‘Information pursuant to Legislative Decree no. 196 of 30 June 2003 (Personal data protection code).’

In accordance with the requirements under Legislative Decree 196/2003 (Personal Data Protection Code), it is noted that the Company has undertaken the activity of analysing and updating the Security Policy Statement in relation to the electronic process of personal data. This activity will be completed by 31 March 2010 consistent with the deadline provided by the regulations.

The DPS contains the information required to be given under Section 19 of said Technical Regulations and describes the security measures adopted by the Company in order to reduce to the minimum the risks of: destruction or loss, even by accident, of personal data; unauthorized access or unallowed processing; or processing that is non-compliant with the purposes of the collection.