List no. 1
8 April 2022 Ordinary part Shareholders' Meeting


The list is filed by:
Allianz Finance II Luxemburg S.à.r.l.
The share capital percentage of the above shareholders, for the purpose of filing the list, amounts to around 3.2% corresponding to no. 69,290,131 shares of UniCredit S.p.A.

Allianz SF Königinstr. 28 D-80802 Munich
Munich, 11 March 2022
To UniCredit S.p.A. Piazza Gae Aulenti, 3 (Tower A) 20154 MILANO
Via certified e-mail: corporate.law@pec.unicredit.eu
With reference to the UniCredit Shareholders' Meeting convened on 800 April 2022, in a single call, to decide, inter alia, on the following item on the Agenda:
the undersigned Allianz SE, in the name and on behalf of the shareholder Allianz Finance II Luxembourg S. à.r.l., with registered office in 24, rue Albert Borschette, L-1246 Luxembourg, registered with Registe de Commerce et des Societes of the Granduchy of Luxembourg under no. B128975, holder of no. 69,290,131 ordinary shares equivalent to an ownership equal to 3.182%, pursuant to Clause 30 of the UniCredit S.p.A: Articles of Association files the following list divided into two directories, indicating respectively three candidates for the post of permanent Statutory Auditor and two candidates for the post of substitute Statutory Auditor , listed on the basis of a progressive numbering:
| CANDIDATES TO THE POST OF PERMANENT STATUTORY AUDITOR OF UNICREDIT S.P.A. | |||
|---|---|---|---|
| Progressive number Last name and Name | |||
| Cacciamani Claudio | |||
| Navarra Benedetta | |||
| n | Paolucci Guido |
| CANDIDATES TO THE POST OF SUBSTITUTE STATUTORY AUDITOR OF UNICREDIT S.P.A. | |||
|---|---|---|---|
| Progressive number Last name and Name | |||
| Paqani Raffaella | |||
| Manes Paola |
In compliance with the UniCredit Articles of Association and the current provisions, we send, together with the list, the following documentation:
copy of the communication proving ownership of the shareholding required to file the list; 2. declarations in which the individual candidates irrevocably accept the appointment and certify, under their own responsibility, the non-existence of ineligibility, forteiture or incompatibility, as well as the possession of the requirements prescribed by the laws and regulations in force, in particular those of experience and independence, accompanied by
curriculum vitaeof each candidate containing personal and professional characteristics;
Please note that this list takes into account the indications drafted by this Company in the document "Qualitative and quantitative composition of UniCredit S .p.A. Board of Statutory Auditors"; to such end please find attached the statements with which the candidates certify the knowledge and experience in the competence areas highlighted in the same document.
Pursuant to current legislation and, in particular, to Consob Communication no. DEM/9017893 of 26 February 2009, we certify the absence of any relationship of connection, even indirectly, or any significant relationship that could determine the existence of the aforementioned relationships of connection, with shareholders who individually or jointly hold a controlling interest or a relative majority in UniCredit S.p.A..
Furthermore, with reference to the next item on the agenda of the aforesaid Shareholders' Meeting:
we submit the following proposal concerning the annual remuneration due to the Board of Statutory Auditors' members:
Euro 190,000 for the Chair of the Board of Statutory Auditors
Euro 125,000 for each permanent Statutory Auditor.
as well as an attendance fee of Euro 400 for each Board of Statutory Auditors meeting and of Euro 400 as attendance fee for taking part in any meeting of the other corporate bodies.
Such proposal takes into account that the Board of Statutory Auditors carries out also the functions of the Supervisory Body pursuant to the Legislative Decree no. 231/2001.
Best regards.
Annexes
Signed by: Rolf Klussmann EMail // 0 Rolf klussmann@allianz.com Signing time: 14-03-2022 14:42:06 IP address: 194.127.24.77
Unterschrieben von: Dirk Diederich
E-Mail: IP-Adresse:
Dirk.diederich@allianz.com Signaturzeitpunkt: 14-03-2022 16:31:06 165.225.26 104
DOCUMENTATION CONCERNING CANDIDATES
The undersigned Claudio Cacciaman, born in Ancona (AN) on 12 January 1967, tax code CCCCLD67A12A271K, resident in Milan (MI), Italian nationality, in relation to the appointment of the Board of Statutory Auditors of UniCredit S.p.A. ("UniCredit") on the agenda of the Ordinary Shareholders' Meeting convened for April 8th, 2022, under his own responsibility,
submit his candidacy as ਖ permanent Statutory Auditor of the Board of Statutory Auditors of UniCredit and, if appointed, to irrevocably accept his appointment as Statutory Auditor.
In view of the provisions, among others, of art. 26 of the Legislative Decree no. 385 of 1 September 1993 ("TUB"), of art. 148 of the Legislative Decree no. 58 of 24 February 1998 ("TUF"), of the Decree issued by the Ministry of Economics and Finance no. 169 of 23 November 2020 ("Decree"), of the Decree issued by the Ministry of Justice no. 162 of 30 March 2000, of the Supervisory Regulations on banks' corporate governance (Bank of Italy Circular no. 285/2013, First Part, Title IV, Chapter 1, Section III, Paragraph 3.2) and clause 30 of UniCredit S.p.A. Articles of Association and of art. 2, recommendations 7 and 9, of the Italian Corporate Governance Code
there are no reasons for his ineligibility, forfeiture or incompatibility, and that the undersigned meets the requirements provided for by the current provisions and by the Articles of Association of UniCredit for the appointment as 2 permanent Statutory Auditor of the Board of Statutory Auditors of UniCredit; with specific reference to the experience and independence requirements
1) of accounts for a period no less than 因 five years
[enrollment no. with the Legal Auditors Register no. 62760; timeframe: from April 1995]
or
[please indicate the activities and the relevant timeframe]
c) □ administration or control activities or executive tasks at listed companies or companies whose size and complexity are greater than, or comparable to, that of UniCredit (in terms of turnover, nature and complexity of the organisation or activity carried out);
[please indicate the activities and the relevant timeframe]
d) □ professional activities as a business accountant or lawyer, undertaken primarily in the credit, financial, securities or insurance sector:
[please indicate the professional firm and the relevant timeframe]
e) field of law - banking, commercial, and/or tax law, as well as the running of financial markets and - in the field of business/finance - banking operations, business economics, accountancy, the running of the securities markets, the running of the financial and international markets and corporate finance, or other subjects which are functional to the credit, financial, securities or insurance sector:
[please indicate the taught subject, the relevant University and timeframe]
f) [ performing managerial, executive or top management duties, however called, within public organisations or offices of the Public Administration, relating to the credit, financial, securities or insurance sector, or to the investment services sector or to the collective investment-management sector as defined in TUF, whose size and complexity are comparable with that of UniCredit:
[please indicate the function carried out, the relevant entity and timeframe]
The undersigned, also:
described in the "Qualitative and quantitative composition of the Board of Statutory Auditors of UniCredit S.p.A." published on the website of UniCredit;
· Researcher at Luigi Bocconi University - Milan and professor at Economics Faculty of the Eastern Piedmont University, Novara.
• Member of bank and financial extraordinary procedures upon appointment by Bank of Italy and Ministry of Treasury.
• Member of the International Association of Insurance Law – Section of the Emilia Romagna Region.
Milano, 12th March 2022 Claudio Cacciamani
Permanent Statutory Auditor in:
Chair of the Board of Statutory Auditors:
Non-executive Director in:
Member of Supervisory Board of Banca Popolare di Garanzia in liquidazione coatta amministrativa Sole Director Torrefazione Cannaregio S.r.l.*
* commits to resign from the office effective as from 8 April 2022, subject to the appointment in UniCredit S.p.A.
Milano, 12th March 2022 Claudio Cacciamani
The undersigned Claudio Cacciamani declares:
Teaching as University Professor of Economics of Financial Intermediaries from 2001 to today. Independent Director of Societé Generale Mutui Italia S.p.A. from 11th December 2009 to 20th December 2017, Board of Director's Member of the Cassa Rurale e Artigiana di Rivarolo Mantovano from 28th April 2017 to 11th July 2018, Member of the Supervisory Committee of the Banca Popolare di Garanzia of Padua in LCA from 16th December 2009 to today, Court Technical Consultant for banking matters from 16th February 2010 to today;
b) & Banking Corporate Governance, gained through:
Teaching as University Professor of Economics of Financial Intermediaries from 2001 to today, Board of Directors' Member of Societé Generale Mutui Italia S.p.A. from 11th December 2009 to 20th December 2017, Independent Director of the Cassa Rurale e artigiana di Rivarolo Mantovano from 28th April 2017 to 11th July 2018, Member of the Supervisory Committee of the Banca Popolare di Garanzia di Padova in LCA from 16th December 2009 to today, Technical Consultant of Courts for banking matters from 16th February 2010 to today;
c) Risk Management, gained through:
Teaching as University Professor of Economics of Financial Intermediaries for the subjects of Risk Management, Lecturer at the MIB Master in "Insurance and risk management" at the University of Trieste;
d) Internal Control Systems and Internal Audit, gained through:
Member of Supervisory Bodies pursuant to Law 231/2001 of industrial, financial companies and banks and member of corporate bodies (both as an independent Board of Directors' Member and as statutory auditor) of Italian and foreign real estate, financial and industrial companies and groups, guarantee funds, investment funds;
Member of Supervisory Bodies pursuant to Law 231/2001 and member of corporate bodies of (both as an independent Board of Directors' Member and as statutory auditor) of financial intermediaries, banks, companies and real estate, financial and industrial groups, Italian and foreign, guarantee funds, funds investment, law degree (2017) with a focus on real estate SICAFs:
f)
1 Indicate (at least) two or more of the competences held.
g)
h)
Member of the teaching staff of the PhD Doctorate "ECONOMICS AND MANAGEMENT OF INNOVATION AND SUSTAINABILITY (EMIS)" carried out in coordination between the University of Ferrara and the University of Parma;
2) 区to possess a specific experience on legal matters and adequate knowledge of
management and management processes, gained through:
Degree in Law (2017) as well as Degree in Business Administration (1989), Member of the Board of Statutory Auditors of numerous industrial and financial companies, Non-executive board of directors' member of financial intermediaries, internal auditor of financial and social security intermediaries.
