CODE OF CONDUCT

Corporate Ethics | Professional Standards | Anti-Corruption | Compliance | Whistleblower Protection | ESG

PREAMBLE

This Code of Conduct for [Company Name] (adopted [Date], effective through [Date]) establishes ethical standards and compliance obligations for all employees, contractors, board members, advisors. Legal Framework: German StGB §299 (Corruption/Bribery), German KWG Money Laundering Act, US 18 USC §1001 (Fraud), US Securities Exchange Act §10(b).

1. INTEGRITY & HONEST BUSINESS CONDUCT

1.1 Core Principle: Conduct business with highest integrity; no deception, fraud, misrepresentation
1.2 Accurate Records: Maintain accurate, complete business records per German HGB (Commercial Code), Securities Laws
1.3 Violation Reporting: Report suspected violations to [HR / Ethics Hotline / Compliance Officer] without retaliation

2. ANTI-CORRUPTION & BRIBERY (ZERO TOLERANCE)

2.1 Prohibition: Absolute zero tolerance for bribes, gifts, payments, or anything of value to government officials, customers, competitors, or business partners to gain business advantage per German StGB §299, US 18 USC §201 (Bribery of Officials), Foreign Corrupt Practices Act (FCPA)
2.2 Permitted Gifts: Only non-monetary, low-value gifts [100] to government officials IF customary (fully documented)
2.3 Penalties: Violation = immediate termination + criminal liability for individual + corporate criminal liability per StGB §14 (Corporate Criminal Liability)

3. CONFLICTS OF INTEREST

3.1 Disclosure Obligation: Disclose any actual/potential conflict: financial interest, relationship with competitor, family employment, personal business opportunity
3.2 Recusal from Decision-Making: If conflict exists, recuse from decision-making authority on matter
3.3 Approval Required: Conflicts require prior written approval from [CEO / Compliance Officer / Board] before proceeding
3.4 Consequence: Failure to disclose material conflict = grounds for termination

4. CONFIDENTIALITY & TRADE SECRETS PROTECTION

4.1 Protection: Protect all confidential information, customer data, trade secrets, financial data, proprietary methods per EU Trade Secrets Directive 2016/943
4.2 Non-Disclosure: No disclosure to competitors, media, or unauthorized third parties
4.3 Post-Employment Obligations: [2-year / 5-year] post-employment confidentiality obligation

5. HARASSMENT, DISCRIMINATION & WORKPLACE RESPECT

5.1 Zero Tolerance: No harassment/discrimination based on race, gender, age, disability, religion, nationality, sexual orientation, gender identity per German AGG (General Equal Treatment Act), Title VII Civil Rights Act
5.2 Sexual Harassment: No unwelcome conduct of sexual nature; strict liability for employer per AGG §12
5.3 Bullying/Hostile Environment: No intimidation, threats, or creation of hostile work environment
5.4 Consequence: Violations subject to disciplinary action up to termination

6. WHISTLEBLOWER PROTECTION (MANDATORY)

6.1 Protection: Employees who report suspected violations in good faith are PROTECTED from retaliation, termination, demotion per US DTSA 18 USC §1833(b), EU Whistleblower Protection Directive 2019/1937
6.2 Channels: Reports may be made confidentially/anonymously to [HR / External Hotline / Compliance Officer / Legal Counsel]
6.3 No Retaliation: Any adverse action against whistleblower = grounds for civil lawsuit + damages

7. ANTI-MONEY LAUNDERING & SANCTIONS COMPLIANCE

7.1 AML Compliance: Comply with anti-money laundering (AML) + Know-Your-Customer (KYC) regulations; no business with sanctioned individuals/entities per German Money Laundering Act (GwG / GeldWG), US Bank Secrecy Act 31 USC §5318, EU 5th AML Directive 2015/849
7.2 Sanctions Screening: Do NOT engage in business with: (a) OFAC-sanctioned parties (US), (b) EU consolidated sanctions list entities, (c) individuals on terrorism watchlists. Screen all counterparties + ultimate beneficial owners per OFAC SDN List, EU sanctions database
7.3 Beneficial Ownership Verification: For material customers (>EUR/USD 50,000 annually), obtain beneficial ownership identification (UBO verification) per AMLD5 Art. 30
7.4 Suspicious Transactions: Report suspicious transactions to [Compliance Officer] within 24 hours. File suspicious activity reports (SARs) per regulatory requirements. MANDATORY: do NOT alert suspected money launderers of reporting (anti-tipping rules)

