1. Information on the Collection of Personal Data and Contact Details of the Controller

   This privacy statement provides information on how Triumph handles your personal data when you use our website, apps, and other services. Personal data is any information that can be used to identify you.
   Each chapter is preceded by a brief overview summarizing its content. Click “More” below the respective overview to open the full chapter content and obtain further information.
   Please note that Triumph is not a single company, but rather a corporate group consisting of several entities. Not all of these companies provide services or process personal data. Therefore, only entities of the Triumph Group that are actually involved in the processing of personal data are listed below. References to “Triumph”, “we,” or “us” refer to these responsible entities.
   List of Triumph entities
   The controller in charge of data processing on this website/app is Triumph Intertrade AG, Richtiplatz 5, 8304 Wallisellen, Switzerland, Email: dpo@triumph.com.
   If you have questions or concerns regarding the processing of data by any legal entity of the Triumph Group, please contact us at dpo@triumph.com.

2. Scope of this Privacy Statement

   This privacy statement applies to all processing of personal data carried out by Triumph, unless the processing is limited to a specific application area, such as the website/app, online store, the MyTriumph loyalty program, or a store visit.

3. General Data Processing

   We only process personal data in accordance with applicable laws and for clearly defined purposes: to provide and fulfill your orders and accounts, to communicate with you, to ensure and improve our website/app, to personalize content and offers, and for marketing purposes.
   Depending on the nature and scope of your interaction with us, we process different categories of personal data. These include basic data, account and membership data, order data, payment data, delivery data, website/app usage data, preference and usage data, MyTriumph loyalty program participation data, content from reviews and user-generated content, and marketing and communication preferences.

   1. Basic Data

      We process the following information that you provide when registering or placing an order: name, billing and delivery address, email address, telephone number, date of birth (if provided), and comparable information.

   2. Account and Membership Data

      file settings and preferences.

   3. Order Data

      Information about your orders, in particular order history, sizes, prices, order and transaction data, shipping and delivery information, as well as returns and exchanges.

   4. Payment Data

      Payment-related information depending on the selected payment method. This may include partially masked credit card data, payment IDs with PayPal, Klarna, TWINT or Apple Pay. Full payment details are processed exclusively by the respective payment service provider.

   5. Communication Data

      Content and metadata of communications with you, such as emails, contact form inquiries, chat and CRM tickets, and call notes. Phone recordings are made only exceptionally and with prior consent.

   6. Website/App Usage Data

      Technical and usage-related data collected when accessing our website or app, such as anonymized IP address (where applicable), log data, device and browser information, average time spent, pages and products accessed. Some of this data is collected via cookies or similar technologies and is used to ensure operation and, with consent, for analytics and marketing purposes.

   7. Preference and Usage Data

      This includes information derived from your purchasing and usage behavior regarding your interests and preferences (e.g., preferred categories, brands, sizes, colors, or responses to marketing). Where possible, such data is pseudonymized and used to personalize content and offers.

   8. Content from Reviews and User-Generated Content

      If you create content on our website/app, such as product reviews or comments, we will process it for the purpose of publication. This includes text, ratings, and any uploaded photos or videos, as well as the name you choose to display. This content is visible to other users, therefore, you should not disclose confidential data. We use automated and manual moderation tools to screen user-generated content and remove or reject posts that are not product-related, inappropriate, or violate our community guidelines.

   9. Marketing and Communication Preferences

      Information about your consent, preferred channels and language settings for marketing communications, as well as opt-outs and interactions with marketing messages. We collect this data directly from you through your use of our services.

4. Data Processing When You Visit Our Website or App

   When you visit our website/app, we initially only process the access data required for technical reasons (server log files) to display the website/app, secure and stable.
   If cookies and tracking technologies are used for analytics or marketing purposes and we cooperate with advertising partners, this is done only based on your consent, which you can adjust or withdraw at any time via the cookie settings.

   1. Data collected when you visit our website/app

      When you visit our website/app, we collect the following data that is technically necessary to display the website/app to you and for security reasons:

      • Browser used
      • Operating system used
      • IP address used (if applicable: in anonymized form)
      • Our visited website
      • Date and time of access
      • Amount of data sent (in bytes)
      • Source/reference from which you came to the page

      This information is necessary to deliver content to your device, distribute the load on our servers, and defend against attacks, such as via firewalls and fraud prevention. This basic processing is based on our legitimate interest in providing a secure and smoothly functioning online service. We only process this technical data to the extent necessary to provide and secure our website/app. The data will not be shared or used in any other way. However, we reserve the right to review the server log files subsequently if there are concrete indications of illegal use.