Milan, 12th March 2022 Claudio Cacciamani
The following information notice aims at providing you with an overview on the use of your personal data by UniCredit S.p.A. and of your rights pursuant to the General Data Protection Regulation (EU) 2016/679 (hereinafter also GDPR).
The Data Controller is UniCredit S.p.A., with registered office in Milan, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan (UniCredit).
The Data Protection Officer (DPO) can be contacted at:
UniCredit S.p.A. Data Protection Office, Piazza Gae Aulenti n. 1, Tower B, 20154 Milano, E-mail: Group.DPO@unicredit.eu, PEC: Group.DPO@pec.unicredit.eu.
UniCredit processes the personal data in its possession, that is collected directly from you, or from the relevant local administrations to verify, among others, their accuracy for the following purposes:
A. Need to fulfill legal obligations deriving from your candidacy as a Statutory Auditor of UniCredit.
These obligations imply, among others, verifying - both during the selection procedures and on an ongoing basis - the compliance with the eligibility requirements for taking on and maintaining the role of Statutory Auditor as well as of specific positions ( such as integrity requirements, criteria of correctness, professional experience requirements and competence, independence, time commitment, maximum number of offices covered, respect of the prohibition of interlocking ) as required by applicable law, by the Corporate Governance Code (i.e. Codice di Corporate Governance) as well as with social security and fiscal obligations linked to the remuneration provided.
To comply with the above-mentioned obligations, in some cases, UniCredit is required to carry out analyses that concern also your relatives?. For this reason, we kindly ask you to let them aware of this Information Notice.
These needs represented above are the legitimizing the related data processing. Data provided by you is necessary to comply with the obligations arising from your candidacy as a Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
B. Fulfilment of legal obligations and requests from Public and Supervisory Authorities, concerning the process, communication and/or disclosure - also during the selection procedures - on the website www.unicredit.croup.eu and/ or on specific corporate documents (e.g. Prospectus / Corporate Governance Report, Financial Statements) of your data (such as data contained in your curriculum vitae and in the list of the tasks carried out by you in other banks and commercial companies, as required by the applicable law, and according to the Articles of Association and the Corporate Governance Code).
The needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the legal obliqations, the requests from the Authorities, as well as to take on the role of Statutory Auditor of Unicredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
Unicredit processes personal data collectly from you, or from third parties (e.g. relevant local administrations), which include, but are not limited to, personal data (e.g. name, sumame, address, date and place of birth), banking data, information on the financial situation (e.g. patrimonial status, information on credit requests/relationships), positionsheld and related income, employment relationships, commercial/professional relationships
2 The relatives scope is identified on the basis of the specific applicable regulations
This information may concern existing or past relationships with Group Legal Entities or third parties.
UniCredit may process judicial data (i.e. personal data relating to criminal convictions and offences or related security measures, including information on pendings) refering to you, in order to verify the subjective and integrity requirements and/or conditions that prevent from being appointed as member of the Board of Statutory Auditors of UniCredit.
In such cases, the processing is necessary to fulfill legal obligations as well as to comply with requests coming from Public or Supervisory Authorities (e.g. filling the questionnaire requested by the ECB). This need represents the leqal basis that legitimizes the related data processing. Data provided by you is necessary to comply with the legal obliqations; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
Your data may be communicated to the natural and legal persons that are acting as "Data Processors", listed in the UniCredit premises and on the website www.unicredit.it, as well as - in the quality of persons authorized to process personal data in relation to the data necessary for the performance of the duties they are assigned to - the natural persons belonging to the following categories: Bank employees or persons on secondment to it, temporary employees, interns, consultants and employees of external companies appointed as Data Processors .
Your data may be communicated:
The detailed list of subjects to whom the data can be communicated is available on the website www.unicredit.it, in the "Privacy" section.
UniCredit informs you that your personal data may also be transferred to the European Union or the European Economic Area (so called "Third Countries") if the EU Commission states that the Third Country ensures an adequate level of protection of personal data or in case of other appropriate safequards, namely when the supplier of UniCredit located in the Third Country contractually ensures an appropriate level of personal data protection (e.g. through the standard contractual clauses provided by the European Commission), including enforceable and effective data subject rights. Further information can be requested by writing to Group.DPO@unicredit.eu.
The processing of personal data involves the usage of manual and IT instruments with modalities closely connected with the purposes defined above and, in any case, in such a way to guarantee the security and confidentiality of the data.
GDPR grants and assures specific rights, including the right to know what data concerning you are held by UniCredit, as well as how they are used, and the right to obtain, under certain conditions, the copy, the erasure, the update, the rectification or, if interested, the integration of your data, as well as the right to data portability.
UniCredit processes and stores your personal data for all the time you keep the role of Statutory Auditor, to execute the related and connected obligations, to comply with the applicable legal, contractual and regulatory obligations, as
well as for its own defensive purposes or third parties until the expiration of the longest mandatory retention period provided by the applicable law (i.e. 11 years) starting from the date of termination of the relationship with you. UniCredit processes and stores your personal data even after the employment relationship when this is necessary for archiving purposes for historical research purposes, according, to the methods set out in the "Ethical rules of processing for archiving purposes in the public interest or historical research".
At the end of the applicable mandatory retention period, your personal data will be erased or kept in a form which does not permit your identification (e.g. irreversible anonymization), unless the further processing is necessary for one or more of the following purposes: i) for resolution and/or litigation, started before the expiration of the mandatory retention period; ii) to follow up with investigations by internal control functions and/or external authorities, started before the expiration of the mandatory retention period; iii) to follow up with requests from the Italian and/or foreign Public Authorities, received/notified to UniCredit before the expiration of the mandatory retention period.
The e-mail address which you can refer to for the exercise of your rights described in the paragraph 7 is the following one: corporate.law@pec.unicredit.eu.
The deadline for the reply is one (1) month, that may be extended for two (2) further months in cases of particular complexity; in these cases, UniCredit informs you about such extension within one (1) month from the receipt of the request. The exercise of rights is, in principle, free of charge.
Unic edit informs you that you have the right to lodge a complaint with, or to report to the Garante per la Protezione dei Dati Personali, or else to appeal to the Judicial Authority. The Garante per la Protezione dei Dati Personali can be consulted on the website http://www.garanteprivacy.it
Approved Milan, 12th March 2022 Claudio Cacciamani
STATEMENT OF CANDIDACY AND DECLARATION ATTESTING THE INEXISTENCE OF REASONS FOR INELIGIBILITY, FORFEITURE OR INCOMPATIBILITY, AS WELL AS REGARDING THE MEETING OF THE REQUIREMENTS PROVIDED FOR BY CURRENT PROVISIONS
The undersigned BENEDETTA NAVARRA born in Rome (RM) on March 24, 1967, tax code NVRBDT67C64H501I, resident in Rome (RM), Italian nationality, in relation to the appointment of the Board of Statutory Auditors of UniCredit S.p.A. ("UniCredit") on the agenda of the Ordinary Shareholders' Meeting convened for April 8th, 2022, under her own responsibility,
submit her candidacy as ሬ permanent Statutory Auditor of the Board of Statutory Auditors of UniCredit and, if appointed, to irrevocably accept her appointment as Statutory Auditor.
In view of the provisions, among others, of art. 26 of the Legislative Decree no. 385 of 1 September 1993 ("TUB"), of art. 148 of the Legislative Decree no. 58 of 24 February 1998 ("TUF"), of the Decree issued by the Ministry of Economics and Finance no. 169 of 23 November 2020 ("Decree"), of the Decree issued by the Ministry of Justice no. 162 of 30 March 2000, of the Supervisory Regulations on banks' corporate governance (Bank of Italy Circular no. 285/2013, First Part, Title IV, Chapter 1, Section III, Paragraph 3.2) and clause 30 of UniCredit S.p.A. Articles of Association and of art. 2, recommendations 7 and 9, of the Italian Corporate Governance Code
there are no reasons for her ineligibility, forfeiture or incompatibility, and that the undersigned meets the requirements provided for by the current provisions and by the Articles of Association of UniCredit for the appointment as ሬ permanent Statutory Auditor of the Board of Statutory Auditors of UniCredit; with specific reference to the experience and independence requirements
1) 図 to be enrolled with the Legal Auditors Register AND to have practiced the legal auditing of accounts for a period no less than ሬ three years
[enrollment no. 40806 with the Legal Auditors Register; timeframe: from May 1993 to June 1996]
or
[enrollment no. with the Legal Auditors Register? ____________________________________________________________________________________________________________________________ nronment not with the ass ....................................................................................................................................................
b) □ administration or control activities or executive tasks in the credit, financial, securities or insurance sector;
[please indicate the activities and the relevant timeframe]
c) □ administration or control activities or executive tasks at listed companies or □ administration of control astronomics
companies whose size and complexity are greater than, or companies that of companies whose size and complex "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," "," " activity carried out);
[please indicate the activities and the relevant timeframe]
d) □ professional activities as a business accountant or lawyer, undertaken primarily in the credit, financial, securities or insurance sector:
[please indicate the professional firm and the relevant timeframe]
e) □ teaching, as university professor of first or second level, subjects concerning of ്ച് teaching, as university proresses in the field as well as the running of In the neld of law - bunking, comments of business/finance - banking - phating - the financial markets and - in the new new of the securities markets, the business Economics, uecountational markets and corporate finance, or other
running of the financial and international markets and corporate finance, sestar running of the miancial and interestit, financial, securities or insurance sector:
subjects which are functional to the credit, financial, securities or insurance sector:
[please indicate the taught subject, the relevant University and timeframe]
f) □ performing managerial, executive or top management duties, however called, within public organisations or offices of the Public Administration, relating to the within public organisations of 'Univers'
credit, financial, securities or insurance sector, or to the investment in THE, where size credit, inflancial; securities of mount
or to the collective investment sector as defined in TUF, whose size and complexity are comparable with that of UniCredit:
[please indicate the function carried out, the relevant entity and timeframe]
The undersigned, also:
Rome, 10th march 2022
Benedetta Navarra letto luss
Allegati:
Ms. Benedetta Navarra, Esq. Lawyer - Professional accountant Practice areas Commercial Law Banking and capital markets law
Ms. Navarra deals mainly with matters concerning corporate law and regulations dealing with stock exchange, banking, finance and capital markets.
