TERASTEEL S.A. (hereinafter referred to as "TeraSteel") undertakes to strictly respect the confidentiality of the data of its customers or users of its website and undertakes not to transmit the personal data of its customers or users of its website to third parties in any form other than those specified in the section below, as well as in the Terms and Conditions section.

The entire content of this website, including text, graphics, photographs, software, logos, and any other materials present on the website, is protected by national, EU, and international copyright and related rights laws and is the property of TERASTEEL S.A. (hereinafter referred to as "TeraSteel") or its affiliates or partners. No material on this website may be reproduced (in whole or in part) or modified without the written consent of TERASTEEL S.A.

The operator of your personal data collected through this website is TERASTEEL S.A. (hereinafter referred to as "TeraSteel"), with its registered office in Sat Sărăţel, Comuna Șieu-Măgheruș, Calea Teraplast, Nr. 1A, Județul Bistriţa-Năsăud, Romania, Postal code: 427301, tel.: +40 741 504 030, fax: +40 263 342 276, registered with the Trade Register Office attached to the Bistrița-Năsăud Court under no. J06/1009/1994, with Unique Registration Code RO 6694483, holder of the transfer account (LEI) RO39 BTRL 0060 1202 2445 11XX, and transfer account (EUR) RO85 BTRL 0060 4202 2445 11XX, opened at Banca Transilvania S.A. – Bistrița Branch, as owner of the websites: www.terasteel.ro, www.terasteel.hu, www.terasteel.co.uk, www.terasteel.rs,www.terasteel.de, www.terasteel.cz, www.terasteel.sk and the subdomains www.al.terasteel.ro, www.hr.terasteel.ro, www.ba.terasteel.ro, www.ua.terasteel.ro, and www.mk.terasteel.ro.

The Personal Data Processing Policy describes the categories of your personal data that we process, the ways and purposes for which we collect them, the situations in which we transfer personal data, as well as your rights and options in this regard.

Personal data we process:

· Contact information, such as: your name, telephone number, email address, home address, if you provide us with this information;

· Data contained in your CV (if you apply for a job vacancy through the website);

· Data resulting from your browsing on our website/web page collected through cookies and similar technologies.

.Questionnaires completed by you

.Marketing preferences for the purpose of improving products and communication

.Project information: project name, address, type of project, size, etc.

.Any other information you choose to share with us when you fill out online forms or send emails

Subject to certain legal conditions, you have the following rights in relation to the processing of your personal data, as set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation):

· Right of access (to request a copy of your personal data that we hold);

· Right to rectification of any inaccurate or incomplete personal data;

· Right to object to or restrict our use of your personal data;

· Right to erasure of your personal data, in situations where you have withdrawn your consent, processing is no longer necessary, or the processing is contrary to the law;

· The right to data portability, which allows you to receive a copy of the processed data we have received from you or to transmit it to another entity indicated by you;

· The right to withdraw your consent for processing based on consent. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal. In cases where you withdraw your consent, TERASTEEL S.A. will no longer process your personal data and will take appropriate measures to delete your personal data.

TERASTEEL S.A. may, however, process your personal data if there is another legal basis for such processing, in which case we will inform you accordingly.

If you wish to exercise the above rights, please contact us using the following contact details:

· Address: Sat Sărăţel, Comuna Șieu-Măgheruș, Calea Teraplast, Nr. 1A, Județul Bistriţa-Năsăud, Romania, Postal code: 427301;

· Email: dpo@tcag.ro;

- Phone number - +40 0745 985 555

In order to comply with our legal obligations regarding data security and confidentiality, when you exercise one of your rights as a data subject, we may ask you to prove your identity by providing us with a copy of an identification document or any other information necessary to verify that the request comes from the relevant data subject.

