FOSSIL SMARTWATCHES PRIVACY NOTICE

Last Updated: November 1, 2020

At Fossil Group, Inc., ("Fossil Group”, “Fossil", "we", or “us”) we value and protect your rights to data protection and privacy. This Privacy Notice describes:

What Personal Information we collect from the Fossil Smartwatches App, Fossil Smartwatches Watch Apps, and Fossil Smartwatches Device and the purposes for which we use it.
What Personal Information we transfer to third parties.
Your rights and how you can execute such rights.
How you can contact us.

1. Summary

In the following we will provide you a quick summary of which personal information we use for which purposes and about your rights. For more details go to the relevant Sections below.

1.1 Service Provision

We process Personal Information about you in order to provide you with the full range of services and features of your Fossil Smartwatches App, Fossil Smartwatches Watch Apps, and Fossil Smartwatches Device. This includes data you enter when setting up your user account and information required in order to receive specific features. For example, for distance and pace measuring, or calculation of calories burned, we might require information about your height, weight, heart rate, and geolocation or to participate in the fitness challenge functionality we may ask you to create a username and provide a photo or avatar; for other functionality you may authorize us to access your camera roll (for further information go to sections 3.1-3.7 below).

1.2 Analytics

We and our service providers track and run analyses of the usage of the App, Watch Apps, and Device (to determine which functionalities are used more often than others) to understand how they are used and improve them. (For further information go to Section 3.8 below)

1.3 Marketing

We can use your Personal Information for marketing purposes to provide you with offers about our products and services, unless you opt-out. (For further information go to Section 3.9 below)

1.4 Data access by recipients

Our service providers and other Fossil Group companies (Fossil Group, Inc. and its affiliates and subsidiaries) also access your information in order to provide services to you and handle your data as described in this Privacy Notice. (For further detail go to Section 5 below)

1.5 Your rights

Your rights may include the right to access, correct, and delete your Personal Information. You may also request the restriction of and, if applicable, withdrawal of your consent or objection to the processing (please proceed to Section 8 for a detailed description of your rights).

1.6 Location of your information; disclaimer for EU residents

Personal Information we collect will be primarily stored in the United States with us and our cloud service providers.

Disclaimer: If you are a resident from the EU, Fossil will process your Personal Information in accordance with EU law, in particular the EU General Data Protection Regulation; however, Fossil may be subject to laws including potential access rights by governmental authorities that do not adhere to the same requirements and standards deemed appropriate under EU law.

Personal Information we collect will be primarily stored in the United States with us and our cloud service providers, if necessary either in accordance with the EU – and Swiss – U.S. Privacy Shield Framework or subject to other appropriate safeguards. (For further information go to Section 9 below).

2. When does this Privacy Notice apply?

This Privacy Notice applies to the Fossil Smartwatches App, Fossil Smartwatches Watch Apps, and Fossil Smartwatches Device. For further information about what these terms comprise please see Section 11.

This Privacy Notice does not apply to your purchase transaction of the Device or to any purchase on our websites.

3. What Personal Information do we collect on which legal basis and what do we use it for?

In order to provide you with our services and the full range of features of our App, Watch Apps, and Devices, we use Personal Information.

We may receive Personal Information collected by third party services (e.g. Google Fit). You can deactivate such data sharing using the settings of the third party service.

The Personal Information that we collect include the following (please note: As the availability of functionality may vary, depending on your App, Watch Apps, and Device, not every one of the followings sections may apply to you):

3.1 General Account data

When you use the App, Watch App, and Device we will collect general account data, including examples such as your first and last name, your email address, your date of birth, your gender, your height and weight, a photo, the password selected for your App account, a username, a photo or avatar to connect to your account, the App version, Device information (e.g. Device serial number), paired mobile device information (e.g. smartphone manufacturer, model, operating system) and your personal account and App settings (e.g. which features you want to use).

We will also collect this information when you sign-up using a social media login, such as via Facebook. In this and other cases we collect publicly available information about you on your social media account. We do not collect or store your social media password if you sign up using a social media login.

