Intesa Sanpaolo

Pre-Annual General Meeting Information • Mar 28, 2025

ORDINARY SHAREHOLDERS' MEETING OF 29 APRIL 2025

CANDIDATES FOR THE POSITION OF BOARD DIRECTOR

CANDIDATES FOR THE POSITION OF BOARD DIRECTOR AND MANAGEMENT CONTROL COMMITTEE MEMBER

LIST No. 1 submitted by:

Fondazione Compagnia di San Paolo, Fondazione Cariplo, Fondazione Cassa di Risparmio di Firenze, Fondazione Cassa di Risparmio di Padova e Rovigo, Fondazione Cassa di Risparmio in Bologna and Fondazione Cassa di Risparmio di Cuneo

This is an English translation of the original Italian document. In cases of conflict between the English language document and the Italian document, the interpretation of the Italian language document prevails.

INTESA SANPAOLO S.p.A. Piazza San Carlo, 156 10121 T O R I N O

Subject: Submission of the slate of candidates for appointment as members of the Board of Directors and the Management Control Committee of Intesa Sanpaolo S.p.A., pursuant to Article 14 of the Articles of Association.

With regard to the Ordinary and Extraordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. ("the Company"), convened for 29 April 2025, on single call, to resolve, among other things, on the appointment of members of the Board of Directors and, among them, the members of the Management Control Committee for the financial years 2025/2026/2027,

• given that, under the current regulations and the Articles of Association of Intesa Sanpaolo ("the Articles of Association"), individual shareholders, shareholders belonging to the same group and shareholders that are party to a shareholders' agreement regarding the Company's shares may not submit more than one slate, including through a third party or through a fiduciary company,

the shareholders:

• FONDAZIONE COMPAGNIA DI SAN PAOLO, with registered office in Turin, Corso Vittorio Emanuele II 75, fiscal code 00772450011,
• FONDAZIONE CARIPLO, with registered office in Milan, Via Manin 23, fiscal code 00774480156,
• FONDAZIONE CASSA DI RISPARMIO DI FIRENZE, with registered office in Florence, Via Bufalini 6, fiscal code 00524310489,
• FONDAZIONE CASSA DI RISPARMIO DI PADOVA E ROVIGO, with registered office in Padua, Piazza Duomo 15, fiscal code 92057140284,
• FONDAZIONE CASSA DI RISPARMIO IN BOLOGNA with registered office in Bologna, Via Farini 15, fiscal code 00499230373,
• FONDAZIONE CASSA DI RISPARMIO DI CUNEO, with registered office in Cuneo, Via Roma, 15, fiscal code 96031120049

as signatories of the shareholders' agreement for consultation and voting referred to the Intesa Sanpaolo Shareholders' Meeting convened on 29 April 2025, signed on 11 November 2024, and holders of a total of 3,182,405,103 ordinary shares of Intesa Sanpaolo equal to 17.8749% of the share capital with voting rights,

• having acknowledged all the suitability requirements established by the current regulations and the Articles of Association for members of the Board of Directors and the Management Control Committee¹ ;
• having acknowledged the guidance and recommendations provided by the outgoing Board of Directors in the document "Qualitative and Quantitative Composition of the Board of Directors", available on the website group.intesasanpaolo.com and, specifically, the representations contained therein with reference to the suitability requirements for both Board members and the Board as a whole;
• ➢ propose, also in connection with Article 13.1 of the Articles of Association, and with reference to item 2 letter a) on the agenda of the Shareholders' Meeting, that a number of 19 directors be appointed to the Board;
• ➢ submit, pursuant to Article 14 of the Articles of Association, and with reference to item 2, letter b), on the agenda of the Shareholders' Meeting, the attached slate consisting of 17 candidates divided into two sections, both in a progressive order indicating, in the first section, candidates for the position of Board Director who are not candidates for the position of Management Control Committee member, and, in the second section, candidates for the position of Board Director and Management Control Committee member:

First Section

• 1. GROS-PIETRO Gian Maria
• 1. TAGLIAVINI Paola
• 1. MESSINA Carlo
• 1. ZAPPIA Mariangela
• 1. CERUTI Franco
• 1. GRANDI Paolo Maria Vittorio
• 1. NEBBIA Luciano
• 1. LOGIURATO Liana
• 1. PREVITALI Pietro
• 1. STEFANELLI Maria Alessandra
• 1. PARIGI Bruno Maria
• 1. BUSSO Donatella
• 1. MERLO Silvia
• 1. MESSA Paolo

Second Section

• 1. MOSCA Fabrizio
• 1. TAGLIABUE Mariella
• 1. CAMPRA Maura
• ➢ attest in this regard that the slate:
  • ensures the balance of genders set by current regulations and Articles 13.1 and 14.1 of the Articles of Association;

¹ This refers in particular to Article 26 of the Consolidated Law on Banking and the related implementing provisions set out in Ministerial Decree no. 169/2020, the Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021 – as well as the Guide to fit and proper assessments, as updated by the European Central Bank on 8 December 2021.

• contains a number of candidates who meet the independence requirement as defined in Article 13.4 of the Articles of Association, representing at least two thirds of the total candidates on the slate, without prejudice to the fact that all candidates in the second section must meet the abovementioned independence requirement;
• contains, in the first section, at least one candidate who meets the professionalism requirement set out in Article 13.4.2, letter a), of the Articles of Association;
• contains, in the second section, at least one candidate every two or fraction of two who meets said professionalism requirement;
• ➢ also certify that the slate complies with the guidance provided by the Board of Directors of Intesa Sanpaolo, in the document "Qualitative and Quantitative Composition of the Board of Directors", available on the website group.intesasanpaolo.com, also with regard to the diversity criteria provided for in that document and giving suitable evidence of this in the attached documentation;
• ➢ propose, with reference to item 2 letter c) on the Shareholders' Meeting agenda, the election, from among the candidates listed in the slate submitted, of Gian Maria Gros-Pietro as the Chair of the Board of Directors and Paola Tagliavini as Deputy Chair of the Board of Directors, for the purposes of election in the manner set out in the Articles of Association;
• ➢ indicate Carlo Messina, as the ideal profile for the position of Managing Director and CEO, within the slate presented, without prejudice to the full prerogatives of the Board of Directors to be appointed, by virtue of the powers established by the Articles of Association.

In accordance with current regulations and the Articles of Association, and in support of the aforementioned slate the following documentation is attached:

* * *

• 1) communication certifying the title by Fondazione Compagnia di San Paolo of the shareholding required for the presentation of the slate;
• 2) declaration prepared in accordance with the standard made available by the Company whereby each candidate accepts their nomination to the post of member of the Board of Directors/Management Control Committee, declaring that there are no causes for ineligibility and incompatibility, that they satisfy the suitability requirements established for all or some of the Board Members by law, regulations and Articles of Association, and, for candidates for the office of member of the Management Control Committee, the commitment to immediately cease any offices which are incompatible with the provisions of Article 13.5.4 of the Articles of Association in the event of appointment. The following documents, duly signed by each candidate, are attached to this declaration:
  • i) comprehensive information regarding their personal and professional characteristics and the management, administration and control positions held in other companies or entities (curriculum vitae);
  • ii) the slate of management, administration and control positions currently held in other companies or entities with an undertaking to provide any updates until acceptance of the position.

Best regards,

On March 27, 2025

Fondazione Compagnia di San Paolo Marco GILLI

Fondazione Cariplo Giovanni AZZONE

Fondazione Cassa di Risparmio di Firenze Bernabo' BOCCA

Fondazione Cassa di Risparmio di Padova e Rovigo Gilberto MURARO

Fondazione Cassa di Risparmio in Bologna Patrizia PASINI

Fondazione Cassa di Risparmio di Cuneo Mauro GOLA

Digitally signed

Digitally signed

Digitally signed

Digitally signed

Digitally signed

Digitally signed

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned Gian Maria Gros-Pietro (fiscal code GRSGMR42B04L219N), born in Turin on 04/02/1942 nationality italian,

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A .;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

> With regard to independence

• a) = I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • X I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

• With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• X professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas	Level achieved
	Basic/Good	Very Good/Excellent (6)
Banking and financial markets (*)	1
2. Banking and financial activities and products (*)		×
3. Banking and financial regulatory framework (*)	1	X

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements: (iii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consising of a cultural background gained through profence (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the quidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level

	4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	0	×
	5. Risk management (identification, assessment, monitoring, control, and mitigation methods of	D	X
	the main types of risks of a credit institution,
	including the member's responsibilities in these
	processes) (*)
6.	Knowledge of sustainability issues (ESG)	口	×
	7. Internal control systems and other operational	D	×
	mechanisms (*)
	8. Knowledge of the global dynamics of the	D	×
	economic and financial system
	9. Organizational and corporate governance structures, and assessment of the effectiveness	D	×
	of the governance mechanisms of the credit
	institution, aimed at ensuring an effective system
	of supervision, management and control (*)
	10. Interpreting a credit institution's financial		×
	information, identifying key issues based on this
	information and appropriate controls and
	measures (*)
	11. Prevention of money laundering and terrorist		×
	financing
	12. Climate and environmental risks	0	×
	13. Wealth Management		X
	14. Information & digital technology (7) (*)	×	0
	15. Cyber Risk (8)	×	□
	16. Human resources, remuneration and incentive	D	X
	systems
	17. Accounting and auditing	×	口
	18. Data quality management (9)	×	D
	19. Expertise in corporate functions (audit, legal,	D	X
	corporate, organisation) 20. International Experience (10)	ロ	×
	21. Insurance market and products		X
		0

⁷ Within the guidance expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequale level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry,	■	×
analysis, and decision-making
23. Capacity for collaboration and influence	D	×
(encouragement and appropriate and
constructive sharing of professionalism and
opinions and resolution of potential conflicts)
24. Result orientation and motivation	口	X
25. Authenticity, ability to stand up and	■	×
communicate (transparency, proper
presentation and defence of owns ideas)
26. Assertiveness, ability to engage in dialogue and	0	×
persuasion
27. Knowledge of the English language	0	×

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were mainly gained in the performance of the following activities:

Area and Activities performed: Chair of the Board of Directors, Chair of the Management Board Company or entity concerned: Intesa Sanpaolo Spa Period: since 2016 to present and since 2013 to 2016 respectively

Area and Activities performed: Chair Company or entity concerned: ASTM Spa Period: since 2012 to 2020

Area and Activities performed: Chair Company or entity concerned: Atlantia Spa Period: since 2003 to 2010

Area and Activities performed: Chair Company or entity concerned: Eni Spa Period: since 1999 to 2002

Area and Activities performed: Full Professor of Business Economics Company or entity concerned: University of Turin - Luiss University of Rome Period: 1980-2004 and 2004-2012 respectively

> With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;

• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

• With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • o I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

• With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) X I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • o I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am ****************************************************************************************************************************************************************************** requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws on regulations;

¹¹ Please enter the office held and the details of Public Authority employer.

p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the . information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment . of the requirements.

I attach duly signed

• comprehensive information regarding their personal and professional characteristics and i) management, administration and control offices held in other companies or entities (curriculum vitae);
• the list of the management and control offices currently held in other companies or entities, ii) with an undertaking to provide any updates until the acceptance of the position.

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

Gian Maria Gros-Pietro

Chair of the Board of Directors of Intesa Sanpaolo since April 2016, after being Chair of the Management Board of the Bank from May 2013.

He currently serves as Deputy Chairman of the Italian Banking Association (ABI). He is a member of the Committee of Market Operators and Investors at Consob and of the Corporate Governance Committee of Borsa Italiana. He was the (non-executive and independent) Chair of ASTM (2012-2020), Lead Independent Director of Edison (2005-2019), an Independent Director of Fiat (2005-2014), Chair of Atlantia (2003-2010), Chair of ENI (1999-2002) and of IRI (1997-1999).

From 1994 to 1997 he was a member of the Advisory and Guarantee Committee for Privatizations, established at the Ministry of Treasury.

He was Full Professor of Business Economics at the University of Turin (1980-2004) and at Luiss University of Rome (2004-2012), where he founded and directed the Department of Economic and Business Science (2004-2011). From 1974 to 1995, he was the Director of the Institute for Economic Research on Firms and Growth, the main body of the CNR (the Italian National Research Council) in the economic field.

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned Gian Maria Gros-Pietro, born in Turin on 04/02/1942, fiscal code: GRSGMR42B04L219N,

declare that

al do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
A.B.I. - ASSOCIAZIONE BANCARIA	Board Member	2013
ITALIANA
A BISERVIZI SPA	Board Member	2021
LUISS - LIBERA UNIVERSITA	Board Member	2013
INTERNAZIONALE DEGLI STUDI SOCIALI
GUIDO CARLI
Assonime	Member of Executive Committee	from 2013
	Member of the Council	2001
Fondazione Cotec	Founder member and first	2001
	president
	Board Member	2003
Fondazione Felice Gianani	Chair of the Board of Directors	2014
FeBaf	Member of Executive Board	2014
ISPI	Membro del Supervisory	2013
	Commitee
	Board Member	2016

Date, March 21st, 2025 Signature, _ Sy Caccats

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned …PAOLA TAGLIAVINI.. (fiscal code TGLPNN68R63F205J), born in ……MILAN….…… on ………23/10/1968…, nationality …ITALIAN….

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• − I am suitable for the office, pursuant to the applicable regulations (1 ) and the Articles of Association (2 ).

I also declare that

➢ With regard to independence

• a) □ I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • □ I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

➢ With regard to professionalism and competence

c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3 ) the following for at least one three-year period, also alternatively:

^□ administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• □ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• □ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• □ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• □ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) □ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4 );
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments ( 5 );
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

	Areas	Level achieved
		Basic/Good	Very Good/Excellent (6 )
1.	Banking and financial markets (*)	□	□
2.	Banking and financial activities and products (*)	□	□
3.	Banking and financial regulatory framework (*)	□	□

⁴ Article 13.4.2, letter a), of the Articles of Association.

2

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	□	□
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these (*) processes)	□	□
6. Knowledge of sustainability issues (ESG)	□	□
7. Internal control systems and other operational mechanisms (*)	□	□
8. Knowledge of the global dynamics of the economic and financial system	□	□
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	□	□
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	□	□
11. Prevention of money laundering and terrorist financing	□	□
12. Climate and environmental risks	□	□
13. Wealth Management	□	□
7 14. Information & digital technology ( ) (*)	□	□
8 15. Cyber Risk ( )	□	□
16. Human resources, remuneration and incentive systems	□	□
17. Accounting and auditing	□	□
9 18. Data quality management ( )	□	□
19. Expertise in corporate functions (audit, legal, corporate, organisation)	□	□
20. International Experience ( 10)	□	□
21. Insurance market and products	□	□

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry,	□	□
analysis, and decision-making
23. Capacity for collaboration and influence	□	□
(encouragement and appropriate and
constructive sharing of professionalism and
opinions and resolution of potential conflicts)
24. Result orientation and motivation	□	□
25. Authenticity, ability to stand up and	□	□
communicate (transparency, proper
presentation and defence of owns ideas)
26. Assertiveness, ability to engage in dialogue and	□	□
persuasion
27. Knowledge of the English language	□	□

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:
Independent Director / Chairperson of the Risk and Sustainability Committee / Member of the Related Parties Committee Area and Activities performed: …………………………………………………………………………
Company or entity concerned: ………………………………………………………………………… Intesa SanPaolo
Period: …………………………………………………………………………………………………… (2022-present)
Area and Activities performed: ………………………………………………………………………… Professor for Risk, Audit & Compliance Researcher Visiting Researcher
Bocconi University and SDA Bocconi Company or entity concerned: ………………………………………………………………………… SPACE Bocconi Wharton School
(1993-present) (2011-present) (1997) Period: …………………………………………………………………………………………………… (!993-2003)
Independent Director /
Area and Activities performed: ………………………………………………………………………… Member or Chairperson of the Risk and Control Committee and the Committee of Independent Directors
Eurizon Capital SGR / Eurizon Capital SA / Fideuram Asset Management /Amissima Assicurazione Company or entity concerned: …………………………………………………………………………
(2016-2022) (2020-2022) (2020-2022) (2019-2020) Period: ……………………………………………………………………………………………………
Independent Director /
Area and Activities performed: ………………………………………………………………………… Chairperson of the Control and Risk Committee (some extended to Sustainability)
Company or entity concerned: ………………………………………………………………………… Rai Way Spa / Saipem Spa / Interpump Group Spa / Be Spa / SAVE Group Spa
Period: …………………………………………………………………………………………………… (2015-2020) (2014-2023) (2017-present) (2021-2024) (2017-2020)

➢ With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

4

➢ With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • □ I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • □ I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• l) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

➢ With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) □ I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • □ I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □ I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .......................................................... at .....................................................(11) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

¹¹ Please enter the office held and the details of Public Authority employer.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

_________________________________ Milan, 24/03/2025

(Place and date)

_______________________

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject _______________________ , ________________________________________ Milan, 24/03/2025

Milan, 24/03/2025

Paola Tagliavini Curriculum vitae

PERSONAL INFORMATION

▪ Born in Milan on 23/10/1968

Bachelor's Degree in Business Administration (110/110 with honors) from Bocconi University,
Milan, specializing in Finance
"Advanced Course on Stock Exchanges and Other Regulated Markets", Lorenzetti Institute –
Bocconi University
"Preventing and Detecting Fraud: Tools and Techniques", Association of Certified Fraud
Examiners - San Diego, California
"Learning How to Teach", CESDIA, Bocconi University

Professional Qualifications: Registered Auditor since 1999 (registration no. 102608)

ACADEMIC ACTIVITIES

• Adjunct Professor at the Department of Accounting, BOCCONI UNIVERSITY
  • Adjunct Professor for the courses "Advanced Corporate Auditing" in the Master's degree programs (2015-present), "Enterprise Risk Management" and "Internal Auditing, Risk, and Corporate Compliance" in the Master in Accounting, Auditing and Control (2013-2023)
  • Adjunct Professor (1998-2003) for the courses "Business Economics and Management", "Protection of Corporate Resources and the Environment", "Business Economics and Management (Management and Decision-Making Process Analysis)"
  • Research Fellow and Member of Examination Committees (1995-2003) for: Business Economics and Management (CLEA-CLEP, DES), Business Economics and Management (Corporate Resource Protection and Crisis Management), Business Economics and Management (Health, Safety, and Environment), Industrial Business Economics and Management (Management and Decision-Making Process Analysis)
  • Research Fellow and Researcher (1993–2003) at the SPACE Center (Security and Protection against Crime and Emergencies) – European Center for Corporate Protection Studies at Bocconi University
• Senior Lecturer in Audit & Risk Management at the Accounting area of SDA BOCCONI School of Management
  • Teaching areas: Risk Management, Risk Assessment, Compliance Management, Internal Auditing, Risk Regulation, Corporate Sustainability, Corporate Governance.
  • Conducted several research and training projects for major Italian and multinational companies. Research focuses on risk management, risk financing, internal control systems, and their governance profiles, particularly in listed companies.
  • ˗ Faculty member for Audit, Risk, and Compliance in the Master in Corporate Finance (MCF) and Executive Master in Finance (EMF): EMF, "Internal Auditing and Control" course (2017-present); MCF, "Financial and Enterprise Risk Management" course (2015-present)
  • ˗ Faculty member in various Executive Programs, especially international ones, including:
    • ➢ SDA Bocconi Director's Program Strengthening corporate governance skills (2022-present); Finance for Non-Finance Managers, Finance for Senior Executives (2022-present); PSM – Managerial Development Program (2024-present); Strategic Risk Management (2015-present); Global Risk Management – Geopolitical

1

and regulatory risk in a politicized global economy (2024-present); "International Board Program" – Bocconi – St. Gallen University (2024-present);

• ➢ "One-to-One" Executive Training Programs, tailored for senior executives (2017-present);
• ➢ Custom Programs for senior executives, lead faculty for Risk Management, Audit, Compliance, Corporate Governance topics (2012-present);
• ➢ Executive Management Development Programs for ENI, Poste Italiane, Enel, Enel Green Power, CdP, Rosneft, primarily on Risk Management and Due Diligence topics (2016-present)
• Director of the Executive Course "Strategic Risk Management Managing and Assessing Risks in Disruptive and Uncertain Contexts" (2023-present)
• Co-Director of the ERM Lab (Enterprise Risk Management Laboratory) (2012-present)
• Professor and Scientific Committee Member at the International School of Advanced Education in Ethics and Security in L'Aquila (2011-2015)
• Adjunct Professor at Università Cattolica del Sacro Cuore, Milan "Risk Management for Non-Financial Firms" course, Banking and Finance Degree, Faculty of Banking, Financial and Insurance Sciences (2011-2012)
• Visiting Researcher at the Department of Insurance & Risk Management, Wharton School University of Pennsylvania (1997)
• Professor of Business Economics and Management at the Academy of the Italian Financial Police (Guardia di Finanza) (1995-1997)

PROFESSIONAL EXPERIENCE

• DGPA&co Co-Partner (External) Leader of Risk Management projects (2011-present)
• AON Spa Director of AON Global Risk Consulting for Italy and Turkey (2009-2011)
• OLIVER WYMAN Senior Manager, Corporate Risk & Insurance (London and Milan offices) (2007-2009)
• MARSH ITALIA Spa Director of the Risk Advisory Business Unit at Marsh Italia Spa. Member of the European Advisory Board of Marsh Risk Consulting (1999-2007)
• ERM BRS Srl Partner Among the founding partners of the company, majority-owned by ERM Italia Spa (Environmental Risk Management) (1998-1999)
• Nikols Sedgwick Senior Consultant (1997-1998)

BOARD POSITIONS

Current positions in listed companies or financial/insurance firms

• INTESA SANPAOLO Spa: Independent Board Member, Chair of the Risk and Sustainability Committee, Member of the Related Parties Committee (April 2022 – present)
• RAI Way Spa: Independent Board Member, Chair of the Control and Risk Committee, also responsible for Related Party Transactions – since February 2021, Chair of the Control, Risk, and Sustainability Committee – Member of the Remuneration and Nomination Committee (May/June 2020) (April 2017 – present)

2

Current Positions in Other Organizations

▪ FAI - Fondo per l'Ambiente Italiano (non-profit foundation): President of the Board of Auditors (June 2024 – present)

Former Positions in Listed or Financial/Insurance Companies

• SAIPEM Spa: Independent Board Member, Chair of the Control and Risk Committee, Member of the Remuneration and Nomination Committee, Member of the Related Parties Committee (April 2021 – April 2024)
• INTERPUMP Group Spa: Independent Board Member, Chair of the Control and Risk Committee (April 2014 April 2023) – from July 2020, Chair of the Control, Risk, and Sustainability Committee – Chair of the Related Party Transactions Committee (April 2014 – April 2023)
• EURIZON Capital SGR: Independent Board Member, Member of the Risk Committee, Chair of the Independent Directors Committee (March 2016 – April 2022)
• EURIZON Capital SA (Luxembourg): Independent Board Member, Member of the Independent Directors Committee (April 2020 – April 2022)
• EURIZON Capital Real Asset SGR: Independent Board Member, Member of the Independent Directors Committee (December 2019 – August 2020)
• FIDEURAM Asset Management SGR Spa: Independent Board Member, Member of the Risk Committee (March 2020 – April 2022)
• OVS Spa: Statutory Auditor (July 2020 April 2022)
• BREMBO Spa: Statutory Auditor (April 2020 April 2022)
• RCS MediaGroup Spa: Statutory Auditor (April 2018 April 2021)
• AMISSIMA Insurance Group: Independent Board Member for AMISSIMA Holding Srl, AMISSIMA Vita Spa, AMISSIMA Assicurazioni Spa, Member of the respective Control and Risk Committees (April 2019 – May 2020)
• BE Shaping the Future Spa: Independent Board Member, Chair of the Control and Risk Committee and Related Party Transactions Committee (April 2017 – April 2020)
• SAVE Spa (Venice Airport): Pre-delisting (April 2015 July 2017): Independent Board Member, Member of the Control and Risk Committee and Related Party Transactions Committee. Lead Independent Director and Chair of the Control and Risk Committee from August 1, 2017, as part of the mandatory takeover bid process on SAVE shares pursuant to Article 102 of the Italian Consolidated Finance Act (TUF). (Delisted on October 23, 2017). Post-delisting: Independent Board Member (October 2017 – October 2020).
• DELCLIMA Spa: Independent Board Member, Chair of the Control and Risk Committee and Related Party Transactions Committee, Member of the Remuneration and Nomination Committee . Delisted on 24/02/2016, then Non-Executive Board Member of Melco Hydronics & IT Cooling Spa until March 29, 2016. (2015-2016).

Other ceased positions

• DOLLMAR Spa: Statutory Auditor (2013-2020)
• AON Risk & Consulting Srl: Board Member (2009-2011)

Milan, 24/03/2025

Supervisory Bodies pursuant to Legislative Decree 231/01

• DOLLMAR Spa: Chair of the Supervisory Board (2017-present)
• BRICOMAN Italia Srl: Member of the Supervisory Board (2024-present)
• KLEPIERRE MANAGEMENT Italia Srl: Member of the Supervisory Board (2019-2023)
• UBI Banca: Ongoing consultant to the Supervisory Board (2019-2020)
• MARSH Italia Spa: Member of the Supervisory Board (2006-2007)

OTHER INFORMATION

• Member of the "Osservatorio Nazionale 231/2001" of the National Council of Chartered Accountants and Accounting Experts (July 2024 – present)
• Member of the Technical-Scientific Committee for the Finance Award – Best Practice Award in Administration, Finance, and Control – CFO Summit/Business International (Years 2017; 2018; 2019; 2022; 2023)
• Associated with NEDCOMMUNITY, the Italian Association of Non-Executive and Independent Directors (2016 present)
• Associated with Women Corporate Directors (WCD), International Association of Women on Corporate Boards (2019-2023).

SIGNIFICANT TRAINING ACTIVITIES

• ˗ Design and teaching, including within international programs, for customized training programs on governance, risk management, and controls for various companies, including ENI, Ferrovie dello Stato Group, Poste Italiane Group, Banca d'Italia, Chiesi Farmaceutici, Datalogic, Enel, Enel Green Power, Cassa Depositi e Prestiti, Atlantia, and Inwit (2012 – present)
• ˗ Lecturer for SDA Bocconi and Sole24Ore events on internal control systems and risk management for members of administrative and control bodies (2020 – present)
• ˗ Lecturer for Assonime/Assogestioni in the training program for members of administrative and control bodies of listed companies: "Induction session: Listed companies and risk management" (February/May/July/November 2015 and 2016; January 2018)
• ˗ Lecturer for the Board Academy Deloitte/Fondazione Belisario in the training program "The Role of Directors in Internal Control and Risk Management Systems" (Rome, Chamber of Deputies, December 2012 / Naples, June 2014)

KEY SEMINARS AND CONFERENCES

• Speaker at the PwC and 24Ore Business School Roundtable "Digital Agenda, Strategy, Management, and Monitoring Systems", 11th Executive Master for Board Members and Statutory Auditors of Public and Private Companies (March 2025)
• Speaker at the seminar "Artificial Intelligence and Risk Management", NedCommunity–Legance, Milan (January 2025)
• Speaker at the Ambrosetti Forum "Corporate Governance Presentation of the 2024 Observatory Results", as part of the Roundtable "Market Comparisons: Insights and Reflections for Italy" (November 2024)

4

• Speaker and Organizer of the Alumni Bocconi event "Risk Management Facing New Challenges: Management and Governance Strategies", Bocconi University, Milan (April 2024)
• Speaker at the Conference "Corporate Governance: Board Committees Between Information and Responsibility", Nedcommunity -LUISS, Rome (June 2023)
• Speaker at the Roundtable "Good Governance, Appointments, Compensation, and Conflicts of Interest", Executive Master for Board Members and Statutory Auditors of Public & Private Companies, 24ore Business School (May 2023)
• Speaker at the Webinar: "Gender Quotas: Why Are We Still Talking About It?" with Lella Golfo, Paola Tagliavini, and Marco Patuano, Milan – Deloitte (March 2023)
• Speaker at the Corporate Governance Training Program: "Risk Management, Issues, and Impacts on Corporate Governance", organized by the Milan Association of Chartered Accountants and AISCA (January 2023)
• Speaker at the XV Forum of Young Chartered Accountants Bologna, Roundtable "The Role of Corporate Control Functions in the Knowledge, Analysis, and Risk Management Process" (December 2022)
• Speaker at the Ambrosetti Forum "Corporate Governance Workshop Presentation of the 2021 Observatory Results", as part of the Roundtable "Dialogue Between Issuers and the Market: Key Issues and Focus Points for Institutional Investors, Proxy Advisors, and Issuers" (November 2022)
• Speaker at the Global Risk Forum 2022 Business International, with a presentation on "The CFO and Their Relationship with the CEO and the Board" (June 2022)
• Speaker at the Protiviti-AIIA Webinar (Italian Association of Internal Auditors): "Next Gen: How Innovation and Digital Transformation Are Shaping the Future of Internal Audit" (May 2022)
• Speaker at the AISCA Webinar (Association of Board Secretaries): "AISCA Explains the New Corporate Governance Code – Internal Control and Risk Management System" (September 2021)
• Speaker at "Stati Generali del D.Lgs. 231/2001" Business International, with a presentation on "The 231 Model in the New Corporate Governance Context: Key Players, Roles, and Responsibilities" (February 2021)
• Speaker at the Global Risk Forum 2020 Business International, with a presentation on "Crisis Management, Roles, and Responsibilities in the Corporate Governance System" (June 2020)
• Speaker at the Nedcommunity–Consob Webinar: "COVID-19 Emergency: What Additional Supervisory Duties for the Board of Statutory Auditors in Listed Companies?" (May 2020)
• Speaker at the KPMG Advisory Annual Risk & Control Conference, with a presentation on "The Evolution of Risk and Compliance Systems: Current Trends" (October 2019)
• Speaker and Chair at the CFO Summit 2019 Business International. Led roundtables: From Finance to Strategy: Thinking Outside the Box", "How to Build an Agile Finance Operating Model: Will the Traditional Finance Department Still Exist in the Future?", "The Future of Sustainable Finance – A Conversation with Mario Nava" (June 2019)
• Speaker at the seminar "Legislative Decree 254/2016 on Mandatory Non-Financial Disclosure for Public Interest Entities under Article 16 of Legislative Decree 39/2010: Risk Assessment, Management, and Control Systems", organized by the Milan Association of Young Chartered Accountants and Accounting Experts, with a talk titled "CoSo Report: Internal Control and Integrated Framework within Corporate Social Responsibility" (November 2018)
• Speaker at the seminar "Enterprise Risk Management", #mine event Administration, Control, and Taxation, EGEA, Bocconi University (November 2018)
• Speaker and Chair at the CFO Summit 2018 Business International, leading roundtables: "Leading from the Front – How to Develop and Deliver Agile Strategy", "Financial Strategies for Value Creation and Growth" (June 2018)

• Speaker at the Roundtable "Integrated Thinking: A New Leadership Model for Board Members" as part of the conference "Make Integrated Thinking Happen – Aligning Corporate Purpose with Sustainable Strategy", LUISS Guido Carli, Rome (May 2018)

• Speaker at the Roundtable "How to Effectively Prevent Corruption", part of the SDA Bocconi event "Transparency and Corruption Prevention in Publicly Owned Companies – Trends and Future Developments", SDA Bocconi (November 2017)

• Speaker at the CAE Program AIIA PwC "Social Media Risk & Governance. Internal Auditing: Challenges and Opportunities Arising from Social Media", Roundtable "Experiential Perspective – Insights from CAEs and Industry Stakeholders" (November 2017)
• Speaker at the Enterprise Risk Management Meeting, Roundtable "Risk Management from a Corporate Governance Perspective", and Moderator of the Roundtable "Risk Management in the Digital Era: Key Risks and the Effectiveness of Current Techniques", Business International, Rome (October 2017)
• Speaker and Chair at the CFO Summit 2017 Business International, leading roundtables: "The Future of Corporate Reporting: Non-Financial Indicators, Integrated Reporting, Real-Time Reporting", "Cash Optimization, Working Capital, Supply Chain Finance" (June 2017)
• Speaker at the Conference "Legislative Decree 231/01 – Operational Effectiveness and the Role of the Supervisory Board. A Debate Between Legal and Business Experts", Bocconi University (June 2017)
• Speaker at the Conference "Compliance in Control Systems: Between Strategy and Management", event and presentation of the Conti&Controlli network for public administration, NETCAP, SDA Bocconi (April 2017)
• Speaker at the seminar "Women in Compliance", DLA Piper, Milan (March 2017)
• Speaker at the Conference "Risk Management in Dynamic Contexts The State of the Art in Italy Compared to International Companies", Aula Magna, Bocconi University, with a talk titled "Risk Management in Italy – LAB ERM Survey Results" (December 2016)
• Speaker at the Accredited CFP Event "The Compliance Function in the Manufacturing Sector", School of Advanced Training, Milan Association of Chartered Accountants and Accounting Experts (October 2016)
• Speaker at the seminar "ERM: Enterprise Risk Management Systems for Corporate Governance", AFCNET SDA Bocconi (May 2013); "ERM: The State of the Art in Italy – Results of the SDA Bocconi / KPMG Survey", AFCNET SDA Bocconi (June 2016)
• Speaker at the Accredited CFP Event "Governance Impacts of Corporate Social Responsibility (CSR) Models and Integrated Risk Management (ERM)", School of Advanced Training, Milan Association of Chartered Accountants and Accounting Experts, with a talk titled "Enterprise Risk Management" (November 2015)
• Speaker at the Accredited ECM Event "Talents in Vascular Disease 2nd Edition", MORE Comunicazione, Rome, Auditorium Servier, with a talk titled "Risk Management in Healthcare" (March 2015)
• Speaker at the Global Risk Forum 2013, Business International, Milan (April 2013); at the Enterprise Risk Management Meeting, Business International, Rome, Palazzo Rospigliosi (October 2014), presenting "Enterprise Risk Management Trends"
• Speaker at the Conference "The Evolution of Corporate Governance in the National and International Context", Congress Center, Turin Industrial Union (November 2013)
• Speaker at the XIV Annual Conference of ANRA (National Association of Risk Managers and Corporate Insurance Officers), "Understanding Risks to Turn Them into Opportunities", Cariplo Foundation Congress Center, Milan (November 2013)
• Speaker at the seminar series "Internal Auditors and Risk Managers: A Comparative Experience", Bocconi University (May 2013, 2014, 2015)
• Speaker at the Conference "Organizational and Production Risk Analysis in Case of Disasters or Unexpected Events: Tools and Methodologies for Support", Parma Industrial Union (October 2012)

