TGS Website Privacy Statement

1. Introduction

Privacy and data protection laws protect the integrity and confidentiality of an individual’s Personal Data. TGS is committed to protecting the privacy rights of our employees and those with whom we do business. This Privacy Statement explains what Personal Data TGS ASA and its subsidiaries (“TGS” or the "TGS Group") collect from you, how we use such data, and how you may exercise your rights.

We will only use Personal Data for appropriate purposes and it will be processed in accordance with applicable data protection regulation and the draft TGS's Binding Corporate Rules which is solicited for approval by data protection authorities (“BCR”).

Within the TGS Group, TGS ASA will be the data controller for the TGS company(ies) you have your relationship with. You will find the list of TGS legal entities processing Personal Data below as appendix 1 hereto. TGS ASA operates tgs.com and is the controller for the processing of Personal Data generated from using the site, as well as a number of the processes described in Section 3 below.

TGS processes Personal Data from our directors, officers, employees, and external individuals, such as representatives of our customers, suppliers and business partners, and other persons who contact us, for example by participating at our events or by newsletter signup.

This Privacy Statement explains which Personal Data TGS collects from you, how we use the data, and how you may exercise your rights pursuant to applicable data protection legislation.

TGS will only use your Personal Data for the purposes for which we collected it, unless TGS reasonably considers that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact TGS. If TGS needs to use your Personal Data for an unrelated purpose, TGS will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Personal Data is not retained for a longer period than is necessary for the purposes for which it was collected. We will either permanently anonymize it or in a secure manner delete Personal Data that we no longer need or are under an obligation to retain.

2. TGS’s Processing of Personal Data - How We Collect and Use

2.1. Purpose and Legal Basis

TGS collects data to operate effectively, optimize your experience of our products, prepare, and deliver our services to our customers, receive services from our suppliers, collaborate with our business partners, and share information about our work and participation in events. TGS also Processes Personal Data about employees and external consultants working on TGS premises or in TGS systems, and about individuals not employed or engaged by TGS to whom this privacy policy is primarily aimed. The main categories of Personal Data processed is described in this Section 2 below.

Personal Data we collect may be combined with data obtained from other services of TGS and other companies. Subject to the section below on “Reasons We Share Personal Data”, access to your Personal Data is strictly limited to TGS employees who have appropriate authorization and a clear business need for that data.

TGS will always process Personal Data fairly and lawfully, and only for a specified, explicit and legitimate purpose or as required by law. TGS will therefore only process Personal Data when such processing is necessary for us to manage our operations, provide services or other legitimate business interests, comply with legal or contractual obligations or after receiving consent (the latter which can be withdrawn at any time). Withdrawing consent will not affect the lawfulness of the processing based on the consent prior to withdrawing it. Further information on specific legal basis is provided below.

TGS will ensure appropriate information security related to confidentiality, integrity and availability. Personal Data will be retained only for the period that is required to serve the legitimate purpose or as required by law. Third party service providers may process Personal Data on behalf of TGS within various areas. TGS has implemented adequate safeguards in accordance with applicable law to protect your Personal Data processed by third party service providers.

TGS processes Personal Data about data subjects that are not employed or engaged by TGS for these various purposes:

2.2 Procurement - Suppliers and Business Partners

To procure goods and services from suppliers and contractors in our operations, TGS collects and stores human resource and business contact information, such as name, address, telephone, and email, necessary to process invoices, payments, or other commitments with suppliers, agents, or other business partners. In connection with the supplier selection process, we also collect due diligence information, which may include company structure, credit checks, references, interviews, and other background checks. The legal basis is based on the execution of the agreement with such third-parties and TGS’s legitimate interest in ensuring good management of and support of our suppliers and business partners.

TGS may also disclose Personal Data to a third party for a specific business purpose. In such situations, TGS will in general sign a contract describing the purpose and requiring the recipient to both keep the Personal Data confidential and not use it for any other purpose. TGS may share Personal Data with the third parties such as service providers, public authorities and business partners.

The legal basis is to pursue our legitimate interests.

2.3 Sales – Customers and Potential Customers

To provide our customers with the services they require from us, TGS collects and stores business-to-business contact information, such as name, company name, phone number, fax number, title, and department name. We also store exchange communication, preferences, or feedback that is important to fulfill your order.

We distribute newsletters and gather statistics using industry-standard technologies to help us monitor and improve the user experience. You can unsubscribe from any of our newsletters if you no longer wish to receive them.

We also from time to time collect and approach potential customers based on public source information and with the help of third parties enrich the data to create pointed marketing material to representatives of potential corporate customers. We will seek consent for such marketing efforts, and make clear that consent can be withdrawn.