3.2 Activity and sleep data

In order to help you understand both your daily movement habits and your personal fitness, we use additional Personal Information. Examples include the calculated number of steps you have taken, your heart rate, calories burned, your mode of movement (e.g. running or walking), travelled distance, the time zone, and your goals for the day and whether you achieved them. In order to enable us to calculate calories burned we use your height, weight, and date of birth information. You may also choose to input information related to your activities through the App, such as updating information about your weight.

In order to enable you to participate in fitness challenges with other users, we may collect and share your activity data with such other users. You can control whether (and with whom) your activity data is shared in this way by electing (or not electing) to participate in such challenges.

With the aim of enabling you to understand and to improve your sleeping habits, some Devices collect sleep start time, sleep end time, the time you go to bed, and the time you wake up. We also collect details of sleep, such as when light sleep or restful sleep occur, to show you data and insights about your sleeping patterns.

Certain activity and sleep data might be regarded as "health related data" in certain jurisdictions.

3.3 Notifications and alerts

If you want to be notified by your Device when you receive a text message, email, app alert, or when there is an upcoming event in the calendar of your mobile device, you need to activate this in the App settings. We do not store content of the notifications, we only track that a notification occurred. You may set up functionality to be able to send automated text responses.

3.4 Location information

When you install the App, you will be asked to grant access to your geolocation data. When you install or use Watch Apps for the first time, including on devices powered with Wear OS by Google, you will be asked to grant the Watch App access to your Device’s geolocation data (if equipped) or the paired mobile device’s geolocation data. We can use that information to customize the App or Watch Apps with location-based information and features; examples may include automatically updating local weather information, tracing an activity route, or to help locate your Device based on last known location. If your Device is enabled with emergency call functionality it may use location information when that function is in use.

3.5 Performance report and customer support

In the event our App or Watch Apps stop working we will receive information about your paired mobile device and Device (e.g. model, software version, mobile device carrier) and any additional information you share with us, which allows us to identify and fix bugs and otherwise improve the performance of our App and Watch Apps.

In the event you contact us for customer support we will process your Personal Information.

3.6 Watch Apps

When you install or use one of our Watch Apps, you will be asked to grant the Watch App access to certain types of information from your Device and/or a paired mobile device (e.g. geolocation data, events on your personal calendar, or fitness activity data). If you grant such permission, the Watch App can collect information and use that information to provide specific features or services; for example to allow you to display a pre-selected watch face during a specific event, to download photos from social media, or to help locate your Device based on last known location.

3.7 Emails and other communications

We send you push notifications to provide you with information about your personal goals and alerts about updates for the Device, the App, or Watch Apps. We will also send you emails with your wellness dashboard if you request them through the App.

We will send you emails related to the administration of your account, such as a welcome email when you create your account, a confirmation email if you delete your account, emails if you forgot your password and need assistance changing it, or a reminder that your account may be deactivated after a period of inactivity.

For paired mobile devices, you can at any time stop transfer of data from the paired mobile device to the App or Watch Apps by disabling the Bluetooth connection between the Device and the mobile device; however, in this case the functionalities described above may not work.

3.8 Analytics

We aggregate and de-identify data (so that the data is not associated with an individual’s name or other personally identifiable information) collected through the App, Watch Apps, and Device and use it for a variety of analytical purposes, such as determining the average daily steps taken by App users, analyzing fitness trends, watch faces selected by Watch App users, or obtaining other information to improve our products and services.

We use your Personal Information for other marketing, statistical, and market research purposes to learn more about our customers and users. For these purposes we also use publicly available Personal Information about you (e.g. from your social media profiles).

We use Google Analytics to track and examine how our App and Watch Apps are used and how we may improve them to enhance and improve our services. Google Analytics is an analysis service provided by Google LLC, located in the USA. In order to use Google Analytics, our App is sending anonymized information about your usage of our App to Google Analytics, where the data is aggregated and analysed to provide meaningful reports for us. We do not connect data from Google Analytics with any of your Personal Information. You can opt-out from our collection of data by Google Analytics at any time in the App's settings.

3.9 Marketing

We may use your Personal Information for marketing purposes to provide you with offers about our products and services. By analysing your general contract information (3.1) and how our services are used we select which marketing information may be of specific interest for you. We might also send you promotional emails (in the EU: only for products similar to your purchases). At any time you can opt-out from the use of your Personal Information for marketing purposes as described under Section 8.1.

