Privacy Policy  Access to some sections of this website (“Site”), user registration for events promoted or followed by the Barilla Center for Food and Nutrition (“BCFN”) and/or any request for information or services by Site users, could be subject to the entering of personal data whose processing by Barilla G. e R. Fratelli Società per Azioni company with corporate seat in Parma (Italy), Via Mantova 166 (“Barilla” or “Controller”), in its capacity as Controller of the processing of personal data, will be performed in compliance with Italian Legislative Decree 196/2003 regarding data protection entitled “Codice in materia di protezione dei dati personali” (Personal Data Protection Code) (“Code”). The purpose of this information  is to allow users to be aware of how Barilla processes their personal data even before they access the various sections of the Site and provide their personal data. Users will be required, in any case, to read this information before providing personal data by compiling the specific forms in the various sections of the Site. Purposes of the data processing Depending on the needs of users accessing the various sections of the Site, personal data gathered directly from users through compilation of online forms may be used in the following ways: a) to allow the registration to the Site which is required to access certain sections of the Site itself and to provide and manage the variety of services offered. For use of personal data in this way, the party involved must provide the following information: first name, last name, postal address and e-mail address, the last needed in order to send confirmation messages and those involving ID management to access the Site; b) to register and sign up for various events, including sending an electronic mail message for related invitations, promoted or followed by BCFN. For use of personal data in this way, the party involved must provide the following information: first name, last name, e-mail telephone, postal address, company name, job/profession; c) to send the newsletter via e-mail for updates regarding new features on the Site (the Site “Stay Informed” feature), contingent upon user prior specific consent and as long as this consent is not revoked. For use of personal data in this way, the party involved must provide the following information: first name, last name, postal address, e-mail address; d) subject to the user prior specific consent and as long as this consent is not revoked, to send scientific and informative material regarding studies, projects or events that may be promoted or followed by BCFN via: i) regular mail; ii) e-mail; iii) MMS and SMS. For use of personal data in this way, depending on the sending mode selected, the party involved must provide, respectively, the following information: i) first name, last name, address; ii) e-mail address; iii) mobile phone number; e) subject to the user prior specific consent and as long as this consent is not revoked, to carry out marketing activity (such as, for exemplary purposes only, sending of promotional and advertising material and/or performing related analysis on registered users that make it possible for BCFN to improve the services and publications it offers) including via e-mail, MMS and SMS, contingent upon specific consent and until this consent may be revoked. For use of personal data in this way, depending on the sending mode selected, the party involved must provide, respectively, the following information: first name, last name, address; e-mail address;

How personal data will be processed Personal Data will be mainly processed in an automated way, with procedures strictly related to the above purposes..  How personal data is supplied by users It is mandatory that the personal data specified for each type of use given in sections a), b), c), d) and e) above be supplied so that Barilla can fulfill user needs regarding Site operation and so that users can take part in events promoted or followed by BCFN. The supply of other personal data is optional. Failure to supply the mandatory personal data required for the services requested – or the supply of partial or incorrect data – will make it impossible for these activities to be fulfilled, while the failure to supply optional, non-critical personal data (whether in-full, partially or incorrectly) will not impede services being fulfilled. Nature of personal data processed In addition to personal data provided directly by the user (first name, last name, e-mail address, etc.), during connection to the Site, the computer systems and software programs utilized in the running of the Site itself indirectly gather some personal data whose transmission is implicit in the use of internet communications protocols. This data is processed solely in order to carry out anonymous statistical research. Subjects who may process the personal data  Personal data may be accessed by the employees or co-operators of the divisions of the Controller who, operating under the direct authority of the latter, are appointed as Processor or persons in charge of the processing of Personal Data, pursuant to articles 29 and 30 of the Code, and they will receive, in this regard, proper operating instructions. The same will happen – with the persons in charge appointed by the Processor – among its employees or co-operators. Communication or diffusion of the user personal data Personal data supplied directly by users by filling out the online forms will not be divulged or communicated to third parties, with the exception of employees or co-operators of the divisions of the Controller or of the Processors appointed by the Controller Controller and Processors of the personal data processing The Controller of the personal data processing is Barilla G. e R. Fratelli Società per Azioni, headquartered in Via Mantova, 166, Parma 43122; Processors of the Personal Data are: 1) Controller’s Group Communications and External Relations, Information Technology and Marketing Departments; 2) Burson Marsteller S.r.l., with registered office in Via Tortona 37, Milan 20144, Italy

