SCHUFA is a strong brand with dedicated employees, strong owners, and excellent relationships with its customers. SCHUFA’s success also rests to a significant extent on its unique database, which consists of personal and business-related data and serves as an essential foundation for SCHUFA’s product offerings. In particular, positive credit information, banking information, and the principle of reciprocity are key differentiators of our company.

To maintain our strong market position, it is not enough to simply launch new products and tap into new markets; we must also continue to be a reliable contractual partner for both existing and new customers when it comes to data handling and legal certainty.

For this reason, the Executive Board of SCHUFA Holding AG has established a compliance management system that applies to all divisions and subsidiaries of the company, as well as to all employees.

SCHUFA Holding’s compliance management focuses on data protection, data security, the prevention of personal gain, and the prevention of corruption. The compliance management system supports the Executive Board in its obligation to manage the company in accordance with the law, to avoid disadvantages for the company, its governing bodies, and employees resulting from violations of laws and policies, and to protect the company from reputational damage. As an independent control system, the compliance management system plays an equal role alongside SCHUFA Holding AG’s existing internal control systems, such as the risk management system, the business continuity management system, the internal control system, and the internal audit reviews.

The primary role and responsibility of compliance management is to ensure and monitor compliance with laws and regulations relevant to the company: Compliance management works to ensure and monitor adherence to the measures set forth in the SCHUFA Holding AG Code of Conduct—which the company has voluntarily adopted—regarding the proper conduct of its employees through information and training. Compliance management is responsible for adapting internal codes of conduct in response to changes in factual and legal circumstances.

This responsibility is carried out by a Compliance Committee composed of representatives from various departments:

• one representative from the Controlling & Corporate Risk Management department,
• one representative from the Legal department, specializing in contract management,
• a representative from the Corporate Affairs & Regulatory Management department, with a focus on corporate governance and sustainability,
• the Executive Board member responsible for the division
• as well as a representative from the Compliance, Data Protection, and Information Security department, represented by the Data Protection Officer of SCHUFA Holding AG.

* For the purposes of the Compliance Program, “employees” refers to the members of the Executive Board and all employees of SCHUFA Holding AG.