      Where we use cookies and trackers for analytics or marketing purposes, we rely on your consent. You can refuse consent or withdraw it at any time with effect for the future.

   2. Push Notifications

      Our website and apps may send you push notifications about specific events, offers, or updates, even when you are not actively browsing or using the app. You can disable push notifications at any time via your browser settings, device settings, or in-app settings.
      To enable push notifications, your browser or device receives a unique push ID, a randomly generated, encrypted identifier necessary for technical delivery. This ID does not contain any personal information.

5. Data Processing When You Shop in Our Online Store

   When you shop in our online store, we process your data to accept, process, pay for, deliver, and, where applicable, handle returns or refunds, either as a guest or using a MyTriumph customer account. For this purpose, we use your basic data, order data, payment data, and communication data and transmit them, where necessary, to payment and shipping service providers.
   Processing is carried out primarily for the performance of a contract. This also includes upstream and downstream processes such as handling returns, warranty claims, or refunds.
   In addition, we use procedures for fraud prevention based on our legitimate interest in preventing misuse and payment defaults.
   17. ### Shopping as a Guest If you shop as a guest in our online store, we only collect the data necessary to process the specific order. This includes organizing and delivering the goods, processing payment, and handling any reversals, such as returns and refunds. This includes your basic data, order data, payment data, and shipment tracking information.
   18. ### Shopping with a MyTriumph Customer Account If you shop in our online store using a MyTriumph customer account, in addition to the data required for the specific order (basic data, order data, payment data, and shipment tracking information), we also process account and membership data and communication data to enable you to use the account and MyTriumph features (e.g., saved addresses, order overview, member benefits).
   19. ### Order-Related Communications We use your contact information to send you order-related messages, including order confirmations, invoices, shipping confirmations with tracking information, notifications of delivery issues, refund confirmations, etc., or actions related to your order. These communications are sent to fulfill a contract.
   20. ### Fraud Prevention For your protection and ours, we use automated procedures to detect potential fraud patterns, such as unusual order configurations that could indicate credit card misuse or identity theft. In such cases, we reserve the right to temporarily put orders on hold or reject them. We have a legitimate interest in this processing, namely the prevention of fraud.

6. MyTriumph Loyalty Program

   If you participate in the MyTriumph loyalty program, we will process your data in order to manage your membership account, credit qualifying purchases, provide member benefits, and, depending on your settings, inform you about program services, promotions, and events. This may also include personalized content and recommendations based on your usage and purchasing behavior within the program.
   Processing is primarily carried out to take steps prior to entering into a contract and/or to perform the MyTriumph loyalty program contract and, where required, based on your consent.
   We also rely on our legitimate interest for analyses for program and existing customer marketing purposes. You can terminate your MyTriumph membership at any time.

   1. General Information on the MyTriumph Loyalty Program

      If you participate in our MyTriumph loyalty program, we process your basic data, account and membership data, order data, payment data, website/app usage data, preference and usage data, content from reviews and user-generated content, marketing and communication preferences as well as the products you add to your wish list.
      We also process data related to your MyTriumph membership, such as member benefits, participation history, where applicable the store of registration, events or promotions you participated in, and other program-related information you provide voluntarily.
      The MyTriumph loyalty program offers you various benefits. For example, you can view your order history, save delivery addresses, handle returns more easily, and receive various member benefits.
      We process your contact and registration data to inform you personally about the MyTriumph loyalty program, manage your account, and provide related services and benefits. If you have given consent, we also use this data for marketing communications.
      In connection with your participation in the MyTriumph loyalty program, we may show you personalized content tailored to you, such as product recommendations based on your previous purchases. The legal basis is either our legitimate interest in customer-oriented offers or your consent, where legally required.

   2. Redeeming MyTriumph Member Benefits

      When you redeem your member benefits or participate in exclusive promotions, we process the data required for this purpose. For example, we record which benefit you redeemed and when. If benefits are provided by third parties (e.g., an external experience provider), we share the necessary data, usually a reference number, or your name and email address where required, with that partner.

