{"id":5916,"date":"2026-05-14T14:09:39","date_gmt":"2026-05-14T14:09:39","guid":{"rendered":"https:\/\/www.mygoldspa.com\/whistleblowing-procedure\/"},"modified":"2026-05-14T15:01:17","modified_gmt":"2026-05-14T15:01:17","slug":"whistleblowing-procedure","status":"publish","type":"page","link":"https:\/\/www.mygoldspa.com\/en\/whistleblowing-procedure\/","title":{"rendered":"WHISTLEBLOWING PROCEDURE"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

WHISTLEBLOWING PROCEDURE<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Violation Reporting System<\/strong><\/p>

pursuant to Legislative Decree 24\/2023 and EU Directive 2019\/1937 <\/em><\/p>

Society<\/strong><\/p><\/td>

MyGold S.p.A.<\/p><\/td><\/tr>

Registered office<\/strong><\/p><\/td>

Piazzale Cadorna Luigi 9, Milan<\/p><\/td><\/tr>

Legal Representative<\/strong><\/p><\/td>

Luca Canella<\/p><\/td><\/tr>

Version<\/strong><\/p><\/td>

March 2026<\/p><\/td><\/tr>

Revision<\/strong><\/p><\/td>

Annual<\/p><\/td><\/tr>

Recipients<\/strong><\/p><\/td>

Internal workers, collaborators, customers and third parties<\/p><\/td><\/tr>

Website<\/strong><\/p><\/td>

www.therealmoney.com<\/p><\/td><\/tr><\/tbody><\/table>

1. What is Whistleblowing and Why is it Important?<\/h2>

Whistleblowing is the reporting by a person\u2014an employee, collaborator, customer, or other individual\u2014of unlawful, irregular, or non-compliant behavior that they have become aware of in the context of a work context or a professional or commercial relationship.<\/p>

MyGold SpA (hereinafter ” MyGold ” or “the Company”), a Professional Gold Operator authorised by the Bank of Italy and registered with the OAM, has adopted this Whistleblowing System in the belief that timely reporting of any violations is a fundamental tool for:<\/p>

  • Prevent illegal or non-compliant conduct before it causes damage;<\/li>
  • Protect customers, workers and the integrity of the precious metals trading business;<\/li>
  • Promote a corporate culture based on legality, fairness and transparency;<\/li>
  • Comply with the obligations set forth in Legislative Decree 24\/2023 and adopt international best practices in governance. <\/li><\/ul>

    MyGold Whistleblowing System is adopted in compliance with Legislative Decree 24\/2023 and represents, for a Professional Gold Operator \u2014 Banco Metalli, a voluntary choice of best practices in governance, legality, and transparency, consistent with the highest standards in the precious metals sector and with the AML\/CFT obligations set forth by current legislation. <\/em><\/p><\/td><\/tr><\/tbody><\/table>

    The system adopted by the Company is based on tools that guarantee the utmost confidentiality of the whistleblower’s identity, the protection of personal data, and the absolute prohibition of retaliation of any kind against those who make a report in good faith.<\/p>

    1.2 Objectives of the whistleblowing system<\/h2>

    MyGold Whistleblowing System pursues the following fundamental objectives:<\/p>

    • Prevention: promptly identify non-compliant conduct or conduct that is potentially harmful to corporate integrity;<\/li>
    • Protection: Protect whistleblowers from any form of retaliation or discrimination;<\/li>
    • Transparency: ensuring a clear, defined process that is accessible to legitimate parties;<\/li>
    • Continuous improvement: use reporting as a tool to strengthen compliance controls;<\/li>
    • Regulatory compliance: ensuring compliance with applicable regulations.<\/li><\/ul>

      <\/strong><\/p>

      1.3 Scope of application<\/strong><\/p>

      This document governs the Company’s whistleblowing system and, in particular:<\/p>

      • a) defines the reporting management system pursuant to applicable legislation;<\/li>
      • b) establishes organizational roles and responsibilities in managing reports;<\/li>
      • c) regulates staff training and awareness-raising activities;<\/li>
      • d) implements a whistleblowing system compliant with Directive (EU) 2019\/1937 and Legislative Decree 24\/2023; <\/li>
      • e) ensures the protection of whistleblowers and the correct management of reports of regulatory violations.<\/li><\/ul>

