ShowYourSustainability
Fi En

Sustainability report

01.01.2024-31.12.2024

Kestävyysraportti 2024

Yritys AB

CONTENTS

You can navigate the report by clicking on different sections of the table of contents

OVERVIEW

GENERAL INFORMATION


SIGNIFICANT IMPACTS, RISKS AND OPPORTUNITIES

• ESRS E1 Climate change mitigation, Materiality: Very large
• ESRS S1 Own workforce: We ensure that all other work-related rights are in place and that we do not employ child labor, Materiality: Very large
• Comprehensive taxonomy alignment in our operations, Materiality: Very large
• ESRS S1 Own workforce, working conditions, Materiality: Very large
• ESRS S2 Ensuring the working conditions of value chain employees, Materiality: Very large
• We are not taxonomy-aligned in terms of our operational activities or procurement., Materiality: Very large
• ESRS S1 Own workforce, working conditions, taking care of good working conditions, Materiality: Very large
• ESRS S4 Ensuring the impacts related to consumer and end-user information, Materiality: Very large
• ESRS S2 We ensure that the other work-related rights of employees in the value chain are upheld, and that no child labor is used, Materiality: Very large
• ESRS G1 Utilizing waste heat from other operators in the area promotes regional carbon neutrality, Materiality: Very large
• ESRS S2 Ensuring equal treatment of employees in the value chain, Materiality: Very large
• ESRS E1 Energy: The adoption of energy-efficient technology, Materiality: Very large
• ESRS G1 Supply security and continuity, Materiality: Very large
• ESRS G1 Business conduct: We ensure the protection of whistleblowers and uphold our corporate culture, Materiality: Very large
• ESRS S1 Own workforce, We secure equal treatment and equal opportunities for everyone., Materiality: Very large
• ESRS G1 Local employment and jobs are important to us, Materiality: Very large
• ESRS G1 Utilizing waste heat from other operators in the area reduces the procurement of raw materials for combustion, Materiality: Very large
• ESRS G1 Business conduct: We are politically independent, Materiality: Very large
• ESRS S4 Ensuring equality for consumers and end users, Materiality: Very large
• ESRS S4 Ensuring the personal safety of consumers and end-users, Materiality: Very large
• ESRS E2 Pollution of air, Materiality: Large
• ESRS E1 Adapting to climate change, Materiality: Large
• ESRS E4 Biological diversity and ecosystems consideration in our area of activity, Materiality: Large
• ESRS G1 Business conduct: The relationships with suppliers of goods and services are good., Materiality: Large
• ESRS E1 Energy: Reducing energy consumption and considering energy efficiency , Materiality: Large
• ESRS G1 Business conduct: We prevent corruption and bribery, Materiality: Large
• ESRS E2 Substances of concern: Hazardous chemicals, Materiality: Large
• ESRS S3 Impact on the community. Ensuring the civil rights, political rights, and the rights of indigenous peoples within communities, Materiality: Large
• ESRS E4 Biological diversity and ecosystems may require investments., Materiality: Large
• ESRS G1 Business conduct: Animal welfare, Materiality: Large
• ESRS E3 Water and marine resources: Water consumption, Materiality: Large
• ESRS E4 Impacts on the state of species, Materiality: Large
• ESRS S3 Impact on the community. The communities' economic, social, and cultural rights, Materiality: Large
• ESRS E2 Pollution of water, Materiality: Large
• ESRS E4 Impacts on the extent and condition of ecosystems and on ecosystem services and dependencies on them, Materiality: Large
• ESRS E5 Promoting circular economy, Materiality: Moderate
• ESRS E2 Substances of concern: In production equipment, Materiality: Moderate
• ESRS E3 Water and marine resources: Extraction and use of marine resources, Materiality: Small
• ESRS E2 Pollution of living organisms, Materiality: Small
• ESRS E2 Pollution of soil, Materiality: Small
• ESRS E3 Water and marine resources: Water consumption, Materiality: Very small
• ESRS E3 Water and marine resources: Water withdrawals, Materiality: Very small
• ESRS E3 Water and marine resources: Water discharges, Materiality: Very small
• ESRS E2 Microplastics: Microplastic emissions from our own operations, Materiality: Very small
• ESRS E3 Water and marine resources: Water discharges in the oceans, Materiality: Very small

OPERATING PRINCIPLES, GOALS AND MEASURES

• Sustainability Program Management System
   • Target: ESG Social responsibility personnel
   • Target: ESG Social responsibility Development of personnel skills
   • Target: ESG Social responsibility The gender and age distribution of the personnel is balanced, provision has been made for retirements and backup arrangements have been ensured
   • Target: ESG Social responsibility Non-discrimination and human values
   • Target: ESG Social responsibility-Stakeholders
   • Target: ESG Social responsibility - Customers and residents of the area
   • Target: ESG Social responsibility Participation of partners and collaborators
   • Target: ESG Social responsibility-Stakeholder complaint process
   • Target: ESG Social responsibility - stakeholder engagement program
   • Target: ESG Social responsibility-Occupational health and safety goals, and risk assessment/hazard identification Partners and contractors Own staff
   • Target: ESG Administration and management
   • Target: ESG Administration - Continuity management
   • Target: ESG Social responsibility: Customer satisfaction measurement and feedback channels in use
   • Target: ESG Management-supplier management Management/reporting and monitoring of deviations, observations and feedback channels
• Risk Policy
   • Target: ESG Administration - cyber security, information security and data protection
• Sustainable Development Strategy / Policy
   • Target: ESG Environmental waste management
   • Target: ESG Environment - Energy efficiency
   • Target: ESG Environment - Scope 1-2-3, CO2 zero goal
   • Target: ESG Administration - Maintenance reliability of electricity networks
   • Target: ESG Administration - Transmission capacity of electricity networks
   • Target: ESG Administration - Digitalization
   • Target: ESG Environment-Business environment, climate change/Chronic stressors/ EU taxonomy
• Procurement Policy and Procurement Handbook
• Credit Risk Policy

SUSTAINABILITY COMMUNICATION


ENVIRONMENTAL ISSUES

Overview

Excellent results in an international sustainability assessment - determined leaps towards a carbon-neutral company.

We have continued our work to promote Loiste's sustainability and last year received excellent results in the international infrastructure sector Global Real Estate Sustainability Benchmark (GRESB). Our overall result (98/100) is clearly above the average (88/100) of other companies that participated in the evaluation. We received five out of five stars in the comparison and ranked second in our own comparison group.

The GRESB assessment annually measures the operations and success of companies in several different areas in environmental matters, social responsibility and good governance, i.e. the so-called ESG matters (Environment, Social (people) and Governance).

Sustainability is at the center of all our activities. It means that all our business operations look for and implement business-wise the solutions and investments that best promote sustainable development and our responsibility. Loiste Group's board of directors has outlined and approved a sustainable development strategy in 2022. The strategy defines the target state and the methods of engaging the community in ESG principles. By committing to ESG standards and principles, our company publicly demonstrates its commitment to ESG and zero emissions. In this work, we use the standards of the organization's processes and the frameworks required by the EU Directives, which are generally accepted, and which impose obligations on us to comply with the regulations. Our commitment is described in this responsibility report.

We work purposefully to reduce emissions and promote the green transition. Our goal is to increase the production and use of renewable energy and to end the use of fossil fuels.

Loiste is renewing its district heating production capacity. The project will be based as much as possible on the waste heat and electric boilers of the data centers located in Kajaani - the production equipment will therefore be based on emission-free and energy-efficient technology. Business Finland granted about 5.4 million euros in EU support. In the production of district heat, we are moving to a so-called hybrid model, which utilizes new technologies in a versatile way. Our goal is to make our district heating production completely carbon neutral by 2026. Today, the district heating network covers approximately 70 percent of the area of ​​the central agglomeration of Kajaani. Our work to improve the supply security of the electricity grid and to connect the increasing local electricity production to the grid also continued last year. 45.6 megawatts (MW) of new wind power was connected to our electricity grid. There are currently five wind farms connected or about to be connected to the network, with a total power of about 500 MW. The construction of small solar power plants also continued strongly. 271 new small power plants were connected to the grid. Electricity grid loss is emission-free energy from the beginning of 2024.

As a responsible employer, we promote an open and caring work culture. For continuous work to improve the working community, we have received 88% in the Great Place to Work™ certification. This year, Loiste was selected among the 50 best companies in Finland. This means that Loiste is a really good place to work as a whole - the corresponding figure is an average of 39 percent in Finnish companies. We have been certified since 2013. The recognition came now for the fourth time, and the result was the best so far.

Lasse Aarnio, CEO, Loiste companies


Standards and regulations considered in the report
The sustainability report for the financial year 2024 has been prepared in accordance with the international IFRS S1 (General Requirements for Disclosure of Sustainability-related Financial Information) and IFRS S2 (Climate-related Disclosures) standards, the European Union’s Corporate Sustainability Reporting Directive (CSRD), the requirements of the European Sustainability Reporting Standards (ESRS), and the EU Taxonomy’s technical screening criteria.


General information

Description of the organization’s operations
The sustainable development responsibility program has been prepared to cover the entire group. Regarding EU Taxonomy alignment: Loiste Energia Oy, Loiste Lämpö Oy, Kajave Oy, Otanmäen Lämpö Oy, and Loiste Liittymisjohdot Oy.
Our operations are 96% EU taxonomy-aligned in terms of revenue, 100% in CAPEX, and 91% in OPEX. This is influenced by the share of Kainuun Voima, which is neither taxonomy-eligible nor taxonomy-aligned (4%). In the short term (1–2 years), there will be no changes in the business as a whole. In the medium term (2–4 years), the business environment will remain largely unchanged, but district heating production will become almost emission-free and fully taxonomy-eligible. In the long term (over 4 years), we require 100% taxonomy-eligibility and full compliance with sustainable development across the entire value chain involved in our operations.

