Board/Management Information • Mar 29, 2022
Board/Management Information
Open in ViewerOpens in native device viewer

CANDIDATES FOR THE POSITION OF BOARD DIRECTOR AND MANAGEMENT CONTROL COMMITTEE MEMBER
Compagnia di San Paolo, Fondazione Cariplo, Fondazione Cassa di Risparmio di Padova e Rovigo, Fondazione Cassa di Risparmio di Firenze and Fondazione Cassa di Risparmio in Bologna
This is an English translation of the original Italian document. In cases of conflict between the English language document and the Italian document, the interpretation of the Italian language document prevails.







INTESA SANPAOLO S.p.A. Piazza San Carlo, 156 10121 TORINO
With regard to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. ("the Company"), scheduled for 29 April 2022, on single call, to resolve, among other things, on the appointment of members of the Board of Directors and, among them, the members of the Management Control Committee for the financial years 2022/2023/2024,
• given that, under the current regulations and the Articles of Association of Intesa Sanpaolo ("the Articles of Association"), individual shareholders, shareholders belonging to the same group and shareholders that are party to a shareholders' agreement regarding the Company's shares may not submit more than one slate, including through a third party or through a fiduciary company,
the shareholder:
holding as a whole a total of no. 2,875,225,595 shares, equal to 14.7975% of the share capital,
1 This refers in particular to Article 26 of the Consolidated Law on Banking and the related implementing provisions set out in Ministerial Decree no. 169/2020, the Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021 – as well as the Guide to fit and proper assessments, as updated by the European Central Bank on 8 December 2021.

website group.intesasanpaolo.com and, specifically, the representations contained therein with reference to the suitability requirements for both Board members and the Board as a whole;

* * *
In accordance with current regulations and the Articles of Association, and in support of the aforementioned slate of the following documentation is attached:
Best Regards,
on March 25, 2022

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned Gian Maria Gros-Pietro (fiscal code GRSGMR42B04L219N), born in Turin, Italy on 04/02/1942, nationality Italian, profession Manager.
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (³) the following for at least one three-year period, also alternatively:
X administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suiteria established for or members of the ministry of the management body and key function holders of banks, Guidelines on the assessment of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implimation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2010 Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

X administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
X professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved Basic/Good Very Good/Excellent (o) |
||
|---|---|---|---|
| 1. Knowledge of the banking sector | 国 | X | |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
10 | ||
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
기 | X |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
X | |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information (*) |
E | X |
| 6. Orientation to results | ||
| 0 | × | |
| 7. Adequate knowledge of the English language | 国 | × |
| 8. Understanding of the global dynamics of the economic and financial system |
X | |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | 0 | × |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
× | |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
■ | × |
| 12. Knowledge of banking and financial products (*) | X | |
| 13. Experience with governance and | ||
| corporate governance structures and mechanisms (*) | D | X |
| 14. Knowledge of financial markets (*) | 0 | × |
| 15. Experience in business and/or corporate management |
X | |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
× | |
| 17. Knowledge of internal control systems (*) | 网 | × |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
||
| D | X | |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
0 | × |
| 20. Risk management expertise (*) | . ■ | X |

| 21. Knowledge of remuneration and incentive systems |
កា | × |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
× | |
| 23. Experience in auditing and control | × | 国 |
| 24. Knowledge of matters related to cyber security |
X | |
| 25. Knowledge of the insurance market and products and the related regulations |
口 | × |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: Chairman of the Board of Directors, Management Board Chair Company or entity concerned: Intesa Sanpaolo Spa Period: respectively from 2016 to 2022; from 2013 to 2016
Area and Activities performed: Chairman Company or entity concerned: Atlantia Spa Period: From 2002 To 2010
Area and Activities performed: Chairman Company or entity concerned: Eni Spa Period: From 1999 To 2002

Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Purposes and legal basis for the processing
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject

Born in Turin, February 4th, 1942
Chairman of the Board of Directors of Intesa Sanpaolo since April 2016, after being Chairman of the Management Board of the Bank from May 2013.
He is currently a member of the Executive Committee of the Italian Banking Association (ABI), and a member of some ancillary structures depending on it.
He chairs the Committee of Market Operators and Investors, an advisory body appointed by Consob, the Italian Securities and Exchange Commission.
He is a member of the Corporate Governance Committee of Borsa Italiana, the Italian Stock Exchange, developing the Corporate Governance Code for the Italian listed companies.
He has been the Chairman of ASTM (2012‐2020), the third toll‐roads operator in the world.
Lead Independent Director of Edison Spa (Éléctricité de France Group), 2005‐2019.
Independent Director of Fiat (2005‐2014), since the end of alliance with GM, to the Chrysler acquisition and the filing for listing FCA in the NY Stock Exchange.
Chairman of Atlantia (2002–2010), a world infrastructure operator: under his mandate the company acquired activities in Brasil, Chile, Portugal, India, US.
Chairman of ENI (1999‐2002). Under his mandate the Italian gas market was liberalized, and the market capitalization of the company increased from 39 to 65 billion €.
Executive Chairman of IRI (1997‐1999). He privatised many controlled companies, revitalized some of them, like Finmeccanica (now Leonardo) and Fincantieri, stopped losses, assured a positive net financial position, paid to the Treasury the first dividend after many years.
From 1994 to 1997 he has been a member of the Advisory and Guarantee Committee for Privatisations, chaired by the General Director of the Treasury Ministry Mario Draghi.
Under his duties he has been in relation with Head of States and Governments of many countries, with their largest industrial and financial companies, the European Commission, the IMF, the ECB and the main world investment banks.
At Luiss University, where he currently sits as a member of the Board of Directors, he founded the Department of Economics and Business and was the Director of it, from 2004 to 2011. He has been Full Professor of Business Economics, first at the University of Turin (1980‐2004), and then at Luiss University (2004‐2012). From 1974 to 1995, he has served as the Director of the Institute for Research on Business and Development, making of it the main entity of the Italian National Research Council in economics.

Attachment C1
With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
| 1, the undersigned CO.OMBORANDREARD (fiscal code C.M.NO.OD.2F207T ), born in | ||||||
|---|---|---|---|---|---|---|
| MILANO | . | on | 12 APRILE 1969 PAP 411 EVEREATOSALES ESS 4854545 VEHARALA BAS SEE SEE SERS |
|||
| nationality ITALIANA | profession DOTTORE COMMERCIALISTA |
I also declare that
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended: Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of barks; Guidelines on the assessment of the members of the management body and key function holders - updated by the ESMA on 2 July 2021, in implementation of the principles set out In Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on & December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained diring the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same lime are counted only for the period of lime during which they were carried out, without accumulating them.

Sadministration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
" professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
u university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector; a management, executive or top management functions, however named, in public entitles or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
d) am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
e) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 3 March 2022, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):
| Areas | Level achieved | |||
|---|---|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |||
| 1. Knowledge of the banking sector | ਾ | |||
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected |
||||
| with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
0 | |||
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional |
||||
| skills and opinions and solution of potential conflicts) |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum; which have delemined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are that someone is expert in, that are appropriate in relation to the ofice taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expessed by the Board of Directors. The areas of knowledge itsted here are collectively requested for the new Board as a whole each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas). |
||
|---|---|---|
| 5. Ability to read and interpret the financial statements data | ||
| of a complex financial institution and accounting | ||
| and financial and non-financial information (*) | 1 | |
| 6. Orientation to results | 0 | |
| 7. Adequate knowledge of the English language | િ | XXXX |
| 8. Understanding of the global dynamics of the | ||
| economic and financial system | ದ | |
| 9. Strategic view and planning | ||
| (understanding and assessing the mediumflong-term | ||
| scenarios of the Bank and the industry | ||
| and related strategic options) (*) | ||
| 10. Business judgement and capacity for inquiry, | ||
| analysis and decision making | ಸ್ | |
| 11. Knowledge of sustainability issues | ||
| and their integration in the Bank's strategies | ದ | 发 |
| 12. Knowledge of banking and financial products (*) | ្រ | |
| 13. Experience with governance and | ||
| corporate governance structures and mechanisms (*) | 1 | |
| 14. Knowledge of financial markets (*) | 0 | XX |
| 15. Experience in business and/or | ||
| corporate management | ದ | |
| 16. Knowledge of regulations in the | ||
| banking industry and financial activities (*) | ||
| 17. Knowledge of internal control systems (*) | ు | |
| 18. Knowledge of the socio-economic context | ||
| and of the market mechanisms of the countries | ||
| where the Bank is present and/or has strategic objectives | ਾਂ | |
| 19. Expertise in corporate functions | 0 | |
| (i.e. audit, legal, corporate) | ||
| 20. Risk management expertise (*) | CI | |
| 3 |

| 21. Knowledge of remuneration and incentive systems |
|
|---|---|
| 22. Knowledge of matters related to | |
| information & digital technology (*) | |
| 23. Experience in auditing and control | |
| 24. Knowledge of matters related to | |
| cyber security | |
| 25. Knowledge of the insurance market and | |
| products and the related regulations |
(*) Area envisaged by Article 10 of Regulation 169/2020.
| Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities: |
||
|---|---|---|
| Area and Activities performed: PRESIDENTE DEL COLLEGIO SINDACALE Company of entity concemed: HYMANITAS SPA Period: 2021.AQ.OSS! |
||
| Area and Activities performed: SINDACO, PRESIDENTE DEL COLLEGIO E AMMINISTRATORE Company or entity concerned: 点列 SPA Period: 2002 : 2011. |
||
| Area and Activities performed: Company or entity concerned: Period: 2011 :: 2014 |
(**) vedi retro

(**)
VICE-PRESIDENTE E PRESIDENTE COMITATO REMUNERAZIONI INTESA SANPAOLO 2016 - 2022
DOCENTE PRESSO UNIVERSITA' LUIGI BOCCONI DI MILANO DI FINANCIAL ACCOUNTING
1989 — 2010
PRESIDENTE
SAIPEM SPA
2015 - 2018

I do not hold any offices in management, supervisory and control bodies or as a senior officer in companies or group of companies operating in the credit, insurance and financial markets:
Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time, include the following categories of data: (-) personal and identification data, contact data, fax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller, (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpacto Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller, and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpacio Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO,
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Requiation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority,
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subje 2022 orch 15Th



He is currently member of the Board of Directors of the following companies:
In the past he has been member of the Board of Directors and of Statutory Auditor in numerous industria! and financial companies, including:


Milan, 15th March 2022
Iso Maling Prof. Paolo A. Colombo

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned Carlo Messina (fiscal code MSSCRL62D06H501Y), born in Rome on 06/04/1962, nationality Italian, profession manager,
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3 ) the following for at least one three-year period, also alternatively:
X administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

□ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
□ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
□ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
□ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (5 ) |
|
| 1. Knowledge of the banking sector | □ | X |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
□ | X |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
□ | X |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
□ | X |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
||
| and financial and non-financial information (*) | □ | X |
| 6. Orientation to results | □ | X |
| 7. Adequate knowledge of the English language | □ | X |
| 8. Understanding of the global dynamics of the economic and financial system |
□ | X |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | □ | X |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
□ | X |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
□ | X |
| 12. Knowledge of banking and financial products (*) | □ | X |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
□ | X |
| 14. Knowledge of financial markets (*) | □ | X |
| 15. Experience in business and/or corporate management |
□ | X |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
□ | X |
| 17. Knowledge of internal control systems (*) | □ | X |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries |
||
| where the Bank is present and/or has strategic objectives | □ | X |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
□ | X |
| 20. Risk management expertise (*) | □ | X |

| 21. Knowledge of remuneration and incentive systems |
□ | X |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
□ | X |
| 23. Experience in auditing and control | □ | X |
| 24. Knowledge of matters related to cyber security |
□ | X |
| 25. Knowledge of the insurance market and products and the related regulations |
□ | X |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: Managing Director and CEO Company or entity concerned: Intesa Sanpaolo Period: Since 2013
Area and Activities performed: Top Manager Company or entity concerned: Intesa Sanpaolo Period: Since 2007

o) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other
6 Please enter the office held and the details of Public Authority employer.

companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
I also agree to:
I attach duly signed
_________________________________ Milan, 23.3.2022
(Place and date)
____________________________
(signature)

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject _______________________ , ________________________________________ 23.3.2022

Managing Director and Chief Executive Officer of Intesa Sanpaolo since 29 September 2013. A graduate of Economics and Business from Luiss University of Rome, he began his career at Banca Nazionale del Lavoro in 1987, where he held the position of Manager in charge of the Corporate Finance and Primary Markets Department. While developing his professional career, he carried out intense academic activities as Professor of Economics of Financial Intermediaries at the Business Administration Master of the Luiss School of Management and as Professor of Corporate Finance at the Department of Economics and Business of the University of Ancona. In 1992, he joined Bonifiche Siele Finanziaria (Parent Company of the Banca Nazionale dell'Agricoltura banking group), where he held the position of Manager in charge of the Planning and Strategic Control Department. In 1996, he took on the role of Manager in charge of Planning at Banco Ambrosiano Veneto and, in 2002, he became the Head of the Planning and Control Head Office Department at Banca Intesa. At Intesa Sanpaolo, in 2007, he became Head of the Value Creation Governance Area and then, in 2008, Chief Financial Officer and, in 2012, General Manager and Chief Financial Officer. In 2013, he took on the role of General Manager of the Bank, Head of the Chief Financial Officer Governance Area and Head of the Banca dei Territori Division. In September of the same year, he became Managing Director and CEO, while maintaining the position of General Manager. Since April 2016, within the one-tier corporate governance system, he has held the positions of Managing Director and CEO, General Manager and sole executive Board Director.
He is currently a member of the Executive Committee of the Italian Banking Association (the ABI), a Fellow of the Foreign Policy Association of New York and a Visiting Fellow at Oxford University. Since November 2014, he has been a member of the Bocconi University Board.
In 2017, Carlo Messina was awarded the "Cavaliere del Lavoro" knighthood for his services to industry by the President of the Italian Republic, Sergio Mattarella.