        1.4 Guiding principles<\/h2>

        MyGold ‘s Whistleblowing System is based on the following principles:<\/p>

        • confidentiality of the whistleblower’s identity;<\/li>
        • prohibition of retaliation of any kind;<\/li>
        • access to the system via a single internal channel ( MITWhistle platform );<\/li>
        • timeliness in managing and responding to reports;<\/li>
        • proportionality of actions to the seriousness of the violations;<\/li>
        • traceability of reports and management activities.<\/li><\/ul>

          1.5 Definitions<\/h2>

          Pursuant to Article 2 of Legislative Decree No. 24 of 10 March 2023, the following definitions apply: <\/p>

          Term<\/strong><\/p><\/td>

          Definition<\/strong><\/p><\/td><\/tr>

          Reporting<\/strong><\/p><\/td>

          The natural person who reports or publicly discloses information about violations acquired in the context of his\/her work<\/p><\/td><\/tr>

          Internal reporting<\/strong><\/p><\/td>

          Written or oral communication of information on violations, carried out through the internal reporting channel activated by the Company pursuant to Article 4 of Legislative Decree 24\/2023 24\/2023<\/p><\/td><\/tr>

          External reporting<\/strong><\/p><\/td>

          Written or oral communication of information on violations, carried out through the external reporting channel activated by ANAC pursuant to Article 7 of Legislative Decree 24\/2023 24\/2023<\/p><\/td><\/tr>

          Public disclosure<\/strong><\/p><\/td>

          Making information about violations public through the press, electronic media, or means of dissemination capable of reaching a large number of people, pursuant to art. 15 of Legislative Decree 24\/2023 24\/2023<\/p><\/td><\/tr>

          Violations<\/strong><\/p><\/td>

          Actions or omissions, committed or likely to be committed by the Company, which harm the public interest or the integrity of the entity and which consist of: administrative, accounting, civil or criminal offenses; unlawful conduct relevant pursuant to Legislative Decree 231\/2001; offenses falling within the scope of application of European Union or national acts. <\/p><\/td><\/tr>

          Information on violations<\/strong><\/p><\/td>

          Information, including reasonable suspicions, regarding violations committed or likely to be committed in the organization with which the whistleblower interacts in the context of his\/her work<\/p><\/td><\/tr>

          Work context<\/strong><\/p><\/td>

          Work or professional activities, present or past, carried out in the context of employment relationships with the Company, through which individuals acquire information about violations<\/p><\/td><\/tr>

          Person involved<\/strong><\/p><\/td>

          The natural or legal person mentioned in the report as the person to whom the violation is attributed or as a person otherwise implicated in the reported violation<\/p><\/td><\/tr>

          Facilitator<\/strong><\/p><\/td>

          The natural person who assists the whistleblower in the reporting process, operating in the same work context and whose assistance must be kept confidential<\/p><\/td><\/tr>

          Retaliation<\/strong><\/p><\/td>

          Any behavior, act or omission, even if only attempted or threatened, carried out as a result of the report and which causes or may cause unjust damage to the reporting person<\/p><\/td><\/tr>

          Protective measures<\/strong><\/p><\/td>

          Measures aimed at protecting the whistleblower, the facilitator and the subjects connected to the whistleblower from retaliation<\/p><\/td><\/tr>

          Report Manager<\/strong><\/p><\/td>

          The individual designated by the Company, with autonomy and independence, responsible for managing the internal reporting channel, identified in the MyGold Compliance Officer .<\/p><\/td><\/tr>

          Anonymous report<\/strong><\/p><\/td>

          Reports made without identifying the whistleblower; if the whistleblower is subsequently identified, the protections provided by Legislative Decree 24\/2023 apply. 24\/2023<\/p><\/td><\/tr><\/tbody><\/table>

          2. Regulatory References<\/h2>

          This Procedure is adopted in accordance with the European and national regulatory frameworks regarding whistleblowing, compliance, personal data protection, and corporate risk prevention. Specifically, MyGold ‘s reporting system is governed by the following main regulatory sources: <\/p>