She has an extensive experience in cross-border transactions, international contracts, bankruptcy procedures and enterprise management crisis, project financing, securitisation of bank loans. She is an expert in the liability of intermediaries in connection with investment services, and has represented clients in the context of disciplinary proceedings before the relevant supervisory authorities.
She has assisted Italian Ministry of Economy in the privatisation of Banca Nazionale del Lavoro, Mediocredito Centrale - Banco di Sicilia, Cassa Depositi e Prestiti and Credito Industriale Sardo. Fluently speaking and working in English
Chairperson of the Board of Statutory Auditors of Guala Closures S.p.A. Member of the Board of Statutory Auditors of Unicredit S.p.A. Member of the Board of Statutory Auditors of Italo S.p.A. Chairperson of the Board of Statutory Auditors of DMO Pet Care S.r.l. Member of the Board of Directors of A.S. Roma S.p.A. Chairperson of the Audit Committee of UniCredit Bulkbank Chairperson of the Supervisory Body of Equitalia Giustizia S.p.A. Member of the Board of Statutory Auditors of Telethon Foundation
Former appointments
Member of the Board of Directors of Yapi Kredi Bankasi1
Member of the Board of Directors of Koc Financial Service
Member of the Supervisory Board of UniCredit Bank Czech Republic and Slovakia, a.s.2
Member of the Supervisory Board of Ukrsotsbank PJSC3
Chairman of the Board of Statutory Auditors of Poste Italiane S.p.A. having also the function of Supervisory Body of the company
Member of the Board of Statutory Auditors of CDP Reti S.p.A. having also the function of Supervisory Body of the company
Member of the Board of Statutory Auditors of Equitalia S.p.A.
Member of the Board of Statutory Auditors of buddy bank S.p.A.
Member of the Board of Statutory Auditors and of the Supervisory Body of LVenture Group S.p.A.
Member of the Board of Statutory Auditors of SHQT S.r.l.
Member of the Board of Statutory Auditors of Albanosider S.r.l.4
Member of the Board of Statutory Auditors of SAC -- Società Appalti e Costruzioni S.p.A.§
Member of the Supervisory Body of ConfCommercio imprese per l'Italia provincia di Roma Capitale
Member of the Supevisory Body of Promo.ter Roma
Ms. Navarra graduated cum laude in economics from Luiss Guido Carli University in Rome and subsequently obtained a degree in law cum laude from La Sapienza University in Rome. She lectures until 2010 on banking and stock exchange law at Luiss Guido Carli University. She is a member of the directive committee of the Business Law postgraduate course run by Luiss Guido Carli Law School. Scientific coordinator of banking and financial law sector. She has published several works on banking and financial law.
Rome, 10th march 2022 Benedetta Navarra
Annex 2 — List of management and control offices currently held in other companies
Rome, 10th march 2022
Benedetta Navarra 11 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
The undersigned BENEDETTA NAVARRA declares:
1) to possess a good knowledge and experience in the following competence areas .
the appointment, in the last decade, to several management and control bodies of banks and financial legal entities
the appointment, in the last decade, to several management and control bodies of banks and financial legal entities, also listed.
the appointment, in the last decade, to several management and control bodies of banks, financial legal entities, industrial companies, also listed.
the appointment, in the last decade, to several management and control bodies of banks, financial legal entities, industrial companies, also listed.
professional practice – university assignment - the appointment, in the last decade, to several management and control bodies of banks, financial legal entities, industrial companies, also listed
6 Indicate (at least) two or more of the competences held.
h)

2) 図to possess a specific experience on legal matters and adequate knowledge of
management and management processes, gained through:
professional practice – university assignment - the appointment, in the last decade, to several prorocional practice - all banks, financial legal entities, industrial companies, also listed
Rome, 10th march 2022
Benedetta Navarra 61 41 000
The following information notice aims at providing you with an overview on the use of your personal data by UniCredit S.p.A. and of your rights pursuant to the General Data Protection Regulation (EU) 2016/679 (hereinafter also GDPR).
The Data Controller is UniCredit S.p.A., with registered office in Milan, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan (UniCredit).
The Data Protection Officer (DPO) can be contacted at:
UniCredit S.p.A. Data Protection Office, Piazza Gae Aulenti n. 1, Tower B, 20154 Milano, E-mail: Group.DPO@unicredit.eu, PEC: Group.DPO@gec.unicredit.eu.
UniCredit processes the personal data in its possession, that is collected directly from you, or from the relevant local administrations to verify, among others, their accuracy for the following purposes:
A. Need to fulfill legal obligations deriving from your candidacy as a Statutory Auditor of UniCredit. These obligations imply, among others, verifying - both during the selection procedures and on an ongoing basis - the compliance with the eligibility requirements for taking on and maintaining the role of Statutory Auditor as well as of specific positions ( such as integrity requirements, criteria of correctness, professional experience requirements and competence, independence, time commitment, maximum number of offices covered, respect of the prohibition of interlocking ) as required by applicable law, by the Corporate Governance Code (i.e. Codice di Corporate Governance) as well as with social security and fiscal obligations linked to the remuneration provided.
To comply with the above-mentioned obligations, in some cases, UniCredit is required to carry out analyses that concern also your relatives? . For this reason, we kindly ask you to let them aware of this Information Notice.
These needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the obligations arising from your candidacy as a Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
B. Fulfilment of legal obligations and requests from Public and Supervisory Authorities, concerning the process, communication and/or disclosure - also during the selection procedures - on the website www.unicreditgroup.eu and/ or on specific corporate documents (e.g. Prospectus / Corporate Governance Report, Financial Statements) of your data (such as data contained in your curriculum vitae and in the list of the tasks carried out by you in other banks and commercial companies, as required by the applicable law, and according to the Articles of Association and the Corporate Governance Code).
The needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the legal obligations, the requests from the Authorities, as well as to take on the role of Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
7 The relatives scope is identified on the basis of the specific applicable regulations
Unicredit processes personal data collected directly from you, or from third parties (e.g. relevant local administrations), which include, but are not limited to, personal data (e.g. name, surname, address, date and place of birth), banking data, information on the financial situation (e.g. patrimonial status, information on credit requests/relationships), positions held and related income, employment relationships, commercial/professional relationships
This information may concern existing or past relationships with UniCredit as well as with Group Legal Entities or third parties.
UniCredit may process judicial data (i.e. personal data relating to criminal convictions and offences or related security measures, including information on pending proceedings) referring to you, in order to verify the subjective and integrity requirements and/or conditions that prevent from being appointed as member of the Board of Statutory Auditors of UniCredit.
Bour of Statutor, haditore of necessary to fulfill legal obligations as well as to comply with requests coming from Public or Supervisory Authorities (e.g. filling the questionnaire requested by the ECB). This need represents the legal basis that legitimizes the related data processing. Data provided by you is necessary to comply with the legal obligations; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
Your data may be communicated to the natural and legal persons that are acting as "Data Processors", listed in the UniCredit premises and on the website www.unicredit.it, as well as - in the quality of persons authorized to process personal data in relation to the data necessary for the duties they are assigned to – the natural persons belonging to the following categories: Bank employees or persons on secondment to it, temporary employees, interns, consultants and employees of external companies appointed as Data Processors .
Your data may be communicated:
The detailed list of subjects to whom the data can be communicated is available on the website www.unicredit.it in the "Privacy" section.
UniCredit informs you that your personal data may also be transferred to the Countries outside the European Union or the European Economic Area (so called "Third Countries") if the EU Commission states that the Third Country ensures an adequate level of protection of personal data or in case of other appropriate safeguards, namely when the supplier of UniCredit located in the Third Country contractually ensures an appropriate level of personal data protection (e.g. through the signing of the standard contractual clauses provided by the European Commission), including enforceable and effective data subject rights. Further information can be requested by writing to Group.DPO@unicredit.eu.
The processing of personal data involves the usage of manual and IT instruments with modalities closely connected with the purposes defined above and, in any case, in such a way to guarantee the security and confidentiality of the data.
GDPR grants and assures specific rights, including the right to know what data concerning you are held by UniCredit, as well as how they are used, and the right to obtain, under certain conditions, the copy, the erasure, the update, the rectification or, if interested, the integration of your data, as well as the right to data portability.
