Banco de Sabadell S A : Workplace Health and Safety Report 2023

Occupational Risk

Prevention Department

2023 Annual Report

March 2024

Table of Contents

1.	Presentation	3
2.	Organization	4

1. Prevention Plan
2. State Committee for Health and Safety (CESS)
3. Legal audit

1. Purpose
2. Development
3. Results
4. Preventive coordination between companies

1. Documentary exchange
2. Most relevant data
3. 2023 eGestiona metrics
4. eGestiona technical office
5. Task force
6. Complementary Coordination of Business Activities management

1. ORP Checklist in branches

1. Overall data
2. Analysis of results by item
3. Critical deficiency management
4. 2023 results. Analysis according to scores

by branch

1. Cardioprotection plan
2. Visits to work centers
3. Improvement actions in branches
4. Improvement actions in corporate buildings

4. Industrial hygiene

30

1. Environmental measurements
2. Deficiency management
3. Hygiene assessments

5. Ergonomics and psychosociology 32

1. Ergonomics
2. Psychosociology

1. Context analysis
2. Results of the 2023 psychosocial risk factors survey
3. Plan for the prevention of conflicts with external parties

1. Training and information

1. Training activities
2. Information channels

1. Employee Service Office

3. Security

16

1. Risk assessments

1. 2023 assessment results
2. Deficiencies associated with the work center and workstation
3. Other assessments

1. Accident rate

1. Accident frequency rate
2. Accident rate of GBS companies
3. Location of accidents
4. Degree of injury in accidents
5. Causes of accidents
6. Accident rate by gender
7. Accident rate by age
8. Accident rate in network, central services, and subsidiaries
9. Corrective/preventive actions adopted
10. Historical evolution of accident rates

6. Health monitoring

38

1. Medical examinations

1. Details by company of RMs carried out
2. Results of aptitude reports derived from RMs
3. Psychosocial health monitoring
4. SPA service quality assessment

1. Management of particularly sensitive personnel
2. Absenteeism

1. General absenteeism
2. Absenteeism with temporary incapacity (IT) from common contingency (CC) and professional contingency (CP)
3. Management of mutual insurance companies (MATEPSS)
4. Occupational epidemiology
5. Health and wellness activities

3.3 Self-protection plans	6.6 COVID-19

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

1. Presentation

It is with a great sense of pride that I present to you once again this year the Annual Report on Prevention Activities carried out by the Banco Sabadell Group (GBS). These activities are framed within the programs included in the Group's Prevention Plan and are oriented both to regulatory compliance and to the development of the Occupational Risk Prevention Management System, thus promoting the integration of prevention in their organizational structure.

The Joint Prevention Service (hereinafter "SPM") of the Banco Sabadell Group has a team of 11 people in the Occupational Risk Prevention Department, which reports to the People Department. Our mission in the Group is to assess risks and provide the management bodies, the companies' personnel, their legal representatives, and the specialized representative bodies (Health and Safety Committees) with the necessary advice, support, and coordination to carry out preventive activities, guaranteeing the adequate protection of the health and safety of the personnel.

I would also like to express my appreciation to all the people from the various areas (Safety, Maintenance, Digital Workplace, Organization, People, etc.) who coordinate and assume responsibilities in the management of occupational risk prevention.

Among the preventive activities in 2023 I would like to highlight these four aspects:

The design and implementation of a plan to prevent conflicts with external parties, an aspect that has a great impact on the customer service sector, especially in the post-pandemic scenario.

The number of occupational accidents recorded, which is at an all-time low. It should be noted that 56% of them are in transit, mostly traffic accidents, which makes them more difficult to prevent.

The regulatory audit process, which was closed without any non-compliance, not even of a minor nature, and with a positive assessment by the auditor of the integration of the management system in the group and its effectiveness.

The declaration by the WHO that COVID-19 was no longer a threat to public health, and the corresponding decline of preventive measures at the national level, with COVID-19 being integrated as a disease in the surveillance system for acute respiratory infections.

All this reflects the maturity and efficiency of the management system, and of the truth in the words Benjamin Franklin gave us 200 years ago:

"An ounce of prevention is worth a pound of cure"

Joan Lluch Orta

Director of Occupational Risk Prevention

Occupational Risk Prevention Department

3

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

2. Organization

2.1 Prevention Plan

The Prevention Plan is the road map for health and safety at GBS, whose policy sets out the principles and guidelines to be followed by the management model. The plan includes a set of resources, functions, responsibilities, and best practices, under the premise of an integrated model that cuts across the entire organizational structure to achieve the best results.

Although the preventive guidelines and processes are established and promoted by the Occupational Risk Prevention Department (DPRL), legally constituted as the Joint Prevention Service of GBS, it is through the integrated model that safe and healthy working environments are achieved. In this sense, the delegation of preventive functions of those responsible for Occupational Risk Prevention (ORP) at the branch, regional and territorial levels, together with the commitment of the centralized units, are the key to the success of the current preventive model.