   3. Analysis of Your Usage and Purchasing Behavior for Program Purposes

      We analyze your purchases and interactions within the MyTriumph loyalty program in order to provide you with personalized offers and to tailor the MyTriumph loyalty program to customer needs. The analysis is based on our legitimate interest in designing the program effectively and in conducting targeted marketing to existing customers and, where necessary, on your consent. You can stop data processing for marketing purposes by leaving the MyTriumph loyalty program at any time.

   4. Communications and Services for the MyTriumph Loyalty Program

      As part of the MyTriumph loyalty program, we will contact you to inform you about exclusive events, personalized promotions, or other information related to the program. If you contact our customer service with program-related inquiries, our staff access your MyTriumph data to help you.
      Processing of your data in connection with the MyTriumph loyalty program is carried out for the performance of the contract and, where required, based on consent. The same data protection principles apply to the offline elements of the MyTriumph loyalty program (e.g., VIP services in our stores) as to the online elements.

7. Data Processing When You Visit Our Stores

   To provide efficient, secure, and consistent service in our stores, systems, technologies, and data related to the MyTriumph loyalty program are shared within the Triumph Group and with stores. Stores may be operated by third parties (e.g., franchisees). Only those employees of these companies have access to your data to the extent required to fulfill contractual or legal obligations.

8. Data Retention

   The storage period for personal data is determined by the respective statutory retention periods (e.g., commercial and tax retention obligations). After the retention period expires, the data is routinely deleted unless it is still necessary for contract performance or pre-contractual measures and/or we have a continuing legitimate interest in further storage.
   For orders, the applicable legal retention periods apply (e.g., for invoices). After that, the data is deleted. However, MyTriumph loyalty program participants may still be able to access order-related data (e.g., order history, invoices) in their membership account to view their previous purchases.
   MyTriumph account data is stored for as long as the account exists and/or the membership is active. If you delete your account, or if we close it after long inactivity in accordance with our policies, the associated personal data will be deleted or anonymized.

9. Single Sign-On (Login via Third-Party Providers)

   You have the option to sign up for the MyTriumph loyalty program using SSO services. This means that you can use an existing account with a third-party provider such as Google, Apple, Facebook (Meta), or other platforms to register or log in. Please note that we have no influence over the respective third-party provider’s data processing. The privacy statement of the respective third-party provider applies to the authentication process. The third-party provider will know that you are logging in to our services using your account with them. You may also be able to view and control which data the third-party provider will transmit to us. This typically includes your salutation, full name, email address, date of birth, gender, preferred language, and your profile picture. This information is used by Triumph only for authentication and to improve your experience. Triumph does not share this information with third parties without your explicit consent.
   You may withdraw your consent to use SSO at any time by changing the settings in your user account.
   For more information about the data processing practices of each SSO provider, please refer to their respective privacy statements.
   Using SSO is voluntary and initiated by you. The related processing (exchange of profile data for login) is carried out to perform the login method you requested and provide access to your account with us. To the extent the respective third-party provider transmits your data to us as an independent controller, this is based on your consent given to that provider. Please note that you may have consented with the SSO provider to its collection of information about your use of our services and the website/app. We have no influence over the provider’s further use of this information.

10. Product Reviews and Other User-Generated Content

    On our website/app, you may be able to submit product reviews or publish other content, such as comments or questions about products. If you make use of this feature, we process the data you provide to display and manage the content on our website/app.
    You can review products in text form, assign a rating on a scale (e.g., stars), and upload photos. We process the content you enter, your chosen display name, and any voluntary information you provide, such as age range or place of residence. We recommend that you do not use your real name as your display name to protect your privacy. Please remember that mentioning personal data about yourself or third parties in free-text reviews will be visible for the public.
    Before a review is published on our website/app for the relevant product, we may moderate it (i.e., check for offensive content, spam, or obviously false statements) and reject publication where necessary to ensure factual and fair content. You are responsible for the content of your review. We may link the review with your MyTriumph loyalty program account for verification purposes.
    Publication of a review is voluntary and constitutes processing based on your consent. By submitting a review, you consent to our processing of it for publication and to displaying it on our website/app indefinitely.
    This also applies to other content you may create when participating in forums, blogs, or social media-like functions on our website/app.