MONOGRAPHS

• P. Tagliavini, The Captive Insurance Company as a Risk Management Tool, EGEA, 1994
• P. Tagliavini N. Misani, Risk Management Report – General Survey on Risk Management in Italy, EGEA, 1994

BOOK CONTRIBUTIONS, CHAPTERS, AND SCIENTIFIC ESSAYS

• P. Tagliavini M. Vinzia, "Financial Risk Management", Chapter 4 in "Corporate Finance 2: Extraordinary Corporate Transactions", edited by M. Dallocchio – A. Salvi, EGEA, pp.137-176, 2011
• Contributed to the book "Economics and Business Management", edited by S. Pivato and A. Gilardoni, EGEA, 1999
• P. Tagliavini, "Financial Risk Control", Chapter 3 in "Health, Safety & Environment Strategic Guidelines and Operational Issues", edited by A. Gilardoni, EGEA, 1998

ARTICLES IN SCIENTIFIC JOURNALS OR OTHER PUBLICATIONS IN NEWSPAPERS AND PERIODICALS

• P. Tagliavini, "Risk Management and SMEs – Current Trends", Proceedings of the Bologna Chartered Accountants Conference, December 2022
• P. Tagliavini F. Fallacara, I. Gandini, M. Lonardo, "The 'Crucial' Role of the Board of Statutory Auditors in the Post-COVID Era", NedCommunity Papers, July 2020
• P. Tagliavini M. Livatino, "Lights and Shadows of Enterprise Risk Management in Italy", Economia e Management, no. 5-6, pp. 95-101, October 2016
• P. Tagliavini M. Livatino, "The Evolution from Risk Manager to Chief Risk Officer", Risk Management News ANRA, December 2013
• P. Tagliavini, "Network Economy and New Challenges for Risk Management", Amministrazione e Finanza, vol. 17, no. 3, pp. 65-68, 2002
• P. Tagliavini B. Dotti, "New Integration Programs Between Financial and Insurance Risks", Amministrazione e Finanza, vol. 16, no. 11, pp. 64-69, 2001
• P. Tagliavini, "Insurance Securitization and Insurance Derivatives: Towards the Integration of Capital Markets and the Insurance Market", Rivista Milanese di Economia, no. 67-68, pp. 27-48, 1998
• P. Tagliavini, "Risk Management: The State of the Art in Italy", The Geneva Papers on Risk and Insurance Issues and Practice, vol. 20, no. 76, pp. 315-324, July 1995
• P. Tagliavini A. Gilardoni, "Workplace Safety Management in Light of New Regulations", Lecco Economia, no. 2, June 1995
• P. Tagliavini, "The Captive Insurance Company as a Risk Management Tool", Finance, Marketing, and Production supplement of Italia Oggi, July 29, 1994
• P. Tagliavini N. Misani, "Risk Management: The State of the Art in Italy", Sinergie Journal of Studies and Research, vol. 12, no. 35, pp. 241-250, September-December 1994

WORKING PAPERS

• "Corporate Governance: Board Committees Between Information and Responsibility" – Quaderni 01, LUISS-NedCommunity, Rome, June 2023
• "Enterprise Risk Management: The State of Italian Companies" Results of the LAB ERM 2018 Survey, edited by P. Tagliavini and M. Livatino, SDA Bocconi, Milan, 2018
• "Enterprise Risk Management: The State of Italian Companies" Results of the LAB ERM 2016 Survey, edited by P. Tagliavini and M. Livatino, SDA Bocconi, Milan, 2016

7

• "To Better Assess Risk at Airports, Underwriters Have Been Employing Specialist Organizations as Part of the Insurance Placement Process. These 'Insurance Surveys' Pose Major Threats to Premiums: What Are the Key Factors Being Examined?" – Presented in Budapest, The 2nd ACI Global Airport Operations Summit, 2005
• "Insurance Securitization and Insurance Derivatives: Towards the Integration of Capital Markets and the Insurance Market", SPACE Report – Bocconi University, June 1999
• "Benchmarking Safety Policies in Oil Companies", Confidential Report, SPACE Bocconi University, June 1999
• "Telecommunications and Telematics for Effective Information Management in the Financial Sector", Lorenzetti Institute – Bocconi University Report, 1996
• "Fraud Audit: The U.S. Approach to Corporate Fraud Analysis", in Illicit Acts Against Companies: Emerging Trends and Protection Strategies, Working Paper – Basic Research, Bocconi University "Analysis of Companies and Illegal Markets Between Business Economics and Political Economy", October 1996
• "Risk Management and Pre-Acquisition Due Diligence", SPACE Report Bocconi University, May 1996
• "Obstacles Facing the Implementation of a Modern Concept of Risk Management: The Empirical Results of Research", Presented at the AEAI/RIMS Forum in Monte Carlo, 1995
• "Risk Management: The State of the Art in Italy", Presented at the "Fourth Euroconference on Risk Management" at the University of Liège, organized by EURO (the European Federation of Operational Research Societies) and AEAI (European Association of Industrial Insurers), 1994

Paola Tagliavini – Currently held positions (at 24/03/2025)

Company	Mandate	Mandate Expiry
Intesa SanPaolo Spa	Independent Director	Approval of the financial statements at 31/12/2024
Rai Way S.p.A.	Independent Director	Approval of the financial statements at 31/12/2025
FAI – Fondo per l'Ambiente Italiano (non profit foundation )	President of the Board of Auditors	Approval of the financial statements at 31/12/2028

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned Carlo Messina (fiscal code MSSCRL62D06H501Y), born in Rome on 06/04/1962, nationality italian

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• − I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

With regard to independence

• a) □ I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • X I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• □ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• □ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• □ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) □ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

	Areas Level achieved
		Basic/Good	Very Good/Excellent (6)
1.	Banking and financial markets (*)	□	X
2.	Banking and financial activities and products (*)	□	X
3.	Banking and financial regulatory framework (*)	□	X

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4.	Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	□	X
5.	Risk management (identification, assessment,	□	X
	monitoring, control, and mitigation methods of
	the main types of risks of a credit institution,
	including the member's responsibilities in these
	processes) (*)
6.	Knowledge of sustainability issues (ESG)	□	X
7.	Internal control systems and other operational	□	X
	mechanisms (*)
8.	Knowledge of the global dynamics of the	□	X
	economic and financial system
9.	Organizational and corporate governance	□	X
	structures, and assessment of the effectiveness
	of the governance mechanisms of the credit
	institution, aimed at ensuring an effective system
	of supervision, management and control (*)
	10. Interpreting a credit institution's financial	□	X
	information, identifying key issues based on this
	information and appropriate controls and
	measures (*)
	11. Prevention of money laundering and terrorist	□	X
	financing
	12. Climate and environmental risks	□	X
	13. Wealth Management	□	X
	14. Information & digital technology (7) (*)	□	X
	15. Cyber Risk (8)	□	X
	16. Human resources, remuneration and incentive	□	X
	systems
	17. Accounting and auditing	□	X
	18. Data quality management (9)	□	X
	19. Expertise in corporate functions (audit, legal,	□	X
	corporate, organisation)
	20. International Experience (10)	□	X
	21. Insurance market and products	□	X

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making	□	X
23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	□	X
24. Result orientation and motivation	□	X
25. Authenticity, ability to stand up and communicate (transparency, proper presentation and defence of owns ideas)	□	X
26. Assertiveness, ability to engage in dialogue and persuasion	□	X
27. Knowledge of the English language	□	X

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were mainly gained in the performance of the following activities:

Area and Activities performed: Managing Director and CEO Company or entity concerned: Intesa Sanpaolo Spa Period: Since September 2013

Area and Activities performed: Top Manager Company or entity concerned: Intesa Sanpaolo Spa Period: Since 2007

With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;

• □ I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• l) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) X I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • □ I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □ I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .......................................................... at .....................................................(11) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;

¹¹ Please enter the office held and the details of Public Authority employer.

• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

_________________________________ Milan, 24.3.2025

(Place and date)

_______________________

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

_______________________ , ________________________________________ Milan, 24.3.2025

Carlo Messina (Roma, 1962)

Managing Director and Chief Executive Officer of Intesa Sanpaolo since 29 September 2013. A graduate of Economics and Business from Luiss University of Rome, he began his career at Banca Nazionale del Lavoro, where he held the position of Manager in charge of the Corporate Finance - Primary Markets and Corporate Finance Department. While developing his professional career, he carried out intense academic activities as Professor of Economics of Financial Intermediaries at the Business Administration Master of the Luiss School of Management and as Professor of Corporate Finance at the Department of Economics and Business of the University of Ancona. In 1992, he joined Bonifiche Siele Finanziaria (Parent Company of the Banca Nazionale dell'Agricoltura banking group), where he held the position of Manager in charge of the Planning and Strategic Control Department. From 1996, he was Manager in charge of Planning at Banco Ambrosiano Veneto and, in 2002, he became the Head of the Planning and Control Head Office Department at Banca Intesa. At Intesa Sanpaolo, in 2007, he was Head of the Value Creation Governance Area, became Chief Financial Officer in 2008, General Manager and Chief Financial Officer in 2012. In 2013, he took on the role of General Manager of the Bank, Head of the Chief Financial Officer Governance Area and Head of the Banca dei Territori Division. In September of the same year, he became Managing Director and CEO, while maintaining the position of General Manager. Since April 2016, within the one-tier corporate governance system, he has been Managing Director and CEO, General Manager and sole executive Board Director.

He is currently a member of the Executive Committee of the Italian Banking Association (the ABI), a Fellow of the Foreign Policy Association of New York, a Visiting Fellow at Oxford University and a member of the Bocconi University Board.

In 2017, he was awarded the "Cavaliere del Lavoro" knighthood by the President of the Italian Republic, Sergio Mattarella.

In October 2022, he received the Honorary Master's Degree in Management Engineering from the Politecnico di Bari.

In March 2024, the University of Padua awarded him an Honorary Master's Degree in Economics and Finance.

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned Carlo Messina, born in Rome, on 06/04/1962, fiscal code: MSSCRL62D06H501Y, declare that

□ I do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
ABI	Board Member and Member	July 2014
	of the Executive Committee
Bocconi	Board Member	November 2014

Date, _________________________________ Signature, ____________________________ 24.3.2025

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year, I, the undersigned MA-Rig A. ZARIA Ifiscal code P. Halas 9. Halas 9. 1. 9. born in ... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . nationality .... L.T.A.T.A.

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

A With regard to independence

• a) > I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

> With regard to professionalism and competence

c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the sultability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• administration or control activities or management tasks in the credit, financial, securities or insurance sector;
• administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• o professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• management, executive or top management functions, however named, in public entitles or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas		Level achieved
	Basic/Good	Very Good/Excellent (6)
	Banking and financial markets (*)
	2. Banking and financial activities and products (*)	100	T

4 Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (Iv) risk management (Identifying, assessing, monitoring, controlling and miligating the main types of time of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vi) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In beneral, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each Individual candidate is expected to possess at least more than one of them at an excellent level.

3. Banking and financial regulatory framework (*)	0
4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (")	□	X
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)	X	E
6. Knowledge of sustainability issues (ESG)	ロ
7. Internal control systems and other operational mechanisms (*)	ম	E
8. Knowledge of the global dynamics of the economic and financial system	El	X
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	X	0
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	X	■
11. Prevention of money laundering and terrorist financing		X
12. Climate and environmental risks	0	X
13. Wealth Management	A	0
14. Information & digital technology (7) (*)	1000	0
15. Cyber Risk (8)	>	D
16. Human resources, remuneration and incentive systems	D	文
17. Accounting and auditing	X	D
18. Data quality management (9)	8	0
19. Expertise in corporate functions (audit, legal, corporate, organisation)	K
20. International Experience (10)	0

⁷ Within the guidance expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it Is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered Important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined. "It is worth highlighting the need to provide, within the new Board, a greater presences aquired at an international level, Including within companies outside the Group, institutions, and organizations based in various markets and terriorial areas, Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

21. Insurance market and products
22. Business judgment and capacity for inquiry, analysis, and decision-making	D	પ્રદ
23. Capacity for collaboration and influence appropriate and (encouragement and constructive sharing of professionalism and opinions and resolution of potential conflicts)	0	1
24. Result orientation and motivation	0
stand and ability to 25. Authenticity, up communicate (transparency, proper presentation and defence of owns ideas)	1
26. Assertiveness, ability to engage in dialogue and persuasion	L	X
27. Knowledge of the English language

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities: Area and Activities performed AN BASSADOR OF ITALY TO THE USA Company or entity concerned: M.I.A.I.STRY... RE... FOR E.I GALLIGAL ... AFFA.IR.S...
Period: ... . . . . J. V. 9 ... FOR L.L. .. . . . FOR L.I. ... AFFA.1R.L................. Company of entity concerned: M. K. K. K. S. T. S. T. T. T. T. T. T. T. T. T. T. T. T. T. T. T. T. F. C. . F. F. F. Company of entity concerned . A. F. F. F. F. L. L. . . . T. Area and Activities performed: DIRLO. AN C AOVISOR TO THE DM OF Company of entity concerned: . PR-11. E . M. L. Office . . . Office . . R.O. P. Period MAARCH 201.6 - JULY 2018

> With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

• With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):

I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;

• o I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors.

> With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) a l am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • o I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;

  • I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am

AMBRISHOOR OF ITTALLY . IN THE USAL MINISTRY FOR LEGON ASSARIES and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;

• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office,

¹¹ Please enter the office held and the details of Public Authority employer.

This is an English translation of the original Italian document. In cases of conflict between the English This is an English translation of the original italian document. In the Italian language document prevails.

having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;

• composition of the Board of Directors,
  I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, I have read the Information notee referred to in no in accordingly authorize the publication provided at the foot of this document, and racording y professional and personal characteristics contained in the curriculum vitae attached;
• contained in the curriculum vitae attached;
  I authorize the Company to seek confirmation from the relevant Authorities as to the truthing and l authorize the Company to seck committen. The purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• so agree to:
  submit, at the Company's request, the documents needed to confirm the truthfulness of the . information declared;
• Information declared.
  · promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• comprehensive information regarding their personal and professional characteristics and ﮯ comprehensive "Information" fogarding" incl. "Percently offices held in other companies or entities (curriculum vitae);
• the list of the management and control offices currently held in other companies or entities, ii) the list of the management de any updates until the acceptance of the position.

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.a. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-> personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular

This is an English translation of the original Italian document. In cases of conflict between the English This is an English translation of the original franch obounont in vast the Italian language document prevails.

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from internation by virtue of the obligations defiving from the Aractive, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation insurance, social security and tax hature, 'as world as tribe enthorities empowered by law on by
established by laws, regulations and/or EU legislations of the Christer that established by laws, regulations andror Co logiotion, the Corporating of audio, photo, and video supervisory and control bodies. With regard to the mobility of audio, photo and video participate in, the Controller will process your personal rom which your identity may be recordings containing your voice androi mage, as welings and fulfit the related requirements; your
deduced, in order to record the minutes of the meetings and digital format personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court,

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and The processing of your personal data for this with the processing for the purposes relevant to the execution of the relations with the Controller. The provision of your stated in points c and o is based on the legitimate mocessed it will not be possible to establish or Data is not compulsory, but in it is not provit of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclosed For the pursuit of the above-memoried parposod, it institute of the intesa Group and your Personal Data to the following Categones of reelancers, etc.) operating both inside and outside the its subsidianes; 2) Third parties (companiss), nooldnoorentel to, or in support of those of these of the European Union that carry out activities confied within systems set up within public authorities. The Controller, and 3) Authornies and public information of the esse may he The underly list companies of the Thiesa Sampaolo "Group" and "third partile case may be. The updated list
disclosed may act as controllers, processors or joint controllers, as the Updated li disclosed may act as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for Your Personal Data are processed by the Controller reserves the right to transfer your Personal Data to
technical or operational reasons, the Controller reserves the "origina technical or operational reasons, the Controlier reservous of "adequacy" by the European countries outside the European Onlor, Subject by the country to which the Personal Data will Commission or based on the applophate salegguran provided by the Regulation. Your Personal Data willia, for Data shall be transferred, or specific exchiptions provised by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way Your Personal Data is processed by hiandali, volf Personal Data is kept for a period of as to guarantee the security and connactions on the purposes for which it is processed, subject to the time not exceeding that necessary to achieve the purplessonal Data is generally stored for a period retention periods established by law: Opeonic and the Controller, subject to the different storage of ten years from the termination of the relations in the regulations. Your Personal Data may also requirements for the purposes envisaged by the upplicable suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, As the data subject, you may, at any time, request the olas exercise all the other rights established asking for the recilication of erastie of the complete and detailed information in this regard, please by the Regulation (LO) 2010f the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post the address Intess Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject 24/3/2025

Mariangela Zappia

Mariangela Zappia has been the Ambassador of Italy to the United States of America since July 2021. A career diplomat with 40 years of experience, she is the first woman in Italy to hold this position. She was also the first woman to serve as Italy's Ambassador to the United Nations in New York and to NATO, Diplomatic Advisor to the Prime Minister, G7/G20 Sherpa, and European Union Ambassador to the United Nations in Geneva. In these capacities, she has always been at the heart of decision-making processes on issues of high relevance to national security, including European integration processes, transatlantic

relations, responsibilities within the G7/G20, and bilateral and global political, economic, and social strategic issues. She has extensive leadership and managerial experience in complex structures.

ESPERIENZE PROFESSIONALI

• Permanent Representative of Italy to the United Nations in New York (2018-2021); .
• Diplomatic Advisor to the Prime Minister and G7-G20 Sherpa (2016-2018); .
• Permanent Representative of Italy to the North Atlantic Council (NATO) in Brussels (2014-. 2016);
• European Union Ambassador to the UN and International Organizations in Geneva (2011-0 2014).
• Previously, she held positions at: the Permanent Mission of Italy to the United Nations in . Geneva (2007-2011); as Head of the Mediterranean, Middle East, and Balkans Office at the Directorate-General for Development Cooperation, Ministry of Foreign Affairs (2007); the Permanent Mission of Italy to the United Nations in New York (2000-2003); the Italian Embassy in Brussels (1997-2000); the Press Service and Spokesperson's Office of the Ministry of Foreign Affairs in Rome (1994-1997); the Consulate General in New York (1990-1993); and the Italian Embassy in Dakar, Senegal (1986-1990).

Between 2003 and 2006, she dedicated herself full-time to her children, Claire and Christian.

EDUCATION

She holds a degree in Political Science and International Relations from the University of Florence and a specialization in Diplomatic Studies and International Relations from the same university.

She is a regular speaker on international politics and economics, Italy's role in global affairs, and a variety of multilateral and global security topics. As an International Gender Champion, she is engaged in gender equality promotion and mentoring.

She is a native Italian speaker, fluent in English and French, and has a good command of Spanish.

OTHER INFORMATION

She is a Board Member of the Italian Academy at Columbia University in New York, the Advisor Board of Innovit in San Francisco, and the Board of Directors of the Council for U.S.-Italy Relations. She is the Honorary President of the Board of Directors of the American Chamber of Commerce in Italy. She was a Member of the Senate of the International Automobile Federation (2018-2021).

She is a "Commendatore dell'Ordine al Merito della Repubblica Italiana."

She is the recipient of the "Mela D'Oro" (2019) by the Fondazione Marisa Bellisario for the advancement of women in public institutions; the "Top Diplomacy" award (2022) by the Fondazione Guido Carli; and the "Robert Francis Kennedy Human Rights" Award (2023) by the RFK Italy Foundation.

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned Maria Angela Zappia, born in Viadana (MN), on 12/08/1959, fiscal code: ZPPMNG59M52L826U,

declare that

a I do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE
Italian Academy at Columbia University - New York	Member of the Board of Guarantors
Council for U.S .- Italy Relations	Member of the Board of Directors
American Chamber of Commerce in Italy	Honorary President of the Board of Directors

2025 Date, Signature, ___________________________________________________________________________________________________________________________________________________________________

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned Franco Ceruti (fiscal code CRTFNC52H13B218Z), born in Brunate (CO) on 13/06/1952, nationality italian,

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• I am suitable for the office, pursuant to the applicable regulations (') and the Articles of Association (2).

I also declare that

A With regard to independence

• a) = I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • X I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

> With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• X professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• ロ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas	Level achieved
	Basic/Good Good	Very Good/Excellent (6)
Banking and financial markets (*)
Banking and financial activities and products (*)
Banking and financial regulatory framework (*)

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (ii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring and miligating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background experience (naturally also in corporate bodies, if for more than one termined and explained their possession, making them demonstrable, In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole each individual candidate is expected to possess at least more than one of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	11:3	×
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these	口	×
processes) (*)
Knowledge of sustainability issues (ESG) 6.		X
7. Internal control systems and other operational mechanisms (*)	四	X
8. Knowledge of the global dynamics of the economic and financial system	E	X
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)		X
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	ロ	×
11. Prevention of money laundering and terrorist financing	0	X
12. Climate and environmental risks	□	×
13. Wealth Management		X
14. Information & digital technology ( ) (*)	×	D
15. Cyber Risk (8)	□	X
16. Human resources, remuneration and incentive systems	E	×
17. Accounting and auditing	×	□
18. Data quality management (9)	×
19. Expertise in corporate functions (audit, legal, corporate, organisation)	×	日
20. International Experience (10)	×	□
21. Insurance market and products	0	X

7 Within the guidelines expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

8 See footnote n. 7

9 Within the aforementioned guidelines expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

10 In the context of the aforementioned guidelines expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making	日	×
23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)		×
24. Result orientation and motivation		×
to 25. Authenticity, ability stand up and communicate (transparency, proper presentation and defence of owns ideas)	日	×
26. Assertiveness, ability to engage in dialogue and persuasion		×
27. Knowledge of the English language	×

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were mainly gained in the performance of the following activities:

Area and Activities performed: Board Member (also member of the Risks and Sustainability Committee and Remuneration Committee)

Company or entity concerned: Intesa Sanpaolo Spa Period: since 2016 to present

Area and Activities performed: Board Member

Company or entity concerned: (i) Intesa Sanpaolo Private Banking - (ii) Intesa Sanpaolo Assicura - (ii) Mediocredito Italiano - (iv) Banca Prossima - (v) Milan Chamber of Commerce, Industry, Handicraft and Agriculture

Period: (i) since 2005 to present - (ii) since 2014 to 2018 - (iii) since 2015 to 2019 - (iv) since 2009 to 2019 - (v) since 2012 to present

Area and Activities performed: Area Director and Regional Director Company or entity concerned: Intesa Sanpaolo Spa Period: since 1996 to 2014

Area and Activities performed: Chair

Company or entity concerned: (i) Intesa Sanpaolo Expo Institutional Contact srl - (ii) Fondazione per l'innovazione del Terzo Settore - (iii) Lombardy Regional Commission of the Italian Banking Association (the ABI) - (iv) Società Benefit Cimarosa 1 Spa

Period: (i) since 2017 to present - (ii) since 2018 to present - (iii) since 2008 to 2014 - (iv) since 2020 to present

> With regard to integrity and reputation

g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;

• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

> With regard to offices in companies and institutions and time commitment

• with specific regard to the prohibition of interlocking directorates established by Article 36 of Law i) Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • o I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

> With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) X I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • o I am currently employed in the public sector, according to and for the effects of Legis|ative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .............................................................................................................................................................................. requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;

¹¹ Please enter the office held and the details of Public Authority employer.

• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached,
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• comprehensive information regarding their personal and professional characteristics and i) management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

(Place and date)

(signature

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular

8

This is an English translation of the original Italian document. In cases of conflict between the English language document and the Italian document, the interpretation of the Italian language document prevails.

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject AND Q0 2005

Franco Ceruti (Brunate, 1952)

A Board Director of Intesa Sanpaolo since 2016, a member of the Board's Remuneration Committee and the Board's Risks and Sustainability Committee,

He joined Cariplo in 1973 and has spent his entire professional career within the Intesa Sanpaolo Group. He started to hold management positions in 1982 and gained experience mainly in the local network as Manager at a number of Branches and Offices, as well as Regional Areas of Lombardy, Veneto, Trentino Alto Adige and Friuli. He was a Regional Manager at the Parent Company from 2002, and Manager of the Regional Governance Centre for Milan and its Province from 2008. He was President of the Lombardy Regional Commission of the Italian Banking Association (the ABI) from 2008 to 2014. A former Board Director of Banca Prossima, Intesa Sanpaolo Assicura, and Mediocredito Italiano, he currently sits on the Board of Directors of Intesa Sanpaolo Private Banking and of Intesa Sanpaolo Expo Institutional Contact of which he is Chairs the Board of Directors of Società Benefit Cimarosa 1. He has been a member of the Board at the Milan Chamber of Commerce, Industry, Handicraft and Agriculture since 2012 and Chair of Fondazione Innovazione Terzo Settore (FITS) since 2018.

In 2011, by decree signed by the President of the Italian Republic, he was honoured with the longservice star and awarded the title of Master of Labour.

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned

Franco Ceruti (fiscal code CRTFNC52H13B218Z), born in Brunate (CO) on 13/06/1952, fiscal code: CRTFNC52H13B218Z,

declare that

ם I do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
Intesa Sanpaolo Expo Institutional	Chair of the Board of	Since 2015
Contact S.r.l.	Directors
Intesa Sanpaolo Private Banking	Member of the Board of	Since 2005
S.p.A.	Directors
Società Benefit Cimarosa 1 S.p.A.	Chair of the Board of	Since 2020
	Directors
Fondazione per l'innovazione del	Chair of the Board of	Since 2018
Terzo Settore (Fits)	Directors
Milan Chamber of Commerce,	Member of the Board of	Since 2012
Industry, Handicraft and	Directors
Agriculture

Date, HANDO 20, 2025, f Signature, _

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

l, the undersigned Paolo Maria Vittorio Grandi (fiscal code GRNPMR54S07F205P), born in Milan on 07/11/1954, nationality italian

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

> With regard to independence

• a) = I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • X I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

> With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management and realison holders of banks; Guidelines on the assessment of the suitability of the management of the management of body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance; updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained any for the naried of time noride of time office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

This is an English translation of the original Italian document. In cases of conflict between the English This is an English translation of the original italian occument. In equale of the Italian language document prevails.

• X administration or control activities or management tasks in listed companies of turnover, nature and administration or control activities of management to (in terms of turnover, nature and
  a size and complexity greater than or comparable to (in the bank in which a size and complexity greater than for comparable to (in to bank in which the office is to
  complexity of the organisation or activity carried out) that of the bank in which t be held;
• be held;
  c professional activities in matters pertaining to the professional activity must be professional activities in matters perfaining to the bronfessional activity must be sectors or in any case relevant to the banks with regard to the recipients of the recipients of the abovecharacterised by appropriate levels of Complexity and with basis in the abovementioned sectors;
• mentioned sectors;
  c university teaching activities, as first or second level legal or economic subjects or insurance sector; university teaching activities, as first of secondial, securities or insurance sector;
  in other subjects relevant to the activities of the credit, financial, in public entiti
• in other subjects relevant to the activities or the ereat, in public entities of
  management, executive or top management functions, however named, in puvided the management, executive or top mailighting in insurance sector and provided the public authorities related to the creat, the not of otons has a size and complexity comparable
  entity in which the person performed those for bold with that of the bank in which the position is to be held;
• d) l am registered with the Register of independent auditor of member of a control
  least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to
  rs fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors, in the with regard to the guidance and Tecofiniteriations pirion of the Board of Directors, published on document on the Qualifative and Qualificality of the theoretical knowledge and practical knowledge and practical 28 February 2025, I have the personal atthbutes and the enore than one of the areas of
  experience in relation to the lareas listed below - including of the Fconomy and Financ experience in relation to the areas ilsted responsibility indicated in Article To of the regardines specified below (areas and
  no. 169/2020 — within which I have achies assessonedling by no: 169/2020 -----------------------------------------------------------------------------------------------------------------------------------------------------------------

	Level achieved
Areas	Basic/Good _________________________	Very Good/Excellent (6)
Banking and financial markets
Banking and financial activities and products (^,
Banking and financial requlatory framework

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁴ Article 13.4.2, letter a), of the Articles of Association.
5 Reference is made to the following and financial markets; (ii) regulatory framework and relevant legal ් Reference is made to the following and inational makels; (i) beginess strategy or business plan and
requirements; (iii) stragic planning and institution's business strateg requirements (ii) strategic planning at a credit nistitutions socioling and miligating and miligating the main types of
requirementation thereof, (iv) risk management (ite ef requirement (w) isk margement (identifying, assessing, montoning, comoning and millioghly governance
imbernation thereof, (v) risk management (identifying) assessing the effe informancial institution); (v) accounting: (v) assessing the enecivelies of a credit institution of a credit institution of a credit institution's financial
mechanisms and an

mechanisms aimed at ensuring effective Supervision, management end controls and measures.
information, identifying key issues based on this information and appropriate contro information, identifying key issues bothis into and and ople of ene man or an execulive level or in
ô The Bank's Board of Directors has defined neriod of the: 'specific and s ® The Bank's Board of Directors has defined very good of time; knowledge and skills acuried through specific and in
context of the profession actives boderound gained throug context of the professional activity and of the Knowledge and some and experience (norporate
depth training and consisting of a cultural broend through maling their posessio ourish of and consisting of a cultural and explaned their posession, make their demonstrable. In
deply if for more than one termined and explaned their possession, make in e bodies, if for one than one term) which have determined and expering that are appropriate in relation to
general, very good and excellent knowledge and skills are those that

the office taken up.
Consistently with a guidate expressed by the Board of Directors, the areas of knowledge listed here are collectively the sistently with the guidance expressed by the Board of Life areas of Rhowlege issee with the more of
requested for the new Board as a whole, while each individual candida them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)		×
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)	口	×
6. Knowledge of sustainability issues (ESG)	ロ	×
7. Internal control systems and other operational mechanisms (*)	口	×
8. Knowledge of the global dynamics of the economic and financial system	0	×
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	口	×
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	0	×
11. Prevention of money laundering and terrorist financıng	ロ	×
12. Climate and environmental risks	□	×
13. Wealth Management		X
14. Information & digital technology ( ) (*)	0	×
15. Cyber Risk (8)		X
16. Human resources, remuneration and incentive systems	口	×
17. Accounting and auditing		×
18. Data quality management (9)		×
19. Expertise in corporate functions (audit, legal, corporate, organisation)	日	X
20. International Experience (10)	ロ	×
21. Insurance market and products		×

⁷ Within the guidance expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been devel of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

³ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined. "It is worth highlighting the need to provide, within the new Board, a greater presences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making		×
23. Capacity for collaboration and influence (encouragement appropriate and and constructive sharing of professionalism and opinions and resolution of potential conflicts)	0	×
24. Result orientation and motivation	0	×
to 25. Authenticity, ability stand and up communicate (transparency, proper presentation and defence of owns ideas)	日	×
26. Assertiveness, ability to engage in dialogue and persuasion	0	×
27. Knowledge of the English language		×

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were mainly gained in the performance of the following activities:

Area and Activities performed: Chief Governance Officer Company or entity concerned: Intesa Sanpaolo Spa Period: May 2013 - April 2024

Area and Activities performed: Head of Shareholdings Head Office Department Company or entity concerned: Banca Intesa Spa and Intesa Sanpaolo Spa Period: 2002 - 2013

Area and Activities performed: Chair and Vice-Chair Company or entity concerned: Fideuram - Intesa Sanpaolo Private Banking Period: since April 2018 to February 2020 and since February 2020 to April 2024 respectively

Area and Activities performed: Member of the Board of Directors Company or entity concerned: Eurizon Capital Sgr Spa Period: April 2009 - April 2014

> With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

• With regard to offices in companies and institutions and time commitment

• i) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • a I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors.

> With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) X I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • o I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .............................................................................................................................................................................. requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

¹¹ Please enter the office held and the details of Public Authority employer,

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• · submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• · promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• the list of the management and control offices currently held in other companies or entities, ii) with an undertaking to provide any updates until the acceptance of the position.

(Place and date)

(signature)

This is an English translation of the original Italian document. In cases of conflict between the English This is an English translation of the onginent. In ouse of the Italian language document prevails.