The scope of consolidation is the same as in the financial statements and includes all subsidiaries.

The sustainability assessment covers the company’s upstream and downstream value chain as follows (ESRS BP-1):
• Upstream: contractors, supply chain workers, suppliers, and energy production plants
• Downstream: customers, residents, the community, owners, financiers, society, our own employees, and other stakeholders we impact

In Loiste's operations covering the entire value chain, there are no risks related to child labor, and this is therefore considered immaterial. The operations of the Loiste companies take place in Finland and are subject to national supervision, internal monitoring by Loiste, and supplier assessments. The supply chain includes international operators, from whom we require compliance with ILO, OECD, UN human rights, and other international standards and guidelines. We conduct supplier assessments regularly.

Key focus is placed on monitoring environmental, social, and governance aspects of contractors, the supply chain, suppliers, and production facilities. We conduct audits of these chain actors and monitor legal compliance through official reports. Workplace safety in particular is under continuous monitoring, and other areas are audited annually.

We do not report classified or sensitive information in the public sustainability report, nor do we disclose material involving industrial property rights, trade secrets, or results of innovation activities. We also do not publish information on ongoing development initiatives with strategic business impact or information not yet available for publication due to supplier cooperation.

Reporting timeframes

We follow the following reporting timeframes:

a) Short term: the same period as the financial reporting period;
b) Medium term: up to 5 years; and
c) Long term: over 5 years.

In addition, we may refer to specific risk-related timeframes:
-1–30 days
-1–11 months
-1–5 years
-5–20 years
-over 20 years

There is no measurement uncertainty related to quantitative indicators and financial estimates within the value chain.

Company operations

We renew and secure the energy infrastructure of Kainuu and surrounding areas and contribute to achieving regional carbon neutrality goals. We operate regionally under official oversight. We do not use banned products or operate in prohibited markets. Our actions focus on improving our own operations, ensuring the responsibility of our value chain (subcontractors, partners, and customers), and our products and services. Our responsible operations include evaluating and considering the direct and indirect impacts of the company on the environment, people, and society during the annual strategic review. We implement due diligence through measurement, value chain assessments, and reporting (GOV-4). Our operational policies, targets, and indicators, as well as procurement and supplier policies, detail the key actions taken and planned for the future, their expected results, and where applicable, how their implementation supports achieving the objectives of our operating principles. These actions cover all business operations and stages of the value chain in the Kainuu area. Our sustainable development strategy includes the scope and volume of necessary investments (MDR-A).

The company’s financial, legal, and operational status is assessed systematically and comprehensively as part of the strategic planning update and the regular monitoring of operational activities (due diligence, GOV-4, AR8-10). The organization of these assessments, monitoring of effectiveness, and communication are as follows:

- Responsibility for assessment: business processes
- Audit: group management team
- Reporting: group board of directors
- Monitoring of goals: committees reporting to the management team and board
- Stakeholder communication: via the group management team or business units

Description of the business model and value chain used to implement the strategy (SBM-1)

1.    Inputs and approach: gathering information, developing and securing operations:
a.    Market analysis as a basis for strategy
b.    National and EU legislation: current and upcoming
c.    Identifying business value chains and stakeholder analysis
d.    Additional information found in:
•    Other management systems and scope
•    Scope and coverage of the responsibility program
•    Description of company operations
•    Sustainable development strategy
•    Vision
•    Mission

2.    Outputs and outcomes: current and expected benefits for customers, investors, and other stakeholders:
a.    Updated stakeholder descriptions
b.    Stakeholder expectations and strategic alignment
c.    Impacts of legislation and EU directives
d.    Additional information found in:
•    Stakeholders and their needs and expectations
•    Scope and coverage of the responsibility program
•    Sustainable development strategy

3.    Main features of the upstream and downstream parts of the production chain and the company’s role in its value chain, including key actors (e.g., main suppliers, customers, distribution channels, end users) and their relationship to the company. If multiple value chains exist, disclosures must cover the key ones.
a.    Additional information found in:
•    Description of company operations
•    Stakeholders and their needs and expectations
•    Procurement policy
•    Sustainable development strategy

Customers

Electricity transmission business:
- Transmission is a monopoly, and all residential and business customers in our area with a valid electricity transmission contract are customers.

District heating business:
- The sector is competitive, and customers include both consumers and businesses with valid district heating contracts.
- District heating products and services support all Kainuu region customers in achieving sustainability goals. Primarily carbon-neutral heat will be available during 2026.

Electricity production business:
- Electricity produced is sold on the NordPool electricity exchange.

Loiste Liittymisjohdot Oy:
- Customers may include wind farms, solar farms, and large industrial facilities requiring high-power connection lines.

Value chain assessment is conducted annually before supplier evaluation. Significant suppliers are identified and evaluated via electronic or oral assessments on sustainable development topics. The questionnaire follows the content of the Procurement and Supplier Policy. Uncertainty in the value chain relates to those actors who do not receive the questionnaire, and the impact is deemed small or very small based on the materiality analysis. Regarding upstream emissions in the value chain, there is uncertainty about how reliably verifications have been obtained and how ready the actors are to provide emissions data, especially when it concerns Loiste (BP-2).

The responsibility program describes the basic principles of our operations and the environmental, social, and societal impacts of our activities (ESG: Environment, Social, and Governance) and how we promote the sustainable development impact of our stakeholders on our own operations.
The responsibility program includes limited disclosure of information in accordance with ESRS 1 7.7 that relates to intellectual property, know-how, innovation outcomes, classified information, or sensitive information.

Organization description
Structure, Governance, Business Operations and Support Processes (GOV-1)

The board is responsible for overseeing the company's Environmental, Social, and Governance (ESG) initiatives, ensuring that sustainable practices are integrated into the business strategy, and monitoring the progress and impact of these initiatives to align with stakeholder expectations and regulatory requirements.
The Compensation Committee is structured to ensure independence and objectivity in its decision-making processes. It typically comprises independent directors who are not part of the company's management team. These directors are selected based on their expertise and ability to provide unbiased oversight of executive compensation practices. The committee's primary responsibilities include reviewing and approving executive compensation packages, ensuring alignment with the company's performance and strategic goals, and maintaining transparency with shareholders. To further ensure independence, committee members are required to disclose any potential conflicts of interest and recuse themselves from decisions where such conflicts may arise.

The group’s structure, governance and decision-making, business sector monitoring, impacts and strategic actions are maintained, documented and monitored through systems used for describing business processes and subprocesses. The articles of association define the company’s business name, the Finnish municipality of domicile, the line of business, and signing authority. The official version is available for each company individually through the Finnish Patent and Registration Office. The board’s rules of procedure include guidelines on adherence to ethical governance principles, the articles of association, ownership steering, governance policies, operating methods and decision-making procedures.

In accordance with ESRS 3 GOV, governance processes, control actions and procedures used to monitor, manage and oversee impacts, risks and opportunities are described in the policies. Management of impacts, adverse impacts, risks and opportunities (IRO-1) is described in the materiality analysis' impact assessment, identification and evaluation of adverse impacts, and the risk management process. Metrics and targets (MT) are described in connection to the policies and risks. All defined metrics are calculable and verifiable.
A designated ESG Controller participates in board meetings and provides expertise to the board on relevant topics (GOV-1).

Strategy (SBM): The way the company’s strategy and business model interact with its material impacts, risks and opportunities is described in the strategy and policies.

The company’s board of directors ensures and receives reports in accordance with its role (GOV-2), that:
• The company’s accounting and related documentation is up to date, complete and compliant with Finnish law;
• The company’s audit is carried out by an independent and reputable auditing firm;
• The company’s financial statements are prepared in accordance with generally accepted accounting principles (GAAP) in Finland, as well as in accordance with EU and Finnish legislation; and
• The company’s internal control and risk management is organized, risks are insured, and the insurance coverage is adequate. The board and management lead the company according to the latest updated business plan.
• Group-level risks, opportunities, development areas and corrective actions are reviewed by the board at least twice a year.
• Business continuity is integrated into business operations and considered at the management team level.

Company shareholders and shares:
• City of Kajaani: 50.1%, number of shares 5010
• Municipality of Sotkamo: 16.0%, number of shares 1600
• Kanerva Energia Oy: 33.9%, number of shares 3390
• Total: 100.00%, number of shares 10000
*All shares have equal rights to dividends and the company’s assets.

Board composition 2024 – All board members are independent (100%).
• Paavo Niemelä (Chair) City of Kajaani, until 29.11.2024
• Risto Oikari (Chair) City of Kajaani, from 29.11.2024
• Teemu Niva (Vice Chair) City of Kajaani
• Raili Myllylä, City of Kajaani
• Pentti Huttunen, Sotkamo
• Ari Koponen, Kanerva Energia Oy
• Jussi Kärnä, Kanerva Energia Oy
• Anna-Stiina Boström, Expert, until 29.11.2024
• Piia Tarkiainen, Expert, from 29.11.2024
• Markku Ryymin, Expert, until 23.4.2024
• Janne Raatikainen, Expert, from 23.4.2024

• Presenter: Lasse Aarnio, Loiste Group, CEO
• Secretary: Tarja Juntunen, Loiste Group, ESG Controller

Deputy members:
• Johanna Saarivaara, City of Kajaani
• Antti Kela, Sotkamo
• Samuli Kivipelto, Kanerva Energia Oy, until 15.5.2024
• Markus Hassinen, Kanerva Energia Oy, from 15.5.2024

The company’s CEO is Lasse Aarnio.
The company’s auditor is KPMG Oy Ab, with Authorized Public Accountant Antti Kääriäinen as the responsible auditor.

