With the present, we wish to inform you that Legislative Decree no. 196 of 30 June 2003 (“Code Protecting Private Data”) contains safeguards for individuals and other parties as regards the processing of personal data. Under the provisions of the aforementioned decree, your personal data shall be processed in accordance with principles of correctness, fairness and transparency, safeguarding your confidentiality and your rights. As per art. 13 of Legislative Decree no. 196 of 30 June 2003, we provide you with the following information: 1. Purposes and methods for the processing of the data The personal data you have supplied shall be processed solely for purposes strictly connected with and instrumental to the performance of the service requested: - to provide the information requested; The processing shall be performed by the titleholder, the manager and the assigned personnel, using paper and computerised supports, in accordance whatever precautionary measures are needed to guarantee security and confidentiality. 2. Nature of the collection of the data and consequences of failure to provide them Presentation of your personal data is obligatory, if your requests are to be satisfied, and, in general terms, to satisfy the requirements of the law. Should the data not be presented, it may prove impossible to supply the service requested. 3. Communication and distribution of the data For the purposes indicated above, your personal data may be communicated to: - our outside staff members and employees assigned to the pertinent tasks; The data collected shall not be distributed.

Rights of the interested party At any point in time you may exercise your rights with respect to the titleholder of the data processing, as per the provisions of art. 7 of Legislative Decree no. 196 of 30 June 2003, which we list for your convenience below. 1. The interested party is entitled to obtain confirmation of whether or not personal data regarding him or her exists, even if they are not yet registered, and to have the data communicated in an intelligible form. 2. The interested party is entitled to obtain an indication: a) of the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in the case of processing with the aid of electronic instruments; d) the identifying information on the titleholder, the managers and the representative designated under the provisions of article 5, paragraph 2; e) the subjects or categories of subjects to which the personal data can be communicated, or which can gain knowledge of the data in virtue of their positions as designated representative in the territory of the State, or as managers or employees on assignment. 3. The interested party is entitled to obtain: a) that the data be updated, adjusted or supplemented, when of interest to the party; b) that data processed in violation of the law, as well as data that do not have to be preserved for the purposes for which the data were collected and subsequently processed, be cancelled, transformed into an anonymous form or blocked; c) certification that the operations referred to under letters a) and b) have been brought to the attention, in terms of their contents as well, to those to whom the data have been communicated or distributed, except in cases where fulfilment of his obligation proves impossible or entails the use of resources that are manifestly out of proportion to the right being safeguarded. 4. The interested party is entitled to oppose, in all or in part: a) processing of the personal data regarding him or her, for legitimate reasons, even when the data are pertinent to the purpose for which they are collected; b) processing of personal data regarding him or her, for the purpose of sending advertising materials or direct-sales materials or for the performance of market research or commercial communications. The rights referred to under article 7 are exercised following a request presented to the titleholder or manager without formalities, with presentation through a representative being an option, and a response to the request is to be provided without delay. The request directed at the titleholder or the manager may also be sent in the form of a registered letter, a fax or an e-mail. To exercise the rights in question, the interested party may contact: F.A.R. Fonderie Acciaierie Roiale S.p.A., Via Leonardo da Vinci 11, 33010 Reana del Rojale - Udine. Or an e-mail may be sent to: privacy@farspa.com 2. Titleholder of the processing The titleholder of the data processing is F.A.R. Fonderie Acciaierie Roiale S.p.A., Via Leonardo da Vinci 11, 33010 Reana del Rojale - Udine. 3. Manager of the data processing The manager of the data processing is Mr. Eddy Pontelli.