The Prevention and Safety Officers (RPSOs) are who know the safety conditions in their office and who, thanks to their training, commitment and available resources, help create safe and healthy workplaces.

The DPRL is in charge of assessing risks and planning improvement actions so that the technical areas, and in some cases the RPSOs, solve incidents within the established deadlines. In the initial phase of branch design and equipment acquisition, the DPRL provides the necessary advice to the technical areas, and in some cases the RPSOs, to solve incidents within the established deadlines.

The set of procedures that comprise the Prevention Plan are submitted for review regularly. This year 55 were reviewed, of which:

11 were modified

2 were eliminated

2 were incorporated, with content that is highly relevant due to its broad scope:

Code	Name
08.01	ORP checklist procedure in branches
22.00	Action protocol for conflicts with external parties

2.2 State Committee for Health and Safety (CESS)

Banco Sabadell, S.A. has a State Health and Safety Committee (CESS). In 2023, the CESS of the company Sabadell Consumer Finance S.A.U. was set up. In addition, there are also CESSs in operation in the subsidiaries of Sabadell Digital, S.A.U. and Fonomed S.A.

Meetings are held on a quarterly basis, to discuss health and safety aspects of their respective areas of activity.

Occupational Risk Prevention Department

4

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

They are made up of company representatives, union representatives and the Joint Prevention Service (SPM), which attends as an invited advisor.

It is a forum for information, participation and debate on health and safety, where proposals are formulated and accidents, absenteeism, risk assessments, emergency management, training, organization at work, among many other topics, are monitored.

2.3 Legal audit

2.3.1 Purpose

In compliance with the established periodicity, this year the regulatory audit was carried out by Audelco S.A., an entity authorized to act at the national level.

The Regulatory Audit of the Occupational Health and Safety Management System (OHSMS), in addition to being a legal requirement, is a management tool that assesses the prevention management system, beyond the scope of the SPM, the conformity of the actions of the organization's personnel and the effectiveness of the preventive activities implemented.

The goals of the process are as follows:

1. Determine the conformity of the organization's OSHMS with audit criteria.
2. Assess the ability of the OSHMS to ensure that the organization complies with applicable legal, regulatory, and contractual requirements.
3. Assess the effectiveness of the OSHMS to ensure that the organization continually meets its specified objectives.
4. Identify areas of potential improvement of the OSHMS (where applicable).

In accordance with legal requirements, the Group companies audited are as follows:

Banco Sabadell, S.A.

Fonomed Gestión Telefónica Mediterráneo, S.A.

Sabadell Consumer Finance, S.A.U.

Sabadell Digital, S.A.U.

2.3.2 Development

The process began on May 2 and ended on June 21, 2023. During the process, 36 branches and 5 corporate/ singular buildings in different Spanish geographies were visited. The audit team met with the centralized management with preventive functions, as well as with the Prevention and Safety managers of the affected branches and their staff.

2.3.3 Results

All the areas assessed have received a satisfactory result, without any inadequacies or nonconformities being detected.

Occupational Risk Prevention Department

5

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

The final report favorably assesses the degree of integration of the company's preventive system, as well as its implementation and effectiveness.

In addition, Audelco performs a performance assessment that provides a quantitative measure, on a scale of 0 to 100, to compare the company with the sector and to measure its evolution over time, thus favoring continuous improvement. The overall assessment of the audit is 74 points (advanced level), 4 points above the last audit of 2019 and 9.5 points above the average of the companies in the K sector (financial and insurance activities) audited by Audelco.

2.4 Preventive coordination between companies

The Coordination of Business Activities (hereinafter "CAE") is a legal obligation, according to which the concurrent companies in the same work center coordinate with each other to comply with the regulations in force on occupational risk prevention. All this is to prevent the concurrence of activities in the same work center from generating risks and materializing in an occupational accident. The CAE is articulated through the exchange of documentary information and the effective application of best preventive practices.

2.4.1 Documentary exchange

The eGestiona platform is the on-linetool for exchanging information between GBS and its suppliers, who operate in GBS facilities. The CAE is fully integrated into the bidding and contracting process for works and services, and it is an essential requirement for the supplier to pass the CAE approval phase before signing the contract.

Subsequently, the supplier must continue to report through eGestiona, according to the following model for documentary exchanges with suppliers, under the supervision and control of the Apsis technical office.

Occupational Risk Prevention Department

6

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

2.4.2 Most relevant data

This year, CAE management has been consolidated in the platform, with the collaboration and effort of the areas involved. The most relevant data in relation to suppliers managed at the close of 2023 are as follows:

646	5,188	39,721	93%	95%
Recognition of	Workers	No. documents	% compliance	Approved
suppliers on		managed		suppliers
eGestiona

Of the total 646 suppliers registered in eGestiona, 304 are directly contracted and 342 are subcontracted.

In relation to 2022, there has been an increase in the volume of suppliers, from 581 to 646, as well as a very significant improvement in the percentage of compliance from 84% in 2022 to 93% in 2023.