UniCredit processes and stores your personal data for all the time you keep the role of Statutory Auditor, to execute the related and connected obligations, to comply with the applicable legal, contractual and regulatory obligations, as well as for its own defensive purposes or those of third parties until the longest mandatory retention period provided by the applicable law (i.e. 11 years) starting from the date of termination of the relationship with you. UniCredit processes and stores your personal data even after the expiry of the employment relationship when this is necessary for archiving purposes for historical research purposes, according, to the methods set out in the "Ethical rules of processing for archiving purposes in the public interest or historical research"8
At the end of the applicable mandatory retention period, your personal data will be erased or kept in a form which does not permit your identification (e.q. irreversible anonymization), unless the further processing is necessary for one or more of the following purposes: i) for resolution of pre-litigation and/or litigation, started before the expiration of the mandatory retention period; ii) to follow up with investigations/inspections by internal control functions and/or external authorities, started before the expiration of the mandatory retention period; iii) to follow up with requests from the Italian and/or foreign Public Authorities, received/notified to UniCredit before the expiration of the mandatory retention period.
The e-mail address which you can refer to for the exercise of your rights described in the paragraph 7 is the following one: corporate.law@pec.unicredit.eu.
The deadline for the reply is one (1) month, that may be extended for two (2) further months in cases of particular complexity; in these cases, UniCredit informs you about such extension within one (1) month from the receipt of the request. The exercise of rights is, in principle, free of charge.
UniCredit informs you that you have the right to lodge a complaint with, or to report to the Garante per la Protezione dei Dati Personali, or else to appeal to the Judicial Authority. The contacts of the Garante per la Protezione dei Dati Personali can be consulted on the website hitto://www.garanteerivacy.it
8 Record of the provisions 19 December 2018, n. 513
The undersigned GUDO PAOLUCCI born in Rimini (RN) on January 6, 1969, tax code PLCGDU69A06H294S, resident in Rome (RM), Italian nationality, in relation to the appointment of the Board of Statutory Auditors of UniCredit S.p.A. ("UniCredit") on the agenda of the Ordinary Shareholders' Meeting convened for April 8th, 2022, under his/her own responsibility,
submit his candidacy as ਖ permanent Statutory Auditor of the Board of Statutory Auditors of UniCredit and, if appointed, to irrevocably accept his appointment as Statutory Auditor.
In view of the provisions, among others, of art. 26 of the Legislative Decree no. 385 of 1 September 1993 ("TUB"), of art. 148 of the Legislative Decree no. 58 of 24 February 1998 ("TUF"), of the Decree issued by the Ministry of Economics and Finance no. 169 of 23 November 2020 ("Decree"), of the Decree issued by the Ministry of Justice no. 162 of 30 March 2000, of the Supervisory Regulations on banks' corporate governance (Bank of Italy Circular no. 285/2013, First Part, Title IV, Chapter 1, Section III, Paragraph 3.2) and clause 30 of UniCredit S.p.A. Articles of Association and of art. 2, recommendations 7 and 9, of the Italian Corporate Governance Code
there are no reasons for his ineligibility, forfeiture or incompatibility, and that the undersigned meets the requirements provided for by the current provisions and by the Articles of Association of UniCredit for the appointment as 図 permanent Statutory Auditor of the Board of Statutory Auditors of UniCredit; with specific reference to the experience and independence requirements
1) 图 to be enrolled with the Legal Auditors Register AND to have practiced the legal auditing of accounts for a period no less than 図 five years
[enrollment no. with the Legal Auditors Register 43115; timeframe: from April 1995 to March 2022]
or
fenrollment no. with the Legal Auditors Register: (month/year) to ______________________________________________________________________________________________________________________________________________________________
b) □ administration or control activities or executive tasks in the credit, financial, securities or insurance sector;
[please indicate the activities and the relevant timeframe]
c) [] administration or control activities or executive tasks at listed companies or companies whose size and complexity are greater than, or comparable to, that of UniCredit (in terms of turnover, nature and complexity of the organisation or activity carried out);
[please indicate the activities and the relevant timeframe]
d) [] professional activities as a business accountant or lawyer, undertaken primarily in the credit, financial, securities or insurance sector:
[please indicate the professional firm and the relevant timeframe]
e) [ ] teaching, as university professor of first or second level, subjects concerning in the field of law - banking, commercial, and/or tax law, as well as the running of financial markets and - in the field of business/finance - banking operations, business economics, accountancy, the running of the securities markets, the running of the financial and international markets and corporate finance, or other subjects which are functional to the credit, financial, securities or insurance sector:
[please indicate the taught subject, the relevant University and timeframe]
f) [ ] performing managerial, executive or top management duties, however called, within public organisations or offices of the Public Administration, relating to the credit, financial, securities or insurance sector, or to the investment services sector or to the collective investment-management sector as defined in TUF, whose size and complexity are comparable with that of UniCredit:
[please indicate the function carried out, the relevant entity and timeframe]
The undersigned, also:
Rome, March 107 2022 Signature,
Allegati:
Member of Board of Directors and Board of Statutory Auditors of financial holding companies, of financial companies registered with the Bank of Italy National Register ex sect. 106 and ex sect. 107 TULB, of SGR (FONDI IMMOBILIARI ITALIANI -- FIMIT S.p.A.), of SIM (COFIRI SIM S.p.A.), of listed companies (2003-2004 - SS LAZIO S.p.A. on appointment by CAPITALIA S.p.A. - now UNICREDIT S.p.A.), of subsidiaries of listed companies (VIVACITY S.p.A., COFIRI S.p.A. -UNICREDIT GROUP - ENI CORPORATE UNIVERSITY S.p.A., ENIPOWER TRASMISSIONE S.p.A., NAPOLETANAGAS CLIENTI S.p.A., SEAPAD S.p.A., ENI RETE OIL&NONOIL S.P.A., PETROLIG s.r.I. - GRUPPO ENI - SOCIETÀ GESTIONE SERVIZI BP S.C.p.A. - GRUPPO BANCO BPM - TELECOM ITALIA MEDIA BROADCASTING S.P.A., OLIVETTI S.p.A., OLIVETTI MULTISERVICES S.P.A., TIM VENTURES S.r.I., ADVANCED CARING CENTER S.r.I., TELECONTACT CENTER S.P.A. -- GRUPPO TELECOM ITALIA) as well as publicly owned companies (Società per lo Sviluppo del Mercato dei Fondi Pensione per Azioni - MEFOP S.p.A.). Chairman or member of the Supervisory Body pursuant to Italian Legislative Decree No. 231/2001, in CONSORZIO TEMA.MOBILITY (TELECOM ITALIA Group and FIAT Group) and in companies belonging to the TELECOM ITALIA Group (TELECOM ITALIA MEDIA
BROADCASTING S.P.A., OLIVETTI S.p.A., OLIVETTI MULTISERVICES S.P.A., TIM VENTURES S.r.I., ADVANCED CARING CENTER S.r.I., TELECONTACT CENTER S.P.A., TELECOM ITALIA SAN MARINO S.p.A.). He has held posts as Liquidator of companies and as liquidator in insolvency proceedings.
| Statutory Auditor (also member of the | |
|---|---|
| Unicredit S.p.A. | Supervisory Body (SB) according to the |
| Italian Legislative Decree No. 231/2001) | |
| Nuova Compagnia di Partecipazioni S.p.A. | Statutory Auditor |
| TIM San Marino S.p.A. | Chairman of the Board of Statutory Auditors |
| Telefonia Mobile Sammarinese S.p.A | Chairman of the Board of Statutory Auditors |
| Ecofuel S.p.A. | Chairman of the Board of Statutory Auditors |
| Raffineria di Gela S.p.A. | Chairman of the Board of Statutory Auditors |
| Hyle Capital Partners SGR S.p.A. | Statutory Auditor |
| Fondazione Santi Francesco d'Assisi e Caterina da Siena |
Chairman of the Board of Statutory Auditors |
| CONOU - Consorzio Nazionale per la Gestione, | Statutory Auditor |
| Raccolta e Trattamento degli Oli Minerali Usati | |
| l Fondazione Casa Sollievo della Sofferenza | Chairman of the Board of Statutory Auditors |
Activities carried out in Supervisory Bodies (SB) according to the Italian Legislative Decree No. 231/2001.
Currently, Chairman or member of the Board of Statutory Auditors, acting also as SB, in UNICREDIT S.p.A. and in companies belonging to the TELECOM ITALIA Group (TELECOM ITALIA SAN MARINO S.p.A. and TELEFONIA MOBILE SAMMARINESE S.p.A.) as well as in companies belonging to the UNICREDIT Group (NUOVA COMPAGNIA DI PARTECIPAZIONI S.p.A.).
edition.
English (level: excellent) and French (level: very good)
ROME, MARCH 10TH 2022
[Guido Paolucci]
Rome, March 1014 2027 Signature ,
The undersigned GUIDO PAOLUCcı declares:
4 Indicate (at least) two or more of the competences held.
SIMs, of listed companies, of subsidiaries of listed companies as well as publicly-owned companies. Posts held as member or Chairman of the Supervisory Body pursuant to Italian Legislative Decree No. 231/2001;
f)
h)
· Significant and multi-year university research activities;
2) 区 to possess a specific experience on legal matters and adequate knowledge of
management and management processes, gained through:
· Continuous and relevant professional activity on economic / business topics, carried out for almost thirty years;
Rome, March 1014 2027 Signature
The following information notice aims at providing you with an overview on the use of your personal data by UniCredit S.p.A. and of your rights pursuant to the General Data Protection Regulation (EU) 2016/679 (hereinafter also GDPR).