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year.
| I, the undersigned T.KANGO (EKO1) (fiscal code RTFNCS SHU2 born in | |
|---|---|
| BRUNATE COMO ) | JUNE . 13. 1 9.5 2 on on |
| nationality l. |
a) = I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
I do not meet the above-mentioned independence requirements;
b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
administration or control activities or management tasks in the credit, financial, securities or insurance sector;
2 Article 13.4.1. of the Articles of Association.
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
o management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved Very Good/Excellent (5) Basic/Good |
|
|---|---|---|
| 1. Knowledge of the banking sector | ||
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
||
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowled through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

3
This is an English translation of the original Italian document. In cases of conflict between the English language document and the Italian document, the interpretation of the Italian language document prevails.
| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
||
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information (*) |
||
| 6. Orientation to results | ||
| 7. Adequate knowledge of the English language | ||
| 8. Understanding of the global dynamics of the economic and financial system |
1 | |
| 9. Strategic view and planning (understanding and assessing the medium/long-term |
||
| scenarios of the Bank and the industry and related strategic options) (*) |
||
| 10. Business judgement and capacity for inquiry, analysis and decision making |
||
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
XXXX | |
| 12. Knowledge of banking and financial products (*) | 1 | |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
||
| 14. Knowledge of financial markets (*) | 日 | |
| 15. Experience in business and/or corporate management |
1 | |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
ロ | |
| 17. Knowledge of internal control systems (*) | ||
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
0 | |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
||
| 20. Risk management expertise (*) | 0 | |

| 21. Knowledge of remuneration and incentive systems |
0 | |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
||
| 23. Experience in auditing and control | ||
| 24. Knowledge of matters related to cyber security |
||
| 25. Knowledge of the insurance market and products and the related regulations |
D |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: AREA SIDECTOR AND REGIONAL DileCTOR Company or entity concerned: ........... INTESASAN PAQLO ... 2 A. ............................................................................................................ Period: ......................................................................................................................................................................
Area and Activities performed: 3CARD HERBER ALSO HENSER OF THE RISK CONHTIES ANDREWILE AND CONNECTION OF INS SPACINCELOS Company or entity concerned: INTES ASSA - INTES ASANA FOR PROVATE BAN Period CHAMBER OFCOHHERCE INDUSTON, CARTS, ANS ASSOCULATION CONCE CONCE Area and Activities performed: CHAIRMANS /PRESIDENT / ... Area and Activities periormed: LON BARDY RECONMODIAN OF THE THUNNBANNING HOSEATION Period: (2008 - 20114) - . INTES A. S. AN. PASICS. EXP. 17, 00/112. (0) 17. 12, SKL CINAROSA & BENEFIT SPA

Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
(Place and date)
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject 14000 92 9000

He joined Cariplo in 1973 and has spent his entire professional career within the Intesa Sanpaolo Group. He started to hold management positions in 1982 and gained experience mainly in the local network as Manager at a number of Branches and Offices, as well as Regional Areas of Lombardy, Veneto, Trentino Alto Adige and Friuli. He was a Regional Manager at the Parent Company from 2002, and, in 2008, he took up the position of Manager of the Regional Governance Centre for Milan and its Province. He was President of the Lombardy Regional Commission of the Italian Banking Association (the ABI) from 2008 to 2014. In 2011, by decree signed by the President of the Italian Republic, he was honoured with the long-service star and awarded the title of Master of Labour. A former Board Director of Banca Prossima, Intesa Sanpaolo Assicura, and Mediocredito Italiano, he currently sits on the Board of Directors of Intesa Sanpaolo Private Banking and of Intesa Sanpaolo Expo Institutional Contact of which he is Chairman. He also chairs the Board of Directors of Società Benefit Cimarosa 1. He has been a member of the Board at the Milan Chamber of Commerce, Industry, Handicraft and Agriculture since 2012 and Chairman of Fondazione Innovazione Terzo Settore (FITS) since 2018.
He has been a Board Director of Intesa Sanpaolo since 2016.
Marzo 2022

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year, I, the undersigned …PAOLA TAGLIAVINI…(fiscal code TGLPNN68R63F205J), born in.. MILAN… on… 23/10/1968…, nationality …ITALIAN..., profession ….UNIVERSITY PROFESSOR….
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
□ administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

□ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
□ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
□ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
□ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |
| 1. Knowledge of the banking sector | □ | □ |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
□ | □ |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
□ | □ |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
□ | □ |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
||
| and financial and non-financial information (*) | □ | □ |
| 6. Orientation to results | □ | □ |
| 7. Adequate knowledge of the English language | □ | □ |
| 8. Understanding of the global dynamics of the economic and financial system |
□ | □ |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | □ | □ |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
□ | □ |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
□ | □ |
| 12. Knowledge of banking and financial products (*) | □ | □ |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
□ | □ |
| 14. Knowledge of financial markets (*) | □ | □ |
| 15. Experience in business and/or corporate management |
□ | □ |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
□ | □ |
| 17. Knowledge of internal control systems (*) | □ | □ |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries |
||
| where the Bank is present and/or has strategic objectives | □ | □ |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
□ | □ |
| 20. Risk management expertise (*) | □ | □ |

| 21. Knowledge of remuneration and incentive systems |
□ | □ |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
□ | □ |
| 23. Experience in auditing and control | □ | □ |
| 24. Knowledge of matters related to cyber security |
□ | □ |
| 25. Knowledge of the insurance market and products and the related regulations |
□ | □ |
(*) Area envisaged by Article 10 of Regulation 169/2020.
| Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities: |
||
|---|---|---|
| Independent Director / Area and Activities performed: ………………………………………………………………………… Member or Chairperson of the Risk and Control Committee and the Committee of Independent Directors Eurizon Capital SGR / Eurizon Capital SA / Fideuram Asset Management Company or entity concerned: ………………………………………………………………………… (2020-2022) (2016-2022) (2020-2022) Period: …………………………………………………………………………………………………… |
||
| Chairperson of the Control and Risk Committee (some extended to Sustainability) Area and Activities performed: ………………………………………………………………………… Saipem Spa / Interpump Group Spa / Rai Way Spa / Be Spa Company or entity concerned: ………………………………………………………………………… (2014-present) (2017-2020) (2021-present) (2017-present) Period: …………………………………………………………………………………………………… |
||
| Statutory Auditor Area and Activities performed: ………………………………………………………………………… RCS MediaGroup / Brembo Spa / OVS Spa Company or entity concerned: ………………………………………………………………………… (2020-present) (2018-2021) Period: …………………………………………………………………………………………………… (2020-present) |
||
| Area and Activities performed: ………………………………………………………………………… Professor for Risk, Audit & Compliance Bocconi University and SDA Bocconi Company or entity concerned: ………………………………………………………………………… (1995-2003) (2011-present) Period: …………………………………………………………………………………………………… |

h) I meet the reputation and fairness criteria established for management body members in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.
6 Please enter the office held and the details of Public Authority employer.

n) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.
I also agree to:
I attach duly signed
_________________________________ Milan, 22/03/2022
(Place and date)
____________________________
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject _______________________ , ________________________________________ Milan, 22/03/2022

| 1992 | Degree in Business Economics (110/110 cum laude) from Bocconi University in Milan, |
|---|---|
| specialization Finance | |
| 1994-1995 | "Stock Exchange and Financial Market". A one year post-lauream course organised by |
| Institute Lorenzetti of Bocconi University | |
| 1996 | "Preventing and Detecting Fraud. Tools and Techniques". A course held by the |
| Association of Certified Fraud Examiners, San Diego – California | |
| 1994; 1999 | "Techniques and Methods of Teaching" - Bocconi University Course |
Professional titles: Statutory Auditor since 1999 (entry No 102608)




Speaker at the Conference "The analysis of organizational and production risk in case of disasters or unforeseen events: tools and methodologies to support", Industrial Union of Parma (October 2012)

the key factors being examined?", presented in Budapest, The 2nd ACI Global Airport Operations Summit, 2005.

Attachment C1
With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year, I, the undersigned ……………………………….. (fiscal code …………………………..), born in ……..…………………………………….……….….…… on ……….…………………………………, nationality ……………………………., profession ……..…...……………………….......................... Liana Logiurato LGRLNI68C69F205F Milano (Italy) 29/03/1968 Italian and British Strategic Consultant
I also declare that
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
□ administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

□ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
□ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
□ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
□ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |
| 1. Knowledge of the banking sector | □ | □ |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
□ | □ |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
□ | □ |
4 Article 13.4.2, letter a), of the Articles of Association.
2
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
□ | □ |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
||
| and financial and non-financial information (*) | □ | □ |
| 6. Orientation to results | □ | □ |
| 7. Adequate knowledge of the English language | □ | □ |
| 8. Understanding of the global dynamics of the economic and financial system |
□ | □ |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | □ | □ |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
□ | □ |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
□ | □ |
| 12. Knowledge of banking and financial products (*) | □ | □ |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
□ | □ |
| 14. Knowledge of financial markets (*) | □ | □ |
| 15. Experience in business and/or corporate management |
□ | □ |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
□ | □ |
| 17. Knowledge of internal control systems (*) | □ | □ |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
□ | □ |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
□ | □ |
| 20. Risk management expertise (*) | □ | □ |
3

| 21. Knowledge of remuneration and incentive systems |
□ | □ |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
□ | □ |
| 23. Experience in auditing and control | □ | □ |
| 24. Knowledge of matters related to cyber security |
□ | □ |
| 25. Knowledge of the insurance market and products and the related regulations |
□ | □ |
(*) Area envisaged by Article 10 of Regulation 169/2020.
| Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities: |
|---|
| Equity Partner, Head of Chemicals EMEIA - Strategy & Transactions Area and Activities performed: ………………………………………………………………………… Ernst & Young AG Company or entity concerned: ………………………………………………………………………… 2018 - 2021 Period: …………………………………………………………………………………………………… |
| Global Head of Mergers & Acquisitions Area and Activities performed: ………………………………………………………………………… |
| Syngenta AG Company or entity concerned: ………………………………………………………………………… |
| 2010 - 2017 Period: …………………………………………………………………………………………………… |
| Executive Director, Investment Banking Area and Activities performed: ………………………………………………………………………… |
| Nomura International plc Company or entity concerned: ………………………………………………………………………… |
| 1999 - 2009 Period: …………………………………………………………………………………………………… |
4

Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
_________________________________ (Place and date) Zug (Switzerland), 22/03/2022
____________________________ (signature)

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular
7

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
SECTION 7 - RIGHTS OF THE DATA SUBJECT
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
*** *** ***
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
| Date and signature of the Data Subject | |
|---|---|
| _____ , __________ 22/03/2022 |
|

Leading Board adviser who worked on over \$100bn of M&A, JV and licensing transactions; raised capital for over \$20bn through IPO. Creating stakeholder value by identifying and originating strategic opportunities for industry transformation and growth. Asian, European and American markets. Sectors covered include biotech, healthcare, technology, communications, industrials, chemicals, agriculture and financial services. Passionate about the development and inclusion of diverse talent.
| Ernst & Young (Zürich) | 2018 – 2021 |
|---|---|
| Global Financial Consulting business; \$37.2bn Revenue; 310,000 employees | |
| Equity Partner, Head of Chemicals EMEIA, Strategy and Transactions | |
| Built Chemical Industry Strategy and Transactions business. Performed sectoral scenario | |
| analyses, devised game-changing strategic options and portfolio optimisations, whilst | |
| orchestrating a culture of excellence. Originated and executed M&A transactions exceeding \$8bn | |
| via coverage of Chemical businesses, top 25 Private Equity & Sovereign Wealth Funds. ICAEW registered. | |
| Syngenta AG (Basel) | 2010 – 2017 |
| Global agribusiness (chemicals, biotech and seeds); 28,000 employees | |
| Revenue on sale \$15bn; sold to ChemChina for \$47bn | |
| Global Head of M&A | 2011 – 2017 |
| Originated and executed M&A strategy, \$3.75bn in acquisitions/divestments/licensing. | |
| \$47bn sale to ChemChina. Successfully defended against 5 other takeover proposals. | |
| Sponsor of Group M&A Committee. | |
| Deputy Head of M&A (promoted after 10 months) | 2010 – 2011 |
| Nomura International plc (London) | 1999 – 2009 |
| Largest Japanese investment bank. Revenue \$17bn (Europe \$1.4bn); Market cap \$22bn | |
| 26,000 employees (Europe 4,300); Market share in Japan: M&A 25%, ECM 57% | |
| Executive Director | 2001 – 2009 |
| Lead banker for origination and execution of \$8.5bn Asia-linked M&A transactions. | |
| Permanent member of Fairness Opinion & Valuation Committee. FCA UK and SFC HK registered. | |
| Associate Director | 1999 – 2001 |
| Originated, executed and restructured Venture Capital deals to the value of \$290m. Nomura Director on the Boards of portfolio companies and Nomura Investment Committee. |
|
| UBS Group AG (London & Zürich) | 1998 – 1999 |
| Associate Director - M&A, project and structured finance transactions. SFA registered. | |
| Originated, structured \$32.7bn and executed \$19.7bn M&A, IPO and structured finance deals. | |
| Equity (Milan) | 1995 – 1996 |
| Associate - M&A transactions |
|
| SITEA – Prof. A. Martelli (Milan) |
1993 – 1995 |
| Business Analyst | |
| Strategy adviser on quantitative scenarios for major clients pursuing innovative opportunities. | |
English, Italian (fluent), French (good), German (fair). Italian and UK passport holder, Swiss permit C. Mentoring talent. Lecturer on M&A, governance and climate finance at IMD (Lausanne), IESE (Madrid), University of Zürich. Public speaking at conferences on M&A, ESG, chemical / biotech / agriculture / food industries.
1 IMD Business School (Lausanne) – Board Director Diploma (in progress) 2021 – 2022 IMD Business School (Lausanne) - Senior executive programs (BPSE, ELP, OWP, AHPL, HPL) 2007 – 2019 IMD Business School (Lausanne) - MBA 1997 Università Bocconi (Milan) - MSc, Business Administration 1993

Attachment C1
With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned Luciano Nebbia (fiscal code NBBLCN53P01G275W),
born in Palestro (PV), on 01/09/1953,
nationality Italian, profession retired manager with some board member positions
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (³) the following for at least one three-year period, also alternatively:
X administration or control activities or management tasks in the credit, financial, securities or insurance sector;
2 Article 13.4.1. of the Articles of Association.
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; ; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior the office is taken into account; experience gained in several functions at the are counted only for the period of lime during which they were carried out, without accumulating them.

o administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
o professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors:
o university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector, a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with
that of the bank in which the position is to be held;
| Areas | Level achieved Basic/Good Very Good/Excellent (5) |
|
|---|---|---|
| 1. Knowledge of the banking sector | × | |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
0 | X |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
× |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills; acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
× | |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
||
| and financial and non-financial information (*) | × | |
| 6. Orientation to results | 1 | X |
| 7. Adequate knowledge of the English language | X | 0 |
| 8. Understanding of the global dynamics of the | ||
| economic and financial system | C | X |
| 9. Strategic view and planning (understanding and assessing the medium/long-term |
||
| scenarios of the Bank and the industry | ||
| and related strategic options) (*) | X | |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
C | X |
| 11. Knowledge of sustainability issues | ||
| and their integration in the Bank's strategies | X | D |
| 12. Knowledge of banking and financial products (*) | X | |
| 13. Experience with governance and | ||
| corporate governance structures and mechanisms (*) | X | 0 |
| × | ||
| 14. Knowledge of financial markets (*) | 0 | |
| 15. Experience in business and/or | ||
| corporate management | D | X |
| 16. Knowledge of regulations in the | ||
| banking industry and financial activities (*) | 1 | |
| 17. Knowledge of internal control systems (*) | 1 | |
| 18. Knowledge of the socio-economic context | ||
| and of the market mechanisms of the countries | ||
| where the Bank is present and/or has strategic objectives | 1 | X |
| 19. Expertise in corporate functions | 1 | X |
| (i.e. audit, legal, corporate) | ||
| 20. Risk management expertise (*) | 10 | X |
| 21. Knowledge of remuneration and | ||
|---|---|---|
| incentive systems | 0 | × |
| 22. Knowledge of matters related to | ||
| information & digital technology (*) | × | |
| 23. Experience in auditing and control | × | |
| 24. Knowledge of matters related to | ||
| cyber security | × | |
| 25. Knowledge of the insurance market and | ||
| products and the related regulations | X | |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: Member of the Board of Directors Company or entity concerned: Intesa Sanpaolo Spa Period: From 2019 To 2022
Area and Activities performed: Manager with responsibility for complex structures and management of large assets
Company or entity concerned: Istituto Bancario San Paolo di Torino Spa and later Intesa Sanpaolo Spa
Period: From 1999 To 2015
Area and Activities performed: Member of the Board of Directors and Deputy Chairman Company or entity concerned: Banks and Companies of Intesa Sanpaolo Group Period: From 2015 To 2021
E-MARKET CERTIFIEI

6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
(Place and date)
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular
by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
E-MARKET
SDIR CERTIFIEI
9
For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject 23.3.72

He began his professional career in 1973 at Istituto Bancario San Paolo di Torino within the local branch network. Subsequently, he held increasingly senior positions at Leasing company owned by the San Paolo Group and other leading banks) until he became General Manager in 1995. From 1995 to 1998, he was Country Manager for Italy at the Real Estate Leasing Commission, on behalf of Assilea (an association of Italian leasing companies linked to the Italian Banking Association - the ABI), and became its Vice President at European level.
In 1999, he took over responsibility for the Turin Area at Sanpaolo IMI. Subsequently, he was Head of the Milan Province Area at Intesa Sanpaolo until 2008. From 2009 he was Regional Manager of the Tuscany-Umbria Area and from 2012 Regional Manager for Tuscany, Umbria, Lazio and Sardinia. From 2008 to 2011 he was also General Manager of Banca CR Firenze. He subsequently became a Board Director of Banca CR Firenze and then its Deputy Chairperson, a position he held until February 2019 when he also ceased to hold the same position at Cassa di Risparmio di Pistoia e della Lucchesia following the merger by incorporation of the two subsidiaries into Intesa Sanpaolo. He was Deputy Chairperson of Intesa Sanpaolo Casa until April 2021 and currently holds the same position at Equiter.
In 2010, he was awarded the title of Commander of the Order of Merit of the Italian Republic (Commendotore).
March 2022

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned P.I.C.CA BRUNO ..... (fiscal code PCCBRN50C3062287), born in PAESANA (CN) ................................................................................................................................................................. nationality ... IIALIAN ......... profession ... RETIRED BANK HANAGER
a) Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
of I do not meet the above-mentioned independence requirements;
b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (³) the following for at least one three-year period, also alternatively:
administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members or the mangement of body and key function holders of beleve of the EBA and the ESMA on 2 July 2021, in implementation of the principles on other 1904 in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association:
" Kitlor 10-11 of the Atticles of Abboation office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

o administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
o professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors:
o university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
n management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |
| 1. Knowledge of the banking sector | টির | |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
0 | DFC |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
日 |
4 Article 13.4.2, letter a), of the Articles of Association.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level. 2

5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowled through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
17 | |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information (*) |
n | ਸਿੰਘ |
| 6. Orientation to results | n | 风 |
| 7. Adequate knowledge of the English language | E | 文 |
| 8. Understanding of the global dynamics of the economic and financial system |
വ | ્વ |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry and related strategic options) (*) |
E | 区 |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
E | ア |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
网 | |
| 12. Knowledge of banking and financial products (*) | 1 | 风 |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
i | ् |
| 14. Knowledge of financial markets (*) | D | ম্মু |
| 15. Experience in business and/or corporate management |
ロ | 网 |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
0 | 124 |
| 17. Knowledge of internal control systems (*) | D | ﺎﺕ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟﻤﺘﺤﺪﺓ ﺍﻟ |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
A | |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
开 | |
| 20. Risk management expertise (*) | Cl |
3

| 21. Knowledge of remuneration and incentive systems |
0 | |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
ズ | D |
| 23. Experience in auditing and control | កា | K |
| 24. Knowledge of matters related to cyber security |
)と | |
| 25. Knowledge of the insurance market and products and the related regulations |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
| Area and Activities performed: MANAGER AND BOARD MEHISER Company or entity concerned: Period: |
|---|
| Area and Activities performed: CHIEF EXECUTIVE OFFICE & Company or entity concerned: BANCO Dj NA COLI Period: |
| Area and Activities performed: Company or entity concerned: Period: |
4

Lastly, I declare that
5
6 Please enter the office held and the details of Public Authority employer

I also agree to:
I attach duly signed
(Place and date)
(signature)

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you vill participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The for the provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection and or the Judicial Authority
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject
24 MARCH 2022

Chartered Account in Turin and Registered Auditor.
Board Director of Intesa Sanpadio and Member of the Board of the Voluntary Scheme of the Interbank Deposit Protection Fund.
Affer working as a researcher at the Turin-based Fondazione Giovanni Agnelli (1971-1974) and following an assignment at SIP S.p.A. (now Telecom) in the management control sector (1974) 2710), he worked for all of its professional career at Sanpaolo (now Intersa Sanpaolo), where he held several positions first in the territorial branches and then at the Head Office in the sectors of General Secretarial, Shareholdings Administration, Management Control, Finance and Branch coodlination. In 1997 he was appointed Deputy General Manager "Financial" at Sanpaolo IM. From 2001 to 2004, he was the Manager of the Italian Banking Network of Sanpaolo IMI Group and also held the position of Managing Director of Banco di Napoli. From the end of 2004 until the end of 2006, he was Chief Financial Officer of Sanpaolo IMI Group. In 2007, after the merger with Intesa, he was Head of the Administration Governance Area and the Manager responsible for preparing the Integral of the Integral Group's financial reports. From June 16th 2008, he served as Chief Risk Officer of Intern Sanpaolo Group and, in May 2013, he joined the Management Board of Intesa Sanpaolo. In April 2016 he left the operational role and was appointed Member of the Board of Directors of Intesa Sanpaolo.
He has held positions in several companies of the Intesa Sanpaolo Group, including: Managing Director Banco di Napoli, Deputy Chairman Banque Sanpaolo (France), Chairman Sanpaolo lmmabiliare, Chairman Sanpaolo Imi International SA (Lux), Board Director Cardine Banca, Board Director Crediop, Board Director Sanpaolo IMI Wealth Management, Chairman of the Board of Statutory Auditors SEP, Chairman of the Board of Statutory Auditors Fispao, Standing Auditor Immobiliare Colonna, Standing Auditor Lingotto Uffici. He was Member of the Board and of the Executive Committee of ABI.
From October 2020 until the merger into Intesa Sanpaolo (April 2021), he served as Deputy Chairman of Unione di Banche Italiane (UBI Banca).
Marzo 2022

Attachment C1
With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned Livia Pomodoro (fiscal code PMDLVI40D61F284W), born in Molfetta (Bari) on 21 April 1940, Italian nationality, profession retired Judge
declare that
I also declare that
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (*) the following for at least one three-year period, also alternatively:
X administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

□ administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
o professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors:
u university teaching activities, as first or second level lecturer, in legal or economic subjects on in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
X management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved Very Good/Excellent (°) Basic/Good |
|
|---|---|---|
| 1. Knowledge of the banking sector | 1 | × |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
C | × |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
1 1 | × |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
0 | × |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
0 | × |
| and financial and non-financial information (*) | ||
| 6. Orientation to results | 0 | X |
| 7. Adequate knowledge of the English language | 0 | × |
| 8. Understanding of the global dynamics of the economic and financial system |
a | × |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | 12 | × |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
ា | × |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
D | × |
| 12. Knowledge of banking and financial products (*) | X | |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
口 | × |
| 14. Knowledge of financial markets (*) | 0 | × |
| 15. Experience in business and/or corporate management |
0 | × |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
X | |
| 17. Knowledge of internal control systems (*) | × | 0 |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
C | × |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
0 | × |
| 20. Risk management expertise (*) | × | ி |

| 21. Knowledge of remuneration and incentive systems |
D | × |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
× | |
| 23. Experience in auditing and control | × | |
| 24. Knowledge of matters related to cyber security |
× | D |
| 25. Knowledge of the insurance market and products and the related requlations |
D | × |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: BOARD MEMBER Company or entity concerned: INTESA SANPAOLO Period: April 2016 - Today
Area and Activities performed: President Company or entity concerned: Court of Milan Period: February 2007-February 2015
Area and Activities performed: Chief of Cabinet Company or entity concerned: Ministry of Justice Period: May 1991- September 1993

Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
(Place and date)
(signature)

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
signature of the Data Subjec 0) 0

After graduating in Law from the University of Bari, she entered the judiciary in 1965 and was Judge and Deputy Prosecutor General at the Milan Court of Apped, Public Prosecutor at the Milan Juvenile Court, Head of Staff for the Ministy of Justice, President of the Milan Juvenile Court, and Presiding Judge of the Court of Milan.
She was also Deputy Chairperson of the Milan Provincial Tax Commission, a Board Director of II Sole 24 ORE and of the University of Milano-Bicocca, as well as Deputy Chairperson of the Internationalization Advisory Board of Banca Prossima. In January 2018, she was awarded the UNESCO Chair for "Food: access and law" at La Statale University of Milan.
She is currently a Board Director of Febo, President of the Milan Center for Food Law and Policy, President of the Brera Academy of Fine Arts, President of the NPO Cultural Association "Spazio Teatro No'hma Teresa Pomodoro'', and a Board member of Touring Club Italiano. She is also a member of the Scientific Committee of the Research Centre for Inter-cultural Relations at Università Cattolica of Milan, a member of the Executive Committee of the Italian Chapter of the Women Corporate Directors Association, of the Board of the Fondazione Sodalitas and of the Strategic Advisory Board of Nextalia SGR.
In 2013, she received an honorary diploma from the School of Culture and Art and was awarded the Grand-Croix of the Legion of Honour. In 2015, she was appointed as a Knight Grand Cross (Cavaliere di Gran Croce) of the Order of Merit of the Italian Republic by the President of the Italian Republic. She has been a Board Director of Intesa Sanpaolo since 2016.

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned Maria Alessandra Stefanelli (fiscal code STFMLS64A67A944Z), born in Bologna on 27th January 1964; Italian Nationality, profession: University Full Professor (University of Bologna)
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively: x administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the sultability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in Implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guldelines"); Guidelines on Internal governance, updated by the EBA on 2 July 2021; Gulde to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
o professional activities in matters perfaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
x university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
management, executive or top management functions, however named, in public entitles or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (°) | |
| 1. Knowledge of the banking sector | ﺎﺕ | X |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
0 | X |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
0 | × |
4 Article 13.4.2, letter a), of the Articles of Association.
9
5 The Bank's Board of Directors has defined very good or excellent level as: experience: galned at an executive level of an office and for a significant period of time; knowled through specific and in-depth training and consisting of a recognised cultural background and/or oblained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined their possession, making them demonstrable, in general, very good and excellent knowledge and skills are that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
្ញ | X |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information (*) |
ਮ | |
| 6. Orientation to results | D | X |
| 7. Adequate knowledge of the English language | × | 0 |
| 8. Understanding of the global dynamics of the economic and financial system |
0 | X |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | X | |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
ರ | ਮ |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
X | 0 |
| 12. Knowledge of banking and financial products (*) | ਮ | |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
X | |
| 14. Knowledge of financial markets (*) | E | X |
| 15. Experience in business and/or corporate management |
× | |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
កា | ਮ |
| 17. Knowledge of internal control systems (*) | X | 0 |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
ប | ਮ |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
1 | X |
| 20. Risk management expertise (*) | X | 0 |
3
ుండు
| 21. Knowledge of remuneration and incentive systems |
ロ | × |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
ਮ | 0 |
| 23. Experience in auditing and control | X | 13 |
| 24. Knowledge of matters related to cyber security |
X | ក |
| 25. Knowledge of the insurance market and products and the related regulations |
X |
(*) Area envisaged by Article 10 of Regulation 169/2020,
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: INDEPENDENT BOARD MEMBER Company or entity concerned: INTESA SAN PAOLO SPA Period: 2019-2021
Area and Activities performed: UNIVERSITY FULL PROFESSOR OF ECONOMIC LAW Company or entity concerned. UNIVERSITY OF BOLOGNA Period: SINCE FEBRUARY 2011 AT PRESENT
Area and Activities performed: HEAD OF DEPARTMENT OF LEGAL STUDIES OF ECONOMICS AND BUSINESS Company or entity concerned: UNIVERSITY OF BOLOGNA Period: 2009-2012 Area and Activities performed: DEPUTY PRESIDENT OF THE SCHOOL OF ECONOMICS,
MANAGEMENT, STATISTICS Company or entity concerned: UNIVERSITY OF BOLOGNA Period: 2012-2015
Area and Activities performed: HEAD OF DEPARTMENT OF SOCIOLOGY AND BUSINESS LAW Company or entity concerned: UNIVERSITY OF BOLOGNA Period: 2015-2018
f) I meet the integrity requirements and the reputation criteria established for management body members of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020,
4
E-MARKET
SDIR

as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
I am currently employed in the public sector, but I benefit from the exemptions referred to in x Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors, activitiy for which authorization is not required because in service at University of Bologna under a fixed-time commitment regime;
I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am
5

.............................................................................................................................................................................. requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, 1 will submit it to the Company at the earliest opportunity following the appointment;
n) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.
I also agree to:
x comprehensive information regarding my personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
i) with an undertaking to provide any updates until the acceptance of the position: no management and control officies held
Bologna, 22 nd march 2022
Prof. Maria Alessandra Stefante
රි
6 Please enter the office held and the details of Public Authority employer.

