Code of Ethics

Grupo IP | Código de Ética 7. Personal Data Protection 7.1. IP Group companies recognize that privacy and the protection of personal data are fundamental values and they strictly comply with the General Data Protection Regulation and national data protection legislation in all activities involving the processing of personal data for which they are responsible. To this end, IP Group companies have suitable internal standards setting out the necessary transversal guidelines to adopt personal data protection and security standards and to ensure the legality of the processing. 7.2. All employees must commit to ensuring that data protection principles and obligations are respected during any activity that involves processing personal data for which they are responsible while performing their professional duties, as well to ensure compliance with the internal standards of the Privacy Management System. 7.3. Employees may use the following channels for any questions relating to personal data protection legislation, to clarify queries or to exercise rights: • IP Group Data Protection Officer, at the following email address: dpo@infraestruturasdeportugal.pt • The”CONTACTS” section of the website www. infraestruturasdeportugal.pt 19