          • Legislative Decree 24\/2023 \u2014 implementation of Directive (EU) 2019\/1937 on the protection of persons reporting infringements;<\/li>
          • Directive (EU) 2019\/1937 \u2014 protection of persons reporting breaches of European Union law;<\/li>
          • Legislative Decree 231\/2001 \u2014 regulation of the administrative liability of entities and organizational models;<\/li>
          • Regulation (EU) 2016\/679 (GDPR) and Legislative Decree 196\/2003, as amended by Legislative Decree 101\/2018 \u2014 protection of personal data; <\/li>
          • Legislative Decree 231\/2007 \u2014 legislation on the prevention of money laundering and terrorist financing;<\/li>
          • Law 7\/2000 \u2014 regulation of gold brokerage activities and Professional Gold Operators (OPO);<\/li>
          • Bank of Italy provisions regarding the organization, procedures, and internal AML controls for Professional Gold Operators.<\/li><\/ul>

            3. Who Can Make a Report<\/h2>

            MyGold ‘s Whistleblowing System is accessible to anyone who, in a work, professional, or commercial context, becomes aware of violations pursuant to applicable law. Reports may be made by both internal and external parties, who are granted the same protections provided by applicable law. <\/p>

            3.1 Internal whistleblowers \u2014 workers and collaborators<\/h2>

            All individuals who work or have worked for MyGold in any capacity are entitled to make reports:<\/p>

            • Permanent and fixed-term employees;<\/li>
            • Collaborators, consultants and freelancers;<\/li>
            • Interns and trainees;<\/li>
            • Temporary workers;<\/li>
            • Directors, auditors and members of corporate bodies;<\/li>
            • MyGold commercial network ;<\/li>
            • Former employees or collaborators, for facts of which they became aware during the relationship;<\/li>
            • Candidates in the selection phase, based on facts learned during the hiring process.<\/li><\/ul>

              3.2 External whistleblowers \u2014 customers and third parties<\/h2>

              External parties who have or have had professional or commercial relationships with the Company are also entitled to make reports, including:<\/p>

              • MyGold customers , limited to facts learned in the context of the relationship with the Company;<\/li>
              • Suppliers, business partners and third parties who operate or have operated on behalf of the Company;<\/li>
              • Other persons who, in the context of professional or commercial relationships, have acquired knowledge of significant violations.<\/li><\/ul>

                3.3 Conditions for the protection of the whistleblower<\/h2>

                The protections provided by this Procedure apply to whistleblowers who submit reports pursuant to Legislative Decree 24\/2023, provided that, at the time of reporting, they have reasonable grounds to believe that the information communicated is true and falls within the scope of the relevant violations pursuant to applicable legislation. Specifically, the report must be made: <\/p>

                • based on information learned in the work and professional context;<\/li>
                • with a reasonable belief in the veracity of the facts reported;<\/li>
                • without abusing the reporting tool.<\/li><\/ul>

                  Reports made with intent or gross negligence, as well as those that are manifestly false, unfounded, or instrumental, are excluded from protection. Such reports may result in disciplinary liability for workers, civil liability for damages caused to third parties, and criminal liability for defamation (Article 368 of the Criminal Code) or slander (Article 595 of the Criminal Code). <\/p>

                  4. What Can Be Reported<\/h2>

                  Violations \u2014 or reasonable suspicions of violations \u2014 of the following categories of internal rules and procedures applicable to the Company may be reported:<\/p>

                  4.1 Violations of anti-money laundering (AML\/CFT) regulations<\/h2>

                  Pursuant to Legislative Decree 231\/2007:<\/p>

                  • Failure to identify customers or violations of customer due diligence obligations;<\/li>
                  • Failure to report suspicious transactions to the UIF;<\/li>
                  • MyGold ‘s internal KYC procedures ;<\/li>
                  • Deficiencies in the prevention of money laundering and terrorist financing.<\/li><\/ul>

                    Suspicious transaction reports (SOS) must be made through dedicated AML channels and not through the whistleblowing system.<\/p>