The board has 8 regular members, 25% of whom are women. Board members are not employed by the company. In addition, the CEO and CFO participate in board meetings, and the ESG Controller of Loiste Group acts as the board secretary.
To ensure their independence, these members are required to provide a written declaration of their affiliations and relationships.

Roles and Responsibilities

Companies
The Loiste Group includes: Loiste Oy, Loiste Holding Oy, Loiste Energia Oy, Loiste Lämpö Oy, Kajave Oy, Loiste Liittymisjohdot Oy, and Otanmäen Lämpö Oy. Loiste Oy, Loiste Holding Oy, Loiste Energia Oy, Loiste Lämpö Oy, Kajave Oy, and Otanmäen Lämpö Oy each have a Board of Directors and a Managing Director who are responsible for the company in accordance with shareholder agreements, the Finnish Limited Liability Companies Act, the Articles of Association, and any other applicable agreements. Loiste Liittymisjohdot Oy has a Board of Directors.

Business Operations
The group has three profit-responsible business units: Electricity Network (electricity transmission and distribution), Heating (district heating or cooling distribution, and from 2026, production of heating or cooling using waste heat and heat energy storage), and Electricity Production (hydropower-based electricity generation, and from 2026, bioenergy-based electricity generation and electricity storage) (SBM-1 – business model). The business unit leaders have long-standing industry experience and comprehensive knowledge of sustainability requirements, enabling the execution of the group’s sustainability strategy.

Group Management Team:
7 regular members, 4 of whom are women.

CEO of Loiste Group
CEO of Electricity Transmission Business
CEO of District Heating Business
CEO of Electricity Production Business
Head of HR and Communications
Group Business Controller
Business Controller, Electricity Transmission Business

The Group Management Team is regularly informed by:
Committee representatives (environment, OHS and continuity management, HSEQ)
ESG Controller
ICT Manager

Shared Support Processes
The group’s shared processes that support business operations include: finance, HR, communications, IT, ESG/sustainability and quality (HSEQ).

Profit Responsibility
The group CEO is responsible for overall management, and business unit directors are responsible for business operations, reporting to the CEO. Leaders of shared service processes also report to the CEO. The primary responsibility lies with the business unit director, and any subsidiary CEO role is a secondary responsibility serving the business function.

Management Team
The management team serves as a decision-making tool, with members selected by the CEO. It makes decisions under the CEO’s mandate. Corporate decision-making is guided by the Corporate Governance guidelines. Topics addressed by the management team may be escalated to the group’s board of directors. Group-level risks, opportunities, development areas and corrective actions are reviewed by the management team at least twice a year. The management team has 7 members, 4 of whom are women.

Leadership Teams
Business unit leadership teams make decisions under the business director’s mandate and report to the management team, as well as report on business decisions and status to the group’s board. Business unit leadership and operational teams monitor risks, opportunities, development areas and corrective actions as part of their role-specific responsibilities. Business units update risks for reporting, the ESG Controller compiles a summary presented to the management team and board according to the reporting schedule.

Committees
The group has various committees to ensure and prepare compliance with standards, reflected in daily business practices. The role of the committees is to ensure strategy and policy integration into processes and monitor set quality indicators. Committees communicate information within the organization using agreed procedures. Committee and management work is also assessed through internal audits. Process monitoring is discussed in different committees. The tasks of the committees are described in the section "Sustainability Program Operating System."

Monitoring Compliance with Guidelines

Guideline monitoring is carried out as part of operational oversight and through internal and external audits, in accordance with the responsibilities defined by process owners. Additionally, committees meet regularly four times a year and report the results of goals and indicators to management and the board via working groups. Management is audited by the audit firm as part of statutory audits.

The up-to-dateness of documentation is checked during internal audits. Additionally, guidelines are reviewed as needed in internal development meetings, in the management team, and during audits.


Description of the organization's products and services
Products (SBM-1)

Electricity Distribution Business:

- Kajave Oy provides connections to the electricity grid for customers in its geographically limited network area and offers services in accordance with the network service terms agreed with the customer. The service terms are fair and non-discriminatory for all customers. Kajave is committed, in accordance with the Electricity Market Act, to maintaining, operating, and developing its electricity network to ensure a sufficiently high-quality electricity supply for its network users.

- Loiste Liittymisjohdot Oy is responsible for electricity network construction for wind farms, solar power plants, and large industrial sites.
- Sustainability-related goals: a functional and energy-efficient, climate-resilient, energy-efficient, and low-loss electricity network. Ensuring equal electricity supply for customers. Releasing forest areas for natural growth due to cable installations. Detailed further in the policies under the goals section.

District Heating Business:

- District heating connections available for all customers in the district heating network area.
- District heating supply agreements.
- Customer equipment condition assessments and energy efficiency optimization.
- Monitoring of district heating pipelines.
- Sustainability-related goals: an energy-efficient district heating network operating with minimal loss.
- District heating products are as CO2-free as possible, and waste heat from data centers is maximally utilized based on availability. Detailed further in the policies under the goals section.

Electricity Production Business:

- Hydropower production and sales to the NordPool market with various products utilizing Fingrid's reserve and power market products.
- Other renewable energy productions and their sales to NordPool.
- Detailed further in the policies under the goals section.


Scope and coverage of other management systems
Certified Operations: The sale of thermal energy, electricity production, and electricity transmission, including the operations of the following companies: Loiste Lämpö Oy, Loiste Energia Oy, and Kajave Oy. The quality of our operations is developed, monitored, and reported using certification systems. In Finland, we are a pioneer in the energy sector when it comes to developing operations through certified systems. In 2000, we simultaneously certified our quality, environmental, and occupational health and safety management systems. Our management system and processes take into account the broad value chain of sustainable development as well as the impacts of our own operations in the following ways:
• Full participation of people
• Process-based operating model
• Continuous improvement
• Evidence-based decision-making
• Stakeholder collaboration

The requirements, policies, goals, objectives, and operating instructions in our management system are based on the standards ISO 9001, ISO 14001, ISO 45001, and ETJ+. Additionally, we use reporting aligned with the ESRS standard framework. These apply to all companies in the Group. In our monitoring, we implement our internal technical implementation model, which includes processes, metrics, and documentation guidelines.

All of the standards in our management system share a common structure:
• Identification of the operating environment and stakeholders: requirement evaluation, risk identification, corrective actions, and monitoring
• Description of processes and adherence to a process-based operating model
• Observations related to deviations, customer feedback or complaints, improvement suggestions, and near misses, including their documentation, monitoring, and measurement
• Internal audits, supplier audits, and the transparent management and documentation of the resulting actions
• Inspections, controls, and their documentation, such as equipment inspections, inspections during service or production, result compilation and reporting, and communication of results
• Setting quality and efficiency targets, measuring and communicating them in a systematic manner
• Measuring customer satisfaction, processing stakeholder feedback, and communicating the results
• Monitoring and measurement of process and operational development projects (e.g., lean projects, reducing environmental impacts, improving occupational health and safety)
• Providing accurate information for management reviews


Operating environment
Our operating environment is located in the Kainuu region and parts of Northern Ostrobothnia in Finland. We are responsible for electricity distribution across the entire Kainuu area and part of Northern Ostrobothnia, district heating production, distribution, and sales in the urban areas of Kajaani, Otanmäki, and Vuolijoki, as well as electricity generation from hydropower plants that we own or operate. Our total revenue is 100% derived from these business operations. We are also responsible for managing electricity and district heating services and overseeing the partners involved in these services.

The electricity network business is tasked with delivering electricity fairly and safely to all regional customers and connecting new customers to the grid. In developing the network, we account for the capacity and reliability requirements posed by the energy transition. The network operator is responsible for maintaining and developing the security of electricity supply in line with reliability targets. We prepare for weather-related outages by maintaining continuous network monitoring and fault repair readiness to minimize customer disruptions. We listen to customers and other stakeholders by organizing a public consultation on the electricity network development plan every two years.

Our district heating business operates in Kajaani, Otanmäki, and Vuolijoki. Competition in the heating sector is intensifying as geothermal and air-source heat pumps become more common and technologically advanced. Our mission is to remain competitive and serve our customers' best interests.

In electricity production, we generate power at our own hydropower plant and at Kainuun Voima's hydropower plants. We also aim to participate in and invest in the growth of solar and wind power production. Our electricity production is emission-free, contributing to the expansion of carbon-neutral renewable energy.

We actively participate in preparatory working groups of industry organizations, where we gain insights into legislative reforms and industry development. This information is shared within our organization and with our partners. We comply with administrative, social, and environmental requirements in accordance with evolving regulations.

The energy transition and digitalization drive continuous change in the energy sector, creating new operational models. We play a key role in mitigating climate change and electrifying society. People expect us to act responsibly.

We maintain ongoing dialogue with regional stakeholders, considering local development needs and the potential for expanding renewable energy production as part of our strategic due diligence process. We engage with our owners on regional development and training needs to attract new employees. We offer our staff opportunities for education and diverse career paths as job roles evolve. We collect customer insights, feedback, and areas for improvement to better serve the region's residents.

Our risk assessments cover a wide range of risks related to the company, industry, development, personnel, customers, finance, and operations.

The EU Taxonomy sets requirements for sustainable development and supports the achievement of the EU’s environmental objectives. Meeting these objectives requires concrete actions, which we as an energy company are committed to taking.

We operate in compliance with applicable laws, regulations, and standards relevant to our company. We are expected to manage environmental matters effectively and to fulfill our social responsibility as an employer, contractor, and energy provider. Our governance must be diligent and adhere to principles of good governance. We are committed to supporting the achievement of the UN Sustainable Development Goals. In our business operations, we monitor developments in legislation and ensure legal compliance.

