Company: SUZ
Filing Date: 2025-09-04
Form Type: 424B2
Source: 0001104659-25-087376
Chunk: 146

Company: Suzano S.A.
Filing Date: 2025-09-04
Form: 424B2
Chunk 146
---
 under the plan is lower than the distribution it can be expected to receive in case of a bankruptcy
of the debtor or (ii) a request of an affected creditor of a non-consenting class, if the plan provides for a distribution of value
that deviates from the statutory or contractual ranking and priority to the detriment of that class.

Under the WHOA, the court may grant a stay on enforcement of a maximum of four months, with a possible extension of four months. During
such period, inter alia, all enforcement action against the assets of (or in the possession of) the debtor is suspended, including
action to enforce security over the assets of the debtor. Accordingly, during such stay a pledgee of claims may not collect nor notify
the debtors of such pledged claims of its rights of pledge.

<div align='center'>44

DATA PROTECTION PRIVACY NOTICE</div>

Data Protection in Austria

The General Data Protection Regulation (EU) 2016/679
(“GDPR”) regulates data protection and privacy for all individual citizens of the European Union (EU) and the European
Economic Area (EEA). It addresses the transfer of personal data outside the EU and EEA areas. The GDPR aims primarily to give control
to individuals over their personal data and to simplify the regulatory environment for international business within the EU. The regulation
contains provisions and requirements related to the processing of personal data of individuals (formally called “data subjects”
in the GDPR) inside the EEA, and applies to any enterprise established in the EEA or — regardless of its location and the data
subjects' citizenship — that is processing the personal information of data subjects inside the EEA.

In defined situations under this prospectus,
Suzano Austria may come into the position to collect data from holders, including EU residents. Before collecting such data, Suzano Austria
shall have put in place appropriate technical and organizational measures to implement the data protection principles. Business processes
that handle personal data must be designed and built with consideration of the principles and provide safeguards to protect data (for
example, using pseudonymization or full anonymization where appropriate), and use the highest-possible privacy settings by default, so
that the datasets are not publicly available without explicit, informed consent, and cannot be used to identify a subject without additional
information (which must be stored separately). No personal data may be processed unless this processing is done under a lawful basis
specified by the GDPR. Suzano Austria, in advance, shall