                    4.2 Violations of the Professional Gold Operators Regulations<\/h2>

                    Pursuant to Law 7\/2000 and Bank of Italy provisions:<\/p>

                    • Irregularities in the purchase and sale of investment gold or precious metals;<\/li>
                    • Deficiencies in the traceability and recording of precious metal transactions;<\/li>
                    • Violations of reporting obligations to the Bank of Italy and the OAM;<\/li>
                    • Improper behavior towards customers in the purchase and sale of investment gold.<\/li><\/ul>

                      4.3 Violations of governance and internal controls<\/h2>

                      Pursuant to Legislative Decree 231\/2001 and internal procedures: <\/p>

                      • Deficiencies in corporate governance, internal controls, or conflict of interest management;<\/li>
                      • Behaviors that do not comply with the company’s Code of Ethics and the Company’s principles of integrity;<\/li>
                      • Conduct relevant pursuant to the legislation on the administrative liability of entities ( Legislative Decree 231\/2001);<\/li>
                      • Violations of corporate cybersecurity policies and data protection measures.<\/li><\/ul>

                        4.4 Violations of personal data protection<\/h2>

                        Pursuant to Regulation (EU) 2016\/679 (GDPR):<\/p>

                        • Processing of personal data without a valid legal basis or in violation of the principles of the GDPR;<\/li>
                        • Failure to take adequate security measures, including unauthorized access or loss of data;<\/li>
                        • Failure to manage data breach obligations , including failure to notify the Guarantor;<\/li>
                        • Violations of data subjects’ rights.<\/li><\/ul>

                          4.5 What CANNOT be reported through this channel<\/h2>

                          The following are not included in the scope of this whistleblowing system:<\/p>

                          • Personal complaints relating to employment or business relationships, to be handled through ordinary channels;<\/li>
                          • Differences of opinion on management or strategic choices;<\/li>
                          • Reports that are completely unfounded or manifestly specious;<\/li>
                          • Information already in the public domain, unless it is related to possible significant violations;<\/li>
                          • Reports of suspected money laundering transactions \u2014 to be submitted via the dedicated AML channel;<\/li>
                          • Complaints relating to products or services, to be handled through the company complaints procedure.<\/li><\/ul>

                            The reporting system does not replace ordinary assistance or complaint channels.<\/p>

                            5. How to Report \u2014 The Three Channels<\/h2>

                            MyGold provides whistleblowers with a reporting system compliant with current legislation, designed to ensure confidentiality, security, and protection of the whistleblower. Reports can also be submitted anonymously. However, providing a personal contact information can facilitate any requests for clarification or updates. <\/p>

                            The Company will issue an acknowledgement of receipt of the report within 7 days, pursuant to Article 5 of Legislative Decree 24\/2023. <\/p>

                            5.1 Official Internal Channel \u2014 MITWhistle Platform<\/h2>

                            The official internal channel for submitting reports is the dedicated digital platform:<\/p>

                            ( INSERT MITWHISTLE LINK \u2014 to be completed )<\/p>

                            The platform allows:<\/p>

                            • written and anonymous reports;<\/li>
                            • confidential communication with the report manager;<\/li>
                            • data protection through encrypted systems;<\/li>
                            • separation between the identity of the reporter and the content of the report.<\/li><\/ul>
                              The system is provided by a specialized external provider. The personal data is handled in compliance with current legislation, and privacy roles are defined in accordance with the GDPR. <\/h5>

                              5.2 Residual alternative channel<\/h2>

                              Alternatively, and only if it is not possible to use the platform, it is possible to:<\/p>

                              • request a direct and confidential interview with the Compliance Officer;<\/li>
                              • submit a report via confidential written communication.<\/li><\/ul>

                                These channels, however, guarantee the confidentiality of the whistleblower and are managed according to the same protections provided by the legislation.<\/p>

                                5.3 External Channel \u2014 ANAC<\/h2>

                                If the conditions set forth by applicable legislation are met, the reporting party may submit a report through the external channel managed by ANAC, pursuant to Article 6 of Legislative Decree 24\/2023. 24\/2023. Use of the external channel is permitted, among other things, in the following cases:<\/p>

