Common use of Adequate use of the Information Clause in Contracts

Adequate use of the Information. We recognize that the information is an intangible asset owned by Cenit and therefore we protect all of the Company’s data and use it to achieve the goals of our works and the management of the business. We will have special care with Cenit’s information that is not publicly available, the privileged information and the private information of persons and or organizations. I use the information in an adequate manner when: ◦ I deliver information to others only to achieve the goals and to manage the business. I enter into a protection agreement to prevent the undue use. ◦ I respect and make others respect the protection agreements entered into with contractors and suppliers. ◦ I do not give information that allows improving the negotiation positions regarding contracts, operations and in general any relationship with Cenit and I do not use privileged information to favor my own interest or the interest of third parties. We acknowledge that to do so is illegal and it can lead to legal action. DC – Crude Oil Transportation Agreement – 018 – 2013 194 ◦ I respect the privacy, dignity and good name of all persons. I gather, use and process the data only with legitimate business purposes, in a responsible manner and complying with all applicable laws. ◦ I act according to the law applicable, the pertinent contractual obligations and the policies for the handling of information. ◦ I consult the policies for the protection of data, privileged data and privacy to obtain additional guidance and advice according to the company’s guidelines. ◦ I discuss business issues at Cenit. I do not talk of these issues in public places. ◦ I look after the relevant information of the business from my position and I get sure that business memory is built. What do we understand as non – public information? Cenit’s data is not public. The examples of non – public data include the data related to: employees, strategic and business plans, important changes in the presidency, mergers, technical specifications, proposals in progress, financial data, technological innovation, among other. What do we understand as privileged information? It is the information that allows improving the negotiation position regarding contracts, operations, relationships and in general any of Cenit’s relationships. What do we understand as private information? It is personal information of the persons and organizations that have relationships with Cenit and that it is protected by the privacy laws and the respect for persons.

Adequate use of the Information. We recognize that the information is an intangible asset owned by Cenit and therefore we protect all of the Company’s data and use it to achieve the goals of our works and the management of the business. We will have special care with Cenit’s information that is not publicly available, the privileged information and the private information of persons and or organizations. I use the information in an adequate manner when: ◦ I deliver information to others only to achieve the goals and to manage the business. I enter into a protection agreement to prevent the undue use. ◦ I respect and make others respect the protection agreements entered into with contractors and suppliers. ◦ I do not give information that allows improving the negotiation positions regarding contracts, operations and in general any relationship with Cenit and I do not use privileged information to favor my own interest or the interest of third parties. We acknowledge that to do so is illegal and it can lead to legal action. DC – Contrato de Transporte de Crude Oil Transportation Agreement – 018 017 – 2013 194 196 Crude Oil Offloading Agreement ◦ I respect the privacy, dignity and good name of all persons. I gather, use and process the data only with legitimate business purposes, in a responsible manner and complying with all applicable laws. ◦ I act according to the law applicable, the pertinent contractual obligations and the policies for the handling of information. ◦ I consult the policies for the protection of data, privileged data and privacy to obtain additional guidance and advice according to the company’s guidelines. ◦ I discuss business issues at Cenit. I do not talk of these issues in public places. ◦ I look after the relevant information of the business from my position and I get sure that business memory is built. What do we understand as non – public information? Cenit’s data is not public. The examples of non – public data include the data related to: employees, strategic and business plans, important changes in the presidency, mergers, technical specifications, proposals in progress, financial data, technological innovation, among other. What do we understand as privileged information? It is the information that allows improving the negotiation position regarding contracts, operations, relationships and in general any of Cenit’s relationships. What do we understand as private information? It is personal information of the persons and organizations that have relationships with Cenit and that it is protected by the privacy laws and the respect for persons.

Adequate use of the Information. We recognize that the information is an intangible asset owned by Cenit and therefore we protect all of the Company’s data and use it to achieve the goals of our works and the management of the business. We will have special care with Cenit’s information that is not publicly available, the privileged information and the private information of persons and or organizations. I use the information in an adequate manner when: ◦ I deliver information to others only to achieve the goals and to manage the business. I enter into a protection agreement to prevent the undue use. ◦ I respect and make others respect the protection agreements entered into with contractors and suppliers. ◦ I do not give information that allows improving the negotiation positions regarding contracts, operations and in general any relationship with Cenit and I do not use privileged information to favor my own interest or the interest of third parties. We acknowledge that to do so is illegal and it can lead to legal action. DC – DC- Crude Oil Transportation Agreement – 018 – - 009 - 2013 194 195 Contrato de Descargue xx Xxxxx ◦ I respect the privacy, dignity and good name of all persons. I gather, use and process the data only with legitimate business purposes, in a responsible manner and complying with all applicable laws. ◦ I act according to the law applicable, the pertinent contractual obligations and the policies for the handling of information. ◦ I consult the policies for the protection of data, privileged data and privacy to obtain additional guidance and advice according to the company’s guidelines. ◦ I discuss business issues at Cenit. I do not talk of these issues in public places. ◦ I look after the relevant information of the business from my position and I get sure that business memory is built. What do we understand as non – public information? Cenit’s data is not public. The examples of non – public data include the data related to: employees, strategic and business plans, important changes in the presidency, mergers, technical specifications, proposals in progress, financial data, technological innovation, among other. What do we understand as privileged information? It is the information that allows improving the negotiation position regarding contracts, operations, relationships and in general any of Cenit’s relationships. What do we understand as private information? It is personal information of the persons and organizations that have relationships with Cenit and that it is protected by the privacy laws and the respect for persons.

Adequate use of the Information. We recognize that the information is an intangible asset owned by Cenit and therefore we protect all of the Company’s data and use it to achieve the goals of our works and the management of the business. We will have special care with Cenit’s information that is not publicly available, the privileged information and the private information of persons and or organizations. I use the information in an adequate manner when: ◦ I deliver information to others only to achieve the goals and to manage the business. I enter into a protection agreement to prevent the undue use. ◦ I respect and make others respect the protection agreements entered into with contractors and suppliers. ◦ I do not give information that allows improving the negotiation positions regarding contracts, operations and in general any relationship with Cenit and I do not use privileged information to favor my own interest or the interest of third parties. We acknowledge that to do so is illegal and it can lead to legal action. DC – Contrato de Transporte de Crude Oil Transportation Agreement – 018 008 – 2013 194 183 Crude Oil Offloading Agreement ◦ I respect the privacy, dignity and good name of all persons. I gather, use and process the data only with legitimate business purposes, in a responsible manner and complying with all applicable laws. ◦ I act according to the law applicable, the pertinent contractual obligations and the policies for the handling of information. ◦ I consult the policies for the protection of data, privileged data and privacy to obtain additional guidance and advice according to the company’s guidelines. ◦ I discuss business issues at Cenit. I do not talk of these issues in public places. ◦ I look after the relevant information of the business from my position and I get sure that business memory is built. What do we understand as non – public information? Cenit’s data is not public. The examples of non – public data include the data related to: employees, strategic and business plans, important changes in the presidency, mergers, technical specifications, proposals in progress, financial data, technological innovation, among other. What do we understand as privileged information? It is the information that allows improving the negotiation position regarding contracts, operations, relationships and in general any of Cenit’s relationships. What do we understand as private information? It is personal information of the persons and organizations that have relationships with Cenit and that it is protected by the privacy laws and the respect for persons.