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Requlation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpacio International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank; Article 26 of the Consolldated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular 7

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fuffil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCI OSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entitles identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Requlation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Bologna, 22 nd march 2022
Prof. Maria Alessandra Stafanelli

Curricu!urn Vi1élo


| Sex F I Dato of birih 27/01/1964 I Nation,Ilitv ltalian | |
|---|---|
| ACCADEMIC CARREER | |
| 1992 | Assistant Professor in Administrative Law, University of Bologna |
| 1992 | Member of Department of Legai Studies of Economics and Business, University of Bologna |
| 1999 | Associate Professor of Economie Law (SSD IUS/05) |
| 2004 - 2011 |
Referee far Research Quality Assessment (ANVUR - ltalian National Agency far the Evaluation of Universities and Research lnstitutes) |
| 2005 -2009 | Member of the Ph.D Board in Law and Economics, University of Bologna until 2006. Since then, and until 2009, Member o! the Ph. D. Board in Law and Economics of Industriai Relations |
| 2005 - 2020 |
Member of the academic Committee far the evaluation of teaching contracts and tutorship in Legai studies, School of Economics and Management, University of Bologna |
| Since 2006 | Professore straordinario of Economie Law (SSD IUS/05). Since 1st of October 2007, Professore straordinario of Economie Law, School of Economics, University of Bologna |
| 2007 -2013 | Praga/Budapest Socrates/Erasmus Exchange Referent far the School of Economics, University of Bologna |
| Since November 2009 | Head of Department of Legai Studies of Economics and Business, University o! di Bologna |
| Aprii 201 O - October 2017 |
Member of the Ph.D Board in European Law - curriculum in European Law and Economics |
| Since 2011 | Full Professor of Economie Law (SSD IUS/05). |
| 2911' June 2012 | Deputy Head of the Department of Sociology and Business Law, University of Bologna |

| Pr<lf. Maria /\lcssandrr·i Stor·anoHi | ||
|---|---|---|
| November 2012 | Deputy President of the School of Economics, Management and statistics, and Member of the Council of the School of Economics, Management, University of Bologna (2012-2015) |
|
| Since 2013 | Member of the SME's Research Centre, Department of Sociology and Business Law, University of Bologna |
|
| 2014 - 2015 | Member of the Research Evaluation Committee, Legai studies, University of Bologna | |
| May 2015 - May 2018 | Head of Department of Sociology and Business Law, University of Bologna | |
| S"' Oc!ober 2015 | Member and representative of the Legai studies Section of the Academic Editorial Series Scientific Committee of the Department of Sociology and Business Law |
|
| January 2017 -Aprii 2018 | Member of the Scientific Committee of the Bononia University Press (BUP), as Head of Department of Sociology and Business Law |
|
| Since 15"' May 2018 | Head of the SME's Research Centre of Department of Sociology and Business Law, University of Bologna |
|
| Since 15"' May 2018 | Member of the Executive Committee of the D epa rt men t University of Bologna |
o oc10 ogy an f S · I d B us1ness L aw, · |
| Since Oclober 2018 | Member of the Ph.D. Board in European Law, curriculum in European Market Law, University of Bologna |
|
| October 2018 - December 2020 |
Member of the lnternational Advisory Board - ttalian Labour Law e-Joumal | |
| Since Sep!ember 2019 | Member of the Jean Monnet Centre of Excellence Consumers & SMEs in the Digitai Single Market |
|
| Since May 2021 | Referee /or Research Quality Assessment 2015-2019 (ANVUR - ltalian National Agency for the Evaluatlon of Universities and Research lnstitutes) |
|
| Sìnce July 2021 | Member of the Advisory Board - Joumal of Law, Market & lnnovation | |
| currently | Member of the Advisory Board - Innovazione e Diritto | |
| TEACHING ACTIVITIES | ||
| Academic Years 1990-91, |
Academic Years 1990-91, 1991-92, 1992-93 Seminars of Public Law and towism legislation, School lor economie tourism operators, School of Economics, University of Bologna

E-MARKET
SDIR

| CurT!culLHn Vitae | ||
|---|---|---|
| Academic Years 2010-11, 2011-12, 20-2013, 2013-14, 2014-15, 2015-16, 2016-17, 2017-18, 2018-19 |
Holder of the course Financial lntermediaries Law, Degree in Financial Markets and lnstitutions, and holder of the course in Pub/ic Economie Law, Degree in Management and Marketing, School of Economics, Management and Statistics, University of Bologna |
|
| Academic Years 2014-15, 2015-16, 2016-17, 2017-18, 2018-19 |
Economics, Management and statistics, University of Bologna | Holder of the course of Banking Law, Degree in Law and Economics, School of |
| Academic Years 2019-2020, 2020-2021, 2021-2022 |
Management, University of Bologna | Holder of the course of Banking Law, Degree in Law and Economics; course of Financial lntermediaries Law, Degree in Financial Markets and lnstitutlons and course of Banking Law, Degree in Economics, Markets and lnstitutions, School of Economics and |
| COMMISSIONS | ||
| Academic Years 1989-90, 1990-91, 1991-92 |
University of Bologna | Member and head of Evaluation Commission for the courses of Public Law and Administrative Law, School of Economics, University of Bologna, for the courses of Public Law and tourism legislation, School for economie tourism operators, School of Economics, |
| Academic Years 1992-93, 1993- 94, 1994-95 |
Campus, University of Bologna | Member and head of Evaluation Commission for the courses of Administrative Law and Pub/ic Economie Law, School of Economics, University of Bologna, and for the course of Pub/ic Economie Law, Degree in Economics of Tourism, School of Economics, Rimini |
| Academic Year 1995-96 | School of Economics, University of Bologna | Member and head of Evaluation Commisslon for the course of Pub/ic Economie Law, Degree in Economics of Tourism, School of Economics, Rimini Campus, University of Bologna; member of Eva\uation Commission for the course of Public Economie Law, |
| Acaclemic Years 1996-97, 1997-98, 1998-99 |
School of Economics, University of Bologna | Member and head of Evaluation Commission for the course of Public Economie Law, Degree in Economics of Tourism, School of Economics, Rimini Campus, University of Bologna; member of Evaluation Commission for the course of Pub/ic Economie Law, |
| Academic Year 2001-2002 | Member and head of Evaluation Commission for the courses of Pub/ic Economie Law, and Financial lntermediaries Law, School of Economics, University of Bologna; and Member of the University Evaluation Commission for Research Activities Scholarship abroad |
|
| Since Academic Years 2002- 2003 - al present |
Bologna | Member and head of Evaluation Commission for the course of Financial lntermediaries Law and Banking Law, School of Economics, Management and Statistics, University of |
| Since Academic Years 2002- 2003 al Acaclemic Years 2018-2019 |
School of Economics, Management and statistics, University of Bologna | Member and head of Evaluation Commission for the course of Pub/ic Economie Law, |


Cut-ricuiurn ViL:10 F
1rof", Marin !\iussandra Ste:ifano!ii
Academic Year 2004-05 1611 ' May 2006 Academic Year 2007-08 30 Oc!ober 2,007 October 2011 Academic Year 2014-15 30 Oclober 2015 18 November 2015 23'd January 2017 27'' March 2017 11 TI' July 2018 5"' July 2019 1 O'" September 2019 1 O'" February 2020 1511' December 2020 Member of Learning Commission, Degree in Economics and Finance Council, School of Economics, University of Bologna; School of Economics Representative in Directive Board of the University Language Centre (CILTA Centro Interfacoltà Linguistica Teorica Applicata), University of Bologna Member of a competition selection Board for a position of Associate Professor (SSD IUS/05 Economie Law), Università Telematica "G Marconi", Rome Member of the School of Economlcs Evaluation Board far analysing University of Bologna's activities for CENSIS Report Member of the Evaluation Commission lo assign University Scholarships for School of European Studies "Mìguel Servet", Paris Member of the Department Regulatìon Commission, Universìty of Bologna Member of the Evaluation Commission for the PhD in European Law selection Member of a competition selection Board for a posìtion of Associate Professor (SSD IUS/05 Economie Law), Unìversìty of Milan Member of a competition selection Board for a posìtìon of Research Fellow (SSD IUS/05 Economie Law), University of Bologna Member of a competition Selection Board far a position of Full Professor (SSD IUS/05 Economie Law), University of Venice - Cà Foscari Member of a competitìon selection Board far a posìtion of Research (SSD IUS/05 Economie Law), University of Bologna Member of a competition selection Board far a posìtion of Research (SSD IUS/05 Economie Law), University of Bologna Member of a competition selectlon Board for a positìon of Full Professor (SSD IUS/05 Economie Law), University of Bologna Member of an Evaluation Board for a transition from Researcher lo Associate Professor (SSD IUS/05 Economie Law), Universìty of Bologna Member of the Examinatìon Boards for the PhD final exam AY. 2020 Member of an Evaluation Board far a transition from Researcher lo Associate Professor (SSD IUS/05 Economie Law), Unìversity of Bologna

CtHriculurn \/i1'au
| EDUCATION | |
|---|---|
| 1988 | Oegree in Economi es, University of Bologna, with the evaluation: 110111 O cum laude |
| 1993 | Degree in Law, University of Camerino, with the evaluation: 110111 O cum laude |
| ADDITIONAL INFORMATION | |
| Publicalions | - PMI, mercato digitale e regolazione giuridica: la dimensione internazionale, in Percorsi Costituzionali, 2021, pp. 1-14 (forthcoming) |
| - PMI, Europa, lndustry 5.0. Osseivazioni giuridiche in ordine alla nuova sovranità digitale, in Percorsi Costituzionali, 2021, pp. 75-96 (forthcoming) |
|
| - Spunti di riflessione in tema di regolazione giuridica del mercato del trasporto marittimo nel contesto pandemico e post pandemico, in Il Diritto Marittimo, 2021, pp. 932-945 |
|
| - Sma/1 Business enterprises and the digitai revolution, in F. MARRELLA - N. SOLDATO (eds.), Arbitrato, contratti e diritto del Commercio internazionale -Arbitration, contracts and intemational trade law, Milano, Giuffrè, 2021, pp. 257-267 |
|
| - Small Business in Europa. Regolamentazione giuridica a geometria variabile, in G. LEMME (ed.), Diritto ed economia del mercato, Milano, Wolters Kluver, 2021, pp. 213-237 |
|
| - La nuova strategia europea per le PMI. Innovazioni giuridiche digitali: la piattaforma europea "fil for the future" e i "digitai innovation hub", in Innovazione e Diritto, 2020, pp. 1- 17 |
|
| - Regtech e equity crowdfunding. Sperimentazioni nella regolazione giuridica del mercato finanziario digitale, in Percorsi Costituzionali, 2019, pp. 177-192 |
|
| - Administrative Burdens e Small Business. Una pubblica amministrazione per l'impresa di dimensione minore, in Federalismi.il, 2019, pp. 1-13 |
|
| - Small and Medium sized Enterprises e Mercato Unico Digitale nella regolamentazione giuridica europea, in Percorsi Costituzionali, 2018, pp. 1-15 |
|
| - Osseivazioni critiche sulla regolazione giuridica delle micro, piccole e medie imprese. La dimensione "minore" come misura per una nuova regolamentazione dell'industria e dello sviluppo economico, in G. LEMME (ed.), Diritto ed economia del mercato, Padova, 2018, pp. 199-231 |
|
| - Micro impresa, regolazione giuridica e rinascita economica. Riflessioni in ordine alla |
costruzione di un nuovo modello di sviluppo economico e sociale, in Percorsi

Curricu!urn Vih::e
Costituzionali, 2017, pp. 973-989
- Le sma/1 business come modello giuridico di resilienza industriale europea, in Percorsi Costituzionali, 2017, pp. 705-719
- L'imprenditorialità femminile giovanile tra regolamentazione giuridica e sviluppo economico, in Europa oltre le nazioni. Una sfida aperta, Milano, 2017, pp. 237-240
- La tutela del risparmiatore nella European Banking Union: la necessità di un nuovo rapporto tra persona e mercato, in Percorsi costituzionali, 2016, pp. 497-509
- Prime riflessioni in tema di regolazione pubblica del commercio con l'estero alla luce del nuovo TTIP (Transatlantic Trade and lnvestment Partnership), in Innovazione e Diritto, 2015,pp. 128-157
- Profili di costnizione della tutela dell'utente del servizio socio - sanitario, in M. SESTA (ed.), L'erogazione della prestazione medica tra diritto alla salute, principio di autodeterminazione e gestione ottimale delle risorse sanitarie, Rimini, 2014, pp. 773-802
- Osservazioni critiche sulla regolazione giuridica delle micro, piccole e medie imprese. La dimensione "minore" come misura per una nuova regolamentazione dell'industria e per la ripresa economica, in G. LEMME (ed.), Diritto ed economia del mercato, Padova, 2014, pp. 203-244
- Considerazioni in tema di regolamentazione giuridica del microcredito e le mancate sfide del sistema creditizio, in Innovazione e diritto, 2013, pp. 104-132
- Profili di costruzione della tutela dell'utente del servizio socio-sanitario, in Innovazione e diritto, 2013, pp. 39-64
- L'adeguatezza della regolamentazione giuridica del microcredito a livello globale e le mancate sfide del sistema creditizio, in Studi in memoria di Antonio Cicognani, Cedam, Padova,2012,pp.653-684
- Il riconoscimento normativo delle piccole e medie imprese. Regole e realtà produttiva, Cedam, Padova, 2011, pp. 1-176
- Commento all'art. 11, comma 8, in M. Rispoli Farina-A lrace, L'attuazione della direttiva Mifid. Decreto legislativo 17 settembre 2007 n. 164, Giappichelli, Torino, 2010, pp. 321-326
- Problematiche in ordine alla efficacia della regolazione pubblica in materia di informazione finanziaria, in Dilitto dell'economia, 2009, pp. 297-329

