Annex 5. SASB Topics

Environmental Footprint of Operations

1.1. Total Energy Consumed (GJ)

2,522,873.07

1.2. Percentage of Grid Electricity (%)

99.11%

1.3. Percentage renewable (%)

22.84%

Data Privacy

2.1. Description of policies and practices relating to behavioral advertising and customer privacy

Due to the nature of the activity (B2B), we do not handle personal information of customers understood as an individual person. Even so, Cellnex has a Private Data Policy. The Cellnex Group guarantees the security, secrecy and confidentiality of personal data under its responsibility, adopting the most stringent and robust security measures and technical resources to prevent the loss or misuse of the data or access to the data without your authorisation.

Morevoer, Clients Personal Data Management Clause included in all the contracts signed by Cellnex with its clients, regarding Personal Data management.

2.2. Number of customers whose information is used for secondary

purposes

Due to the nature of the activity (B2B), we do not handle personal information of customers understood as an individual person.

2.3. Total amount of monetary losses as a result of legal proceedings associated with customer privacy

IAR⁽¹⁾: 7. Extending our commitment to the value chain/Customers/Information security management. (GRI 418-1).

2.4. Number of law enforcement requests for customer information.

Due to the nature of the activity of the company, Cellnex does not receive any requests for personal data from the government or law enforcement authorities.

2.5. Number of customers whose information was requested

IAR: 7. Extending our commitment to the value chain/Customers/Information security management.

2.6. Percentage resulting in disclosure

IAR: 7. Extending our commitment to the value chain/Customers/Information security management.

Data Security

3.1. Number of data breaches

IAR: 3. Showing what we are, acting with integrity/ Global Management System and Rsik Management/ Quality and continuous improvement.

3.2. Percentage involving personally identifiable information (PII)

It has not been necessary, as no breaches have been detected.

3.3. Number of customers affected

It has not been necessary, as no breaches have been detected.

3.4. Description of approach to identifying and addressing data security risks, including use of third-party cybersecurity standards.

IAR: 7. Extending our commitment to the value chain/ Customers/ Information Security Management.

Product End-of-life Management

4.1. Materials recovered through take back programs

IAR:5. Growing with a long-term sustainable environmental approach/Sustainable of resources/Waste management.

4.2. Percentage of recovered materials that were reused

IAR:5. Growing with a long-term sustainable environmental approach/Sustainable of resources/Waste management.

4.3. Percentage of recovered materials that were recycled

IAR:5. Growing with a long-term sustainable environmental approach/Sustainable of resources/Waste management.

4.4. Percentage of recovered materials that were landfilled

IAR:5. Growing with a long-term sustainable environmental approach/Sustainable of resources/Waste management.

Competitive Behavior & Open Internet

5.1. Total amount of monetary losses as a result of legal proceedings associated with anti-competitive behavior regulations

In FY 2020, Cellnex received no complaints for anti-competitive or monopolistic practices, nor have the market or competition supervisory authorities initiated procedures ex officio. Likewise, it received no final judgments or any other type of sanction for such practices (GRI 206-1).

5.2 Average actual sustained download speed of owned and commercially-associated content and non-associated content

Due to the nature of our business, this indicator does not apply to us. Download speed is a service offered directly by network mobile operators to the end customer.

5.3 Description of risks and opportunities associated with net neutrality, paid peering, zero rating, and related practices

Due to the nature of our business, this indicator does not apply to us.

Managing Systemic Risks from Technology Disruptions

6.1. System average interruption frequency

IAR: 3. Showing what we are, acting with integrity/ Global Management System and Rsik Management/ Quality and continuous improvement.

6.2 Customer average interruption duration

IAR: 3. Showing what we are, acting with integrity/ Global Management System and Rsik Management/ Quality and continuous improvement.

6.3 Discussion of systems to provide unimpeded service during service interruptions

IAR: 3. Showing what we are, acting with integrity/ Global Management System and Rsik Management/ Quality and continuous improvement.