Personal Data Protection Commitment

a. Our Personal Data Protection Commitment

Sonae Sierra SGPS, S.A. will always process the personal data of its website users’ (Users) in a responsible, fair and transparent manner. This commitment is taken in the day-to-day relationships with our investors, partners, customers and suppliers. The privacy and security of the data entrusted to us are one of our priorities.

We are transparent when processing personal data, and we limit the processing of personal data to what is necessary. We inform you of how your personal data are used and for which purposes, and protect your personal data by adopting as reference the best practices in the security and protection of personal data.

When personal data of yours are collected, stored, used, transmitted or erased by other entities processing personal data on our behalf, we demand the same level of protection and security.

b. Who is the Controller

SONAE SIERRA SGPS, S.A., with registered offices at Lugar do Espido, Via Norte, 4470-177 Maia, registered at the Commercial Registry Office under the corporate taxpayer number and registration number 502 290 811, with a share capital of €162,244,860, hereinafter designated in abbreviated form as Sonae Sierra, is – pursuant to the General Data Protection Regulation and other legislation on the protection of personal data in force in the countries where it does business – the Controller for the processing of the personal data we gather at the time of registration and navigation on this website.

c.  Personal Data that we may collect

The term “Personal Data” refers to the set of information related to yourself that enables you to be identified, either directly or indirectly.

The website is intended solely for, and may only be used by, natural persons over 16 years of age. We do not process willingly and knowingly process the personal data of children. If we become aware that we have collected personal data of children we will immediately proceed to its erasure. We ask that you contact us if you know that we collected or process personal data of children.

When you submit a message on our website, we will collect as necessary personal data your name, email address and telephone number.

Should you in doing your request inform other personal data, you shall do so voluntarily; such other personal data are not necessary.

The provision of your personal data is neither a legal nor a contractual obligation, and if you do not provide the necessary personal data, it may make impracticable for us to answer.

d. How and why we use your personal data

We use your personal data with the purpose to provide to you information in response to the requests you addressed us through the website.

We process the personal data that you provide on our website on the basis of the consent that you grant to us at the time of addressing a request.

e. How long do we store your personal data

We store your personal data only for the period of time necessary to answer to your requests and to fulfil legal obligations.

After the storage period ends, your personal data will be anonymised or will be securely destroyed/eliminated.

f. With whom can we share your personal information

In order to answer to your requests, we may need to share your personal data with other companies in the Sonae Sierra Group established in the Member States of the European Union. Transfers of your personal data to third countries will only be done with your consent. We demand to all companies, to have adequate security measures to protect your personal data.

When required by law, we may need to share your personal data with authorities.

g. What are your rights and how you can exercise them

Under the terms of the law, you have the right to request:

1. Additional information regarding the processing by us of your personal data;
2. Access to your personal data;
3. That we transfer to another entity the personal data you provided to us;
4. That we rectify or complete your personal data;
5. The erasure of your personal data;
6. The cessation of the processing of your personal data when you object to such processing;
7. The restriction of the processing of your personal data;
8. You have furthermore the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

To exercise your rights or anytime you have a question regarding the use of your personal data, you may contact us in the following ways:

• online by filling out the form.
• by email to the following address: dataprotection@sonaesierra.com.

You may lodge a complaint with the supervisory authority.

h. Updates to this Commitment

This Personal Data Protection Commitment may be updated periodically, which will be communicated.