The Data Controller is UniCredit S.p.A., with registered office in Milan, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan (UniCredit).
The Data Protection Officer (DPO) can be contacted at:
UniCredit S.p.A. Data Protection Office, Piazza Gae Aulenti n. 1, Tower B, 20154 Milano, E-mail: Group.DPO@unicredit.eu, PEC: Group.DPO@pec.unicredit.eu.
UniCredit processes the personal data in its possession, that is collected directly from you, or from the relevant local administrations to verify, among others, their accuracy for the following purposes:
A. Need to fulfill legal obligations deriving from your candidacy as a Statutory Auditor of UniCredit. These obligations imply, among others, verifying - both during the selection procedures and on an ongoing basis - the compliance with the eligibility requirements for taking on and maintaining the role of Statutory Auditor as well as of specific positions ( such as integrity requirements, criteria of correctness, professional experience requirements and competence, independence, time commitment, maximum number of offices covered, respect of the prohibition of interlocking ) as required by applicable law, by the Corporate Governance Code (i.e. Codice di Corporate Governance) as well as with social security and fiscal obligations linked to the remuneration provided.
To comply with the above-mentioned obligations, in some cases, UniCredit is required to carry out analyses that concern also your relatives 2. For this reason, we kindly ask you to let them aware of this Information Notice.
These needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the obligations arising from your candidacy as a Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
B. Fulfilment of legal obligations and requests from Public and Supervisory Authorities, concerning the process, communication and/or disclosure - also during the selection procedures - on the website www.unicreditgroup.eu and/ or on specific corporate documents (e.g. Prospectus / Corporate Governance Report, Financial Statements) of your data (such as data contained in your curriculum vitae and in the list of the tasks carried out by you in other banks and commercial companies, as required by the applicable law, and according to the Articles of Association and the Corporate Governance Code).
The needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the legal obligations, the requests from the Authorities, as well as to take on the role of Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
2 The relatives scope is identified on the basis of the specific applicable regulations
Unicredit processes personal data collectly from you, or from third parties (e.g. relevant local administrations), which include, but are not limited to, personal data (e.g. name, address, date and place of birth), banking data, information on the financial situation (e.g. patrimonial status, information on credit requests/relationships), positions held and related income, employment relationships, commercial/professional relationships
This information may concern existing or past relationships with UniCredit as well as with Group Legal Entities or third parties.
UniCredit may process iudicial data (i.e. personal data relating to criminal convictions and offences or related security measures, including information on pending proceedings) referring to you, in order to verify the subjective and integrity requirements and/or conditions that prevent from being appointed as member of the Board of Statutory Auditors of UniCredit.
In such cases, the processing is necessary to fulfill legal obligations as well as to comply with requests coming from Public or Supervisory Authorities (e.g. filling the questionnaire requested by the ECB). This need represents the legal basis that legitimizes the related data processing. Data provided by you is necessary to comply with the legal obligations; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
Your data may be communicated to the natural and legal persons that are acting as "Data Processors", listed in the UniCredit premises and on the website www.unicredit.it, as well as - in the quality of persons authorized to process personal data in relation to the data necessary for the duties they are assigned to - the natural persons belonging to the following categories: Bank employees or persons on secondment to it, temporary employees, interns, consultants and employees of external companies appointed as Data Processors .
Your data may be communicated:
The detailed list of subjects to whom the data can be communicated is available on the website www.unicredit.it, in the "Privacy" section.
UniCredit informs you that your personal data may also be transferred to the Countries outside the European Union or the European Economic Area (so called "Third Countries") if the EU Commission states that the Third Country ensures an adequate level of protection of personal data or in case of other appropriate safeguards, namely when the supplier of UniCredit located in the Third Country contractually ensures an appropriate level of personal data protection (e.g. through the signing of the standard contractual clauses provided by the European Commission), including enforceable and effective data subject rights. Further information can be requested by writing to Group.DPO@unicredit.eu.
The processing of personal data involves the usage of manual and IT instruments with modalities closely connected with the purposes defined above and, in any case, in such a way to guarantee the security and confidentiality of the data.
GDPR grants and assures specific rights, including the right to know what data concerning you are held by UniCredit, as well as how they are used, and the right to obtain, under certain conditions, the copy, the erasure, the update, the rectification or, if interested, the integration of your data, as well as the right to data portability.
UniCredit processes and stores your personal data for all the time you keep the role of Statutory Auditor, to execute the related and connected obligations, to comply with the applicable legal, contractual and regulatory obligations, as well as for its own defensive purposes or those of third parties until the expiration of the longest mandatory retention period provided by the applicable law (i.e. 11 years) starting from the date of termination of the relationship with you. UniCredit processes and stores your personal data even after the expiry of the employment relationship when this is necessary for archiving purposes for historical research purposes, according, to the methods set out in the "Ethical rules of processing for archiving purposes in the public interest or historical research"3.
At the end of the applicable mandatory retention period, your personal data will be erased or kept in a form which does not permit your identification (e.g. irreversible anonymization), unless the further processing is necessary for one or more of the following purposes: i) for resolution of pre-litigation, started before the expiration of the mandatory retention period; ii) to follow up with investigations/inspections by internal control functions and/or external authorities, started before the expiration of the mandatory retention period; iii) to follow up with requests from the Italian and/or foreign Public Authorities, received/notified to UniCredit before the expiration of the mandatory retention period.
The e-mail address which you can refer to for the exercise of your rights described in the paragraph 7 is the following one: corporate.law@pec.unicredit.eu.
The deadline for the reply is one (1) month, that may be extended for two (2) further months in cases of particular complexity; in these cases, UniCredit informs you about such extension within one (1) month from the receipt of the request. The exercise of rights is, in principle, free of charge.
UniCredit informs you that you have the right to lodge a complaint with, or to report to the Garante per la Protezione dei Dati Personali, or else to appeal to the Judicial Authority. The contacts of the Garante per la Protezione dei Dati Personali can be consulted on the website http://www.garanteprivacy.it
3 Record of the provisions 19 December 2018, n. 513
The undersigned RAFFAELLA PAGAN born in Milan (MI) on 21 June 1971, fax code PGNRFL71H61F205E, resident in Milan (M), Italian nationality, in relation to the appointment of the Board of Statutory Auditors of UniCredit S.p.A. ("UniCredit") on the agenda of the Ordinary Shareholders' Meeting convened for April 8th, 2022, under his/her own responsibility,
submit her candidacy as 2 substitute Statutory Auditor of the Board of Statutory Auditors of UniCredit and, if appointed, to irrevocably accept her appointment as Statutory Auditor.
In view of the provisions, among others, of art. 26 of the Legislative Decree no. 385 of 1 September 1993 ("TUB"), of art. 148 of the Legislative Decree no. 58 of 24 February 1998 ("TUF"), of the Decree issued by the Ministry of Economics and Finance no. 169 of 23 November 2020 ("Decree"), of the Decree issued by the Ministry of Justice no. 162 of 30 March 2000, of the Supervisory Regulations on banks' corporate governance (Bank of Italy Circular no. 285/2013, First Part, Title IV, Chapter 1, Section III, Paragraph 3.2) and clause 30 of UniCredit S.p.A. Articles of Association and of art. 2, recommendations 7 and 9, of the Italian Corporate Governance Code
there are no reasons for her ineligibility, forfeiture or incompatibility, and that the undersigned meets the requirements provided for by the current provisions and by the Articles of Association of UniCredit for the appointment as ≥ substitute Statutory Auditor of the Board of Statutory Auditors of UniCredit; with specific reference to the experience and independence requirements
1) [ 2 to be enrolled with the Legal Auditors Register AND to have practiced the legal auditing of accounts for a period no less than [] three years ሬ five years
[enrollment no. with the Legal Auditors Register 93047; timeframe: from October 1999 to March 20221
or
indicate the activities and the relevant timeframe]
indicate the activities and the relevant timeframe]
indicate the professional firm and the relevant timeframe]
c) □ administration or control activities or executive tasks at listed companies or companies whose size and complexity are greater than, or comparable to, that of UniCredit (in terms of turnover, nature and complexity of the organisation or activity carried out);
Inlease
d) □ professional activities as a business accountant or lawyer, undertaken primarily in the credit, financial, securities or insurance sector:
e) [ ] teaching, as university professor of first or second level, subjects concerning - in the field of law - banking, commercial, and/or tax law, as well as the running of financial markets and - in the field of business/finance - banking operations, business economics, accountancy, the running of the securities markets, the running of the financial and international markets and corporate finance, or other subjects which are functional to the credit, financial, securities or insurance sector:
[please
[please
indicate the taught subject, the relevant University and timeframe]
f) [ performing managerial, executive or top management duties, however called, within public organisations or offices of the Public Administration, relating to the credit, financial, securities or insurance sector, or to the investment services sector or to the collective investmentmanagement sector as defined in TUF, whose size and complexity are comparable with that of UniCredit:
[please
indicate the function carried out, the relevant entity and timeframe]
The undersigned, also:
Date, place Milan, March 10, 2022
Signature
Allegati:
[ANNEX 1 - CURRICULUM VITAE] CURRICULUM VITAE IN EUROPEAN FORMAT

| RAFFAELLA PAGAN | |||||
|---|---|---|---|---|---|
| -- | -- | ----------------- | -- | -- | -- |
Address Telephone
Name
Fax
Website
Nationality
02/460722 02/4981537
raffaellapagani@studiopagani.net www.studiopagani.net
Italian
Milan, June 21, 1971 Date of birth
Professional experience
Partner to Studio Associato Pagani - Chartered Accountants www.studiopagani.net Specialized in international affairs. Gained in-depth insight and experience in Financial Statements, Consolidated Financial Statements, international contracts and tax litigations. Member of several Boards of Statutory Auditors, Auditor for Municipalities and Member of Statutory Boards - Supervisory Boards (Legislative Decree 231/01).
