SAFETY SERVICE RISK EVALUATION

Similar documents
Functional Safety of Machinery: EN ISO Stewart Robinson. Overview of the presentation. References. TÜV SÜD Product Service

SAFETY RELAY APPLICATION

Hazard and Risk Assessment Guide for Dumpmaster bin-tipping machines

Safety Function: Single-beam Area Access Control (AAC)

Original operating instructions Safety switch with guard locking AC901S AC902S


Functional Safety of Machinery Presented by Greg Richards Manufacturing in America 02/22-23/2017

MACHINERY SAFEBOOK 5. Safety related control systems for machinery. Principles, standards and implementation. (Revision 5 of the Safebook series)

Operating Guide Safe Torque Off

Easy Implementation of the European Machinery Directive

Hands On: Introduction to Safety Workshop Presented by Robert Jones Manufacturing in America March 14-15, 2018

/ / 2018

FUNCTIONAL SAFETY OF ELECTRICAL INSTALLATIONS IN INDUSTRIAL PLANTS BY OTTO WALCH

Operating Guide Safe Torque Off

Applying Layer of Protection Analysis (LOPA) to Accelerator Safety Systems Design. Feng Tao

The agri-motive safety performance integrity level Or how do you call it?

Functional Safety: What It Is, Why It s Important And How to Comply

Safety Speed Monitoring

Original operating instructions Photoelectric safety sensors (safety light curtain / safety light grid) Protected area width (range) 0...

Table of correspondence between ISO :2003, ISO :2003, ISO :2007 and the new ISO 12100:2010. Date of document

SensaGuard TM Integrated Latch Installation Instructions

Measurement of Safety Integrity of E/E/PES according to IEC61508

Operating instructions Safety-monitoring module SRB 302X3. 1. About this document. Content

Operating instructions Safety-monitoring module SRB 302X3. 1 About this document

One giant leap for safety: AZM400.

Functional Safety of Machines and Systems Convenient Implementation of the European Machinery Directive

panasonic.net/id/pidsx/global Gentle start-up switches in accordance with ergonomics Reduces load on hands and fingers

Spoonshine CUTLERY POLISHERS

Safe Machines with opto-electronic protective devices. Reliable safety and flexibility in an advanced manner.

The importance of signs and colors in industry and in areas with risk of explosion

SAFI250 Machine Safety. Introduction

Safety. Detection. Control. Safety Guide. Safety in the working environment

panasonic.net/id/pidsx/global Lights up when conditions are normal (and at incipient liquid leak detection) Use as a warning Sensor

SAFETY INTERFACES SAFETY INTERFACES AND RELAYS

Powered sliding gates risk assessment

General terms and conditions... F-7 General precautions... P panasonic.net/id/pidsx/global. Use as a warning. Sensor. Emergency stop.

Non-contacting guards

Safety. Detection. Control. SAFETY INTERFACES. Safety Interfaces and Relays. Product catalogue. Issue 1

Guidelines. Safety Integrity Level - SIL - Valves and valve actuators. February Valves

SAFETY STANDARDS & SOLUTIONS MATERIAL HANDLING & INTRALOGISTICS

INSTRUCTION MANUAL. Handy Controller Exclusive for SF4B / SF4B<V2> Series. SFB-HC Ver.2.1 FUNCTION CANCEL ENTER

Basics of Safety Applications

Introduction to machine safety

Process Safety - Market Requirements. V.P.Raman Mott MacDonald Pvt. Ltd.

SAFETY CERTIFIED MODEL FP-700 COMBUSTIBLE GAS DETECTOR

Is your current safety system compliant to today's safety standard?

BES M30EP-PFC12F-S04G-D12 BES Q40ZU-PFC15B-S04G-D12 BES Q40ZU-PFC20F-S04G-D12 Inductive Safety Sensors User's Manual

SELF PRESERVATION SOCIETY By Jim Creak

SIL DETERMINATION AND PROBLEMS WITH THE APPLICATION OF LOPA

SAFEMASTER PRO. The configurable safety system versatile and extendable. Our experience. Your safety.