11. Newsletter and Advertising

    We use your data to send you information and offers, deliver targeted advertising, measure the success of our marketing efforts, provide personalized product recommendations, and offer the best possible shopping experience. This includes evaluating reactions to newsletters and advertising, personalized product recommendations, and communication via social media channels and our customer service.
    You can opt out at any time by unsubscribing, withdrawing consent, or objecting to direct marketing.

    1. Email Newsletter

       By signing up for the MyTriumph loyalty program, we use your email address to send you regular information about our products, promotions, offers, and news. This is sent based on your consent.
       As a MyTriumph loyalty program member, you will receive newsletters. For this purpose, we may process, in addition to your email address, further voluntary information (e.g., name, preferred product categories, or birthday). If you have consented, we also process usage data about opening and clicking newsletters using tracking pixels to personalize content and evaluate campaigns. Tracking can be technically blocked or ended by unsubscribing.
       If you provided your email address when making a purchase and you are not a MyTriumph member, but are already a customer, under certain circumstances, we may also use your email address to send you direct advertising for similar products that you have purchased from us. This form of existing customer advertising by email is only carried out to the extent permitted by law. You can, of course, object to this form of email advertising at any time.

    2. Messages via a Messenger Service

       In addition to newsletters, we offer direct communication via messenger services (e.g., WhatsApp) in the form of a WhatsApp newsletter or broadcasts.
       If you consent to receive promotional messages via a messenger service, we use your mobile number to send you messages via the messenger service, such as information about new products, offers, or personalized recommendations. Registration for messenger communication is separate from email consent and usually involves actively sending us a specific start message, using a join link, or completing and confirming a registration form.
       Please note that when using messenger services, the terms of use and privacy statements of the respective messenger service apply. It is certain that messenger services process your phone number as well as the chat content.
       When communicating via a messenger service, personal data may also be transferred to servers outside the EU/EEA, in particular the United States or other countries.
       We use either the official business solutions of the respective messenger services or an authorized service provider as an intermediary to send these messages. We ensure that EU Standard Contractual Clauses or comparable safeguards are in place to provide an adequate level of data protection.

    3. Online Advertising, Retargeting and Affiliate Marketing

       Our company places online advertisements on various platforms and websites. For this purpose, we use targeting technologies to deliver ads in a targeted manner and to measure their effectiveness. This ensures that our ads are shown primarily to individuals who are likely interested in our products and, conversely, that you are shown only relevant advertising. Below we explain the key forms.

       1. Retargeting and Personalized Ads

          When you visit our website/app, we collect, subject to your cookie consent, certain information about your usage behavior using third-party tools (e.g., products you viewed or put in your cart). This information is stored in cookies or similar identifiers.
          If you subsequently visit other websites or social networks, our advertising partners may recognize you via these cookies and show you targeted ads (retargeting). For example, the Facebook pixel (Meta) enables Facebook/Instagram to show you an ad for a product you viewed in our store.
          Similarly, Google Ads uses cookies so that our ads in the Google advertising network are shown only to users who previously visited our site.
          This data is processed in a pseudonymized form. If you have provided us with your email address and have given your consent, we transmit it in hashed (encrypted) form to our advertising partners to enable more targeted advertising on other platforms. We do not receive information identifying you personally, we only receive aggregated campaign reports.
          Conversely, we can use such pixels to measure our advertising campaigns, for example, by recording whether you completed a purchase after clicking our ad (conversion tracking). This enables us to determine which campaigns are successful.
          We use advertising and retargeting services such as Google Ads, Meta Pixel, Microsoft Advertising, RTB House and, where applicable, Criteo or TikTok. These services collect pseudonymized usage data using cookies or similar technologies and transmit it to the respective providers. Profiling and targeted delivery of advertising is carried out under the responsibility of the respective provider. We only receive aggregated audience options.
          Data processing is carried out on the basis of appropriate data processing agreements and/or joint controllership arrangements. Further information and settings can be found in the privacy statement of the respective providers.

       2. Affiliate Marketing

          We work with affiliate partners who advertise our products and receive a commission for successful referrals. For this purpose, we use tracking technologies such as affiliate cookies or identifiers, exclusively with your consent to attribute orders to a partner.
          We only transmit pseudonymized order information such as order ID, order value, currency, voucher code (if used) and the purchased products. No personal customer data is shared.
          Non-essential tracking and marketing measures are carried out only on the basis of your consent, which you provide via the cookie banner and can withdraw at any time in cookie settings or your browser.

