We hereby inform you that, the "Privacy Law" (referring to EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Italian Legislative Decree No. 196/2003, as well as any other law regarding the protection of personal information applicable in Italy, including the provisions of the Data Protection Authority) recognises the right to protect personal data and requires that any processing be done in respect of the rights, fundamental freedoms and dignity of natural persons.

Pursuant to the Privacy Law, Terna S.p.A., as Data Controller, provides the following information:

1. Personal Data Processed

For the purposes of negotiating and / or signing and / or executing a contractual relationship with Terna SpA, the Data Controller processes personal and contact data (such as, for example, name, surname, etc.) concerning you or your lawyers' representatives and / or employees and / or collaborators. In the cases expressly provided by the law, Terna S.p.A. it can also process judicial data (such as the antimafia certificate) concerning your legal representative.

2. Purpose, Method and Legal Basis

Personal data provided is processed for the purposes indicated below:

a) execution of pre-contractual and / or contractual duties and obligations such as, for example, the registration on the MyTerna portal and the management of the related personal account or the management of the obligations assumed by virtue of the contract being negotiated or in execution. The legal basis for processing is established under art. 6, par. 1, lett. b) of the GDPR.

b) fulfilment of the obligations required by national, community and international laws and / or regulations. The legal basis for processing is established under art. 6, par. 1, lett. c) of the GDPR.

c) prevention of possible frauds. The Data Controller will be able to consult the "Check IBAN CBI" service, communicating your IBAN and Fiscal Code to Nexi Payments, CBI and the Bank where the account is opened, which will process the data, as independent data controllers, for the verification and communication of their correctness. An in-depth privacy policy on the Check IBAN CBI service is available on www.nexi.it/it/privacy.html. The legal basis for processing is established under art. 6, par. 1, lett. f) of the GDPR.

d) protection of the interests or rights of the Data Controller, in or out of court. The legal basis for processing is established under art. 6, par. 1, lett. f) of the GDPR.

Providing data for the purposes pursuant to letters a), b), c) and d) is optional; however, without them, it will not be possible to negotiate and/or endorse a contract with the Data Controller.

3. Data Recipients

Your personal data may be shared with:

· parties typically acting as data processing managers (including but not limited to IT providers). The updated and complete list of managers is available at Terna's registered offices and can be requested from the Data Controller at the addresses indicated in this privacy policy.

· Terna employees as "persons acting under the authority of the controller to process personal data".

· parties, entities or authorities, autonomous data controllers with whom it is mandatory to share your personal data as part of legal provisions or orders from the authorities.

4. Extra-Eu Transfer

If your personal data is transferred outside the European Economic Area, it will be done so only with the requisite legal orders and guarantees pursuant to Arts. 44-49 of the GDPR. Further information on this point may be requested from Terna S.p.A. and/or the Data Protection Officer at the addresses indicated in this privacy policy.

5. Data Storage and Communication

The data provided will be stored for the time strictly necessary to achieve the purposes for which they were collected, after which they will be deleted or destroyed.

6. Data Subjects' Rights

Regarding the processing of the personal data that concerns you, you have the power to exercise the rights provided for by the Privacy Law, including:

a) to access your personal data, obtaining evidence of the purposes pursued by the Data Controller, the categories of data involved, the recipients to whom it may be disclosed, the applicable storage time, and the existence of automated decision-making processes.

b) to obtain without delay the rectification of inaccurate personal data concerning you.

c) to obtain, in the cases envisaged, the deletion of your data.

d) to obtain the restriction of processing or to oppose the same, whenever possible.

e) to request the portability of the data you provided to Terna S.p.A., i.e., to receive them in a commonly used, structured format, readable by an automatic device, also to transmit such data to another data controller, without any obstruction by Terna itself.

Furthermore, you may lodge a complaint with the Personal Data Protection Authority under the terms of Art. 77 of the GDPR. All requests regarding exercising the rights of the data subject should be addressed to the e-mail address: privacy@terna.it.

7. Data Controller and Data Protection Officer

Terna S.p.A. is the Data Controller, with headquarters at Viale Egidio Galbani 70, Rome, Italy. The Data Protection Officer can be contacted at the following e-mail address: dpo@terna.it.