INFORMATION FOR VENDORS/CONTRACTORS ON …

1 _____ INFORMATION FOR VENDORS/CONTRACTORS ON processing OF personal data in accordance with and as per article 13 of Legislative Decree 196 of 30 June, 2003 In accordance with art. 13 of the Code, the company Saipem with regis-tered offices in San Donato Milanese, Via Martiri di Cefalonia, 67 (hereinafter re-ferred to as the Company ), in the person of the pro tempore legal representative, is hereby providing the INFORMATION on processing of personal data as defined by art. 4, paragraph 1, letter b) of Italian Legislative Decree 196/2003 (hereinafter referred to as the Code ). For purposes of the process of qualification of your firm for possible entry/updating of our vendor database, and also for assessment of contractual bids which we may request from your firm as a vendor / contractor (hereinafter referred to as the vendor ), personal data may or must be collected from the vendor or third parties, and processed, including both ordinary and judicial data , relating to the firm of the vendor , its employees and any subcontractors.

2 1. Sources of collection of personal data and purposes of processing For this purpose, the Company, in accordance with art. 13 of the Code, informs the vendor that the data it has communicated or otherwise acquired from the Company will be processed for the following purposes: a) assessing technical, economic and financial suitability of the bid and the firm of the vendor and checking its possession of all the requirements laid down by applicable regulations for possible awarding of the contract; b) allowing correct regulatory, technical and economic management of the contractual relationship which may be started in the case of awarding of the Contract to the vendor s firm and fulfilment of the legal obligations connected with its awarding; c) allowing company reporting necessary for possible management of the Contract and the relationship which will be entered into with the vendor .

3 2. Methods of processing data personal data will be processed in written form and/or on magnetic means, in elec-tronic format or on line and with the automatic instruments necessary, with logic closely linked with the purposes indicated and, in any case, in a manner to guaran-tee the security and confidentiality of the data . _____ 3. Providing of data Without prejudice to the personal autonomy of the data subject, providing personal data is obligatory for the purposes indicated in paragraph 1 above and without this it will not be possible to pursue the related purposes and the related processing does not require the consent of the data subject. 4. Duration of processing As per the Code, processing of personal data as received above will be performed for the time strictly necessary for the purposes for which it has been collected, and will be based on principles of correctness, lawfulness, accuracy, pertinence and transparency, protecting confidentiality, personal identity and the right to protection of personal data .

4 5. Communication of personal data The aforementioned data will be processed, pursuant to art. 4, paragraph 1, letter a) of the Code, at the Company by duly appointed data Processor and Person in charge of the processing , in accordance with art. 29 and art. 30 of the Code. The company units responsible for total management of the procurement process and any subsequent contractual relationship will perform all the operations necessary for the purpose, through entry of the data into computer and/or paper-based databases. We also inform you that the Saipem vendor qualification process is managed using methods integrated with the eni spa qualification system. Therefore, in order to allow your qualification, we inform you that the data collected using the methods indicated above may be communicated to other companies in the Saipem Group and/or eni Group, in Italy and in EU and non-EU countries, at which the vendor s data may be the subject of interest and/or assessment, and/or to auditing firms and/or to consultants of the Group and/or to Customers.

5 6. data Controller and data Processor The data Controller is Saipem , with registered offices in San Donato Milanese, Via Martiri di Cefalonia, 67 tel. +39 02 5201 - website The data Processor for the activities of the Saipem Procurement Office is Dr. Alessandro Iannucci, Manager of the Sector Procurement Coordination Office (CAPG), domiciled at the Company registered office, or whoever subsequently _____ takes over this position. The vendor may contact said data Processor for the purpose of learning the updated list of the data Processors. The vendor may also contact the data Controller or the data Processor to invoke their rights under art. 7 of the Code, which are reproduced here in full for practicality s sake: 7. data subject's rights Art.

6 7 of the Code data subject's rights 1. The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exists, even when not yet registered, and its communication in intelligible form. 2. The data subject shall have the right to be informed: a) of the source of personal data ; b) of the purposes and methods of processing ; c) of the logic applied to the processing , if the latter is carried out with the help of electronic means; d) of the identification details concerning data Controller, data Processor and the Representative appointed in accordance with article 5, paragraph 2; e) of the entities or categories of entities to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as appointed Representative(s) in the territory of the State, data Processor(s) or person(s) in charge of the processing .

7 3. The data subject shall have the right to obtain: a) updating, rectification or, if interested, integration of the data ; b) erasure, conversion into anonymous form or blocking of data processed in violation of the law, including data whose retention is unnecessary for the purposes for which the data has been collected or subsequently processed; c) certification that the operations indicated in letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data has been communicated or distributed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. 4. The data subject shall have the right to object, in whole or in part: _____ a) for legitimate reasons, processing of personal data concerning him/her, even thought they are relevant to the purpose of collection; b) processing of personal data concerning him/her for purposes of sending of advertising materials or direct selling or else for the performance of market or commercial communication surveys.

8