                                • the internal channel is not active or does not comply with the regulations;<\/li>
                                • the internal report has already been made and has not been followed up;<\/li>
                                • there are reasonable grounds to believe that using the internal channel could expose the whistleblower to the risk of retaliation;<\/li>
                                • there is an imminent or obvious danger to the public interest.<\/li><\/ul>

                                  5.4 Public disclosure<\/h2>

                                  In the cases provided for by law, the whistleblower may publicly disclose information, for example through the press or media, if: an internal or external report has not been followed up; there is an imminent or evident danger to the public interest; or there are reasonable grounds to believe that the report will not receive an adequate response (Article 15 of Legislative Decree 24\/2023).<\/p>

                                  6. Content of the Report<\/h2>

                                  To enable effective management of the report, it is helpful \u2014 but not mandatory \u2014 to provide the following information:<\/p>

                                  • description of the reported facts (what happened, in what context and with what frequency, if any);<\/li>
                                  • dates or period in which the events occurred;<\/li>
                                  • place where the events occurred;<\/li>
                                  • subjects involved, if known;<\/li>
                                  • any supporting documentation ( emails , contracts, screenshots, other);<\/li>
                                  • how the facts were learned.<\/li><\/ul>

                                    The whistleblower does not need to be absolutely certain that the violation has occurred: it is sufficient to have reasonable grounds to believe that the reported facts are true. Pursuant to Legislative Decree 24\/2023, the whistleblower’s protection applies regardless of the outcome of subsequent investigations. <\/p>

                                    7. Whistleblower Protection Measures<\/h2>

                                    MyGold guarantees maximum protection to those who report in good faith, in compliance with Legislative Decree 24\/2023 and EU Directive 2019\/1937. <\/p>

                                    7.1 Confidentiality of identity<\/h2>

                                    The identity of the whistleblower is treated with the utmost confidentiality. It is known only to those authorized to handle the report and is not disclosed to third parties without the whistleblower’s explicit consent. All reports and documents relating to the report are prepared so as not to contain references that could allow the whistleblower to be identified. <\/p>

                                    The identity of the whistleblower may be revealed only in the following cases provided by law:<\/p>

                                    • legal obligation, at the request of the Judicial Authority in the context of criminal investigations;<\/li>
                                    • defense needs of the accused, within the limits and according to the guarantees provided by the judicial authority;<\/li>
                                    • explicit consent of the whistleblower.<\/li><\/ul>

                                      In such cases, where possible and not prejudicial to the investigation or the safety of the whistleblower, the Company will inform the whistleblower in advance.<\/p>

                                      7.2 Absolute prohibition of retaliation<\/h2>

                                      The Company prohibits any form of retaliation, discrimination, or detrimental behavior toward the whistleblower, their colleagues, or their family members as a result of reporting. Retaliation includes, for example: <\/p>

                                      • dismissal, suspension or failure to renew the contract;<\/li>
                                      • demotion, transfers or worsening changes in working conditions;<\/li>
                                      • reduction in pay or benefits;<\/li>
                                      • negative evaluations not justified by objective criteria;<\/li>
                                      • mancata promozione o avanzamento;<\/li>
                                      • acts of mobbing, isolation or undue pressure;<\/li>
                                      • interruption or worsening of the commercial relationship (for external parties).<\/li><\/ul>

                                        Reporters who believe they have suffered retaliation can use the internal channel via the dedicated platform or, in cases provided for by law, contact external channels (ANAC) or public disclosure.<\/p>

                                        7.3 Extended Protection<\/h2>

                                        The protections provided by this Procedure also extend to:<\/p>

                                        • facilitators: people who assist the whistleblower in the reporting process (legal, trade union representative);<\/li>
                                        • colleagues and family members of the whistleblower who may suffer retaliation in connection with the report;<\/li>
                                        • entities controlled by the whistleblower: companies or entities where the whistleblower works or in which he or she holds shares.<\/li><\/ul>

