Governance matters

Transparent governance

Corporate governance

gategroup and its subsidiaries are committed to maintaining high standards of corporate governance.

The principles and rules of corporate governance at gategroup are stipulated in the Articles of Incorporation, the Organizational Regulations of the Board of Directors, and the Charters of the Board Committees. These documents are regularly reviewed by the Board of Directors (BoD) and adapted as necessary. More information is available on the Corporate Governance ¹ page of our website.

Compliance framework

gategroup has implemented a comprehensive compliance framework based on a risk-based methodology. This approach includes a range of policies addressing key areas such as anti-bribery and anti-corruption, competition law, trade sanctions, data privacy, and operational compliance topics including quality and food safety.

We conduct function-specific compliance training across our units, including shop-floor sessions on topics such as ramp safety, security, and chemical handling. In 2025, gategroup also rolled out two legal compliance training programs:

In addition to e-learning, we conducted multiple classroom training sessions for designated groups, strengthening compliance awareness across the organization. Specifically, these were:

To actively manage governance, compliance and risk, gategroup has established a Global Risk and Compliance Committee (GRCC). Chaired by the Chief Legal Officer, the GRCC meets quarterly and includes all members of the EMB alongside subject matter experts. At the regional level, Business Risk and Compliance Committees (BRCC) meet quarterly to ensure local oversight.

Third-party reporting system: The Integrity Line

gategroup maintains a third-party reporting system, the Integrity Line, which is accessible online and via telephone. Hosted by an external provider, the system guarantees anonymity for reporters, if desired, and is available to employees, suppliers, and business partners should they wish to report concerns and potential issues, seek guidance, or pose questions.

Aligned with the EU Whistleblowing Directive, the Integrity Line is actively promoted by gategroup through various channels, including the public-facing website ¹. The cases are typically handled regionally, with quarterly updates provided to the GRCC.

In the 2025 reporting period, there were 277 submissions to the Integrity Line, compared with 263 in 2024. The reports were concerned with:

All cases undergo an independent review by gategroup’s Legal & Compliance team and, if appropriate and necessary, external forensic experts. If the reported allegations are substantiated, there are follow-up actions and remediation implemented, where required.

Corporate risk management

gategroup employs a systemic approach to managing risks and opportunities, balancing informed risk-taking with a commitment to minimizing potential adverse effects.

The Corporate Risk Management framework includes:

Using a top-down risk identification procedure starting at the strategic level, Risk Registers have been developed in collaboration with Risk Owners from the following areas: Commercial, ESG, Finance, Food Solutions, IT, Legal & Compliance, Operations, People & Organization, Procurement, and Retail.

Two review and reporting cycles per year ensure that gategroup maintains its risk awareness as well as its capacity to act according to the guidelines outlined in its Corporate Risk Management Policy.

Created in 2025 by the EMB, the Corporate Risk Council periodically reviews new risk information before it is passed on to the EMB and to the Board of Directors.

gategroup’s risk management system is aligned with the ISO 31000:2009 Risk management standard and supported by an ongoing program of education and training.

IT and cyber security

Securing data and maintaining operational continuity are critical for our business. We are dedicated to maintaining the highest standards of information security, reputation, and data privacy. Our comprehensive strategy focuses on key priorities, including ensuring smooth operations, complying with stringent regulations such as the EU's Network and Information Systems (NIS) Regulation, protecting sensitive information, and proactively mitigating ever-evolving cyber risks.

The NIS Regulation reinforces our approach to managing cybersecurity threats and ensures the resilience of our critical infrastructure. Guided by our Global Information Security and Data Privacy policies, we are dedicated to protecting and managing our data and infrastructure effectively, while respecting individual privacy and preserving the integrity of our business.

With this in mind, we focus on:

In 2025, we continued to strengthen our cybersecurity maturity and risk management capabilities. As some of the key performance highlights, during the year we:

In IT, we position ourselves as pioneers in the responsible use of technology and artificial intelligence to strengthen our cybersecurity capabilities. By leveraging AI-driven tools, we enhance threat detection, accelerate response times, and proactively identify emerging risks, while ensuring alignment with data privacy, ethical standards, and regulatory requirements.

This innovative approach reinforces operational resilience, protects sensitive information, improves our detection, reaction, and response time, and supports the long-term sustainability of our digital infrastructure.