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPACLO S.p.A., INFORMATION NOTICE TO MEMBERS OF THE CONTRIES OF THE MANAGEMENT AND CONTROL BODY,

AND CANDIDATES FOR THE ROLES OF MEMBERS OF TERN (CW) 2016/678, OF THE EUROPER AND CANDIDATES FOR THE ROLES OF MERSERS CONNECTS COLLECTION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation of individuals This Information Notice Implements the provisions of the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Intesa Sanpaolo S.p.A., with registered online in Hazza Group, as Data Controller (below also Company of the Thiesa Sanpaolo International Baranal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

OEO HON 2 - OOT Hotel the "Data Protection Officer" (DPO) envisaged by the Regulation. For The Controller has appointed the "pate Protection of news.jsing the rights established
any matter related to the processing of your Personal Data andror the Data Protection any matter related to the processing of your i enomation Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

outer of the Controller may process, as required by the laws in force from time to time, The Personal Data that the Controller may process, ac rock identification data, tax data, tax data, tax data include the following calegones of uala. (-) personal data subject; (-) data relating to links and bank account details, biner personal data providily status, level of education, data relating to the with other persons or partes, their wealth and faily lies or activities in any case relating to the banking relationships, the penomance of economies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to Controller, (-) data collected from public Sunces (istory of social security, and anyone) of from other third parties (intesa Sampanies, external companies, external companies for welfare or nealth lunds, commercial internal and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

Obal Go ontroller uses the Personal Data concerning you that you have communicated on the legal The Controller uses the Personal Data Concerning you nat your of compliance with the legal collected from other Controllers (in the latter base of commerce) in commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management a) Purposes necessary of the assessment of the possible here of the relationship, and the reguirements or control body of the Controller and Tor thie prosible of the nomination and the requirements.
with the Controller linked to that role, including the nextitutions, the proce with the Controller inked to that role, molding the venting institutions the processing of established by the applications: Opcollioury, king supervisory provisions concerning the Bank: Article 26 personal data is necessary for the application of the bathking or portion of the Bank, Article 26
verification of the suitability requirements for members of the ERA-ESMA vertication of the Sultability requirements for the more of the EBA-ESMA
of the Consolidated Law on Banking and related impressor of the management hody and key of the Consollation Cather of the suitability of the members of the management body and key
Guidelines on the assessment of the suitability of the management supplementing Guidelines on the assessment of the sultability of the member of and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the rele of member of a b) Purposes necessary for the execution of the Youtherlip in the relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings,

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO,

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

Paolo Maria Vittorio Grandi (Milan, 1954)

Graduated with honours in Political Science from the Catholic University of Milan, he attended specialisation training courses at the ICMB (International Centre for Monetary and Banking Studies) in Geneva (1987).

From 1979 to 1982 at the Head Office of Credito Italiano: analysis of industrial sectors trends, designing and implementing a business cycle analysis model to support the loan process.

In Mediocredito Lombardo since 1982: developed the strategic marketing function for the CEO and managed the extraordinary operations that affected the bank during the period of implementation of the Amato Law and subsequent transformation into a credit institution.

From 1990: set up and developed Cariplo's Group presence in the Merchant Banking area with responsibility for investment activities (private equity), acquisition finance and advisory (corporate finance).

Since December 2000, in Banca Intesa, Co-Head of the Private Equity Department.

In June 2002, Head of Banca Intesa's Group Shareholdings Department, a position reporting directly to the CEO of Banca Intesa, which included direct responsibility for Group Mergers & Acquisitions.

From January 2007 to 2013 in Intesa Sanpaolo: Head of the General Secretariat of Intesa Sanpaolo Supervisory Board reporting directly to the Chairman, Prof. Giovanni Bazoli,

From 2013 until 2024: Chief Governance Officer: supervised, inter alia, the Legal and Liligation Department - Group General Counsel, the Company's Bodies and Corporate Affairs Department, the Group M&A Department and Equity Investment, the Arts, Culture and Historical Heritage Department.

In 2020 he led the working group that launched and successfully managed the bid for UBI Banca SpA (€ 5.4 billion).

From 2 April 2024, Senior Advisor to the Group CEO in charge of managing relations with the ECB, the Board of Directors and institutional shareholders.

He is currently Board member of the following companies: ISP Wealth Management (formerly CBP Quilvest since 30.6.22), Intesa Sanpaolo Holding International SA Luxembourg (Chairman, since 22.03.2004), Intesa Sanpaolo Innovation Center (VP from 17.1.23 to 5. 4.24), Istituto Europeo di Oncologia (since 20.04.2006), CAMFIN SpA (since 6.12.19), CENTAI Institute SpA (since 29.3.22), Fondo Atlante Comitato Investitori (since 19.5.21).

Main former board membership:

Fideuram – Intesa Sanpaolo Private Banking (Chairman and Deputy Chairman) Banca Prossima (Chairman) Agos SpA (Member of the board) Eurizon Capital SGR (Member of the board) Telecom SpA (Member of the board) PFH - Palladio Holding (Member of the board) Italo - Nuovo Trasporto Viaggiatori SpA (Member of the board)

March, 2025

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned Paolo Maria Vittorio Grandi, born in Milan on 07/11/1954, fiscal code: GRNPMR54S07F205P

declare that

al do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
Camfin S.p.A.	Board Member	From 2019
Centai Institute S.p.A.	Board Member	From 2022
Intesa Sanpaolo Innovation Center S.D.A.	Board Member	From 2023
Istituto Europeo di Oncologia S.r.l.	Board Member	From 2006
Intesa Sanpaolo Wealth Management Lux	Board Member	From 2023
Intesa Sanpaolo Holding International SA Lussemburgo	Chairman	From 2004

Date, 24 Til 2025 Signature, ___________________________________________________________________________________________________________________________________________________________________

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned Luciano Nebbia (fiscal code NBBLCN53P01G275W), born in Palestro (PV) on 01/09/1953, nationality italian

declare that

• = I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• = I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

> With regard to independence

• a) = I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • X I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide

> With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (³) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

2 Article 13.4.1. of the Articles of Association.

101

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide")),

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• o professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• □ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector,
• a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas	Level achieved
	Basic/Good --	Very Good/Excellent (6)
Banking and financial markets (*)
Banking and financial activities and products (*)
3. Banking and financial regulatory framework (*)	0

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (ii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring and miligating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one termined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	E	×
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)	E	×
6. Knowledge of sustainability issues (ESG)	□	X
7. Internal control systems and other operational mechanisms (*)	ロ	×
8. Knowledge of the global dynamics of the economic and financial system	D	×
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	×	0
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	国	×
11. Prevention of money laundering and terrorist fınancıng	그	X
12. Climate and environmental risks	×
13. Wealth Management		×
14. Information & digital technology (1) (*)	×
15. Cyber Risk (8)	×
16. Human resources, remuneration and incentive systems	E	×
17. Accounting and auditing	×
18. Data quality management (9)	×
19. Expertise in corporate functions (audit, legal, corporate, organisation)	E	×
20. International Experience (10)	×	□
21. Insurance market and products	×

⁷ Within the guidelines expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequale level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization" .

⁸ See footnote n. 7

⁹ Within the aforementioned guidelines expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidelines expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making	13	×
23. Capacity for collaboration and influence (encouragement appropriate and and constructive sharing of professionalism and	П	×
opinions and resolution of potential conflicts)
24. Result orientation and motivation	0	X
25. Authenticity, ability to stand up and communicate (transparency, proper	日	×
presentation and defence of owns ideas)
26. Assertiveness, ability to engage in dialogue and persuasion	E	×
27. Knowledge of the English language	×	0

(*) Area envisaged by Article 10 of Regulation 169/2020

Experience, theoretical knowledge and competence indicated at a very good/excellent level were mainly gained in the performance of the following activities:

Area and Activities performed: Member of the Board of Directors and Member of the Remuneration Committee

Company or entity concerned: Intesa Sanpaolo Spa Period: since 2019 to present

Area and Activities performed: Manager with responsibility for complex structures and management of large assets

Company or entity concerned: Istituto Bancario San Paolo di Torino Spa and later Intesa Sanpaolo Spa Period: since 1999 to 2015

Area and Activities performed: Member of the board of Directors and Deputy Chairman Company or entity concerned: Banks and Companies of Intesa Sanpaolo Group Period: since 2015 to 2021

> With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

• With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • ם I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors.

> With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) X I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • o I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • o I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .............................................................................................................................................................................. requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

¹¹ Please enter the office held and the details of Public Authority employer.

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

1 also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the . information declared;
• · promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• () management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entitles, with an undertaking to provide any updates until the acceptance of the position.

(Place and date)

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular 7

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject
24.3.2025	universion unerry

Luciano Nebbia (Palestro, 1953)

A Board Director of Intesa Sanpaolo since 2019 and a member of the Board's Remuneration Committee.

He began his professional career in 1973 at Istituto Bancario San Paolo di Torino within the local branch network. Subsequently, he held increasingly senior positions at Leasing company owned by the San Paolo Group and other leading banks) until he became General Manager in 1995. From 1995 to 1998, he was Country Manager for Italy at the Real Estate Leasing Commission, on behalf of Assilea (an association of Italian leasing companies linked to the Italian Banking Association - the ABI), and became its Vice President at European level.

In 1999, he took over responsibility for the Turin Area at Sanpaolo IMI and, subsequently, he was Head of the Milan Province Area at Intesa Sanpaolo until 2008. From 2009 he was Regional Manager of the Tuscany-Umbria Area and from 2012 Regional Manager for Tuscany, Umbria, Lazio and Sardinia. From 2008 to 2011 he was also General Manager of Banca CR Firenze. He subsequently became a Board Director of Banca CR Firenze and then its Deputy Chair, a position he held until February 2019 when he also ceased to hold the same position at Cassa di Risparmio di Pistoia e della Lucchesia following the merger by incorporation of the two subsidiaries into Intesa Sanpaolo. He was a Board Director of Intesa Sanpaolo Casa until April 2021 and currently serves as Deputy Chair at Equiter.

In 2010, he was awarded the title of Commander of the Order of Merit of the Italian Republic (Commendatore).

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

l, the undersigned Luciano Nebbia, born in Palestro (PV) on 01/09/1953, fiscal code: NBBLCN53P01G275W, declare that

a I do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
EQUITER S.p.A.	Deputy Chair of the Board of Directors	From 2015

Date, 24.3.2025 Unn, an Signature, __

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned Liana Logiurato (fiscal code LGRLNI68C69F205F), born in Milan on 29/03/1968, nationality Italian and British

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• − I am suitable for the office, pursuant to the applicable regulations (1 ) and the Articles of Association (2 ).

I also declare that

➢ With regard to independence

• a) X I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • □ I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

➢ With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3 ) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

1

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• X professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• □ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• □ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) □ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (⁴ );
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments ( 5 );
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas		Level achieved
		Basic/Good	Good/Excellent (6 Very )
1.	Banking and financial markets (*)	□	X
2.	Banking and financial activities and products (*)	□	X
3.	Banking and financial regulatory framework (*)	□	X

⁴ Article 13.4.2, letter a), of the Articles of Association.

2

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4.	Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation	□	X
	thereof (*)
5.	Risk management (identification, assessment,	□	X
	monitoring, control, and mitigation methods of
	the main types of risks of a credit institution,
	including the member's responsibilities in these
	processes) (*)
6.	Knowledge of sustainability issues (ESG)	□	X
7.	Internal control systems and other operational	□	X
	mechanisms (*)
8.	Knowledge of the global dynamics of the	□	X
	economic and financial system
9.	Organizational and corporate governance	□	X
	structures, and assessment of the effectiveness
	of the governance mechanisms of the credit
	institution, aimed at ensuring an effective system
	of supervision, management and control (*)
10.	Interpreting a credit institution's financial	□	X
	information, identifying key issues based on this
	information and appropriate controls and
	measures (*)
11.	Prevention of money laundering and terrorist	□	X
	financing
12.	Climate and environmental risks	□	X
13.	Wealth Management	□	X
14.	7 Information & digital technology ( ) (*)	□	X
15.	8 Cyber Risk ( )	□	X
16.	Human resources, remuneration and incentive	□	X
	systems
17.	Accounting and auditing	X	□
18.	9 Data quality management ( )	□	X
19.	Expertise in corporate functions (audit, legal,	□	X
	corporate, organisation)
20.	10) International Experience (	□	X
21.	Insurance market and products	X	□

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry,	□	X
analysis, and decision-making
23. Capacity for collaboration and influence	□	X
(encouragement and appropriate and
constructive sharing of professionalism and
opinions and resolution of potential conflicts)
24. Result orientation and motivation	□	X
25. Authenticity, ability to stand up and	□	X
communicate (transparency, proper
presentation and defence of owns ideas)
26. Assertiveness, ability to engage in dialogue and	□	X
persuasion
27. Knowledge of the English language	□	X

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area and Activities performed: Non-Executive Director, Member of Remuneration Committee, Member of Related Party Transactions Committee Company or entity concerned: Intesa SanPaolo SpA

Period: 2022 - Present

Area and Activities performed: Equity Partner, Head of Chemicals EMEIA, Strategy & Transactions Company or entity concerned: Ernst & Young AG Period: 2018 - 2021

Area and Activities performed: Global Head of Mergers & Acquisitions Company or entity concerned: Syngenta AG Period: 2010 - 2017

Area and Activities performed: Executive Director, Investment Banking Company or entity concerned: Nomura International plc Period: 1999 - 2009

➢ With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

4

➢ With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • □ I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• l) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

➢ With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) X I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • □ I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □ I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .......................................................... at .....................................................(11) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

¹¹ Please enter the office held and the details of Public Authority employer.

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

Zug (Switzerland), 23/03/2025 _________________________________

(Place and date)

_______________________ (signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

23/3/2025 _ __________________ , ________________________________________

Liana Logiurato

Profile

technology, communications, industrials, chemicals, agriculture, financial services, fintech. Worked on over \$100bn of M&A, JV and licensing transactions; raised capital for over \$20bn through IPO. Creating stakeholder value by identifying and originating strategic opportunities for industry transformation and growth. Asian, European and American markets. Passionate about the development and inclusion of diverse talent. Growth, value creation, M&A, strategic perspective, digitalisation, artificial intelligence (AI), ESG and sustainability. Non-Executive and Committee Roles Banca Intesa Sanpaolo SpA (Milano and Torino) 2022 – present Italy's largest bank, No. 1 in EU, No. 3 in Europe; Operating income \$29bn; Market cap \$92bn Employees 97,000; Universal bank serving over 22m customers internationally Non-Executive Director, Member of Remuneration Committee and Related Party Transactions Committee IMD Business School, Alumni Association (Lausanne) 2022 - present Founder and Board member. Governance Committee, Value Creation Committee Nomura International plc (London) 1999 - 2001 Director on the Boards of portfolio companies and Nomura Investment Committee Executive Career Summary Ernst & Young Ltd (Zürich) 2018 – 2021 Global Financial Consulting business; Revenue \$37.2bn; Employees 310,000 Equity Partner, Head of Chemicals EMEIA, Strategy and Transactions Built Chemical Industry Strategy and Transactions business. Performed sectoral scenario analyses, devised game-changing strategic options, portfolio optimisations and transformation/ digitalisation plans. Originated and executed M&A transactions exceeding \$8bn via coverage of Chemical businesses, top 25 Private Equity & Sovereign Wealth Funds. ICAEW registered. Syngenta AG (Basel) 2010 – 2017 Global agribusiness (chemicals, biotech and seeds); Employees 28,000 Revenue on sale \$15bn; sold to ChemChina for \$47bn Global Head of M&A 2011 – 2017 Originated and executed M&A strategy, \$3.75bn in acquisitions/divestments/licensing. \$47bn sale to ChemChina. Successfully defended against 5 other takeover proposals. Sponsor of Group M&A Committee. Deputy Head of M&A (promoted after 10 months) 2010 – 2011 Nomura International plc (London) 1999 – 2009 Largest Japanese investment bank. Revenue \$17bn (Europe \$1.4bn); Market cap \$22bn Employees 26,000 (Europe 4,300); Market share in Japan: M&A 25%, ECM 57% Executive Director 2001 – 2009 Lead banker for origination and execution of \$8.5bn Asia-linked M&A transactions. Member of Fairness Opinion & Valuation Committee. FCA UK and SFC HK registered. Associate Director 1999 – 2001 Originated, executed and restructured Venture Capital deals to the value of \$290m. UBS Group AG (London & Zürich) 1998 – 1999 Associate Director - M&A, project and structured finance transactions. SFA registered. Originated, structured \$32.7bn and executed \$19.7bn M&A, IPO and structured finance deals. Equity (Milan) – Associate, M&A transactions 1995 - 1996 SITEA – Prof. A. Martelli (Milan) – Scenario Analyst for Strategic Adviser 1993 - 1995

International Non-Executive Director and Board Adviser. Sectors covered include biotech, healthcare,

Board Credentials

• Non-Executive Director and Member of the Board of the largest universal bank in the EU and third in Europe since 2022, with many complex, strategic, judgement, technology, legal and regulatory matters.
• Member of Board Committees since 1999, including Remuneration Committee, Related Party Transactions Committee, Investment Committee, Fairness Opinion & Valuation Committee.
• Exposed to over 50 Boards of Directors and over 30 Investment Committees, in 5 continents, for various industries; dealt with a variety of governance practices in relation to growth topics.
• Remuneration Committee experienced in overall cycle of Remuneration Committee processes. Setup, selection of independent external advisers to the Remuneration Committee, overall quantum and mechanics, KPI design, outcomes of annual bonuses, crafting messages for supervisors and investors.
• Related Party Transactions Committee – experienced in assessing and setting commercial terms at arm's length with related parties that could pose conflicts of interest.
• Board member of Alumni Associaton of IMD Business School. Designed and launched inaugural Board, approach to engaging and mobilising a global community of 120,000 alumni.
• Succession and talent experienced in assessing leaders and succession processes, supervising leadership and accountability, selecting, forming, growing and re-sizing teams.
• Strategy provided a strategic perspective in Board level discussions, including future of banking and industries, organic and inorganic growth, capital agenda, business portfolio reviews, asset allocation, value creation, M&A, post-merger integration and carve-outs. Regular speaker on industry platforms.
• Innovation and new business ventures fundraising, new business models, business development.
• Digitalisation, AI and Fintech - transformation via digitalisation, AI (e.g. ML, LLMs, Gen AI, ChatGPT, Perplexity, Claude AI, BloombergGPT), strategic review and re-design of approach to future banking, including blockchain, cryptocurrencies, digital currencies, future of work.
• Risk issues and mitigation including wide spectrum analysis of business, capital structure, capital allocation, market, credit, operational, technology and geopolitics.
• ESG and Sustainability participated in Board level discussions on the approach of the business to setting and meeting net zero targets, communication with a variety of stakeholders and reporting.
• Governance excellent understanding of the governance requirements and processes for large regulated and publicly listed businesses, designed governance for Boards and Committees.
• Industry and Financial Services supervision & regulation – frequent interaction with European Central Bank and Bank of Italy Joint Supervisory Team, other supervisors / regulators (e.g. SEC, FINMA, FCA UK, SFC HK, Antitrust, Takeover Panels, EU Commission).
• Corporate defence and dealing with investors & capital markets - direct experience in orchestrating creatively corporate defence, as well as handling investors and capital markets through engagement.
• Board effectiveness – participated in external reviews of Board Effectiveness and provided constructive input on how the performance of the Board could be improved.
• Board style – intellectually curious, independence of mind, appropriately challenging when necessary, supportive of Board colleagues and executive leadership, brings broad commercial knowledge, perspective and benchmarks into Board discussions.

Languages and Personal interests

English, Italian (fluent), French (good), German (fair). Italian and UK passport holder, Swiss permit C. Mentoring talent. Lecturer on M&A, strategy, governance and climate finance at IMD (Lausanne), IESE (Madrid), University of Zürich. Public speaking at conferences on M&A, value creation, ESG, sustainability, chemical/biotech/agriculture/food industries.

Education

IMD Business School (Lausanne) – Board Director Diploma	2022 – 2024
IMD Business School (Lausanne) - Senior executive programs (BPSE, ELP, OWP, AHPL, HPL)	2007 – 2019
IMD Business School (Lausanne) - MBA	1997
Università Bocconi (Milan) - MSc, Business Administration	1993

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned Liana Logiurato born in Milan on 29/03/1968, fiscal code: LGRLNI68C69F205F, declare that

□ I do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
IMD – Business School / Alumni Association Lausanne (Switzerland)	Non-Executive Director	28/10/2022

Date, __ 23/03/2025______ Signature, ____________________________

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned PIETRO PREVITALI (fiscal code PRVPTR71C27G388C), born in Pavia on 27/03/1971, nationality Italian

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• − I am suitable for the office, pursuant to the applicable regulations (¹ ) and the Articles of Association (² ).

I also declare that

With regard to independence

• a) X□ I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • □ I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (³ ) the following for at least one three-year period, also alternatively:
  • □ administration or control activities or management tasks in the credit, financial, securities or insurance sector;

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

• □ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• □ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• □X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• □ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) □ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (⁴ );
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments ( 5 );
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas		Level achieved
		Basic/Good	Very Good/Excellent (6 )
1.	Banking and financial markets (*)	□	X□
2.	Banking and financial activities and products (*)	□	X□
3.	Banking and financial regulatory framework (*)	□	X □

⁴ Article 13.4.2, letter a), of the Articles of Association.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

4.	Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	□	X □
5.	Risk management (identification, assessment,	X□	□
	monitoring, control, and mitigation methods of
	the main types of risks of a credit institution,
	including the member's responsibilities in these
	processes) (*)
6.	Knowledge of sustainability issues (ESG)	□	X□
7.	Internal control systems and other operational	□	X□
	mechanisms (*)
8.	Knowledge of the global dynamics of the	□	X □
	economic and financial system
9.	Organizational and corporate governance	□	X □
	structures, and assessment of the effectiveness
	of the governance mechanisms of the credit
	institution, aimed at ensuring an effective system
	of supervision, management and control (*)
10.	Interpreting a credit institution's financial	□	X □
	information, identifying key issues based on this
	information and appropriate controls and
	measures (*)
11.	Prevention of money laundering and terrorist	X□	□
	financing
12.	Climate and environmental risks	X□	□
13.	Wealth Management	□	X□
14.	Information & digital technology ( 7 ) (*)	□	X □
15.	Cyber Risk ( 8 )	X□	□
16.	Human resources, remuneration and incentive	□	X□
	systems
17.	Accounting and auditing	□	X □
18.	Data quality management ( 9 )	X□	□
19.	Expertise in corporate functions (audit, legal,	□	X □
	corporate, organisation)
20.	10) International Experience (	X□	□
21.	Insurance market and products	X□	□

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making	□	X□
23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	□	X□
24. Result orientation and motivation	□	X□
25. Authenticity, ability to stand up and communicate (transparency, proper presentation and defence of owns ideas)	□	X□
26. Assertiveness, ability to engage in dialogue and persuasion	□	X□
27. Knowledge of the English language	□	X□

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area and Activities performed: Full Professor in Business Organization, Vice-Rector for Organization and Human Resources Company or entity concerned: University of Pavia Period: Professor since 2002, Vice Rector since 2015

Area and Activities performed: Member of the Board of Directors Company or entity concerned: Prestitalia Spa (Gruppo Intesa Sanpaolo) Period: since 2022

Area and Activities performed: Member of the Board of Directors Company or entity concerned: Neva Sgr (Gruppo Intesa Sanpaolo) Period: since 2023

Area and Activities performed: Member of the Steering Board; Chairman of Committee on guidance, monitoring and assessment of asset management and equity investing Company or entity concerned: Fondazione Cariplo Period: 2019-2023

Area and Activities performed: Member of the Board of Directors Company or entity concerned: Lux Gest Asset Management S.A. (Gruppo Intesa Sanpaolo) Period: 2020 - 2023

With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;

i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • □X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • □ I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• l) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) □ I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • □ I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □X I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am Full Professor in Business Organization at University of Pavia ( ¹¹) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;

¹¹ Please enter the office held and the details of Public Authority employer.

p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

Pavia, 24/03/2025

(Place and date)

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

Pavia, 24/03/2025

(signature)

CURRICULUM VITAE

Pietro Previtali is Vice-Rector for Organization and Human Resources at the University of Pavia and Full Professor of Business Organization at the Department of Economic and Management. He is the founder and President of the Interdepartmental Research Center for the Organization and Governance of Public Administration at the University of Pavia.

The curriculum vitae consists of the following sections:

• a) Appointments in corporate and supervisory bodies of companies and entities
• b) Postgraduate specializations
• c) Teaching activities
• d) Scientific publications

a) APPOINTMENTS IN CORPORATE AND SUPERVISORY BODIES OF COMPANIES AND ENTITIES (over the last 10 years)

Present

2024-present	Member of the Board of Directors, IED - Istituto Europeo di
	Design
2023-present	Member of the Board of Directors, Neva Sgr (Intesa Sanpaolo
	Group)
2023-present	Member of the Board of Directors, Mondeox Srl
2023-present*	Member of the Board of Directors, Rusell Srl
2022-present	Member of the Board of Directors, Prestitalia Spa (Intesa
	Sanpaolo Group)
2022-present	Vice President, IRCCS Casimiro Mondino Foundation
2021-present	Member of the Board of Directors, Fondazione Comunitaria
	della Provincia di Pavia Onlus
2021-present	Member of the Steering committee, CNAO Foundation –
	National Center for Oncological Hadron Therapy
2019-present	Chairman of the Supervisory Board, Le Vele Foundation

* This appointment will cease with effect from 1/04/2025

Completed Appointments

2015-2024	Chairman of the Supervisory Board, Val Cavallina Servizi Srl
2019-2023	Member of the Steering Board, Fondazione Cariplo; Chairman of Committee on guidance, monitoring and assessment of asset management and equity investing
2020-2023	Member of the Board of Directors, Lux Gest Asset Management S.A. (Intesa Sanpaolo Group)
2015-2023	Chairman of the Supervisory Board, Eucentre Foundation
2015-2018	Chairman of the Supervisory Board, ASM Pavia

OTHER EXPERIENCES IN EVALUATION BOARD

Active Appointments

2024-present	Member of the Evaluation Board, ATS Pavia
2019-present	Chairman of the Evaluation Board, IRCCS Policlinico San Matteo
	Foundation, Pavia

Completed Appointments

2021-2024	Member of the Evaluation Board, ASST Niguarda
2016-2020	Chairman of the Evaluation Board, ASST Valtellina
2016-2020	Chairman of the Evaluation Board, ATS Città di Milano
2014-2017	Chairman of the Evaluation Board, I.S.S.M. "Vittadini"
2014-2017	Chairman of the Evaluation Board, Pavia Higher Education
	Institution for the right to Study
2014-2017	Chairman of the Evaluation Board, I.S.S.M. "G. Puccini"

b) GRADUATE AND POSTGRADUATE QUALIFICATIONS

2001	PhD in Business Economics and Management, Bocconi
	University, Milan (XIV Cycle, 1999-2001)
1997	Master's in Accounting, Financial reporting, and Control, organized under the auspices of the Pavia Consortium for Postgraduate Studies, University of Pavia – Final grade: 110/110
	with honors
1996	Degree in Economics and Business, University of Pavia – Final grade: 110/110. Awarded the Banca del Monte di Lombardia Prize for one of the best theses from the Faculty of Economics (Academic Year 1995-96)

c) TEACHING ACTIVITIES

Since 1998, Professor in Organization, Human Resource Management, Compliance, and Information Systems for Bachelor's, Master's, and Doctoral programs at: University of Pavia (1998-present), Bocconi University (1999-2010), University of Insubria (1997- 2001). Since the 2019/2020 academic year, Scientific Director of the 2nd -level Master's

program in "Management and Leadership for Organization and Strategic Direction in Healthcare" at the University of Pavia (VI edition).

d) SCIENTIFIC PUBLICATIONS

Author of over 130 scientific publications on corporate governance, compliance, information systems, and the management of business and public entities. Below is a selection of publications in the fields of management and corporate governance.

Articles in peer-reviewed international journals

• 1. Re B., Sanguineti F., Previtali P., 2024, Navigating organizational change through a processual perspective on the transition towards the circular economy: Save the Duck case study, Journal of Organizational Change Management, Vol. ahead-of-print No. ahead-ofprint. https://doi.org/10.1108/JOCM-05-2024-0248
• 1. Previtali P., Cerchiello P., 2023, Corporate governance and anti-corruption disclosure, Corporate Governance - The International Journal of Business in Society, DOI: 10.1108/CG-06-2022-0275
• 1. Previtali P., Denicolai S., 2022, Innovation strategy and digital transformation execution in healthcare: The role of the general manager, Technovation,https://doi.org/10.1016/j.technovation.2022.102555
• 1. Previtali P.; Zucchella A., Strange R., 2021, Proactive and reactive views in the transition towards circular business models. A grounded study in the plastic packaging industry, International Entrepreneurship and Management Journal, https://doi.org/10.1007/s11365-021-00785-z
• 5. Previtali P., Cerchiello P., 2020, Corporate governance and the responsiveness of organisations to a change in accreditation standards, Quality in Higher Education, 27 (1), 123-133, https://doi.org/10.1080/13538322.2020.1833417
• 1. Previtali P., Zucchella A, Circular business models for sustainable development: A "waste is food" restorative ecosystem. Business Strategy and the Environment, 2019; 2: 274–285, https://doi.org/10.1002/bse.2216
• 1. Previtali P., Cerchiello P., Patterns Of Compliance with Soft Regulation in Italian Listed Companies, International Journal of Disclosure and Governance, 2019, Volume 16 (1), 37-46, https://doi.org/10.1057/s41310-019-00055-z
• 1. Previtali P., Cerchiello P., The determinants of whistleblowing in public administrations: an analysis conducted in Italian health organizations, universities, and municipalities, Public Management Review, 2018, Volume 20 (11), https://doi.org/10.1080/14719037.2017.1417468
• 1. Previtali P., Cerchiello P., Structuring supervisory board for an anti-corruption strategy: a new application of a compliance system, Corporate Governance - The International Journal of Business in Society, 2017, Volume 1, ISSN: 1472-0701, https://doi.org/10.1108/CG-09-2015-0126
• 10. Previtali P., Offshore IT Sourcing: Decision Making Process in an Italian Banking Group, Economia Aziendale Online, Business and Management Sciences, International Quarterly Review, Vol 1, No 1, 2010, ISSN 1826-4719, http://dx.doi.org/10.4485/ea2038-5498.41-47

Chapter in international scientific books

• 1. Previtali P., Decastri M., Gagliarducci F., Scarozza D., Understanding the use of Smart Working in Public Administration: the experience of the Presidency of the Council of Ministers, in Lazazzara A., Ricciardi F., Za S. (Eds.), Exploring Digital Ecosystems Organizational and Human Challenges, Springer, 2020, ISBN 978-3-030-23664-9
• 1. Previtali P., Scarozza D, Forte S, How technology has redefined human resource practices? Understanding the use of smart working, in Cantoni F. e Mangia G. (eds.), Human Resource Management and Digitalization, Routledge Giappichelli, 2018, ISBN: 9-788892-114258
• 13. Previtali P., Evolutional patterns of intranet applications. Organizational issues and information systems' success, in Zakariya Belkhamza & Syed Azizi Wafa, Measuring Organizational Information Systems Success: New Technologies and Practices, Igi Global, 2012, ISBN: 978-1-46660-170-3

Monographs

• 14. Previtali P., Forma e responsabilità organizzativa ai sensi del decreto legislativo 231/ 2001, Aracne Editrice, Roma, 2012, ISBN 978-88-548-5195-5
• 15. Previtali P., Modelli organizzativi e compliance aziendale. L'applicazione del D.Lgs 231/2001 nelle imprese italiane, Giuffrè Editore, Milano, 2009, ISBN 88-14-14602-0

16. Previtali P. e Cioccarelli G., Le fondazioni ex bancarie, Giuffrè Editore 2002, ISBN: 88-23-80787-5 17. Previtali P., Pasini P., Tecnologie web e intranet aziendali, 1999, Etas, ISBN 88-453-0901-0

Articles in peer-reviewed national journals

• 1. Previtali P., The application of legislative decree no. 231/2001 through organizational models: rhetoric or real effectiveness? Impresa Progetto - Electronic Journal of Management, vol. 2, 2017, ISSN 1824- 3576
• 1. Previtali P., Faggioli G., Contromisure organizzative e tecnologiche al reato di violazione del diritto d'autore, Rivista 231 sulla responsabilità amministrativa delle società e degli enti, n.1 2010, ISSN 2239- 2416
• 1. Previtali P., Il reato di frode informatica ai sensi del D.Lgs 231/2001: standard di controllo e procedure per la compliance del modello organizzativo, Rivista 231 sulla responsabilità amministrativa delle società e degli enti, n.1 2007, ISSN 2239-2416
• 1. Previtali P., Colpa e responsabilità di manager o di aziende? Modelli organizzativi, procedure e standard di controllo ex decreto legislativo 231, Economia & Management, Rivista della Scuola di direzione aziendale dell'Università Bocconi, n. 1, 2007, RCS Libri, ISSN: 1120-5032
• 1. Previtali P., Morabito V., Pace S., Marketing degli ERP per le PMI: un'indagine empirica sui resellers italiani, Economia & Management, n. 4, 2005, RCS Libri, ISSN: 1120-5032
• 1. Previtali P., L'impatto organizzativo delle information and communication technologies, serie working paper del Dipartimento di Ricerche Aziendali dell'Università degli Studi di Pavia, gennaio 2004 e Economia Aziendale, On line Review, n. 2, 2004, ISSN 1826-4719
• 1. Previtali P., Bodega D., Cioccarelli G., I processi erogativi nelle fondazioni di origine bancaria, in Il Risparmio – Rivista dell'Associazione fra le casse di risparmio italiane, n. 1 2003, ISSN: 0035-5615

Chapters in national books

• 1. Previtali P., Decreto legislativo 231/2001 e legge n. 190/2012 nelle (ex) municipalizzate: criticità e opportunità di sviluppo manageriale, in Previtali P., Procaccini R., Zatti A., (a cura di) Trasparenza e anticorruzione: la nuova frontiera del manager pubblico, Pavia University Press, 2016
• 1. Previtali P., La presunzione di colpa organizzativa ai sensi del D.Lgs 231/2001, in Mella P. e Velo D. (a cura di), Creazione di valore, corporate governance e informativa societaria, Giuffrè, 2007, ISBN 88-14- 13409
• 1. Previtali P., Denicolai S., Mantenere e riparare per competere. Network management come strumento di competitività, in Mercurio R. (a cura di), Organizzazione, regolazione e competitività, Mc – Graw Hill, 2006, ISBN 88-386-6388-2
• 1. Previtali P., Denicolai S., Francesconi A., Metodologie di sviluppo delle intranet aziendali; in Cantoni F. e Mangia L. (a cura di), Metodologie di sviluppo dei sistemi informativi nelle organizzazioni: teorie e casi aziendali, F. Angeli, 2005, ISBN: 88-464-6188-6
• 1. Previtali P., La bancassicurazione, Osservatorio sull'innovazione finanziaria 1999 del NEWFIN Centro Studi sull'Innovazione Finanziaria dell'Università Commerciale L. Bocconi di Milano, Bancaria Editrice 1999, ISBN: 88-449-0090-4
• 1. Previtali P., Nota metodologica, in Gabriele Cioccarelli, La bancassicurazione. Il settore, le strategie e gli assetti organizzativi, Guerini 1999, ISBN: 888335020-0
• 1. Previtali P., DHL International Italia (Cap 3), Riello Bruciatori Legnago S.p.A. (cap. 4), FIAT Auto S.p.A. (cap. 5) ; in Paolo Pasini, Tecnologie informatiche e conoscenza manageriale, ETAS Libri 1998, ISBN: 8845309029

Pavia, 24/03/2025

SIGNATURE

The undersigned is aware that, pursuant to art.76 of DPR 445/2000, flase declarations, falsification of documents, and the use of false documents are punishable under the penal code and special laws. Furthermore, the undersigned authorizes the processing of personal data in accordance with art. 23 D. Lgs. 30 giugno 2003 n°196 – "Personal data protection code" – and art. 13 GDPR 679/16 – "European regulation on the protection of personal data." The undersigned declares that the information provided in this curriculum vitae is true and accurate.