CO-ORDINATION OF NOTIFIED BODIES PPE Regulation 2016/425 RECOMMENDATION FOR USE

AIRPAD MACHINE AP

Guide to Gate Safety Legislation & the Machinery Directive

FUNCTIONAL SAFETY INCREMENTAL ENCODERS MASTERING SPEED CONTROL

Safety Instrumented Systems

First of all, what is a safety-related

This document is a preview generated by EVS

Improved productivity Two-stage detection

Guide to Gate Safety Legislation & the Machinery Directive. In Association with:

Lights up when conditions are normal (and at incipient liquid leak detection) Use as a warning. Sensor. Ensure productivity. Emergency stop.

The New EMC Directive 2004/108/EC

Sliding Gates White Paper 1 Sliding Gate Safety Third Edition

Safety Control Modules for Emergency Stop Circuits FF-SRS5988 FF-SRS5935 FF-SRS5925 FF-SRS5934 FF-SRS5924 TYPICAL APPLICATIONS APPROVALS DIMENSIONS

INTERNATIONAL STANDARD

SAFETY DEVICE 3 WITH VISIBLE LASER EMISSION MSD

Basics of Safety Applications

BEHIND THE LINES. Guarding & Machine Safety. Ian Hansen RotoConsult ARM Annual Meeting ARM Annual Meeting

Safety in the process industry

Rutgers Environmental Health and Safety (REHS)

Use of control and analytical X-ray apparatus

Installer: (Name, address, telephone number)

Installer: (Name, address, telephone)

Datasheet - MZM 100 ST2-1P2PWREM-A

RADAR REFLECTOR STANDARD FOR CERTIFICATION. DET NORSKE VERITAS Veritasveien 1, N-1322 Høvik, Norway Tel.: Fax:

IEC61511 Standard Overview

AUTOMATIC SLICING MACHINE METOS TGN 300 TN, TGI 300 K TGI 350 LN MG ,

MOULD WITH ENTERING PUNCHES

INTERNATIONAL STANDARD

Fire and Gas Detection and Mitigation Systems

Safety control unit 471 M41 H31. for 4 to 32 sensors, with safety and control outputs. Use. Models. + PLe according to EN ISO

SAFETY MANUAL. Electrochemical Gas Detector GT3000 Series Includes Transmitter (GTX) with H 2 S or O 2 Sensor Module (GTS)

Datasheet - MZM 100 B ST2-SD2PREM-A

Mechanics issn Transport issue 1, 2009 Communications article 0342

MACHINE GUARDING. Hazards of Unguarded Machines. Occupational Safety and Health Regulations (OSHA)

English version. Management Centre: Avenue Marnix 17, B Brussels

Simply safe. Transponder-coded safety switch CET with guard locking

Assessment of the Safety Integrity of Electrical Protection Systems in the Petrochemical Industry

Safety Integrated. Terms and Standards Terminology in Machinery Safety. Introduction 1. Term. Attachment 3. Reference Manual

ISO INTERNATIONAL STANDARD. Graphical symbols Safety colours and safety signs Part 2: Design principles for product safety labels

PRIMATECH WHITE PAPER CHANGES IN THE SECOND EDITION OF IEC 61511: A PROCESS SAFETY PERSPECTIVE

INTERNATIONAL STANDARD

Connection of CET4-AP to Siemens ET 200S

Risk assessment and analysis for swing gates

Guide to gate safety legislation and standards

GUIDE TO INSTALLATION

NON ELECTRICAL EQUIPMENT IN HAZARDOUS AREAS

Covidien Articulating Absorba Tack Foil Pouch Leak Tester Owner s Manual IPE SN Rev 1

Standard package Safexpert Standard Standard package Safexpert Standard PLUS Small Standard package Safexpert Standard Plus

Session Four Functional safety: the next edition of IEC Mirek Generowicz Engineering Manager, I&E Systems Pty Ltd

Where Process Safety meets Machine Safety

Transcription:

SAFETY SERVICE RISK EVALUATION Customer: Date: Machinery: Referent (customer): Recording technician (safety service): Technical manager (safety service): Safety Service manager: Page 1 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Contents 1. Foreword... 3 1.1 Definitions... 3 1.2 Risk assessment criteria... 5 1.3 Safety level assessment criteria... 5 1.4 Criteria for determining the performance level required (PL r )... 7 1.5 Criteria for determining the safety integration level (SIL)... 8 1.6 Criticality analysis... 10 2. Analysis of current criticalities... 12 2.1 Palletizer... 12 2.1.1 Passage of output PALLETS... 14 2.1.2 Passage of output non-palletized loads... 18 2.1.3 Access to the pallet warehouse... 20 2.1.4 Access to the shelters from the front side... 26 2.2 Safety signs... 31 2.3 Further remarks... 32 Page 2 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

1. Foreword This document includes a technical report containing criticalities present onboard the machine and the consequent technical measures to be taken to remove them. 1.1 Definitions Damage: Bodily injury or damage to health. Danger: Potential source of damage. The word danger may be qualified in order to define its origin (e.g. mechanical or electric danger) or the nature of potential damage (e.g. risk of electrocution, risk of cutting, fire hazard). Risk: Combination of the probability of occurrence of a damage and the severity thereof. Residual risk: Risk that remains after taking protection measures. Protection measure: measure intended to achieve risk reduction, implemented: By the design engineer by means of guards and additional protection measures; By the user, by means of the provision and use of additional protective equipment. Criticalities: Danger not removed in the design stage and only detected afterwards, i.e. after the equipment has been out into service/made available on the market. Risk assessment: Comprehensive process including both risk analysis and weighting. Category: Classification of the safety-related parts of a control system with regard to their resistance to failures and their consequent behaviour under fault conditions, obtained through the structural arrangement of the parts and/or reliability thereof. Safety of control systems: Capacity of the safety-related parts of a control system to perform their safety functions over a given time, according to their specified category. SRP/CS (Safety-Related Part of the Control System): Safety-related parts of the control system, i.e. part of a control system which responds to safety-related input signals generating safety-related output signals. Page 3 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Note 1: the SRP/CS jointly start at the point where the safety-related input signals are generated (including, for instance, the drive cam and the position switch roller) and end at the output of the power control elements (including, for instance, the main meter contacts). Note 2: if monitoring systems are used for diagnosis, these too are considered as SRP/CS. PL (Performance Level): Reasonable levels used to specify the capacity of the safety-related parts of the control system to perform a safety function under conditions foreseeable. The performance level (PL) expresses the probability of hazardous failure for each hour of operation of the SPR/CS system. Safety function: Function of a machine whose failure may cause immediate risk(s) increase. SRCF (Safety-Related Control Function): Safety function intended to keep the safety condition of the machine or to prevent immediate risk increase. SIL (Safety Integrity Level): Safety integrity for each SRCF function. Page 4 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

1.2 Risk assessment criteria In the following document is used a so-called three-phase iterative method as illustrated in Regulation UNI EN ISO 12100-1, through which the manufacturer or its authorized representative: - determines the limits of the machine, which include the intended use and the reasonably foreseeable misuse; - detects the dangers hat may be generated by the machine and the hazardous situations arising therefrom; - assesses the risks according to Regulation UNI EN ISO 14121-1, taking into account the severity of the possible injury or damage to the health and the probability of its occurrence, according to the following ratio: R = G x F x P x A G (severity of the damage): 1 (slight and reversible), 2 (serious and reversible), 4 (fatal); F (frequency of exposure): 1 (rare or infrequent), 2 (frequent or continuous); P (probability of occurrence of the event): 1 (low), 2 (medium, 4 (high); A (possibility to avoid the damage): 1 (yes), 2 (no); - assesses the risks in order to determine whether a risk reduction is required in conformity with the goal of this directive my means of different types of intervention. Through the use of bars, the result achieved is highlighted by means of the risk assessment, considering the risk acceptable (1, 2, 4) as zero risk: Risk acceptable Risk controllable Risk NON-acceptable 1.. 2 4.. 8.. 16. 32.. 64 1.3 Safety level assessment criteria The choice of the safety category for the design of the different safety-related parts of a control system is performed using a simplified method based on Regulation UNI EN 14121. The method consists in assessing the severity of the injury (indicated by S) and the frequency of occurrence, using auxiliary parameters aimed at improving the assessment, such as: Page 5 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

