Security Policy Statement

“Information provided pursuant to Legislative Decree no. 196 of 30 June 2003 (Personal data protection code)”

In accordance with the provisions of section 26 of the Technical Regulations for minimum security measures (Annex B to Legislative Decree no. 196 of 30 June 2003, Personal Data Protection Code), the Security Policy Statement (DPS, Documento Programmatico sull Sicurezza) was prepared in respect of personal data processing.

The DPS contains the information required to be given under Section 19 of said Technical Regulations and describes the security measures adopted by the Company in order to reduce to the minimum the risks of: destruction or loss, even by accident, of personal data; unauthorized access or unallowed processing; or processing that is non-compliant with the purposes of the collection.