Sustainable long-term operations require us to adopt sustainable development principles and ensure that our stakeholders are equally committed. We handle personal data of employees, customers, and other stakeholders in accordance with GDPR. Customer satisfaction is a core company value. Our key stakeholders participate in a comprehensive and systematic evaluation of our company’s financial, legal, and operational status during the annual strategic planning update process (owners), and the most significant suppliers are involved in evaluating our operational activities. (GOV-4, AR8–AR10)

We incorporate technological development and innovation into our projects and aim to procure technology that meets sustainability, EU taxonomy, and energy efficiency criteria, in accordance with our procurement policy. We are involved in programs committed to reducing greenhouse gas emissions and strive to produce competitively priced energy for our customers with environmental responsibility.


Stakeholders and their needs and expectations
(SBM-2) Stakeholders are entities that influence the operations of the Loiste Group, and they are also influenced by our operations. Stakeholders include both internal and external parties. Stakeholder perspectives, roles, feedback management, and relationship management are part of business planning. Risks related to stakeholders and their management models are taken into account in various processes. Risks must be identified and managed from the perspective of the entire stakeholder network. Business environments and ways of working change as the operational context evolves. Managing change includes the management of different collaboration models. Activities and interactions are monitored and measured using various methods. We analyze and measure the impact of our operations using feedback, development ideas, and risk management assessments. We monitor the quality of stakeholder actions, respect for human rights, risks, occupational health and safety (OHS), and engage stakeholders in our own activities. Stakeholders are expected to report any misconduct, penalties, hazardous situations, or accidents to the company. Data collection is supported by an electronic feedback form available on our public website. The data is submitted anonymously unless the individual chooses to provide contact details. Reports are reviewed according to agreed schedules in service management meetings.

The information obtained through stakeholder cooperation is used to improve operations and quality and to implement corrective measures. In strategic planning, we identify our stakeholders and influencer groups. For each stakeholder group, we identify necessary actions based on their expectations. Based on this, we develop engagement and action programs. These programs are evaluated for each stakeholder group separately by collecting feedback and improvement suggestions through electronic surveys or in meetings. Feedback is handled in business meetings or in the group’s management team, and if necessary, in the board of directors. Feedback sessions are held as open customer or supplier meetings or owner meetings. If needed, we organize briefings or training sessions on various topics.

Key stakeholders of the Loiste Group include:

Customers:
Our customers expect supply reliability, reasonable pricing, and responsible operations from us. Our actions affect our customers. Customers are the consumers of our products and the recipients of our services. We monitor customer experience and provide electronic feedback options to better fulfill customer requirements. We manage customer data in accordance with the Personal Data Act and GDPR. Monitoring takes place in Data Protection Working Group meetings. We collect customer feedback and improve our operations based on the feedback. We ensure customer safety during construction work. We also support renewable energy integration into the grid. Our company is expected to consider biodiversity and environmental protection. We monitor the changing needs and expectations of district heating and electricity transmission customers by collecting feedback, consultation comments, deviations, and environmental surveys, and by conducting customer satisfaction tracking. We ensure supply reliability in all operations and minimize disruptions caused by interruptions in compliance with laws and regulations. We treat customers equally and humanely, even in times of crisis. Business continuity risk management concerning energy supply during crises is described in the company’s Risk Policy.

Electricity network operations are also required to ensure non-discrimination in relation to customers and other electricity market participants, and to prepare a separate non-discrimination compliance program. Non-discrimination is ensured using an inspection table created by the Finnish Energy organization, internal audits, and through the actions of the non-discrimination program. This program, along with the annual action plans and reports derived from it, are submitted to the Energy Authority and published at www.kajave.fi.

The quality of all our services must meet at least the minimum requirements set out in our delivery terms.

Local residents:
People and companies in our area of operations, affected by our activities, expect risk-free operations and compliance with environmental, social, and good governance requirements.

Personnel:
Employees expect leadership in line with our values and ethical guidelines, as well as compliance with legislation. Personnel are a key asset, and their well-being and occupational safety must meet legal requirements. Personnel expectations are assessed as part of Loiste’s strategy work (HR strategy is updated every 1–3 years). Employee satisfaction is measured annually using the TrustIndex survey and regularly through mood surveys. Employees are provided opportunities for feedback, personal development, and equal treatment. Occupational health conducts regular workplace inspections assessing both physical and mental well-being and provides development recommendations. We comply with the Cooperation Act, gender equality plan, and UN human rights principles. Loiste also has a guidance document used in strategic management and by employees outlining the rules of a good workplace, covering: early intervention, equality, non-discrimination, workplace bullying, resilience, early intervention in substance use, behavior rules, and value-based conduct.

Employees receive regular updates from management through monthly briefings. Expectations and feedback are monitored and verified through metrics such as transparency, improvement implementation, respect, fairness, and cooperation.

Employees expect suitable roles and a working environment characterized by openness, communication, listening, and encouragement. The workplace must be healthy and safe. Employees expect opportunities for developing their professional and social skills, and career advancement. Training is supported, and needs are discussed in personal development reviews. Our HR strategy aims to ensure the right expertise during organizational changes, to engage and motivate employees, and to create conditions for continuous development in line with changing industry and customer needs.

Every member of our community is treated fairly and equally, regardless of age, gender, work capacity, beliefs, or any other personal characteristics. Our operations are fair and our reward policy is motivating. Employees expect a balance between private and work life, supported by flexible working hours and remote work opportunities.

We encourage every Loiste employee to contribute to environmentally friendly and responsible operations. Loiste has an Occupational Health and Safety (OHS) Committee and programs that monitor internal and stakeholder-related OHS topics, with regular ISO 45001-compliant reporting to manage risks and measure quality.

Ethical rules guide our everyday operations. Working opportunities, environment, and tools are maintained to support employee success and development. Work is largely independent of time and place and is evaluated based on outcomes.

Loiste has a “Good Workplace Umbrella” that covers:
- Early intervention in the workplace
- Equality and non-discrimination
- Equality plan
- Workplace bullying
- Resilience
- Substance abuse
- Workplace conduct rules
- Acting according to our values
- Equal treatment at the workplace

Owners:
Our owners expect us to carry out our business purpose as defined in the articles of association – conducting and developing energy operations responsibly, sustainably, and in compliance with legislation, while achieving the operational and financial targets set in our business plans. Owners are engaged through regular meetings, and governance is defined in the board’s rules of procedure.

Our board and management are responsible for ensuring that the owners' expectations regarding operations and financial responsibility are fulfilled. Operational management ensures that the board and owners receive accurate information about our business environment, challenges, financial situation, customer expectations, employee well-being, operational risks, and societal impacts.

Financiers:
Financiers expect our business and profitability to develop as anticipated in financing agreements and for us to stay within the covenants (special conditions in loan agreements). They also expect long-term planning regarding profitability and loan servicing. Loiste owners have emphasized responsible operations alongside goals of good returns and reliable service. Profitability enables further business development. Financiers require compliance with SFDR requirements, which we incorporate in our sustainability program and report according to the needs of financiers and owners. We operate in accordance with the EU taxonomy and ESG principles to support green finance renewal.

We are committed to managing our businesses with quality, solvency, and competitiveness. Corporate responsibility is part of our everyday operations and creates value for our owners. Responsible operations mean not only profitability but also building and sustaining vitality. Our companies are accountable for performance to owners, financiers, and other stakeholders.

Partners and Service Providers:
Partners expect long-term development and transparency from us. We expect high-quality, cost-effective, and transparent operations from our partners. The Loiste operating environment includes a variety of service productions and operates through a broad partnership network. Partners follow our principles and rules. Activities are regularly monitored and measured, with results reviewed jointly. Supplier evaluations are conducted annually.

We monitor partner feedback, development needs, risk management, operational quality, and expectations in systematic service management meetings and through market dialogues during tenders. Partner engagement is vital for operational flexibility. Our partners expect clear procedures, long-term collaboration, and responsibility, which create productive cooperation. Our business model is network-based, and long-term partnerships are seen as success factors. We expect our partners to share our values and comply with our ethical rules. Loiste’s ethical rules are part of partner onboarding. Partner and service production management are regularly reviewed in joint steering and service management meetings.

Our social responsibility extends to partners, subcontractors, and other stakeholders, as well as to the broader society. Through our social responsibility, we can promote societal well-being and safety. Actions that positively impact employees, stakeholders, and society generate economic value and competitive advantage. Our social responsibility also covers the personnel of our partners, contractors, and subcontractors when they work under our commission.

Partners must comply with laws and regulations. Activities are monitored in service management or similar meetings. Feedback and risk management are discussed with partners.

Society:
Our environmental performance and social responsibility are central to various societal aspects. We comply with legislation and EU regulations. Our activities are monitored and measured by authorities. We specifically consider future preparedness in relation to climate change, ESG, and the EU taxonomy, where relevant to our sector.

Society expects good environmental stewardship and social responsibility from us as an employer, contractor, and energy provider. We are expected to provide proactive and informative communication that clarifies our purpose. Authorities expect compliance with laws and regulations and monitor our operations through regular reporting. Good corporate citizenship includes responsible financial management.

Kajave Oy, which manages electricity network operations, supports regional youth activities through the annual “Taustavoimaa” grant. This grant supports diverse recreational activities for children and youth within the company’s network area, without restrictions on the type of activity. Information is published at the beginning of each application period on kajave.fi.

Society expects us to consider the environment in designing and maintaining electricity and district heating networks and production facilities. We are committed to protecting the environment, plants, and animals. Our ISO 14001 environmental certificate ensures systematic monitoring and improvement of environmental matters. We participate in regional solar and wind power projects to help enable their implementation.

