PRIVACY POLICY ON THE COLLECTION AND PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF ITALIAN LEGISLATIVE DECREE 196/2003. With regard to the personal data provided by Shippers using the transportation service in the relationship established with Snam Rete Gas through the signing of the “Transportation Contract” and to the need to process said personal data for the purposes of execution and management of the relationship between the parties, for the duration considered necessary, Snam Rete Gas S.p.A. hereby provides, pursuant to Article 13 of Italian Legislative Decree 196/2003, as required by Article 11.2 of the aforesaid Transportation Contract, its privacy policy on the collection and processing of personal data provided by Shippers. 1. Purpose of processing Personal data are processed as part of the normal activity of Snam Rete Gas for purposes: a. associated with and expedient to management of the contractual relationship specified above; b. relating to fulfilment of obligations required by law and by provisions issued by authorities with appropriate power. 2. Methods of processing The personal data provided by Shippers, that may be subject to all the processing referred to in Article 4(1)(a) of Italian Legislative Decree 196/2003 also using electronic or automated tools that allow their collection, recording, organisation, retention, consultation, processing, amendment, selection, extraction, comparison, use, interconnection, blocking, disclosure, dissemination, deletion and destruction, are and shall be processed, for transactions associated with and expedient to execution of the Transportation Contract, by the corporate functions entrusted with establishing, administering and managing the relationship, and whose personnel have been appropriately instructed in order to guarantee confidentiality and to avoid the loss, destruction, unauthorised access or processing of said data. All data provided by Shippers shall only be processed with logics and using data organisation forms that are strictly related to the obligations, duties and purposes referred to in points 1 and 2 of this privacy policy. Piazza Santa Barbara, 7 20097 San Donato Milanese (MI) Tel. switchboard + 39 02.3703.1 www.snamretegas.it Snam Rete Gas S.p.A. Registered office: P.zza S. Barbara 7, S. Donato Milanese (MI) Share capital EURO 1,200,000,000.00 fully paid-in Tax Code and enrolment number in the Milan Companies Register 10238291008 – Milan R.E.A. 1964271 VAT no. 10238291008 Company subject to the direction and coordination of Snam S.p.A. Single member company The data shall be retained for a period of time no longer than is required for the purposes for which they were collected or subsequently processed in compliance with the provisions of legal obligations. 3. Categories of persons to whom the data may be disclosed To perform its activities Snam Rete Gas may also use the services of third party professionals, Companies of the Snam Group or Third Parties, when carrying out the following activities: a. banking, financial and insurance activities; b. technical management of the networks and computer systems; c. assessment of financial risks and commercial information. Snam Rete Gas takes the greatest care to ensure that disclosure of personal data to the aforesaid recipients exclusively concerns the data required for achieving the specific purposes for which they are intended, within the scope of the purposes set forth in point 2 above. A full list of said persons or categories of persons is available at Snam Rete Gas. 4. Data Controller and Data Processor The Data Controller is Snam Rete Gas S.p.A. (Company subject to the management and coordination of Snam S.p.A.), with registered office at Piazza Santa Barbara, 7, 20097 San Donato Milanese (MI). The Data Processor for the Commercial sector is Mr Andrea Stegher, domiciled for the office at Piazza Santa Barbara, 7, 20097 San Donato Milanese (MI). 5. Rights accorded by Law to data subjects The Law entitles data subjects to exercise specific rights stated in Article 7, the wording of which is reproduced in full: Article 7 – Right to access personal data and other rights 1. The data subject is entitled to obtain confirmation as to whether or not personal data concerning his person is held, even if not yet recorded, and to have said data transmitted in intelligible form. 2. The data subject is entitled to obtain specification: a. of the source of the personal data; b. of the purposes and methods of processing; c. of the logic applied in the case of processing performed using electronic tools; page 2 / 3 d. of the details of the data controller, processors and designated representative pursuant to Article 5(2); e. of the persons or categories of persons to whom the personal data may be disclosed or who may come to acquire knowledge thereof in their capacity of designated representative in State territory, of data processors or persons in charge of processing. 3. The data subject is entitled to obtain: a. the updating, correction, or, when it is in his interest, integration of data; b. the deletion, transformation into anonymous form or freezing of data processed in breach of the law, including data that do not need to be retained in relation to the purposes for which they were collected or subsequently processed; c. confirmation that the operations referred to in points a) and b), and their content, have been brought to the attention of those to whom the data have been transmitted or disclosed, unless fulfilment of this obligation proves impossible or entails an employment of resources that is clearly disproportionate to the protected right. 4. The data subject is entitled to fully or partially oppose: a. for legitimate reasons, the processing of his personal data, even if pertinent to the purpose of collection; b. the processing of his personal data for the dispatch of advertising material or for direct sales or for the conduction of market research or commercial communication. page 3 / 3