Administrative, tax and business Consultant to commercial, industrial and services organizations.
Technical Consultant for civil and criminal cases, mainly in the distribution, production of oil products, gas and other energy industries as well as in the cinematic, television, audiovisual businesses and engineering industry.
Assistant in Tax Litigation Cases.
public participation.
From April 2001 to April 2002 Administration Manageress consulting to a mediumlarge Italian company active in the cinematic and television industries.
Single Auditor:
Ended positions
Single Auditor of ALPA S.p.A. since 2005
Auditor in the municipalities of
Comune di Almè (BG) since August 2020
e-DISTRIBUZIONE S.p.A. - Standing Auditor since April, 2012;
Over the years, gained a more extensive experience in auditing of local authorities, being versed in new and different procedures for auditors' compliance with the Court of Auditors.
l am currently:
Member of Supervisory Board - Organismo di Vigilanza of SEN Servizio Elettrico Nazionale SpA (Enel Group) since May 5, 2020;
Licence to practice the profession in March 1996 · Date Exam to practice the profession of Dottore Commercialista at Bocconi University in Milan. · Name and type of education and training
Bachelor Degree in year 1993/1994 Bachelor Degree in Business&Economics at Università Bocconi in Milano - specialization in Freelancing
· Level in national classification (if appropriate)
High School Degree in year 1990
· Name and type of education and training
· Level in national classification (if appropriate)
Acquired in life and career but not necessarily recognized by official certificates and diplomas.
MOTHERTONGUE
· Date
OTHER LANGUAGES
excellent
EXCELLENT
EXCELLENT
· Reading ability • Writing ability · Oral expression capacity
TECHNICAL SKILLS computer, devices, ect..
DRIVING LICENCE
Driving licence B
· Date • Name and type of education and training
Grade 110/110
High School Degree in Milan - Istituto tecnico Mercantile N. Moreschi.
Grade 56/60
ITAI IAN

l authorize the processing of personal data pursuant to Regulation (EU) 2016/679 (GDPR).
Milan, March 10, 2022
ANNEX 2 - LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES
Date and place, Milan, March 10, 2022 Signature
ANNEX 3 - PROFILE FORM (COMPETENCE REQUIREMENTS - "QUALITATIVE AND QUANTITATIVE COMPOSITION OF THE UNICREDIT S.P.A. BOARD OF STATUTORY AUDITORS")
The undersigned RAFFAELLA PAGANI declares:
member of the BoD or Board of Statutory Auditors of listed and financial companies
c) & Risk Management, gained through:
member of the BoD or Board of Statutory Auditors of listed and financial companies
d) & Internal Control Systems and Internal Audit, gained through:
member of the BoD or Board of Statutory Auditors of listed and financial companies
e) & Corporate Legal and Compliance, gained through:
member of the BoD or Board of Statutory Auditors of listed and financial companies
f)
member of the BoD or Board of Statutory Auditors of listed and financial companies
1 Indicate (at least) two or more of the competences held.
g) □ Digital Technology, gained through:
h) □ Sustainability (ESG), gained through:
as well as
2) 図 to possess a specific experience on legal matters and adequate knowledge of management and management processes, gained through:
As a member of the BoD and Board of Statutory Auditors of listed and / or financial companies
Date and place, Milan, March 10, 2022 Signature
The following information notice aims at providew on the use of your personal data by UniCredit Sp.A. and of your rights pursuant to the General Data Protection Regulation (EU) 2016/679 (hereinafter also GDPR).
The Data Controller is UniCredit S.p.A., with registered office in Milan, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan (UniCredit).
The Data Protection Officer (DPO) can be contacted at:
UniCredit S.p.A. Data Protection Office, Piazza Gae Aulenti n. 1, Tower B, 20154 Milano, E-mail: Group.DPO@unicredit.eu, PEC: Group.DPO@pec.unicredit.eu.
UniCredit processes the personal data in its possession, that is collected directly from you, or from the relevant local administrations to verify, among others, their accuracy for the following purposes:
A. Need to fulfill legal obligations deriving from your candidacy as a Statutory Auditor of UniCredit.
These obligations imply, among others, verifying - both during the selection procedures and on an ongoing basis - the compliance with the eligibility requirements for taking on and maintaining the role of Statutory Auditor as well as of specific positions ( such as integrity requirements, criteria of correctness, professional experience requirements and competence, time commitment, maximum number of offices covered, respect of the prohibition of interlocking ) as required by applicable law, by the Corporate Governance Code (i.e. Corporate Governance) as with social security and fiscal obligations linked to the remuneration provided.
To comply with the above-mentioned oblications, in some cases, UniCredit is required to carry out analyses that concern also your relatives?, For this reason, we kindly ask you to let them aware of this Information Notice.
These needs represented above are the legitimizing the related data processing. Data provided by you is necessary to comply with the obligations arising from your candidacy as a Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
B. Fulfilment of legal obligations and requests from Public and Supervisory Authorities, concerning the process, communication and/or disclosure - also during the selection procedures - on the website www.unicreditgroup.eu and/ or on specific corporate documents (e.g. Prospectus / Corporate Governance Report, Financial Statements) of your data (such as data contained in your curriculum vitae and in the list of the tasks carried out by you in other banks and commercial companies, as required by the applicable law, and according to the Articles of Association and the Corporate Governance Code).
The needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the legal obligations, the requests from the Authorities, as well as to take on the role of Statutory Auditor of UniCredit, without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
UniCredit processes personal data collectly from you, or from third parties (e.g. relevant local administrations), which include, but are not limited to, personal data (e.g. name, sumame, address, date and place of birth), banking data, information on the financial situation (e.g. patrimonial status, incredit requests/relationships), positions held and related income, employment relationships, commercial/professional relationships
2 The relatives scope is identified on the basis of the specific applicable regulations
This information may concern existing or past relationships with Group Legal Entities or third parties.
UniCredit may process judicial data (i.e. personal data relating to criminal convictions and offences or related security measures, including information on pendings) referring to you, in order to verify the subjective and integrity requirements and/or conditions that prevent from being appointed as member of the Board of UniCredit. In such cases, the processing is necessary to fulfill legal obligations as well as to comply with requests coming from Public or Supervisory Authorities (e.g. filling the questionnaire requested by the ECB). This need represents the legal basis that legitimizes the related data processing. Data provided by you is necessary to comply with the legal obligations; without your personal data, UniCredit would not be in a position to establish with you or to comply with the law obligations.
Your data may be communicated to the natural and legal persons that are acting as "Data Processors", listed in the UniCredit premises and on the website www.unicredit.it, as well as – in the quality of persons authorized to process personal data in relation to the data necessary for the duties they are assigned to – the natural persons belonging to the following categories: Bank employees or persons on secondment to it, temporary employees, interns, consultants and employees of external companies appointed as Data Processors .
Your data may be communicated:
The detailed list of subjects to whom the data can be communicated is available on the website www.unicredit.it, in the "Privacy" section.
UniCredit informs you that your personal data may also be transferred to the European Union or the European Economic Area (so called "Third Countries") if the EU Commission states that the Third Country ensures an adequate level of protection of personal data or in case of other appropriate safeguards, namely when the supplier of UniCredit located in the Third Country contractually ensures an appropriate level of personal data protection (e.g. through the signing of the standard contractual clauses provided by the European Commission), including enforceable and effective data subject rights. Further information can be requested by writing to Group.DPO@unicredit.eu.
The processing of personal data involves the usage of manual and IT instruments with modalities closely connected with the purposes defined above and, in any case, in such a way to guarantee the security and confidentiality of the data.
GDPR grants and assures specific rights, including the right to know what data concerning you are held by UniCredit, as well as how they are used, and the right to obtain, under certain conditions, the copy, the erasure, the rectification or, if interested, the integration of your data, as well as the right to data portability.
UniCredit processes and stores your personal data for all the time you keep the role of Statutory Auditor, to execute the related and connected obligations, to comply with the applicable legal, contractual and regulators, as well as for its own defensive purposes or those of third parties until the expiration of the longest mandatory retention period provided by the applicable law (i.e. 11 years) starting from the date of termination of the relationship with you. UniCredit processes and stores your personal data even after the exployment relationship when this is necessary for archiving purposes for historical research purposes, according, to the "Ethical rules of processing for archiving purposes in the public interest or historical research"3.
At the end of the applicable mandatory retention period, your personal data will be erased or kept in a form which does not permit your identification (e.g. irreversible anonymization), unless the further processing is necessary for one or more of the following purposes: i) for resolution and/or litigation, started before the expiration of the mandatory retention period; ii) to follow up with investigations by internal control functions and/or external authorities, started before the expiration of the mandatory relection period; iii) to follow up with requests from the Italian and/or foreign Public Authorities, received/notified to UniCredit before the expiration of the mandatory retention period.
The e-mail address which you can refer to for the exercise of your rights described in the paragraph 7 is the following one: corporate.law@pec.unicredit.eu.
The deadline for the reply is one (1) month, that may be extended for two (2) further months in cases of particular complexity; in these cases, UniCredit informs you about such extension within one (1) month from the request. The exercise of rights is, in principle, free of charge.
