General Terms and Conditions of Purchase for direct materials and services

11 / 11 19.3. The Supplier declares to have knowledge of the legislation relating to Conflict Minerals and to refrain from using any minerals from the Conflict Mineral Region. LU-VE may ask the Supplier to submit a self- declaration confirming that it does not use the said minerals. Moreover, LU-VE cannot be held accountable for the truthfulness of the Supplier’s declarations on the matter. 20. GOVERNING LAW AND JURISDICTION 19.4. These conditions, as well as details included in the Order are governed by Italian law, with the express exclusion of the rules of private international law and any other source not expressly mentioned. 19.5. For all disputes concerning the interpretation or execution of these Terms and Conditions or of the Orders, including those relating to their validity, the existence and any receivables due to LU-VE, shall fall under the exclusive jurisdiction of the Court of Varese, with the exclusion of any other alternative or concurrent jurisdiction. Said jurisdiction cannot be waived even in case of consolidation of actions. 21. PRIVACY POLICY STATEMENT 19.6. The Supplier acknowledges that the provisions of applicable privacy laws (EU Regulation 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, hereinafter referred to as the “ GDPR ”) concern the processing of personal data, relating only to individuals, acquired and processed by LU-VE for the conclusion and execution of the Supplier Contract and are not applicable to data referring to companies, bodies and associations. For the purposes of this General Terms and Conditions of Purchase, LU-VE shall be able to process personal data concerning (i) the Supplier, whether the latter is an individual company or a freelancer, and/or (ii) the representatives, employees or collaborators of the Supplier. 19.7. The Supplier declares to be aware that, pursuant to Article 13 of the GDPR, personal data communicated by the same Supplier for the conclusion and execution of the Supplier Contract, is collected and processed by LU-VE, as the Data Controller, exclusively for said purposes and to comply with related regulatory, administrative and accounting obligations, through appropriate methods and procedures (including computerised), through specially appointed internal staff and through external collaborators designated as data processors and data controllers. The Supplier acknowledges that, with regard to personal data processed for the conclusion and execution of the Supplier Contract, the natural person to whom the data refers (the “ Data Subject ”) is entitled to the right of access, rectification, limitation, deletion, portability and opposition (Articles 15-22 of the GDPR), as well as to the right to file a complaint with the Italian Authority for the Protection of Personal Data. 19.8. It is the Supplier’s responsibility to guarantee the lawful use of personal data concerning, by way of example and without limitation, its representatives, employees and collaborators, communicated to LU-VE for the purpose of concluding and executing the Supplier Contract and, in particular, the correct fulfilment of the related disclosure obligations towards the data subjects and, where necessary, the collection of their consent, with regard to the processing of their personal data by LU-VE for the aforementioned purposes.