PRIVACY POLICY   At GLOBAL ENERGY SERVICES SIEMSA S.A., we are committed to ensuring that your personal information is protected and not misused. By providing us with your personal data and using our website, we understand that you have read and understood the terms regarding the protection of personal data set out below. Who is responsible for processing your data? GLOBAL ENERGY SERVICES SIEMSA S.A. Tax ID: A82509779 Address: Parque Tecnológico Bizkaia, Building 407, 48170 – Zamudio (Vizcaya), Spain. Email: dpo@clgrupoindustrial.com You may contact us by any means to communicate with us. Why do we collect your personal information? Below are the main purposes we have identified: – Compliance with legal obligations. – Management of the contracting of products and services offered by GLOBAL ENERGY SERVICES SIEMSA S.A., including distance sales and the management of deliveries and returns. – Handling information requests, suggestions and complaints to manage and resolve them. What is the legal basis for processing your data? We process your personal data based on several legal grounds: – To comply with a contract and/or business relationship. – To comply with various legal obligations. – In the legitimate interest of the data controller. – With your consent to send information about our products, offers, promotions, etc. – Public interest in the security of our facilities. Who will your data be shared with? Your data will not be transferred to third parties, except where legally required. Specifically, data may be shared with the Spanish Tax Agency and with banks and financial institutions for the collection of services rendered or products purchased, as well as with data processors necessary for the execution of the agreement. In case of purchase or payment, if you choose to use any web application, platform, bank card or other online service, your data will be processed by or shared with that platform, always under strict security. We use certain applications that involve international data transfers to the United States. These transfers will only take place with entities that have demonstrated and committed, through Standard Contractual Clauses (SCCs), to comply with the level of protection and guarantees in accordance with the requirements of current European data protection regulations, such as the European Regulation, or where there is a legal basis for international transfer. Do we process data of minors? We do not process data of individuals under the age of 14. Please do not provide such data if you are not of that age. What security measures do we apply? You can rest assured that we have adopted an optimal level of protection for the personal data we handle and have implemented all technical means and measures available, in line with current technology, to prevent the loss, misuse, alteration, unauthorised access, and theft of personal data. What are your rights regarding data processing?

Right	Description
ACCESS	You may consult your personal data held in our files.
RECTIFICATION	You may amend your personal data when it is inaccurate.
ERASURE	You may request the deletion of your personal data.
OBJECTION	You may request that your personal data not be processed.
RESTRICTION OF PROCESSING	You may request the restriction of your data processing in the following cases: – While the accuracy of your data is being verified. – When the processing is unlawful, but you oppose the erasure of your data. – When the Controller no longer needs the data, but you need it for the exercise or defence of legal claims. – When you have objected to the processing of your data for public interest or legitimate interest purposes, while verifying whether the legitimate grounds override your own.
DATA PORTABILITY	You may receive your personal data in electronic format and transmit it to another entity.

GLOBAL ENERGY SERVICES SIEMSA S.A. provides forms for the exercise of rights, which can be requested by emailing dpo@clgrupoindustrial.com or using those provided by the Spanish Data Protection Agency or other third parties. These forms must be signed electronically or accompanied by a copy of your ID. If acting through a representative, a copy of their ID or electronic signature must also be provided. Forms must be submitted in person to GLOBAL ENERGY SERVICES SIEMSA S.A. or sent by post or email to the addresses listed in the “Controller” section. You have the right to lodge a complaint with the Spanish Data Protection Agency if you believe your rights have not been properly addressed. The maximum response time is one month from the date your request is received. If any of your personal data changes, we kindly ask you to notify us in writing so we can keep our records up to date. How long will we retain your personal data? Your personal data will be retained as long as you remain linked to us. Once your relationship with us ends, personal data processed for each purpose will be retained for the legally established periods, including the period during which a judge or court may request it, depending on the statute of limitations for legal actions. We will retain all information and communications relating to your purchase or the provision of our services for the duration of the product or service guarantees, in order to address any potential claims.