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OE ENTITIES

The undersigned PIETRO PREVITALI born in PAVIA on 27/03/1971 declares

□ not to hold any offices in other companies or entities

□X to hold the following offices in other companies or entities

COMPANY/INSTITUTION	OFFICE	SINCE
Neva Sgr (Gruppo Intesa Sanpaolo)	Member of the Board of Directors	2023
Prestitalia Spa (Gruppo Intesa Sanpaolo)	Member of the Board of Directors	2022
IED Istituto Europeo di Design	Member of the Board of Directors	2024
Mondeox Srl	Member of the Board of Directors	2023
Russell Srl	Member of the Board of Directors	2023*
Fondazione IRCCS Casimiro Mondino	Vice President	2022
Fondazione Comunitaria della Provincia di Pavia Onlus	Member of the Board of Directors	2021
Fondazione CNAO – Centro nazionale di adroterapia oncologica	Member of the Steering Committee	2021

* This appointment will cease with effect from 1/04/2025

and undertakes to provide any updates until the acceptance of the position.

DATE 24/03/2025

SIGNATURE

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpacio S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year, I, the undersigned Prof. Maria Alessandra Stefanelli (fiscal code STFMLSA67A944Z), born in Bologna (Italy) on January 27, 1964, Italian nationality

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

A With regard to independence

• a) X I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Aticle 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

> With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no, 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and citteria established for members of the management body and key function holders of banks; Guldelines on the assessment of the members of the management body and key function holders -- updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• o professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• a management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas		Level achieved
		Basic/Good	Very Good/Excellent (")
	Banking and financial markets (*)
	2. Banking and financial activities and products (*)
	3. Banking and financial requlatory framework (*)		×

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (I) banking and financial markets; (II) regulatory framework and relevant legal requirements; (ii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (Iv) risk management (Identling, controlling and miligating the main types of risk of a credit Institution); (v) accounting; (v) assessing the effectiveness of a credit institution's governance mechanisms almed at ensuring effective supervision, management and control; (vil) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent fevel as: experience gained at an executive level or In context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and hdepth training and consisting of a cultural background experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are that someone is expert in, that are appropriate in relation to the office taken up,

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge Issed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

4. Strategic planning and an understanding of		×
corporate strategic guidelines or the business
plan of a credit institution and implementation
thereof (*)
5. Risk management (identification, assessment,		×
monitoring, control, and mitigation methods of
the main types of risks of a credit institution,
including the member's responsibilities in these
processes) (*)
6. Knowledge of sustainability issues (ESG)		×
7. Internal control systems and other operational	×
mechanisms (*)
8. Knowledge of the global dynamics of the		×
economic and financial system
9. Organizational and corporate governance		×
structures, and assessment of the effectiveness
of the governance mechanisms of the credit
institution, aimed at ensuring an effective system
of supervision, management and control (*)
10. Interpreting a credit institution's financial		×
information, identifying key issues based on this
information and appropriate controls and
measures (*)
11. Prevention of money laundering and terrorist		×
tinancing
12. Climate and environmental risks		×
13. Wealth Management		X
14. Information & digital technology (') (*)	×
15. Cyber Risk (6)	×
16. Human resources, remuneration and incentive		×
systems
17. Accounting and auditing	×
18. Data quality management (9)	X
19. Expertise in corporate functions (audit, legal,		×
corporate, organisation)
20. International Experience (10)		X
21. Insurance market and products		X

¹ Within the guidance expressed by the Board of Directors in the Qualitative and Quantitialive Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been devel of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expessed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹¹ in the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlightling the need to provide, within the new Board, a greater presences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making		×
23. Capacity for collaboration and influence and (encouragement and a appropriate constructive sharing of professionalism and opinions and resolution of potential conflicts)		×
24. Result orientation and motivation		X
ability to stand 25. Authenticity, and up communicate (transparency, proper presentation and defence of owns ideas)		×
26. Assertiveness, ability to engage in dialogue and persuasion		×
27. Knowledge of the English language	×

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area and Activities performed: INDEPENDENT BOARD MEMBER Company or entity concerned: INTESA SAN PAOLO SPA . Period: 2019-2021/ 2022-2025.

Area and Activities performed: UNIVERSITY FULL PROFESSOR OF ECONOMIC LAW Company or entity concerned: UNIVERSITY OF BOLOGNA Period: SINCE FEBRARY 2011 AT PRESENT

Area and Activities performed: HEAD OF DEPARTMENT OF LEGAL STUDIES OF ECONOMICS AND BUSINESS Company or entity concerned: UNIVERSITY OF BOLOGNA Period: 2009-2012

Area and Activities performed: VICE DEPUTY PRESIDENT OF THE SCHOOL OF ECONOMICS, MANAGEMENT AND STATISTICS Company or entity concerned: UNIVERSITY OF BOLOGNA Period: 2012-2015

Area and Activities performed: HEAD OF DEPARTMENT OF SOCIOLOGY AND BUSINESS LAW Company or entity concerned: UNIVERSITY OF BOLOGNA Period: 2015-2018

> With regard to integrity and reputation

g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;

• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

> With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • o I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) 1 am able to provide a sufficient time commitment to perform the Company, having taken note of the guidance provided by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors.

> With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) a l am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • X I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .............................................................................................................................................................................. requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;

¹¹ Please enter the office held and the details of Public Authority employer.

• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) o I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

l also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

X comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);

i) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

Bologna, March 17, 2025

a Alessandra Stefa

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulation and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entitles identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by faw to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the recification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Bologna, March 17, 2025

Prof.sa Maria Alessandra Stefahelli

Prof. Maria Alessandra Stefanelli Maria Alessandra Stefanelli PERSONAL INFORMATION ACCADEMIC CARREER 1992 Assistant Professor in Administrative Law, University of Bologna 1992 - 2012 Member of Department of Legal Studies of Economics and Business, University of Bologna 1999 - 2007 Associate Professor of Economics Law (SSD IUS/05), University of Bologna 2004 - 2011 Reviewer for the Research Quality Evaluation (ANVUR - National Agency for the Evaluation of the University and Research System) SONE 2000 Member of the Ph.D Board in Law and Economics, University of Bologna 2006-2009 Member of the Ph. D. Board in Law and Economics of Industrial Relations, University of Bologna 2005 - 2020 Member of the Committee for the assignment of teaching and tutoring contracts in the legal area, School of Economics and Management, University of Bologna 2007 - 2010 Full Professor (with tenure track) of Economics Law (SSD IUS/05), assuming duties on October 1, 2007, University of Bologna 2007 - 2013 Erasmus Coordinator for Faculty of Economics, managing exchanges with Prague and Budapest, University of Bologna 2009 - 2012 Head of Department of Legal Studies of Economics and Business, University of di Bologna 2010 - 2017 Member of the Ph.D Board in European Law -- curriculum in European Law and Economics 2010 - present Full Professor of Economics Law (SSD IUS/05).

CHICKHUSA

Curriculum Vitae

CERTIFIED

:

:

	Curriculum Vilae	Prof. Maria Alessandra Stefa
2012 - present	Member of Sociology and Business Law Department
2012 - 2015		Deputy Head of the Department of Sociology and Business Law, University of Bologna
2012 - 2015		Deputy President of the School of Economics, Management and Statistics, and Member of the Council of the School of Economics, Management, University of Bologna
2013 - present	University of Bologna	Member of the SME's Research Centre, Department of Sociology and Business Law,
2014 - 2015	University of Bologna	Member of the University Research Evaluation Committee (VRA) for Area 12 - Legal Area,
2015 - 2018		Head of Department of Sociology and Business Law, University of Bologna
2015	Sociology and Economic Law, University of Bologna	Member and representative of the Scientific Committee for the legal area, Department of
2017 - 2018	of Sociology and Business Law	Member of the Scientific Board of Bononia University Press (BUP) as Head of Department
2018 - present	Business Law, University of Bologna	Director of the Center for Advanced Studies for SMEs, Department of Sociology and
2018 - Dresent	University of Bologna	Member of the Steering Committee of the Department of Sociology and Business Law,
2018 - present	University of Bologna	Member of the Ph.D. Board in European Law, curriculum in European Market Law,
2018 - 2020		Member of the International Advisory Board - Italian Labour Law e-Journal
2019 - 2023	Single Market	Member of the Jean Monnet Centre of Excellence Consumers & SMEs in the Digital
2021 - present	the Evaluation of the University and Research System)	Reviewer for the 2015-2019 Research Quality Evaluation (ANVUR - National Agency for
2021 - present	Member of the Advisory Board - Journal of Law, Market & Innovation
2022 - present	Member of the Advisory Board - Innovazione e Diritto
2022 - present	Member of the Advisory Board - Percorsi Costituzionali

certified

.......... :

:

:

11 2011-01-1

	Curredum Vilas	Prof. Maria Alessandra Stefa
2022 - Diesent	Member of the Committee of reviewers - Il Foro Padano
2022 - present		Member of the Interdisciplinary Research Center on Social Rights, University of Bologna
TEACHNGACTWIIIES
Academic Years 1990-91. 1991-92, 1992-93	School of Economics, University of Bologna	Lecturer for Public Law and Tourism Legislation, School for economic tourism operators,
Academic Years 1992-93, 1993-94	Bologna	Lecturer for Administrative Law and Economic Law, School of Economics, University of
Academic Year 1994-95	Economics, Rimini Campus, University of Bologna	Professor of Public Economic Law, Bachelor's Degree in Economics of Tourism, School of
Academic Years 1985-96, 1996-97, 1997-98, 1998-99	Studi sull'Amministrazione Pubblica), University of Bologna	Lectures and workshops on specific topics like Public organization of Tourism, Master degree in Regions and Local government (Regioni e governo locale), School of Specialization in Public Administration Studies (SPISA - Scuola di Specializzazione in
Academic Years 1995-96, 1996-97, 1997-98, 1998-99	Economics, Rimini Campus, University of Bologna	Professor of Public Economic Law, Bachelor's Degree in Economics of Tourism, School of
Academic Year 2001-02	Economics, University of Bologna	Professor of Public Economic Law, Master's Degree in Law and Economics, School of
Academic Years 2002-03, 2003-04, 2004-05, 2005-06	School of Economics, University of Bologna; Economics, School of Economics, University of Bologna	Professor of Law of Financial Intermediaries, Bachelor's Degree in Law and Finance, Professor of Law of financial Markets and of Banking Law, Master's Degree in Law and
Academic Years 2004-05, ------------------------------------------------------------------------------------------------------------------------------------------------------ 2006-07	Economics, University of Bologna	Recognition for excellence in teaching based on student evaluations, School of
Academic Year 2006-07	School of Economics, University of Bologna; Economics, School of Economics, University of Bologna	Professor of Law of Financial Intermediaries, Bachelor's Degree in Law and Finance, Professor of Law of Financial Markets and of Banking Law, Master's Degree in Law and
Academic Year 2007-08	Economics, University of Bologna; University of Bologna;	Professor of Law of Financial Markets, Master's Degree in Law and Economics, School of Professor of Banking Law, Master's Degree in Law and Economics, School of Economics, Professor of Economics Law (bank and stock exchange contracts), Bachelor's Degree in

. L

: :

:

			CERTIFIED
	Curriculum Vilae	Prof. Maria Alessandra Stela
		Accounting and Business Economics, School of Economics, University of Bologna
Academic Year 2008-09		Professor of Economic Law (bank and stock exchange contracts), Bachelor's Degree in Accounting and Business Economics, School of Economics, University of Bologna
Academic Year 2009-10	Professor of Public Economics Law, Master's Degree in Law and Economics, School of Economics, Management and Statistics, University of Bologna; Professor of Public Law and of Economics Law, Bachelor's Degree in Economics and Business Management, School of Economics, Management and Statistics, University of Bologna; Professor of Banking Law and of Economics Law, Master's Degree in Law and Economics, School of Economics, Management and Statistics, University of Bologna
2012-13, 2013-14, 2014-15	Economics, Management and Statistics, University of Bologna	Academic Years 2011-12, Professor of Economics Law, Master's Degree in Law and Economics, School of
Academic Years 2010-11, 2011-12, 20-2013, 2013-14, 2014-15, 2015-16, 2016-17, 2017-18, 2018-19	School of Economics, Management and Statistics, University of Bologna	Professor of Financial Intermediaries Law, Bachelor's Degree in Financial Markets and Institutions, School of Economics, Management and Statistics, University of Bologna; Professor of Public Economic Law, Bachelor's Degree in Management and Marketing,
Academic Years 2014-15, 2015-16, 2016-17, 2017-18, 2018-19	Management and Statistics, University of Bologna	Professor of Banking Law, Master's Degree in Law and Economics, School of Economics,
2020-2021, 2021-2022	and Management, University of Bologna; Institutions; School of Economics, and Management, University of Bologna; School of Economics and Management, University of Bologna	Academic Years 2019-2020, Professor of Banking Law, Master's Degree in Law and Economics, School of Economics, Professor of Financial Intermediaties Law, Master's Degree in Financial Markets and Professor of Banking Law, Bachelor' s Degree in Economics, Markets and Institutions,
Academic Years 2022-2023, 2023-2024, 2024/2025	Professor of Banking Law, Master's Degree in Law and Economics, School of Economics, and Management, University of Bologna; Professor of Financial Internediaries Law, Master's Degree in Financial Markets and Institutions, School of Economics, and Management, University of Bologna; Professor of Banking Law, Bachelor's Degree in Economics, Markets and Institutions, University of Bologna
COMMITHES
1990-91, 1991-92	courses, School of Economics, University of Bologna;	Academic Years 1989-30, Member and chair of Evaluation Committee for Public Law and Administrative Law Member and chair of Evaluation Committee for Public Law and Tourism Legislation, School for Economic Tourism Operators, School of Economics, University of Bologna
Academic Years 1992-93. 1993-94, 1994-95	Law courses, School of Economics, University of Bologna;	Member and chair of Evaluation Committee for Administrative Law and Public Economic

:

. U

..... :

			CERTIFIED
	Curnculum Vitae	Prof. Maria Alessandra Stef:
	Member and chair of Evaluation Committee for Public Economic Law course, Bachelor's Degree in Economics of Tourism, School of Economics, Rimini Campus, University of Bologna
Academic Years 1995-1996, 1996-97, 1997-98, 1998-99	Member and chair of Evaluation Committee Public Economic Law course, Degree in Economics of Tourism, School of Economics, Rimini Campus, University of Bologna; Member of Evaluation Committee for Public Economic Law course, School of Economics, University of Bologna
Academic Year 2001-2002	Member and chair of Evaluation Committee for Public Economics Law and Financial Intermediaries Law courses, School of Economics, University of Bologna; Member of the University Evaluation Committee for Research Grants abroad
present	Academic Year 2002-2003 - Member and chair of Evaluation Committee for Financial Intermediaries Law and Banking Law courses, School of Economics, Management and Statistics, University of Bologna
From Academic Years 2002- 2003 to Academic Years 2018-2019	Member and chair of Evaluation Committee for Public Economics Law course, School of Economics, Management and Statistics, University of Bologna
Academic Year 2004-05	Member of Teaching Committee, Bachelor's Degree in Economics and Finance, School of Economics, University of Bologna; School of Economics' Member of the Steering Committee for University Language Centre (CILTA Centro Interfacoltà Linguistica Teorica Applicata), University of Bologna
2006	Member of the Selection Committee for the recruitment of Associate Professor (SSD IUS/05 Economics Law), Università Telematica "G. Marconi"
Academic Year 2007-08	Member of Faculty Committee for evaluating university activities in relation to the Censis survey, School of Economics, University of Bologna
2017	Member of the Evaluation Committee for the Assignment of University Scholarships, School of European Studies 'Miguel Servet, Paris
2011	Member of the Study Committee for the Drafting of the Model Departmental Regulation, University of Bologna
Academic Year 2014-15	Member of the Selection Committee for the Ph.D in European Law
2015	Member of the Selection Committee for the recruitment of an Associate Professor (SSD 1US/05 Economics Law), University of Milan
2015	Member of the Selection Committee for the recruitment of a Research Fellow (SSD IUS/05 Economics Law), University of Bologna
2017	Member of the Selection Committee for the recruitment of a Full Professor (SSD IUS/05 Economics Law), University of Venice - Ca Foscari

CERTIFIED

: ..... :

: 1,777

and the comments

: " "" .

		Curriculum Vitae	Prof. Maria Alessandra Stefa
2017		Member of the Selection Committee for the recruitment of a Tenure-track Assistant Professor (SSD IUS/05 Economics Law), University of Bologna
2018		Member of the Selection Committee for the recruitment of a Tenure-track Assistant Professor (SSD IUS/05 Economics Law), University of Bologna
2019		Member of the Selection Committee for the recruitment of a Full Professor (SSD IUS/05 Economics Law), University of Bologna
2019		Member of the Evaluation Committee for a transition from Tenure-track Assistant Professor to Associate Professor (SSD IUS/05 Economics Law), University of Bologna
2020		Member of the Examination Board for the PhD Final Exam, Academic Year 2020
2020		Member of the Evaluation Committee for a transition from Tenure-track Assistant Professor to Associate Professor (SSD IUS/05 Economics Law), University of Bologna
2023		Member of the Selection Committee for the recruitment of a Full Professor (SSD IUS/05 Economic Law), University of Bologna
EDUCATION
1936		Degree in Economics, University of Bologna, with a score of 110/110 cum laude
ર્વાવ		Degree in Law, University of Camerino, with a score of 110/110 cum laude
ADDITIONAL INFORMATION
Projects. Seminars	Conterences,	Projects:
		She has participated in numerous research projects, including the following: · I piani regolatori generali nella prospettiva della riforma del governo locale (General Regulatory Plans in the Perspective of Local Government Reform) - 60% Research Project, 1990; · Permanenze utopiche nel governo del territorio in Italia (Utopian Permanences in Territorial Governance in Italy) - National Interest Research Project, 1990, · Le imprese transnazionali - CTN- nell'ordinamento giuridico italiano (Transnational Corporations (TNCs) in the Italian Legal System) - 60% Research Project, 1995; · Il fine istituzionale "ricerca scientifica" nel decreto legislativo n. 460/97 sulle ONLUS (The Institutional Purpose of "Scientific Research" in Legislative Decree No. 460/97 on Non- Profit Organizations (ONEUS)) - 60% Research Project, 1998; · Le istruzioni di vigilanza della Banca d'Italia: natura e forza giuridica (The Supervisory
		Instructions of the Bank of Italy: Nature and Legal Force) - 60% Research Project, 2000;

emarket

· Ambiente. Tutela, fruizione e sostenibilità economica (Environment: Protection, Usage, and Economic Sustainability) - 60% Research Project, 2004;

· Il mercato imperfetto e regolazione del sistema finanziario (The Imperfect Market and Regulation of the Financial System) - 60% Research Project, 2005.

Additionally, her research includes the analysis of public regulation in the entrepreneurial and industrial sectors and economic freedoms in both national and EU legal frameworks, with the aim of evaluating their actual efficiency and addressing the complex issue of socalled "improper burdens" on businesses (RFO 2007, 2008, 2009).

From 2010 to 2012, she served as Scientific Coordinator of the PRIN 2009 Research Unit on New Forms of Organization and Legal Instruments in Social-Health Integration.

Currently, she is a Member of PRIN 2017, focusing on The Essential and Competitive Role of Specialized Courts and Alternative Dispute Resolution Mechanisms in Financial Law as a Precondition for the Attainment of Socially Desirable Levels of Public and Private Enforcement. Lessons from History in Administrative and Business Law and the Future of Judicial Review in European Financial Law in Light of European and National Fundamental Rights.

Participation in Conferences and Seminars:

Participation in conferences and seminars is also noted, and as an example, the following are highlighted:

• Presentation at Per una definizione dell'utopia: metodologie e discipline a confronto Conference, organized by Istituto Suor Orsola Benincasa Napoli and Centro interdipartimentale di Ricerca sull'Utopia University of Bologna, September 12-14, 1990 entitled Permanenze utopiche nella normazione italiana per il governo del territorio: prime riflessioni (published in Per una definizione dell'Utopia. Metodologie a confronto, a cura di Nadia Minerva, Longo, Ravenna, 1992, pp. 421- 447, and in in Studi in onore di Gustavo Vignocchi, Mucchi, Modena, 1994, pp. 1081-1128)

• Presentation at Caduta di qualità delle sentenze in campo ambientale Conference, San Leo, May 16-17, 1992, entitled Processo ed interessi alla tutela ambientale

• Presentation at I servizi pubblici locali. Evoluzioni e prospettive Conference, Imola, November 29, 1993, entitled La tutela dell'utente e del cittadino attraverso l'organizzazione di servizi pubblici (published in I servizi pubblici locali. Evoluzioni e prospettive, Maggioli, Rimini, 1995, pp. 89-94)

• Presentation at La Legge Quadro sull'Appalto dei Lavori Pubblici Conference, Rimini, April 15-16, 1994, entitled Sistema delle fideiussioni e libertà di mercato

• Presentation at La questione dei centri storici Conference, Caserta, November 3-4-5, 1994, entitled Centri storici e servizi pubblici

• Presentation at Cartur: per un turismo all'insegna della qualità della vita Conference, organized by Movimento Consumatori, Bellaria, April 8, 1995, entitled Lineamenti giuridici

emarket

per la costruzione di una tutela dell'utente di servizi pubblici turistici (published in Per un turismo all'insegna della qualità della vita, S. Arcangelo di Romagna, Rimini, 1995)

• Presentation on Servizi pubblici privatizzati: quale tutela per l'utente? at Le privatizzazioni negli enti locali Conference, organized by University of Bologna and CRESEM, Forlì, May 5, 1995

• Presentation on Le Istruzioni della Banca d'Italia per la prevenzione della crisi bancaria at La prevenzione dalla crisi bancaria nell'ordinamento italiano e comunitario Conference, Taormina, November 9-11, 1995, published in Quaderni della Rivista di diritto dell'impresa, Napoli, 1996, pp. 243-246, and in II diritto dell'economia, 1996, pp. 613-617)

• Presentation on Alcune riflessioni sul modello di "Gruppo bancario" nel testo unico 1º settembre 1993, n.385 at the Conference La crisi del gruppo bancario, organized by University of Palermo, June 13-16, 1996 (published in II diritto dell'economia, 1996, pp. 633-635)

• Presentation on Il tempo come fattore di tutela dell'utente nelle Carte dei servizi pubblici at La rilevanza del tempo nel diritto commerciale e nel diritto dell'economia Conference, organized by Department of Private law and Italian and compared labour law, University of Macerata, April 20, 1999 (published in La rilevanza del tempo nel diritto commerciale, Giuffrè, Milano, 2000, pp. 49-59)

• Presentation on Le fondazioni bancarie e la Carta della donazione at the Conference II nuovo ruolo delle fondazioni bancarie nell'economia civile, organized by Centro studi per la ricerca e la formazione sulle fondazioni, University of Bologna and Associazione tra Casse e Monti dell'Emilia-Romagna, June 30, 1999

~ Seminar at Collegio Superiore University of Bologna on Ripensare la vigilanza pubblica del mercato finanziario alla luce delle nuove normative comunitarie, March 26, 2012

• Seminar at Collegio Superiore University of Bologna on La Costituzione economica europea: riflessioni su coesione finanziaria e coesione sociale, April 2, 2012

• Seminar on Il Microcredito come strumento di inclusione finanziaria e sociale, tra finanza etica e capitalismo parassitario, Veritatis Splendor Diocesi Bologna, April 12, 2012

• Presentation on Il quadro normativo di riferimento italiano ed europeo per le PMI, Round Table Discussion II ruolo delle PMI nell'attuale contesto economico, School of Economics, University of Bologna, May 9, 2012

• Presentation on L'inefficacia della regolazione giuridica delle Micro e delle PMI nel contesto europeo, Ph. D. Programme European Law, University of Bologna, June 5, 2013

Prof Maria Alessandra Stef:

emarket

• Presentation on Erogazione della prestazione medica tra diritto alla salute, principio di autodeterminazione e gestione ottimale delle risorse sanitarie, Round Table Discussion PRIN 2009, Specialization School in Legal Professions "E. Redenti", University of Bologna, November 22, 2013

• Presentation on Regolazione pubblica delle Micro e Piccole, Medie Imprese at the Conference Regolazione e contratti d'impresa, School of Economics, Management and Statistics, Forli Campus, University of Bologna, March 7, 2014

• Seminar on Regolazione e organizzazione pubblica all'esportazione: Small Medium Enterprises e mercato russo, One year Master in Relazioni internazionali d'impresa: Italia Russia, University of Bologna, April 11, 2014

• Presentation on L'imprenditorialità femminile giovanile tra regolamentazione giuridica e sviluppo economico, Imprenditorialità femminile e strumenti di inclusione e sviluppo per le giovani migranti Conference, University of Bologna, November 30, 2016 (published in Europa oltre le nazioni, Mimesis, Milan, 2017, pp. 237-240)

• Seminar series on Architettura giuridica europea e nazionale e forme di vigilanza bancaria, PhD Programme in European Law, Academic year 2018 - 2019

• Supervisor of the Short Course on Digital technologies in EU regulations, Jean Monnet Centre of Excellence SMEs, 18 May 2021

• Presentation at Mobilità automatizzata, connessa e sicura come nuova frontiera della mobilità sostenibile Conference, March 8, 2023

• Presentation at Il settore dei trasporti nella sua dimensione automatizzata e connessa: nuove sfide giuridiche tra responsabilità degli operatori e sostenibilità economica, sociale e ambientale Conference, October 30, 2023

Publications

• Vincoli ed impacci al commercio con l'estero nel contenzioso doganale, in Il diritto dell'economia, 1989, pp. 213-229

• Alcune considerazioni critiche in ordine alla nuova organizzazione del sistema doganale, in Il diritto dell'economia, 1990, pp. 121-128

• Permanenze utopiche nella normazione italiana per il governo del territorio: prime riflessioni, in Per una definizione dell'Utopia. Metodologie a confronto, a cura di Nadia Minerva, ed. Longo, Ravenna, 1992, pp. 421-447 (also in Studi in onore di Gustavo Vignocchi, Mucchi, Modena, 1994, pp. 1081-1128)

• Due recenti proposte di riforma dell'organizzazione pubblica del turismo: un esempio di quel che ci aspetta con le riforme istituzionali?, in Il diritto dell'economia, 1992, pp. 381-396, and pp. 626-633

• L'organizzazione pubblica del turismo nell'ordinamento italiano, Cedam, Padova, 1992, pp. 1-224 (studio monografico)

• La tutela dell'utente dei pubblici servizi, Cedam, Padova, 1994, pp. 1- 223 (monograph)

• Lineamenti giuridici per la "costruzione" di una tutela dell'utente di servizi pubblici turistici, in Per un turismo all'insegna della qualità della vita, S. Arcangelo di Romagna, Rimini, 1995, pp. 38-52

• La tutela dell'utente e del cittadino attraverso l'organizzazione di servizi pubblici, in I servizi pubblici locali. Evoluzioni e prospettive, Maggioli, Rimini, 1995, pp. 89-94

• La riforma della amministrazione pubblica del turismo, Cedam, Padova, 1995, pp. 1-227 (studio monografico)

• Alcune riflessioni sul modello di "Gruppo bancario" nel testo unico 1° settembre 1993, n.385, in II diritto dell'economia, 1996, pp. 613-617

• Le Istruzioni della Banca d'Italia per la prevenzione della crisi bancaria, in Quaderni della Rivista di diritto dell'impresa, Napoli, 1996, pp.243-246 (and also in II diritto dell'economia, 1996, pp. 633-635

• La tutela dell'utente di servizi pubblici essenziali, in Studi in onore di Feliciano Benvenuti, Mucchi, Modena, 1996, pp. 1577-1607

• Il "potere di istruzione" della Banca d'Italia. Elementi di introduzione al tema, in Il diritto dell'economia, 1999, pp. 611-651

• Il tempo come fattore di tutela dell'utente nelle Carte dei servizi pubblici, in La rilevanza del tempo nel diritto commerciale, Giuffrè, Milano, 2000, pp. 49-59

• Le istruzioni di vigilanza della Banca d'Italia. I. Parte generale, Cedam, Padova, 2003, pp. 1-238, edizione aggiornata di Le istruzioni di vigilanza della Banca d'Italia. I. Parte generale, Cedam, Padova, 2002, pp. 1-220

• L'intervento delle fondazioni di origine bancaria e la mission delle community foundations nel settore dei servizi sociali, in Sanità pubblica e privata, 2004, pp. 603-630

emarket

• Le difficili problematiche del trasferimento della conoscenza dal sistema universitario al sistema delle imprese, in Collana Scuola di specializzazione in Studi sull'Amministrazione pubblica, Bononia University Press, 2004, pp. 1-74 (monograph)

• Le imprese strumentali delle fondazioni di origine bancaria, Cedam, Milano, (editor) 2005, pp. 1- 237

• Mercati regolati?, in Giust. Amm., 2006, on line

• Problematiche in ordine alla efficacia della regolazione pubblica in materia di informazione finanziaria, in Diritto dell'economia, 2009, pp. 297-329

• Commento all'art. 11, comma 8, in M. Rispoli Farina-A. Irace, L'attuazione della direttiva Mifid. Decreto legislativo 17 settembre 2007 n. 164, Giappichelli, Torino, 2010, pp. 321-326

• Il riconoscimento normativo delle piccole e medie imprese. Regole e realtà produttiva, Cedam, Padova, 2011, pp. 1-176 (monograph)

• L'adeguatezza della regolamentazione giuridica del microcredito a livello globale e le mancate sfide del sistema creditizio, in Studi in memoria di Antonio Cicognani, Cedam, Padova, 2012, pp. 653-684

• Considerazioni in tema di regolamentazione giuridica del microcredito e le mancate sfide del sistema creditizio, in Innovazione e diritto, 2013, pp. 104-132

• Profili di costruzione della tutela dell'utente del servizio socio-sanifario, in Innovazione e diritto, 2013, pp. 39-64

• Profili di costruzione dell'utente dell'utente del servizio socio - sanitario, in M. Sesta (a cura di), L'erogazione della prestazione medica tra diritto alla salute, principio di autodeterminazione e gestione ottimale delle risorse sanitarie, Rimini, 2014, pp. 773-802

• Osservazioni critiche sulla regolazione giuridica delle micro, piccole e medie imprese. La dimensione "minore" come misura per una nuova regolamentazione dell'industria e per la ripresa economica, in G. Lemme (ed.), Diritto ed economia del mercato, Padova, 2014, pp. 203-244

• Prime riflessioni in tema di regolazione pubblica del commercio con l'estero alla luce del nuovo TTIP (Transatiantic Trade and Investment Partnership), in Innovazione e Diritto, 2015, pp. 128-157

emarket

• La tutela del risparmiatore nella European Banking Union: la necessità di un nuovo rapporto tra persona e mercato, in Percorsi Costituzionali, 2016, pp. 497-509

• Micro impresa, regolazione giuridica e rinascita economica. Riflessioni in ordine alla costruzione di un nuovo modello di sviluppo economico e sociale, in Percorsi Costituzionali, 2017, pp. 973-989

• Le small business come modello giuridico di resilienza industriale europea, in Percorsi Costituzionali, 2017, pp. 705-719

• L'imprenditorialità femminile giovanile tra regolamentazione giuridica e sviluppo economico, in Europa oltre le nazioni. Una sfida aperta, Milano, 2017, pp. 237-240

• Small and Medium sized Enterprises e Mercato Unico Digitale nella regolamentazione giuridica europea, in Percorsi Costituzionali, 2018, pp. 225-240

• Osservazioni critiche sulla regolazione giuridica delle micro, piccole e medie imprese. La dimensione "minore" come misura per una nuova regolamentazione dell'industria e dello sviluppo economico, in G. Lemme (ed.), Diritto ed economia del mercato, Padova, 2018, pp. 199-231

• Regtech e equity crowdfunding. Sperimentazioni nella regolazione giuridica del mercato finanziario digitale, in Percorsi Costituzionali, 2019, pp. 177-192

• Administrative Burdens e Small Business. Una pubblica amministrazione per l'impresa di dimensione minore, in Federalismi.it, 2019, pp. 1-13

• La nuova strategia europea per le PMI. Innovazioni giuridiche digitali: la piattaforma europea "fit for the future" e i "digital innovation hub", in Innovazione e Diritto, 2020, pp. 1-17

• PMI, mercato digitale e regolazione giuridica: la dimensione internazionale, in Percorsi Costituzionali, 2021, pp. 1-18

• PMI, Europa, Industry 5.0. Osservazioni giuridiche in ordine alla nuova sovranità digitale, in Percorsi Costituzionali, 2021, pp. 115-136

• Spunti di riflessione in tema di regolazione giuridica del mercato del trasporto marittimo nel contesto pandemico e post pandemico, in Il Diritto Marittimo, 2021, pp. 932-945

• Small Business enterprises and the digital revolution, in F. Marrella - N. Soldati (a cura di), Arbitrato, contratti e diritto del Commercio internazionale - Arbitration, contracts and

Curring them Vitas

emarket

international trade law, Milano, Giuffrè, 2021, pp. 257-267

• Small Business in Europa. Regolamentazione giuridica a geometria variabile, in G. Lemme (ed.), Diritto ed economia del mercato, Milano, Wolters Kluver, 2021, pp. 213-237

• Mercato, consumatori digitali, giustizia predittiva. Le recenti prospettive di revisione della normativa europea in materia di soluzione alternativa delle controversie, in Percorsi Costituzionali, 2023, pp. 515-529

• Digital innovation in the legal framework of SMEs, in E. Carbonara - M.R. Tagliaventi (a cura di), SMEs in the digital era, Edward Elgar, Cheltenham, 2023, pp. 176-191

• European SMEs and the Digital Single Market. The Dynamics of New Regulation, Franco Angeli, Milano, 2023, pp. 1-154 (monograph)

• Mobilità automatizzata, connessa e sicura come nuova frontiera della mobilità sostenibile, in II Diritto Marittimo, 2023, pp. 519-561, by M. Burzacchi, M. Musi, M.A. Stefanelli

• Politiche industriali alla luce del nuovo framework giuridico europeo digitale e green: le piattaforme EFTI e la Rete Transeuropea dei trasporti, in Il Diritto Marittimo, 2024, pp. 7 11-727

• Online Dispute Resolution. Regolamentazione europea ed evoluzione normativa, in M. Bertolissi - M. Lamandini - R. Nania (ed.), La tutela giurisdizionale effettiva dei diritti Sfide e prospettive in materia economico-finanziaria nell'ordinamento italiano, Milano, Franco Angeli, 2024, pp. 579 - 591

• Small Business in Europa. Regolamentazione giuridica a geometria variabile, in G. Lemme (ed.), Diritto ed economia del mercato, Milano, Wolters Kluver, 2025, pp. 209-254

Memberships

Founding Member and Honorary Member of A.D.D.E. (Association of Professors of Economics Law)

Member of A.D.D.U. (Women's Association of University Professors), University of Bologna Member of the Board of Directors of A.D.D.U. (Women's Association of University Professors), University of Bologna, 2020-2024. Member of the Scientific Board of A.D.D.U. (Women's Association of University Professors), University of Bologna, 2024-present

Member of F.I.D.A.P.A (Italian Federation of Women in Arts, Professions, and Business ) -Bologna Chapter

Member of the Fondazione Cassa di Risparmio in Bologna

Prof Maria Alessandra Stefane) li

Bologna, March 21, 2025

CERTIFIED

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OE ENTITIES

The undersigned Prof.sa Maria Alessandra Stefanelli born in Bologna (Italy) on January 27, 1964,
declares declares

x not to hold any offices in other companies or entities

a to hold the following offices in other companies or entities

COMPANY / INSTITUTION	OFFICE	FROM

and undertakes to provide any updates until the acceptance of the position.