8. ENVIRONMENTAL & SUSTAINABILITY COMMITMENT

8.1 Sustainability Practices: Company committed to environmentally responsible operations: reduce waste, energy conservation, responsible supply chain management per EU Corporate Sustainability Reporting Directive
8.2 Employee Responsibility: Employees shall: (a) minimize waste/paper consumption, (b) use sustainable transportation when possible, (c) report environmental compliance concerns
8.3 Carbon Footprint: Company tracks carbon emissions; employees encouraged to minimize personal business travel

9. DATA PRIVACY & PERSONAL INFORMATION HANDLING

9.1 Personal Data Protection: Company respects privacy; processes personal data only per GDPR Art. 6 (Legal Basis). Data collected used only for stated purpose
9.2 Employee Data: Personal data collected during employment (employment records, compensation, health information) handled confidentially and destroyed per retention schedules
9.3 Customer Data Protection: All handling of customer/third-party personal data complies with GDPR and applicable data protection laws

10. GIFTS, ENTERTAINMENT & BENEFITS RESTRICTIONS

10.1 Prohibited Gifts: Employees shall NOT solicit or accept: (a) cash/cash equivalents, (b) expensive gifts >EUR [500], (c) gifts from competitors/vendors to avoid appearance of favoritism
10.2 Permitted Gifts: Low-value gifts ([50]) of nominal value from business associates are acceptable if: documented, reported to management, not influencing business decisions
10.3 Entertainment: Business meals/entertainment allowed if: (a) business purpose documented, (b) reasonable cost, (c) not lavish/extravagant, (d) does not create obligation
10.4 Violation: Undisclosed gifts/entertainment = grounds for disciplinary action

11. OUTSIDE EMPLOYMENT & BUSINESS RESTRICTIONS

11.1 Disclosure Requirement: Employees seeking outside employment must disclose to [HR / Manager] for conflict check
11.2 Prohibited Outside Work: (a) Employment with competitors during Company employment, (b) Use of Company time/resources for personal business, (c) Work in direct conflict with Company business
11.3 Personal Business: Employees may engage in personal business ONLY if: (a) disclosed, (b) no conflict of interest, (c) no use of Company resources, (d) does not impair job performance
11.4 Consequences: Violation of outside work restrictions = grounds for termination

9. SOCIAL RESPONSIBILITY & HUMAN RIGHTS

9.1 Labor Rights: Company respects international labor standards per ILO Declaration on Fundamental Principles:

9.2 Human Rights Due Diligence: Company conducts human rights impact assessments on supply chain; audits for violations per German Supply Chain Due Diligence Act (LkSG)

10. VENDOR & THIRD-PARTY COMPLIANCE

10.1 Vendor Code of Conduct: All vendors/suppliers/contractors required to comply with this Code or equivalent standards covering:

10.2 Vendor Audits: Company may audit vendors for Code compliance; non-compliance grounds for contract termination per BGB §280

11. REPORTING & INVESTIGATION PROCEDURES

11.1 Reporting Channels: Suspected violations reported to:

✓ Direct manager or HR department
[Company ethics hotline / email: ethics@company.com] (confidential, anonymous option available)
✓ External whistleblower counsel (if internal channels compromised)
✓ Regulatory authorities (if criminal conduct / public safety threat)

11.2 Investigation Process: All reports investigated impartially + confidentially within [30 days] by [HR / Compliance / External Counsel]. Complainant + accused provided opportunity to present evidence

11.3 Non-Retaliation Guarantee: Retaliation against reporters = grounds for termination + civil damages per EU Whistleblower Directive 2019/1937, US DTSA 18 USC §1833

12. TRAINING & CERTIFICATION

12.1 Annual Compliance Training: All employees required to complete compliance training on: (a) anti-corruption laws, (b) harassment + discrimination prevention, (c) data protection, (d) ethical decision-making. Training completed within [30 days] of hire + annually thereafter

12.2 Certification: Employees certify understanding + commitment to Code via annual signed acknowledgment

13. VIOLATION & ENFORCEMENT

Violations Subject To:

Appeals Process: Disciplined employees may appeal to [CEO / Ethics Committee] within 10 days for independent review

CRITICAL COMPLIANCE: Anti-corruption laws (German StGB §299, US FCPA) impose CRIMINAL liability on both company + individuals. Conflict of interest disclosures MANDATORY (violations = termination grounds). Whistleblower protections MANDATORY - retaliation = federal enforcement + civil damages per EU Directive 2019/1937 + US DTSA. Money laundering compliance non-negotiable (AML/KYC). Third-party compliance (vendors/contractors) required per German LkSG. Enforcement credibility = deterrent value (swift, proportional, documented).