The legal basis is to pursue our legitimate interests. To the extent necessary, we will also obtain the consent from the potential corporate customers to marketing efforts (which consent can be withdrawn).

2.4 Operations - Customers

As part of the products and services TGS deliver to its customers, we provide secure access to our data systems and will for this purpose store name and email address of customer representatives for purposes of authentication and management of customer profile and user groups.

The legal basis is to pursue our legitimate interests.

2.5 Employees, Directors, Officers and Job Applicants

TGS gathers human resource information about employees, directors, and officers for daily operations, compliance and background checks, identity verification, competency assessment, education verification, integrity checks, and security purposes by checking affiliations to high-risk countries. We may share information, such as CVs over our staff to our customers for their competency verification purposes, passport copies to contractors and agencies for travel, visa and logistical purposes, copies of passport and electricity bills of directors and officers to banks, regulators and financial institutions for KYC and compliance purposes, and name, age and title to insurance companies for insurance purposes.

TGS may share information as necessary if TGS agrees or negotiates any of the following: (1) the sale or merger of TGS or its assets or (2) the sale of one of our businesses or its assets. TGS may share information with the acquirer and its representatives after the transaction closes or as part of negotiations, due diligence and implementation prior to closing.

The legal basis is to perform a contract with the data subject, comply with legal obligations, pursue our legitimate interests, to establish, exercising the rights of TGS in the field of employment, social security and social protection law, and exercise or defend legal claims. From time to time, we may also ask for express consent to process such data.

2.6 Recruitment and Onboarding

TGS processes Personal Data for recruitment purposes to ensure that TGS recruits qualified candidates. The Personal Data processed include contact information, recruitment and human resources information.

The legal basis TGS rely on for processing your Personal Data relates to processing necessary to perform a contract or to take steps at your request, before entering a contract, or your consent to being included in the CV-database.

TGS also processes Personal Data to cater for onboarding of external personnel into the TGS organization based on mergers and/or acquisitions and/or transfer of an undertaking. The Personal Data processed include contact information, recruitment and human resources information. The legal basis TGS relies on in these circumstances is legal obligation or legitimate interest.

You will receive more detailed information about the two types of processing and the legal basis when entering the recruitment process or you are being part of the onboarding process.

2.7 Integrity and Compliance Due Diligence – Third Parties

We also conduct integrity due diligence checks to comply with applicable anti-bribery and corruption-, anti-money laundry, anti-fraud, politically exposed persons (PEP) related requirements, international economic and trade sanctions, security, and human and labor rights legislation. We refer to this as our Integrity and Compliance Due Diligence Process (DD Process). The DD Process includes collecting information to help us understand who our counterparties are, their values and how their business is conducted. This process will in some instances include collecting and processing Personal Data of directors, officers, and contact persons such as name, nationality, residence, existing position, former positions, ownership participation, appointments, status as a public official, and CVs, and also criminal records and offences.

The legal basis is to comply with legal obligations, pursue our legitimate interests, to establish, exercise or defend legal claims, and/or performing the obligations and exercising the rights of TGS in the field of employment, social security and social protection law. From time to time, we may also ask for express consent to process such data.

2.8 Visitors – Third Parties

Visitors to our offices are required to log their presence for security and administration reasons. We collect your name, company name, telephone number, and, when a parking permit is needed, your vehicle registration number. For those offices where an online system is in place, this information is anonymized after your visit unless you have requested that the system store your details. Visitors to TGS vessels must log their presence for security and administration reasons, and we collect name, ID, company name, contact information, and the reason for the visit.

The legal basis is to pursue our legitimate interests, such contracts entered into with clients and security requirements and comply with legal obligations re safety and security.

2.9 Compliance Hotline – Employees and Third Parties

TGS has set up a Compliance Hotline where employees and external third parties interacting with us can raise concerns or report any suspected or potential breaches of law or our Code of Conduct. Individuals contacting via the TGS hotline may choose to do it anonymously. If you wish to be identified, we will store your contact information together with the hotline report. Due to the nature of the Compliance Hotline, the processing may include all categories of Personal Data, also special categories.

The legal basis is legitimate interest or processing necessary for the purposes of performing the obligations and exercising the rights of TGS in the field of employment, social security and social protection law, or for the establishment, exercise or defense of legal claims.

2.10 The Norwegian Transparency Act

To ensure compliance with TGS's duty of disclosure pursuant to the Transparency Act, TGS will process Personal Data relating to those requesting information. The Personal Data processed will primarily be contact information, as well as other information necessary to carry out TGS's processing of the information disclosure.

The legal basis is our obligation under the Transparency Act, as well as to safeguard our legitimate interests and establish, enforce or defend legal claims.

