November 2025

This policy establishes the basis for processing any personal data we collect from you or that you provide to us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. It is important that the personal data we hold is accurate and up to date. Please let us know if your personal data (for example, name or address) changes during your relationship with us so that we can update our records.

This privacy policy explains:

• Who we are;

• Your rights;

• What personal information we collect;

• How we use your personal data ;

• Who we share your information with and why ;

• How we keep your information safe ;

• How long we retain your data; and

• How to contact us.

In this document, “We”, “Us” and “Our” refer to Gasmarine BV Srl, with registered office in Italy, in Genoa (GE), Via Lungotorrente Secca, 23, VAT number 02671​400998 (also “ Data Controller ”).

1. Who we are

For the purposes of data protection legislation, the Data Controller is Gasmarine BV Srl , a leading company in the technical and food gases sector. For years, our Group has been synonymous with reliability, quality, and widespread service, characteristics that have allowed us to gain a prominent position in the national landscape.

2. Your directions

You have the right to :

1. • Ask us if and how we are processing your personal data and for what purpose;

   • Obtain a copy of the personal information we hold about you (right of access);

   • Update or correct your personal data (right to rectification);

   • Request the deletion of your personal data; and

   • Request, under certain conditions, to restrict the processing of your personal data (right to restrict processing).

Additionally, under certain circumstances you have the right to:

1. • object to the processing of your personal data (right to object);

   • object to automated decision-making and profiling (the right not to be subjected to automated decision-making, including profiling); and

   • request that information about you be provided to third parties in a commonly used, machine-readable form (right to data portability).

Exercising your rights

For information about your rights, including how to correct, restrict, delete, or amend your personal data, or if you would like a copy of the personal data we hold about you, you can contact us at privacy@gasmarine.com.

expenses

Accessing your personal information (or exercising any of the other rights) does not, as a rule, require you to pay any fees.

In some cases, we may charge a reasonable fee if the access request is manifestly unfounded or excessive, or if multiple copies of the information are requested. Alternatively, in these circumstances, we may refuse to comply with the request.

What we need from you

We may need to request specific information from the data subject to help us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you are not satisfied with our response or if you would like more information about your data protection rights, you can visit the official website of your local Data Protection Authority (also “ DPA ”).

• In the UK, see the Information Commissioner's Office (ICO) website.

• In the EU , you can find your DPA here.

• In Switzerland, consult the Federal Data Protection and Information Commissioner (FDPIC).

3. What personal information we collect

"Personal data" means any information relating to an individual that allows them to be directly or indirectly identified. This information includes personal data such as first and last name, email address and telephone number, job title, department, preferences, and our communications with you.

Information provided by the user

We will collect your personal data if:

• you will fill out a contact form on our website;

• you will contact us for information or assistance on our products and services;

• you will sign a contract with us;

• you will sign up for a free trial;

• you will access our portal and/or any of our applications;

• you will participate in a survey;

• you will request to download e-books, guides, product data sheets, or other resources on our website;

• you will participate in commercial or promotional events;

• you will interact with us through our social media channels;

• you will consent to receive marketing communications from us; and/or

• you will apply for a job offer.

This information may include personal data, such as your full name, email address, and phone number.

Information we collect about you

The type of personal information we collect depends on the purpose for which it is collected and may include:

• Information about you to identify you and manage your relationship with Gasmarine BV (e.g., name, address, email, postcode, telephone number(s);

• Information about your contractual relationship with us (e.g. customer number, order history, etc.);

• Copies of documentation (e.g., bank statements, letters, invoices, correspondence);

• Financial and economic information (e.g., payment card numbers, bank details, payment history; on behalf of financial institutions, we also collect certain data related to the purchase of devices financed by a loan (e.g., pay slips, proof of address, etc.);

• Audio and visual information , if you visit one of our locations where a video surveillance system (for example, closed-circuit television) is installed;

• Marketing/communications data (e.g., information relating to marketing and external communications, such as marketing campaigns, opt-in information and preferences); where we have used consent as the lawful basis for contacting you, this can be withdrawn at any time;

• Lifestyle information (e.g., water consumption volume, mineral/vitamin supplements, Information needed to choose the right appliance for your home, such as the number of people living in the home in question, tap water consumption, electricity consumption);

• Information about your visit to the website , the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, including the full Uniform Resource Locators (URL) clickstream to, through, and from our website (including date and time); the products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page, and any phone number used to call our customer service;

• Employment and education information (e.g., employer details, relevant professional qualifications, etc.)

