Deloitte Audit s.r.o., Deloitte Advisory s.r.o., Deloitte BPS a.s., Deloitte Security s.r.o., Deloitte CE Business Delivery Solutions s.r.o., Deloitte CZ Services s.r.o., Deloitte Central Europe Service Centre s.r.o., Deloitte Assurance s.r.o., and Deloitte Legal s.r.o., advokátní kancelář, all having their registered office at Italská 2581/67, Vinohrady, 120 00 Prague 2 (hereinafter collectively or individually referred to as "Deloitte"), hereby publish the following information in accordance with Act No. 171/2023 Sb., on Whistleblower Protection, as amended (hereinafter referred to as the "Act"), in compliance with its § 9 para. 2 letter b), in a manner allowing remote access:

Designation of the authorized person

Mgr. Ing. Monika Potěšilová, tel. +420 733 554 940, email: mpotesilova@deloittece.com

Address for delivery: Spielberk Office Centre, Holandská 1, 639 00 Brno

Methods of Reporting

a) Through the internal reporting channel:

• in person, by email, or by phone to the authorized person; or
• by sending a written report to the authorized person at the address above (please mark the letter with the words “Report under the Whistleblower Protection Act, to the attention of the authorized person, strictly confidential, do not open”);

Reports can be submitted orally, in writing, or in person through the internal reporting channel. If requested by the whistleblower, the authorized person is obliged to accept the report in person within a reasonable time, but no later than 14 days from the date of the request by the whistleblower.

In the report, please provide at least the following information, if known:

• the subject of the report
• the name(s) and surname(s) of the affected persons and witnesses
• the date, time, and place of the incident
• details of any evidence
• your contact details for the purpose of notification and cooperation during the internal investigation (optional)

A report of possible unlawful conduct that has occurred or is to occur may be submitted by a natural person who performs or has performed work or other similar activities in Deloitte. In addition to employees, reports may also be submitted by service providers (suppliers), self-employed individuals (contractors), members of the bodies of these legal entities, volunteers, interns, persons performing tasks on behalf of the Deloitte, and further, for example, job applicants.

What happens after a report is submitted?

The whistleblower will be notified in writing of the receipt of the report within 7 days of its receipt, unless the whistleblower has requested that the authorized person not be notified or if notifying them would risk revealing their identity to another person. The authorized person is obliged to assess the validity of the report and to inform the whistleblower in writing of the results of the assessment within 30 days from the date of receipt of the report. In factually or legally complex cases, this period may be extended by up to 30 days, but no more than twice. The authorized person is obliged to inform the whistleblower in writing of the extension of the period and the reasons for the extension before it expires. If the authorized person finds during the assessment of the validity of the report that it is not a report under the Act, the authorized person shall promptly inform the whistleblower in writing. If the report is assessed as valid, the authorized person will propose measures to the obligated entity (Deloitte) to prevent or remedy the unlawful state. If the obligated entity (Deloitte) does not accept the measures proposed by the authorized person, it will adopt other appropriate measures to prevent or remedy the unlawful state. The obligated entity (Deloitte) shall promptly inform the authorized person of the measures taken, and the authorized person shall inform the whistleblower in writing without undue delay. If the report is not assessed as valid, the authorized person shall promptly inform the whistleblower in writing that, based on the facts stated in the report and the circumstances known, the authorized person found no suspicion of unlawful conduct, or found that the report is based on false information, and the authorized person shall inform the whistleblower of the right to report to a public authority.

The whistleblower also has the option to use the global Deloitte platform and submit a report in English through Deloitte Speak Up (EthicsPoint - Deloitte Global). Please note that such a submission will be received by members of the regional Ethics leadership team for the Central Europe region. Please note that this platform is not governed by Czech law but generally complies with the rules set out in the European directive on the protection of persons who report breaches of Union law, thus providing whistleblowers with the highest level of protection. The report will only be forwarded to the authorized person if it is concluded that it falls within the scope of Czech law. The whistleblower will be informed of such a procedure.

b) Reports may also be made under the conditions set by law through the external reporting channel of the Ministry of Justice available here (https://oznamovatel.justice.cz/chci-podat-oznameni/).