                                          7.4 Processing of the whistleblower’s personal data<\/h2>

                                          The whistleblower’s personal data is processed in compliance with Regulation (EU) 2016\/679 and Legislative Decree 196\/2003, as amended by Legislative Decree 101\/2018 101\/2018. Processing occurs exclusively for purposes related to managing the report and is based on fulfillment of a legal obligation pursuant to Art. 6, paragraph 1, letter c) of the GDPR. The data is retained for the time strictly necessary to manage the report and in any case no longer than 5 years after the closure of the proceeding, unless otherwise required by law. For further information, please refer to the privacy policy available on the company website. <\/p>

                                          8. How We Handle Reports<\/h2>

                                          MyGold adopts a structured six-phase reporting process, with defined timeframes in compliance with the terms set by Legislative Decree 24\/2023: 24\/2023:<\/p>

                                          Phase<\/strong><\/p><\/td>

                                          Timing<\/strong><\/p><\/td>

                                          Activity<\/strong><\/p><\/td>

                                          Responsible<\/strong><\/p><\/td><\/tr>

                                          1. Reception<\/strong><\/p><\/td>

                                          Day 0<\/p><\/td>

                                          Receipt via the MITWhistle platform , automatic logging and registration in the confidential register, with segregation of the reporting person’s identifying information<\/p><\/td>

                                          Compliance Officer \/ MITWhistle System<\/p><\/td><\/tr>

                                          2. Confirmation<\/strong><\/p><\/td>

                                          Within 7 days<\/p><\/td>

                                          Sending a receipt acknowledgement to the reporting party via the platform, with the practice code and an indication of the timing, pursuant to Legislative Decree 24\/2023 24\/2023<\/p><\/td>

                                          Compliance Officer<\/p><\/td><\/tr>

                                          3. Evaluation<\/strong><\/p><\/td>

                                          Within 30 days<\/p><\/td>

                                          Admissibility analysis, assessment of severity and urgency, and possible request for additions to the reporting party<\/p><\/td>

                                          Compliance Officer<\/p><\/td><\/tr>

                                          4. Investigation<\/strong><\/p><\/td>

                                          Within 90 days<\/p><\/td>

                                          Documentation collection, interviews with those involved, technical checks, and regulatory analysis. External consultants may be involved, ensuring confidentiality is maintained. <\/p><\/td>

                                          Compliance Officer + any consultants<\/p><\/td><\/tr>

                                          5. Resolution<\/strong><\/p><\/td>

                                          Within 90 days<\/p><\/td>

                                          Report submission to the Board of Directors, resolution on corrective and\/or disciplinary actions<\/p><\/td>

                                          Board of Directors on the proposal of the Compliance Officer<\/p><\/td><\/tr>

                                          6. Feedback<\/strong><\/p><\/td>

                                          Within 90 days<\/p><\/td>

                                          Communication of the outcome to the reporting party (within the limits of confidentiality), initiation of the corrective actions decided upon<\/p><\/td>

                                          Compliance Officer<\/p><\/td><\/tr><\/tbody><\/table>

                                          All stages of the process are conducted with the utmost confidentiality by the whistleblower manager. Confidentiality regarding the whistleblower’s identity extends to all parties involved. The Whistleblower Register is kept confidential and segregated, accessible only to the Compliance Officer and the Board of Statutory Auditors. <\/p>

                                          9. Management of Conflicts of Interest<\/h2>

                                          MyGold SpA has implemented specific measures to ensure the independent management of reports in cases where conflicts of interest may arise.<\/p>

                                          9.1 Reporting to the Compliance Officer<\/h2>

                                          If a report concerns the Compliance Officer, it is managed through the MITWhistle platform and assigned directly to the Chairman of the Board of Directors, who is responsible for its investigation. The Compliance Officer is excluded from any access or activity related to the report. <\/p>

                                          9.2 Reporting regarding the Board of Directors<\/h2>

                                          If the report concerns one or more members of the Board of Directors, the Board of Statutory Auditors is responsible for its management, acting as an independent supervisory body. Reports can be submitted via the MITWhistle platform by selecting the option “reports with conflicts of interest,” or, in cases provided for by law, via the ANAC external channel. The Board of Statutory Auditors may, where necessary, avail of independent external consultants. <\/p>