Business leaders, experts, and partners ensure that management and development of operations also consider society’s delivery and security of supply expectations. We maintain emergency preparedness plans with authorities to secure energy supply during exceptional situations. We measure our performance and are committed to continuous improvement. We maintain preparedness and crisis management plans. Every three years, we submit electricity grid preparedness plans to the Energy Authority, along with annual non-discrimination programs and reports. We regularly practice electricity outage scenarios with our partners.

All staff have access to an up-to-date service with relevant environmental and occupational safety legislation.

We are committed to managing our companies with quality, solvency, and competitiveness. Corporate responsibility is part of our daily life and adds value for our owners. Our responsibility includes both economic profitability and sustaining vitality. Our companies are accountable for sustainable performance to owners, financiers, and other stakeholders.

Media:
The media expects open and timely communication about our events and societal impacts. We proactively communicate environmental aspects of our electricity and district heating network design and construction and energy production. Our external communications ensure timely information across various media so that stakeholders remain informed.

Authorities:
Electricity network operations are licensed and represent a natural monopoly, supervised by the Energy Authority. This regulation ensures customer protection. In heating and production, authorities expect energy efficiency and compliance with emission and raw material storage requirements through environmental permits.

Authorities oversee compliance with legislation. We cooperate with environmental, energy, municipal, land survey, and other relevant authorities. Each calendar year, we report key figures to the Energy Authority, such as operational scope, financials, profitability, pricing, efficiency, and quality. Our activities are governed by the Electricity Market Act. Customer non-discrimination and uniform treatment are legally protected, along with reliability of supply and fair pricing.

Electricity and district heating operations are critical for national preparedness, requiring regular and strategic cooperation with relevant preparedness authorities.


Scope and coverage of the sustainability program
We incorporate the requirements of the European Union’s CSRD directive (Corporate Sustainability Reporting Directive) into our operations and require compliance with the directive from our suppliers as well. Our sustainability program also covers the requirements and operational system based on ISO 9001, ISO 45001, and ISO 14001. The program outlines our company’s principles for sustainable development standards (ESRS = European Sustainability Reporting Standards), quality management, and leadership. The operating and work instructions of business operations are not part of the official documentation of the management system, but they are integral to process management.

Company description of the business model and value chain through which the strategy is implemented in practice:

Products and Services:
Purchased products and services follow our group’s procurement policy and guidelines. In the service production chain, construction contracting is outsourced, coordinated and ordered by various companies within the Loiste Group. Suppliers, products, and services must adhere to the procurement rules and values set by the Loiste Group. Suppliers play a significant role, but are subject to competitive tendering, so the risk of supplier availability is low. Materials comply with EU directives and industry standards; personnel-related requirements must comply with UN, ISO, ILO, and OECD standards, and environmental legislation must be followed.

Outputs and Outcomes:
The outcome is a weatherproof electricity network aligned with our sustainability strategy, nearly CO2-free district heating, and operations that comply with sustainable development standards. Stakeholder expectations and their fulfillment are described in the stakeholder overview.

Areas of Responsibility:

Social Responsibility
Social responsibility includes our relationship with people, stakeholders, communities, and society. We consider employee rights and well-being, equality, human rights, and occupational safety. We require our partners to uphold the same principles. We take care of our customers and our impact on local people and communities. We ensure that we can uphold our values whenever we interact with customers, employees, or partners. Everyone deserves to feel recognized and safe. We are evaluated as an employer, customer, partner, and investment target. We support local well-being and employment and enable new forms of energy production by facilitating their connection to our network. In terms of social responsibility, we follow the UN Sustainable Development Goals (SDGs) 8 (Decent Work and Economic Growth), 11 (Sustainable Cities and Communities), and 17 (Partnerships for the Goals).

We develop our staff’s expertise. We are a good partner. We require non-discrimination throughout our entire value chain. Physical and mental safety is part of our culture, and we maintain a work environment that promotes and sustains well-being.

Environmental Responsibility
We operate close to people and recognize the environmental impacts of our activities. We prioritize environmental friendliness and energy efficiency in all our procurements. We create and offer energy-efficient solutions and services to our customers. We consider responsible land use and biodiversity both in our own operations and those of our service providers. Loiste Group aims to be carbon neutral by 2026, and we support Finland’s goal of becoming carbon neutral by 2035. We are involved in planning, constructing, and maintaining a weatherproof electricity network that supports the growth of renewable energy production. We are transitioning to CO2-neutral production methods for both district heating and electricity. Preventing environmental risks is of utmost importance to us. We also expect concrete actions from our partners that support the achievement of CO2 targets in Finland.

Economic Responsibility
We manage the company responsibly, sustainably, and competitively. Social responsibility is part of our everyday work, and we create added value for all our stakeholders through responsible actions, contributing to the region’s economic impact. We deliver electricity and heating cost-effectively and are accountable for our financial profitability. Administrative responsibility means not only economic profitability but also building and maintaining vitality. Our daily operations across the entire value chain are guided by ethical principles.

EU Taxonomy Compliance
Loiste Group’s operational policy is to comply with the EU taxonomy in all areas. We ensure that taxonomy requirements are identified in our processes where applicable. Our operations are assessed annually by an external party. The taxonomy eligibility of our operations and all group companies has been verified. Compliance with taxonomy eligibility and its continuity is monitored both internally and in the activities of significant suppliers.


Value chain
The beginning and end of the company’s value chain are as follows (ESRS BP-1):
• Upstream: contractors, supply chain workers, suppliers, and energy production facilities
• Downstream: customers, residents, community, owners, financiers, society, our own employees, and other stakeholders we influence


Integrating sustainability actions into strategy
The Board of Directors of the Loiste Group has outlined and approved the sustainable development strategy/policy in 2022. The strategy defines the target state and the methods for engaging the community and suppliers in ESG principles. By committing to the UN, OECD, and ILO standards as well as the CSRD directive and its related standards and principles, our company publicly declares its commitment. Business operations are guided to comply with the EU Taxonomy, ESRS standards, and other relevant frameworks. The implementation of the strategy is monitored through audits.

Our goal is to achieve carbon neutrality in our own operations by the end of 2026. Loiste Lämpö is investing in its own CO2-free district heating production.

1. SCOPE 1: Target is a 100% reduction by 2026, when our own heat production is completed.
2. SCOPE 2: CO2-free starting from the beginning of 2024.
3. SCOPE 3: Reduction of more than 10% from 2023 to 2030. This is influenced by the readiness of suppliers and contractors to reach carbon neutrality.


Info
Taxonomy
100% of our business is taxonomy-eligible. We are currently conducting calculations to determine taxonomy alignment. Our goal is to be 100% taxonomy-aligned.


Mission

As a responsible energy infrastructure company, we are present in the everyday lives of Kainuu residents and enable the region’s development.

Vision

We are a responsible renewer of energy infrastructure. We focus on maintaining and developing energy infrastructure in Kainuu and surrounding areas. We ensure the development and distribution of carbon-neutral district heating for customers in our service area. We are involved in building renewable energy production in our region. We are committed to supporting Finland’s goal of becoming carbon neutral by 2035 and aim to achieve carbon neutrality in our own operations by 2026.

We contribute to a low-carbon and resource-efficient society by promoting the adoption of renewable and innovative energy production and storage solutions.

We produce emission-free electricity at hydropower plants under our management. We maintain and develop our electricity network to meet the needs of today and tomorrow, taking local conditions into account.

We enable our customers to access as carbon-neutral district heating as possible by investing in renewable energy sources. We collaborate with various stakeholders and actively support the transition towards environmentally friendly and renewable energy production.

We maintain and develop our electricity network to meet current and future needs and local conditions. We enhance the reliability and capacity of the electricity network to meet the demands of an increasingly electricity-dependent society. We enable our customers’ green transition by developing the electricity network in response to evolving needs.

Values

Joyfulness

Effectiveness​

- We set reasonable goals to achieve our strategy. We work together and individually to deliver results.
- We are proactive and committed to effective action.

Customer Orientation

- We act ethically and responsibly, respecting other people and the environment. We contribute to building vitality.
- We are proud of our roots.
- We never compromise on safety.
- We listen to our customers and continuously improve our operations based on their needs.

Courage

- We boldly take action and always strive for better solutions.
- We have the courage to pursue innovative solutions or investments, tolerate uncertainty, and learn from mistakes.

Trust

- We mean what we say and keep our promises. Trust is at the core of our human-centered culture.
- We act transparently and communicate clearly. We are open to the ideas of others and encourage sharing them.
- We respect and value one another. At Loiste, everyone is seen and heard as their true selves.

Material impacts

This section describes the impacts of our operations that result in material benefit or harm to the environment or society, as well as the external impacts that cause us material financial risks or opportunities.

Materiality analysis

Reporting in accordance with the ESRS standards covers the company’s strategy and governance related to a material sustainability topic, details of the measures implemented, as well as the objectives and key performance highlights, creating transparency and accountability in sustainability reporting. The materiality assessment has taken into account the taxonomy criteria relevant to Loiste's business, as well as the environmental impacts of its own operations and value chain as required by the technical screening criteria.



In assessing the materiality of climate change mitigation topics and setting thresholds, the requirements arising from SBT targets were considered. If a topic is relevant to achieving SBT targets, it is always classified as material or highly material.



Basic SBT requirements set for companies:



1. Scope 1 & 2 emissions reduction requirements:



Companies must reduce their Scope 1 and Scope 2 emissions by at least 4.2% annually. If a company produces electricity, it must reduce its emissions intensity by more than 7% per year.