2.11 Communication

TGS communicates externally and internally with the general public, specific target groups and individual persons. Examples of communication activities performed by TGS or third parties are distribution of newsletters, press releases, company reports, optimizing websites, organizing events, handling user-initiated dialogue, providing information to public authorities, conducting surveys, and communicating in social media networks. The Personal Data processed includes contact information and communication-related information.

The legal basis is legitimate interest in providing information and ensuring good management of and support for our customers, suppliers and partners, or your consent.

2.12 Security and emergency response

TGS has implemented various security measures that requires processing of Personal Data. This is to safeguard against illegal or unauthorized access to areas, buildings, rooms, systems, processes or equipment. For example, TGS premises can have activity logs, camera surveillance (CCTV), controls of delivery vehicles, the drivers, visitor and employee access control. The categories of Personal Data we collect and use, depend on the security measures in question. It includes a variety of images and videos, contact information and place of employment, date and time of access to premises and information about vehicles.

TGS’s operations entail a certain level of risk, both for Norwegian and international operations. The purpose of the processing is to secure personnel support during an emergency response situation (ensure personnel emergency preparedness). The Personal Data processed may include all relevant data about the personnel in an emergency incident; contact information, date of birth, next-of-kin, contact person for employer and contractor. The purpose is to comply with legal obligations within different jurisdictions concerning emergency preparedness.

The legal basis for such processing of Personal Data is our legitimate interests in safeguarding of our business and any applicable legal requirements relating to this.

2.13 Recordings of certain trading activities

For certain trading activities, TGS processes contact information and the full content of commercial conversations on telephone and IM to document negotiations, trading and agreements as well as to ensure compliance to regulatory requirements for documentation.

The legal basis is to comply with legal obligations and pursue our legitimate interest.

2.14 TGS Pension

TGS processes Personal Data for handling pension. Former employees in TGS-subsidiaries, may contact your local pension scheme provider.

The legal basis is to comply with legal obligations and obligations under contract, and pursue our legitimate interest.

2.15 Website, Cookies, Youtube and People of Email Us

When someone visits www.tgs.com, we collect standard website traffic information and details of visitor behavior patterns. Visitors to www.tgs.com who seek information about our products or services, or submit other information to us, may be asked to provide Personal Data, typically an email address, postal address, name, and how an email received from TGS is used. Further, the Personal Data we collect may also include company name, phone number, title, and department name.

TGS uses cookies (small text files placed on your device) on our website www.tgs.com to help collect data. Cookies allow us, among other things, to store your preferences and settings; and analyze how our website is performing. TGS also uses cookies to ensure you get the best user experience. TGS gives an explicit notice when entering the website www.tgs.com that we use cookies. You can view all cookies used on our website and what they do by clicking on this icon on the bottom right of the www.tgs.com page: This Cookie Information Section provides you with full visibility and control on all cookies used on our website. However, by disabling cookies some of our website features may not function as a result. Emails sent to you may also attach cookies, these are used to see how TGS can best optimize its service offering to you.

TGS utilizes the YouTube API to display YouTube videos on our website. For more information see the YouTube Terms of Service and Google Privacy Policy. YouTube collects IPS and system settings of users accessing those videos. However, if a person decides to log in to YouTube, then Google processes data connected with their user profile.

We use Transport Layer Security (TLS) to encrypt and protect our office email traffic. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit. We also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

2.16 Automated technologies or interactions

As you interact with the TGS website, TGS will automatically collect technological data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.

The legal basis is to pursue our legitimate interest.

2.17 Gifts, Entertainment and Sponsorships

To abide by anti-corruption laws and regulations, TGS will collect the names of company representatives that have provided, or received gifts and entertainment from TGS.

When individuals apply for sponsorship they submit their information on an application form, provide details of their proposal and an outline of the potential cost. Those who are awarded grants are asked to provide progress reports and expenses. Any Personal Data provided in the application and during sponsorship are used only to review the sponsorship and the ongoing administration and management of any sponsorship awarded. We may also publish information about projects on our own website, including the amounts of the sponsorship awarded and the recipient of the grant.

The legal basis is to comply with legal obligations and pursue our legitimate interest.

3. Categories and collection of Personal Data

For easier understanding of this Privacy Statement, we have set up the following categories. This does not mean or entail that the processing will always entail all the examples of personal information included in the categories. The categories of Personal Data TGS may collect and hold about data subjects include:

• Contact information, such as names and addresses, telephone numbers and email addresses, titles etc.
• Recruitment information, such as application, CV, references, background checks, interviews and assessments, immigration and relocation information, exit surveys
• Human resources information such as details about an individual’s work experience and qualifications, date of birth, identification documentation, driver’s license details; national identity, social security number, employee number, position, organization, bank account, next of kin, union membership, location, salary and leader
• Communication-related information, such as public political relations, positions, preferences related to marketing and events (including allergies/diets restrictions when provided by participants), and information related to user behavior in own communication-channels (including IP-addresses).