- The frequency and time of exposure to the danger (F); - The possibility to avoid the danger (P). Experience has shown that these parameters can be combined as indicated in the figure below (Regulation UNI EN 954) so as to provide a bottom-to-top risk scale. It should be noticed that this is a quality process which only provides a risk assessment. WARNING - the safety categories outlined in this document concern only the part to be implemented, so if the safety category of the whole safety circuit is lower, this will also invalidate that of the newly installed part. The determination of the safety category with regard to the safety circuit as a whole and consequently of the compatibility with those indicated in this technical report is to be provided by the customer. Category Starting point for the risk assessment for the safety-related parts of the control system (see 4.3, step 3) S Severity of the injury S1 Slight injury (usually reversible) S2 Serious injury (usually irreversible), including death F Frequency and/or time of exposure to the risk F1 From seldom to quite often and/or short exposure time F2 From frequent to continuous and/or long exposure time P Possibility to prevent the hazard P1 Possible under certain circumstances P2 Scarcely possible Choosing the category Categories B, from 1 to 4 for the safety-related parts of control systems Preferential categories for the reference points (see 4.2) Possible categories which may require additional measures (see B.1) Measures which may be oversized due to the risk in question In the same figure the preferred category/ies is/are indicated by a large, full circle. Page 6 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

A smaller, full circle is used to countermark the categories requiring the implementation of further accident prevention measures, while a large, empty circle is used to indicate the categories providing the highest guarantees (justified in case of high or not perfectly defined hazards). 1.4 Criteria for determining the performance level required (PL r ) The level of resistance to failures PL r that the SRP/CS system must guarantee can be deduced either from the standard of type C concerning the machine under examination or if the machine has not yet been provided with a specific product standard it is obtained using a simplified method based on Regulation UNI EN 14121 and applying the tree diagram present in the figure below ( from Regulation UNI EN ISO 13849-1): S Severity of the injury S1 Slight (injury usually reversible) S2 Serious (injury usually irreversible or fatal) F Frequency and/or duration of the exposure to the risk F1 From rare to not very often and/or short time of exposure F2 From frequent to continuous and/or long time of exposure P Possibility to prevent the risk or limit the damage P1 Possibility under specific conditions P2 Scarcely possible The factors taken into consideration are: Page 7 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

- Severity of the injury (indicated by S) the person might suffer in the event of an accident - Frequency and/or time of operator s exposure to danger (F) - Possibility to avoid the danger (P). The purpose of Regulation UNI EN ISO 13849-1 is in any case to define a Performance Level (PL) of the SRP/CS system in terms of hazardous failures, which during the planning stage shall be compared with the performance level required (PL r ) based on the extent of the risk (PL PL r ), according to the following table: Performance Level (PL) Fields of the probability of hazardous failures per hour (PFH D ) (1/h) From: Up to: a 10-5 <10-4 b 3 10-6 <10-5 c 10-6 <3 10-6 d 10-7 <10-6 e 10-8 <10-7 Table: Performance Levels (PL) provided for by Regulation UNI EN ISO 13849-1 WARNING Since Regulation EN 13849 is a standard of type B1, if the machine is covered by a standard of type C, this latter is the one to be held valid; therefore, should this latter still refer to the old category classification, this is the one to be considered. 1.5 Criteria for determining the safety integration level (SIL) Page 8 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