    4. Analytics and Personalized Product Recommendations

       We want to provide you with a tailored shopping experience. Therefore, we use some of your data for analytics purposes, i.e., we analyze or predict certain personal aspects about you, in particular your preferences and interests related to our product range. Based on these analyses, we can offer personalized product recommendations and content on our website, in our app, or as individual offers via various channels.
       In no case do these analytics lead to decisions that produce legal effects for you or similarly significantly affect you (e.g., an automated refusal of a contract without human involvement). The sole purpose is to show you more relevant offers.
       For analytics, we process in particular your purchase history (e.g., items purchased, seasonality, return rate), your usage behavior on our website/app (e.g., frequently viewed products, cart contents, filters used, searched sizes, favorites), and, where applicable, other interaction data (e.g., participation in promotions, reactions to newsletter content, clicks).
       We may use this information to create internal usage and interest models. For example, we might assign you to certain fashion style groups based on purchases or recognize that you prefer sportswear. This allows us to highlight similar items on your next visit or show products that match your model first.
       Our personalization is partly based on pseudonymized, algorithm-assisted analyses of usage behavior to deliver product recommendations and content (e.g., “Customers who bought X are also interested in Y”). Users are categorized into behavior-based segments. Direct identification does not occur, and linking to a customer account may only occur upon login.
       If you are logged in or shop as a registered customer, we may link session-based usage and interest models with the data stored in your account to obtain a more holistic picture. When you access our website/app via a link from our email campaigns, the URL may contain your customer ID, which enables us to recognize you as a registered customer and provide personalized content without requiring an active login action.
       All of these uses serve the purpose of offering you more relevant products and making our marketing more efficient.
       The described analytics are carried out on the basis of your consent. Where consent is not required, we base processing on our legitimate interest in providing personalized and relevant content and avoiding irrelevant mass advertising.
       You can withdraw your consent at any time with effect for the future or object to processing for direct marketing purposes at any time.
       The analytics described here are limited to your behavior in connection with our website/app, and services. We do not perform extensive scoring or profiling using external data (e.g., credit scoring). In particular, no automated decision-making takes place that produces legal effects for you or similarly significantly affects you.

    5. Unsubscribe and Withdrawal

       You can unsubscribe from newsletters and/or messenger marketing at any time. Each email contains an unsubscribe button that allows you to opt out easily. For messenger services, it is sufficient to send us a message with “STOP”. We will then remove you from the distribution list.
       Please note that processing your unsubscribe request may take a few business days.
       Email and messenger marketing, where not permitted as existing customer marketing, is carried out exclusively on the basis of your prior consent. This also includes evaluation of usage behavior in connection with the newsletter.

    6. Note on Data Transfers

       Many of our advertising partners (e.g., Google, Facebook/Meta) are based outside the EU/EEA, particularly in the United States. If you consent to our use of their cookies, you also consent to a possible transfer of data to these countries.
       These providers are contractually obliged by EU Standard Contractual Clauses to maintain a level of data protection comparable to that in the EU. Nevertheless, there is a risk (e.g., in the United States) that authorities may access data without you having EU-level legal remedies.
       You can withdraw your consent at any time with effect for the future.

12. Social Media Presences and Plugins

    We maintain presences on various social media platforms and, depending on activation, use social plugins or embedded content such as videos or feeds. Interactions on these platforms may be visible, aggregated statistics (insights) may be provided, and, if plugins are activated, data may be transferred to the respective provider.
    In addition, we process your contact and communication data if you contact us via social media or other channels for service inquiries.

    1. General Information on Our Social Media Use

       We use various social media platforms to communicate with customers and prospective customers, as well as to showcase our brand and products. These include Facebook, Instagram, YouTube, Pinterest, TikTok and other platforms.
       If you visit one of our official pages on these networks, the terms of use and privacy statements of the respective operator apply. Please note that we may be share responsibility with the platform operator for certain processing activities, such as the creation of anonymized usage statistics (insights data) on Facebook fan pages. Meta (Facebook) provides an agreement for joint controllers under which Meta assumes primary responsibility for processing insights data. Similar principles may apply to other platforms where applicable.

    2. Data Processing on Social Platforms

       If you interact with us on social media, this content is visible within the respective platform and may be shown to us. We do not store it outside the platform.
       We use social media for communication, reach analysis, and market research. The platforms provide us only with aggregated evaluations (e.g., demographics of page visitors), not individual profile data. Further processing is carried out under the responsibility of the respective providers, and their privacy statements apply.

