SCHUFA is a strong brand, has committed employees, strong owners and excellent relationships with its customers. SCHUFA's success also rests to a large extent on its unique database, which is made up of personal and company-related data and forms an essential basis for SCHUFA's product range. In particular, the positive and banking information as well as the principle of reciprocity form the central unique selling points of our company.

In order to maintain our strong market position, it is not enough to establish new products on the market and open up new markets; we also need to be a reliable contractual partner for existing and new customers in terms of data handling and legal security in the future.

For this reason, the Management Board of SCHUFA Holding AG has established a compliance management system that covers all divisions and subsidiaries as well as all employees.

SCHUFA Holding's compliance management focuses on data protection, data security, the prevention of personal gain and the prevention of corruption. The compliance management system supports the Management Board in its obligation to manage the company in accordance with the law, to avoid disadvantages for the company, its executive bodies and employees resulting from violations of the law and guidelines and to protect the company from damage to its image. As an independent control system, the compliance management system plays an equal role to the existing internal control systems such as the risk management system, the business continuity management system, the internal control system and the internal audits of SCHUFA Holding AG.

The main task and responsibility of Compliance Management is to ensure and monitor compliance with company-relevant laws and regulations: Compliance Management works towards and monitors compliance with the measures imposed as a voluntary commitment in SCHUFA Holding AG's Code of Conduct to ensure that the company's employees act in accordance with the rules by providing information and training. Compliance Management is responsible for adapting the internal code of conduct to changes in the factual and legal situation.

This task is carried out by a Compliance Committee made up of representatives from various specialist areas:

• a representative from Controlling & Corporate Risk Management,
• a representative from the Legal department, focusing on contract management,
• a representative from Corporate Affairs & Regulatory Management, focusing on corporate governance and sustainability,
• the member of the Executive Board responsible for
• and a representative from the Compliance, Data Protection and Information Security department, represented by the Data Protection Officer of SCHUFA Holding AG.

* Employees within the meaning of the Compliance Program are the members of the Management Board and all employees of SCHUFA Holding AG.