Bologna, March 21st, 2025 Prof.sa Maria Alessanora Stefanell

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

l, the undersigned Bruno Maria Parigi (fiscal code PRGBNM57T21D612Y), born in Firenze on 21/12/1957, nationality italian,

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

୍ୟ With regard to independence

• a) X I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Miristry of the Economy and Finance no. 169/2020;
  • □ I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Gridelines and the ECB Guide.

> With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (³) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular. Bank of Italy Circular no. 285 of 17 December 2013 as amended, Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and internation of the Economy
body and key function holders of banks: Cuiddings an the second of the managem body and key function holders of banksing on the assessment of the suitability of the management
hody and key function holders of backs on the assessment of the suitability o body and key function holders – updated by the ESMA on 2 July 2021, in implementation of the management in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal government postmands on 2 July 2011/06/2011 Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience in reverlified to the same time are counted only for the period of time period of time period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held:
• ם professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• ם management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas	Level achieved
	Basic/Good	Very Good/Excellent (b)
Banking and financial markets (*)
. Banking and financial activities and products (*)
>. Banking and financial regulatory framework (*)	0

⁴ Article 13.4.2, letter a), of the Articles of Association.

^් Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of againess strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring and mitjaating the main type of risk of a credit institution); (v) accounting (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through such model specific the more the bodies, if for more than one termined and explained their possession, making them demontable. In colpulation in general, very good and excellent knowledge and skills are those that spossoble, making meeting to the office taken up.

Consistently with the guidelines expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	0	×
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)		×
6. Knowledge of sustainability issues (ESG)		×
7. Internal control systems and other operational mechanisms (*)		×
8. Knowledge of the global dynamics of the economic and financial system	D	×
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)		×
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)		X
11. Prevention of money laundering and terrorist fınancıng		X
12. Climate and environmental risks		×
13. Wealth Management		×
14. Information & digital technology ( ) (*)	X
15. Cyber Risk (8)	ា	×
16. Human resources, remuneration and incentive systems	D	×
17. Accounting and auditing	X	D
18. Data quality management (9)		×
19. Expertise in corporate functions (audit, legal, corporate, organisation)	×
20. International Experience (10)		×
21. Insurance market and products		X

⁷ Within the guidelines expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the experise of the Board, it is particularly important to suggest that the professional skills in the fields of Information & Digital Technology and Cyber Security have been developed and since in the medical of the neutlering and control experience, also considering the role blayed in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

² Within the aforementioned guidelines expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with stration in detaming in was considered in provincity of the Group in line with the technological development path undertaken.

il in the context of the aforementioned guidelines expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presences acquired at an international level, including within companies outside the Group, institutions and organizations based in various markets and termorial ares. Such skills could be further strengthened although they are already included in the current composition. These skills wold enhance an international perspective of the Jane and and the Garren of the Group's reference market"

22. Business judgment and capacity for inquiry,		×
analysis, and decision-making
23. Capacity for collaboration and influence	0	×
(encouragement and appropriate and
constructive sharing of professionalism and
opinions and resolution of potential conflicts)
24. Result orientation and motivation		X
25. Authenticity, ability to stand up and	0	×
communicate (transparency, proper
presentation and defence of owns ideas)
26. Assertiveness, ability to engage in dialogue and	0	×
persuasion
27. Knowledge of the English language	1	X

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were mainly gained in the performance of the following activities:

Area and Activities performed: Independent non-executive director Company or entity concerned: Intesa Sanpaolo Assicura Period: since 2019 to 2022

Area and Activities performed: Independent non-executive director and member of the Risk and Sustainability Committee Company or entity concerned: Intesa Sanpaolo Spa

Period: since 2022 to present

Area and Activities performed: Teaching activity in financial fields Company or entity concerned: University of Padova Period: since 2003 to 2025

> With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

• With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets:
  • o I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) □ I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • ם I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • X I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am Full Professor of Financial Economics at the University of Padova (11) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) = I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

¹¹ Please enter the office held and the details of Public Authority employer.

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the . information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment . of the requirements.

l attach duly signed

• comprehensive information regarding their personal and professional characteristics and i) management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

(Place and date)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For in the Regulation and list of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller, (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national nok companies, external controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nemination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking me provisions concerning the verification of the suitability requirements for members of the Particillis Concernity the of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in articul of a

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and ortside the European Union that carry out activities connected with, instrumental to, or in support na foare of the Controller, and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The undated bist of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, for a perior of retention periods established by law. Specifically, your Personal Data is neerally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or buy post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Jupprity.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

03 20 25

March 2025 CURRICULUM VITAE

BRUNO MARIA PARIGI

Born: 21.12.1957, Florence, Italy Address: University of Padua Department of Economics and Management

Citizenship: Italian

Marital status: married, two sons

Current Positions

2001 (2005) to date, Professor (Full Professor) of Economics, University of Padua, Department of Economics and Management

April 2022 to date, non-executive independent director Intesa Sanpaolo S.p.A., member of the Risk and Sustainability committee

Education

1990 - Ph.D. in Economics, Rutgers University, New Brunswick, NJ, USA.

1987 - Master in Economics, Rutgers U.

1983-84 - ISTAO Course in Management and Economics, Ancona, Italy

1983 – Laurea (B.A.) in Economia e commercio, University of Florence; 110/110 cum laude. Thesis title: "Finanziamento degli Investimenti e Politica Monetaria".

Fields of Specialization Financial Intermediation, Industrial Economics, Applied Microeconomics

Academic affiliations since 2006 CESifo, Munich, Germany

Past positions

2014-2022, Director master's degree in Economics and Finance, University of Padua, Department of Economics and Management

2019-2022, member of the Board of Directors of Intesa Sanpaolo Assicura, Intesa Sanpoalo Group 1998-2001 November – Associate Professor, University of Padova, Faculty of Economics 1994-1998 - Researcher, University Ca' Foscari of Venezia, Department of Economics 1990-1994 - Assistant Professor, Department of Economics, Virginia Polytechnic Institute and State University, Blacksburg, VA 24061, USA

1985-90 - Graduate Student, Ph.D. Program in Economics, Rutgers U., New Brunswick, NJ, USA

Visiting positions

• 2023 May-June, Scholar Thematic Research Programme,Hong Kong Institute of Monetary and Financial Research, Hong Kong
• 2021 June-September (virtual visit) Hong Kong Institute of Monetary Research, Hong Kong
• 2019 February, Research Fellow, Monetary and Economic Department, Bank of International Settlements, Basel, Switzerland

2018

• July, Research Fellow, Monetary and Economic Department, Bank of International Settlements, Basel, Switzerland
• May-June, Visiting Fellow, Florence School of Banking, European University Institute
• 2017 May, Visiting Scholar, Bank of Finland
• 2016 May-June, Visiting Scholar, Banque de France
• 2015 April-June, Visiting Professor University of Zurich, Department of Banking and Finance
• 2014 March-May, Visiting Professor University of Zurich, Department of Banking and Finance
• 2013 July, Consultant Federal Reserve Bank of New York, Research Department

2012

• December, Consultant Federal Reserve Bank of New York, Research Department
• September, Visiting Scholar Program, Research Department, The Netherlands Central Bank
  • May, Consultant Federal Reserve Bank of New York, Research Department

2011

• December, Consultant Federal Reserve Bank of New York, Research Department
• May-June, Visiting Fellow, European University Institute
• 2010 August-September, Consultant Federal Reserve Bank of New York, Research Department

2009 December, Visiting Professor, Université de Paris Ouest-La Défense, Nanterre

2005 June-July – Visitor, CESIfo, University of Munich

2003 June-July – Research Visitor, European Central Bank, Francoforte

• November Visiting Scholar, London School of Economics, Financial Markets Group London
• June-July Visiting Professor, Finance and Consumption Group, European University Institute, Florence
• 2000 July Visiting Professor, Finance and Consumption Group, European University Institute, Florence.

• 1999 November Visiting Scholar, Federal Reserve Bank of Philadelphia, Research Department
• 1994 January-February, Visiting Assistant Professor, Université des Science Sociales de Toulouse, France
• 1994, January-July Fellow I.N.R.A., Université des Sciences Sociales de Toulouse, France
• 1985 Internship in OECD, Economics and Statistics Department, Paris.
• 1984 Internship in SNAMPROGETTI S.p.A., Feasibility studies unit, Milan.

Teaching experience

Ggraduate courses

1991-1992 - Industry Structure, in Ph.D Program, Virginia Polytechnic Institute.

1997 – Models of principal-agent in Ph.D. Program in Economics, Univ. of Venezia, Bologna, Modena, Padova

1998-2004 – Corporate Finance in Master's in economics and Business, Venice International University

2001-2015 Advanced Micro, Ph.D. Program in Economics and Management, Univ. of Padova

2003-2009 – Univ. di Padova, Economics for Finance, Master's in banking and finance

2005 – Univ. Munich, CES Lectures in Corporate Governance

• 2010-22- University of Padova, Financial Economics
• 2014 University of Zurich, Topics in Banking: Liquidity and Shadow Banking

2015 – University of Zurich, Topics in Banking: Capital Regulation and Relationship Lending

• 2017-22 Univ. Padova, Advanced Microeconomics
• 2023, 2024 Univ. Padova, Principles of Financial Economics
• 2023, 2024 Univ. Padova, Financial and Insurance Economics

Professional Training Courses

2018 Florence School of Banking, European Univ. Institute "Financial Regulatory Reforms and Systemic Risk: A post Crisis Assessment, Bruxelles, 5-6 September 2018 2020 Florence School of Banking, European Univ. Institute "Models for Financial Stability and

Prudential Policy, Florence, 4-5 February 2020

Undergraduate courses

1986-87 – Teaching assistant at Rutgers Un.: Intro to Macroeconomics and Intro to Microeconomics

1990 - Teaching assistant at Rutgers Un.: Introduction to Macroeconomics

1986- "Lecturer" at Rutgers Un., for Financial Institutions and Markets

1987 - 89 - "Lecturer" at Rutgers Un., for International Economics

1988 - "Lecturer" at Rutgers Un., for Corporate Finance

1990 - Virginia Polytechnic Institute: Money and Banking; Intro to Microeconomics

1991 - Virginia Polytechnic Institute: Industry Structure

• 1991-93 Virginia Polytechnic Institute: Money and Banking
• 1993 Contract Professor, Univ.of Trieste, Microeconomics of Financial Intermediation
• 1993 Introduction to Macro and Microeconomics at European Studies Center of Virginia Polytechnic Institute, Riva San Vitale, Svizzera.
• 1994 97 Univ. Venezia, Teaching assistant: Econometrics, Economia Politica
• 1998-99 Univ. Venezia, Economia Politica (Economics I)

1999-2003 – Univ. Padova, Economia Politica I

• 1999, 2000, 2002 Univ. Padova, Economics: Uncertainty and Information
• 2001-2009 Univ. Padova, Economics of money and financial markets
• 2010 2022 Univ. Padova, Money and Banking Università di Padova

Teaching evaluations

Teaching evaluations at the University of Padova. All available evaluations.
Course	Level	Academic year	Average score of the overall student's
			satisfaction (1=min 10=max)
Economia Politica I	I anno Corso laurea triennale	2001/02	7,95
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2001/02	7,91
Economia Politica: incertezza ed informazione	III anno Corso laurea triennale	2002/03	8,17
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2002/03	8,47
Economia Politica I	I anno Corso laurea triennale	2002/03	8,08
Economia Politica per la finanza	I anno Corso laurea specialistica	2003/04	9
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2003/04	8,29
Economia Politica per la finanza	I anno Corso laurea specialistica	2004/05	8,14
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2005/06	8,07
Economia Politica per la finanza	I anno Corso laurea specialistica	2005/06	8,59
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2006/07	7,25
Economia Politica per la finanza	I anno Corso laurea specialistica	2006/07	7,19
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2007/08	6,95
Economia Politica per la finanza	I anno Corso laurea specialistica	2007/08	5,68
Economia Politica per la finanza	I anno Corso laurea magistrale	2008/09	8,05
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2008/09	7,77
Economia Politica per la finanza	I anno Corso laurea magistrale	2009/10	5,76
Economia dei mercati monetari e finanziari	III anno Corso laurea triennale	2009/10	7,09
Money and Banking	III anno Corso laurea triennale	2010/11	8.20
Financial Economics	I anno Corso laurea magistrale	2010/11	6.72
Money and Banking	III anno Corso laurea triennale	2011/12	7,4
Financial Economics	I anno Corso laurea magistrale	2011/12	7,3
Money and Banking	III anno Corso laurea triennale	2012/13	8,8
Financial Economics	I anno Corso laurea magistrale	2012/13	7,6
Money and Banking	III anno Corso laurea triennale	2013/14	8,07
Financial Economics	I anno Corso laurea magistrale	2013/14	7,33
Money and Banking	III anno Corso laurea triennale	2014/15	8,13
Financial Economics	I anno Corso laurea magistrale	2014/15	7,59
Money and Banking	III anno Corso laurea triennale	2015/16	7,64
Financial Economics	I anno Corso laurea magistrale	2015/16	8,05
Money and Banking	III anno Corso laurea triennale	2016/17	7,98
Financial Economics	I anno Corso laurea magistrale	2016/17	7,57
Money and Banking	III anno Corso laurea triennale	2017/18	7,70
Financial Economics	I anno Corso laurea magistrale	2017/18	8,10
Advanced Microeconomics	I anno Corso laurea magistrale	2017/18	6,63
Financial Economics	I anno Corso laurea magistrale	2018/19	8,28
Money and Banking	III anno Corso laurea triennale	2018/19	7,55
Financial Economics	I anno Corso laurea magistrale	2019/20	8,21
Money and Banking	III anno Corso laurea triennale	2019/20	7,84
Advanced Microeconomics	I anno Corso laurea magistrale	2020/21	8.00
Financial Economics	I anno Corso laurea magistrale	2020/21	7.35
Money and Banking	III anno Corso laurea triennale	2020/21	7.87
Financial Economics	I anno Corso laurea magistrale	2021/22	8.21
Money and Banking	III anno Corso laurea triennale	2021/22	7.57
Advanced Microeconomics	I anno Corso laurea magistrale	2022/23	8.32
Financial Economics	I anno Corso laurea magistrale	2022/23	7.55

Continuation. Teaching evaluations at the University of Padova. All available evaluations.
Course	Level	Academic Year	Average score of the overall student's
			satisfaction (1=min 10=max)
Financial and Insurance Economics	I anno Corso laurea magistrale	2023/24	7.43
Principles of Financial Economics	I anno Corso laurea magistrale	2023/24	7.0
Financial and Insurance Economics	I anno Corso laurea magistrale	2024/25	8.11
Principles of Financial Economics	I anno Corso laurea magistrale	2024/25	8.36

Training activities

2000, 2002 Corporate Governance and Antitrust, Scuola Formazione Commercialisti, Padova, November

2001 Models to assess current economic and financial scenarios, CUOA, training course for private bankers

2018 5-6 September, training course for European Commission, DG FISMA, Financial regulatory reforms, and systemic risk: a post crisis assessment

Students supervision

1999-2022 – Univ. of Padova, Supervises more than 70 thesis

• 1994-98 Univ. of Venice, Supervises 18 thesis
• 1991 Virginia Polytechnic Institute: supervises research of four Ph.D. students
• 2006-10 supervises two Ph.D. students in Economics and Management, Univ. Padova
• 2003 member of the Doctoral Thesis Jury di Levent Yildiran, Université des Sciences Sociales de Toulouse
• 2009 member of the Doctoral Thesis Jury of Jung-Hyun Ahn, Université Nanterre Paris Ouest - member of the Doctoral Thesis Jury of Hubert Janos Kiss, University of Alicante
• 2010 member of the Doctoral Thesis Jury of Regis Bouther, European University Institute
• 2015 member of the Doctoral Thesis Jury of Grégory Claeys, European University Institute
• 2017 member of the Doctoral Thesis Jury of John Vourdas, European University Institute

Publications

• 1. "Configurazioni Patrimoniali e Rigidita' nel Mercato del Credito: Una Proposta di analisi", Note Economiche, n.5/6, 102-116, 1985.
• 1. "A Model of Borrowing and Lending with Reputation and Imperfect Information", Rivista Internazionale di Scienze Economiche e Commerciali, n.10/11, 951-966, 1988.
• 1. "Una nota sulle economie di scopo e sulle economie di scala nel sistema bancario italiano", Note Economiche, n.3, 576-590, 1989.
• 1. "Repeated Lending with Limited Liability Under Imperfect Monitoring", Economic Notes n.3, 468-489, 1992.
• 1. (with Clara Graziano) "Metodi alternativi di acquisizione di inputs da fornitori opportunistici" in Teoria dei contratti e mercato del lavoro, 87-106, a cura di Marco Dardi, E.S.I. Napoli, 1994.
• 1. "Self Selection in a Dynamic Credit Model", European Journal of Political Economy 10, 3, 571- 590, 1994.
• 1. (with Annalisa Luporini) "Multi-Task Sharecropping Contracts: The Italian Mezzadria" Economica 63, 445-57, 1996.
• 1. (with Clara Graziano) "Do Managers Work Harder in Competitive Industries?" Journal of Economic Behavior and Organization, 34, 489-498, 1998.
• 1. (with Fahad Khalil) "The Loan Size as A Commitment Device", International Economic Review, 39, 135-150, 1998.
• 1. (with Xavier Freixas) "Contagion and Efficiency in Gross and Net Interbank Payment Systems", Journal of Financial Intermediation, 7, 3-31,1998. Ristampato in S. Bhattacharya, A. W. Boot and A.V.Thakor (eds.) Credit, Intermediation and the Macroeconomy. Readings and Perspectives in Modern Financial Theory, Oxford University Press, Oxford, 2004
• 11."La Concorrenza nel settore bancario: una rassegna della letteratura" in Industria bancaria e concorrenza" (a cura di M. Polo), 19-66, Il Mulino, Bologna, 2000.
• 1. (with Xavier Freixas and Jean-Charles Rochet) "Systemic Risk, Interbank Relations and Liquidity Provision by the Central Bank" Journal of Money Credit and Banking August, 32, 611-638, 2000, Part 2. Ristampato in Goodhart C. and Illing G. (eds.) Financial Crisis, Contagion, and the Lender of Last Resort – A Reader, Oxford University Press, Oxford, 2002, and repreinted in Rochet Jean-Charles, (ed.) Why are there so many banking crises? The Politics and Policy of Banking Regulation, 195-223, Princeton University Press, Princeton 2008.
• 1. (with Giorgio Brunello e Clara Graziano) "Executive Compensation and Firm Performance in Italy" International Journal of Industrial Organization, 19, 133-161, 2001.
• 14.(with Giorgio Brunello e Clara Graziano) "CEO Turnover in Insiders Dominated Boards: The Italian Case" Journal of Banking and Finance, 27/6, 1027 – 1051, 2003.
• 1. (with Xavier Freixas and Jean-Charles Rochet) "The Lender of Last Resort: A 21st Century Approach" Journal of the European Economic Association, December 2004, 2 (6): 1085-1115. Reprinted in Rochet Jean-Charles, (ed.) Why are there so many banking crises? The Politics and Policy of Banking Regulation, 71-102, Princeton University Press, Princeton 2008.
• 16.(with Fahad Khalil e David Martimort) "Monitoring a Common Agent: Implications for Financial Contracting" Journal of Economic Theory, 135, 35-67, 2007.
• 1. (with Loriana Pelizzon) "Diversification and ownership concentration", Journal of Banking and Finance 32, 1743-1753, 2008.
• 1. (with Xavier Freixas) "The lender of last resort of the XXI century" in The First Global Financial Crisis of the 21st Century, Part ll June-December 2008, Edited by: Andrew Felton and Carmen M. Reinhart, A VoxEu.org Publication, CEPR, London, 2009
• 1. (with Erich Battistin and Clara Graziano) "Connections and Performance in Banker's Turnover" European Economic Review, 56, 470-487, 2012.

Publications (continued)

• 1. (with Antoine Martin) "Bank Capital Regulation and Structured Finance" Journal Money Credit and Banking, 45, 87-119, 2013.
• 1. (with Xavier Freixas) "Lender of last resort and bank closure policy" in Berger, A., Molyneux, P., Wilson, J. (eds.) Oxford Handbook of Banking, Oxford University Press, second edition, 2015.
• 1. National and supranational banking regulators: Between delayed intervention and time inconsistency, Banque de France, Financial Stability Review, 21, 87-94, 2017.
• 1. (with Michele Moretto, Marcella Lucchetta) "Optimal Bailouts, Bank's Incentive and Risk" Annals of Finance, 15, 3, 369-399, 2019; https://doi.org/10.1007/s10436-019-00346-z.
• 1. (with Xavier Freixas) "Lender of last resort: A new role for an old instrument" in Berger, A., Molyneux, P., Wilson, J. (eds.) Oxford Handbook of Banking, Oxford University Press, third edition, 2019. DOI: 10.1093/oxfordhb/9780198824633.013.20
• 1. (With Michael Brei, Leonardo Gambacorta, Marcella Lucchetta) "How effective are bad bank resolutions? New evidence from Europe", Journal of Financial Stability 67, 2023, https://doi.org/10.1016/j.jfs.2023.101153
• 1. (With Michele Moretto) "Competitive Runs on Government Debt" Int. Rev. of Economics and Finance, January 2024, 89, 131–158
• 1. (With Xavier Freixas) "The Lender of Last Resort in Today's World", Chapter 24 in Berger, A., Molyneux, P., Wilson, J. (eds.) Oxford Handbook of Banking, Oxford University Press, fourth edition, 2025

Conference proceedings

• 1. (with Gabriella Chiesa) "Editors' Note" agli atti del convegno della Rivista Research in Economics "Microeconomics of Financial Intermediation", Research in Economics, 52, 213- 215, 1998.
• 1. (with Xavier Freixas and Jean-Charles Rochet) "Systemic Risk, Interbank Relations and Liquidity Provision by the Central Bank" in Risk Measurement and Systemic Risk, Proceedings of the Second Joint Central Bank Research Conference, Bank of Japan, Tokyo, November 1998.

• 1. (with Xavier Freixas) "Contagion and Efficiency in Gross and Net Interbank Payment Systems", Payment Systems in the Global Economy: Risks and Opportunities, Proceedings of the 34th Annual Conference on Bank Structure and Competition,, Federal Reserve Bank of Chicago, May 1998
• 1. "Aspetti Economici e Psicologici dell'Unificazione Monetaria Europea" in L'Euro tra Psicologia ed Economia, a cura di R. Rumiati, Convegno Nazionale di Psicologia Economica, Padova14-15 Settembre 2000, 9-25, CLEUP, Padova 2001.
• 1. "Mercati finanziari e scambi internazionali dopo l'Euro" in, Euro ed Europa: Le Sfide Economiche e Poliviche, Padova 27 novembre 2001, Accademia Galileiana di Scienze, Lettere ed Arti in Padova, vol CXIV 2001-2002, Padova 2002.

Work in progress

• 1. (with Leonardo Gambacorta, Fahad Khalil) "Big Techs vs Banks", Hong Kong Institute of Monetary Research, Working Paper No.29/2021 December
• 1. (with Leonardo Gambacorta, Leonardo Madio) "Platform Lending" mimeo, Univ. Padova, March 2022

Working papers

• 1. (with Marco Cipriani and Antoine Martin) "Money Market Funds Intermediation, Bank Instability, and Contagion" Federal Reserve Bank of New York, Staff Report N. 599, February 2013.
• 1. (with Marco Cipriani, Patrick McCabe, and Antoine Martin) "Gates, Fees, and Preemptive Runs" Federal Reserve Bank of New York Staff Reports, n.670, April 2014
• 1. (with Marcella Lucchetta and Jean-Charles Rochet) "Bank Restructuring without Government Intervention" mimeo Univ. Padova, February 2019
• 1. (with Loriana Pelizzon and Elu Von Thadden) "A corporate asset pricing model: theory and evidence, mimeo July 2015
• 1. (with Xavier Freixas) "Banking regulation and Prompt Corrective Action" CESifo working paper n. 2136 November 2007
• 1. (with Leonard Nakamura) "Network Formation with Screening: The Case of the US Clearinghouses" Univ. of Padua, mimeo, April 2000
• 1. (with Leonard Nakamura) "Bank Branching", Virginia Polytechnic Institute, mimeo, August 1994
• 1. (with Richard Cothren) "Dynamic Incentive Contracts with Intertemporal Demand Substitution", Virginia Polytechnic Institute, mimeo, September 1994
• 1. "Timing Ability in the Portfolio Performance Test" mimeo, November 1989, revised May 1996.
• 1. (with Richard Cothren) "National Debt and Family Size" University of Venice, Nota di lavoro n.96.03, February 1996
• 11."The Filtering Function of Financial Intermediation" Virginia Polytechnic Institute, Department of Economics, working paper 90-12-01, December 1990, revised June 1992.

Communications to scientific conferences

• 1987 "A Model of Borrowing and Lending with Reputation and Imperfect Information", Conferenza nazionale di Teoria dei giochi e applicazioni, Bergamo.
• 1990 "The Filtering Function of Financial Intermediation" Second Southeastern Economic Theory Conference, University of Florida, Gainesville.
• 1991 "Multi-Task Sharecropping: The Case of Central Italy from XIV to XX Century" Third Southeastern Economic Theory Conference, Vanderbilt Un.
• 1992 "Bank Branching", Fourth Southeastern Economic Theory Conference, U. of Alabama, Touscalousa.
• "Bank Branching", ASSET Meeting, U. of Toulouse, France.
• 1993 "Dynamic Incentive Contracts with Intertemporal Demand Substitution", European Meeting of the Econometric Society, Uppsala, Sweden.
• 1995 "Optimal Loan Size and Collection of Delinquent Consumer's Accounts" Conferenza nazionale di Teoria dei giochi e applicazioni, Siena.
• 1996 "Contagion and Efficiency in Gross and Net Interbank Payment Systems", European Economic Association Meeting, Istanbul e V Financial Conference, Università di Roma, Tor Vergata.
• 1998 "Competition in Banking: A Survey of the Literature" Conferenza di Ente Einaudi su Industria Bancaria e Concorrenza, Roma, October
• 2001 "Monitoring a Common Agent", Workshop on the Economics of Consumer Credit, European University Institute, March.

"Monitoring a Common Agent", EARIE Conference, Dublin, Ireland, August

2004 – "The Lender of Last Resort: A 21st Century Approach", European Economic Association, Madrid, August "Local Market Integration and Control Rights" European Meeting of the Econometric Society, Madrid, August

Communications to scientific conferences (continued)

• 2007 "Banking Regulation and Prompt Corrective Action" , CESifo Area conference on Applied Microeconomics, Munich, March16-17. "Banking regulation and Prompt Corrective Action", European Economic Association Meeting, Budapest, August. "Banking regulation and Prompt Corrective Action", EARIE Conference, Valencia, August. "Banking regulation and Prompt Corrective Action", ASSET Conference, Padova, November. "Banking regulation and Prompt Corrective Action" International Conference on Banking and Finance, University of Rome Tor Vergata, December.
• 2008 "Banking regulation and Prompt Corrective Action", Australasian Finance and Banking Conference, Sidney, December
• 2009 "Rules vs. discretion in times of financial innovation" CEPR conference on "Internationalization of Financial services. Competition and Regulatory Interaction in Europe" Milan, June
• 2010 "Competition in shareholders protection and portfolio diversification", Applied Microeconomics conference, CESifo, Munich, March
• 2011 "Bank capital regulation and securitization" Applied Microeconomics conference, CESifo, Munich, March
• 2013 "Connections and Performance in Banker's Turnover" Conference on Bank Foundations, Noise from Amerika, Firenze, February "Money Market Funds Intermediation, Bank Instability, and Contagion" Macro, Money and International Economy Conference, CESifo, Munich, February "Money Market Funds Intermediation, Bank Instability, and Contagion" Infiniti conference on International Finance, Aix-en-Provence, June "Money Market Funds Intermediation, Bank Instability, and Contagion" Macro, Banking, Finance Workshop, University of Milan Bicocca, September
• 2014 "Preemptive Runs" Applied Microeconomics conference, CESifo, Munich, March
• 2016 "Bad Banks and Underinvestment" Applied Microeconomics conference, CESifo, Munich, March "Non-Performing Loans, Underinvestment and Bad Banks" University of Sassari, Summer Workshop, Alghero, June
• 2017 "Closing a bank or making it safer?" Applied Microeconomics conference, CESifo, Munich, March
• 2018 "Bank Restructuring without Government Intervention" ASSET Conference, Florence, November

Communications to other conferences

• 2000 "Globalizzazione e diritti umani" panel on Economia, Finanza e Diritti Umani, Amnesty International e Banca Etica, Padova, April - "Aspetti Economici e Psicologici dell'Unificazione Monetaria Europea" Conference on "L'euro tra Psicologia ed Economia" Univ. Padova, Faculty of Psycology, Padova September.
• 2001 "Europa-America: La Guerra dei Mondi: I motori dello sviluppo made in USA" relazione al Collegio Universitario Don Mazza, March.
  • "Mercati Finanziari e Scambi Internazionali dopo l'euro" relazione al Convegno "Euro ad Europa: le sfide economiche e politiche" Accademia Galileiana di Scienze, Lettere ed Arti In Padova, November.