We will consider any requests or complaints we receive and respond within the time limits set by law. If you are not satisfied with our response or believe that the processing is in breach of applicable law, you may lodge a complaint with the data supervisory authority in Romania – the National Supervisory Authority for Personal Data Processing, located in Bucharest, B-dul G-ral Gheorghe Magheru, No. 28-30, Sector 1, Romania, Postal Code: 010336, website: www.dataprotection.ro and email: anspdcp@dataprotection.ro.

Any processing of your personal data will be carried out on the basis of one of the following legal grounds:

· Processing is necessary for the negotiation, conclusion, or performance of a contract to which you are a party;

· Processing is necessary to respond to a request made through the website;

· Processing is necessary for compliance with a legal obligation to which the Controller is subject;

· Processing is carried out on the basis of your consent;

· Processing is necessary to protect your vital interests or those of another natural person;

· Processing is necessary for the purposes of the legitimate interests pursued by TERASTEEL S.A. or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms;

· In the case of special categories of data, processing will be carried out if, in addition to a general legal basis for data processing, one of the following specific processing conditions is also met:

̶ The consent of the data subject has been obtained;

̶ We have a legal obligation to process these categories of data;

̶ Processing is necessary for the establishment, exercise, or defense of legal claims.

· Processing is necessary to provide you with relevant information about our products and services. This information may be sent by post/courier, email, or telephone. If you do not wish to receive this information, you can request that it be stopped at any time.

· Processing is necessary for conducting market analyses and studies in order to improve our products and services. In this regard, we may contact both you and your representatives to complete questionnaires;

· Processing is necessary to fulfill your requests and respond to your questions or complaints;

· Processing is necessary to conduct market research and evaluate marketing strategies and campaigns.

We may use your personal data for the following purposes ("Permitted Purposes"):

.To fulfill your requests and respond to your questions or complaints;

.To process your application (if you apply for a job opening)

.To manage and administer the contractual relationship with our partners; including placing, registering, and delivering orders.

.To send you relevant information about our products and services. This information may be sent by post/courier, email, or telephone. If you do not wish to receive this information, you can request to be removed from our mailing list at any time.

.To conduct market analyses and studies in order to improve our products and services. To this end, we may contact you or your representatives to complete questionnaires;

.To conduct market research and evaluate marketing strategies and campaigns;

.For any purpose related to and/or ancillary to any of the above, or for any other purpose for which your personal data has been provided to us, in compliance with applicable law.

Possible transfers of your data

.To the carrier, for the delivery of products, in accordance with the contract/order;

.To local, central, and national authorities, at their request; or to fulfill our legal obligations.

.To partners in order to fulfill our contractual obligations in relation to you;

-To the Kingspan Group, of which we are a part, or its affiliates that comply with the Group's policies.

We value your privacy and are committed to protecting your personal information. This data policy explains how we collect, use, and protect the information you provide to us during calls to our call center.

When you contact our call center, we may collect the following types of information: Personal identification information: Such as your name, address, phone number, email address, and other contact details. Account information:

Details about your account with us, including your account number, transaction history, and payment information.

Details of your request for information: Information relating to the nature of your question, feedback, or complaint.

The information we collect from calls we receive is used to improve the quality of our services and ensure that your experience is as pleasant and efficient as possible.

This data is used in various ways, as follows:

• Provision of services: The information we collect enables us to respond quickly and accurately to your questions, process transactions securely and efficiently, and provide you with the services you request. For example, we may use the data to personalize our interactions with you, ensuring that the solutions we offer are tailored to your specific needs.

• Customer support: Data obtained from calls helps us provide faster and more efficient support. This includes identifying and resolving issues you encounter, as well as continuously improving our customer support services. By analyzing calls, we can identify areas where difficulties frequently arise and implement proactive solutions to prevent them from occurring in the future.

• Communication - We use your information to contact you about your requests, ongoing transactions, or other relevant updates. This includes confirming receipt of a request, providing additional information, or notifying you of important changes to our services. Our goal is to maintain an open and transparent line of communication so that you are always informed and up to date on what is important to you.