Business conduct

Animal welfare

Due to our purchasing of meat and seafood ingredients, considerations for animal welfare are a material topic for gategroup, especially in relation to the farming and production of animal and seafood products.

In August 2022, gategroup committed to purchasing 100% cage-free egg products (including shell eggs, liquid eggs, and mixes containing more than 80% egg) by 2025. Progress has been slower than expected, primarily due to limited market availability of processed ingredients that meet our quality requirements in certain regions. In 2025, 64% of egg products were cage-free globally.

Although full implementation is taking longer than anticipated, we remain committed and will continue working with the Lever Foundation and other organizations to expand cage-free options worldwide.

We aim to fulfill our global plan to achieve a supply chain of 100% cage-free eggs by 2028, subject to the availability of the required raw materials. Due to strict food safety considerations in our operations across the globe, we are seeking egg products that meet the following requirements and look forward to engaging with manufacturers and processors to achieve our goal of reliable and seamless supply:

While some market participants are choosing to use cage-free egg certificates, gategroup focuses on ensuring a physical cage-free supply for our operations. We believe this approach delivers more tangible and beneficial outcomes for animal welfare in the long run.

_{*     Remark: in year 2025, 100% was aimed for, but was not achievable due to avian influenza}

^{**   Japan values saw a temporary decline due to decreased volume of highest cage free eggs products sold}

In Europe, North America, and Asia Pacific, we actively promote cage-free egg products to our customers during menu presentations and change to these as market availability allows. In some countries within these regions, we have fully adopted cage-free sourcing, though supply fluctuations can occasionally impact consistency.

Expanding on our earlier commitment to source more sustainable salmon in North America, Europe, and Oceania, as of 2025, our updated broader goal is to aim for the sourcing of certified farmed fish & seafood purchased in these regions and broadening it to Asia Pacific. Within our supply chain, we aim to address environmental, social, and strong animal welfare considerations by meeting certification standards such as:

In 2025, 34% of the farmed fish & seafood (and products containing more than 80% farmed fish & Seafood) purchased for our North American, European and Asia Pacific markets came from certified producers. By 2030, we aim to ensure that the majority of farmed fish & seafood supplied to our units in these regions meets one of these recognized certification standards. While we are aware that certification programs vary in their approach to animal welfare, we remain committed to advocating the highest standards of animal welfare among our suppliers.

Conflict minerals statement

The term “conflict minerals” typically refers to four minerals - tungsten, tantalum, tin, and gold – that may be mined in conditions associated with armed conflict and human rights abuses. They are primarily sourced from the eastern region of the Democratic Republic of Congo. Also known as 3TG, these minerals are used in a wide range of products, including jewelry and virtually all electronic devices.

To the best of our knowledge, we neither directly nor indirectly use these minerals in our products or procure them for any other purpose. gategroup therefore determines that conflict mineral due diligence is not required in our supply chain risk management at this stage.

Child labor due diligence statement

Respect for human and labor rights is a fundamental component of gategroup’s values and business principles. We uphold all international human rights norms and codes, including but not limited to the:

Our priorities include fostering a safe, healthy working environment that ensures fair employment practices. Child labor is prohibited in our Code of Conduct, Supplier Code of Conduct, and Human Rights Policy.

Beyond these policy measures, gategroup has conducted a risk assessment of its entire supply chain to identify areas at potentially higher risk of child labor, based on the UNICEF’s Children's Rights in the Workplace Index (June 2023), an online platform covering 195 countries.  The index methodology is guided by two United Nations reporting frameworks – the Guiding Principles on Business and Human Rights and the Children’s Rights and Business Principles – and includes over 150 indicators. Many indicators are child-specific, while others address broader human rights issues that directly and indirectly impact children due to where their families live and work.

To the best of our knowledge, we have no known purchase volume with material suppliers in countries classified by the Children’s Rights in the Workplace Index ¹ as “heightened risk". However, in 2025, we identified 1,578 suppliers with active spending located in “enhanced risk” countries. For these suppliers, we have implemented additional controls and will continue to conduct regular due diligence on an ongoing basis.

In 2025, we did not receive any reports or indications of child labor in our supply chain from suppliers or other stakeholders.