    3. Social Plugins and Embedded Content

       We may use social plugins or integrations on our website/app (e.g., from Facebook/Meta, Pinterest, Instagram, TikTok or YouTube). These are disabled by default or designed so that no data is transmitted to providers initially.
       A connection to the respective provider is only established when you actively use them (e.g., click “Share” or play a video). Personal data such as IP address, cookie ID, time of visit, and the fact that you visited our website/app may be transmitted and, if you are logged in to the provider, may be linked to your profile.
       Alternatively, simple links may lead to our social media presences without transmitting data from our website/app.
       Processing in connection with our social media presences and plugins is based on our legitimate interest in a modern corporate presence and communication with (potential) customers.
       Data transfer to the respective provider through activation of a plugin is based on your consent. We have no influence on further processing by providers; their privacy statements apply.

13. Customer Service and Communication

    We process your contact and communication data to handle inquiries about orders, accounts, and products and to provide support. Depending on the matter, information from your customer account may also be included.
    Calls may be recorded with your prior consent, which is requested via our interactive voice response (IVR) system at the beginning of each call. Support cases are stored only as long as necessary for service, documentation, and legal obligations.
    Processing of your data in customer service is carried out, depending on the case, for performance of a contract (as customer service is considered an ancillary service to the purchase contract) or, where not required, based on our legitimate interest in efficient and high-quality customer service, with processing limited to what is necessary.

14. Cookies and Similar Technologies

    We use cookies and similar technologies to make your visit to our website and app attractive, enable certain functions, ensure the stability and security of operations, and analyze usage behavior.
    Some cookies are deleted when you close your browser (session cookies). Others remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser when you visit again (persistent cookies). Persistent cookies are automatically deleted after a defined period.
    Similar technologies include local storage (which can store larger amounts of data in the browser), pixel tags (invisible image/code elements that transmit information when loaded), etc. For simplicity, we refer to all of these as “cookies” below.

    1. What Are Cookies?

       Cookies are files that store information on your device. When accessed later, these files can be read to “recognize” information. Cookies typically have a retention period.

    2. Cookie Categories

       Below we explain which categories we use, what purposes they serve, and the legal bases on which they rely.

       1. Strictly Necessary Cookies

          These cookies are technically required for our website/app and certain functions to work properly. This includes, for example, cookies for cart and session management, login, security purposes (e.g., detecting abusive access), and storing your cookie settings.
          Without these cookies, our website/app will not function properly. We base this processing on our legitimate interest in providing a functional and secure website/app and the services you request and, where applicable, on performance of a contract.

       2. Functional Cookies

          Functional cookies enable enhanced functions and personalization (e.g., saving settings, preferred languages, or login information). They improve convenience but are not strictly necessary. We set these cookies only with your consent or when the function is provided at your explicit request.

       3. Performance/Analytics Cookies

          Performance/analytics cookies help us understand how our website/app is used (e.g., which pages are accessed how often, time spent, how users reach us via campaigns, whether errors occur). We generally use this information in aggregated form to measure performance, identify errors, and improve our offering. We use these cookies only with your consent.

       4. Cookies for Marketing Purposes

          Marketing cookies help us display relevant ads and content, and measure the effectiveness of our marketing efforts. They allow us and our partners to recognize, for example, which products you viewed, whether you clicked an ad, and whether you subsequently made a purchase (conversion tracking, remarketing, affiliate tracking). This may include cookies and similar technologies from third parties such as advertising networks and social media platforms. We use these cookies only with your consent.

    3. Recipients and Transfers to Third Countries

       In connection with cookies and similar technologies, personal data may be shared with service providers and partners who act as processors for us (e.g., hosting, analytics, and marketing service providers) or as independent controllers (e.g., web analytics, advertising, and social media providers). Data may also be transferred to countries outside the EU/EEA, in particular the United States.
       In such cases, we ensure that either an adequate level of data protection exists (e.g., by an adequacy decision) or appropriate safeguards are in place. Further details about individual providers can be found in our cookie consent management tool.

    4. Storage Period

       Some cookies only remain for the duration of the current session and are deleted when the browser is closed. Other cookies (persistent cookies) remain on your device for a longer, purpose-related period and are deleted automatically after expiration. You can find the specific storage period for each cookie in the overview in our cookie consent management tool.