2002 – Discussion of "Considerazioni Finali della Relazione del Governatore della Banca d'Italia", Univ. Padova, 10 June.

• Introduction to Conference "La Svolta del Settembre 1992", Univ. Padova, 14 September. 2005 – Introduction to Conference on "OPA/OPS nel settore bancario italiano, Univ. Padova, 21 May.

• Speaker "Dove va l'economia italiana tra errori del passato ed incertezze future" Lions Club Castelfranco Veneto (TV), September 20.

2006 – Speaker at Intesa Private Banking, Economia e mercati finanziari: prospettive e opportunità, Padova, June.

2007 – Introduction to conference on "Finanza e sviluppo imprenditoriale", Univ. Padova, March 19.

• Speaker at Conference Intesa Private Banking, Economia e mercati finanziari: prospettive e opportunità, Padova, September

2009 – Unindustria Padova, Speaker Scenarios for the economy, March

– Unindustria Padova, Speaker Scenarios for the economy, October

2010 – Treviso Association of Architects, Speaker on Scenarios for the economy, December

2012 – Speaker in "Orientarsi nell' attuale crisi economica tra cause e possibili rimedi" Lions Club Vicenza, 9 January

• Unindustria Veneto, Speaker on Scenarios for the economy, July
• 2013 Unindustria Treviso e Padova, Speaker on "Come Salvare il Capitalismo" January
• 2014 Veneto Banca, Speaker on "Il nuovo sistema bancario europeo" September
• 2015 Università della Terza Età di Montebelluna, Speaker on "Le banche italiane tra la crisi economica e l'unione bancaria europea" May
• 2016 Banque de France, "Rescue of Italian Regional Banks", June

– "Verso la Banking Union" Fondazione Cassa Risparmio di Padova, Padova, November

2021- speaker "Economia raccontata (ufficiale) vs economia percepita: una contrapposizione errata?" Lions Club Firenze Poggio Imperiale, October

Seminar activity

Seminars held at:

1985 - U. Firenze; 1987 - Rutgers U.; 1988 - Rutgers U.; 1989 - U. Firenze, Rutgers U.; 1990 - Virginia Polytechnic Institute, Florida International U., Columbia U., Virginia Pol. Inst., Univ. of Montreal, U. di Firenze; 1991 - U. Ancona, U. Udine, Virginia Pol. Inst.; 1992 - U. Torino, U. Firenze, U. Venezia, Virginia Pol. Inst.; 1993 - U. di Trieste, I.G.I.E.R., Seminari di Ricerca C.N.R.; 1994 - I.N.R.A. Toulouse, U. Venezia; 1995 - U. Udine, U. Venezia, I.G.I.E.R. Bocconi; 1996 - U. Venezia, U. Venezia, I.G.I.E.R.; 1997 - U. Cattolica Milano, U. Ancona, U. Venezia; 1998 - Ente Einaudi Roma, U. Venezia, U. Bologna, U. Padova.; 1999 Federal Reserve Bank of Philadelphia, Federal Reserve Bank of New York, CSEF U. Salerno; 2000 - European U. Institute, U. Padova; 2001 U. Losanna, Oxford University; 2002 - U. of Mannheim, Univ. of Freiburg; 2003 – European Central Bank, U. Padova; 2004 - U. Bologna, Ente Einaudi Roma, U. Roma "La Sapienza", U. Salerno; 2006 - U. Milano Bicocca, U. Cattolica Milano, U. Milano Statale, U. Politecnica delle Marche; 2007 - U. Trento; 2009 - U. Paris Ouest La Défense Nanterre; 2011 - Bangor Univ. Business School UK, Univ. Zurich; 2012 - The Netherlands Central Bank; 2016 - U. Venezia, Banque de France, U. Padova; 2017 - Univ. Zurich.; 2019 - Bank of International Settlements; UK Leuven; 2020 U. Padova, U. Bicocca; 2021 Hong Kong Institute of Monetary Research (webinar), Bank of International Settlements (webinar); 2023 Hong Kong Institute of Monetary Research.

1991-93 - Virginia Polytechnic Institute: Coordinates internal seminars of Department of Economics

1996 - 97 U. of Venice: Coordinates internal seminars of Department of Economics. 1999- 2003 U. of Padova: Coordinates seminars of Department of Economics

Conference organizations

1998 - (with Gabriella Chiesa) Scientific coordinator of conference of Research in Economics "Microeconomics of Financial Intermediation", Venice, January 1998.

• 1999 2002 U. of Padova: co-organizes seminars of Department of Economics Economiche
• 2001 Co-organizer of "Seminari itineranti" between U. Roma Tor Vergata, Venezia, Torino, Modena, Padova, Cattolica, Salerno.

2007 Conference Asset, Padova, member of the scientific committee

2008 Conference Asset, European University Institute, member of the scientific committee

Editorial activity and referee for professional journals and grants

Editorial activity

Referee for

1990-92 International Economic Review; 1991 J. of Economics and Management Strategy; 1994 Giornale degli Economisti; 1994, 95, 99 Research in Economics; 1995 Journal of Economics and Business; 1998 (con Gabriella Chiesa) Editor Special Issue Research in Economics, "Microeconomics of Financial Intermediation"; Review of Development Economics; 1999 Giornale degli Economisti; Zeitschrift für Nationalökonomie; JFI; Review of Economic Studies; 2000 Research in Economics; European Economic Review; JFI; 2001 American Economic Review; Economic Journal; Economic Notes. 2002 Economic Notes, CESifo Economic Studies, International J. of Industrial Organization, Giornale degli Economisti, JFI; 2003 J. of Money Credit and Banking; 2004 IJIO, Canadian J. of Economics; 2005 International J. of Industrial Organization, Annals of Finance; 2006 J. of the European Economic Association, JMCB, Review of Finance, International J. of Central Banking, Journal of Macroeconomics, EER, Review of Financial Studies; 2007 Geneva Risk and Insurance Review; Review of Economic Studies, JEEA, J. of Economic Dynamic and Control, JMCB; 2008 Review of Financial Studies, JET, International Journal of Central Banking, JEEA, CESifo Economic Studies, Economic Notes; 2009 JEEA, JMCB; 2011 JMCB, Rand, Economic Journal; 2013 MIT Press; 2014 Economics Letters, Oxford Economic Papers, J. Banking and Finance; 2015 The Manchester School, J. Banking and Finance, J. Finance; 2016 JMCB, J. Banking and Finance, Rand; 2017 J. of International Money and Finance; 2018 European Economic Review; 2018 Oxford Economic Papers; 2019 Journal of Finance, JMCB; 2020 Oxford Economic Papers.

Editorial activity

2000-2003 Member of Scientidic Committee of Giornale degli Economisti 2000-2015 Associate Editor, Research in Economics 1999-2000 Guest Associate Editor per Research in Economics

Reviewer

1998 Financial Management Association European Conference Reviewer 2001 European Finance Association, Conference Reviewer Da 2004 MIUR: PRIN, CIVR, FIRB various years 2007 Austrian Academy of Sciences Scholarship Reviewer 2011 Univ. Cà Foscari Venezia, research grant reviewer; post doc positions Univ. Calabria 2012 MIUR VQR 2004-2010. 2013 Research Council of Canada, Social Sciences and Humanities grant reviewer; reviewer for research grant Univ. Genova 2013, 2014, 2018, 2021, 2024 Czech Science Foundation grant reviewer 2015, 16 European Financial Association, conference reviewer 2016 MIUR VQR 2011-2014 2021 MIUR VQR 2015-2019

Research funding

2020-21 – Funding from Hong Kong Institute of Monetary Research, on "Big Techs vs Banks"

• 2012-2014 Coordinates Post doc U. Padova "Macro prudential regulation of banks: Assessing the impact of Basel III on local banks"
• 2009 -2011 Coordinates research project U. Padova "Come regolamentare l'innovazione finanziaria"
• 2006-9 Funding MIUR Azioni Integrate Italia-Spagna, X. Freixas-B.M. Parigi, Prompt Corrective Actions for Undercapitalized Banks.
• 2005 PRIN MIUR, Coordinates Univ. Padova unit on research Struttura della proprietà, incentivi, e protezione degli investitori
• 2003 PRIN MIUR, Coordinates Univ. Padova unit on research on Banche Centrali e Rischio Sistemico.
• 2002 PRIN MIUR, Coordinates Padova unit on research on Contratti locali per la diversificazione del rischio, ricerca e sviluppo e incentivi.
• 1999-2011 U. Padova, Basic research funds (ex 60%).

• 1999 U. Padova, Grant to study "Rischio sistemico e condotta delle banche centrali" with Xavier Freixas and Jean Charles Rochet.

• Bilateral Funding CNR "Contagion and Efficiency in Gross and Net Payment Systems"

• Funding from Fondation Banque de France, "Systemic Risk, Interbank Relations and Monetary Policy" con Xavier Freixas e Jean-Charles Rochet.
• Funding Banca d'Italia, Fondazione Cassa di Risparmio di Venezia, Federazione Veneta Banche di Credito Cooperativo to organize conference "Microeconomics of Financial Intermediation", Venezia 1998.
• Funding Ente Einaudi, Ricerca Industria Bancaria e Concorrenza "Competition in Banking: A Survey of the Literature".
• 1996 97 Funding CNR project "Il ruolo microeconomico macroeconomico del sindacato"
• 1996 Bilateral Funding CNR "The Economics of the Collection of Delinquent Consumers' Account: Theory and Empirical Evidence"
• 1995-98 U. Venezia, Basic research funding.
• 1991-92 Research grant, College of Arts and Sciences, Virginia Polytechnic Institute and State University, "Multi-task Sharecropping".

Academic awards

• 2005 Barclays Global Investors Prize for the best Corporate Governance paper at the European Finance Association Meeting, Moscow "Diversification and Ownership Concentration" (with Loriana Pelizzon).
• 1999 D.J. Jacobs Prize for the most significant paper in 1998 in Journal of Financial Intermediation; "Contagion and Efficiency in Gross and Net Payment Systems" (with Xavier Freixas).
• 1988- 89 "Marion Johnson" Fellowship per dissertazioni di Ph.D. in Economia, Rutgers Un., Graduate School.
• 1984 Price "A. Pirondini" for thesis, Facolta' di Economia e Commercio, Universita' di Firenze.

Service activity

2021-2022- member of bequest committee Univ. Padova.

• 2013-2016 President Student-Teacher Committee, School of Economics and Political Science, Un. Padova.
• 2013- 2022 President of Master in Economics and Finance, Department of Economics and Management, Univ. Padova
• 2009-12 President Master in Economics and Finance, Univ. Padova.
• 2003-09 President Master in Banking and Finance, Class 19/S, Facoltà di Economia, Univ. Padova.
• 2003-08 President Scientific Committee for Economics and Statistics, Univ. Padova.
• 2008 member of tenure committee for 1 professor SECS/P01
• 2009 member of tenure committee for 7 professors SECS/P01
• 2012 member of tenure committee for 1 professors SECS/P01
• 2010 member committee for competition SECS/P01 Associate Professor, Univ. Bergamo – member committee for competition SECS/P01 Full professor, Univ. Padova

Consulting activity

2005-06 – Consultant for Verona Civil Tribunal in two cases of default of Argentina bonds 2011 Occasional consultant for Hedge Fund Elliott Advisors, UK

2012-15 Consultant for General Electric Capital, Middle Market Report on Italy

2014-5 Consultant for CEO Veneto Banca

Foreign Languages English, French

I grant the consent to manage my personal information according to D.Lgs. 196/03.

Padova, 8 March, 2025

LIST OF THE MANAGEMENT AND CONTROL OFFICES Currently held in Other Companies or entities

I, the undersigned Bruno Maria Parigi, born in Firenze, on 21/12/1957, fiscal code: PRGBNM57T21D612Y,

declare that

ם I do not hold any offices in other companies or entities

X I hold the following offices

COMPANIES/ENTITIES	OFFICE	FROM
INTESA SANPAOLO SPA	Independent non-executive Director	29/04/2022

Date, 13/03/2025

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned BUSSO DONATELLA (fiscal code BSSDTL73H70I470Y) born in SAVIGLIANO (CN) on 30th JUNE 1973, nationality ITALIAN

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• − I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

With regard to independence

• a) X I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • □ I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • X administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• X administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• □ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• X university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• □ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) □ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas		Level achieved
		Basic/Good	Very Good/Excellent (6)
1.	Banking and financial markets (*)	□	X
2.	Banking and financial activities and products (*)	□	X
3.	Banking and financial regulatory framework (*)	□	X

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	□	X
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)	□	X
6. Knowledge of sustainability issues (ESG)	□	X
7. Internal control systems and other operational mechanisms (*)	□	X
8. Knowledge of the global dynamics of the economic and financial system	□	X
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	□	X
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	□	X
11. Prevention of money laundering and terrorist financing	X	□
12. Climate and environmental risks	□	X
13. Wealth Management	□	X
(7) 14. Information & digital technology (*)	□	X
(8) 15. Cyber Risk	□	X
16. Human resources, remuneration and incentive systems	□	X
17. Accounting and auditing	□	X
(9) 18. Data quality management	X	□
19. Expertise in corporate functions (audit, legal, corporate, organisation)	□	X
(10) 20. International Experience	□	X
21. Insurance market and products	X	□

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making	□	X
23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	□	X
24. Result orientation and motivation	□	X
25. Authenticity, ability to stand up and communicate (transparency, proper presentation and defence of owns ideas)	□	X
26. Assertiveness, ability to engage in dialogue and persuasion	□	X
27. Knowledge of the English language	□	X

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

• Area and Activities performed: Tenured university professor in economics and business subjects. Specifically: financial statements, consolidated financial statements, IFRS, financial instruments, financial management. Moreover, corporate governance and risk management. Research activities in the field of ESG and sustainability.
• Company or entity concerned: Università degli Studi Di Torino Dipartimento di Management "V. Cantino"
• Period: Second level lecturer (Professor) from October 2006 to January 2020 and first level lecturer (full professor) since February 2020
• Area and Activities performed: Independent director. The board role has allowed me to be actively involved in the governance mechanisms of listed companies, particularly in internal control, risk management, remuneration, related party transactions, sustainability report. I have been and continue to be a member of the relevant committees. I have served and currently serve as chair of the internal control and risk committee and the related party transactions committee. Gtech, Prima Industrie, and Cellularline are international groups with subsidiaries in numerous foreign countries.

Company or entity concerned: listed companies (Gtech, Prima Industrie, Dea Capital, Cellularline) Period: Since April 2012

Area and Activities performed: Independent director. Expertise in banking activities, products, regulations, and risk management. In addition, given the specific nature of Isybank's business, also skills in ICT and cyber risk. Member of the related party transactions committee at Isybank, chair of the internal control and risk committee (CCR) at Zurich Italy Bank, which is part of an international group.

Company or entity concerned: Isybank (former Banca ITB and then Banca 5) and Zurich Italy Bank Period: from April 2016 to 15th April 2024 in Isybank (ISP's subsidiary from 19/12/2016) and since 29th April 2024 in Zurich Italy Bank

Area and Activities performed: Statutory Auditor of listed companies. Specific expertise in control and supervisory activities, including in international groups (Reply).

Company or entity concerned: Reply and Iren Period: since April 2024 in Reply and since June 2024 in Iren

Area and Activities performed: statutory auditor and independent director of unlisted companies Company or entity concerned: Statutory auditor in small unlisted companies. Statutory auditor at De Agostini. Independent director of unlisted companies (in particular, Umbra Group and, currently, Osai Automation System, listed on Euronext Growth). Period: since 2010

Area and Activities performed: Professional advisor. Consulting and opinions on separate and consolidated financial statements, Italian GAAP (OIC), IFRS, financial instruments, and financial planning.

Company or entity concerned: listed and unlisted companies, both financial and non-financial Period: since 2000

With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • □ I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • X I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• l) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) □ I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • X I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □ I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .......................................................... at .....................................................(11) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

¹¹ Please enter the office held and the details of Public Authority employer.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

Moncalvo, 24th March 2025 (Place and date)

_______________________

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject
24th March 2025,	__________

Prof. Donatella Busso Full Professor of Economics and Business Administration – University of Torino Chartered Accountant – ODCEC Torino

Graduated in 1996, with honors in Economics and Business at the University of Turin Full Professor at the Department of Management "V. Cantino" (University of Turin) Affiliate Professor at ESCP Europe Italian Chartered Accountant (Dottore Commercialista) at ODCEC of Turin Of Counsel of RLVT (advisory firm in Turin) Independent director in listed and non-listed companies and statutory auditor in listed and non-listed companies. Consultant and speaker in training courses on IFRS and Italian GAAP financial statements and other topics (among the others, financial instruments and non-financial information)

Native Italian speaker, fluent English, intermediate French.

Academic career

• Full Professor of "Economics and Business Administration" at the Department of Management "V. Cantino" (University of Turin) (February 2020 to present). In particular, she is Professor of International Accounting Standards – IFRS, International GAAP and Financial Statement Analysis (taught in English) and Advanced Financial Accounting (Consolidated Financial Statements, business combinations and financial instruments under IFRS, US GAAP and Italian GAAP). She taught Financial Management, Consolidated Financial Statements and Separate Financial statements.
• Associate Professor of "Economics and Business Administration" (October 2006 to January 2020), Researcher (from 2000 to 2006) and Assistant Lecturer (from 1996 to 2000) at the Department of Management (University of Turin)
• President (from October 2018 to September 2024) of the post-graduate program (laurea magistrale) in Business Administration and Control (Amministrazione e Controllo Aziendale) (University of Turin)
• Vice Dean, responsible for teaching activities at the Department of Management, University of Turin from December 2012 to June 2015. Previously held the same position from October 2008 to December 2012 at the Faculty of Economics (Facoltà di Economia) of the University of Turin. The role consisted of overseeing all the teaching activities within the Department
• Affiliate Professor of Financial Accounting at the École Supérieure de Commerce de Paris (ESCP Europe) since October 2009 where she teaches Advanced International Financial Reporting (in English)
• Author of many publications about IFRSs, financial statements, financial instruments, consolidated financial statements and corporate governance, ESG. In particular, she is editor of the volume AA.VV. (editors: Dezzani F., Biancone P., Busso D.) IAS/IFRS since the first edition (2010) until the sixth edition (2022). Among the others, she is the author of chapters dedicated to financial instruments (IAS 32, IAS 39, IFRS 7, IFRS 9, IFRS 13)
• Member of Sidrea (Società Italiana dei Docenti di Ragioneria e di Economia Aziendale Italian Society of Accounting and Business Administration Professors), Aidea (Accademia Italiana di Economia Aziendale – Italian Society of Business Administration) and EAA (European Accounting Association). In Sidrea she is member of the Board of Directors.

Professional career

• Italian Chartered Accountant (Dottore Commercialista) from 18th July 2017
• Member of the Italian GAAP Group at Organismo Italiano di Contabilità (Italian Standard Setter) from July 2017
• Chair of the IFRS Committee of the Consiglio Nazionale dei Dottori Commercialisti e degli Esperti Contabili (Italian National Association of Chartered Accountants) since May 2023
• Consultant/Advisor for Italian listed and non-listed companies in the field of Financial statements, International Financial Reporting Standard (IFRSs), financial instruments, evaluation of companies, impairment test, financial risk analysis, business plans, non-financial information (ESG).
• Speaker and trainer, both in English and in Italian, in numerous training programs on financial accounting, IFRSs and consolidated financial statements for Italian listed companies and other primary institutions (both financial and non-financial companies).

Current offices held in listed and non-listed companies

• Independent director at Zurich Italy Bank S.p.A. (non-listed bank belonging to Zurich Insurance Group) since April 29th 2024. Chair of the Control and Risk Committee.
• Independent director at Cellularline S.p.A. (company listed at Euronext STAR Milan) since April 28th 2023. Chair of the Control and Risk Committee, Related Party Committee and member of the Remuneration Committee
• Statutory Auditor at Reply S.p.A. (company listed at Euronext STAR Milan) since April 23rd 2024.

Prof. Donatella Busso Full Professor of Economics and Business Administration – University of Torino Chartered Accountant – ODCEC Torino

• Statutory Auditor at Iren S.p.A. (company listed at Euronext Milan) since June 27th 2024.
• Statutory Auditor at De Agostini S.p.A. since June 30th 2023. Member of Surveillance Body since November 30th 2023.
• Independent director at Osai Automation Systems S.p.A. (company listed at Euronext Growth Milan) since April 27th 2023. Chair of the Control and Risk and Related Party Committee and member of the Remuneration Committee
• Director at Fondazione European School of Management Italia – Fondazione ESMI (appointed by the University of Torino) since February 24th 2023

Previous offices held in listed and non-listed companies

• Independent director at Isybank S.p.A. (formerly Banca 5 S.p.A. and Banca ITB S.p.A) since April 2016 to 15th April 2024. Isybank is a non-listed bank belonging to Intesa San Paolo Group since December 2016. In 2017, in 2019 and in 2022 she obtained the position opinion of BCE to serve as director). Member of the Related Party Committee since January 2021.
• Independent director at Prima Industrie S.p.A. (Italian listed company, index STAR) since April 2014 to April 2023 and member of the Control and Risk and Related Party Committee. Since April 2017 Chair of the Control and Risk Committee and Related Parties Committee and Lead Independent Director.
• Independent director at DeA Capital S.p.A. (Italian listed company, index STAR) since April 2015 to April 2023. Member of the Control and Risk and Related Parties Committee since April 2016. Since April 2019 Chair of the Control and Related Parties Committee and member of Surveillance Body.
• Independent director at Umbra Group S.p.A. (Italian non-listed company) since May 2017 to May 2022; member of the Remuneration Committee since February 2018.
• Independent director at GTECH S.p.A. (new company name of Lottomatica S.p.A.) and member of the Control and Risk Committee and of the Independent Directors Committee from May 2012 to April 6th 2015 when the company ceased to be quoted on the Italian Stock Exchange.
• Statutory auditor in non-listed companies (Tyco Electronics Italia Holding S.r.l., Theolab S.p.A., Candioli Farmaceutici S.p.A., Ecopack S.p.A., Arol S.p.A.).
• Alternate statutory auditor of Iren S.p.A. (from April 2018 to April 2021) and of Unipol Assicurazioni S.p.A. (from June 2015 to April 2018), appointed from the lists submitted by Assogestioni.

In compliance with the GDPR (Regulation EU 2016/679), I hereby authorize you to use and process my personal details contained in this document

Moncalvo, March, 24th 2025

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OE ENTITIES

The undersigned BUSSO DONATELLA born in SAVIGLIANO (CN) on 30TH JUNE 1973 declares

□ not to hold any offices in other companies or entities

X to hold the following offices in other companies or entities

COMPANY/INSTITUTION	OFFICE	FROM
ZURICH ITALY BANK S.P.A.	INDEPENDENT DIRECTOR	29th APRIL 2024
CELLULARLINE S.P.A.	INDEPENDENT DIRECTOR	28 th APRIL 2023
OSAI AUTOMATION SYSTEM	INDEPENDENT DIRECTOR	27 th APRIL 2023
S.P.A.
DE AGOSTINI S.P.A.	STATUTORY AUDITOR	30 th JUNE 2023
	MEMBER OF THE SURVEILLANCE	30th NOVEMBER 2023
	BODY
REPLY S.P.A.	STATUTORY AUDITOR	23rd APRIL 2024
IREN S.P.A.	STATUTORY AUDITOR	27 th JUNE 2024
FONDAZIONE EUROPEAN	INDEPENDENT DIRECTOR	24 th FEBRUARY 2023
SCHOOL OF MANAGEMENT
ITALIA – FONDAZIONE ESMI
SIDREA – SOCIETÀ ITALIANA	BOARD MEMBER	12 th DECEMBER 2024
DOCENTI DI RAGIONERIA E DI
ECONOMIA AZIENDALE

and undertakes to provide any updates until the acceptance of the position.

24th March 2025

SIGNATURE

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. – with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

I, the undersigned SILVIA MERLO (fiscal code MRLSLV68L68D205Z), born in CUNEO (CN) on 28/07/1968, nationality ITALIAN,

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A.;
• − I am suitable for the office, pursuant to the applicable regulations (1 ) and the Articles of Association (2 ).

I also declare that

➢ With regard to independence

• a) □ I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
  • □ I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

➢ With regard to professionalism and competence

c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3 ) the following for at least one three-year period, also alternatively:

□ administration or control activities or management tasks in the credit, financial, securities or insurance sector;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Article 13.4.1. of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

□ administration or control activities or management tasks in listed companies or companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;

• □ professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors;
• □ university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector;
• □ management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) □ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4 );
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments ( 5 );
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas		Level achieved
		Basic/Good	Very Good/Excellent (6 )
1.	Banking and financial markets (*)	□	X
2.	Banking and financial activities and products (*)	□	X
3.	Banking and financial regulatory framework (*)	□	X

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4.	Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation	□	X
	thereof (*)
5.	Risk management (identification, assessment,	X	□
	monitoring, control, and mitigation methods of
	the main types of risks of a credit institution,
	including the member's responsibilities in these
	processes) (*)
6.	Knowledge of sustainability issues (ESG)	□	X
7.	Internal control systems and other operational	□	X
	mechanisms (*)
8.	Knowledge of the global dynamics of the	□	X
	economic and financial system
9.	Organizational and corporate governance	□	X
	structures, and assessment of the effectiveness
	of the governance mechanisms of the credit
	institution, aimed at ensuring an effective system
	of supervision, management and control (*)
10.	Interpreting a credit institution's financial	□	X
	information, identifying key issues based on this
	information and appropriate controls and
	measures (*)
11.	Prevention of money laundering and terrorist	X	□
	financing
12.	Climate and environmental risks	□	X
13.	Wealth Management	□	X
14.	7 Information & digital technology ( ) (*)	□	X
15.	Cyber Risk ( 8 )	□	X
16.	Human resources, remuneration and incentive	□	X
	systems
17.	Accounting and auditing	□	X
18.	Data quality management ( 9 )	□	X
19.	Expertise in corporate functions (audit, legal,	□	X
	corporate, organisation)
20.	10) International Experience (	□	X
21.	Insurance market and products	□	X

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

22. Business judgment and capacity for inquiry, analysis, and decision-making	□	X
23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	□	X
24. Result orientation and motivation	□	X
25. Authenticity, ability to stand up and communicate (transparency, proper presentation and defence of owns ideas)	□	X
26. Assertiveness, ability to engage in dialogue and persuasion	□	X
27. Knowledge of the English language	X	□

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area: Banking and financial markets, Banking and financial activities and products, Regulatory framework of the banking and financial sector, Strategic planning and knowledge of the strategic corporate directions or the business plan of a credit institution and its implementation, Corporate governance and organizational structures and assessment of the effectiveness of the credit institution's governance mechanisms, finalized to ensuring an effective system of supervision, management and control, Interpretation of financial data of a credit institution, identification of the main problems based on this information as well as adequate safeguards and measures, Wealth Management

Activities performed: Member of the Board of Directors and Executive Committees

Company or entity concerned: Banca Nazionale del Lavoro S.p.A., Banca Cassa di Risparmio di Savigliano S.p.A.

Period: Since 2006 to 2015

• Area: Knowledge of Sustainability issues (ESG), Internal control systems and other operational mechanisms, Knowledge of the global dynamics of the economic and financial system, Corporate organizational and governance structures and assessment of the effectiveness of the credit institution's governance mechanisms, finalized to ensuring an effective system of supervision, management and control, Climate and environmental risks, Accounting and auditing, Corporate function expertise (audit, legal, corporate, organization), Business judgment and ability to investigate, analyze and decide, Collaboration ability and capability to influence, Authenticity, ability to standing-up and communicate
• Activities performed: Chairman of the Board of Directors, Chairman of the Sustainability, Scenarios and Governance Committee of Saipem Spa, CEO of the Merlo Group, Member of the Board of Directors, of the Control and Risks Committee and of the Analysis of International Scenarios Committee of Leonardo Spa, Member of the Board of Directors, Chairman of the Remuneration Committee and Member of the CCR and Sustainability Committee of SanLorenzo Spa, Member of the Board of Directors and Member of the Nominations and Remuneration Committee of Erg Spa, Member of the Board of Directors, Member of the

Nominations and Remuneration Committee and Member of the Control and Risks Committee of Gedi Gruppo Editoriale Spa

Period: Since 2011 to today for Merlo Group and Sanlorenzo Spa

➢ With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

➢ With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • □ I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • □ I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• l) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors.

➢ With regard to situations of ineligibility or incompatibility

m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;

• n) □ I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • □ I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □ I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .......................................................... at .....................................................(11) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

¹¹ Please enter the office held and the details of Public Authority employer.

Cuneo, March 24th 2025

_________________________________ (Place and date)

_______________________

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

Cuneo, March 24th 2025

_______________________ , ________________________________________

SILVIA MERLO

Place and Date of birth: Cuneo - 28/07/1968 Nationality: Italian Married, 2 children

CURRICULUM VITÆ

PROFESSIONAL EXPERIENCE

MERLO S.P.A. INDUSTRIA METALMECCANICA – CEO

Approximately €700 million turnover – 1.700 employees. Industrial company for the production of telescopic handlers. Over 90% of production is exported worldwide through a commercial network of 7 branches and over 600 dealers.

TECNOINDUSTRIE MERLO S.P.A. – CEO

Approximately €60 million turnover. Industrial company for the manufacture and sale of integrated systems for ecology and urban waste collectors.

MERLO GROUP – Member of the Boards of smaller companies of the Group

SANLORENZO S.P.A. – Member of the Board since October 2019.

Approximately €800 million turnover. Listed Company, one of the leading shipbuilding company with interests in design and production of "made to measure" yachts and superyachts.

SANLORENZO S.P.A. – Member of the Control, Risks and Sustainability Committee since December 2019.

SANLORENZO S.P.A. – Member of the Remuneration Committee since April 2023.

SANLORENZO S.P.A. – President of the Remuneration Committee since October 2019 to April 2023.

SANLORENZO S.P.A. – Member of the Related Parties Committee since October 2019 to April 2023.

FONDAZIONE AZIENDA OSPEDALIERA SANTA CROCE E CARLE CUNEO ONLUS – President since October 2021.

Functional institution of the Santa Croce and Carle Hospital dedicated to promoting social solidarity through fundraising actions for the establishment of a useful asset to promote and develop the health, health care and research activities of the Cuneo Hospital.

SAIPEM S.P.A. – Chairman of the Board since April 2021 to May 2024.

Listed Company, approximately €9 billion turnover, world leader in engineering and drilling activities and in the development of major projects, in the energy and infrastructures sectors.

SAIPEM S.P.A. – Chairman of the Sustainability, Scenarios and Governance Committee since May 2021 to May 2024.

ERG S.P.A. – Member of the Board since April 2015 to April 2021.

Approximately €1 billion turnover. Listed Company, one of the leading producer of wind energy in Italy and one of the top ten wind energy producers in Europe. Erg S.p.A. is active in the production and marketing of thermoelectric power and steam.

ERG S.P.A. – President of the Nominations and Remuneration Committee since May 2018 to April 2021.

ERG S.P.A. – Member of the Nominations and Remuneration Committee since April 2015 to May 2018.

GEDI Gruppo Editoriale S.P.A. – Member of the Board since April 2013 to August 2020.

Approximately €500 million turnover. Listed Company, one of the leading media groups in Italy with interests in publishing, radio, advertising, internet businesses and television.

GEDI Gruppo Editoriale S.P.A. – Member of the Nomination and Remuneration Committee since April 2013 to April 2015.

GEDI Gruppo Editoriale S.P.A. – Member of the Control and Risks Committee since April 2015 to August 2020.

LEONARDO S.P.A. – Member of the Board since May 2011 to May 2020.

Listed Company, approximately €15 billion turnover, one of the leading industrial groups worldwide in the field of high technologies and one of the top ten global players in Aerospace, Defence and Security.

LEONARDO S.P.A. - Member of the Control and Risks Committee since May 2011 to May 2020.

LEONARDO S.P.A. - Member of the Analysis of International Scenarios Committee since June 2014 to May 2020.

BANCA NAZIONALE DEL LAVORO S.P.A. – Member of the Board since April 2012 to December 2015.

BANCA NAZIONALE DEL LAVORO S.P.A. – Member of the Nomination Committee since April 2015 to December 2015.

BANCA CASSA DI RISPARMIO DI SAVIGLIANO S.P.A. – Member of the Board and Member of the Executive Committee since April 2006 to April 2012.

EDUCATION

"BNP Paribas Women Entrepreneur Program" Stanford Graduate School of Business (California), USA

"In the Boardroom – Valore D" Program Milano (MI), Italy

Degree in Business Economics LIUC of Castellanza (VA), Italy

Bachelor Degree in Business Economics SAA of Cuneo (CN), Italy

High School Diploma

High School Liceo Classico "Silvio Pellico" of Cuneo (CN), Italy

AWARDS

"Mela d'Oro" Award as part of the "Donne ad Alta Quota" of the "Marisa Bellisario" Foundation for the entrepreneurs section in 2014.