UniCredit informs you that you have the right to lodge a complaint with, or to report to the Garante per la Protezione dei Dati Personali, or else to appeal to the Judicial Authority. The contacts of the Garante per la Protezione dei Dati Personali can be consulted on the website http://www.garanteprivacy.it
3 Record of the provisions 19 December 2018, n. 513
The undersigned PROLA MANES born in Rome (RM) on July 9, 1972, tax code MNSPLA72L49H501A, resident in Bologna (BO), Italian nationality, in relation to the Board of Statutory Auditors of UniCredit S.p.A. ("UniCredit") on the agenda of the Ordinary Shareholders' Meeting convened for April 8th, 2022, under her own responsibility,
submit her candidacy as 12 substitute Statutory Auditor of the Board of Statutory Auditors of Uniciedit and, if appointed, to irrevocably accept her appointment as Statutory Auditor.
In view of the provisions, among others, of art. 26 of the Legislative Decree no. 385 of 1 September 1993 ("TUB"), of art. 148 of the Legislative Decree no. 58 of 24 February 1998 ("TUF"), of the Decree issued by the Ministry of Economics and Finance no. 169 of 23 November 2020 ("Decree"), of the Decree issued by the Ministry of Justice no. 162 of 30 March 2000, of the Supervisory Regulations on banks' corporate governance (Bank of Italy Circular no. 285/2013, First Part, Title IV, Chapter 1, Section III, Paragraph 3.2) and clause 30 of UniCredit S.p.A. Articles of Association and of art. 2, recommendations 7 and 9, of the Italian Corporate Governance Code
there are no reasons for her ineligibility, forfeiture or incompatibility, and that the undersigned meets the requirements provided for by the current provisions and by the Articles of Association of UniCredit for the appointment as & substitute Statutory Auditor of the Board of Statutory Auditors of UniCredit; with specific reference to the experience and independence requirements
1) [] to be enrolled with the Legal Auditors Register AND to have practiced the legal auditing of accounts for a period no less than [] three years [] five years
[enrollment no. with the Legal Auditors Register timeframe: from (month/year) to (month/year) to . ______________________________________________________________________(month/year)]
or
Color UNI Politics State State State Case (2016) Class (2016) States (12/2) States (1/2013 - 1/2/2) States (1/2/2) States (1/2/2) (1/2/2/2/2016) (1/2/2/2/2/2/2/2/2/2/2/2/2/2/
indicate the activities and the relevant timeframe]
c) administration or control activities or executive tasks at listed companies or companies whose size and complexity are greater than, or comparable to, that of UniCredit (in terms of turnover, nature and complexity of the organisation or activity carried out);
(WDEPENDENT OURERS) UNI POLORUMS SPA (2013 indicate the activities and the relevant timeframe
d) 2 professional activities as a business accountant or lawyer, undertaken primarily in the credit, financial, securities or insurance sector:
Lawyer, Studio Legale Cartwright-Pescatore 2012-2022
Iplease indicate the professional firm and the relevant timeframe]
e) [ [ teaching, as university professor of first or second level, subjects concerning - in the fleld of law - banking, commercial, and/or tax law, as well as the running of financial markets and - in the field of business/finance - banking operations, business economics, accountancy, the running of the securities markets, the running of the financial and international markets and corporate finance, or other subjects which are functional to the credit, financial, securities or insurance sector:
Civil Law (Diritto Privato), University of Bologna, 2001 2022
[please indicate the taught subject, the relevant University and timeframe]
f D performing managerial, executive or top management duties, however called, within public organisations or offices of the Public Administration, relating to the credit, financial, securities or insurance sector, or to the investment services sector or to the collective investmentmanagement sector as defined in TUF, whose size and complexity are comparable with that of UniCredit:
Iplease
indicate the function carried out, the relevant entity and timeframe]
The undersigned, also:
"Qualitative and quantitative composition of the Board of Statutory Auditors of UniCredit S.p.A." published on the website of UniCredit;
Date, place Bluque, 11. 3. 22 Voelli Signature
Allegati:
Annex 1 - Curriculum Vitae
PERSONAL INFORMATION
Prof. Avv. Paola Manes
Unicredit S.p.A.
Board of directors Bologna Business School 2019 ongoing
Independent Director 2013-2016 Unipol Gruppo Finanziario S.p.A.(Financial Group) Bologna, Italy Part of Risk Management Committee, Supervisory Board, Remuneration Committee
2022 Admitted to the Supreme Court, Corte di Cassazione Rome
2012-ongoing Of counsel Studio Legale Cartwright-Pescatore, International Law Office Bologna, Italy
2012-2022 Professor of Comparative Private Law Alma Mater Studiorum - University of Bologna, School of Law Bologna, Italy
Prof. Avy. Paola Manes A&Scriate professor of Private law Un iversity of Bologna
2020 Full Professor of Private Law Alma Mater Studiorum - University of Bologna, Department of Legal Sciences Bologna, Italy
Scientific Board CEDE 2022
Centre for Digital Ethics, directed by Lucuiano Floridi, University of Bologna
Arbitrator 2013
Autorità per la vigilanza sui contratti pubblici di lavori servizi e forniture (AVCP) (Authority for the Supervision of Public Contracts for Work) Italy
2012 Expert in ICC arbitration proceedings London, UK
Camera Arbitrale e di Conciliazione della Cooperazione (Conciliation and ArbitrationChamber) of Emilia Romagna, Italy
Legal professional 2005-2011 Studio Legale Galgano, Bologna, Italy
Of counsel 2004 Studio Legale e Tributario Camozzi e Bonissoni Milan, Italy
2004-2005 External consultant Sviluppo Italia S.p.A. Prof. Avv. Paola Manes A&sociate professor of Private law University of Bologna
| 2002 | Legal professional | |||
|---|---|---|---|---|
| Withers LLP London, UK |
||||
| 2002 | Legal professional | |||
| Studio Legale Galgano, | ||||
| Milan, Italy | ||||
| EDUCATION AND | ||||
| TRAINING | ||||
| 2009 | Research Fellow in Private Law | |||
| Alma Mater Studiorum - University of Bologna, School of Law (Campus of Bologna) |
||||
| 2005 | Research Associate in Private Law | |||
| Alma Mater Studiorum - University of Bologna, School of Economy (Campus of Rimini) |
||||
| 2001 | PhD in Civil Law | |||
| Alma Mater Studiorum - University of Bologna | ||||
| 1998 | LLM (Master of Laws) | |||
| University of London, King's College London | ||||
| 1998 | Professional Law Qualification | |||
| 1994 | Law Degree | 110/110 with honours |
||
| Alma Mater Studiorum - University of Bologna | ||||
| PERSONAL SKILLS | ||||
| Mother tongue(s) | Italian | |||
| Other language(s) | UNDERSTANDING | SPEAKING | WRITING | |
University of Bologna
| Listening | Reading | Spoken interaction |
Spoken production |
|||
|---|---|---|---|---|---|---|
| English | 12 | C2 | C2 | |||
| French | 32 | 32 | 82 | B2 | BI | |
| Common European Framework of Reference for Languages | Levels: A1/A2: Basic user - B1/B2: Independent user - C1/C2 Proficient user | |||||
| PUBLICATIONS | ||||||
| Commentaries | · Co-direction of the Commentary of the Italian Civil Code, ed. Giappichelli, | |||||
| Turin, 2018. | ||||||
| * Comments to Articles 768-bis to 768-octies, 1703 to 1730, 1987 to 1991, and | ||||||
| 2447-bis to 2447-decies of the Italian Civil Code, ed. Giappichelli, Turin, 2018. | ||||||
| · Commentary to artt. 28 c.c., 768 bis- octies c.c., Codice della famiglia, directed | ||||||
| by Michele Sesta, III ed., Milan, 2015. | ||||||
| « "Patrimoni destinati a uno specifico affare", Commentario Scialoja-Branca- | ||||||
| Galgano, directed by De Nova, artt. 2447-bis, ter, quater, quinquies, octies, | ||||||
| decies, Bologna, 2013, pp. 1-393. | ||||||
| " Commentary to artt. 32; 1703-1730; 1987-1991; 2740-2744; 2447 bis-decies | ||||||
| ICC, Codice commentato La Tribuna, directed by Francesco Galgano, II ed., | ||||||
| Piacenza, 2008, 2009, 2010, 2012. | ||||||
| Commentary to artt .: 14, 15, 24, 28 c.c., art. 1 d.p.r. 361/2000, artt. 1, 2, 11, 15 | ||||||
| 1 16 Hague Convention July 1st, 1985 on the law applicable to trusts and on | ||||||
| their recognition, Codice delle successioni, directed by Michele Sesta, Milan, | ||||||
| 2011. | ||||||
| · Commentary to art. 4 Consumer Code, Commentario al Codice del Consumo, | ||||||
| directed by Rita Rolli, Piacenza, 2010, pp. 119-125. | ||||||
| Commentary to artt. 28 e 768 bis-octies ICC., "Del patto di famiglia", Codice | ||||||
| della famiglia, directed by Michele Sesta, II ed., Milan, 2009. | ||||||
« "I finanziamenti destinati ad uno specifico affare". Le operazioni di finanziamento, directed by Francesco Galgano, directed by Elisabetta Professor of Private Ianzarini, Angelo Dolmetta, Sergio Patriarca, Bologna 2016.