    5. Similar Technologies

       In addition to traditional cookies, we use other storage and tracking technologies, such as local/session storage (which stores certain settings or status information in the browser), pixels and web beacons (small, invisible image elements or code snippets that record opens, clicks, and other usage data), and advertising IDs in apps (device-bound advertising identifiers such as IDFA or Advertising ID). Where these technologies are not strictly necessary, we use them only with your prior consent. Control is analogous to cookies via your browser or device settings.

    6. Further Information

       Details about the individual cookies and trackers we use (e.g., name, purpose, category, storage period, first- or third-party) can be found directly in our cookie consent manager (see footer).

15. Disclosure of Personal Data to Third Parties

    As part of our business processes, we work with internal and external parties to whom we may disclose personal data depending on the purpose. Disclosure occurs only to the extent necessary to carry out our business processes, permitted or required by law, and subject to appropriate security measures.
    Recipients may include companies of the Triumph Group, IT and hosting service providers, logistics and shipping service providers, payment service providers and banks, customer service providers, analytics and marketing service providers, advertising and affiliate partners, credit agencies, authorities, courts and advisors, and marketing dispatch service providers.

    1. Companies of the Triumph Group

       Within the Triumph Group, systems and technologies are used group-wide to enable efficient, secure, and consistent service. Accordingly, only those companies and departments have access to your data that need it to fulfill contractual or legal obligations or for their respective tasks within the group. All entities are committed to a uniform level of data protection.

    2. Technical Service Providers

       In order to provide our services, we work with technical service providers outside the Triumph Group. These providers process data solely on our behalf on the basis of data processing agreements. To the extent data is processed outside the EU, we ensure via contractual or other appropriate safeguards that an EU-equivalent level of data protection is maintained.

    3. Payment Providers and Banks

       Triumph offers various payment methods. To process payments, we transmit payment-related data to the selected payment provider, which processes that data as an independent controller. The privacy statements of the respective payment provider apply.
       • Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, The Netherlands, Privacy Statement
       • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg, Privacy Statement
       • Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, Privacy Statement
       • Apple Pay, Privacy Statement

       1. Additionally in Switzerland

          TWINT AG, Stauffacherstrasse 41, 8004 Zürich, Switzerland, Privacy Statement

       2. Additionally in Germany

          Stored Value Solutions UK Limited, Briennerstraße 9, 80333 München, Privacy Statement

       3. Additionally in Denmark

          Vipps MobilePay AS, Havneholmen 29, 6th floor, 1561 Copenhagen V, Denmark, Privacy Statement

       4. Additionally in The Netherlands

          Currence iDEAL B.V., P.O. Box 95301, 1090 HH Amsterdam, The Netherlands, Privacy Statement

    4. Logistics and Shipping Service Providers

       In order to fulfill orders, we transmit necessary delivery and contact data (such as your name, delivery address, and, where applicable, your email address or phone number) to logistics partners.

    5. Customer Service Providers

       Our outsourced customer service processes customer data solely for the purpose of handling inquiries and in accordance with our instructions.

    6. Analytics and Marketing Service Providers

       For web analytics and marketing, we use external services that process pseudonymized usage data either on our behalf or as independent controllers. This only occurs to the permissible extent and, where applicable, with your consent. For sending newsletters, transactional, or messenger messages, we use specialized service providers as processors.

    7. Advertising and Affiliate Partners

       As part of our affiliate programs, we transmit pseudonymized order information such as order ID and basket value. Personal customer data is not shared.

    8. Authorities, Courts and Advisors

       We may disclose data to third parties if we are legally obliged to do so or if necessary to assert or defend legal claims.

    9. Artificial Intelligence

       We use generative artificial intelligence providers to optimize our offerings, products and to personalize content. If processing occurs outside the EU, we ensure through appropriate contractual or other safeguards that an equivalent level of data protection is maintained.

    10. Cooperations

        If we conduct promotions or other marketing campaigns together with partner companies, personal data collected as part of the respective campaign may be disclosed to these partners if necessary to conduct or process the campaign (e.g., to provide benefits or prizes).