2.4.3 2023 eGestiona metrics

The compliance level of 93% indicates the percentage of documents delivered and validated with respect to the total required from suppliers registered on the platform. Beyond this average figure, segmenting suppliers by level of compliance in the traffic light graph, we observe that 568 suppliers are at a level rated as very satisfactory, which represents almost 88% of the total.

		568
13	65
Insufficient	Improvable	Very
satisfactory

2.4.4 eGestiona technical office

The suppliers have at their disposal the technical office, whose main task is to accompany and support suppliers in the documentation uploading process, through the channels open for this purpose. In 2023, the technical office handled 1,791 queries and the breakdown by type is reflected in the following table:

1,791

Total

Query type	Number	%
Questions on how to use the platform	336	19%
Password management and user cancellations	578	32%
Documentary validation criteria	325	18%
TA2 registration Registration of a company worker with Social Security	159	9%
Task force follow-up	309	17%
Other queries	84	9%
TOTAL	1,791	100%

Occupational Risk Prevention Department

7

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

The results of the satisfaction survey launched in late 2023, in which 163 suppliers participated, reflect the following:

Regarding eGestiona

Regarding the support branch service

2.4.5 Task force

82% 91%

responded satisfied or very satisfied

responded satisfied or very satisfied

The integration of eGestiona in the access control to work centers is a future challenge that should contribute to consolidating the CAE. Very high levels of compliance must be reached first in order to avoid conflicts and services failures. For this reason, in April a task force was organized, focused on filing claims from suppliers with pending documentation, first from the technical office and then from the DPRL through the contract manager.

As shown in the following graphs, in addition to increasing the document compliance indicator, we have focused on increasing the number of workers registered in eGestiona, which is essential for the successful implementation of access control.

Documentary compliance KPI: 11-point improvement as a result of the claim, follow-up, and control work, reaching 93% at the end of the task force.

KPI Compliance

Overall evolution of new employee registrations: increase of 29%, recording an increase of 1,169 workers, with a total of 5,188 at the end of the year.

Evolution of new employee registrations

Occupational Risk Prevention Department

8

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

Evolution of new employee registrations by activity: we have focused on the most relevant suppliers, by volume and activity, which account for 44% of external personnel.

Evolution of new employee registrations by type of activity

96%	100%	100%	100%		100%
	87%
		52%		49%
43%				Initial
			19%		Final
Security	Cleaning	Comprehensive	Tellers		IT
		Maintenance

The following table shows, for the main suppliers, grouped by activity, the difference between workers in eGestiona before and after the task force, showing a significant improvement of 43 points.

	Activities	Starting no. of	Starting no. of	% starting no. of	Final no. of	Final no. of	% final no. of
	workers	eGestiona workers	eGestiona workers	workers	eGestiona workers	eGestiona workers
	Security	579	248	43%	488	467	96%
	Cleaning	1,742	1,171	67%	1,219	1,219	100%
	Comprehensive	134	70	52%	134	134	100%
	Maintenance
	Tellers	307	59	19%	307	307	100%
	IT	173	64	49%	173	173	100%
	TOTAL	2,935	1,632	56%	2,321	2,300	99%

+43 points

The results of the task force were very satisfactory:

New employee registrations: Most significant suppliers Increase of 43 points, from 56% to 99%.

eGestiona compliance: 11-point KPI improvement 82% 93%

Approvals: 95% suppliers

Occupational Risk Prevention Department

9

1. Presentation 2. Organization 3. Security 4. Industrial hygiene 5. Ergonomics and psychosociology 6. Health monitoring

2.4.6 Complementary Coordination of Business Activities management

The coordination process is complemented with a series of procedures and actions for jobs with a higher intrinsic risk. Depending on the service provided by the external company, a series of preventive measures are applied, included in the Prevention Plan:

It is worth noting that, applying the protocol on work at height, 85 external workers from 22 different companies were authorized in 2023.

In reference to internal events, CAE actions were carried out in the celebrations of Family Day, the 25th anniversary tribute and the Innovation Banking Hack Fest.

Work at height in the 3607 CBS St. Cugat corporate building.

Innovation Banking Hack Fest at the 2950 Aguamarga corporate building.

Also, 10 corporate events held in facilities outside the bank (e.g. JGdA, RAD, Territorial Conventions, etc.) were managed, with more than 100 people from our staff in attendance.

A series of additional coordination activities were carried out with 6 supplier groups:

6. 3D companies				1. Cleaning companies
2 meetings were held with two				4 meetings were held on a regular annual
suppliers who render these services.	6	1	basis. Review of preventive processes and
	reminder of internal GBS protocols.
5. Archive and warehouse				2. Catering
2 meetings and 4 security visits were held at	5	2	3 meetings were held with the managers of
BS Logistics Center.	the service centers.

4 3

4. Temporary employment agencies

2 meetings were held and framework agreements have been updated with the two temporary employment agencies with which GBS collaborates.

3. Maintenance

11 regular annual meetings were held with the group of network branch maintenance and corporate building maintenance companies.

Occupational Risk Prevention Department

10