Angra Meio Ambiente S.A values integrity, transparency and responsibility in relations with all its audiences. Therefore, true and honest information and care for the ethical conduct of its leaders, employees and suppliers are always valued.

Any act that does not comply with the Code of Ethics must be reported. In addition, any information or situation that may harm Angra Meio Ambiente S.A or any of its audiences is important, deserves attention and should be reported to Angra Meio Ambiente S.A Whistleblower Channel.

Angra Meio Ambiente S.A Whistleblower Channel is operated by a serious and independent company, which ensures the confidentiality of your information. There is no registration of the IPs of the users’ computers of the system through the internet.

Get to know Angra Meio Ambiente S.A's Code of Ethics clicking here.

You can also record your report by sending an email to: transparenciaama@relatoconfidencial.com.br, or by contacting us at 0800 721 2744.

Last Revised: [11/2025]

This Whistleblowing Channel is Operated by Deloitte Brazil at the request of Angra Meio Ambiente, so this Privacy Notice is intended to inform you exclusively how Deloitte Brazil treats your personal data as the manager of this system and Data Operator.

When referred to on this website, terms such as "we", "us" or "our" relate solely to Deloitte Brazil.

By reading this Privacy Notice, you will be aware of our commitment to the responsible and ethical processing of personal data, in accordance with our principles and values and, especially, in accordance with the rules of Law No. 13,709/2018 – General Law for the Protection of Personal Data (LGPD) and other applicable legislation.

PURPOSES OF PROCESSING YOUR INFORMATION

When using this platform, Deloitte Brazil will collect and process your data, provided by you voluntarily and at the request of Angra Meio Ambiente, performing the following treatments:

• Receipt of your data, provided by you on this platform (via website or telephone 0800);

• Review of the information provided, in order to protect the confidentiality required for the process;

• Sending the information provided to Angra Meio Ambiente;

• If your data is recorded as sensitive/identified, it may be used for telephone contact by Deloitte (if confidential or identified) and by Angra Meio Ambiente (if identified), if any interaction is required during the investigation process;

• While the report is under analysis by Angra Meio Ambiente, alerts can be sent to your email, registered on the platform at the time of registration, if there is any interaction in the tool.

For more information on the processing of data within the scope of the investigation of complaints (in addition to receipt in this system and sending to the Controller), please access the Privacy Notice of Angra Meio Ambiente.

DATA PROCESSING

The data to be processed within the scope of this platform will be limited to those provided by you, on a voluntary basis. The categories of personal data that may be processed, if provided by you, may relate to the following categories:

• Personal Identification Data, such as full name, date of birth, CPF number, RG number, driver's license, passport number, nationality, marital status, maiden name, affiliation, birth certificate, marriage certificate, voter card, work card, military identity, PIS/PASEP number;

• Genetic and Biometric Data, such as fingerprints, facial recognition, iris pattern, voice pattern, DNA, typing patterns, heart rate, hand and finger geometry measurements, eye movement tracking;

• Contact Data, such as full residential address, email address, landline and mobile phone number, business address, emergency contacts, postal mailing address;

• Location Data, such as GPS geolocation, IP address, mobile device location data, real-time location history, transaction location data, financial information, travel history, check-in data in public places, location of Wi-Fi network use;

• Financial Data, such as bank details (account and branch number), credit or debit card number, card security code, card expiration date, credit history, income tax return, salary information, pay stubs, investments and financial assets, debts and financial obligations;

• Professional and Academic Data, such as professional history, educational history, current position, functions performed, professional records such as CRM or OAB, certifications and licenses, training information, performance evaluations, academic projects and publications, letters of recommendation, promotion and dismissal information;

• Sensitive Health Data, such as medical records, health conditions, disease history, medical reports, laboratory tests, information on medications in use, allergies, hospital admission information, surgery history, psychological treatments, physical or mental disability information;

• Data on Consumer Habits, such as purchase history, product or service preferences, consumption frequency, average spending, loyalty program interactions, return and exchange information, food or lifestyle preferences, e-commerce app usage history, online shopping behavior;

• Other Sensitive Data, such as racial or ethnic origin, religious beliefs, political opinions, trade union membership, participation in political demonstrations, ideological preferences, membership in religious, ethnic, or cultural communities.

LEGAL FRAMEWORKS FOR PROCESSING YOUR DATA

Deloitte acts as a Data Processor on behalf of Angra Meio Ambiente, performing the processing of personal data solely as instructed by this Controller. For more information on the legal grounds for processing your data, please visit Angra Meio Ambiente.

SHARING WITH THIRD PARTIES AND INTERNATIONAL DATA TRANSFER

Deloitte acts as a Data Processor on behalf of Angra Meio Ambiente, performing the processing of personal data solely as instructed by this Controller. For more information about international sharing or transfers, please visit the Privacy Notice of Angra Meio Ambiente.

INFORMATION SECURITY

For the processing of your data in this system, we use a series of physical, electronic and administrative measures to ensure your personal data remains secure, accurate, and up-to-date. These measures include:

• Education and training of our professionals so that they are aware of our privacy and data protection obligations;

• Administrative and technical controls to restrict access to personal data, based on the need-to-know principle;

• Technological security measures, including firewalls, encryption, and antivirus software;

• Physical security measures, such as security badges to access our facilities.

Although we use appropriate security measures, once we receive your personal data, the transmission of data over the internet (including by email) is never completely secure. We strive to protect your personal data, but we cannot guarantee the security of data transmitted to or by us over the internet.

Please note that Deloitte acts as a Data Processor on behalf of Angra Meio Ambiente, performing the processing of personal data exclusively as instructed by this Controller. For more information on other security measures, please visit the Privacy Notice of Angra Meio Ambiente.

RETENTION OF INFORMATION

Deloitte acts as a Data Processor on behalf of Angra Meio Ambiente, performing the processing of personal data solely as instructed by this Controller. Therefore, we will retain your personal data according to the Controller's instructions, unless a legal obligation requires us to keep it for longer. For more information about retention practices, please visit the Privacy Notice of Angra Meio Ambiente.

YOUR RIGHTS

Deloitte acts as a Data Processor on behalf of Angra Meio Ambiente, performing the processing of personal data solely as instructed by this Controller.

To request the exercise of your rights, please visit the Privacy Notice of Angra Meio Ambiente, where you can find contact information.

CHANGES TO THIS PRIVACY NOTICE

We may modify or change this Privacy Notice from time to time.

To inform you of updates, we will change the revision date at the top of this page. The updated Privacy Notice will apply as of that revision date. Therefore, we encourage you to periodically review this Notice to stay informed of how your information is being protected.

By providing information through this website, you agree to the information described above.