Amelia Earhart Award (Zonta Club Alba-Langhe and Roero) in 2017.

Proclaimed "Officer of Merit of the Italian Republic" in 2024.

I authorize the use of my personal data as stipulated ex D. Lgs. 196/03 and in accordance to the GDPR 679/16.

Cuneo, March 24th 2025

Silvia Merlo

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OE ENTITIES

The undersigned SILVIA MERLO born in CUNEO (CN) on 28/07/1968 declares

□ not to hold any offices in other companies or entities

□ to hold the following offices in other companies or entities

COMPANY/INSTITUTION	OFFICE	FROM
MERLO S.P.A. INDUSTRIA	CEO	30/06/1997
METALMECCANICA	Director
TECNOINDUSTRIE MERLO S.P.A.	CEO
	Director
TREEMME TECNOLOGY S.R.L.	CEO
	Director
CENTRO FORMAZIONE E RICERCA	CEO
MERLO SRL	Director
MERLO RENT S.R.L.	CEO
	Director
MERLO PROJECT S.R.L.	Director
MOVIMATICA SRL	Director
MERLO GALFRÈ INNOVATION LAB. S.R.L.	Director
	Chairman
CO.IMM.I S.R.L.	CEO
	Director
	Chairman
FIN.S.I. SPA	CEO
	Director
IBIS S.P.A.	CEO
	Director
LAND S.R.L.	CEO
	Director

-

PALATINO S.R.L.	CEO
	Director
ERGOS S.R.L.	Director
	Shareholder
SOC S S.R.L.	Sole Director
ERACLE SOCIETA SEMPLICE	Shareholder
ERASMUS SOCIETA SEMPLICE	Shareholder
ESPERIA SOCIETA SEMPLICE	Shareholder
FUTURA SOCIETA SEMPLICE	Shareholder
MEFRA SOCIETA' SEMPLICE	Shareholder Director
miros società semplice	Shareholder
NIKE SOCIETA SEMPLICE	Shareholder
orione società semplice	Shareholder
Pluto Invest societa semplice	Shareholder Director
SOCIETA SEMPLICE CANUBIA	Shareholder
KIBOTION SRE	Sole Director	22/12/2017
ALTA VALDELSA - SRL	Sole Director
BOREALE S.R.L.	Director
	Shareholder
	Director
KI S.R.L.	Shareholder
	Chairman
OCEAN S.R.L.	CEO
	Director
	Sole Director
PIPERITA S.R.L.	Shareholder
	Sole Director
TUEOR S.R.L.	Shareholder
SANLORENZO S.P.A.	Director	24/10/2019

FONDAZIONE AZIENDA
OSPEDALIERA SANTA CROCE E	Chairman	07/10/2021
CARLE CUNEO ONLUS

and undertakes to provide any updates until the acceptance of the position.

Cuneo, March 24th 2025

SIGNATURE

_________________________

Attachment C1

Form of acceptance of nomination as a member of the Board of Directors

With reference of the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Torino, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A., until the approval by the Shareholders' Meeting of the financial statements for the 2027 financial year,

l, the undersigned Paolo MESSA (fiscal code MSSPLA76E31A662Y), born in Bari on May, 31*, 1976, nationality Italian

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A .;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

A With regard to independence

• I meet the qualified independence requirements laid down in Article 13.4.3 of the Articles of Association, as also supplemented by Article 13 of the Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I do not meet the above-mentioned independence requirements;
• b) I meet the requirements of independence of mind laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

• With regard to professionalism and competence

• c) I meet the professional requirements established for bank directors in the Regulation of the Ministry of the Economy and Finance no. 169/2020 due to having performed (3) the following for at least one three-year period, also alternatively:
  • administration or control activities or management tasks in the credit, financial, securities or insurance sector;

2 Article 13.4.1. of the Articles of Association.

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assesment of the members of the management body and key function holders - updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

³ For the purposes of meeting the professionalism requirement, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the are counted only for the period of time during which they were carried out, without accumulating them.

• administration or control activities or management tasks in listed companies of a size and complexity greater than or comparable to (in terms of turnover, nature and complexity of the organisation or activity carried out) that of the bank in which the office is to be held;
• professional activities in matters pertaining to the credit, financial, securities and insurance sectors or in any case relevant to the bank's activities; the professional activity must be characterised by appropriate levels of complexity also with regard to the recipients of the services provided and must be carried out on a continuous and significant basis in the abovementioned sectors:
• a university teaching activities, as first or second level lecturer, in legal or economic subjects or in other subjects relevant to the activities of the credit, financial, securities or insurance sector,
• · management, executive or top management functions, however named, in public entities or public authorities related to the credit, financial, securities or insurance sector and provided the entity in which the person performed those functions has a size and complexity comparable with that of the bank in which the position is to be held;
• d) least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• e) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• f) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of responsibility indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Level achieved Areas
	Basic/Good	Very Good/Excellent (6)
Banking and financial markets (*)		ਸਿਟਰਪ
2. Banking and financial activities and products (*)		1122
3. Banking and financial regulatory framework (*)		1

⁴ Article 13.4.2, letter a), of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring and miligating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) which have determined their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole each individual candidate is expected to possess at least more than one of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)		0
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)	V
6. Knowledge of sustainability issues (ESG)	D	V
7. Internal control systems and other operational mechanisms (*)	0	>
8. Knowledge of the global dynamics of the economic and financial system	口	>
9. Organizational and corporate governance structures, and assessment of the effectiveness of the governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	V	D
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)		П
11. Prevention of money laundering and terrorist financing	V	D
12. Climate and environmental risks	口	V
13. Wealth Management	V	口
14. Information & digital technology (7) (*)	D	V
15. Cyber Risk (8)	D	V
16. Human resources, remuneration and incentive systems	V	ロ
17. Accounting and auditing	V	口
18. Data quality management (9)	V	E
19. Expertise in corporate functions (audit, legal, corporate, organisation)	V	D
20. International Experience (10)	11	1

7 Within the guidance expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

8 See footnote n. 7

9 Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the with the technological development path undertaken.

10 In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

3

21. Insurance market and products	2	בע
22. Business judgment and capacity for inquiry,	■
analysis, and decision-making
23. Capacity for collaboration and influence	0
appropriate (encouragement and and and
constructive sharing of professionalism and
opinions and resolution of potential conflicts
24. Result orientation and motivation	■	2
25. Authenticity, ability to stand and up	=
communicate (transparency, proper
presentation and defence of owns ideas)
26. Assertiveness, ability to engage in dialogue and	国
persuasion
27. Knowledge of the English language

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area and Activities performed: Executive Vice President - Chairman of the Board of Directors Company or entity concerned: Leonardo SpA - Leonardo US Corporation, Inc. Period: 2018 - 2023

Area and Activities performed: Board Director Company or entity concerned: RAI SpA Period: 2015 - 2017

Area and Activities performed: Executive Vice President - Senior Advisor Company or entity concerned: National Italian American Foundation (NIAF) Period: 2024 - present

> With regard to integrity and reputation

• g) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• h) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

• With regard to offices in companies and institutions and time commitment

• j) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):

• I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
• I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof.
• k) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• I) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors.

> With regard to situations of ineligibility or incompatibility

• m) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibition from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• n) v I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .............................................................................................................................................................................. requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• o) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• p) v I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

q) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office,

¹¹ Please enter the office held and the details of Public Authority employer.

having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;

• r) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• s) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• · submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• · promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• comprehensive information regarding their personal and professional characteristics and i) management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the management and control offices currently held in other companies or entities, with an undertaking to provide any updates until the acceptance of the position.

Washington, DC, March 23rd, 2025 (Place and date)

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of such a relationship), in particular

by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

8

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

Paolo Messa

WORK EXPERIENCE

Enel S.p.A I Rome Head of Advocacy and Special Projects	January 2025 - Current
NIAF (National Italian American Foundation) I Washington, D.C. April 2024 - Current Executive Vice President for International Relations and Strategie Partnerships - Senior Advisor
Leonardo US Corporation I Washington, D.C. August 2021- December 2023 Executive Vice President for Geo-Strategie Relations - Chairman of the Board of Directors
Leonardo Company S.p.A I Rome Executive Vice President for Geo-Strategie Relations USA	September 2020 - August 2021
Leonardo Company S.p.A I Rome Executive Vice President for Institutional Relations Italy	October 2018 - August 2018
Center for American Studies I Rome Managing Director	December 2015 -September 2018
OTHER RELEV ANT PROFESSIONAL EXPERIENCE
Rai S.p.A. I Rome Board Member	2015-2017
Conai I Rome Board Member	2014-2020
INVIMIT Sgr (Economy and Finance Ministry) I Rome Senior Advisor for Communication	2013 -2015

Ministry of The Environment I Rome Senior Advisor for Communication

Formiche Magazine I Rome Founder and Editor

UDC Party I Rome Chief Of Communication and Spokesperson

ACADEMIA AND THINK TANK EXPERIENCE

Luiss Business School I Rome	Current
Adjunct Professor
University ofTor Vergata I Rome	Current
Member of the Strategie Committee for the "Global Governance Degree"
Atlantic Council ofthe United States I Washington, D.C.	Current
Nonresident Senior Fellow
European Council on Foreign Relations I Berlin	Current
Council 's Member

2011-2013

2004 - Current

2001-2006

PUBLICATIONS

L'era dello Sharp Power | Bocconi University Edition Author The American Pope | Vatican Library Edition Author Dc. il partito che fece l'Italia | Marsilio Edition Author Da Frankenstein a principe Azzurro | Marsilio Edition Author L'America Siamo Noi | LUISS University Edition Preface L'intelligence nell'anno del Covid | Santelli Edition Preface

EDUCATION

2005 University of Bari | Bari, Italy M.A., Political Science, with a thesis on American History (The US political system and the Presidential Elections in 2004)

AWARDS

Top Italian Spin Doctor	2005
Barocco Prize	2016
Top Mediterranean Journalist	2018
Valore Uomo Award	2023
Milone Prize 2025	2025

WASHINGTON, DC, NARCH 23°d, 202

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OE ENTITIES

The undersigned Paolo MESSA born in Bari (Italy) on May 31st, 1976 declares

v not to hold any offices in other companies or entities

a to hold the following offices in other companies or entities

FROM	OFFICE	COMPANY / INSTITUTION

and undertakes to provide any updates until the acceptance of the position.

DATE March 23rd, 2025 SIGNATURE

Attachment C2

Form of acceptance of nomination as a member of the Board of Directors and the Management Control Committee

With reference to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Turin, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee of Intesa Sanpaolo S.p.A. until the approval of the 2027 financial statements,

	1, the undersigned FABRIZIO MOSCA (fiscal code MS4FR268MOFL2099, born in
	nationality

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

A With regard to independence

• a) I meet the independence requirements faid down in Article 13.5.2 and 13.4.3 of the Articles of Association, as also supplemented by Regulation of the Economy and Finance no. 169/2020;
• b) I meet the requirements of independence of mind, laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

> With regard to professionalism and competence

c) I meet the professionalism requirements established by the Regulation of the Ministry of the Economy and Finance no. 169/2020 (3), as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders - updated by the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide"). 2 Articles 13.4.1 and 13.5 of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, for candidates who are not enrolled in the register of statutory auditors, experience gained during the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• d) I meet the specific requirements set out in Article 13.5.3 of the Articles of Association and, specifically, I have acquired a proven experience of at least five years in the fields of internal controls, administration and finance:
• as a member of corporate bodies or performing executive duties at entities that conduct banking or financial business with total assets of at least 5 billion euro or at entities conducting insurance business with annual gross premium income of at least 1 billion euro, or at entities or enterprises with total revenues of at least 500 million euro (sizes are understood to be calculated on the basis of the company's most recent financial statements or consolidated financial statements, where prepared by the entity), or

teaching at the university level in a tenured position in economics or law, or performing, over an extended period, significant professional services or activities related to the duties typical of a control body for the benefit of the entities and enterprises indicated at the previous point, or

• serving as senior officer or carrying out executive duties at public administrations of at least regional importance or authorities whose responsibilities concern banking, finance or insurance business;
• e) am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• f) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• g) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below -- including more than one of the areas of competence indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 -- within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas

Level achieved Basic/Good Very Good/Excellent (6)

⁴ Articles 13.4.2, letter a), and 13.5.3, last paragraph, of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (ii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (iv) risk management (identliying, assessing, monitoring, controlling and miligating the main types of tisk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms almed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills and in-depth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) , which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

	1. Banking and financial markets (*)		्ध्
	2. Banking and financial activities and products (*)	0	网
3.	Banking and financial regulatory framework (*)		्
	4. Strategic planning and an understanding of	口	】【
	corporate strategic guidelines or the business plan
	of a credit institution and implementation thereof (*)
	5. Risk management (identification, assessment,	កា	网
	monitoring, control, and mitigation methods of the
	main types of risks of a credit institution, including
	the member's responsibilities in these processes) (*)
	6. Knowledge of sustainability issues (ESG)		网
	7. Internal control systems and other operational		ದ್ಧ
	mechanisms (*)
	8. Knowledge of the global dynamics of the economic		પૂર્
	and financial system
	corporate governance 9. Organizational and	ロ	ম্
	structures, and assessment of the effectiveness of
	the governance mechanisms of the credit institution,
	aimed at ensuring an effective system of
	supervision, management and control (*)
	a credit institution's financial 10. Interpreting	ப	网
	information, identifying key issues based on this
	information and appropriate controls and measures
	(*)
	of money laundering and terrorist 11. Prevention		್ನಿ ಮ
	financing
	12. Climate and environmental risks	17
	13. Wealth Management	កា	মু
	14. Information & digital technology (') (*)	ದ	发
	15. Cyber Risk (8)		网
	16. Human resources, remuneration and incentive	ದ	ম্ম
	systems
	17. Accounting and auditing	D	ಹ
	18. Data quality management (9)	ロ	్రా
	19. Expertise in corporate functions (audit, legal,		ম্ম
	corporate, organisation)
	20. International Experience (10)	ロ	ું છે.

⁷ Within the guidance expressed by the Board of Directors in the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

21. Insurance market and products	18	r
22. Business judgment and capacity for inquiry,	0	网
analysis, and decision-making
for collaboration and influence 23. Capacity (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	П	್ಕೆ
24. Result orientation and motivation	0
25. Authenticity, ability to stand up and communicate (transparency, proper presentation and defence of owns ideas)	ロ
26. Assertiveness, ability to engage in dialogue and persuasion	បា	12
27. Knowledge of the English language	r

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area and Activities performed: Board Member and CCG, board Company or entity concerned: ݽ.È£¬â§á½½½………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………… Period:
Area and Activities performed: FU. Professor of Corporate and Business Stratego y Company or entity concerned: ½½½½½£½≤½½±¼…­̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣̣ Period:
Area and Activities performed: . Professional Cousultants Artivity for Nahonel and Company or entity concerned: 7 F . CTRANS 1 . CN WARD Fraup M Ulhin 2 h on al Period:

> With regard to integrity and reputation

• h) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• i) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• j) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

A

With regard to offices in companies and institutions and time commitment

• k) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • X I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof;
• I) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020 and provided by applicable laws and regulations for fulfilling the duties of member of the control body of a bank that has issued shares listed on regulated markets (11);
• m) with specific reference to the limitation of directorships established in Article 13.5.4 of the Articles of Association:
  • Articles of Account.om
    Article of Access of that provided for in Article 13.5.4 of the Article 13.5.4 of the Articles of Association;
  • n I hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association and undertake as of now, if appointed, to immediately drop all incompatible offices;
• n) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the qualitative and quantitative composition of the Board of Directors.

With regard to situations of ineligibility or incompatibility A

• o) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibitions from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• p) Decree 165/2001, as subsequently amended and supplemented;
  • I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • o I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am .............................................................................................................................................................................. .............................................................................................................................................................................. from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;

¹¹ Article 13.5.1 of the Articles of Association.

¹² Please enter the office held and the details of Public Authority employer.

• q) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• r) a I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• s) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• t) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• u) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• · submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• · promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• comprehensive information regarding their personal and professional characteristics and i) management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the executive, management and control offices currently held in other companies or entities with an undertaking to provide any updates until the acceptance of the position.

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. and candidates for the Roles of Members of the Management AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights any "matton" relation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has The Controllor doss the Porcerial Batter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remineration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and rile processing of your por the relationship with the Controller. The processing for the purposes rolevant to the oneoution of the legitimate interest of the Controller. The provision of your Stated in points of and and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entifies identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Ochimiseler of based on war specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL. DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period at to gatalines are a re a to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a know person from the termination of the relationship with the Controller, subject to the penod of ton your went the purposes envisaged by the applicable regulations. Your anterent other may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

acknowledgement by the data subject of the personal. Data PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date	and	signature of	the	Data Subject
		I orino, March 17, 2025

FABRIZIO MOSCA SUMMARY CURRICULUM VITAE

BIOGRAPHICAL NOTES

Born in Turin the June 7, 1968 - resident in Turin.

COMPLETED STUDIES

• 1987 High School leaving qualification in scientific studies at Istituto Sociale Jesuit Fathers in Torino.
• 1992 Master Degree in Economics from the University of Faculty of Economics at the University of Turin.
• 1993 Qualification to the profession of Chartered Accountant and Statutory Auditor.
• 1994 Enabling Judge's technical consultant.
• 1998 Ph.D. in Business Management at the University "L. Bocconi" of Milan.

ACADEMIC ACTIVITY AND RESEARCH INTERESTS

Full Professor of Economics and Business Management at the Department of Management "Valter Cantino" of the University of Turin.

I am in charge of the University courses of Corporate and Business Strategies, Strategic Management at the University of Turin, Department of Management "Valter Cantino" and at the School of Business Administration (SAA) of the University of Turin.

The academic research activity has focused over time on topics of Strategic Management, Corporate and Business Strategy, and, more recently, on the topics of Corporate Social Responsibility, ESG in complex organizations, Brand and Assets Evaluation. A particular focus has been developed over the years on the themes of Management and Finance in Luxury and Made in Italy Industries.

Editor in Chief of the multidisciplinary scientific journal Journal of Emerging Perspectives and member of some boards of international scientific journals of Business Management.

PROFESSIONAL ACTIVITY

Since 1992 I have combined my academic activity as a tenured professor at the Department of Management of the University of Turin with the professional activity of Chartered Accountant and Statutory Auditor, with a growing professional commitment as:

Collaborator Studio Zunino – Professional Association (1992 – 2018). Founding Partner Studio SGVM Partner (2019 – 2022), later merged into MV Partner. Founding Partner Studio MV Partner (from 2023 and ongoing).

My professional activity is focused on corporate consulting, valuation of companies and brands, M&A, tax and tax advice to entrepreneurial families, companies, Italian and multinational groups. I have held numerous positions as a court expert and/or independent expert for companies and private groups aimed at the valuation of companies, business units, trademarks, patents and complex projects on the valuation of intangible assets and trademarks. I am a Statutory Auditor, Technical Consultant to the Judge, Expert of the Court.

PROFESSIONAL ASSIGNMENTS

I currently hold the following corporate positions:

INTESA SANPAOLO Member of the Board of Directors and member of the Management Control Committee since 30 April 2019.

DIASORIN ITALIA S.p.A. Chairman of the Board of Statutory Auditors and member of the Supervisory Body (D.Lgs. 231/2001) since 7 June 2022.

BOLAFFI S.p.A. Chairman of the Board of Statutory Auditors and of the Supervisory Body since 4 May 2016.

BOLAFFI METALLI PREZIOSI S.p.A. Chairman of the Board of Statutory Auditors since 7 March 2016.

ASTE BOLAFFI S.p.A. Chairman of the Board of Statutory Auditors since 25 February 2016.

MINDICITY (TIM Group) Chairman of the Board of Statutory Auditors and the Supervisory Body since 30 May 2022.

I also hold pro-bono positions in the following no-profit associations:

PIEDMONTESE FOUNDATION FOR CANCER RESEARCH - ETS. Chairman of the Supervisory Body. FELICITA GALLESIO FOUNDATION - ETS Social Institute of the Jesuit Fathers of Turin. Member of the Board of Statutory Auditors.

GLI SCARABEI – Association of supporters of the Egyptian Museum of Turin. Chairman of the Board of Auditors.

FRIENDS OF THE ROYAL CASTLE OF RACCONIGI. Chairman of the Board of Auditors.

COMPLETED PROFESSIONAL ACTIVITIES AND EXPERIENCE

In the context of the experiences and professional assignments concluded and/or terminated by resignation, also for "fit and proper" compliance purposes, starting from the appointment to the first mandate in IntesaSanpalo, the most significant ones are reported below:

Olivetti S.p.A. (TIM Group), Chairman of the Board of Statutory Auditors from 2020 to 2024.

TRW Automotive Holding Italia S.r.l. (now ZF Group) chairman of the board of statutory auditors for over 15 years until April 2019.

TRW Automotive Italia S.p.A. (now ZF Group), chairman of the board of statutory auditors for over 15 years until April 2019.

M. Marsiaj & C. S.r.L. (Sabelt Group) as Statutory Auditor from 28 April 2016 until June 2022.

Moncanino S.p.A. (Holding company) Statutory Auditor from October 2017 to June 2022.

Mecplast S.r.L., Deputy Chairman of the Board of Directors from October 2011 to March 2021.

Piedmont Foundation for Oncology-IRCCS, privately appointed member of the Foundation's board of directors (participated by the Piedmont Region and the Piedmontese Foundation for Cancer Research-Onlus) in the period 2008 – 2020.

SpinLab, Academic Spinoff of the University of Turin, founding partner and non-executive board member, from its establishment until April 2019.

Inthera S.p.A. (formerly Mondadori Group), Chairman of the Board of Statutory Auditors from 2015 to 2018.

F.lli Gancia S.p.A., Statutory Auditor in the period 2006 – 2012.

Banca Sara, member of the company's board of directors in the period 2009 – 2011.

Sabelt S.p.A., member of the company's board of directors from 2005 to 2007.

MAIN ACADEMIC POSITIONS IN ITALY AND ABROAD

Member of the Scientific Committee of University Masters including:

MBA SAA Master in Business Administration, from the academic year 2008_2009. Master's Degree in Sales Process Management, from 2008-2009 academic year. University Master's Degree in Real Estate Management, from the academic year 2010_2011. Master in Insurance Innovation, from the academic year 2020_2021.

Lecturer for many years and still currently in the Masters in Business Administration of the School of Economics of the University of Turin, of the School of Business Administration of Turin. Master Insurance Innovation, UniTo, PoliTo, Collegio Carlo Alberto, ISP, Reale Mutua. I have been a lecturer at the MEB Master of the European School of Management - ESCP Europe and at the Master Sole 24 Ore.

Visiting Professor at the following Universities and Business Schools: I.U.M. – University of Monaco "Prince Albert I" Monaco, Inseec Group since 2005_2010. National University of Cordoba (Argentina). University of Paris Nanterre La Défense (2017) Troyes Business School (2018) Universitad Autonoma de Barcelona (2019)

MAIN ASSOCIATIONS

I am a member of the following non-profit associations:

Founding member of the Compagnia de' Juliani. Member of the Circolo degli Alfieri. Member of the Turin Investors Club (Business Angels in Turin).

SELECTION OF SOME SCIENTIFIC AND PROFESSIONAL PUBLICATIONS

MOSCA, F., GRECO, E. (Dec. 2024), The purpose as a catalyst for driving sustinability in corporate governance, Journal of Emerging Perspectives, Firenze University Press.

MOSCA, F., GRECO E., (2024), ESG Governance Models and New Competitive Scenarios, EGEA Bocconi.

MOSCA, F., CHIAUDANO V., (2024), Sustainability and Luxury Brand Management', Routledge UK.

MOSCA, F., KITCHEN, P. J., & CHIAUDANO, V. (2021). Investigating the Impact of Luxury Brands' Traditional and Digital Contents on Customer-Based Brand Equity. In Mosca, F., Casalegno, C., & Gallo, R. (Ed.), Developing Successful Global Strategies for Marketing Luxury Brands (pp. 81-100). IGI Global.

CASALEGNO C., CIVERA C., MOSCA F., FREEMAN R.E. (2020), Circular Economy and Relationship-Based View, in SYMPHONYA. Emerging Issues in Management, Issue 1/2020.

CIVERA C., CORTESE D., MOSCA F., MURDOCK A. (2020), Paradoxes and Strategies in Social Enterprises' dual logics enactment: A csQCA between Italy and the United Kingdom, in Journal of Business Research, Vol. 115, July 2020, ISSN: 01482963.

MOSCA F., LA ROSA E. (2019), 4.0 Technology Within Fashion and Luxury Production, in SYMPHONYA. Emerging Issues in Management, December 2019, Issue 2.

CIVERA C., CASALEGNO C., MOSCA F., MAPLE P. (2018), Customers' Judgments and Misjudgments of Corporate Responsibility Communication: a Cross Country Investigation of the Effects on Confidence and Trust within Banking Sector, in Psychology & Marketing. Volume 35, Issue 2, February, 2018

BRONDONI S., MOSCA F. (2017), Overture Special Issue Integrated CSR, in SYMPHONYA. Emerging Issues in Management, December.

MOSCA F., CIVERA C. (2017), The Evolution of CSR: Antecedents and Features of an Integrated Approach, in SYMPHONYA. Emerging Issues in Management, December.

MOSCA F., (2017), Strategies in luxury markets. Marketing, sustainability and digitization, Egea, Milan, pages 380.

MOSCA F., (2016), The valuation of intangible assets: the evaluation of the brand between traditional methods and marketing-based methods, in Rivista Diritto ed Economia dell'impresa, n. 3, June.

WINER R. S., DAHAR R., MOSCA F. (2013), Marketing Management, Apogeo, pages: 640.

Turin, March 17th 2025 I authorize the processing of personal data.

LIST OF THE MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OR ENTITIES

I, the undersigned FABRIZIO MOSCA born in Torino, on 7/6/1968 declare that

□ I do not hold any offices in other companies or entities

X I hold the following offices in other companies or entities

COMPANIES/ENTITIES	OFFICE	FROM
MINDICITY S.R.L. (Gruppo TIM)	CHAIR OF THE BOARD OF	30 MAY 2022
	STATUTORY AUDITORS
BOLAFFI S.P.A. (Gruppo Bolaffi)	CHAIR OF THE BOARD OF	4 MAY 2016
	STATUTORY AUDITORS
ASTE BOLAFFI S.P.A. (Gruppo	CHAIR OF THE BOARD OF	26 FEBRUARY 2016
Bolaffi)	STATUTORY AUDITORS
BOLAFFI METALLI PREZIOSI S.P.A.	CHAIR OF THE BOARD OF	07 MARCH 2016
(Gruppo Bolaffi)	STATUTORY AUDITORS
DIASORIN ITALIA S.P.A.	CHAIR OF THE BOARD OF	01 JULY 2022
	STATUTORY AUDITORS
FLY S.R.L. (Company for	SOLE DIRECTOR	03 OCTOBER 2006
personal family business)

Date, March 21st 2025

Signature,

Attachment C2

Form of acceptance of nomination as a member of the Board of Directors and the Management Control Committee

With reference to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Turin, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee of Intesa Sanpaolo S.p.A. until the approval of the 2027 financial statements, I, the undersigned ………MARIELLA TAGLIABUE…….. (fiscal code TGLMLL70M71F704U), born in MONZA (MI) on 31 August 1970, nationality ITALIAN.

declare that

• − I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee;
• − I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2 ).

I also declare that

Ø With regard to independence

• a) I meet the independence requirements laid down in Article 13.5.2 and 13.4.3 of the Articles of Association, as also supplemented by Regulation of the Ministry of the Economy and Finance no. 169/2020;
• b) I meet the requirements of independence of mind, laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

Ø With regard to professionalism and competence

• c) I meet the professionalism requirements established by the Regulation of the Ministry of the Economy and Finance no. 169/2020 (3), as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• d) I meet the specific requirements set out in Article 13.5.3 of the Articles of Association and, specifically, I have acquired a proven experience of at least five years in the fields of internal controls, administration and finance:

¹See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the suitability of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

² Articles 13.4.1 and 13.5 of the Articles of Association.

³ For the purposes of meeting the professionalism requirement, for candidates who are not enrolled in the register of statutory auditors, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• X□ as a member of corporate bodies or performing executive duties at entities that conduct banking or financial business with total assets of at least 5 billion euro or at entities conducting insurance business with annual gross premium income of at least 1 billion euro, or at entities or enterprises with total revenues of at least 500 million euro (sizes are understood to be calculated on the basis of the company's most recent financial statements or consolidated financial statements, where prepared by the entity), or
• □ teaching at the university level in a tenured position in economics or law, or performing, over an extended period, significant professional services or activities related to the duties typical of a control body for the benefit of the entities and enterprises indicated at the previous point, or
• □ serving as senior officer or carrying out executive duties at public administrations of at least regional importance or authorities whose responsibilities concern banking, finance or insurance business;
• e) X□ I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4 );
• f) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments ( 5 );
• g) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below – including more than one of the areas of competence indicated in Article 10 of the Regulation of the Ministry of the Economy and Finance no. 169/2020 – within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas Level achieved Basic/Good Very Good/Excellent (6 )

1.	Banking and financial markets (*)	□	X
2.	Banking and financial activities and products (*)	□	X
3.	Banking and financial regulatory framework (*)	□	X

⁴ Articles 13.4.2, letter a), and 13.5.3, last paragraph, of the Articles of Association.

2

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (iii) strategic planning and an understanding of a credit institution's business strategy or business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) , which have determined and explained their possession, making them demonstrable. In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more than one of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	□	X
5. Risk management (identification, assessment,	□	X
monitoring, control, and mitigation methods of the
main types of risks of a credit institution, including the
member's responsibilities in these processes) (*)
6. Knowledge of sustainability issues (ESG)	□	X
7. Internal control systems and other operational	□	X
mechanisms (*)
8. Knowledge of the global dynamics of the economic	□	X
and financial system
9. Organizational and corporate governance structures,	□	X
and assessment of the effectiveness of the
governance mechanisms of the credit institution,
aimed at ensuring an effective system of supervision,
management and control (*)
10. Interpreting a credit institution's financial information,	□	X
identifying key issues based on this information and
appropriate controls and measures (*)
11. Prevention of money laundering and terrorist	□	X
financing
12. Climate and environmental risks	□	X
13. Wealth Management	□	X
7) 14. Information & digital technology ( (*)	□	X
8 15. Cyber Risk ( )	□	X
16. Human resources, remuneration and incentive	□	X
systems
17. Accounting and auditing	□	X
9 18. Data quality management ( )	□	X
19. Expertise in corporate functions (audit, legal,	□	X
corporate, organisation)
10) 20. International Experience (	□	X
21. Insurance market and products	X	□
22. Business judgment and capacity for inquiry, analysis,	□	X
and decision-making

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indicated specific areas of specialization".

3

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the Group in line with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presence of skills and experiences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	□	X
24. Result orientation and motivation	□	X
25. Authenticity, ability to stand up and communicate	□	X
(transparency, proper presentation and defence of
owns ideas)
26. Assertiveness, ability to engage in dialogue and	□	X
persuasion
27. Knowledge of the English language	□	X

(*) Area envisaged by Article 10 of Regulation 169/2020.

Experience, theoretical knowledge and competence indicated at a very good/excellent level were gained in the performance of the following activities:

Area and Activities performed: Chair of the Board of Statutory Auditors/ Statutory Auditor Company or entity concerned: Anima Holding S.p.A. / Fondazione Telethon ETS… Period: (2017-today) / (2020- today)

Area and Activities performed: Statutory Auditor Company or entity concerned: Nexi S.p.A./Nexi Payments S.p.A./Siapay S.r.l./ Fiera Milano S.p.A. Period: (2019-today)/ (2019-today) /(2021-today)/ (2018-2021)

Area and Activities performed: Contract Teacher for Master in Credit Risk Management (CRERIM) Company or entity concerned: Università Cattolica del Sacro Cuore di Milano Period: ……………………………(2009-2024)

Ø With regard to integrity and reputation

• h) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• i) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• j) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

Ø With regard to offices in companies and institutions and time commitment

k) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):

4

• □ I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
• X□I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof;
• l) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020 and provided by applicable laws and regulations for fulfilling the duties of member of the control body of a bank that has issued shares listed on regulated markets (11);
• m) with specific reference to the limitation of directorships established in Article 13.5.4 of the Articles of Association:
  • □ I do not hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association;
  • X□I hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association and undertake as of now, if appointed, to immediately drop all incompatible offices;
• n) I am able to provide a sufficient time commitment to perform the office in the Company, having taken note of the guidance provided by the Board of Directors in the document on the qualitative and quantitative composition of the Board of Directors.

Ø With regard to situations of ineligibility or incompatibility

• o) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Ministry of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibitions from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code;
• p) X□I am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;
  • □ I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
  • □ I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am ……………………………………………………………………………..…. at ………………………………..………….……….….. (12) and I have requested prior authorization from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;

5

¹¹ Article 13.5.1 of the Articles of Association.

¹² Please enter the office held and the details of Public Authority employer.

• q) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• r) □ I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• s) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• t) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• u) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the information declared;
• promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the executive, management and control offices currently held in other companies or entities with an undertaking to provide any updates until the acceptance of the position.

