Corporate Governance and Responsible Corporate Management

Clear responsibilities, binding policies, and regular controls form the foundation of our governance. A group-wide compliance program (Compliance Management System — CMS) supports management and employees in preventing, identifying, and mitigating risks. 

Key components include:

• Binding policies and standards
• Regular risk analyses and internal controls
• Integration into business processes and operational advisory activities
• Ongoing training for all employees
• Systematic review and continuous enhancement of processes
   

One of these Group-wide binding frameworks is the Code of Conduct. This fundamental document defines clear expectations for responsible, lawful, and ethical behavior across all business areas. Its core values include respect for human rights, the assurance of fair labor practices, the promotion of diversity and inclusion, and a strong focus on occupational safety and health. In addition, the Code of Conduct embeds compliance and sustainability as integral elements of our corporate culture and decision-making. For this reason, promoting the sustainable use of resources, environmental protection, and data protection in conjunction with transparent communication is among our most important principles. Through mandatory training and awareness-raising measures, we aim to ensure that these standards are applied in everyday practice.

You can find the Code of Conduct here.

Our responsibility does not end at the shipyard gates. Suppliers are required to comply with our Supplier Code of Conduct and, in doing so, to uphold high standards in occupational safety, human rights, environmental protection, and compliance. From the very first point of contact, a clearly defined supplier qualification process applies; alongside an abstract risk analysis, it includes the collection of relevant information and thereby intends to minimize procurement risks. In addition, we commission annual third-party supplier audits.

You can find the Supplier Code of Conduct here.

As part of the digital transformation of the company and its processes, TKMS applies the highest standards to the protection of its data and information. In light of new, existing, and constantly increasing security threats, the protection of personal and sensitive data is a top priority for TKMS. This is reflected in particular in our overall responsibility toward customers, contractual partners, employees, and society.

To fulfill this responsibility, data protection and information security are taken into account as essential components of corporate processes. With the objective of meeting this responsibility, “Privacy by Design” is of particular importance and is reflected in the ISO 27001-certified data protection management system. This system ensures that employees receive appropriate guidance and training on data protection matters. The Data Protection Officer and the Data Protection Office are responsible for the requirements governing the operational implementation of data protection obligations within the company. At the same time, every employee is required to actively contribute to information security and data protection by handling data and IT systems responsibly and in compliance with applicable rules. Mandatory training and continuous awareness-building sustainably reduce the risk of security-related errors.

We pursue a zero-tolerance policy toward corruption and bribery. For this reason, we actively oppose every form of corruption at all levels, both in Germany and abroad. Preventive conduct is intended to avoid situations that could give rise to conflicts of interest. For this purpose, investigations and the relevant investigative bodies are kept separate from management units. All efforts are aligned with the United Nations Convention against Corruption (UNCAC).

To ensure transparency in management and oversight of business operations, TKMS has implemented a group-wide Global Compliance Program (Compliance Management System — CMS) with a particular focus on anti-corruption, antitrust law, data protection, anti-money laundering, and export control law. It is built on three pillars: “Inform and Advise,” “Identify,” and “Report and Act.” The CMS is reviewed in regular third-party audits. Through compliance e-learning courses, we raise awareness among our workforce of this important topic and provide information about the CMS.

An open culture of communication, transparency, and responsible conduct are essential components of an effective compliance program. Employees must be able to speak openly—and, above all, at an early stage—about mistakes. The aim is to report actual or suspected breaches of applicable law or internal rules at an early stage in order to prevent harm. Employees can contact their managers directly or use the electronic whistleblowing system, which allows anonymous reports via a dedicated telephone hotline, email address, or online portal. The whistleblowing system is open to internal and external employees as well as other third parties. The handling of reports concerning potential violations is governed by a specific procedural policy and guarantees confidentiality.

The company’s electronic whistleblowing system and procedure are available here.

Reports can also be submitted through the following whistleblowing channels:

whistleblowing(at)tkmsgroup.com
TKMS GmbH
Attn. Compliance Investigations
Werftstraße 112-114
24143 Kiel
Phone: (+49) 0173 356 9099

Through clear structures, binding standards, and transparent processes, we build trust with our stakeholders. Our governance and compliance systems are continuously enhanced in order to meet the highest standards of integrity and sustainability.