The safety integrity level (SIL) to be assigned to the safety control functions (SRCF) which shall ensure the reduction of the risks on the machine resulting from any hazardous situations can be deduced either from the standard of type C concerning the machine under examination or if the machine has not yet been provided with a specific product standard it is obtained from the following matrix: ± To complete a process which in the first analysis leads to carry out the risk assessment for each source of danger or hazardous event adopting a method based on Regulation UNI EN 14121 which uses the following relation ( from Regulation CEI EN 62061): R = Se x (Fr + Pr + Av) = Se x Cl Se (severity of the damage): Consequences Irreversible: death, loss of an eye or arm Irreversible: fracture of one or more limbs, loss of one or more fingers Reversible: requires the intervention of a doctor Fr (frequency and duration of the exposure): Page 9 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Frequency and duration of the exposure (Fr) Frequency of the exposure 1 h From > 1 h to 1 day From > 1 day to 2 weeks From > 2 weeks to 1 year > 1 year Pr (probability of occurrence of the event): Duration Probability of the hazardous event Very high Likely Possible Hardly likely Negligible Av (possibility to avoid the damage): Probability to avoid of limit the damage (Av) Impossible Hardly likely Likely WARNING Since Regulation EN 62061 is a standard of type B1, if the machine is covered by a standard of type C, this latter is the one to be held valid; therefore, should this latter still refer to the old category classification, this is the one to be considered 1.6 Criticality analysis In the first section of the document are detected all the dangers present for the machine considered, for which solution (shelters, safety equipment, etc.) intended to reduce the risks until reaching an acceptable residual risk are found through a iterative analysis. Page 10 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

In this phase are indicated besides some solutions to be adopted examples of specific safety components to be used along with possible safety categories. Page 11 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2. Analysis of current criticalities Following the inspection carried out in your plant in order to execute a criticality analysis of the machine present on site, for the palletizer classified by Regulation EN 415-4 as a palletizer with load stacking from above with top layer grouping, it was possible to highlight the results described below. 2.1 Palletizer For the one-position pelletizing machine, which is partly covered by the standard of type C UNI EN 415-4:2006 Safety of packaging machines. Palletizers and depalletizers, operating both in the automatic mode with automatic loading and unloading and in the semi-automatic mode with manual unloading, and intended for handling and palletizing paperback and hardcover books, glued and sewn book blocks, magazines, catalogues and phone books, shrink-wrapped or tied up piles of any product and boxes. Page 12 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Supplementary photographic documentation: We report the following conclusions: Page 13 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2.1.1 Passage of output PALLETS 1. The operator s access through the pallet output point is protected by means of multiple-beam photoelectric barriers with inhibition function. These barriers placed at a distance of 270 mm from the danger zone are intended to protect an access passage 1,140 mm wide, on top of which is installed a muting lamp. Supplementary photographic documentation: Regulatory references: Presidential Decree 459 of 24/07/1996 Annexe I, UNI EN 12100-1 and 2 Further references: Regulations UNI EN ISO 415-4, UNI EN Dangers / risks detected: Dangers of mechanic nature which can cause SHEARING, CRUSHING of limbs and KNOCKING against a fixed object. Page 14 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