Currlcu\urn Vii"dn
- Mercati regolati?, in Giusi. Amm., 2006, on fine
- Le imprese strumentali delle fondazioni di origine bancaria, Cedam, Milano, 2005, pp. 1- 237
- Le difficili problematiche del trasferimento della conoscenza dal sistema universitario al sistema delle imprese, in Collana Scuola di specializzazione in Studi sull'Amministrazione pubblica, Bononia University Press, 2004, pp. 1-7 4
- L'intervento delle fondazioni di origine bancaria e la mission delle community foundations nel settore dei servizi sociali, in Sanità pubblica e privata, 2004, pp. 603-630
- Le istruzioni di vigilanza della Banca d'Italia. I. Parte generale, Cedam, Padova, 2003, pp. 1- 238, edizione aggiornata di Le istruzioni di vigilanza della Banca d'Italia. I. Parte generale, Cedam, Padova, 2002, pp. 1-220
- Il tempo come fattore di tutela dell'utente nelle Carte dei servizi pubblici, in La rilevanza del tempo nel diritto commerciale, Giuffrè, Milano, 2000, pp. 49-59
- Il ''potere di istruzione" della Banca d'Italia. Elementi di introduzione al tema, in Il diritto dell'economia, 1999, pp. 611-651
- La tutela de/l'utente di servizi pubblici essenziali, in Studi in onore di Feliciano Benvenuti, Mucchi, Modena, 1996, pp. 1577-1607
- Le Istruzioni della Banca d'Italia per la prevenzione della crisi bancaria, in Quaderni della Rivista di diritto dell'impresa, Napoli, 1996, pp.243-246 (e in// diritto dell'economia, 1996, pp. 633-635
- Alcune riflessioni sul modello di "Gruppo bancario" nel testo unico 1' settembre 1993, n.385, in// diritto dell'economia, 1996, pp. 613-617
- La rifonna della amministrazione pubblica del turismo, Cedam, Padova, 1995, pp. 1-227
- La tutela dell'utente e del cittadino attraverso l'organizzazione di se1vizi pubblici, in I servizi pubblici locali. Evoluzioni e prospettive, Maggioli, Rimini, 1995, pp. 89-94
- Lineamenti giuridici per la "costruzione" di una tutela dell'utente di servizi pubblici turistici, in Per un turismo all'insegna della qualità della vita, s. Arcangelo di Romagna, Rimini, 1995, pp. 38-52

-
La tutela de/l'utente dei pubblici servizi, Cedam, Padova, 1994, pp. 1- 223 (studio monografico)
- L'organizzazione pubblica del turismo ne/l'ordinamento italiano, Cedam, Padova, 1992, pp. 1-224
- Due recenti proposte di riforma dell'organizzazione pubblica del turismo: un esempio di quel che ci aspetta con le riforme istituzionali?, in // diritto dell'economia, 1992, pp. 381- 396, e pp. 626-633
- Permanenze utopiche nella normazione italiana per il govemo del territorio: prime riflessioni, in Per una definizione dell'Utopia. Metodologie a confronto, a cura di Nadia Minerva, ed. Longo, Ravenna, 1992, pp. 421-447 (also in Studi in onore di Gustavo Vignocchi, Mucchi, Modena, 1994, pp. 1081-1128)
-Alcune considerazioni critiche in ordine alla nuova organizzazione del sistema doganale, in // diritto dell'economia, 1990, pp. 121-128
- Vincoli ed impacci al commercio con l'estero nel contenzioso doganale, in // diritto dell'economia, 1989, pp. 213-229
- Atti giuridici non normativi, nel volume collettaneo Introduzione alla ricerca dei dati giuridici, a cura di Girolamo Sciullo, Giappichelli, Torino, 1989, pp. 137-149
Projec!s, Seminars She has participated in numerous research projects, including those relating to / piani regolatori generali nella prospettiva della riforma del govemo locale (Progetto di ricerca 60%, anno 1990); Permanenze utopiche nel governo del territorio in Italia (Progetto di ricerca di interesse nazionale anno 1990); Le imprese transnazionali - CTN- nell'ordinamento giuridico italiano (progetto di ricerca 60% anno 1995); Il fine istituzionale "ricerca scientifica" nel decreto legislativo n. 460/97 sulle ONLUS (Progetto di ricerca 60% anno 1998); Le istruzioni di vigilanza della Banca d'Italia: natura e forza giuridica (Progetto di ricerca 60% anno 2000); Ambiente. Tutela, fruizione e sostenibilità economica (Progetto di ricerca 60% anno 2004); Il mercato impetfetto e regolazione del sistema finanziario (Progetto di ricerca 60% anno 2005)
She also analysed public regulation in the entrepreneurial and industriai sectors and economie freedoms in the national and EU regulatory context in arder to verify the real efficiency of it, and to salve the complex problem of the so-called improper burdens for enterprises (RFO 2007, 2008, 2009). From 201 O to 2012 she was PRIN Unii Scientific Responsible (PRIN 2009) "Nuove forme di organizzazione e strumenti giuridici nell'integrazione socio-sanitaria"; currently she is Member of PRIN 2017 "The essential, and competitive, raie of specialised courts and alternative dispute resolution mechanisms in financial law as a precondition far the attainment of socia/ desirable levels of public and private enforcement. Lessons from history in administrative and business law and the future of judicial review in European financial /aw in light of European and national fundamental rights"
Speech al the Conference Per una definizione dell"utopia: metodologie e discipline a confronto, organized by Istituto Suor Orsola Benincasa Napoli and Centro interdipartimentale di Ricerca sull'Utopia University of Bologna, 12-14 September 1990 entitled Pennanenze utopiche nella nonnazione italiana per il governo del territorio: prime riflessioni (published in Per una definizione de/l'Utopia. Metodologie a confronto, a cura di Nadia Mine1Va, Longo, Ravenna, 1992, pp. 421- 447, and in in Studi in onore di Gustavo V/gnocchi, Mucchi, Modena, 1994, pp. 1081-1128)
Speech al the Conference Caduta di qualità delle sentenze in campo ambienta/e, San Leo, 16 - 17 May 1992, entitled Processo ed interessi alla tutela ambientale
Speech al the Conference I servizi pubblici locali. Evoluzioni e prospettive, Imola, 29 November 1993, entitled La tutela de/l'utente e del cittadino attraverso l'organizzazione di servizi pubblici (published in / servizi pubblici locali. Evoluzioni e prospettive, Maggioli, Rimini, 1995, pp. 89-94)
Speech at the Conference La Legge Quadro su/l'Appalto dei Lavori Pubblici, Rimini, 15 - 16 Aprii 1994, entitled Sistema delle fideiussioni e libertà di mercato
Speech at the Conference La questione dei centri storici, Caserta, 3-4-5 November 1994, entitled Centri storici e servizi pubblici
Speech at the Conference Cartur: per un turismo all'insegna della qualità della vita, organized by Movimento Consumatori, Bellaria, 8 Aprii 1995, entitled Lineamenti giuridici per la costruzione di una tutela de/l'utente di servizi pubblici turistici (published in Per un turismo all'insegna della qualità della vita, S. Arcangelo di Romagna, Rimini, 1995)
Speech entitled Servizi pubblici privatizzati: quale tutela per l'utente? At the Conference Le privatizzazioni negli enti locali, organized by University of Bologna and CRESEM, Forlì, 5 May 1995
Speech entitled Le Istruzioni della Banca d'Italia per la prevenzione della crisi bancaria at the Conference La prevenzione dalla crisi bancaria ne/l'ordinamento italiano e comunitario, Taormina 9-11 November 1995, published in Quaderni della Rivista di diritto dell'impresa, Napoli, 1996, pp. 243-246, e in Il diritto dell'economia, 1996, pp. 613-617)
Speech entitled Alcune riflessioni sul modello di "Gruppo bancario" nel testo unico 1 ° settembre 1993, n.385 at the Conference La crisi del gruppo bancario, organized by Unlverslty of Palermo 13-16 June 1996 (published in /I diritto de/l'economia, 1996, pp. 633- 635)
Speech entitled Il tempo come fattore di tutela dell'utente nelle Carte dei servizi pubblici at the Conference La rilevanza del tempo nel diritto commercia/e e nel diritto dell'economia, organized by Department of Private law and ltalian and compared labour

law, University of Macerata, 20 Aprii 1999 (published in La rilevanza del tempo nel diritto commercia/e, Giuffrè, Milano, 2000, pp. 49-59)
Speech entitled Le fondazioni bancarie e la Carta della donazione at the Conference Il nuovo ruolo delle fondazioni bancalie ne/l'economia civile, organized by Centro studi per la ricerca e la formazione sulle fondazioni (University of Bologna and Associazione tra Casse e Monti dell'Emilia-Romagna), 30 June 1999
Seminar at Collegio Superiore University of Bologna entitled Ripensare la vigilanza pubblica del mercato finanziano alla luce delle nuove normative comunitarie, 26 March 2012
Seminar at Collegio Superiore University of Bologna entitled La Costituzione economica europea: liflessioni su coesione finanziaria e coesione sociale, 2 Aprii 2012
Seminar at Veritatis Splendor Diocesi Bologna, Il Microcredito come strumento di inclusione finanziaria e sociale, tra finanza etica e capitalismo parassitario, 12 Aprii 2012
Speech entitled Il quadro normativo di Jiferimento italiano ed europeo per le PMI, at Round Table Discussion // ruolo delle PMI nell'attuale contesto economico, Faculty of Economics University of Bologna, 9 May 2012
Seminar at the Ph. D. Programme Dilitto europeo University of Bologna, L'inefficacia della regolazione giuridica delle Micro e delle PMI nel contesto europeo, 5 June 2013
Relation at Round Table Discussion PRIN 2009 Erogazione della prestazione medica tra diritto alla salute, principio di autodeterminazione e gestione ottimale delle risorse sanitarie, at Specialization school lor legai professions "E. Redenti" - University of Bologna, 22 November 2013
Speech entitled Regolazione pubblica delle Micro e Piccole, Medie Imprese at the Conference Regolazione e contratti d'impresa, School of Economics, Management and Statistics, University of Bologna, Forlì Campus, 7 March 2014
Seminar Regolazione e organizzazione pubblica all'esportazione: Small Medium Enterprises e mercato russo, at the University Master Relazioni intemazionali d'impresa: Italia Russia, University of Bologna, 11 Aprii 2014
Speech entitled L'imprenditorialità femminile giovanile tra regolamentazione giulidica e sviluppo economico, at the Conference Imprenditorialità femminile e strumenti di inclusione e sviluppo per le giovani migranti, Unlversity of Bologna, 30 November 2016 (published in Europa oltre le nazioni, Mimesis, Milano, 2017, pp. 237-240)
A.y. 2018 - 2019 Seminar series at PhD Programme in European Law, Architettura

Prof \J
Bologna, 22 March 2022

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
I, the undersigned Bruno Maria Parigi (fiscal code PRGBNM57T21D612Y), born in Firenze, Italy on December 21, 1957, nationality Italian, profession Professor of Financial Economics and of Money and Banking at the University of Padova, Italy
I also declare that
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed ( 3 ) the following for at least one three-year period, also alternatively:
□ administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

□ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
□ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
□ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved |
|
|---|---|---|
| Basic/Good | Very Good/Excellent ( 5 ) |
|
| 1. Knowledge of the banking sector |
□ | X |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
□ | X |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
□ | X |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
□ | X |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
||
| and financial and non-financial information (*) |
□ | X |
| 6. Orientation to results |
□ | X |
| 7. Adequate knowledge of the English language |
□ | X |
| 8. Understanding of the global dynamics of the |
||
| economic and financial system |
□ | X |
| 9. Strategic view and planning (understanding and assessing the medium/long-term |
||
| scenarios of the Bank and the industry |
||
| and related strategic options) (*) |
□ | X |
| 10. Business judgement and capacity for inquiry, analysis and |
decision making |
X |
| 11. Knowledge of sustainability issues |
||
| and their integration in the Bank's strategies |
X | |
| 12. Knowledge of banking and financial products (*) |
□ | X |
| 13. Experience with governance and |
||
| corporate governance structures and mechanisms (*) |
□ | X |
| 14. Knowledge of financial markets (*) |
□ | X |
| 15. Experience in business and/or |
||
| corporate management |
X | □ |
| 16. Knowledge of regulations in the |
||
| banking industry and financial activities (*) |
□ | X |
| 17. Knowledge of internal control systems (*) |
□ | X |
| 18. Knowledge of the socio-economic context |
||
| and of the market mechanisms of the countries |
||
| where the Bank is present and/or has strategic objectives |
□ | X |
| 19. Expertise in corporate functions |
X | □ |
| (i.e. audit, legal, corporate) |
||
| 20. Risk management expertise (*) |
□ | X |

| 21. Knowledge of remuneration and incentive systems |
□ | X |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
X | □ |
| 23. Experience in auditing and control |
X | □ |
| 24. Knowledge of matters related to cyber security |
X | □ |
| 25. Knowledge of the insurance market and products and the related regulations |
□ | X |
(*) Area envisaged by Article 10 of Regulation 169/2020.
| Experience, theoretical knowledge and competence indicated at a very good/excellent level |
|---|
| were gained in the performance of the following activities: |
| Activity: Independent non-executive director of Intesa Sanpaolo Assicura; I'm in my second term; first term from 29/7/2019 to 15/3/2021; second term from 16/3/2021. |
| Activity: Teaching undergraduate Money and Banking, Univ. Padova, 2001-2022 |
| Activity: Teaching graduate Financial Economics, Univ. Padova, 2003-2022 |
| Activity: Teaching graduate Liquidity and Shadow banking, University of Zurich, 2014 |
| Activity: Teaching graduate Capital and Relationship Lending, University of Zurich, 2015 |
| Activity: Consultant for CEO, Veneto Banca, 2014-2015 |

Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer.