                                          10. Relations with the Supervisory Authorities<\/h2>

                                          MyGold cooperates fully with the relevant supervisory authorities:<\/p>

                                          ANAC<\/strong><\/p><\/td>

                                          National Anti-Corruption Authority \u2014 external whistleblowing channel pursuant to Legislative Decree 24\/2023 \u2014 whistleblowing.anticorruzione.it <\/p><\/td><\/tr>

                                          Privacy Guarantor<\/strong><\/p><\/td>

                                          For questions regarding the processing of personal data \u2014 garanteprivacy.it<\/p><\/td><\/tr>

                                          Judicial Authority<\/strong><\/p><\/td>

                                          For reports concerning crimes – ordinary procedure<\/p><\/td><\/tr><\/tbody><\/table>

                                          MyGold guarantees that the use of the internal channel does not in any way prejudice the reporting party’s right to use external channels provided for by applicable legislation, in the cases and under the conditions set forth in Article 6 of Legislative Decree 24\/2023. <\/p>

                                          11. Training and Communication<\/h2>

                                          MyGold undertakes to ensure that all subjects to whom this Procedure is addressed are adequately informed and trained on the Whistleblowing System:<\/p>

                                          • mandatory training for all staff upon hiring and with annual refresher courses;<\/li>
                                          • communication of this Procedure to all collaborators and agents of the MyGold network ;<\/li>
                                          • publication of the Procedure on the company website in the dedicated section;<\/li>
                                          • making the reporting channel available.<\/li><\/ul>

                                            12. Procedure Updates<\/h2>

                                            This Procedure is subject to annual review by the Compliance Officer and the Board of Directors, or whenever significant regulatory changes occur. Any changes are approved by the Board of Directors and promptly communicated to all employees. The updated version is always available on the company website in the Whistleblowing section. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