We will not use data relating to your health for marketing purposes.

If you enter a global sweepstake, contest, or competition we sponsor, we use your Personal Information to enable your participation and as otherwise set forth in the terms for such promotion.

3.10 Legal Basis (EU)

EU law obliges us to name the legal basis for the processing activities described in this chapter 3.

3.10.1 Performance of a contract: Most of our processing activities are necessary for the provision of our services (legally: performance of our contract with you including transfers to the USA as part of performing the contract - Sections 3.1 to 3.3, 3.5 to 3.7)

3.10.2 Consent: For geolocation data (Section 3.4), access to camera roll, and for some marketing activities (Section 3.9) we require your prior explicit consent. As far as activity data (Section 3.2. above) may be considered health-related data we require your explicit consent for the processing.

3.10.3 Legitimate Interests: The processing for analytical (Section 3.8) and for marketing purposes is based on our legitimate interests.

3.10.4 Legal obligation: In some cases we process your Personal Information due to a legal obligation (for further information go to Section 6. below).

4. Can you share your Personal Information?

The App and Watch Apps allow you to share Personal Information from the App or Watch Apps on social networks like Facebook or transfer Personal Information to other apps like Apple Health or Google Fit or to share Personal Information directly with other users through certain functionality, such as fitness challenges. You can deactivate such an App/Watch App’s data sharing using the settings of your App or Watch App.

We do not control and do not assume any responsibility for the use of such shared Personal Information by such third parties. For more information about the third party’s purpose and scope of their use of Personal Information in connection with sharing features, please visit the privacy policies of such third party apps and their providers.

5. When do we share Personal Information?

We will share your Personal Information in the following cases.

5.1 Legal obligation and internal purposes

We disclose your Personal Information (i) in order to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal processes, including requests to meet national security or law enforcement requirements; (ii) in order to protect and defend the rights or property of us or third parties; or (iii) in an emergency, in order to protect the safety of our employees or any person.

Additionally in the event that we or substantially all of our assets are acquired by one or more third parties as a result of an acquisition, merger, sale, consolidation, bankruptcy, liquidation, or other similar corporate reorganization, your Personal Information may be part of the transferred assets. Where required by applicable law (such as in the EU) or we will inform you about and ask for your permission for the transfer of your Personal Information.

5.2 Joint processing within Fossil Group

Your Personal Information will be combined with or connected to other Personal Information that Fossil Group companies have obtained about you (e.g. purchase details of your Device, other goods you have purchased on a company website). We will also make your data available to Fossil Group companies if required to provide warranty and other after-sale services to you (please visit www.fossilgroup.com for information about Fossil Group member companies).

5.3 Sharing with third parties

We involve other companies for the provision of services or for hosting Personal Information. These companies are only permitted to use Personal Information on our behalf; they must not use such data for their own purposes except as permitted by law. Examples of subcontractors are hosting or other service providers such as Amazon Web Services, Inc. and Google LLC, and service providers we use for customer care such as Zendesk, Inc.

We contract with service providers using data enrichment technologies (this does not apply to the EU, where we only use data cleansing techniques, i.e. ensuring that your data such as your address are correct).

If you enable sharing of Personal Information from the Watch Apps with Google Fit or other third party apps, the Watch Apps will provide the applicable data to these third parties as you requested. You can deactivate such app data sharing using the settings in the third party apps.

If your Device is enabled with emergency call functionality, your Personal Information may be shared with third parties when that functionality is in use.

5.4 Sharing de-identified information with third parties

We may share aggregated and de-identified data (which is not associated with an individual’s name or other personally identifiable information) collected through the App or Watch Apps with third parties for any lawful purpose.

6. Children's online privacy protection

We do not knowingly collect, maintain, or use Personal Information via the App or Watch Apps about children under the age of 16. Persons under the age of 16 may not use the App or Watch Apps, and their request for accounts will be denied. If we become aware that a child under the age of 16 has sent Personal Information to us without prior parental consent, we will remove his or her Personal Information from our files. Please note that outside the US other age thresholds may apply.

