All persons who transmit their communications in good faith shall be protected against any form of discrimination, retaliation, or penalization on account thereof. False or defamatory reports shall be subject to disciplinary action in accordance with applicable internal procedures, collective agreements, and legal regulations. The confidentiality of the whistleblower’s identity shall be guaranteed. The whistleblower’s identity shall not be disclosed to third parties, nor to the reported person, nor to direct supervisors, unless such disclosure is necessary to the relevant persons involved in any subsequent investigation or judicial proceedings initiated as a result of the investigation carried out by the Regulatory Compliance Management System. In compliance with the applicable Personal Data Protection regulations, please be advised that any data collected through this Ethics Channel shall be processed by Grupo IMESAPI for the purpose of handling the corresponding reports and inquiries, in accordance with the provisions established in the Corporate Compliance Program and internal regulations. The legal basis for this processing is the consent of the data subject, given by voluntarily submitting the information. Data shall be retained for the duration of the investigation and as long as its deletion is not requested, and in any event, in compliance with the applicable legal limitation periods. The information received may be disclosed to the relevant Grupo IMESAPI group companies where necessary for the purposes of the investigation. The Grupo IMESAPI group companies may be consulted in any official public registry. Likewise, please be advised that the data subject may at any time exercise their rights of access, rectification, erasure, portability, restriction, or objection by writing to the following address: Calle Vía de los Poblados, 9-11, Parque Empresarial Trianón – Building C, 28033 Madrid.