                                            \n\t\t\t\t\t
                                            \n\t\t\t\t
                                            \n\t\t\t\t
                                            \n\t\t\t\t\t\t\t
                                            \n\t\t\t
                                            <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                                            WHISTLEBLOWING PROCEDURE Violation Reporting System pursuant to Legislative Decree 24\/2023 and EU Directive 2019\/1937 Society MyGold S.p.A. Registered office Piazzale Cadorna Luigi 9, Milan Legal Representative Luca Canella Version March 2026 Revision Annual Recipients Internal workers, collaborators, customers and third parties Website www.therealmoney.com 1. What is Whistleblowing and Why is it Important? Whistleblowing is the reporting by a person\u2014an employee, collaborator, customer, or other individual\u2014of unlawful, irregular, or non-compliant behavior that they have become aware of in the context of a work context or a professional or commercial relationship. MyGold SpA (hereinafter ” MyGold ” or “the Company”), a Professional Gold Operator authorised by the Bank of Italy and registered with the OAM, has adopted this Whistleblowing System in the belief that timely reporting of any violations is a fundamental tool for: Prevent illegal or non-compliant conduct before it causes damage; Protect customers, workers and the integrity of the precious metals trading business; Promote a corporate culture based on legality, fairness and transparency; Comply with the obligations set forth in Legislative Decree 24\/2023 and adopt international best practices in governance. MyGold Whistleblowing System is adopted in compliance with Legislative Decree 24\/2023 and represents, for a Professional Gold Operator \u2014 Banco Metalli, a voluntary choice of best practices in governance, legality, and transparency, consistent with the highest standards in the precious metals sector and with the AML\/CFT obligations set forth by current legislation. The system adopted by the Company is based on tools that guarantee the utmost confidentiality of the whistleblower’s identity, the protection of personal data, and the absolute prohibition of retaliation of any kind against those who make a report in good faith. 1.2 Objectives of the whistleblowing system MyGold Whistleblowing System pursues the following fundamental objectives: Prevention: promptly identify non-compliant conduct or conduct that is potentially harmful to corporate integrity; Protection: Protect whistleblowers from any form of retaliation or discrimination; Transparency: ensuring a clear, defined process that is accessible to legitimate parties; Continuous improvement: use reporting as a tool to strengthen compliance controls; Regulatory compliance: ensuring compliance with applicable regulations. 1.3 Scope of application This document governs the Company’s whistleblowing system and, in particular: a) defines the reporting management system pursuant to applicable legislation; b) establishes organizational roles and responsibilities in managing reports; c) regulates staff training and awareness-raising activities; d) implements a whistleblowing system compliant with Directive (EU) 2019\/1937 and Legislative Decree 24\/2023; e) ensures the protection of whistleblowers and the correct management of reports of regulatory violations. 1.4 Guiding principles MyGold ‘s Whistleblowing System is based on the following principles: confidentiality of the whistleblower’s identity; prohibition of retaliation of any kind; access to the system via a single internal channel ( MITWhistle platform ); timeliness in managing and responding to reports; proportionality of actions to the seriousness of the violations; traceability of reports and management activities. 1.5 Definitions Pursuant to Article 2 of Legislative Decree No. 24 of 10 March 2023, the following definitions apply: Term Definition Reporting The natural person who reports or publicly discloses information about violations acquired in the context of his\/her work Internal reporting Written or oral communication of information on violations, carried out through the internal reporting channel activated by the Company pursuant to Article 4 of Legislative Decree 24\/2023 24\/2023 External reporting Written or oral communication of information on violations, carried out through the external reporting channel activated by ANAC pursuant to Article 7 of Legislative Decree 24\/2023 24\/2023 Public disclosure Making information about violations public through the press, electronic media, or means of dissemination capable of reaching a large number of people, pursuant to art. 15 of Legislative Decree 24\/2023 24\/2023 Violations Actions or omissions, committed or likely to be committed by the Company, which harm the public interest or the integrity of the entity and which consist of: administrative, accounting, civil or criminal offenses; unlawful conduct relevant pursuant to Legislative Decree 231\/2001; offenses falling within the scope of application of European Union or national acts. Information on violations Information, including reasonable suspicions, regarding violations committed or likely to be committed in the organization with which the whistleblower interacts in the context of his\/her work Work context Work or professional activities, present or past, carried out in the context of employment relationships with the Company, through which individuals acquire information about violations Person involved The natural or legal person mentioned in the report as the person to whom the violation is attributed or as a person otherwise implicated in the reported violation Facilitator The natural person who assists the whistleblower in the reporting process, operating in the same work context and whose assistance must be kept confidential Retaliation Any behavior, act or omission, even if only attempted or threatened, carried out as a result of the report and which causes or may cause unjust damage to the reporting person Protective measures Measures aimed at protecting the whistleblower, the facilitator and the subjects connected to the whistleblower from retaliation Report Manager The individual designated by the Company, with autonomy and independence, responsible for managing the internal reporting channel, identified in the MyGold Compliance Officer . Anonymous report Reports made without identifying the whistleblower; if the whistleblower is subsequently identified, the protections provided by Legislative Decree 24\/2023 apply. 24\/2023 2. Regulatory References This Procedure is adopted in accordance with the European and national regulatory frameworks regarding whistleblowing, compliance, personal data protection, and corporate risk prevention. Specifically, MyGold ‘s reporting system is governed by the following main regulatory sources: Legislative Decree 24\/2023 \u2014 implementation of Directive (EU) 2019\/1937 on the protection of persons reporting infringements; Directive (EU) 2019\/1937 \u2014 protection of persons reporting breaches of European Union law; Legislative Decree 231\/2001 \u2014 regulation of the administrative liability of entities and organizational models; Regulation (EU) 2016\/679 (GDPR) and Legislative Decree 196\/2003, as amended by Legislative Decree 101\/2018 \u2014 protection of personal data; Legislative Decree 231\/2007 \u2014 legislation on the prevention of money laundering and terrorist financing; Law 7\/2000 \u2014 regulation of gold brokerage activities and Professional Gold Operators (OPO); Bank of Italy<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-5916","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/pages\/5916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/comments?post=5916"}],"version-history":[{"count":1,"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/pages\/5916\/revisions"}],"predecessor-version":[{"id":5917,"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/pages\/5916\/revisions\/5917"}],"wp:attachment":[{"href":"https:\/\/www.mygoldspa.com\/en\/wp-json\/wp\/v2\/media?parent=5916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}