7. How long do we store and how do we secure Personal Information?

We will retain your Personal Information as long as necessary to provide you with App, Watch App, and Device functionality and services but in any event only as long as your account is active. When you delete your account or we disable it after a time of inactivity and notification from us, we will also delete your Personal Information obtained from the App, Watch Apps, or Device from our systems (excluding any information we have de-identified).

However, to the extent necessary we may keep some of your Personal Information for legal reasons (e.g. tax law, the defense against, or the establishment of, legal claims, and in order to demonstrate that our processing complies with data protection law requirements). We also keep your opt-in or opt-out requests for marketing emails (even if such request is made in or through the App).

8. What are your rights?

8.1 Your rights

We encourage you to address any inquiries or concerns you may have regarding our use of your Personal Information by using the contact details provided in Section 10 below.

With or without contacting us you can, by simply changing your settings in the App, at any time withdraw your consent, where our processing is based on your consent, without affecting the lawfulness of processing based on consent before the withdrawal.

At any time you may opt out from receiving marketing notifications or emails. You can opt out of marketing notifications or emails by changing the settings in your App or sending us an email or mail to the addresses listed under Section 10 below. You may also unsubscribe from email marketing by using the unsubscribe link contained in an email from us.

8.2 Your additional rights provided by EU law - EU residents

By contacting us as set forth in Section 10 below in the EU you may exercise your rights, including the right to request from us access to, correction of, deletion of, and restriction of the Personal Information we hold about you. You also have the right to data portability (to receive data you provided in a machine readable format).

You may at any time object to our processing based on legitimate interests and to receiving marketing notifications or emails as described above under 8.1.

You have the right to lodge a complaint with the responsible data protection authority.

8.3 California

The California Consumer Privacy Act of 2018 (CCPA) provides California residents with specific rights regarding their personal information over the last 12 months. If you are a California resident you have the right to request the disclosure of:

- the categories of personal information we collected about you
- the categories of sources from which the personal information is collected
- the business or commercial purpose for collecting or selling personal information
- the categories of third parties with whom we share personal information and
- the specific pieces of personal information we have collected about you.

You have the right to request that we delete any personal information about you that we have collected, subject to certain exceptions defined in CCPA.

To exercise your access and deletion rights described above you have to submit a verifiable request to us by sending us an email at privacy.nam@fossil.com, or calling us at +1 (800) 449-3056. The verifiable request must contain sufficient information that allows us to verify you as a person and to properly understand and respond to your inquiry. As part of our verification process we will send you an email with a link to verify your email address. Following this we will ask you further verification questions. Once the verification process is complete we will send you emails with login credentials to our secure privacy portal for you to access, download or delete your data.

We will respond to your verifiable request within 45 days of receipt. If we require more time (up to 90 days) we will provide you with notice and explanation of the reason.

You may use an authorized agent to submit a request to access or delete on your behalf if you provide the authorized agent written permission to do so and verify your own identity directly with us. “Authorized agent” means a natural person or a business entity registered with the Secretary of State that a consumer has authorized to act on their behalf. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf, unless you have provided the authorized agent with power of attorney, pursuant to Probate Code sections 4000 to 4465.

We do not sell your personal information.

We do not knowingly collect personal information from California residents between the ages of 13 and 16.

In the preceding 12 months, we have collected the following categories of personal information about California residents:

Category	Examples	Business/Commercial purpose for collecting	Sources	How it is shared
1. Identifiers	E.g. a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, device information, paired mobile device information or other similar identifiers.	Security, debugging/repair, maintaining or servicing accounts, providing customer services, verifying customer information, providing advertising or marketing services, providing analytic services, quality, safety maintenance and verification of a service or device	Directly from you Health and Activity Tracking Apps	With our Business Partners and Affiliates include those to whom you instruct us to send this information; with our Service Providers
2. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	E.g. a name, address, telephone number, date of birth, medical information	Security, debugging/repair, maintaining or servicing accounts, providing customer services, verifying customer information, providing advertising or marketing services, providing analytic services, quality, safety maintenance and verification of a service or device	Directly from you Health and Activity Tracking Apps	With our Business Partners and Affiliates include those to whom you instruct us to send this information; with our Service Providers
3. Protected classification characteristics under California or federal law.	E.g. sex/gender	Maintaining or servicing accounts, providing customer services	Directly from you Health and Activity Tracking Apps	With our Business Partners and Affiliates include those to whom you instruct us to send this information; with our Service Providers
4. Biometric information	E.g. physical patterns, and sleep, health, or exercise data (the calculated number of steps you have taken, your heart rate, calories burned, your mode of movement (e.g. running or walking), travelled distance, the time zone, and your goals for the day and whether you achieved them)	Maintaining or servicing accounts, providing customer services	Directly from you Health and Activity Tracking Apps	With our Business Partners and Affiliates include those to whom you instruct us to send this information; with our Service Providers
5. Internet or other similar network activity	E.g. information on a consumer's interaction with an application	Security, debugging/repair, safety maintenance and verification of a service or device; providing customer services	Automatically as you navigate through the app	With our Business Partners and Affiliates include those to whom you instruct us to send this information; with our Service Providers
6. Geolocation data	Physical location or movements	Maintaining or servicing accounts, providing customer services	Directly from your GPS tracking device	With our Service Providers
7. Audio / Visual	Audio, electronic, visual, thermal, olfactory, or similar information	Maintaining or servicing accounts, providing customer services	Directly from you	Directly by you within the App.

We do not discriminate against you because you exercised any of your rights under the California Consumer Privacy Act, including, but not limited to, by:

- - Denying goods or services to you; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties,
  - Providing a different level or quality of goods or services to you,
  - Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may charge you a different price or rate, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to you by your data (e.g. your identifiers). In addition, we may offer financial incentives, including payments to you as compensation, for the collection of personal information, the sale of personal information, or the deletion of personal information. We may also offer a different price, rate, level, or quality of goods or services to you if that price or difference is directly related to the value provided to you by your data. We may enter you into a financial incentive program only if you give us prior opt in consent which clearly describes the material terms of the financial incentive program, and which may be revoked at any time. We shall not use financial incentive practices that are unjust, unreasonable, coercive, or usurious in nature.

9. Changes to this Privacy Notice or how we use Personal Information

This Privacy Notice is effective as of November 1, 2020 and may be updated from time to time. We will notify you of material changes to our Privacy Notice by posting a prominent notice in the App, Watch App, or by sending you an email or a notification in which we may also seek your consent.

10. Who we are and how to contact us

The App, Watch Apps, and Device are provided to you by Fossil Group, Inc., 901 S. Central Expy, Richardson, Texas 75080, USA.

Please contact us if you wish to opt-out of marketing notifications or emails or if you want to exercise your further rights via email at privacy@fossil.com or mail us at Fossil Group, Attention: Privacy Compliance, 901 S. Central Expressway Richardson, TX 75080, USA. Please also contact us at either of these addresses if have any questions regarding privacy and data protection in connection with the App, Watch Apps or Device.

Our EU representative is FESCO GmbH, Natzing 2, 83125 Eggstätt, Germany. You can either contact our EU representative sending an email to eu-privacy@fossil.com or calling +49-89-7484 6815.

11. Definitions

"Personal Information" is information that can be used either directly or indirectly (in combination with other information) to identify you, or something about you. Examples of Personal Information include your name, email address, Device serial number, your activities and other details we collect via the App, Watch Apps, or Device.

Fossil Smartwatches App (“App”) is the app you install on your mobile device for the use of our services. The Fossil Smartwatches App is not compatible with touchscreen devices.

Fossil Smartwatches Watch Apps ("Watch Apps") are applications we designed to be used with Devices to expand the personal features and services available to you. Watch Apps may come preinstalled on some Devices or may be downloaded to your Device. Watch Apps, includes, without limitation, Watch Faces, Smart Battery Modes, Wellness App, and Phone App.

Fossil Smartwatches Device ("Device") is a Fossil Smartwatches wearable. Hybrid devices run through the Fossil Smartwatches app, while touchscreen devices are powered with Wear OS by Google. Touchscreen devices do not pair to the Fossil Smartwatches App and must be registered through Google. Collection and use of your Personal Information on a touchscreen smartwatch through Google services is subject to Google's privacy policy.