999, UNI EN 954-1 and UNI EN 13849 Residual risk assessment G(2)xF(1)xP(2)xA(2)=R(8) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4. 8.. 16. 32.. 64 Page 15 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Protection measures: Technical The solution adopted to prevent free access of the operator during the operation of the machine has to be reviewed first of all because the relevant standard provides that during the inhibition of the barriers in order to prevent the operator from entering the shelters the maximum distance A between the machine and the loaded pallet is 200 mm, against 245 mm distance which in some cases may even be greater you may have currently; Palletized load Distance A = distance between the loaded pallet and the machine guard or barrier. Figure 1 Furthermore, the safety distance B between the optical barrier and the danger zone which is presently approx. 270 mm should be raised at least to 1,200 mm if you want to go on using hybrid barriers (currently in use on the machine), since according to Regulation EN 999 these are considered multiplebeam barriers. If, on the contrary, barriers with 35 mm resolution are used, this distance B may be reduced to approx. 600 mm (for a more precise distance, you will need to assess the response time of the barrier used and the stopping time of the machine). In both cases, however, the muting function and a barrier height of 1,600 mm shall be confirmed. Distance B = distance between the machine danger zone and the barrier. Figura 2 Distanze con devices con minimo 2 fasci Figura 3 Barriers risolution 30mm Page 16 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Category of the components to be implemented: Category 4 of the photoelectric barriers. Products / solutions : Installation of photoelectric barriers with hand resolution (35mm) [mod. TGR SB4-1650] Residual risk assessment G(2)xF(1)xP(1)xA(1)=R(2) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4. 8.. 16. 32.. 64 Page 17 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2.1.2 Passage of output non-palletized loads 1. The area which allows the exit of piles in functional emergency conditions (e.g. if the books are not stacked properly) is equipped with guards but does not allow the operator to access the moving parts of the machine. Supplementary photographic documentation: FREE AREA Regulatory references: Presidential Decree 459 of 24/07/1996 Annexe I, Regulations UNI EN ISO 12100-2, UNI EN 999, UNI EN 954, EN 953 and UNI EN 12622 Dangers / risks detected: Danger of MECHANICAL nature which may cause CRUSHING, SHEARING, CUTTING of the upper limbs Residual risk assessment G(2)xF(1)xP(2)xA(2)=R(8) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4. 8.. 16. 32.. 64 Page 18 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Protection measures: technical The opening which allows the exit of books measures approx. 630 mm (in width) x 475 mm (in height), so it is below the maximum size allowed by Regulation UNI EN 619:2004. However, it is necessary to check that the distance from the danger zone is placed at a distance of at least 1,000 mm as required by Regulation UNI EN 13857. Category of the components to be implemented: None Products / solutions : Possible extension of the existing guard to reach a safety distance of at least 1,000 mm Residual risk assessment G(2)xF(1)xP(1)xA(1)=R(2) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4.. 8.. 16. 32.. 64 Page 19 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2.1.3 Access to the pallet warehouse 1. The lateral zone of the machine which allows the operator to lean into the pallet warehouse is enclosed within mobile guards interlocked with safety microswitches. The locking of the guards (signalled by the red warning light) is only activated during some phases of the cycle, e.g. during the handling of the pallets (software management). Supplementary photographic documentation: M Regulatory references: Presidential Decree 459 of 24/07/1996 Annexe I, Regulations UNI EN ISO 12100-2, UNI EN 954, EN 13849-1, EN 953 and EN 13857 Dangers / risks detected: Danger of mechanical nature which may cause CRUSHING, SHEARING e ENTRAPMENT of the lower limbs and upper Residual risk assessment G(2)xF(1)xP(2)xA(2)=R(8) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4. 8.. 16. 32.. 64 Page 20 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Protection measures: technical a) The mobile guard has a slit-shaped opening M of size greater than 10 mm used by the operator to open and whose dimensions allow accessing the danger zone with one s hand. Since it is impossible to place the shelter at a distance included between 120 and 850 mm, are required by Regulation UNI EN 13857, from the danger zone, this opening must be limited to 6 mm, i.e. you must close the opening using a retractable handle of commercial type. b) The analysis of the risk and of the safety category leads to obtain, for this safety function, a PLr = b. It is therefore necessary to use a circuit-based solution like the one currently adopted and further below proposed with indication in the technical file of the frequency of checks on the proper functioning of the safety function: Single Channel with Monitoring Cat. 2 You should therefore use a safety device such as the existing safety microswitch as well as a safety module (currently missing but replaced with a functional PLC), besides the monitoring represented in the case in point by the automation PLC. Currently, therefore, the existing control circuit can be schematized as follows: Page 21 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006) dove:

I = Input, i.e. safety microswitch with high MTTFd and DC PLC = Logics and monitoring, i.e. automation PLC with low and zero MTTFd and DC, respectively KM = output, i.e. functional switch or solenoid valve which inhibits the operation of the engines or pneumatic actuators M with low MTTFd From Annexe K to Regulation EN 13849-1 it can be deduced that it is possible to perform the safety function opening of guards to access to the inside of the machine with PL b if the overall MTTFd of the function is 7.5 years. To achieve the same result, you can use a safety circuit of category 3, like the one described below: Double Channel Cat. 3 Which ses, for instance, components with double contact and monitoring performed by a safety module, with no indication in the technical file on frequency of checks for the proper functioning of the safety function. From Annexe K of Regulation EN 13849-1 it can be deduced that it is possible to perform the function safety opening of guards to access to the inside of the machine with PL b if the overall MTTFd of the function is 3.9 years. Page 22 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Category of the components to be implemented: Safety category 2 for the interlocking devices, i.e. MTTFd of the safety function greater than or equal to 7.5 years. Safety category 4 for the interlocking devices, i.e. MTTFd of the safety function greater than or equal to 3.9 years. Products / solutions : Leaving the safety circuit unchanged, in category 2, you must check the MTTFd of the safety function; if this later does not meet the value found, it is necessary to modify the operational logic by inserting a safety PLC or a safety module with high DC (diagnostic covering). Installation of encoded safety magnetic switches not in contact to detect movements of the axes when the guard is opened in case you want to use a safety circuit belonging to category 3 [mod. F3S-TGRNSMC-20-05] Residual risk assessment G(2)xF(1)xP(1)xA(1)=R(2) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4.. 8.. 16. 32.. 64 Page 23 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2. In the work cycle phases where the locking of the guards of the pallet warehouse is inhibited, the operator can access the operating area through an opening on the right side. Supplementary photographic documentation: D C Regulatory references: Presidential Decree 459 of 24/07/1996 Annexe I, Regulations UNI EN ISO 12100-2, EN 953 and EN 13857 Dangers / risks detected: Danger of mechanical nature which may cause CRUSHING and SHEARING of the upper limbs. Residual risk assessment G(2)xF(1)xP(2)xA(2)=R(8) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4. 8.. 16. 32.. 64 Page 24 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Protection measures: technical To prevent an operator from accessing the moving parts of the machine it is advisable to prohibit the access to mobile parts by means of a special fixed guard of metal material or clear lexan. It is possible either to completely repair the area C or just to limit the area D ; the above-mentioned areas are shown in the figures above. Category of the components to be implemented: Products / solutions : None Insertion of a (transparent) lexan guard suited to close the existing opening. The shelter shall be fastened by means of screws with special profile removable only using specific equipment. Residual risk assessment G(2)xF(1)xP(1)xA(1)=R(2) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4.. 8.. 16. 32.. 64 Page 25 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2.1.4 Access to the shelters from the front side 1. The front side is provided with three doors with as many safety microswitches which, on opening the guard, send a signal to the PLC. If the doors are opened during the handling (lifting and translation of the axes) of the pile, there will be a drop in the power with a delay of 0.5 seconds thanks to the intervention of a magnetic switch; the doors can also be opened with the axes in the resting position, with no power interruption. The position is in any case signalled by a micro magnetic switch. Supplementary photographic documentation: Regulatory references: Presidential Decree 459 of 24/07/1996 Annexe I, Regulations UNI EN ISO 12100-2, UNI EN 954, EN 13849-1, EN 953 and EN 13857 Dangers / risks detected: Danger of mechanical nature which may cause CRUSHING, SHEARING of the lower limbs and upper. Page 26 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Residual risk assessment Risk acceptable Risk controllable Risk NON-acceptable G(2)xF(1)xP(2)xA(2)=R(8) 1. 2 4. 8.. 16. 32.. 64 Protection measures: technical The analysis of the risk and of the safety category leads to obtain, for this safety function, at least a PLr = c. In order not to use very high-performance devices and provide any indication in the technical file on the frequency of checks of the proper functioning of the safety function, we recommend adopting a circuit solution circuit like the one proposed below: Double Channel Cat. 3 Which means the use of two single-contact safety components or by means of a single double-contact component, besides a (logic) safety module and double-contact (output) contactors. The components described above can then be connected in series with those situated on the other axes. Category of the components to be implemented: Products / solutions : Safety category 4 for the interlocking devices. Installation of encoded safety magnetic switches not in contact to detect movements of the axes when the guard is opened [mod. F3S-TGRNSMC-20-05] Page 27 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Residual risk assessment G(2)xF(1)xP(1)xA(1)=R(2) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4.. 