Personal Data may be collected in several ways, including:

• directly by TGS staff when establishing a business relationship or through operational dealings;
• from a third-party service provider or agent, from a source of publicly available information (e.g. websites) or from an employer (e.g. where a supplier or contractor provides Personal Data about their employees);
• through use of TGS's website; or
• data provided directly by you.

4. Reasons We Share Personal Data

From time to time, TGS enters into agreements with other companies to perform services to us, such as for operation and provision of systems, provision of customer support, hosting of websites, processing transactions, or performing statistical analysis of our services. In these cases, we deem it necessary to share information. To the extent Personal Data is transferred to such external companies (acting as data processors), we will implement necessary security measures in accordance with applicable data protection legislation, e.g., by entering into data processor agreements. Such service providers will only be permitted to obtain Personal Data to the extent necessary to provide their services to TGS. We will not disclose your Personal Data to any third party for the purpose of allowing them to market their products or services to you, and neither they nor we will sell or pass them to anyone other than TGS without your prior written permission. Please note that our website may contain links to other, non-TGS websites. TGS is not responsible for the content of or the privacy practices of such other sites.

5. Transfer of Personal Data

TGS has established BCR to provide TGS with a legal basis for transfer of Personal Data within the TGS Group to TGS companies outside of EU/EEA (when approved by the data protection authorities). Until the BCR is approved, other safeguards like EU Standard Contractual Clauses will apply. The BCR will apply to all Personal Data, within the TGS Group, which are protected by applicable EU data protection law. TGS uses best efforts to ensure that the European rules on trans-border data flows are complied with when Personal Data are transferred to external processors (outside of the TGS Group) located outside of EU/EEA or located in a country that is not recognized by the EU Commission as ensuring an adequate level of protection. Examples of such safeguards are BCR, EU Standard Contractual Clauses or other applicable legal mechanisms.

6. Your rights as a data subject

All data subjects in the EU/EEA whose Personal Data is processed by TGS within the scope of the GDPR and transferred to a TGS group company outside of the EU/EEA have the following rights:

• Withdraw consent: you have the right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact us via e-mail gdpr@tgs.com. If TGS’ processing is based on your consent, you are entitled to at any time withdraw this consent. However, please note that if we are not provided with your consent to process your Personal Data, we may not be able to deliver our services to you or receive services from you.
• Access and information: to be granted access to your Personal Data and without undue delay receive in writing any information relating to your Personal Data in a concise, transparent, intelligible, and easily accessible
• Rectification and restriction: to require without undue delay the rectification of any inaccurate Personal Data or complete incomplete Personal Data and restrict such data’s usage
• Erasure: to require erasure without undue delay of Personal Data that is no longer necessary to process in relation to the purposes for which they were collected or processed or where the consent is withdrawn
• Portability: to receive your Personal Data in a structured, commonly used, and machine-readable format and have the right to transfer this to another controller without hindrance from TGS
• Object: to processing of your Personal Data where TGS is relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground as feel it impacts on your fundamental rights and freedoms.

7. How to exercise your rights as a data subject – Contact us

National and international data protection gives rights to data subjects. The data subjects have, under some circumstances and subject to the laws of the particular jurisdiction, the right to request access, rectification, erasure and/or restriction to processing of their data. If you have any questions or concerns about our collection of and processing of your Personal Data, please do not hesitate to contact the TGS Data Privacy Compliance Officer (DCO) at TGS ASA, Lilleakerveien 4C, 0283 Oslo, attn. Lars Mysen, or send an email to gdpr@tgs.com.

You have a right to complain to the Norwegian or local Data Protection Authority if you consider that TGS has breached the data protection legislation, but we encourage you to first contact our DCO before filing such complaint. If you want more detailed information on specific retention time, please contact our DCO on the address above.

8. Choice of Law and Legal Venue

Any dispute arising from your use of this website and/or our processing of your Personal Data shall be governed by and construed in accordance with the laws of Norway, and with the exclusive jurisdiction of the Oslo District Court.

9. Modifications to this Privacy Statement

This Privacy Statement was last updated on 3 October 2025. We may update this Privacy Statement from time to time. If such updates are not material, we may make such alterations without posting a specific notice on our website. If the changes are material and affects your rights or the way we process Personal Data, we will provide a specific notice on our website. Please review this privacy policy from time to time.

APPENDIX 1 – LIST OF TGS ENTITIES PROCESSING PERSONAL DATA