I also agree to:
I attach duly signed
Padova, March 23, 2022 (Place and date)
____________________________
(signature)

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular
7

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject
Padova, March 23, 2022 ,


March 2022 CURRICULUM VITAE
Born: 21.12.1957, Florence, Italy Citizenship: Italian
2001 (2005) to date, Professor (Full Professor) of Economics, University of Padua, Department of Economics and Management
2014 to date, Director master's degree in Economics and Finance, University of Padua, Department of Economics and Management
July 2019 to date, member of the Board of Directors of Intesa Sanpaolo Assicura, Intesa Sanpoalo Group (2nd term)
1990 - Ph.D. in Economics, Rutgers University, New Brunswick, NJ, USA.
1987 - Master in Economics, Rutgers U.
1983-84 - ISTAO Course in Management and Economics, Ancona, Italy
1983 – Laurea (B.A.) in Economia e commercio, University of Florence; 110/110 cum laude. Thesis title: "Finanziamento degli Investimenti e Politica Monetaria".
Fields of Specialization Financial Intermediation, Industrial Economics, Applied Microeconomics
Academic affiliations since 2006 CESifo, Munich, Germany
1998-2001 November – Associate Professor, University of Padova, Faculty of Economics 1994-1998 - Researcher, University Ca' Foscari of Venezia, Department of Economics 1990-1994 - Assistant Professor, Department of Economics, Virginia Polytechnic Institute and State University, Blacksburg, VA 24061, USA 1985-90 - Graduate Student, Ph.D. Program in Economics, Rutgers U., New Brunswick, NJ, USA

2003 June-July – Research Visitor, European Central Bank, Francoforte

1999 November – Visiting Scholar, Federal Reserve Bank of Philadelphia, Research Department
1994 January-February, Visiting Assistant Professor, Université des Science Sociales de Toulouse, France
1994, January-July - Fellow I.N.R.A., Université des Sciences Sociales de Toulouse, France
1985 – Internship in OECD, Economics and Statistics Department, Paris.
1984 – Internship in SNAMPROGETTI S.p.A., Feasibility studies unit, Milan.
Ggraduate courses
1991-1992 - Industry Structure, in Ph.D Program, Virginia Polytechnic Institute.
1997 – Models of principal-agent in Ph.D. Program in Economics, Univ. of Venezia, Bologna, Modena, Padova
1998-2004 – Corporate Finance in Master's in economics and Business, Venice International University
2001-2015 Advanced Micro, Ph.D. Program in Economics and Management, Univ. of Padova
2003-2009 – Univ. di Padova, Economics for Finance, Master's in banking and finance
2005 – Univ. Munich, CES Lectures in Corporate Governance
2010-22- University of Padova, Financial Economics
2014 – University of Zurich, Topics in Banking: Liquidity and Shadow Banking
2015 – University of Zurich, Topics in Banking: Capital Regulation and Relationship Lending
2017-22 – Univ. Padova, Advanced Microeconomics
2018 Florence School of Banking, European Univ. Institute "Financial Regulatory Reforms and Systemic Risk: A post Crisis Assessment, Bruxelles, 5-6 September 2018
2020 Florence School of Banking, European Univ. Institute "Models for Financial Stability and Prudential Policy, Florence, 4-5 February 2020

1986-87 – Teaching assistant at Rutgers Un.: Intro to Macroeconomics and Intro to Microeconomics
1988 - "Lecturer" at Rutgers Un., for Corporate Finance
1990 - Virginia Polytechnic Institute: Money and Banking; Intro to Microeconomics
1991 - Virginia Polytechnic Institute: Industry Structure

| Teaching evaluations at the University of Padova. All available evaluations. | ||||||
|---|---|---|---|---|---|---|
| Course | Level | Academic year | Average score of the overall student's | |||
| satisfaction (1=min 10=max) | ||||||
| Economia Politica I | I anno Corso laurea triennale | 2001/02 | 7,95 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2001/02 | 7,91 | |||
| Economia Politica: incertezza ed informazione | III anno Corso laurea triennale | 2002/03 | 8,17 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2002/03 | 8,47 | |||
| Economia Politica I | I anno Corso laurea triennale | 2002/03 | 8,08 | |||
| Economia Politica per la finanza | I anno Corso laurea specialistica | 2003/04 | 9 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2003/04 | 8,29 | |||
| Economia Politica per la finanza | I anno Corso laurea specialistica | 2004/05 | 8,14 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2005/06 | 8,07 | |||
| Economia Politica per la finanza | I anno Corso laurea specialistica | 2005/06 | 8,59 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2006/07 | 7,25 | |||
| Economia Politica per la finanza | I anno Corso laurea specialistica | 2006/07 | 7,19 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2007/08 | 6,95 | |||
| Economia Politica per la finanza | I anno Corso laurea specialistica | 2007/08 | 5,68 | |||
| Economia Politica per la finanza | I anno Corso laurea magistrale | 2008/09 | 8,05 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2008/09 | 7,77 | |||
| Economia Politica per la finanza | I anno Corso laurea magistrale | 2009/10 | 5,76 | |||
| Economia dei mercati monetari e finanziari | III anno Corso laurea triennale | 2009/10 | 7,09 | |||
| Money and Banking | III anno Corso laurea triennale | 2010/11 | 8.20 | |||
| Financial Economics | I anno Corso laurea magistrale | 2010/11 | 6.72 | |||
| Money and Banking | III anno Corso laurea triennale | 2011/12 | 7,4 | |||
| Financial Economics | I anno Corso laurea magistrale | 2011/12 | 7,3 | |||
| Money and Banking | III anno Corso laurea triennale | 2012/13 | 8,8 | |||
| Financial Economics | I anno Corso laurea magistrale | 2012/13 | 7,6 | |||
| Money and Banking | III anno Corso laurea triennale | 2013/14 | 8,07 | |||
| Financial Economics | I anno Corso laurea magistrale | 2013/14 | 7,33 | |||
| Money and Banking | III anno Corso laurea triennale | 2014/15 | 8,13 | |||
| Financial Economics | I anno Corso laurea magistrale | 2014/15 | 7,59 | |||
| Money and Banking | III anno Corso laurea triennale | 2015/16 | 7,64 | |||
| Financial Economics | I anno Corso laurea magistrale | 2015/16 | 8,05 | |||
| Money and Banking | III anno Corso laurea triennale | 2016/17 | 7,98 | |||
| Financial Economics | I anno Corso laurea magistrale | 2016/17 | 7,57 | |||
| Money and Banking | III anno Corso laurea triennale | 2017/18 | 7,70 | |||
| Financial Economics | I anno Corso laurea magistrale | 2017/18 | 8,10 | |||
| Advanced Microeconomics | I anno Corso laurea magistrale | 2017/18 | 6,63 | |||
| Financial Economics | I anno Corso laurea magistrale | 2018/19 | 8,28 | |||
| Money and Banking | III anno Corso laurea triennale | 2018/19 | 7,55 | |||
| Financial Economics | I anno Corso laurea magistrale | 2019/20 | 8,21 | |||
| Money and Banking | III anno Corso laurea triennale | 2019/20 | 7,84 | |||
| Advanced Microeconomics | I anno Corso laurea magistrale | 2020/21 | 8.00 | |||
| Financial Economics | I anno Corso laurea magistrale | 2020/21 | 7.35 | |||
| Money and Banking | III anno Corso laurea triennale | 2020/21 | 7.87 |

2000, 2002 Corporate Governance and Antitrust, Scuola Formazione Commercialisti, Padova, November
2001 Models to assess current economic and financial scenarios, CUOA, training course for private bankers
2018 5-6 September, training course for European Commission, DG FISMA, Financial regulatory reforms, and systemic risk: a post crisis assessment




Communications to scientific conferences
1992 "Bank Branching", Fourth Southeastern Economic Theory Conference, U. of Alabama, Touscalousa.
"Bank Branching", ASSET Meeting, U. of Toulouse, France.
1993 "Dynamic Incentive Contracts with Intertemporal Demand Substitution", European Meeting of the Econometric Society, Uppsala, Sweden.
"Monitoring a Common Agent", EARIE Conference, Dublin, Ireland, August 2004 – "The Lender of Last Resort: A 21st Century Approach", European Economic Association,
Madrid, August "Local Market Integration and Control Rights" European Meeting of the Econometric
Society, Madrid, August

Communications to scientific conferences (continued)

Communications to other conferences
2002 – Discussion of "Considerazioni Finali della Relazione del Governatore della Banca d'Italia", Univ. Padova, 10 June.
Introduction to Conference "La Svolta del Settembre 1992", Univ. Padova, 14 September. 2005 – Introduction to Conference on "OPA/OPS nel settore bancario italiano, Univ. Padova, 21 May.
Speaker "Dove va l'economia italiana tra errori del passato ed incertezze future" Lions Club Castelfranco Veneto (TV), September 20.
2006 – Speaker at Intesa Private Banking, Economia e mercati finanziari: prospettive e opportunità, Padova, June.
2007 – Introduction to conference on "Finanza e sviluppo imprenditoriale", Univ. Padova, March 19.
2009 – Unindustria Padova, Speaker Scenarios for the economy, March
– Unindustria Padova, Speaker Scenarios for the economy, October
2010 – Treviso Association of Architects, Speaker on Scenarios for the economy, December
2012 – Speaker in "Orientarsi nell' attuale crisi economica tra cause e possibili rimedi" Lions Club Vicenza, 9 January
– "Verso la Banking Union" Fondazione Cassa Risparmio di Padova, Padova, November
2021- speaker "Economia raccontata (ufficiale) vs economia percepita: una contrapposizione errata?" Lions Club Firenze Poggio Imperiale, October

1985 - U. Firenze; 1987 - Rutgers U.; 1988 - Rutgers U.; 1989 - U. Firenze, Rutgers U.; 1990 - Virginia Polytechnic Institute, Florida International U., Columbia U., Virginia Pol. Inst., Univ. of Montreal, U. di Firenze; 1991 - U. Ancona, U. Udine, Virginia Pol. Inst.; 1992 - U. Torino, U. Firenze, U. Venezia, Virginia Pol. Inst.; 1993 - U. di Trieste, I.G.I.E.R., Seminari di Ricerca C.N.R.; 1994 - I.N.R.A. Toulouse, U. Venezia; 1995 - U. Udine, U. Venezia, I.G.I.E.R. Bocconi; 1996 - U. Venezia, U. Venezia, I.G.I.E.R.; 1997 - U. Cattolica Milano, U. Ancona, U. Venezia; 1998 - Ente Einaudi Roma, U. Venezia, U. Bologna, U. Padova.; 1999 Federal Reserve Bank of Philadelphia, Federal Reserve Bank of New York, CSEF U. Salerno; 2000 - European U. Institute, U. Padova; 2001 U. Losanna, Oxford University; 2002 - U. of Mannheim, Univ. of Freiburg; 2003 – European Central Bank, U. Padova; 2004 - U. Bologna, Ente Einaudi Roma, U. Roma "La Sapienza", U. Salerno; 2006 - U. Milano Bicocca, U. Cattolica Milano, U. Milano Statale, U. Politecnica delle Marche; 2007 - U. Trento; 2009 - U. Paris Ouest La Défense Nanterre; 2011 - Bangor Univ. Business School UK, Univ. Zurich; 2012 - The Netherlands Central Bank; 2016 - U. Venezia, Banque de France, U. Padova; 2017 - Univ. Zurich.; 2019 - Bank of International Settlements; UK Leuven; 2020 U. Padova, U. Bicocca; 2021 Hong Kong Institute of Monetary Research (webinar), Bank of International Settlements (webinar).
1991-93 - Virginia Polytechnic Institute: Coordinates internal seminars of Department of Economics 1996 - 97 U. of Venice: Coordinates internal seminars of Department of Economics. 1999- 2003 U. of Padova: Coordinates seminars of Department of Economics
1998 - (with Gabriella Chiesa) Scientific coordinator of conference of Research in Economics "Microeconomics of Financial Intermediation", Venice, January 1998.
2008 Conference Asset, European University Institute, member of the scientific committee

1990-92 International Economic Review; 1991 J. of Economics and Management Strategy; 1994 Giornale degli Economisti; 1994, 95, 99 Research in Economics; 1995 Journal of Economics and Business; 1998 (con Gabriella Chiesa) Editor Special Issue Research in Economics, "Microeconomics of Financial Intermediation"; Review of Development Economics; 1999 Giornale degli Economisti; Zeitschrift für Nationalökonomie; JFI; Review of Economic Studies; 2000 Research in Economics; European Economic Review; JFI; 2001 American Economic Review; Economic Journal; Economic Notes. 2002 Economic Notes, CESifo Economic Studies, International J. of Industrial Organization, Giornale degli Economisti, JFI; 2003 J. of Money Credit and Banking; 2004 IJIO, Canadian J. of Economics; 2005 International J. of Industrial Organization, Annals of Finance; 2006 J. of the European Economic Association, JMCB, Review of Finance, International J. of Central Banking, Journal of Macroeconomics, EER, Review of Financial Studies; 2007 Geneva Risk and Insurance Review; Review of Economic Studies, JEEA, J. of Economic Dynamic and Control, JMCB; 2008 Review of Financial Studies, JET, International Journal of Central Banking, JEEA, CESifo Economic Studies, Economic Notes; 2009 JEEA, JMCB; 2011 JMCB, Rand, Economic Journal; 2013 MIT Press; 2014 Economics Letters, Oxford Economic Papers, J. Banking and Finance; 2015 The Manchester School, J. Banking and Finance, J. Finance; 2016 JMCB, J. Banking and Finance, Rand; 2017 J. of International Money and Finance; 2018 European Economic Review; 2018 Oxford Economic Papers; 2019 Journal of Finance, JMCB; 2020 Oxford Economic Papers.
Editorial activity
2000-2003 Member of Scientidic Committee of Giornale degli Economisti 2000-2015 Associate Editor, Research in Economics 1999-2000 Guest Associate Editor per Research in Economics
Reviewer
1998 Financial Management Association European Conference Reviewer 2001 European Finance Association, Conference Reviewer Da 2004 MIUR: PRIN, CIVR, FIRB various years 2007 Austrian Academy of Sciences Scholarship Reviewer 2011 Univ. Cà Foscari Venezia, research grant reviewer; post doc positions Univ. Calabria 2012 MIUR VQR 2004-2010. 2013 Research Council of Canada, Social Sciences and Humanities grant reviewer; reviewer for research grant Univ. Genova 2013, 2014, 2018, 2021 Czech Science Foundation grant reviewer 2015, 16 European Financial Association, conference reviewer 2016 MIUR VQR 2011-2014 2021 MIUR VQR 2015-2019


2013- 2022 President of Master in Economics and Finance, Department of Economics and Management, Univ. Padova
2005-06 – Consultant for Verona Civil Tribunal in two cases of default of Argentina bonds
2011 Occasional consultant for Hedge Fund Elliott Advisors, UK
2012-15 Consultant for General Electric Capital, Middle Market Report on Italy
2014-5 Consultant for CEO Veneto Banca
Foreign Languages English, French
I grant the consent to manage my personal information according to D.Lgs. 196/03.
Padova, 23 March, 2022

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2024 financial year,
| I, the undersigned F.RANKESCA. HASSMILL. (fiscal code USTFINGG9MGAF2CSS), born in | ||||
|---|---|---|---|---|
| . MLAN. | on 2.d. COS 10.9. | |||
| nationality TALY profession CHAPECED ACCOUNT ANT |
c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
o administration or control activities or management tasks in the credit, financial, securities or insurance sector;
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assesment of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").
2 Article 13.4.1. of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the above-mentioned sectors;
university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
| Areas | Level achieved | |||
|---|---|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |||
| 1. Knowledge of the banking sector | ||||
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected |
||||
| with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
p | |||
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional |
||||
| skills and opinions and solution of potential conflicts) |
4 Article 13.4.2, letter a), of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
D | |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting |
||
| and financial and non-financial information (*) | B | |
| 6. Orientation to results | ਲ੍ | |
| 7. Adequate knowledge of the English language | 0 | ম্ম |
| 8. Understanding of the global dynamics of the economic and financial system |
風 | 0 |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) (*) | 必 | |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
赛 | 0 |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
X | 0 |
| 12. Knowledge of banking and financial products (*) | A | 0 |
| 13. Experience with governance and corporate governance structures and mechanisms (*) |
0 | ম্ম |
| 14. Knowledge of financial markets (*) | X | D |
| 15. Experience in business and/or corporate management |
风 | 0 |
| 16. Knowledge of regulations in the banking industry and financial activities (*) |
ম্ | |
| 17. Knowledge of internal control systems (*) | 文 | 0 |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries |
||
| where the Bank is present and/or has strategic objectives | న | 0 |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
国 | ম্ |
| 20. Risk management expertise (*) | X | D |
3

| 21. Knowledge of remuneration and incentive systems |
ಸ | |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology (*) |
||
| 23. Experience in auditing and control | D | |
| 24. Knowledge of matters related to cyber security |
文 | |
| 25. Knowledge of the insurance market and products and the related regulations |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: HENRED OF THE STATUTORY BOAD OF AUSTORS Company or entity concerned: GRAPPO HOTULANE SPA. ............................................................................................................................ Period: 2008 = 2022. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Area and Activities performed: POSSIDENT OF THE STATUTORY BOAD OF AJDITORS Company or entity concerned: . AS MENCA . SRA ................................................................................................................................ Period: 2010 - 2022
Area and Activities performed: COHRJLSORY PEOFESSIONAL TRAINING AS AUDITOR Company or entity concerned: . HEF ( HIMISTLY of Economy and Finance, . Hally ) .... Period: 2011 - 2022

Lastly, I declare that
6 Please enter the office held and the details of Public Authority employer,

I also agree to:
I attach duly signed
HILAND (Place and date)
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).