Uraversity of Bologna
Prol. Avv. Paola Manes ASSiciate professor of Private law
Urainisity of Bologna
| CONFERENCES, | |
|---|---|
| COURSES AND | |
| SEMINARS | |
| March 2018 Scientific direction of the International Seminar "The international contract: old and new issues for judge, arbitrator, undertakings and professionals" University of Bologna |
|
| December 2017 Speaker at the Seminar "Contemporary issues in Financial Markets Law and Company Law - National, International, European and Comparative perspectives" Institute of Advanced Legal Studies - London, UK |
|
| 22 May 2017 Scientific direction in launch event of the handbook "Solvency II: a dynamic challenge for the insurance sector" MIB - Trieste School of Management - Trieste, Italy |
|
| April 2017 Lecturer in Business Law | |
| MBA, Bologna Business School | |
| March 2017 Speaker at the Seminar "Regulating and supervising European Financial Markets: challenges, opportunities and risks* |
|
| King's College London | |
| 2017 Seminar and book launch: Contemporary changes in Regulating and Supervising European Financial Markets - Quo Vadis European Union? |
|
| University of Applied Sciences, Berlin | |
| 2016 Seminar and book launch (Mads Andenas): Contemporary changes in Regulating and Supervising European Financial Markets |
|
| University of Oslo, Institute of Private Law and Private Comparative Law, Faculty of Law |
|
| 22 November 2016 Scientific direction of international seminar "The role of comparative law in iudicial decisions™ |
|
| University of Bologna | |
| 2014-2015 LLM Banking and Finance Lecturer | |
| Queen Mary University London, Institute for Commercial Studies - London, UK | |
| 2014 Scientific direction of the international seminar "Sovereign debt: management and sustainability" |
|
| Alma mater studiorum - University of Bologna - Bologna, Italy | |
| 2013, 2016 | LLM Lecturer |
| IE University - Madrid, Segovia, Spain | |
| 2013-2014 Lecturer at Alma Graduate School | |
| Alma mater studiorum - University of Bologna-Bologna, Italy |
Prol. Avv. Paola Manes A&Stciate professor of Private law Un iversity of Bologna
2013 Tutor, scholarship on fiduciary duty and third parties" rights (*11 segreto fiduciario e i diritti dei terzi") Alma mater studiorum - University of Bologna, Department of Legal Sciences -
Bologna, Italy
Lecturer at more than 50 conferences on topics related to Civil Law, Business Law and Comparative Law
OTHER PROJECTS
Bologna, March 2022
Independent Director of UnipolRec S.p.A.
| Date and place, IDOLOGA, DOLLOGULA | ||
|---|---|---|
| Signature |
ANNEX 3 - PROFILE FORM (COMPETENCE REQUREMENTS - "QUALITATIVE AND QUANTITATIVE COMPOSITION OF THE UNICREDIT S.P.A. BOARD OF STATUTORY AUDITORS")
The undersigned PAOLA MANES declares:

b) & Banking Corporate Governance, gained through:
A) Set
c) & Risk Management, gained through:
STE
ODY UNIPERET Q PA ARESS (DEMITE RISIC COHM 1778 (1) Ni POLONAD S. r COMITTEE UNIPOLIS Ara & I
d) Internal Control Systems and Internal Audit, gained through:
く
e) & Corporate Legal and Compliance, gained through:
t C 30
f) Financial and non-financial Disclosure, gained through:
1 Indicate (at least) two or more of the competences held.
| Date and place, b | ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘﻮﻯ ﺍﻟﻤﺴﺘ |
|---|---|
| Signature |
The following information notice alms at providing you with an overview on the use of your personal data by UniCredit S.p. A and of your rights pursuant to the General Data Protection - Regulation (EU) 2016/679 (hereinafter also GDPR),
The Data Controller is UniCredit Sp.A., with registered office in Milan, Piazza Gae Aulenti n. 3, Tower A, 20154 Milan (UniCredit).
The Data Protection Officer (DPO) can be contacted at:
UniCredit S.p.A. Data Protection Office, Piazza Gae Aulenti n. 1, Tower B, 20154 Milano, E-mail: Group.DPO@unicredit.eu, PEC: Group.DPO@pec.unicredit.eu.
UniCredit processes the personal data in its possession, that is collected directly from you, or from the relevant local administrations to verify, among others, their accuracy for the following purposes:
A. Need to fulfill legal obligations deriving from your candidacy as a Statutory Auditor of UniCredit. These obligations imply, among others, verthying the selection procedures and on an ongoing basis - the compliance with the eligibility requirements for taking on and maintaining the role of Statutory Auditor as well as of specific positions ( such as integrity requirements, criteria of correctness, professional experience and competence, independence, time commitment, maximum number of offices covered, respect of the prohibition of interfacking ) as required by applicable law, by the Corporate Governance Code (i.e. Corporate Governance) as well as with social security and fiscal obligations linked to the remuneration provided.
To comply with the above-mentioned obligations, in some cases, UniCredit is required to carry out analyses that concern also your relatives2. For this reason, we kindly ask you to let them aware of this Information Notice.
These needs represented above are the legal basis leditimizing the related data processing. Data provided by you is necessary to comply with the obligations arising from your candidacy as a Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
B. Fulfiment of legal obligations and requests from Public and Supervisory Authorities, concerning the process, communication and/or disclosure - also during the selection procedures - on the website www.unicreditgroup.eu and or on specific corporate documents (e.g. Prospectus / Corporate Governance Report, Financial Statements) of your data (such as data contained in your curriculum vitae and in the list of the tasks carried out by you in other banks and commercial companies, as required by the applicable law, and according to the Articles of Association and the Corporate Governance Code).
The needs represented above are the legal basis legitimizing the related data processing. Data provided by you is necessary to comply with the legal obligations, the requests from the Authorities, as well as to take on the role of Statutory Auditor of UniCredit; without your personal data, UniCredit would not be in a position to establish a relationship with you or to comply with the law obligations.
UniCredit processes personal data collected directly from you, or from third parties (e.g. relevant local administrations), which include, but are not limited to, personal data (e.g. name, sumane, address, date and place of birth), banking data, information on the financial situation (e.g. patrimonial status, information on credit requests/relationships), positions held and related income, employment relationships, commercial/professional relationships
2 The relatives scope is identified on the basis of the specific applicable regulations
This information may concern existing or past relationships with Group Legal Entitles or third parties.
UniCredit may process judicial data (i.e. personal data relating to criminal convictions and offences or related security measures, including information on pendings) referring to you, in order to verify the subjective and integrity requirements and/or conditions that prevent from being appointed as member of the Board of UniCredit. In such cases, the processing is necessary to fulfill legal obligations as well as to comply with requests coming from Public or Supervisory Authorities (e.g. filling the requested by the ECB). This need represents the legal basis that legitimizes the related data processing. Data provided by you is necessary to comply with the legal obligations; without your personal data, UniCredit would not be in a position to establish a relationship with the law obligations.
Your data may be communicated to the natural and legal persons that are acting as "Data Processors", listed in the UniCredit premises and on the website www.uncreditit, as well as - in the quality of persons authorized to process personal data in relation to the data necessary for the performance of the duties they are assigned to - the natural persons belonging to the following categories: Bank employees or persons on secondment to it, temporary employees, interns, and employees of external companies appointed as Data Processors .
The detailed list of subjects to whom the data can be communicated is available on the website www.unicredit.it, in the "Privagy" section
Unicredit informs you that your personal data may also be transferred to the Countries outside the European Union or the European Economic Area (so called "Third Countries") if the EU Commission states that the Third Country ensures an adequale level of profection of personal data or in case of other appropriate safeguards, namely when the supplier of UniCredit Iocated in the Third Country contractually ensures an appropriate level of personal data protection (e.g. through the standard contractual clauses provided by the European Commission), including enforceable and effective data subject rights. Further information can be requested by writing to Group.DPO@ynicredit.eu.
The processing of personal data involves the usage of manual and IT instruments with modalites closely connected with the purposes defined above and, in any case, in such a way to guarantee the security and confidentiality of the data.
GDPR grants and assures specific rights, including the right to know what data concerning you are held by UniCredit, as well as how they are used, and the right to obtain, under certain conditions, the update, the recification or If interested, the integration of your data, as well as the right to data portability.
UniCredit processes and stores your personal data for all the time you keep the role of Statutory Auditor, to execute the related and connected obligations, to comply with the applicable legal, contractual and regulators, as well as for its own defensive purposes or those of third parties until the expiration of the longest mandatory retention period provided by the applicable law (i.e. 11 years) starting from the date of termination of the relationship with you. UniCredit processes and stores your personal data even after the expiry of the employment relationship when this is necessary for archiving purposes for historical research purposes, according, to the methods set out in the "Ethical rules of processing for archiving purposes in the public interest or historical research"3.
At the end of the applicable mandatory retention period, your personal data will be erased or kept in a form which does not permit your identification (e.g. irreversible anonymization), unless the further processing is necessary for one or more of the following purposes: i) for resolution and/or litigation, started before the expiration of the mandatory retention period; ii) to follow up with investigations by internal control functions and/or external authorities, started before the expiration of the mandatory relection period; ill) to follow up with requests from the ftallan and/or foreign Public Authorities, received/notified to UniCredit before the expiration of the mandatory retention period.
The e-mail address which you can refer to for the exercise of your rights described in the following one: corporate.law@pec.unicredit.eu.
The deadline for the reply is one (1) month, that may be extended for two (2) further months in cases of particular complexity; in these cases, UnCredit informs you about such extension within one (1) month from the request. The exercise of rights is, in principle, free of charge.
UniCredit informs you that you have the right to lodge a complaint with, or to report to the Garante per la Protezione dei Dati Personali, or else to appeal to the Judicial Authority. The Garante per la Protezione dei Dati Personali can be consulted on the website http://www.qaranteprivacy.it
3 Record of the provisions 19 December 2018, n. 513