    11. Store Operators

        The Triumph Group operates stores worldwide that are operated not only by the Triumph Group itself but also by legally independent third parties such as franchisees or distribution partners.
        To use our central systems and to process business activities (e.g., sales, customer service, returns, MyTriumph loyalty program), it may be necessary for personal customer data to be transmitted to these third parties.
        Where stores are operated by third parties, they process data either as processors on our behalf or, depending on the specific setup, as independent controllers.
        In all cases, we ensure that data is disclosed only to the necessary extent and that appropriate contractual and organizational measures are in place to ensure an adequate level of data protection.

16. International Data Transfers

    Our business processes and the aforementioned service providers are partially international. This means that personal data may be processed in countries outside the European Union (EU) and/or the European Economic Area (EEA).
    In particular, some of our technology partners are based in the United States, or service providers’ support teams operate in countries such as India or the Philippines.
    We may also operate our website/app in countries outside the EU, which can require internal Triumph Group data flows.
    For transfers to countries without an adequate level of data protection, we implement appropriate safeguards to ensure protection of your data. These include, in particular, EU Standard Contractual Clauses, Binding Corporate Rules, and, where necessary, supplementary technical and organizational measures.
    In exceptional cases, we rely on statutory derogations, such as your explicit consent or the necessity for performance of a contract.
    Where an adequacy decision exists for the EU or Switzerland, transfers are based on that decision.

17. Storage Period and Deletion

    We only store personal data for as long as necessary for the purposes for which it was collected for, or as required by law. After the processing purpose ceases to apply or after statutory retention periods expire, the data is routinely deleted or anonymized.
    Different categories of data and purposes are subject to different deletion periods. For example, your order and payment data are subject to statutory retention obligations and are stored for up to ten years, in particular for tax and commercial law purposes.
    Where there is no retention obligation, data may be restricted instead of deleted, for example for contract processing or for asserting or defending legal claims. Statutory limitation periods apply.
    Anonymous or pseudonymized data may be further processed beyond the deletion period in legally permitted cases for scientific or statistical purposes.

18. Data Security

    Your personal data is transmitted securely using SSL encryption, especially for orders and customer logins.
    In addition, we have implemented comprehensive technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or destruction.
    These measures are reviewed regularly and adjusted to the state of the art to ensure a level of protection appropriate to the risk.

19. Your Rights

    The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, as described below.

    1. Your Rights

       • Right of access by the data subject
       • Right to rectification
       • Right to erasure (“right to be forgotten”)
       • Right to restriction of processing
       • Right to data portability
       • Right to withdraw a given consent
       • Right to object to certain processing
       • Right to lodge a complaint
         
         Notes:
         The competent supervisory authority depends on the seat of the controller.
         You can withdraw consent at any time with effect for the future. The lawfulness of processing carried out up to that point remains unaffected.
         You can object to processing for advertising purposes, including direct marketing, at any time.
         Where processing is based on legitimate interests, you also have a right to object. In such cases, we will review the processing and, where applicable, stop it or set out our compelling legitimate grounds.

    2. RIGHT TO OBJECT

       IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
       IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.
       IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING.
       IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

    3. Automated Individual Decision-Making, Including Profiling

       As stated in this privacy statement, we do not make decisions that produce legal effects for you or similarly significantly affect you solely by automated means.
       If, exceptionally, this were to occur, you have the right not to be subject to such a decision and to express your point of view and request review by a person. We will ensure appropriate measures for human intervention. This right does not apply where automated decision-making is necessary to enter into or perform a contract or is based on your consent, neither of which applies here.

    4. Information Related to Profiling

       We do not carry out profiling that involves automated decision-making with legal effects or similarly significant impact.
       However, we analyze certain aspects of your usage and purchasing behavior (e.g., categories visited, purchase frequency, preferred products) to segment you into target groups and show you tailored content and product recommendations.
       This analysis is based on your behavior on our website/app and is carried out either on the basis of your consent, where collected via cookies or trackers, or on the basis of our legitimate interest in providing a relevant and user-friendly shopping experience.
       You have a right to object to this processing. If the analysis is carried out for direct marketing purposes, you can object at any time without giving reasons.
       If you wish to exercise your data subject rights or your right to object, please email us at dpo@triumph.com. For newsletter emails, you can also unsubscribe via the unsubscribe link in the respective email.

20. Version and Changes to this Privacy Statement

    This version of the privacy statement is currently valid. We reserve to amend it and update at any time along with changes in our processing of data, the law or for any other reason.

Version February 2026.