Company: GIFLF
Filing Date: 2025-05-02
Form Type: 6-K
Source: 0001104659-25-043975
Chunk: 10

Company: Grifols SA
Filing Date: 2025-05-02
Form: 6-K
Chunk 10
---
 presence of a Notary Public in order to draw up the minutes of the General Shareholders' Meeting, pursuant to the provisions of article
203 of the Capital Companies Act (Ley de Sociedades de Capital).

<div align='center'>Personal Data</div>

According to the applicable personal data protection
laws, the shareholders and, if applicable, their proxy representatives, are hereby informed that any personal data provided by them to
the Company for the purposes of exercising their rights of information, participation, attendance, representation and vote in the General
Shareholders' Meeting, either physically or by telematic means, or the personal data provided for such purposes both by banking entities
or securities brokerages and dealers at which such shareholders have placed their shares in custody and the entity legally qualified to
record book entries (Sociedad de Gestión de los Sistemas de Registro, Compensación y Liquidación de Valores, S.A.U. – Iberclear) shall be processed by the Company, as data controller, with the aim to manage the development, compliance and control
of the existing shareholding structure, as well as the call, holding, attendance and development of the General Shareholders' Meeting.

Banking entities, securities brokerages and dealers,
and Iberclear may provide the Company with the list of shareholders containing the following personal data: first and last name, personal
identification or passport number and address. Furthermore, the shareholders represented at the General Shareholders' Meeting may provide
the Company with the first and last name, personal identification and passport number of their proxy representatives, unless the designated
proxy representatives are the Board Members, the Secretary and/or Vice Secretary of the Company. The submission of personal data to the
Company will strictly comply with the relevant applicable laws.

The legal basis for the processing of personal
data described here above is the appropriate execution of the relationship with shareholders and the compliance with legal duties. The
personal data shall be kept for as long as it will be necessary for the Company to comply with its legal duties, or for as long as liabilities
may arise from the relationship with the shareholder. Shareholders' personal data and, as the case may be, of their proxy representatives,
will not be communicated to third parties different than the service providers that manage the General Shareholders' Meeting unless it
is required to comply with a legal mandate.

The shareholders or, if applicable, their
proxy representatives, may with respect to their own data and in the terms set forth in the law:

| (