Milan, 22nd March 2025 (Place and date)

____________________________ (signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities or activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

7

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

8

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 – 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

*** *** ***

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

22nd March 2025, _________________________

Personal Data	Born in Monza (MI) on 31st August 1970 Italian Married, two sons She understands English and German
Education	Degree in Economics and Commerce (110/110 cum laude) from Cattolica del Sacro Cuore University ("UCSC") in Milan
Professional titles	Certified Public Auditor (n.114786) since 1999
	Chartered Accountant (n. 7830) since 2010
	Since 2016 she is enrolled with the Register of Technical Consultants at the Court of Milan (n.620)
	Contract Teacher for the "Credit Risk Management Master"- - English taught Specialising Master of the Banking, Finance and Insurance Sciences of UCSC in Milan
	Expert in the Subject "Accountability and Financial Statements" of the Faculty of Law of UCSC in Milan
Professional Experience
Since 2005	Consultant in the field of corporate reporting (annual financial statements, consolidated financial statements, half year reports), corporate transactions, company valuations Technical advice in civil and criminal cases Statutory Auditor/ Chair of the Board of the Statutory

Since 2008 Teacher's assistant of the "Accounting and Financial Reportings" – at UCSC University and Member of the

	Teaching Staff of "Elements of Economics"at UCSC University
2009- 2024	Contract Teacher for the "Credit Risk Management – Specialising Master" of the Banking, Finance and Insurance Sciences of UCSC University in Milan. Main topics: Loans valuation, Impairment of non financial assets, Analysis of Financial Statements of Financial Institutions, Fit and Proper Assessment (ECB Guide)
	Knowledge and experience in -Preparation of financial statements of Banks and financial intermediaries in accordance with International Financial Reporting Standards issued by the International Accounting Standard Board, ECB guidelines and Bank of Italy Circulars, Consob and ESMA regulations; -Stock and Bond listing Projects; - holding companies in the asset management, payments and credit markets
From 1994 to 2005	Her career began in 1994 at KPMG S.p.A. in Milan – Financial Services Group- from assistant to senior manager. From 2001 Executive Officer at KPMG S.p.A. She was responsible for the planning and supervision of auditing services for listed and unlisted Italian banks, large international groups, management and leasing companies
Professional interests	International Financial Reporting Standards European Substainability Reporting Standards (ESRS) and ISSB Standards Corporate governance and internal control system of banks and financial intermediaries Enterprise Risk Management Scientific Research Asset Management Analysis of banks' and non banks' performance

Board Experiences Positions currently held in listed or financial companies, non profit entities

From 2017 to 1° April 2025 Chair of the Board of the Statutory Auditors of Anima Holding S.p.A., Italian listed company

Since 2024	statutory auditor of Accademia Nazionale dei Lincei
Since 2023	Chair of the Board of the Statutory Auditors of Fondazione Anima ETS
Since 2020	Member of the Board of the Statutory Auditors of Fondazione Telethon ETS
Since 2019	Member of the Board of the Statutory Auditors of Nexi S.p.A* , Italian listed company- office expiring with the approval of the 2024 financial statements
Since 2019	Member of the Board of the Statutory Auditors of Nexi Payments S.p.A.* (Nexi Group) - office expiring with the approval of the 2024 financial statements
Since 2019	Member of the Board of the Statutory Auditors of Mercury Payment Services S.p.A *(Nexi Group)- office expiring with the approval of the 2024 financial statements
Since 2021	Member of the Board of the Statutory Auditors of SiaPay S.r.l. *(Nexi Group)- office expiring with the approval of the 2024 financial statements
Since 2022	Member of the Board of the Statutory Auditors of Cancro Primo Aiuto ETS
Other Information
Since 2021	Member of WomenCorporateDirectors WCD- Italy Chapter
Since 2011	Member of NedCommunity, an Italian association of non executive and independent directors

* also Member of the Organisational, Management and Control Model (Italian Legislative Decree 231/01)

Past appointments in listed or financial companies, non profit entities

2023	Member of the Statutory Board of Numera Sistema e
	Informatica S.p.A. (Nexi Group)

From 2020 to 2023	Member of the Board of the Statutory Auditors of Service Hub S.p.A. (Nexi Group)
From 2018 to 2021	Member of the Statutory Board of Fiera Milano S.p.A. (listed company)
From 2019 to 2022	Chair of the Statutory Boards of Ipack Ima and Made Eventi (Fiera Milano Group)
From 2015 to 2017	Member of the Statutory Board of Earchimede S.p.A. (Mittel Group) holding of investments
From 2016 to 2017	Member of the Statutory Board of Ligestra S.r.l. (Cassa Depositi e Prestiti Group)
From 2011 to 2017	Member of the Statutory Board of Mittel Advisory Debt & Grant S.p.A. (ex Mittel Corporate Finance S.p.A.)
From 2009 to 2015	Member of the Statutory Board of Mittel Investimenti Immobiliari S.r.l., a real estate company
From 2009 to 2013	Contract Professor for the second level Master "Banks and development" at Università Cattolica del Sacro Cuore in Milan
From 2011 to 2013	Certified Public Auditor of "UILDM- sez. Como- Onlus", an association active in fighting the effects of muscular distrophy
From 2012 to 2014	Member of the Statutory Board and Member of the Organisational, Management and Control Model (Italian Legislative Decree 231/2001) of Intesa Sanpaolo Previdenza Sim S.p.A. (company merged in Intesa Sanpaolo Vita S.p.A.)
2013	Member of the Statutory Board and Member of the Organisational, Management and Control Model (Italian Legislative Decree 231/2001) of Centrofactoring (company merged in Mediofactoring S.p.A.)
From 2005 to 2010	Member of the teaching staff and in charge for the planning of teaching session in ABI Associazione Bancaria Italiana- Italian Banking Association for the following areas "Accounting and Financial Reporting" and "Banks' Financial Reporting"

1998 assistant Vice President for Credit Suisse First Boston (CSFB) Milan Branch with reporting lines to CSFB in London for risk management activities carried out on behalf of CSFB Milan Branch. After this experience she was back in KPMG.

Publications

Book: Mariella Tagliabue Spiller- "Introduzione ai principi guida degli Standards Contabili Internazionali (IFRS) e degli Standards di Sostenibilità"- Educatt Milan – April 2024 pp. 160 ISBN 9-791255-352419 with focus on the state of adoption of Financial Reporting Standards (IFRS) in the world, European Sustainability Reporting Standards (ESRS) and ISSB Standards, the historical background of IFRS in Italy, the presentation of financial reporting, Intangible assets, Property Plant and Equipment, Impairment Test.

Chapter of Book: "Economia degli intermediari Finanziari" Anthony Saunders, Marcia Millon Cornett, Mario Anolli, Barbara Alemanni November 2014 – McGraw Hill with focus on "Financial reporting and analysis of the performance of the banks" and " The Financial Reporting of Financial Institutions"

Recent Training in 2024 and 2025

"Good Governance in Action" (training of soft skills), "Governance of environmental and climate risks for banks and financial intermediaries" both courses organized by Ned Community and attended in 2024

training events organized by the Women Corporate Directors, Italian Chapter,

"Risk Management, management strategies and governance" SDA Bocconi,

Assonime event held on March 2025 "Corporate Governance and Capital Market for Competitive and Sustainable Europe".

Regular fulfilment of training obligations.

Milan, 22nd March 2025

Data treatment allowed pursuant to the GDPR Regulation (EU) 2016/679

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OE ENTITIES

The undersigned MARIELLA TAGLIABUE born in MONZA (MI) on 31ST AUGUST 1970 declares

□ not to hold any offices in other companies or entities

X□ to hold the following offices in other companies or entities

COMPANY/INSTITUTION	OFFICE	FROM
ANIMA HOLDING S.P.A.	Chair of the Statutory Board	2017
NEXI S.P.A.	Statutory Auditor	2019
NEXI PAYMENTS S.P.A.	Statutory Auditor	2019
SIAPAY SRL (Nexi Group)	Statutory Auditor	2021
Mercury Payment Services (Nexi Group)	Statutory Auditor	2019
Fondazione Telethon ETS	Statutory Auditor	2020
Accademia Nazionale dei Lincei	Statutory Auditor	2024
Fondazione Anima ETS	Chair of the Statutory Board	2023
Cancro Primo Aiuto ETS	Statutory Auditor	2022

and undertakes to provide any updates until the acceptance of the position.

Milan, 22nd March 2025

Attachment C2

Form of acceptance of nomination as a member of the Board of Directors and the Management Control Committee

With reference to the Ordinary Shareholders' Meeting of Intesa Sanpaolo S.p.A. - with Registered Office in Turin, Piazza San Carlo 156 - scheduled for 29 April 2025 (single call) and having regard to my nomination as a member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee of Intesa Sanpaolo S.p.A. until the approval of the 2027 financial statements, I, the undersigned MAURA CAMPRA. (fiscal code CMPMRA61E70L219H), born in Torino on May 30, 1961, nationality Italian.

declare that

• I accept the nomination for the office of member of the Board of Directors of Intesa Sanpaolo S.p.A. and the Management Control Committee;
• I am suitable for the office, pursuant to the applicable regulations (1) and the Articles of Association (2).

I also declare that

> With regard to independence

• a) I meet the independence requirements laid down in Article 13.5.2 and 13.4.3 of the Articles of Association, as also supplemented by Requlation of the Economy and Finance no. 169/2020:
• b) I meet the requirements of independence of mind, laid down in Article 15 of the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as the EBA/ESMA Guidelines and the ECB Guide.

> With regard to professionalism and competence

• c) I meet the professionalism requirements established by the Regulation of the Ministry of the Economy and Finance no. 169/2020 (3), as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;
• d) I meet the specific requirements set out in Article 13.5.3 of the Articles of Association and, specifically, I have acquired a proven experience of at least five years in the fields of internal controls, administration and finance:

2 Articles 13.4.1 and 13.5 of the Articles of Association.

¹ See in particular: Bank of Italy Circular no. 285 of 17 December 2013 as amended; Regulation of the Ministry of the Economy and Finance no. 169/2020, governing the suitability requirements and criteria established for members of the management body and key function holders of banks; Guidelines on the assessment of the members of the management body and key function holders – updated by the EBA and the ESMA on 2 July 2021, in implementation of the principles set out in Directive 36/2013/EU ("EBA/ESMA Guidelines"); Guidelines on internal governance, updated by the EBA on 2 July 2021; Guide to fit and proper assessments, updated by the ECB on 8 December 2021 ("ECB Guide").

³ For the purposes of meeting the professionalism requirement, for candidates who are not enrolled in the register of statutory auditors, experience gained during the 20 years prior to assuming the office is taken into account; experience gained in several functions at the same time are counted only for the period of time during which they were carried out, without accumulating them.

• x as a member of corporate bodies or performing executive duties at entities that conduct banking or financial business with total assets of at least 5 billion euro or at entities conducting insurance business with annual gross premium income of at least 1 billion euro, or at entities or enterprises with total revenues of at least 500 million euro (sizes are understood to be calculated on the basis of the company's most recent financial statements or consolidated financial statements, where prepared by the entity), or
• x teaching at the university level in a tenured position in economics or law, or performing, over an extended period, significant professional services or activities related to the duties typical of a control body for the benefit of the entities and enterprises indicated at the previous point, or
• a serving as senior officer or carrying out executive duties at public administrations of at least regional importance or authorities whose responsibilities concern banking, finance or insurance business;
• e) x I am registered with the Register of independent auditors and have practised, for a period of at least three years, as an independent auditor or performed the functions of member of a control body in a limited company (4);
• f) to possess basic technical knowledge in the specific fields prescribed by the ECB in its Guide to fit and proper assessments (5);
• g) with regard to the guidance and recommendations provided by the Board of Directors in the document on the Qualitative and Quantitative Composition of the Board of Directors, published on 28 February 2025, I have the personal attributes and the theoretical knowledge and practical experience in relation to the areas listed below - including more than one of the areas of competence indicated in Article 10 of the Regulation of the Economy and Finance no. 169/2020 - within which I have achieved a level of competence specified below (areas and level of competence indicated by ticking the corresponding box):

Areas

Level achieved

Basic/Good Very Good/Excellent (6)

Banking and financial markets (
. Banking and financial activities and products (
3. Banking and financial regulatory framework ("

⁴ Articles 13.4.2, letter a), and 13.5.3, last paragraph, of the Articles of Association.

⁵ Reference is made to the following fields: (i) banking and financial markets; (ii) regulatory framework and relevant legal requirements; (ii) strategic planning and an understanding of a credit institution's business plan and implementation thereof; (iv) risk management (identifying, assessing, monitoring, controlling and mitigating the main types of risk of a credit institution); (v) accounting and auditing; (vi) assessing the effectiveness of a credit institution's governance mechanisms aimed at ensuring effective supervision, management and control; (vii) interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures.

⁶ The Bank's Board of Directors has defined very good or excellent level as: experience gained at an executive level or in context of the professional activity and for a significant period of time; knowledge and skills acquired through specific and indepth training and consisting of a cultural background gained through professional experience (naturally also in corporate bodies, if for more than one term) , which have determined and explained their possession, making them demonstrable, In general, very good and excellent knowledge and skills are those that someone is expert in, that are appropriate in relation to the office taken up.

Consistently with the guidance expressed by the Board of Directors, the areas of knowledge listed here are collectively requested for the new Board as a whole, while each individual candidate is expected to possess at least more of them at an excellent level.

4. Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof (*)	0	×
5. Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) (*)	D	×
Knowledge of sustainability issues (ESG) 6.	D	×
7. Internal control systems and other operational mechanisms (*)	0	X
8. Knowledge of the global dynamics of the economic and financial system	0	×
9. Organizational and corporate governance structures, assessment of the effectiveness of the and governance mechanisms of the credit institution, aimed at ensuring an effective system of supervision, management and control (*)	0	×
10. Interpreting a credit institution's financial information, identifying key issues based on this information and appropriate controls and measures (*)	ロ	×
11. Prevention of money laundering and terrorist financing		×
12. Climate and environmental risks	×	D
13. Wealth Management	×
14. Information & digital technology (1) (*)	×	0
15. Cyber Risk (8)	×	D
16. Human resources, remuneration and incentive systems	×	0
17. Accounting and auditing		×
18. Data quality management (9)		×
19. Expertise in corporate functions (audit, legal, corporate, organisation)	D	×
20. International Experience (10)	0	×
21. Insurance market and products	×
22. Business judgment and capacity for inquiry, analysis, and decision-making	D	×

⁷ Within the guidance expressed by the Board of Directors in the document on the Qualitative Composition of the Board of Directors, published on 28 February 2025, it was specified that: "In the context of strengthening the expertise of the Board, it is particularly important to suggest that the professional skills indicated in the fields of Information & Digital Technology and Cyber Security have been developed at an adequate level of strategic and control experience, also considering the role played in organizations that perform significant risk management in each of the indication of one of specialization".

3

⁸ See footnote n. 7

⁹ Within the aforementioned guidance expressed by the Board of Directors, it was considered important to have an adequate presence of profiles with strategic skills in data management, in order to achieve the objectives of the with the technological development path undertaken.

¹⁰ In the context of the aforementioned guidance expressed by the Board of Directors it was outlined: "it is worth highlighting the need to provide, within the new Board, a greater presences acquired at an international level, including within companies outside the Group, institutions, and organizations based in various markets and territorial areas. Such skills could be further strengthened although they are already included in the current composition. These skills would enhance an international perspective of the Board, considering nevertheless the Bank's and the Group's reference market".

23. Capacity for collaboration and influence (encouragement and appropriate and constructive sharing of professionalism and opinions and resolution of potential conflicts)	ロ	X
24. Result orientation and motivation	0	×
25. Authenticity, ability to stand up and communicate (transparency, proper presentation and defence of owns ideas)	0	×
26. Assertiveness, ability to engage in dialogue and persuasion	ロ	X
27. Knowledge of the English language	×	0

(*) Area envisaged by Article 10 of Regulation 169/2020.

The areas of experience, theoretical knowledge and competence indicated at a very good/distinctive level have been gained in the exercise of the following activities:

Area and Activities performed:

Banking and financial regulatory framework (*) + Risk management (identification, assessment, monitoring, control, and mitigation methods of the main types of risks of a credit institution, including the member's responsibilities in these processes) Strategic planning and an understanding of corporate strategic guidelines or the business plan of a credit institution and implementation thereof

Company or entity concerned: Banca CR Asti

Period: from 2019 to 2022 (as a member) from 2022 to 2025 (as president) of the Board of Statutory Auditors

Area and Activities performed:

Knowledge of sustainability issues (ESG) + Internal control systems and other operational mechanisms + Competence of corporate functions (audit, legal, corporate, organisation) Company or entity concerned: Enel S.p.A.

Date: from 2022 to 2025 as a member of the Board of Statutory Auditors

Area and Activities performed:

Knowledge of sustainability issues (ESG) + Internal control systems and other operational mechanisms + Competence of corporate functions (audit, legal, corporate, organisation)

Company or entity concerned (1) Prima Industrie S.p.A.; (2) Atlantia S.p.A.; (3) Pirelli S.p.A., Period: (1) from 2016 to 2022; (2) from April 2021 to January 2022; (3) from 2024 to date Member of the Board of Statutory Auditors

With regard to integrity and reputation D

h) I meet the integrity requirements and the reputation criteria established for members of the management body and key function holders of banks in the Regulation of the Ministry of the Economy and Finance no. 169/2020, as well as those established for statutory auditors of listed companies by the Regulation adopted by Ministerial Decree no. 162 of 30 March 2000;

• i) I am not in a situation of substantial equivalence to the situations envisaged in the aforementioned Regulations with reference to the cases entirely or partially governed by foreign laws;
• i) I meet the reputation and fairness criteria established for management body members and key function holders in the EBA/ESMA Guidelines and the ECB Guide, for the purpose of ensuring the sound and prudent management of the Bank.

With regard to offices in companies and institutions and time commitment

• k) with specific regard to the prohibition of interlocking directorates established by Article 36 of Law Decree 201/2011 (converted by Law 214/2011):
  • I do not hold any offices in management, supervisory and control bodies or as a senior officer in competing companies or group of companies operating in the credit, insurance and financial markets;
  • x I am a member of management, supervisory or control boards of companies or groups of companies operating in the credit, insurance and financial markets, and undertake as of now to give up such offices immediately on the appointment or attest that the offices held do not give rise to any incompatibility, specifying in detail the reasons thereof;
• I) I comply with the limitation of directorships established by Regulation of the Ministry of the Economy and Finance no. 169/2020 and provided by applicable laws and regulations for fulfilling the duties of member of the control body of a bank that has issued shares listed on regulated markets (11);
• m) with specific reference to the limitation of directorships established in Article 13.5.4 of the Articles of Association:
  • I do not hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association;
  • x I hold a number of offices in excess of that provided for in Article 13.5.4 of the Articles of Association and undertake as of now, if appointed, to immediately drop all incompatible offices;
• n) I am able to provide a sufficient time commitment to perform the Company, having taken note of the guidance provided by the Board of Directors in the document on the qualitative and quantitative composition of the Board of Directors.

• With regard to situations of ineligibility or incompatibility

• o) no reasons for ineligibility, incompatibility or suspension exist in my regard pursuant to the law, the regulations or the Articles of Associations, and specifically none of the conditions for ineligibility and disqualification envisaged in the Regulation of the Economy and Finance no. 169/2020 and in Article 2382 of the Italian Civil Code and prohibitions from the office of director, adopted against me in a Member State of the European Union pursuant to Article 2383 of the Italian Civil Code:
• p) a l am not employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented;

¹¹ Article 13.5.1 of the Articles of Association.

• x I am currently employed in the public sector, but I benefit from the exemptions referred to in Legislative Decree 165/2001, as subsequently amended and supplemented, with a view to the possible appointment as member of the Board of Directors;
• I am currently employed in the public sector, according to and for the effects of Legislative Decree 165/2001, as subsequently amended and supplemented, and more precisely I am () | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | .............................................................................................................................................................................. from the Public Authority that employs me to perform the office of member of the Board of Directors or, if such authorization has already been granted, I will submit it to the Company at the earliest opportunity following the appointment;
• q) I am not in any other situation of incompatibility provided for by Italian or foreign special laws or regulations;
• r) a I have other employment relationships compatible with the position of Director and I have requested, if necessary, the prescribed authorizations or I will present them to the Company at the first occasion following to the appointment.

Lastly, I declare that

• s) in the attached presentation, I have provided full information on my personal and professional characteristics and on the management, administration and control offices held in other companies or entities, as well as any information useful for assessing my suitability for the office, having taken note of the above-mentioned document on the qualitative and quantitative composition of the Board of Directors;
• t) I have read the information notice referred to in Articles 13 and 14 of Regulation (EU) 2016/679, provided at the foot of this document, and I accordingly authorize the processing and publication of the above-mentioned data and information on my professional and personal characteristics contained in the curriculum vitae attached;
• u) I authorize the Company to seek confirmation from the relevant Authorities as to the truthfulness and authenticity of my statements, pursuant to and for the purposes of Article 71, paragraph 4, of Presidential Decree 445/2000.

I also agree to:

• submit, at the Company's request, the documents needed to confirm the truthfulness of the . information declared;
• · promptly notify any changes or additions to the personal data, where relevant for the assessment of the requirements.

I attach duly signed

• i) comprehensive information regarding their personal and professional characteristics and management, administration and control offices held in other companies or entities (curriculum vitae);
• ii) the list of the executive, management and control offices currently held in other companies on entities with an undertaking to provide any updates until the acceptance of the position.

¹² Please enter the office held and the details of Public Authority employer.

Rome, March 24th 2025 (Place and date)

(signature)

INFORMATION NOTICE TO MEMBERS OF THE CORPORATE BODIES OF INTESA SANPAOLO S.p.A. AND CANDIDATES FOR THE ROLES OF MEMBERS OF THE MANAGEMENT AND CONTROL BODY, PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/4/2016

This Information Notice implements the provisions of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Regulation").

SECTION 1 - THE IDENTITY AND THE CONTACT DETAILS OF THE CONTROLLER

Intesa Sanpaolo S.p.A., with registered office in Piazza San Carlo 156, 10121 Torino, Italy, Parent Company of the Intesa Sanpaolo International Banking Group, as Data Controller (below also "Controller") processes your personal data (below also "Personal Data") for the purposes stated in Section 3.

SECTION 2 - CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Controller has appointed the "Data Protection Officer" (DPO) envisaged by the Regulation. For any matter related to the processing of your Personal Data and/or to exercising the rights established in the Regulation and listed in Section 7 of this Information Notice, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com.

SECTION 3 - CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR THE PROCESSING

Categories of Personal Data

The Personal Data that the Controller may process, as required by the laws in force from time to time, include the following categories of data: (-) personal and identification data, contact data, tax data and bank account details, other personal data provided by the data subject; (-) data relating to links with other persons or parties, their wealth and family status, level of education, data relating to banking relationships, the performance of economic activities in any case relating to the relationship with the Controller, positions held in companies or entities, shareholdings held in the Controller; (-) data collected from public sources (lists, registers, public documents available to anyone) or from other third parties (Intesa Sanpaolo Group companies, members of social security, welfare or health funds, commercial information and financial risk companies, external companies for market research purposes); and (-) to comply with national and EU regulations, the Controller may process legal data relating to criminal convictions and offences.

Sources of Personal Data

The Controller uses the Personal Data concerning you that you have communicated or that has been collected from other Controllers (in the latter case subject to verification of compliance with the legal requirements by the third parties) or public sources (e.g. chambers of commerce) in compliance with the applicable regulations.

Purposes and legal basis for the processing

Your Personal Data is processed by the Controller for the purposes listed below.

a) Purposes necessary for the assessment of the nomination for the role of member of a management or control body of the Controller and for the possible subsequent establishment of the relationship with the Controller linked to that role, including the verification of the nomination and the requirements established by the applicable regulations. Specifically, for banking institutions the processing of personal data is necessary for the application of the banking supervisory provisions concerning the verification of the suitability requirements for members of the corporate bodies of the Bank: Article 26 of the Consolidated Law on Banking and related implementing regulations, the EBA-ESMA Guidelines on the assessment of the suitability of the members of the management body and key function holders, and the ECB Guide to fit and proper assessments, and subsequent supplementing and amending rules.

b) Purposes necessary for the execution of the relationship linked to the role of member of a Corporate Body of the Controller (in the event of establishment of such a relationship), in particular by virtue of the obligations deriving from the Articles of Association, from internal regulations and from corporate resolutions, including those of an administrative, accounting, corporate, remuneration, insurance, social security and tax nature, as well as those deriving from any other obligation established by laws, regulations and/or EU legislation, or by authorities empowered by law or by supervisory and control bodies. With regard to the meetings of the Corporate Bodies that you will participate in, the Controller will process your personal data consisting of audio, photo and video recordings containing your voice and/or image, as well as other data from which your identity may be deduced, in order to record the minutes of the meetings and fulfil the related requirements; your personal data may be acquired and processed in both paper and digital format.

c) Where necessary, for the exercise or defence of the Controller's rights, also in court.

d) To enable the Controller to carry out, take part in, manage or organise corporate transactions, including mergers, acquisitions and restructurings.

The processing of your personal data for the purposes stated in points "a" and "b" is necessary and relevant to the execution of the relationship with the Controller. The processing for the purposes stated in points "c" and "d" is based on the legitimate interest of the Controller. The provision of your Data is not compulsory, but if it is not provided and processed it will not be possible to establish or continue the relationship or to fulfil all or part of the above-mentioned obligations.

SECTION 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED

For the pursuit of the above-mentioned purposes, it may be necessary for the Controller to disclose your Personal Data to the following categories of recipients: 1) Companies of the Intesa Group and its subsidiaries; 2) Third parties (companies, freelancers, etc.) operating both inside the European Union that carry out activities connected with, instrumental to, or in support of those of the Controller; and 3) Authorities and public information systems set up within public authorities. The companies of the Intesa Sanpaolo Group and third parties to whom your Personal Data may be disclosed may act as controllers, processors or joint controllers, as the case may be. The updated list of entities identified as controllers, processors or joint controllers is available from the DPO.

SECTION 5 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION OUTSIDE THE EUROPEAN UNION.

Your Personal Data are processed by the Controller inside the European Union. If necessary, for technical or operational reasons, the Controller reserves the right to transfer your Personal Data to countries outside the European Union, subject of decisions of "adequacy" by the European Commission or based on the appropriate safeguards, provided by the country to which the Personal Data shall be transferred, or specific exemptions provided by the Regulation. Your Personal Data will not be disclosed, except for data that is public or required by law to be made known to the public, for example through publication on the Controller's corporate website.

SECTION 6 - METHODS OF PROCESSING AND STORAGE OF PERSONAL DATA

Your Personal Data is processed by manual, computerised and electronic means and in such a way as to guarantee the security and confidentiality of the data. Your Personal Data is kept for a period of time not exceeding that necessary to achieve the purposes for which it is processed, subject to the retention periods established by law. Specifically, your Personal Data is generally stored for a period of ten years from the termination of the relationship with the Controller, subject to the different storage requirements for the purposes envisaged by the applicable regulations. Your Personal Data may also be processed for a longer period, if an act interrupting and/or suspending the limitation period justifies the extension of the storage.

SECTION 7 - RIGHTS OF THE DATA SUBJECT

As the data subject, you may, at any time, request the Controller for access to your Personal Data, asking for the rectification or erasure of the data, as well as exercise all the other rights established by the Regulation (EU) 2016/679. For more complete and detailed information in this regard, please consult the Privacy section of the Controller's website (www.intesasanpaolo.com).

For any matter related to the processing of your Personal Data and/or if you wish to exercise the above-mentioned rights, you can contact the Data Protection Officer at the email address dpo@intesasanpaolo.com or the certified email address privacy@pec.intesasanpaolo.com or by post at the address Intesa Sanpaolo S.p.A., Piazza San Carlo 156 - 10121 Torino. Should you deem that the processing of your Personal Data takes place in breach of the Regulation and/or the applicable regulations, you may lodge a complaint with the Data Protection Authority or the Judicial Authority.

ACKNOWLEDGEMENT BY THE DATA SUBJECT OF THE PERSONAL DATA PROCESSED

Taking into account the Information Notice provided to me pursuant to Articles 13 and 14 of the Regulation, I acknowledge that my Personal Data is processed for the purposes described in the Information Notice, in letters a) to d) of Section 3 "Purposes and legal basis for the processing of the personal data".

Date and signature of the Data Subject

Rome, March 24th 2025

Curriculum Vitae MAURA CAMPRA

Qualifications

• V Degree in Economics and Commerce issued by the Faculty of Economics of the University of Turin, final grade of 110/100 with honors;
• √ Qualified to the profession of Chartered Accountant in Turin since 1986 (registration March 1995, no. 126); Registration in the Register of Auditors since 25 November 1999 (Ministerial Decree of 25/11/99, in the Official Gazette no. 100 of 17/12/1999) registration no. 109830 section B;
• √ Full Professor of Business Administration at the Faculty of Economics (now Department of Economics and Business Studies) of the University of Eastern Piedmont "Amedeo Avogadro since 2002 (in 1990 Assistant Professor at the University of Turin, confirmed in 1993, in 1998 Associate Professor at the University of Eastern Piedmont, confirmed in 2001).

Appointments in companies and entities

• V Member of the Supervisory Board of Pirelli & C. S.p.a. since 1.08.2024;
• V Member of the Board of Statutory Auditors of Pirelli & C. S.p.A. since 28.5.2024;
• √ President of the Scientific Committee of the School of Higher Education of Piedmont and Valle d'Aosta since 2023;
• V Member of the Board of Statutory Auditors of Enel S.p.A. since 19.05.2022;
• ✔ Chairman of the Board of Statutory Auditors of Banca CR Asti since 28.04.2022;
• Chairman of the Supervisory Board of Banca CR Asti since 28.04.2022;
• V Alternate member of the Board of Statutory Auditors of Pitagora from 26.04.2021 to 2024;
• V Member of the Board of Directors of the Picatti Milanese Foundation in Turin, since 2013;
• √ Member of the Board of Statutory Auditors of Atlantia S.p.A. from 28.04.2021 to January 2022;
• √ Member of the Board of Statutory Auditors of Prima Industrie S.p.A. from 2016 until 27.04.2022;

• Member of the Board of Directors of SCR Piemonte from 15.12.2015 until July 2021 (not renewed as the 2 mandates limit stated by the Articles of Association have already been completed);

• √ Member of the Board of Statutory Auditors of Serfactoring S.p.A. from 2013 until 11.04.2022;
• V Member of the Board of Statutory Auditors of Al3 (Association between the University of Turin, the University of Eastern Piedmont and the Polytechnic University of Turin, as a business incubator), from its establishment to its liquidation (which took place in 2014) with accounting control;
• V Member of the Board of Statutory Auditors of GIA S.p.A. from 2007 to 2012, with accounting control.

Academic positions

• √ President of the Master's Degree Course in Administration, Profession and People of the University of Eastern Piedmont from 2019 to date.
• V President of the Degree Course in Business Administration of the University of Eastern Piedmont from 2013 to 2019.
• Coordinator of the Casale Monferrato branch of the Faculty of Economics of the University of Eastern Piedmont from 2007 until July 2015 (date from which it was closed);

• √ President of the Spin-off Commission of the University of Eastern Piedmont from 2007 until 2014;
• V Director of the Department of Business and Territorial Studies of the University of Eastern Piedmont from 2010 to 2012;
• √ President of the Degree Course in Economics and Business Administration of the University of Eastern Piedmont;
• V Member of the Academic Senate of the University of Eastern Piedmont;
• Member of the Planning and Evaluation of Resources Commission at the CRUI, as delegate > of the Rector of the University of Piedmont;
• V Member of the Board of Directors of the PhD in Business Administration of the University of Turin from its establishment until 2009;
• √ Head of the Research Unit of the University of Eastern Piedmont for the PRIN 2007 research project on: "Business combinations and transparency of information to financial markets", funded project;

Activities carried out for the OIC, for the CNDCEC and for the ODCEC (formerly ODC) of Turin

• · V Member of the International Accounting Standards Commission of the OIC from 2015 to 2022;
• V Member of the Control and Statutory Auditing System Commission of the National Council of Chartered Accountants and Accounting Experts (on appointment of the Turin Association);

• President of the University Commission of the National Council of Chartered Accountants and Accounting Experts from 2008 to 2012 (on the recommendation of the Order of Turin);

• Chairman of the Foreign Training Commission of the National Council of Chartered Accountants and Accounting Experts from 2001 to 2007 (on appointment of the Turin Bar Association);

• Training activity carried out from 1990 to date at the ODCEC in Turin.

Rome, March 24th 2025

LIST OF MANAGEMENT AND CONTROL OFFICES CURRENTLY HELD IN OTHER COMPANIES OF ENTITIES

The undersigned Maura Campra born in Torino on 30.05.1961 declares (tick the box of interest)

not to hold any offices in other companies or entities

X to hold the following offices in other companies or entities

COMPANY / INSTITUTION	OFFICE	FROM
Pirelli & C. S.p.A.	Member of Statutory Board	28.05.2024
Pirelli & C. S.p.A.	Member of Surveillance Body	1°.08.2024
Ene S.p.A.	Member of Statutory Board	19.05.2022
Banca CR Asti	Chairman of Statutory Board	28.04.2022
Banca CR Asti	Chairman of Surveillance Body 28.04.2022

and undertakes to provide any updates until the acceptance of the position.

DATE Rome, March 24th, 2025