f. alleged financial irregularities relating to the members of the Board of Directors of VistaJet including its committees, including the Executive Management Committee (“ExCo”); and/or

other activities believed to be illegal or unethical that relate to VistaJet’s financial statements, public disclosures or compliance with international laws.

“Other Matters” under this Procedure include:

a. Suspected or known breach of applicable law, including breaches of law relating to:

i. Public procurement

ii. Financial services, products and markets

iii. Product safety and compliance

iv. Transport safety

v. Protection of the environment

vi. Radiation protection and nuclear safety

vii. Food safety; animal health and welfare

viii. Public health

ix. Consumer protection

x. Protection of privacy and personal data

b. suspected or known breach of any VistaJet code, policy or procedure, and/or,

c. alleged irregularities concerning the functioning of the members of the Board of Directors of VistaJet including its committees, including ExCo; and/or,

d. other activities believed to be illegal or unethical.

If any Employee is concerned about any Improper Practice listed above that he/she reasonably believes has taken place, is taking place, or will take place, then he/she has a duty to promptly report such concerns in accordance with this Procedure (hereinafter referred to as “Report(s)”).

Non-Applicability: If an Employee has a grievance or private complaint relating to his/her own employment position, e.g., the Employee’s grievance or complaint does not have a public interest dimension, is not a breach of applicable law or has no detrimental effect to Employee rights within the EU, then any such grievance or complaint should NOT be reported under this Procedure but should be referred directly to the Human Resources department immediately. For example, a personal sexual harassment report shall not be filed under this Procedure.

Reporting

VistaJet has a dedicated “Whistleblowing Reporting Officer” (“WRO”) with whom Employees can raise any matter of concern.

To facilitate Employee submissions VistaJet offers multiple channels to submit a report.

VistaJet has established a whistleblowing hotline and e-Portal (together, the “Portal”) hosted by an external party specializing in the area of whistleblowing.

To make a Report, please use the channels provided below:

• The online portal can be accessed here: https://app.convercent.com/en-US/LandingPage/4b95deb0-ce85-ec11-a988-000d3ab9f296
• For the telephone hotline, please access the portal from the link above and select the location you are calling from. A telephone number shall be provided to you via a pop-up.

In this way Employees can make reports and may also request to have a physical meeting with the WRO to discuss the Employee’s concern, as well as present any supporting evidence. Alternatively, an Employee can also submit a Report and/or contact the WRO with any questions at the following:

Address:

VistaJet,
Compliance and Ethics Department,
Level 4, Sky Parks Business Centre,
Malta International Airport,
Luqa. LQA 4000. Malta.

E-mail: internal@vistajst.co.uk

All correspondence should be marked “Strictly Confidential”.

Both the Whistleblowing Reporting Officer and the Chief Legal Counsel have visibility to Reports received at the above e-mail address, as well as any designated person as directed by the Whistleblowing Reporting Officer (with the help of the Chief People Officer) who have specific expertise in receiving and investigating reports made.

Acknowledgment of Receipt

Receipt of the Report, will be acknowledged within seven (7) days or sooner, unless acknowledgement within such timeframe is not reasonably possible.

Investigation

The following procedure is put in place to assess the reported concerns regarding an improper practice and to ensure that the Report is investigated, to the extent necessary, in a prompt, adequate and thorough manner.

The WRO must notify the Chief Legal Counsel, the Chief People Officer and to any other person he reasonably deems appropriate (each a “Designated Person”), within five (5) business days from receipt, of all Reports he receives. In reports relating to Financial Matters, the Whistleblowing Reporting Officer must also notify the Chief Financial Officer.

Responsibility for an investigation may be delegated by the WRO and/or by the Designated Person (and/or the Chief Financial Officer, where applicable) to any member of management and/or to independent counsel and other advisors who are competent in handling such reports and who will report directly to the Whistleblowing Reporting Officer.

Notwithstanding the above investigation procedure, with respect to reports concerning suspected or known breaches of the VistaJet Anti-Money Laundering Policy, these Reports shall be investigated by the VistaJet Money Laundering Reporting Officer (MLRO) or the Whistleblowing Reporting Officer who also acts as MLRO. The MLRO / Whistleblowing Reporting Officer may conduct any investigation without the involvement of any other person.

VistaJet management members, independent counsel and other advisors may be consulted and/or involved in investigations, as appropriate.

The investigation will be conducted and concluded within reasonable time, dependent upon the nature of the alleged violation and the circumstances of each case and will be responded to no later than 3 months from the date of the report.

Prompt and appropriate corrective action will be taken in response to any finding of improper conduct involving breaches. It is the responsibility of VistaJet’s management to implement any disciplinary measures. The WRO shall at all times be kept informed with any corrective action taken.

Periodically the Chief Legal Counsel and/or the Chief People Officer shall report to ExCo and to the Board of Directors the number of reports received, whether they related to Financial Matters or Other Matters, and what steps were taken to address them.

If a Report involves the Whistleblowing Reporting Officer or the Chief Legal Counsel or the Chief People Officer then the person concerned shall not be involved in the afore-stated investigation process.

All Employees are obliged to fully co-operate with and assist in any Report investigation.

All Reports will be handled in a confidential manner. Confidentiality will be maintained to the fullest extent possible, consistent with the need to conduct an adequate investigation of the Report and to perform subsequent remedial measures.

The Employee who filed the Report under this procedure may receive general information from the WRO and/or the Designated Person on the progress and the outcome of the investigation, unless giving such feedback would be detrimental to the investigation. The Whistleblowing Reporting Officer and the Chief People Officer shall have sole and absolute discretion on the information that will be disclosed to any Employee filing a Report.