We may also collect information about you from other sources, such as:

• external third parties (for example, credit reference agencies to verify your identity and financial standing, event coordinators if you are present at a stand); and

• from cookies (cookies are small text files that are placed on your computer by websites you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site).

4. How we use your personal data

We will use your personal data only when permitted by law and for the purposes set out in this policy. These are:

• When consent is given;

• When it is necessary for the performance of a contract we have entered into or are entering into with the data subject;

• If necessary to comply with a legal or regulatory obligation;

• For our legitimate interests or those of a third party, provided that your interests and fundamental rights and freedoms do not override those interests.

We may use your personal data to provide and administer the services you request and/or to respond to your inquiries. If you do not provide certain information, we may not be able to process your request.

We may also use your personal data to comply with our legal obligations, handle any complaints, and enforce our terms and conditions.

We may use your personal data for our legitimate business interests, including security purposes, website improvements, improvements to our solutions and services, and for general marketing and internal monitoring and reporting purposes. However, we will not do so if our interests override your interests, rights, and freedoms.

We process your information for the following purposes

Below we have provided a description of how we intend to use your personal data in compliance with the lawfulness principles established by the legislation.

(A) To perform our contract with you and to support and maintain that relationship. This includes the following:

1. to register you as a potential or new customer;

2. to process and deliver your order, including managing payments, fees and charges and collecting and recovering any amounts owed to us;

3. as part of our personnel search and selection activities.

Providing your personal data, as indicated in points (i), (ii), and (iii), is optional, but failure to provide it may make it impossible to provide the requested services. In these cases, consent to the processing of personal data will not be required, as such processing falls within the scope of Article 6, paragraph 1, letter b) of the Regulation, without prejudice to the provisions of Article 111 bis of Legislative Decree 196/2003 regarding the purpose referred to in point (iii).

(B) Comply with legal and regulatory requirements. Such requirements include the following:

4. confirm your identity for regulatory purposes;

5. detect and prevent fraud;

6. to comply with our data protection obligations.

For the purposes referred to in points (iv), (v), and (vi), the processing of your personal data is carried out pursuant to art. 6, paragraph 1, letter c) of the Regulation.

(C) For specific business purposes, to provide you with appropriate products and services and a safe experience. Our business purposes include the following:

7. to manage our relationship with you, including notifying you of changes to our terms or privacy policy and/or asking you to leave a review or participate in a survey;

8. send you commercial communications via email regarding products and services similar to those you purchased, unless you expressly refuse to receive such communications (“Soft Spam”);

9. to send you newsletters, to keep you updated on new products or services or to recommend other goods or services that may interest you, to inform you of special offers and to invite you to our events;

10. to provide you with relevant website content and advertising and to measure or understand the effectiveness of such advertising;

11. use data analytics to improve and develop our website, products/services, marketing, customer relationships, and experiences;

12. to operate and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting).

The processing of your personal data for the purposes referred to in point (viii) constitutes legitimate processing under applicable data protection legislation, which does not require your consent. You may object to processing for this purpose at the time of purchase or in subsequent communications from the Data Controller regarding products and services by writing to the contact details indicated in this policy, or by using the link at the bottom of each email communication.

For the purposes referred to in points (vii), (ix), and (x), the processing of your personal data is carried out pursuant to art. 6, paragraph 1, letter a) of the Regulation.

For the purposes referred to in points (xi) and (xii), the processing of your personal data is carried out pursuant to art. 6, paragraph 1, letter f) of the Regulation.

We may also process your personal data in order to comply with a legal obligation to which we are subject or, finally, to pursue a legitimate interest of ours or of third parties, including any defensive purposes, in compliance with the conditions and constraints set forth by applicable legislation.

In the near future, we may also use AI technologies and Internet of Things (IoT) data, including machine learning, to perform certain tasks. In this case, the results will be subject to human review and review, and we will not include your personal data in any data analysis with a third-party model without informing you. If we use publicly available models for general business purposes, we will provide you with the option to anonymize or omit data from the data provided. We will always strive to use AI technologies in line with legislation, regulatory guidance, and government policies.

Change of intended use

We will only use your personal data for the purposes for which we collected it, unless we reasonably believe we need to use it for another reason and that reason is compatible with the original purpose. We may also process your personal data as part of an acquisition or sale. In this case, we will notify you of any changes to the processing or ownership of the data resulting from this activity.