For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
| Date and signature of the Data Subject | ||
|---|---|---|
| 25/03/2022 | ||

| PERSONAL lNFORMATION | FRANCESCA MASOTII |
|---|---|
| Telephon | |
| Nationali | Italian |
| Milan, 21 August 1969 | |
| EDUCATION ANO TRAININ | |
| • Date (from - to) • Name and type of school or training institut • Qualifìed a |
2022 TRAINING COURSE IN RESTRUCTURING PROCEDURES ( DECREE 118/2021) Expert in corporate restructuring as per decree 118/2021 |
| • Date (from - to) • Name and type of school or training institut • Qualifìed a |
1999 Registration to REGISTRO DEI REVISORI LEGALI Auditor (registered with number 92699 - GU n.87 del 02/11/1999) |
| • Date (from - to) • Name and type of school or training institut • Qualifìed a |
November 1993 - May 1994 UNIVERSITÀ COMMERCIALE L. BoCCONI, MILAN - CERTI (Tax research (enter) Post Graduate Mater in Corporate Tax Law |
| • Date (from - to) • Name and type of school or training institut • Qualifìed a |
November 1993 UNIVERSITÀ COMMERCIALE L. BoCCONI, MILANO Chartered Accountant (registered with number 3974 - ODCEC Milan) |
| • Date (from - to) • Name and type of school or training institut • Qualifìed a |
June 1993 UNIVERSITÀ COMMERCIALE L. BoCCONI, MILANO Doctor in Economy; vate 110/110 |
| • Date (from - to) • Name and type of school or training institut • Qualifìed a |
June/August 1990 UNIVERSTIY OF CALIFORNIA - SANTA BARBARA, USA Intensive "English Language Program - business english" |
| • Date (from - to) • Name and type of school or training institut • Qualified a |
1988 IsmUTO SUORE ANGELICHE - MILANO IB (language), vate 60/60 |

| WORK ExPERIENCE | October 2006 - today MASOm CASSELLA- |
|---|---|
| Date (from - to) • • Organization • Main skills |
MILAN {PARTNER) Member of the Lexwork Network |
| Tax and corporate consultancy; restructuring; M&A; tax and corporate compliance Non executive director, member of Statutory Board of Auditors and Auditor of several companies including SIM and companies registered as per art. 106 TUF |
|
| Date (from - to) • • Organization • Main skills |
January 1998 - October 2006 MASOm BERGER - MILAN {FOUNDING PARTNER) Tax advice; accounting and tax auditor; tax due diligence; tax declarations and compliance; tax litigation; M&A. Member of Statutory Board of Auditors and auditos of several companies. |
| Date (from - to) • • Organization • Main skill |
Januyary 1997 - December 1997 MILAN (Associate) STUDIO BUCCIARELU - Tax advice and tax litigation; tax and administrative consultancy: inheritance tax declarations; restructuring. |
| Date (from - to) • • Organization • Main skills |
December 1996 Januery 1994 - MILAN (Associate) CALCHI NOVATI CONSULTANTS SPA- Tax declarations and compliance; accounting audit; tax litigation. |
| Date (from - to) • • |
November 1993 - May 1994 |
| Organization • Main skills | MILAN {TRAINEE) STUDIO UCKMAR- Reserach activity and study. |
| TEACHINGH EXPERIENCE Date (from - to) • Organization • Main skills |
December 2005 - to date ORDINE DOTTORI COMMERCIALISTI ED ESPERTI CONTABILI DI MILANO Teacher in several courses and seminars organized by the EU law Commission and the Study Center of the Milan ODCEC |
| 0THER LANGUAGE | |
| Reading, Writing, Speaking • |
ENGLISH EXCELLENT |
| Reading, Writing, • Speaking |
ENGLISH EXCELLENT |
| Reading, Writing, Speaking • |
GERMAN SCHOOL LEVEL |
| TECHNICAL CAPABILITIES | MICROSOFT OFFICE EXCELLENT KNOWLEDGE - EXCELLENT KNOWLEDGE - SEVERAL ACCOUNTING AND TAX COMPLIANCE SOFlWARE |
| OTHER JNFORMATION | 1998 - TO DATE: MEMBER OF STUDY COMMISIONS, ODCEC MILAN 2021- TO DATE MEMBER OF THE "CENTRO STUDI" ODCEC MILAN IN CORPORATE LAW 2017 - TO DATE: ASSOCIATE AND MEMBER OF THE "PROBIVIRI BOARD" - ORCOLO DELLA STAMPA SPORTING, TURIN |
| I authorize the recipient of the c.v. to use my persona! information here noted as per D. Lgs. 196/200 3 ---'�- |
Attachment C2
E-MARKET
With reference to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Turin, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee of Intesa Sanpaolo S.p.A. until the approval of the 2024 financial statements
| TORINO | |
|---|---|
| nationality ITAUAN profession . CNIVERSITY PROFESSOR |
With regard to independence
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide"). 2 Articles 13.4.1 and 13.5 of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, for candidates who are not enrolled in the register of statutory auditors, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

as a member of corporate bodies or performing executive duties at entities that conduct banking or financial business with total assets of at least 5 billion euro or at entities conducting insurance business with annual gross premium income of at least 1 billion euro, or at entities or enterprises with total revenues of at least 500 million euro (sizes are understood to be calculated on the basis of the company's most recent financial statements or consolidated financial statements, where prepared by the entity), or
teaching at the university level in a tenured position in economics or law, or performing, over an extended period, significant professional services or activities related to the duties typical of a control body for the benefit of the entities and enterprises indicated at the previous point, or
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |
| 1. Knowledge of the banking sector | ||
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
||
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

2
4 Articles 13.4.2, letter a), and 13.5.3, last paragraph, of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowled through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
E-MARKET
SDIR CERTIFIED
This is an English translation of the original Italian document. In cases of conflict between the English language document and the Italian document, the interpretation of the Italian language document prevails.
| 20. Risk management expertise * | 3 | |
|---|---|---|
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
디 | |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
ದ | 元 |
| 17. Knowledge of internal control systems * | E | |
| 16. Knowledge of regulations in the banking industry and financial activities * |
||
| 15. Experience in business and/or corporate management |
||
| 14. Knowledge of financial markets * | 1 | |
| 13. Experience with governance and corporate governance structures and mechanisms * |
L | |
| 12. Knowledge of banking and financial products * | I | |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
||
| 10. Business judgement and capacity for inquiry, analysis and decision making |
■ | |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry and related strategic options) * |
1 | |
| 8. Understanding of the global dynamics of the economic and financial system |
0 | |
| 7. Adequate knowledge of the English language | 0 | |
| 6. Orientation to results | 0 | |
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information * |
||
| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
||

(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: Board Meurse and Period: ... A.PRILE 2019 - NARILA 2022
Area and Activities performed: MROFESSOR OF CORPORATE Company or entity concerned. UNIVERSITY OF TURIT Period: . FRON 2006 TO 2022 INC
Area and Activities performed: CONSULTANT ACTIVITY Company or entity concerned TRUN (2+40002)- ONWA Period FROM 1995 To 2022

a I hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association and undertake as of now, if appointed, to immediately give up all incompatible offices;
m) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the qualitative and quantitative composition of the Board of Directors.
5
I do not hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association:
6 Article 13.5.1 of the Articles of Association.
7 Please enter the office held and the details of Public Authority employer.

from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.
I also agree to:
I attach duly signed
(signature)
6

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpacio International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
SECTION 7 - RIGHTS OF THE DATA SUBJECT
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established

8

by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] of by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Bata Subject


Place and Date of birth: Torino, June 7th 1968
1987 High School Degree (Maturità scientifica) at Istituto Sociale Jesuit Fathers in Torino. 1992 Master Degree in Business Management at University of Torino, Faculty of Economics.
1993 Dottore Commercialista e Revisore legale (Chartered Accout).
1994 Technical Consultant of the Legal Court.
1998 Ph.D. in Business Management at University Commerciale "L. Bocconi", Milano.
Full Professor of Business Strategy at University of Torino, Department of Management.
Research activity has concerned Strategic Management Issues, particularly as regards Business Strategy and Marketing Management and, more recently, on Corporate Social Responsibility.
Since 1992 I have developed, in addition to the intense academic activity as professor of Business Strategy at University of Torino, Department of Management, the professional activity as Dottore Commercialista (Business and Tax Advisory) at Studio Zunino, associazione professionale.
Founding Partner Studio SGVM since 2019.
The professional activity is focused on corporate consulting, company valuation, M&A, tax consultancy for Italian and multinational companies and groups. He has held many assignments as appraiser for evaluating companies, trademarks and patents.
Statutory Auditor. Technical Consultant of the Legal Court
As part of the professional activity, I hold positions as member of the board of statutory auditors, statutory auditor and / or independent director of the following companies:
INTESA SANPAOLO Indipendent, non-executive board member and member of the CCG, since April 30th 2019.

OLIVETTI S.p.A. (TIM Group) Chairman of the Statutory Auditors the D.Lgs 231 Committee, since March 29th 2021.
BOLAFFI S.p.A. (Bolaffi Group) Chairman of the Statutory Auditors and of the D.Lgs 231 Committee, since 2016.
BOLAFFI METALLI PREZIOSI S.p.A. (Bolaffi Group) Chairman of the Statutory Auditors, since 2016.
ASTE BOLAFFI S.p.A (Bolaffi Group) Chairman of the Statutory Auditors, since 2016.
M.MARSIAJ & C. S.r.l. (Marsiaj Group) Statutory Auditors, since 2016.
MONCANINO S.p.A. (Marsiaj Group) Statutory Auditors, since 2017.
I am member pro-bono of the statutory board of auditors of the following non-profit associations:
Felicita Gallesio Foundation – No-profit Organization of Istituto Sociale, Jesuit Fathers in Torino.
Scarabei - Association for the Egyptian Museum of Torino. Association Real Castle of Racconigi.
As part of the past and concluded professional experiences and activity, I was in charge as member of the board of statutory auditors, statutory auditor and / or independent director of numerous companies including: TRW Automotive Holding Italia S.r.l. (ZF Group, for over 15 years). TRW Automotive Italia S.p.A. (ZF Group), (Chairman of the Board of Statutory Auditors for over 15 years). I was appointed by the private stakeholder, in the Board of Directors of the Piedmont Foundation for Oncology (FPO, participated by the Piedmont Region and the Fondazione Piemontese per la Ricerca sul Cancro - Onlus). Non-executive Vice president of Mecplast S.r.L. Non-executive Board Member of SpinLab, Academic Spinoff of the University of Turin. Inthera S.p.A., already Mondadori Group, as Chairman of the Board of Statutory Auditors. Former member of the statutory auditors of F.lli Gancia S.p.A. and alternate auditor of Exor S.p.A. and FIAT S.p.A., alternate auditor of F.lli Saclà S.p.A.
Member of the Scientific Committee of University Masters including: MBA SAA Master in Business Administration, since a.a. 2008_2009. University Master in Management of Sales Processes, since a.a. 2008_2009. University Masters in Real Estate Asset Management, since a.a. 2010_2011. University Masters in Insurance Innovation, since a.a. 2020_2021.
Chair of the Marketing and Business Strategies course at the University of Torino, Department of Management and SAA - School of Management of the University of Torino.
Lecturer for several years in the Masters in Business Administration of SAA - School of Management of the University of Torino and of the Master at Il Sole 24 Ore, Milano. He has been for several years professor at the MEB Master of the European School of Management - ESPC Europe.
Visiting Professor at I.U.M. - University of Monaco "Prince Albert I" Monaco, Inseec Group Paris, period 2005_2010.
Visiting professor National University of Cordoba (Argentina). Visiting professor University Paris Nanterre La Défense (2017). Visiting professor at Troyes Business School (2019).

MOSCA, F., KITCHEN, P. J., & CHIAUDANO, V. (2021). Investigating the Impact of Luxury Brands' Traditional and Digital Contents on Customer-Based Brand Equity. In Mosca, F., Casalegno, C., & Gallo, R. (Ed.), Developing Successful Global Strategies for Marketing Luxury Brands (pp. 81-100). IGI Global.
CIVERA C., CASALEGNO C., MOSCA F., MAPLE P. (2018), Customers' Judgments and Misjudgments of Corporate Responsibility Communication: a Cross Country Investigation of the Effects on Confidence and Trust within Banking Sector, in Psychology & Marketing. Volume 35, Issue 2, February.
BRONDONI S., MOSCA F. (2017), Overture Special Issue Integrated CSR, in SYMPHONYA Emerging Issues in Management, December.
MOSCA F., CIVERA C. (2017), The Evolution of CSR: Antecedents and Features of an Integrated Approach, in SYMPHONYA. Emerging Issues in Management, December.
MOSCA F., (2017), Strategie nei mercati del lusso. Marketing, sostenibilità e digitalizzazione, Egea, Milano, 380 pages.
MOSCA F., (2016), La valutazione degli asset intangibili: la valutazione della marca tra metodi tradizionali e metodi marketing based, in Rivista Diritto ed Economia dell'impresa, n. 3, giugno.
WINER R. S., DAHAR R., MOSCA F., (2013) Marketing Management, Apogeo, 640 pages.
Turin, March 22nd 2022 I authorize the use of my personal data.


