You may report incidents regarding violations of company Policies, Procedures or applicable laws (e.g. fraud, corruption, theft, embezzlement, money laundering, falsifying accounting records and financial statements, non-compliance with the OTE Group Code of Conduct, or/and OTE Group Policies, issues relating to human rights and in general, any act or omission which could harm the Company or its reputation) by using the communication channels mentioned below:

• Electronic Whistleblowing Form
• Via e-mail: tellmecompliance@ote.gr
• Via telephone: 210 611 2345 (Monday through Friday: 10am until 5pm)
• Via Mail:
Hellenic Telecommunications Organization S.A. (OTE S.A.)
OTE Group Compliance Office,
99 Kifissias Ave., 15124 Maroussi, Athens, Greece
or
Hellenic Telecommunications Organization S.A. (OTE S.A.),
OTE Group Compliance Office,
P.O. BOX 61368 / GR-15104 Maroussi, Athens, Greece

• E-mail: humanrights@ote.gr for issues related to the Code of Human Rights and Social Principles

Please do not use these channels for reporting issues related to Company's services.

Employees or third parties who provide information on wrongdoing or violations of corporate Policies, as well as employees or third parties mentioned or included in those tip-offs shall have the right to obtain access to the personal data, to obtain information as to whether or not personal data concerning him or her are being processed, shall have the right to object, to obtain rectification of inaccurate personal data, as well as to request at any time and without charge the erasure of personal data they have provided under the terms of the General Data Protection Regulation (EU 679/2016-GDPR).

The Compliance Office is committed to collect and maintain only data that is necessary in accordance with the principle of proportionality, to delete them safely after a period of three (3) years, unless there are serious grounds for their maintenance (e.g. ongoing investigations, pending court proceedings), to protect the personal data from loss, misuse, unauthorized access or disclosure, and generally to ensure that there are appropriate technical and organizational measures that guarantee data protection.

The collection and processing of personal data is performed with confidentiality by the responsible employees of the Company who have received special training for this purpose.

Moreover, the OTE Group shall take all necessary measures to guarantee that persons, who provide information on incidents regarding violations, in good faith and having reasonable grounds to believe that the information provided is reliable, do not suffer any personal, business or pecuniary loss. On the contrary, employees who deliberately raise false and malicious allegations shall not be protected.

Finally, it is noted that OTE Group has established clear rules and Policies which define what is allowed and what incidents constitute misconduct. These incidents have consequences for offenders and specific sanctions and penalties are imposed..