You have the right to object to the processing of your personal data for some of the marketing purposes listed above, but doing so may impact our ability to provide you with some or all of our services. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.

5. How we keep your information safe

We are committed to ensuring the confidentiality of the personal information we maintain and continually review our security controls and related policies and procedures to ensure the safety of your personal information.

When we contract with third parties, we impose security, privacy, and confidentiality obligations on them to ensure that personal information is kept secure and protected from unauthorized or accidental access, processing, copying, modification, deletion, loss, or use.

If we work with third parties in countries outside the UK or the European Union, we ensure that they are countries that the UK government and the European Commission have confirmed as providing an adequate level of protection for personal data, or that the organization receiving the personal data has provided appropriate safeguards and agrees to treat your data with the same level of protection as we would.

We also use the UK's international data transfer agreements and the EU's standard contractual clauses for transfers outside the UK or the European Economic Area.

In limited circumstances, data may be accessed by employees outside of our usual operating locations. In such circumstances, we ensure that appropriate security measures are in place to safeguard your information.

6. Who we share your information with and why

We will not sell your personal data or generally provide it to third parties, but there are some exceptions. We may share your personal data in the following ways (as appropriate):

• Companies engaged by Gasmarine BV (these third parties may be based in countries outside the UK or the European Union):

• • with third parties or service providers who provide additional data about you in order to improve our ability to design and develop new products and services that can be marketed and sold to meet the needs of the consumer groups we have identified and are targeted accordingly;

  • with debt collection agencies for debt research and recovery;

  • with payment service providers to enable the completion of payments;

  • with our accountants for the production of tax returns and to support legal reporting;

  • with our legal advisors or auditors;

  • with information technology and cybersecurity providers;

  • with third parties or service providers to conduct market research on our behalf, to help us improve and develop the products and services we provide to you and other customers;

  • With a potential buyer (or its advisors) for due diligence purposes if we are considering a sale of all or part of our business. For example, in the event of a merger, acquisition, divestiture, change of control, or liquidation of Gasmarine BV or part of its business (or in anticipation of such an event), we may share your personal data as part of such extraordinary transaction, where necessary to fulfill our obligations under this Policy.

• Organizations and individuals nominated or authorized by you ;

• Public authorities:

• • For the prevention or detection of crimes and/or other offenses, we may share the personal data we collect with law enforcement agencies, other public or private sector agencies, government agencies, or other agencies, in accordance with applicable legislation, to comply with any legal obligation, or as otherwise permitted by law. This includes public authorities, insurance companies, financial institutions, and/or other agencies.

7. Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. Where processing is based on your consent, we will only process your personal data until your consent is withdrawn.

To determine the appropriate retention period for personal data, we consider the quantity, nature, and quality of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Personal data processed for the purposes referred to in points (i) and (ii), falling within the scope of Article 6, paragraph 1, letter b) of the Regulation, will be retained for:

(a) the period of 10 (ten) years starting from the termination of the contract; or, in the event that the interested party does not conclude a contract with the Data Controller following the establishment of a pre-contractual negotiation, for

(b) the period of 24 (twenty-four) months from the start of the negotiation.

For the purpose referred to in point (iii), your personal data will be retained for a period of 24 (twenty-four) months from the date of submission of your CV, without prejudice to any longer retention obligations established in the event of the establishment of an employment relationship, independent contractor, coordinated and ongoing collaboration, agency mandate, and/or the possible assignment of a sales mandate or commercial relationship.

Personal data processed for the purposes referred to in points (iv), (v), and (vi), falling within the scope of Article 6, paragraph 1, letter c) of the Regulation, will be retained for the period established by applicable laws.

For the purpose referred to in point (viii), your personal data will be retained until you object to the processing by writing to the contact details in Article 1 of this policy or through the link at the bottom of each email sent.

For the purposes referred to in points (vii), (ix), and (x), your personal data will be processed, as a general rule and without prejudice to the principle of data retention proportionate to the purpose of the processing, until you withdraw your consent. If you withdraw from a pre-contractual negotiation without withdrawing your consent, the data may be processed even after your withdrawal.

For the purposes referred to in points (xi) and (xii), your personal data will be processed for the period strictly necessary to achieve the legitimate interest of the Data Controller.

We will take all reasonable steps to ensure that your personal data is treated securely and in accordance with this policy.

8. Contact us

If you have any questions about this policy, require further information about our privacy practices, or wish to raise a complaint about how we have handled your personal data, you can contact the Data Controller at privacy@gasmarine.com.