8.. 16. 32.. 64 Page 28 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2. The front area is provided with three doors with as many safety microswitches which, on opening the guard, send a signal to the PLC. If these doors are opened during the handling (lifting and translation of the axes) of the pile, there will be a drop in the power with a delay of 0.5 seconds thanks to the intervention of a magnetic switch; the doors can also be opened with the axes in the resting position, with no power interruption. The position is in any case signalled by a micro magnetic switch; with the doors opened and the axes in position, the back area where the layers of books are formed and stored upon the pallet, remains operational. Supplementary photographic documentation: E D Regulatory references: Presidential Decree 459 of 24/07/1996 Annexe I, Regulations UNI EN ISO 12100-2, EN 953 and EN 13857 Dangers / risks detected: Danger of mechanical nature which may cause CRUSHING and SHEARING of the upper limbs. Page 29 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Residual risk assessment G(2)xF(1)xP(2)xA(2)=R(8) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4. 8.. 16. 32.. 64 Protection measures: technical To prevent an operator from accessing the moving parts on the back side of the machine, it is advisable to prohibit the access through the opening E means of a special fixed guard of metal material or clear lexan. Opening D has already been treated under par. 4 Category of the components to be implemented: Products / solutions : None Insertion of a (transparent) lexan guard suited to close the existing opening. The shelter shall be fastened by means of screws with special profile removable only using specific equipment. Residual risk assessment G(2)xF(1)xP(1)xA(1)=R(2) Risk acceptable Risk controllable Risk NON-acceptable 1. 2 4.. 8.. 16. 32.. 64 Page 30 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2.2 Safety signs It is necessary to install appropriate signs as well to provide information essential to ensure the workers safety to be placed near the control station (operator s panel) and intervention area (pallet input and output zone), such as: MAKE SURE THE PROTECTIVE EQUIPMENT AND GUARDS ARE SUFFICIENT Here is an example of plates to be placed near the keyboard: IT IS COMPULSORY TO READ THE MANUAL OF INSTRUCTIONS FOR USE BEFORE OPERATING THE MACHINE IT IS FORBIDDEN TO USE THE MACHINE BY UNAUTHORIZED PERSONS DO NOT REMOVE THE SAFETY DEVICES AND GUARDS IT IS COMPULSORY IN CASE OF MAINTENANCE TO ISOLATE AND PLACE PADLOCKS TO ALL ENERGY SOURCES IT IS FORBIDDEN TO ACT ON EQUIPMENT OR POWER LINES BY UNAUTHORIZED PERSONNEL On the electrical cabinet or near electrical equipment, where there must be the following signs: DO NOT USE WATER HERE TO EXTINGUISH FIRES WARNING! IT IS FORBIDDEN TO CARRY OUT WORKS ON LIVE ELECTRICAL EQUIPMENT.ANY EXCEPTIONS MUST BE AUTHORIZED BY THE HEAD OF MAINTENANCE RESPONSIBLE UNDER PARTICULARLY HAZARDOUS CONDITIONS, THERE MUST BE ANOTHER PERSON BESIDE THE ONE WHO CARRIES OUT THE WORK START WORKING ONLY AFTER THE SECURITY MEASURES HAVE BEEN IMPLEMENTED Page 31 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

2.3 Further remarks 1. During the assessment of the criticalities the operating and maintenance manual produced by you was reviewed, finding out that information is a little insufficient, as specified under paragraph 1.7.4 of Annexe I to Directive 98/37/CE on machinery matters and Regulation EN 415-4, and further specified below: each machine must be accompanied by instructions for use providing at least the following information: - Intended conditions of use (intended and non-intended use) - Mode of transport of the machine - Mode of installation - Indications on the noise produces by the machine - Indications on marking - Indication of possible residual risks - Indication of the workstation(s) which can be occupied by the operators 2. During the inspection, 3 different labels for the EC conformity marking were identified, of which Page 32 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

one on the machine itself and another two on the rollers. This implies for the purposes of the Machinery Directive, respectively, a CE conformity marking, with technical file and manual, for the machine we define as a Palletizer or Palletizing machine and two statements of incorporation for the rollers, along with technical documents, i.e. assembly instructions and list of the RES applied. In order to avoid all this, it is advisable to certify the machine and the rollers together, as though they formed one machine, therefore providing a single EC label. The Recording Technician: The Technical Manager: Safety Service Manager: Page 33 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)

Page 34 (In accordance with Regulations UNI EN ISO 14121-1 and EN 415-4:2006)