2. Scope 3 emissions reduction requirements:



If a company’s Scope 3 emissions account for more than 40% of its total emissions, targets must be set to reduce them. Scope 3 emissions must be reduced by at least 2.5% annually.



3. Net-Zero 2050 target:



The company must achieve net-zero emissions by 2050.

Net-zero targets include both short- and long-term emissions reduction measures.



Loiste participates in ESRS / CSRD-compliant reporting, covering its operations and value chain, in accordance with the environmental, social, and governance standards defined in the directive and standards. The scope of consolidation is the same as in the financial statements. The consolidation includes all business activities: production and sale of thermal energy, production and sale of electricity to the market, and electricity distribution, including all operations of the following companies: Loiste Lämpö Oy, Loiste Energia Oy, Kajave Oy, Loiste Liittymisjohdot Oy, and Otanmäen Lämpö Oy.



The Loiste Group does not exceed an average of 750 employees on the balance sheet date. In our sustainability report, we publish comprehensive results of the materiality assessment.



Materiality, double materiality, risks, and opportunities across the entire value chain are described in Loiste’s “Sustainable Development Policy/Strategy.” The materiality analysis for Loiste’s companies has been carried out on the following levels, taking into account ESG aspects and the ESRS standards:



- Geographic operating environment: EU, Finland, and the Kainuu region

- Strategic level of the Group

- Operational process level of business units



Information is provided on:



- the Group's strategy,

- objectives,

- the role of the board and management,

- the principal adverse impacts related to the company and its value chain.



The company’s ESG impacts are assessed inside-out:

- How the company’s operations affect society and the environment



Economic impacts are assessed outside-in:



- How the operating environment, society, or people affect the company’s operations

- What kinds of financial impacts the changing world might have on the business



The materiality assessment at Loiste examines the entire company and value chain operations and their ESG impacts (Environment, Social, and Governance). In addition, it assesses what kind of impact the company and its different activities have on the environment, surrounding communities, and people. The assessment covers various aspects such as emissions and energy consumption, supply chain safety and human rights, business ethics, and employee well-being.



The assessment is conducted annually together with business units and key stakeholders as part of the strategic work, identifying risks and opportunities. In the early stages, parties such as suppliers participate in the assessment during service management meetings and in the supplier evaluation phase. For downstream activities, interaction is carried out with residents, customers, authorities, and other stakeholders through dialogue. The materiality assessment is based on dialogue with the stakeholders affected by the impacts.



The assessment includes materiality, risks, and opportunities. Dependencies identified by Loiste within its own operations and the value chain include, for example, raw material prices and/or availability, access to skilled personnel, and assessments of whether there is financial risk stemming from the skills of personnel or the value chain (e.g., taxonomy compliance), as well as the impact of subcontractor workforce competence.



The materiality assessment was conducted in four phases: first, an internal stakeholder and value chain analysis was carried out, followed by identification of material impacts, risks, and opportunities internally. Then stakeholder views were gathered, and finally, the impacts, risks, and opportunities identified in the second phase were updated based on stakeholder input.



In the first phase, a stakeholder and value chain analysis was conducted with process owners and internal working groups. The stakeholder analysis identified stakeholders affected by the company’s impacts as well as users of the sustainability report. These users were divided into two groups: those primarily interested in financial information and other users. Among stakeholders, suppliers were identified as the most significant group, and their most relevant representatives were selected. Other significant stakeholders include customers and financiers. For owners and financiers, we also respond separately to specific information requests.



The value chain analysis identified all operations, resources, and relationships related to the company's business model and external operating environment that the company uses and relies on to create its products or services — from design to delivery, consumption, and end-of-life. Both upstream and downstream actors in the value chain were identified.



In the second phase, we utilized the expertise of sustainability professionals as well as our own industry experience to identify material impacts related to our own and our value chain’s activities across environmental, social, and governance areas, using the ESRS 1 AR 16 table from the ESRS standards. We also identified external financial risks and opportunities, supported by components of our PESTEL analysis.



The materiality of impacts was compared with the taxonomy’s output indicators. We identified the impacts on business investments and costs and assessed the potential to increase revenue through improved reputation in the district heating business. The target is for district heating to be 100% emission-free by the end of 2026. The assessment used a scale of “increase / no increase and investment costs / annual costs.” A detailed financial estimate was not applied, as EU taxonomy alignment must be considered as part of project evaluations.



According to the taxonomy analysis conducted in 2022, almost all of our revenue comes from taxonomy-eligible activities related to the environmental objective of climate change mitigation. However, reporting at the OPEX and CAPEX levels is still being refined.



The taxonomy has been generally considered in the materiality assessment. It is integrated into the “Sustainable Development Policy,” strategy, and procurement policy.



SBM-3: Material impacts, risks and opportunities and their interaction with the strategy and business model



The most material impacts, risks, and opportunities related to the strategy and business model stem from the beginning of the value chain and the results of market analyses, as well as national and EU-level legislation. Legislation affecting strategy may bring investment requirements with financial implications. Material impacts have also been assessed independently of the company’s strategy or business model, in order to identify broader market effects on business activities and strategic development.



An opportunity has been identified in enabling progress toward the carbon neutrality target, which has been strategically endorsed by the company’s owners. For the value chain and stakeholders, the most material impacts, risks, and opportunities are focused on upstream supplier management. Procurement policy supports this management. The company’s own operations are strategically aligned to be carbon neutral by 2026, and the most significant impacts arise from actions aligned with the EU Taxonomy and compliance with international standards across the entire value chain.



More information and descriptions can be found in the following sections:



• Description of the company’s operations

• Stakeholders and their needs and expectations

• Procurement policy

• Sustainable development policy / strategy

• Risks and opportunities

• Material impacts, risks, and opportunities



In the materiality assessment, the impact of future investments on financial performance, EU taxonomy compliance, fulfillment of ESRS standard requirements, business continuity management, and regional, customer-related, supplier and product requirements, as well as achieving emission-free development goals, including national and broader influence, have all been considered.



Separate thresholds were not applied. Instead, the targets were set in the "Sustainable Development Policy / Strategy" as follows: Scope 1 (own production emissions) must be zero by 2026; Scope 2 (purchased energy emissions) must be zero by 2024 and thereafter; and Scope 3 (procurement and supplier emissions) must be reduced to below 10% of 2023 levels by 2035. This is influenced by suppliers’ CO2 emissions and their reduction timelines.



In the third phase of the materiality assessment, a stakeholder survey was conducted. The survey was sent to representatives of the most significant stakeholder groups. In 2024, we involved suppliers from our stakeholder group in the materiality analysis. The survey asked respondents to evaluate the identified impacts and define how much and in what way those impacts affect them. We also requested information on impacts we might have overlooked and other concerns related to our organization’s operations and sustainability. In 2025, we will involve owners and customers. Based on these results, we will update our materiality assessment.



In the fourth phase, the results of the stakeholder survey were compared with our internal assessment of material impacts, risks, and opportunities, which were updated to reflect stakeholder perspectives. The impacts raised by stakeholders were assessed internally and, where appropriate, added to the list of material impacts, risks, and opportunities.



Loiste’s materiality assessment examines the operations of the entire company and its value chain, and their ESG impacts (Environment, Social, and Governance). It considers the impact of the company and its various functions on the environment, surrounding communities, and people. The assessment includes numerous aspects, such as emissions and energy consumption, the safety and human rights within the entire supply chain, business ethics, and employee well-being.



No significant differences emerged between the stakeholder views and the internal materiality analysis conducted with project owners. Stakeholder evaluation is based on service management meetings and other discussions held by process owners. The actual results of the digital materiality survey are taken into account in development work through service management meetings, especially in the identification of risks and opportunities.



If the survey results differ from Loiste’s internal assessments of materiality, risks, and opportunities by process owners and internal working groups, the scope of stakeholder evaluation will be expanded.



Based on the analysis conducted for key suppliers, the following were considered important for their business operations: climate impacts, climate change mitigation, reduction of energy consumption, and improving energy efficiency. Water protection and related material topics had less relevance for the selected suppliers. The impact of biodiversity was also average and their operations were not located in nature conservation areas.



Compliance with ESRS S1, ESRS S2, ESRS E3, ESRS S4 and the UN Guiding Principles on Business and Human Rights for employees and value chain workers was considered very important. Requirements of the ESRS G standard — such as ethical business conduct, whistleblower protection, company culture, good relationships in the value chain, employment, and anti-corruption — were also rated as more important than average.



Thresholds



Scale



0.01–1.99: Very Small



• The impact is quite significant only for individual stakeholders, and the issue is somewhat important.

• There is no scientific evidence suggesting the impact is serious/beneficial, or the evidence indicates it is very marginal.

• The impact is not related to the minimum social safeguards or environmental objectives of the taxonomy, nor are there technical screening criteria associated with the issue.

• The topic is not regulated.



2–3.99: Small



• The impact is quite significant only for some stakeholders, and the issue is somewhat important.

• Scientific evidence shows the impact is mild and of low relevance.

• The impact is marginally related to the taxonomy’s minimum social safeguards or environmental objectives, but there are no technical screening criteria or only minor ones that are applicable.

• The issue is only slightly subject to regulation or recommendations.



4–5.99: Moderate



• The impact is quite significant for several stakeholders, and the issue is somewhat important.

• Scientific evidence indicates the impact is clearly observable and moderately serious/beneficial.

• The impact relates to the taxonomy’s minimum social safeguards or environmental objectives, and technical screening criteria are partially applicable to the company.

• The issue is recognized in national or global regulation or in sector-specific requirements.



6–7.99: Large



• The impact is significant for the majority of stakeholders, and the issue is important.

• Scientific evidence shows the impact is serious/beneficial.