• Internal analysis: Data collected from calls is used to perform internal analyses, which are essential for ensuring the quality of our services and training our teams. This includes evaluating the performance of call center agents, identifying trends in reported issues, and developing strategies for continuously improving the customer experience. These analyses also help us to better understand your needs and tailor our services accordingly.

To protect your personal information and ensure its confidentiality, we have implemented a series of rigorous security measures. We are committed to complying with the highest standards of data protection by adopting advanced techniques and procedures, as follows:

• Access control: Access to your personal information is strictly limited to authorized personnel who have been properly trained in confidentiality and data protection.

• Data encryption: Your data is encrypted both during transmission and storage using strong encryption protocols that protect your information from unauthorized access. This means that even if the data were intercepted, it cannot be read or used by third parties.

• Regular audits and reviews: To ensure that our data protection measures are always up to the highest standards, we conduct regular audits and reviews.

• Storage period: The maximum data storage period is 18 months, after which it is deleted. This measure helps reduce the risk of data exposure and protects your privacy in the long term.

• We do not sell, trade, or otherwise transfer your personal information to outside parties, except as described below:

• Service providers: We may share information with trusted service providers who help us operate our call center and provide services to you, based on strict confidentiality agreements.

• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests from public authorities.

You have the following rights regarding your personal information: Access: You can request access to the personal information we hold about you.

• Correction: You may request that we correct any inaccurate or incomplete information.

• Deletion: You can request the deletion of your personal information, subject to legal and contractual restrictions.

• Opt-out: You may opt out of receiving marketing communications from us at any time.

We may update this Data Policy from time to time. Any changes will be posted on this page, and we encourage you to review it periodically. By contacting our call center, you acknowledge that you have read, understood, and agree to this Data Policy.

Thank you for entrusting us with your personal information.

HOW LONG DO WE STORE YOUR PERSONAL DATA?

TERASTEEL S.A. has implemented technical and organizational measures to organize the process and specific criteria for storing your personal data (including in accordance with our archiving procedures). We will cease processing personal data relating to the data contained in your CV after a period of 36 months.

We will cease processing personal data after a period of 36 months, or when you withdraw your consent (if applicable) and there are no legitimate or legal reasons that justify the continued processing of your data by TERASTEEL S.A. (including TERASTEEL S.A.'s legal obligation to continue to store the data).

Thank you!

The entire content of this website, including text, graphics, photographs, software, logos, and any other materials present on the website, is protected by national, EU, and international copyright and related rights laws and is the property of TERASTEEL S.A. (hereinafter "TeraSteel") or its affiliates or partners. No material on this website may be reproduced (in whole or in part) or modified without the written consent of TERASTEEL S.A..

Users who reproduce or modify the materials on this website will bear the consequences, in accordance with national, EU, and international legislation on copyright and related rights. Any dispute relating to this website shall be subject to the jurisdiction of the courts of general jurisdiction in Romania, within the jurisdiction of which TERASTEEL S.A. has its registered office.

In view of the above, the following are not permitted:

̶ copying, multiplying, distributing, archiving or storing, by any means, the materials and information on this website, except for those included in the Download section;

̶ deleting or modifying, by any means, the materials and information published or attempting to perform any of these actions;

̶ attempting to interfere, by any means, with the content of this website;

̶ attempting to scan, probe, or test, without authorization, the vulnerability of any system on the TeraSteel network or accessing any servers or services on the TeraSteel network that are not publicly available;

̶ using any email addresses published through the website without the written consent of their owners for distribution on mailing lists, for sending commercial emails ("spamming"), or for any other purpose other than sending justified personal emails.

Violation of any of these rules will result in civil and/or criminal liability. TeraSteel will investigate any such violations and may cooperate with law enforcement authorities in pursuing the offending users.

TeraSteel makes every effort to present the colors, specifications, and descriptions of products as accurately as possible. However, due to the large volume of data, inadvertent errors may occur in the product information. In addition, the colors you see on your monitor may differ from the actual colors of the products.

Updated 27th of October 2026.