmission to another controller.

Right to object

Where we process your personal data on the basis of legitimate interests or in the public interest, you have the right to object to such processing for reasons arising from your particular situation. This also applies to profiling.

In the event of an objection, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims. You have an unrestricted right to object to processing for direct marketing purposes.

Right to revoke consent

Where processing is based on your consent, you may revoke your consent at any time with effect for the future. Processing carried out prior to the revocation remains lawful.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully. This right exists without prejudice to any other administrative or judicial remedy.

The competent supervisory authority under the Swiss Federal Data Protection Act is:

Federal Data Protection and Information Commissioner
Feldeggweg 1
CH-3003 Berne
Switzerland
https://www.edoeb.admin.ch

Depending on your place of residence, you may also have the right to lodge a complaint with the competent data protection authority in your country of residence.

When you visit our Webshop, either through your customer account or as a guest, we do not use automated decision-making in any of our data processing activities.

We may use information about your browsing behaviour to better understand your interests, whether you are logged into your customer account or visiting as a guest (for example, through cookies or similar technologies), in accordance with your consent preferences.

For marketing and analytical purposes, we may create customer profiles. For this purpose, your data may be linked with socio-economic data and publicly available information (such as weather data). This allows us to provide you with relevant content and personalised offers, to assign status or loyalty badges and benefits within loyalty programmes, and to evaluate and improve the effectiveness of our advertising, campaigns, products and services.

We also use audience management technologies to ensure that marketing messages and information reach you at the right time through appropriate channels. Subject to your consent, this may include sending you communications about offers and products or displaying advertisements via digital media on platforms operated by Audi Motorsport AG. The degree of personalisation depends on the permissions and choices you have provided. You may revoke your consent to receive marketing communications at any time (see section 7).

In addition, we analyse how you interact with our Webshop in order to better understand your interests and preferences. This includes analysing how you browse and use our services, which products and features are most relevant to you, how you respond to marketing and advertising campaigns, and how we can improve our customer service, product design, website experience and overall user experience.

Where appropriate, we may also use artificial intelligence technologies to support these activities and to deliver a more personalised experience.

This Privacy Policy does not form part of any contract with you and may be amended by us at any time.

The version published on our Website is the version that currently applies.

Last update: February 2026.