3) Burson Masteller S.a.s., with registered office in Boulogne – Billancourt Cedex, rue Escudier 6, France 4) The European House Ambrosetti, with registered office in Via F.Albani 21, Milan 20149, Italy; 5) Zodiak Active S.r.l, with registered office in Largo Adua 1, Bergamo 24128 Italy; 6) MSL Italia S.r.l. with registered office in Viale Vittorio Veneto 22, Milan 20124, Italy; 7) Fondaca Fondazione per la Cittadinanza Attiva, with registered office in Via Machiavelli 25, Rome 00185, Italy; 8) FB & ASSOCIATI, with registered office in Via Sallustiana 15, Rome 00187, Italy 9) APCO Worldwide SA/NV, with registered office in Rue Montoyer 47, Bruxelles, Belgium1000;

10) APCO Worldwide Inc., with registered office in 700, 12^th street, N.W., Suite 800, Washington DC 20005, USA; 11) Codice Edizioni S.r.l., with registered office in Via G. Pomba 17, Turin 10123; Italy; 12) Fullsix S.p.A., with registered office in Viale del Ghisallo 20, Milan 20151, Italy; User rights provided by art. 7 of the Code  “Article 7 – Right of access to personal data and other rights 1. The party concerned has the right to obtain confirmation of whether or not personal data concerning him/her exists, even if not yet registered, as well as its communication in an intelligible form. 2. The party concerned has the right to information regarding: a) the source of personal data; b) for what purpose and how it will be processed; c) the methodology used for processing performed using electronic means; d) information identifying the Controller, Processors and designated representative within Italy, where required; e) the subjects or types of organization which personal data may be divulged to or shared with in their role of designated represented within Italy, Processors or assigned personnel. 3. The party concerned has the right to obtain: a) updates, changes or, where relevant, additions to the data; b) deletion, transformation in anonymous form or blocking of data processed in violation of the law, including information not required to be stored for the purposes for which it was gathered or subsequently processed; c) confirmation that the processes referred to in section a) and b), including specific content, have been brought to the attention of those to whom the information has been communicated or shared, except in the event this action proves impossible or would entail the use of means clearly disproportionate to the right in question. 4. The party concerned has the right to oppose (either totally or in part): a) for legitimate reasons, the processing of personal data involving him/her, even though such data pertains to the reason it was gathered: b) the processing of personal data involving him/her for the purposes of sending advertising or direct marketing material, or for carrying out market research or business communication.”

The above-mentioned rights may be exercised directly or through their delegation in writing or via proxy to other individuals or associations. How to exercise the rights outlined in art. 7 and how to obtain the list of the Processors of the personal data processing The user may, at any time, exercise his/her rights as specified in art. 7 of the Code, as well as obtain the complete list of the Processors by sending a message via electronic mail to the Controller’s address (info@barillacfn.com) or a letter via regular mail to: BARILLA G. e R. FRATELLI SOCIETÀ PER AZIONI - Ufficio Relazioni Esterne - Via Mantova, 166 - 43122 PARMA (ITALY). In addition, if he/she has given his/her consent, the user may oppose processing for the purposes outlined in sections c), d) and e) using the e-mail address of the user by clicking on the specific “link” found in every electronic mail message. How to modify the user "profile" The user may, at any time, modify the data supplied or ask their cancelation by sending an electronic mail message to the Controller’s e-mail address info@barillacfn.com, or by sending a letter via regular mail to: BARILLA G. e R. FRATELLI SOCIETÀ PER AZIONI - Ufficio Relazioni Esterne - Via Mantova, 166 - 43122 PARMA (ITALY).