• The impact is related to the taxonomy’s minimum social safeguards or environmental objectives, with several technical screening criteria that are largely applicable to the company.

• The topic is closely related to national or global regulation or sector-specific obligations.



8–10: Very Large



• The impact is very significant for nearly all stakeholders, and the issue is extremely important.

• Scientific evidence shows the impact is critically serious/beneficial.

• The impact is closely connected to the taxonomy’s minimum social safeguards or environmental objectives, with comprehensive technical screening criteria that are fully applicable to the company.

• The issue is related to national and international regulation or binding obligations (e.g., EU legislation, global agreements).



Extent



0.01–1.99: Very Small



• The impact is quite significant only for individual stakeholders, and the issue is somewhat important.

• Scientific evidence shows the impact is very local and minimal.

• (The impact is not related to the taxonomy’s minimum social safeguards or environmental objectives, and there are no technical screening criteria for the issue.)

• (The impact is not related to any legislation.)



2–3.99: Small



• The impact is local and limited.

• The impact is quite significant only for some stakeholders, and the issue is somewhat important.

• Scientific evidence shows the impact is local and limited.

• (The impact is marginally related to the taxonomy’s minimum social safeguards or environmental objectives, but there are no technical screening criteria or only minor ones applicable.)

• (The impact is slightly related to local regulations.)



4–5.99: Moderate



• The impact is quite significant for several stakeholders, and the issue is somewhat important.

• Scientific evidence shows the impact is regional and moderately extensive.

• (The impact relates to the taxonomy’s minimum social safeguards or environmental objectives, and technical screening criteria are partially applicable in the company.)

• (The impact is partially linked to national legislation.)



6–7.99: Large



• The impact is significant for the majority of stakeholders, and the issue is important.

• Scientific evidence shows the impact is regionally extensive and significant.

• (The impact relates to the taxonomy’s minimum social safeguards or environmental objectives, with several technical screening criteria that are largely applicable in the company.)

• (The impact is related to national legislation.)



8–10: Very Large



• The impact is very significant for nearly all stakeholders, and the issue is extremely important.

• Scientific evidence shows the impact is globally extensive and significant.

• (The impact is closely related to the taxonomy’s minimum social safeguards or environmental objectives, with comprehensive technical screening criteria that are fully applicable in the company.)

• (The impact is related to international regulation or binding obligations, e.g., EU legislation, global agreements.)



Remediability



0.01–1.99: Very Easy



• Scientific evidence shows that remediation is easy and effective.

• The taxonomy’s technical screening criteria or other regulations provide complete and clearly applicable solutions to address the impact.



2–3.99: Easy



• Scientific evidence shows that effective corrective actions can be implemented relatively easily, but require planned measures.

• The taxonomy’s technical screening criteria or other regulations provide several solutions that are mostly applicable in the company to address the impact.



4–5.99: Moderately Difficult



• Scientific evidence shows that remediation is possible, but the implementation of measures is complex and requires significant resources and time.

• The taxonomy’s technical screening criteria or other regulations offer partially applicable solutions within the company, which can partially mitigate the impact.



6–7.99: Difficult



• Scientific evidence shows that remediation is only partially possible.

• The taxonomy’s technical screening criteria or other regulations offer only weakly applicable solutions in the company, with minimal effectiveness in correcting the impact.



8–10: Very Difficult



• Scientific evidence shows that full remediation is impossible.

• The taxonomy’s technical screening criteria or other regulations do not provide applicable means in the company to even partially correct the impact.



Probability of Impact



0.01–1.99: Very Low



•  The realization of the impact requires exceptional conditions or unusual chains of events.

•  There is no historical evidence of a similar impact in a comparable environment.

•  The impact is highly unlikely based on current scientific evidence.



2–3.99: Low



•  The impact is possible but unlikely without significant external factors.

•  There are few historical examples of a similar impact in a comparable environment.

•  The impact is relatively unlikely based on current scientific evidence.



4–5.99: Moderate



•  The impact is possible, but not particularly likely.

•  There is historical evidence of a similar impact in a comparable environment, but the occurrence has not been consistent.

•  The impact is reasonably probable based on current scientific evidence.



6–7.99: High



•  The impact is possible and fairly likely under current conditions.

•  There is historical evidence of a similar impact in a comparable environment, with multiple instances of occurrence.

•  The impact is more likely than not based on current scientific evidence.



8–10: Very High



•  The impact is nearly certain under current conditions.

•  There is consistent historical evidence of a similar impact in a comparable environment.

•  The impact is highly probable based on scientific evidence.



Materiality



0.01–1.99: Very Low



•  The impact is very small in scale and scope

•  The impact is very easy to remediate

•  The potential likelihood of the impact is very low



2–3.99: Low



•  The impact is at most small in scale and scope

•  The impact is at most easy to remediate

•  The potential likelihood of the impact is at most low



4–5.99: Moderate



•  The impact is at most moderate in scale and scope

•  The impact is at most moderately difficult to remediate

•  The potential likelihood of the impact is at most moderate



6–7.99: High



•  The impact is at most large in scale and scope

•  The impact is at most difficult to remediate

•  The potential likelihood of the impact is at most high



8–10: Very High



•  The impact is at most very large in scale and scope

•  The impact is at most extremely difficult to remediate

•  The potential likelihood of the impact is at most very high



- Severity, i.e. the combination of scale, scope, and remediability, carries greater weight than probability

- If the materiality is (moderate), high, or very high, the impact must be presented in the sustainability report



Financial



0.01–1.99: Very Low



•  The impact on financial performance, cash flows, access to finance, and/or cost of capital is very low (define estimated euro threshold, e.g. €10,000)

•  Dependence on human, societal, or natural resources that are not reflected in monetary values is very low



2–3.99: Low



•  The impact on financial performance, cash flows, access to finance, and/or cost of capital is low (define estimated euro threshold)

•  Dependence on human, societal, or natural resources that are not reflected in monetary values is low



4–5.99: Moderate



•  The impact on financial performance, cash flows, access to finance, and/or cost of capital is moderate (define estimated euro threshold)

•  Dependence on human, societal, or natural resources that are not reflected in monetary values is moderate



6–7.99: High



•  The impact on financial performance, cash flows, access to finance, and/or cost of capital is high (define estimated euro threshold)

•  Dependence on human, societal, or natural resources that are not reflected in monetary values is high



8–10: Very High



•  The impact on financial performance, cash flows, access to finance, and/or cost of capital is very high (define estimated euro threshold)

•  Dependence on human, societal, or natural resources that are not reflected in monetary values is very high



Probability of Financial Impact



0.01–1.99: Very Low



•  There are no ongoing situations related to the risk/opportunity that could lead to events affecting cash flow potential

•  There are no known future events related to the risk/opportunity that could affect the development of existing non-financial capital such as natural, intellectual, human, relationship, and social capital

•  There have been no past financial impacts related to the risk/opportunity

•  There are no known future scenarios (e.g., macroeconomic trends or regulatory changes) that could cause financial impacts

•  It is unlikely that any stakeholder will set requirements related to the risk/opportunity



2–3.99: Low



•  There are isolated ongoing situations related to the risk/opportunity that could lead to events affecting cash flow potential

•  There are isolated known future events related to the risk/opportunity that could affect the development of existing non-financial capital such as natural, intellectual, human, relationship, and social capital

•  There have been isolated past financial impacts related to the risk/opportunity

•  There are isolated known future scenarios (e.g., macroeconomic trends or regulatory changes) that could cause financial impacts

•  Individual stakeholders may set requirements related to the risk/opportunity



4–5.99: Moderate



•  There are a few ongoing situations related to the risk/opportunity that could lead to events affecting cash flow potential

•  There are a few known future events related to the risk/opportunity that could affect the development of existing non-financial capital such as natural, intellectual, human, relationship, and social capital

•  There have been a few past financial impacts related to the risk/opportunity

•  There are a few known future scenarios (e.g., macroeconomic trends or regulatory changes) that could cause financial impacts

•  A few stakeholders may set requirements related to the risk/opportunity



6–7.99: High



•  There are several ongoing situations related to the risk/opportunity that could lead to events affecting cash flow potential

•  There are several known future events related to the risk/opportunity that could affect the development of existing non-financial capital such as natural, intellectual, human, relationship, and social capital

•  There have been several past financial impacts related to the risk/opportunity

•  There are several known future scenarios (e.g., macroeconomic trends or regulatory changes) that could cause financial impacts

•  Several stakeholders may set requirements related to the risk/opportunity



8–10: Very High



•  There are many ongoing situations related to the risk/opportunity that could lead to events affecting cash flow potential

•  There are many known future events related to the risk/opportunity that could affect the development of existing non-financial capital such as natural, intellectual, human, relationship, and social capital

•  There have been many past financial impacts related to the risk/opportunity

•  There are many known future scenarios (e.g., macroeconomic trends or regulatory changes) that could cause financial impacts

•  Many stakeholders are likely to set requirements related to the risk/opportunity



Financial Materiality



0.01–1.99: Very Low



•  The magnitude of the financial impact of the risk/opportunity is very low

•  The probability of the risk/opportunity is very low



2–3.99: Low



•  The magnitude of the financial impact of the risk/opportunity is low

•  The probability of the risk/opportunity is low



4–5.99: Moderate



•  The magnitude of the financial impact of the risk/opportunity is moderate

•  The probability of the risk/opportunity is moderate



6–7.99: High



•  The magnitude of the financial impact of the risk/opportunity is high

•  The probability of the risk/opportunity is high



8–10: Very High



•  The magnitude of the financial impact of the risk/opportunity is very high

•  The probability of the risk/opportunity is very high



- If the materiality is (moderate), high, or very high, the impact must be presented in the sustainability report