The Whistleblowing Reporting Officer shall keep a log of all filed Reports, actions performed, the status of the investigations, and any corrective actions.

Anonymous Reports

All reports will be treated in strict confidence and the WRO will not disclose information that identifies or may lead to the identification of the Employee, unless the Employee expressly consents in writing to the disclosure of that information.

This Procedure encourages the employees to include their name when making the report, as it gives greater credibility to the concern raised, and assists the WRO in investigating the allegation. Nevertheless, an anonymous report submitted by an employee would still be considered by the WRO, who will take into consideration the seriousness of the issue raised, the credibility of the concern and the possibility of confirming the allegation from other sources.

An anonymous report is not treated as a protected disclosure in terms of applicable Maltese law, but it may still be received, processed and considered in determining whether an improper practice has occurred. Furthermore, should an Employee be identified following an anonymous report, and consequently suffers retaliation, that disclosure would still be a protected disclosure, provided that it was made in made in good faith, not for personal gain and based on reasonable grounds. Employees who wish to remain anonymous may file an unsigned Report through the above channels.

Protection from Retaliation

This Procedure is created with a view to engender and promote an atmosphere in which Employees feel free to promptly file complaints concerning improper practices and breaches without fear. Thus, when an Employee submits a report relating to an Improper Practice outlined above, that report qualifies as a ‘protected disclosure’ for whistleblowing purposes and protects the employee (and anyone assisting the Employee with submitting such report) from retaliation, or any adverse action being taken against them.

VistaJet will not discharge, demote, suspend, threaten, harass or in any manner discriminate against any person because of any Report filed in good faith by him/her under this Procedure, which may include any of the following where this can be deemed as a result of retaliation:

• Suspension, lay-off, dismissal or equivalent measures
• Demotion or withholding of promotion
• Transfer of duties, change of location of place of work, reduction in wages or change in working hours
• Withholding of training
• A negative performance assessment or employment reference
• Imposition or administering of any disciplinary measure, reprimand or other penalty, including a financial penalty
• Coercion, intimidation, harassment or ostracism
• Discrimination, disadvantageous or unfair treatment
• Failure to convert a temporary employment contract into a permanent one, where the worker had legitimate expectations that they would be offered permanent employment
• Failure to renew, or early termination of, a temporary employment contract
• Harm, including to the person’s reputation, particularly in social media, or financial loss, including loss of business and loss of income
• Blacklisting based on a sector or industrywide informal or formal agreement, which may entail that the person will not, in the future, find employment in the sector or industry
• Early termination or cancellation of a contract for goods or services
• Cancellation of a license or permit

VistaJet shall maintain procedures that ensure none of the above actions take place with respect to retaliation. This includes ongoing monitoring to ensure that those who speak up remain protected and will enlist the expertise of its outsourced Whistleblowing Portal provider to ensure best practice is adopted with regards to identifying possible cases of retaliation using analytics, ongoing monitoring and effecting prompt corrective measures to deal with any instance of retaliation should it be found or suspected.

VistaJet does not tolerate any form of threat, retaliation or other action against any Employee who has in good faith made or assisted in the making of a Report. Any such threat, retaliation or other action should immediately be reported to VistaJet’s Whistleblowing Reporting Officer to the Chief Legal Officer or to the Chief People Officer. VistaJet treats any such threat, retaliation or action as a disciplinary matter which might lead to dismissal.

An Employee making a Report will be afforded all protections provided under this Procedure and applicable country specific Whistleblowing law, regulations and directives.

False Reporting

Intentional false Reports or other failure to act in good faith will lead to disciplinary proceedings against the Employee filing the false Report, which disciplinary proceedings may include dismissal from employment.

False reporting could also lead to civil or criminal prosecution. VistaJet does not indemnify or reimburse any Employee who has made a false Report for costs or other consequences related to such false reporting.

Presumption of Innocence

Any Employee implicated in a Report shall be presumed innocent until allegations are proved.

Processing of Personal Data

If the Company processes any personal data for the purposes of this Procedure, whether the personal data belongs to the Employee or to any individual referred to in the report, the Company shall process such personal data in accordance with the VistaJet Privacy Policy, available on the VistaJet website.

The legal basis for such processing is for the Company to comply with its legal obligations.

External Report

The aim of this Policy is to provide an internal mechanism for reporting, investigating and remedying any improper practices at the Company, and in most cases should be sufficient to handle the concerns raised.

Should the Employee, however, feel that s/he has not been provided with an adequate response to the internal report made, or that no action has been taken by the Company within the established timeframe, s/he may report the concerns to the external competent authority.

Important Note:

The Employee is only protected in this instance if an internal report has already been made without adequate response or redress and there are reasonable grounds for such external report. Such reasonable grounds are limited to the seriousness and/or urgency of the alleged improper practice, there is risk of evidence being concealed or destroyed, or the head of the Company and/or the Whistleblowing Reporting Officer are involved in the improper practice.

Public Report

As a means of final resort, the employee may report the breach publicly.

Important Note: The Employee is only protected in this instance if all the following conditions are fulfilled:

1. If an internal report and an external report has already been made, but no appropriate action was taken in response to the reports within the stipulated timeframes
and
2. The concern relates to an imminent danger to the public interest, there is risk of evidence being concealed or destroyed, or where there is collusion between the perpetrator and the authority receiving the external report

Confirmation

Each Employee shall periodically, whenever requested by VistaJet, individually confirm in writing, or by any electronic means introduced by VistaJet from time to time, to VistaJet that s/he has read this Procedure.

Document owner

Whistleblowing Reporting Officer

Version control