Attachment C2
With reference to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Turin, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee of Intesa Sanpaolo S.p.A. until the approval of the 2024 financial statements,
| the undersigned ".ILENA TERESA MOITA (fiscal code MITMNTS9C6 Jcood (born in CASSANO DIANA ( MI.) on |
|
|---|---|
| nationality . THILAN |
I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee;
I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).
( ) meet the independence requirements laid down in Article 13.5.2 and 13.4.3 of the Articles of Association, as also supplemented by Requlation of the Economy and Finance no. 169/2020:
(1) I meet the requirements of independence of mind, laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.
I meet the professionalism requirements established by the Regulation of the Ministry of the Economy and Finance no. 169/2020 (3), as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
I meet the specific requirements set out in Article 13.5.3 of the Articles of Association and, specifically, I have acquired a proven experience of at least five years in the fields of internal controls, administration and finance:
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide"). 2 Articles 13.4.1 and 13.5 of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, for candidates who are not enrolled in the register of statutory auditors, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

( as a member of corporate bodies or performing executive duties at entities that conduct banking or financial business with total assets of at least 5 billion euro or at entities conducting insurance business with annual gross premium income of at least 1 billion euro, or at entities or enterprises with total revenues of at least 500 million euro (sizes are understood to be calculated on the basis of the company's most recent financial statements or consolidated financial statements, where prepared by the entity), or
x teaching at the university level in a tenured position in economics or law, or performing, over an extended period, significant professional services or activities related to the duties typical of a control body for the benefit of the entities and enterprises indicated at the previous point, or
a serving as senior officer or carrying out executive duties at public administrations of at least regional importance or authorities whose responsibilities concern banking, finance or insurance business;
e) { I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 3 March 2022, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of competence indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):
| Areas | Level achieved | |
|---|---|---|
| Basic/Good | Very Good/Excellent (5) | |
| 1. Knowledge of the banking sector | ||
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
||
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
4 Articles 13.4.2, letter a), and 13.5.3, last paragraph, of the Articles of Association.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowled through specific and in-depth training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Committees, if for more than one term) in the professional curriculum, which have determined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents.
Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

This is an English translation of the original Italian document. In cases of conflict between the English prevails.
| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
||
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information * |
||
| 6. Orientation to results | ||
| 7. Adequate knowledge of the English language | ||
| 8. Understanding of the global dynamics of the economic and financial system |
||
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) * | ||
| 10. Business judgement and capacity for inquiry, analysis and decision making |
||
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
||
| 12. Knowledge of banking and financial products * | ||
| 13. Experience with governance and corporate governance structures and mechanisms * |
||
| 14. Knowledge of financial markets * | ||
| 15. Experience in business and/or corporate management |
||
| 16. Knowledge of regulations in the banking industry and financial activities * |
||
| 17. Knowledge of internal control systems * | 11 201 | |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
18 | |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
国 | |
| 20. Risk management expertise * | 日 |
x 3

| 21. Knowledge of remuneration and incentive systems |
|
|---|---|
| 22. Knowledge of matters related to information & digital technology * |
|
| 23. Experience in auditing and control | |
| 24. Knowledge of matters related to cyber security |
|
| 25. Knowledge of the insurance market and products and the related regulations |
|
(*) Area envisaged by Article 10 of Regulation 169/2020.
| Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities: o Directors Area and Activities performed: Company or entity concerned: 16 10044 Period: |
|
|---|---|
| AUDIT COMMITTEE (CHARRAN Area and Activities performed: . Company or entity concerned: TREV FINAN 2(ARU A ( NASUSTRIALE SPA Period: |
|
| Area and Activities performed: CONSUL-TING SIRATEGY & INNOVAT Company or entity concerned: STRACC Period: |
1 meet the integrity requirements and the reputation criteria established for management body members of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
I meet the reputation and fairness criteria established for management body members in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.
4

I do not hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association;
o I hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association and undertake as of now, if appointed, to immediately give up all incompatible offices;
() I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the qualitative and quantitative composition of the Board of Directors.
no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibitions from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
6 Article 13,5,1 of the Articles of Association.
7 Please enter the office held and the details of Public Authority employer.

from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.
I also agree to:
I attach duly signed
(signature)

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.
7

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established
8

by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject

Milena Teresa Motta Born in Cassano d'Adda (MI) on March 29th, 1959 Married, three children
PUBLICATIONS (all ofthem with Edizioni Il Sole 24 Ore, Milano)
�

| 2016-present Intesa Sanpaolo Spa. Member of the Board of Directors and Member of the Audit Committee |
|
|---|---|
| 2015-2020 | Trevi Finanziaria Industriale Spa. Chairman of the Board of Statutory Auditors |
| 2014-2017 | Brembo Spa. Standing Statutory Auditor and Member ofthe Supervisory Board |
| 2012-2015 | Atlantia Spa. Standing Statutory Auditor |
| 2013-2014 | Damiani Spa, Standing Statutory Auditor |
| 1998-2002 | Onbanca Spa - Gruppo Banca Popolare Commercio & Industria. Member of the Board of Directors of the group's online banl<, created in 1998 and listed at the Milano Stock Exchange in 2001, then taken over by Xelion (Unicredit group) |
| 2000-2001 | Fulcron Spa. Member of the Board of Directors of the company that developed the |
first portal comparing insurance policies, then taken over by a company of the insurance industry
NED Community (Association ofNon-executive and Independent Directors)
WCD (Women Corporate Directors)
AISM (Italian Marketing Development Association)
ADICO (Italian Marketing Directors Association)
SCIP (Strategie and Competitive Intelligence Professionals)

Milena ��� T. Motta
Milano, March 2022 This is to authorize the processing of persona/ data in accordance with Article 7, Legislative Decree no. 196/2003

Attachment C2
With reference to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Turin, Piazza San Carlo 156 - scheduled for 29 April 2022 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee of Intesa Sanpaolo S.p.A. until the approval of the 2024 financial statements, I, the undersigned Maria-Cristina.Zoppo.... (fiscal code ZPRMCR71S54L219B....), born in .............................................................................................................................................................................. nationality Italian................................. profession ...Chartered Accountant and Tax Partner.....
1 See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy of and Finance no. 169/2020, governing the suitements and criteria established for members of the management and in hand for 1002020, govening the eatherity of the assessment of the management of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles on our bour and Rey Rhotler House " "pata.ouidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide"). 2 Articles 13.4.1 and 13.5 of the Articles of Association.
3 For the purposes of meeting the professionalism requirement, for candidates who are not enrolled in the register of statutory auditors, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted of time during which they were carried out, without accumulating them.

2
This is an English translation of the original Italian document. In cases of conflict between the English Ilanguage document and the Italian document, the interpretation of the Italian language document prevails.
| Areas | Basic/Good | Level achieved Very Good/Excellent (b) |
|---|---|---|
| 1. Knowledge of the banking sector | D | X |
| 2. Overall knowledge of the banking business and typical strategies of the industry and of risk assessment and management techniques connected with the exercise of banking activities, appropriate to the complexity and importance of Intesa Sanpaolo |
□ | 8 |
| 3. Ability to cooperate and be influential (stimulus and appropriate and constructive sharing of professional skills and opinions and solution of potential conflicts) |
□ | A |
4 Articles 13.4.2, letter a), and 13.5.3, last paragraph, of the Articles of Association.
them at an excellent level.
5 The Bank's Board of Directors has defined very good or excellent level as: experience: gained at an executive level of an office and for a significant period of time; knowledge and skills: acquired through training and consisting of a recognised cultural background and/or obtained through experience (naturally also in Boards and Cominan making, them than one tem) in the professional curriculum, which have determined and explained their possession, making them than one telling in the processional ountoularly while and skills are those that someone is expert in, that are appropriate in relation to the office taken up, and/or of which someone is able to explain/teach the contents. appropriate in Flation to the onlor up, and of Directors, the areas of knowledge listed help and one requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of

This is an English translation of the original Italian document. In cases of conflict between the English prevails.
| 4. Authenticity, ability to stand-up for oneself and communicate (transparency, proper presentation and defence of one's ideas) |
0 | છે |
|---|---|---|
| 5. Ability to read and interpret the financial statements data of a complex financial institution and accounting and financial and non-financial information * |
ಡ | |
| 6. Orientation to results | 0 | 8 |
| 7. Adequate knowledge of the English language | 0 | K |
| 8. Understanding of the global dynamics of the economic and financial system |
0 | ಡ |
| 9. Strategic view and planning (understanding and assessing the medium/long-term scenarios of the Bank and the industry |
||
| and related strategic options) * | 0 | X |
| 10. Business judgement and capacity for inquiry, analysis and decision making |
18 | |
| 11. Knowledge of sustainability issues and their integration in the Bank's strategies |
0 | K |
| 12. Knowledge of banking and financial products * | 80 | |
| 13. Experience with governance and corporate governance structures and mechanisms * |
D | ಹ |
| 14. Knowledge of financial markets * | 0 | ಡಿ |
| 15. Experience in business and/or corporate management |
0 | 2 |
| 16. Knowledge of regulations in the banking industry and financial activities * |
8 | |
| 17. Knowledge of internal control systems * | 0 | X |
| 18. Knowledge of the socio-economic context and of the market mechanisms of the countries where the Bank is present and/or has strategic objectives |
0 | ୟ |
| 19. Expertise in corporate functions (i.e. audit, legal, corporate) |
8 | |
| 20. Risk management expertise * | 0 | 风 |
3

| 21. Knowledge of remuneration and incentive systems |
0 | 8 |
|---|---|---|
| 22. Knowledge of matters related to information & digital technology * |
风 | 12 |
| 23. Experience in auditing and control | 0 | 8 |
| 24. Knowledge of matters related to cyber security |
风 | D |
| 25. Knowledge of the insurance market and products and the related regulations |
8 | 0 |
(*) Area envisaged by Article 10 of Regulation 169/2020.
Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Area and Activities performed: .TAX AND CORPORATE.CONSULTING. ................................................................................................................ Area and Active concerned: AVIO SPA AND COMPANIES' GROUP...................................................................................................................... Period: EROM.2005.TQ.2011.....................................................................................................................................................
Area and Activities performed: .TAX AND.CORP.QRATE.CONSULTING. ............................................................................................................... Company or entity concerned: ... GENERAL.MOTORS.(NOW.PUNCH.GROUP)... ......................................................................................................... Period: ... SINCE 2008 .......................................................................................................................................................
Area and Activities performed: .BOARD MEMBER AND MEMBER OF MANAGEMENT CONTROL.COMMIT.TEE / troa and retity concerned: ........!!!TESA.SANPACLO.SPA..................................................................................................................... Period: SINCE 27th APRIL 2016 ................................................................................................................................................
ø I do not hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association;
o I hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association and undertake as of now, if appointed, to immediately give up all incompatible offices;
m) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the qualitative and quantitative composition of the Board of Directors.
6 Article 13.5.1 of the Articles of Association.
7 Please enter the office held and the details of Public Authority employer.

from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.
I also agree to:
Turin, 23rd March 2022
(Place and date)
(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. and candidates for the roles of members of the Management and control BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016
This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").
SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER
Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Intesa Gallpaolo O.p.r.i., with Poglecternational Banking Group, as Data Controller (below also Company of the Intess your personal data (below also "Personal Data") for the purposes stated in Section 3.
SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER
The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Fegalition. For r no oother related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address [email protected].
SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING
The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data include the following outsgehoo or sonal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for wenare of noakh nurposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.
The Controller uses the Personal Data concerning you that you have communicated or that has been r no oontroller doos no in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.
Your Personal Data is processed by the Controller for the purposes listed below.
a) Purposes necessary for the assessment of the nomination for the role of member of a management ar control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the versonal data is neooooaly for the apptes for members of the corporate bodies of the Bank: Article 20 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.
c) Where necessary, for the exercise or defence of the Controller's rights, also in court.
d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.
The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.
SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCI OSED
For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.
SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.
Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.
SECTION 7 - RIGHTS OF THE DATA SUBJECT
As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established

by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).
For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address [email protected] or the certified email address [email protected] or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.
Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".
Date and signature of the Data Subject 23rd March 2022

Born in Turin (TO), on 14th November 1971, Fiscal Code ZPPMCR 71 S54L219B, married with two children.
High School diploma with specialization in Mathematics and Science at High School Francesco Faa' di Bruno of Turin. Degree cum laude and mention in "Administration, Finance and Contro!" at the University of Turin.
Chartered Accountant in Turin (1999) at n. 2278 and Registered Auditor (number 120266 G.U. N. 13 dated 13th February 2001 -Ministerial Decree of 22nd Februaiy 2001 ).
Technical Advisor for the Comi of Justice in Turin (2001 ).
Languages: Italian, English.
1996 -2015: Indipendent Advisor and executive manager at the Turin office of Studio Pirola, Pennuto, Zei & Associati.
2005 -2015: Founding Partner of Studio di Revisori Associati with head office in Milan, via Vittor Pisani n. 16.
Currently Pa1tner of BDO Tax & Law Srl Stp, belonging to the international network of auditors and advisors BDO and Pa1tner of BDO Italia S.p.A ..
Since 27th Aprii 2016 Board member and member of the Management Contro! Committee of Bank Intesa Sanpaolo S.p.A. (one-tier governance).
Since 25th September 2020 Indipendent Director of the Company Newlat Food SpA listed on the Milan Stock Exchange.
Since 29th October 2021 Effective Statutory Auditor of Juventus Football SpA listed on the Milan Stock Exchange.
Currently Chairman ofthe Surveillance Body of the following companies belonging to Biauto Group:
Novelli 1934 Sri, Autobi Sri, Bimauto Sri, Biauto Club Sri, Biauto Group SpA, Biauto Sri, Target Srl.
.faw

Member of the Surveillance Body of the following com pan i es belonging to Orpea Group: Ad Maiores Sri and Nordest Group Sri, Verdello Sri, Centro dell'Anziano Sri.
Member of the Surveillance Body of the companies Punch Torino SpA, Cooper Standard Automotive Italy SpA and Schoeller Allibe1t SpA.
Significant experiences developed in the following professional areas:
In 1995 Premio Optime (Industriai Union ofTurin) as recognition with merit for the Degree.
Since 2006 Partner Founder of Rotary Club Torino Cavour, Chairman of the Rotaiy Club Torino Cavour in 2008/2009 and Treasurer now.
Resourcefulness, strong attitude to the interpersonal relationships, charism and spo1ty attitude.
Propensity to the work in "team", managerial skills for being the problem solver of the client, also under pressure, intuiti on for a quick focus of company problems, management of work by objectives.
I duly authorize the treatment ofthe abovementioned persona! data pursuant to article 13 ofLaw Decree n. 196/2003 and article 13 GDPR 679/16 (EU Regulation 2016/679).
Turin, 23rd March 2022
Building tools?
Free accounts include 100 API calls/year for testing.
Have a question? We'll get back to you promptly.