RISK MANAGEMENT & COMPLIANCE
The Foundation for Long-Term Value Creation
Responsible corporate governance is a central component of ECE’s sustainable strategy. As early as 2012, ECE established a comprehensive compliance management system that is continuously adapted to new legal, regulatory, and societal requirements. Today, compliance is an essential component of the management of the entire company and helps to ensure trust, reputation, and long-term corporate success.
GOVERNANCE, COMPLIANCE, AND RISK MANAGEMENT
Integrity and compliance with regulations form the foundation of ECE’s governance structures. The Code of Conduct, which applies to all employees and business partners, is implemented through policies, guidelines, and processes that are regularly reviewed and adapted to meet new requirements. Key elements include, among others, business partner compliance, conflicts of interest, handling of gifts, antitrust law, anti-money laundering, and donations and sponsorship.
A key component of the compliance management system is the regular conduct of compliance risk analyses. These support the early identification of relevant risks, the development of appropriate preventive measures, and the continuous improvement of the system. The results are incorporated into processes, training programs, and other control measures.
The strategic development of compliance, governance, and sustainability issues is managed through a cross-functional Governance Circle. This body facilitates communication among the relevant departments and oversees the implementation of regulatory requirements within the company.
The effectiveness of the compliance management system is regularly reviewed by independent third parties. Most recently, the system was audited in 2026 by the Institute for Corporate Governance in the German Real Estate Industry (ICG) and certified through April 2029. ECE has thus once again been certified as having a values-based compliance management system in accordance with Section 7.9 of the ICG Bylaws. The repeated audits and certifications confirm the continuous development of the system as well as the consistent embedding of compliance and integrity at ECE.
“For us, compliance means more than just following the rules. With a strong compliance culture, regular risk analyses, responsible business partner relationships, and a certified compliance management system, we are continuously advancing our governance capabilities.”
BUSINESS PARTNER COMPLIANCE AND RESPONSIBLE COLLABORATION
Integrity does not end at the company’s boundaries. We require our business partners to adhere to ECE’s Code of Conduct through binding compliance standards. Furthermore, in its business relationships with suppliers, ECE takes into account human rights and environmental due diligence obligations as well as the requirements of the Supply Chain Due Diligence Act (LkSG).
COMPLIANCE CULTURE AND WHISTLEBLOWER SYSTEM
Effective compliance management thrives on a corporate culture that promotes integrity, transparency, and a sense of responsibility. ECE encourages employees and external parties to address potential risks or misconduct at an early stage and provides appropriate reporting channels for this purpose. The embedding of a compliance culture is supported by regular training sessions as well as communication and awareness initiatives.
DATA PRIVACY AND INFORMATION SECURITY
The protection of personal data and the responsible handling of corporate and business information are essential components of responsible corporate governance. ECE supports compliance with data protection requirements through a comprehensive data protection management system, binding regulations, consulting, and training. In this way, we make an important contribution to protecting the rights of customers, business partners, and employees.
INFORMATION
ECE provides employees, business partners, and other third parties with appropriate reporting channels through which potential violations of legal requirements, internal policies, or the Code of Conduct can be reported at any time, including anonymously.