E1 Climate change
ESRS E1 Climate change mitigation
An impact resulting from our operations
Materiality:
Very large


Description 
Climate change mitigation brings changes to business operations. Enabling mitigation requires new energy production investments, which are implemented using the latest and best available technologies. We are committed to the OECD and the Paris Agreement’s 1.5-degree targets. We have chosen a strategy aiming for us to be as carbon neutral as possible by 2026. This chosen strategy enables the company to introduce new technologies and adopt carbon-neutral production in the heating business and electricity production business. A strategic decision has been made for our own operations and the value chain that Scope 1–2 carbon neutrality must be achieved by 2026, and the advancement of Scope 3 as swiftly as possible by 2035.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In 1-5 years  Scale: Very large  Scope: Moderate  

Policies promoting the impact #Procurement Policy and Procurement Handbook

G1 Business conduct
ESRS S1 Own workforce: We ensure that all other work-related rights are in place and that we do not employ child labor
An impact resulting from our operations
Materiality:
Very large


Description 
• Child labor and forced labor: We do not use child labor, and we require the same adherence from our stakeholders. • Adequate living conditions: Not essential for our company; we do not influence residential conditions. • Privacy: We secure the right to privacy and adhere to GDPR regulations.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In a year  Scale: Very large  Scope: Very large  

Policies promoting the impact

G1 Business conduct
Comprehensive taxonomy alignment in our operations
An external impact affecting our financials
Materiality:
Very large


Description 
We achieve taxonomy alignment in our operational activities and investments in taxonomy-eligible businesses. Taxonomy eligibility and the conditions for compliance are identified and secured during the planning phase, and comprehensive evidence of our taxonomy alignment is obtained from our operations. This increases both external and internal financing opportunities and leads to lower interest costs.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Very large  

Policies promoting the impact

S1 Own workforce
ESRS S1 Own workforce, working conditions
An impact resulting from our operations
Materiality:
Very large


Description 
• Health and safety: "Safety First" is a Group-wide initiative to promote occupational health and safety. It is supported by the Board of Directors of Loiste and emphasizes our company's commitment to responsible operations, where occupational health and safety are prioritized. We do not make concessions on safety practices, actions, or requirements. We are actively committed to advancing and improving our occupational health and safety culture. Everyone at Loiste is responsible for doing their part to ensure that our working environment is safe and healthy. We conduct regular risk assessments. Key considerations include comprehensive coverage of the occupational health and safety system. We monitor safety observations, near misses, and incidents on a monthly basis, record the events, investigate the causes, and implement corrective actions. Regular safety rounds and safety training are provided to the staff. We report LTIF, TRIF, and near-miss, as well as any fatality case numbers, on a monthly basis. Our target is 0 incidents. • Gender equality and equal pay: We monitor gender equality and equal pay for equal work. We track the percentage of women in top management and in the workforce, as well as the wage gap between men and women. • Training and skills development: Training needs are assessed annually during development discussions between the employee and their supervisor. We monitor the volume and distribution of training, including the percentage of permanent employees who regularly receive performance and development evaluations. • Employment and inclusion of persons with disabilities and functional limitations: We do not consider a person's functional limitations when hiring or during employment. We adjust job roles as necessary in such cases to ensure that accessibility requirements are met. • Measures against violence and harassment in the workplace: Under no circumstances do we tolerate harassment; such behavior is addressed immediately in accordance with our ethical guidelines. Harassment is defined as behavior that, based on a prohibited ground of discrimination (such as religion or belief, disability, age, or sexual orientation), results in unwanted conduct that intentionally or effectively undermines a person's dignity, thereby creating a threatening, hostile, demeaning, humiliating, or aggressive environment. Key considerations include the occurrence of violence and harassment. No instances of violence or harassment have been identified in our company. • Diversity: In line with our ethical guidelines, we do not consider a person's ethnic background or any other personal characteristic in employment decisions. Currently, our workforce does not include individuals from diverse ethnic backgrounds or individuals with disabilities.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Moderate  

Policies promoting the impact

S2 Workers in the value chain
ESRS S2 Ensuring the working conditions of value chain employees
An impact resulting from our operations
Materiality:
Very large


Description 
Loiste requires its suppliers to ensure good working conditions for employees in the value chain, which we also assess during supplier evaluations. In terms of employees, we take the following into account: • Secure employment • Working time • Adequate wages • Social dialogue • Freedom of association, including the existence of works councils • Collective bargaining • Work-life balance • Health and safety

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In a year  Scale: Very large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

G1 Business conduct
We are not taxonomy-aligned in terms of our operational activities or procurement.
An external impact affecting our financials
Materiality:
Very large


Description 
We are not able to achieve taxonomy alignment in our operational activities or investments in taxonomy-eligible businesses, which may result in reduced financing opportunities and increased costs.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Very large  

Policies promoting the impact

S1 Own workforce
ESRS S1 Own workforce, working conditions, taking care of good working conditions
An impact resulting from our operations
Materiality:
Very large


Description 
In all our operations, we take laws and regulations into account and comply with them. • Secure employment: In our company, the employment of workers and the retention of skilled personnel are addressed through our personnel policies. Employee participation, commitment, and overall satisfaction are crucial for retaining staff. We hire locally and collaborate with the local vocational school and university of applied sciences to ensure the availability of professional skills and competent personnel. The workforce is permanent, and to cover various absences, we utilize fixed-term labor. Otherwise, employees are permanent staff. We ensure good working practices and maintain our relationships with our service providers by holding regular service meetings. • Working time: In our operations, there are no part-time or zero-hour contract employees. Remote work is defined as work performed at a location chosen by the employee according to the employment contract. Remote work practices have been agreed upon across the entire Group with common guidelines. Employee satisfaction is measured through the Great Place to Work survey and a sentiment survey. • Adequate wages: In the Group’s companies, we adhere to the Collective Agreement for employees in the energy industry as well as the Collective Agreement for senior employees in the energy industry. Factors taken into consideration include the EU, national, or local legal definitions of adequate pay, reasonable pay, and minimum wage. • Social dialogue: The dialogue between shop stewards and management, in accordance with the Co-operation Act, is held regularly. It is essential that trade unions are represented in the workplaces and within the management team. • Freedom of association, the existence of works councils and the information, consultation and participation rights of workers: Employees enjoy freedom of association. Company updates are communicated to employees during regular staff briefings or more frequently by the shop steward. Situation updates may also be sent to everyone via email. Considerations include the extent of representation through trade unions and/or works councils in the workplaces and governing bodies. Our company has an occupational safety committee that monitors the rights and obligations of the staff, as well as occupational health and safety matters. The committee meets regularly and includes a shop steward, an occupational safety delegate, an HR representative, and a safety officer. • Collective bargaining, including rate of workers covered by collective agreements: The results of collective agreement negotiations are taken into account, and 100% of employees are covered by collective agreements. • Work-life balance: We emphasize that employees maintain a healthy balance between work and private life. Key considerations include parental leave, flexible working hours, and childcare opportunities, all of which we view very positively.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In a year  Scale: Very large  Scope: Very large  

Policies promoting the impact

S4 Consumers and end-users
ESRS S4 Ensuring the impacts related to consumer and end-user information
An impact resulting from our operations
Materiality:
Very large


Description 
In our business, we use people's data and influence the confidentiality of information. We ensure our customers' privacy in accordance with GDPR. Impacts related to data on consumers and/or end-users: • Privacy • Freedom of expression • Access to (quality) data

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

S2 Workers in the value chain
ESRS S2 We ensure that the other work-related rights of employees in the value chain are upheld, and that no child labor is used
An impact resulting from our operations
Materiality:
Very large


Description 
In accordance with our customer responsibility, we influence the care for our suppliers' employees. Regarding child labor, forced labor, adequate living conditions, and privacy, we require our stakeholders to also adhere to the United Nations Universal Declaration of Human Rights.

Features
Nature: Positive   Impacts: Indirectly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E1 Climate change
ESRS G1 Utilizing waste heat from other operators in the area promotes regional carbon neutrality
An impact resulting from our operations
Materiality:
Very large


Description 
Utilizing waste heat in district heating production promotes the region's sustainable development towards carbon neutrality and significantly reduces emissions.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

S2 Workers in the value chain
ESRS S2 Ensuring equal treatment of employees in the value chain
An impact resulting from our operations
Materiality:
Very large


Description 
In accordance with our customer responsibility, we influence the working conditions and equal treatment of our suppliers' employees. Our sustainability program, procurement policy, and supplier collaboration require that equal treatment of employees is ensured throughout our value chain, just as we uphold it for our own.

Features
Nature: Positive   Impacts: Indirectly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E1 Climate change
ESRS E1 Energy: The adoption of energy-efficient technology
An external impact affecting our financials
Materiality:
Very large


Description 
The objective to use the latest energy-efficient technology increases investment costs. Loiste purchases more services to verify and calculate energy consumption as well as emissions from the value chain and over the life cycle of investments. This incurs costs.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

Entity-specific sustainability matter
ESRS G1 Supply security and continuity
An external impact affecting our financials
Materiality:
Very large


Description 
With society's strong dependence on electricity, digitalization, and rising overall uncertainty, maintaining supply security and managing continuity are playing an increasingly pivotal role for us.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Very large  

Policies promoting the impact #Risk Policy #Procurement Policy and Procurement Handbook #Credit Risk Policy

G1 Business conduct
ESRS G1 Business conduct: We ensure the protection of whistleblowers and uphold our corporate culture
An impact resulting from our operations
Materiality:
Very large


Description 
We operate our business openly, sharing information and working in cooperation with our stakeholders. Our stakeholders have the opportunity to safely report any misconduct. We have whistleblowing channels in place, which are fully secure and where information is not shared within the company. Any reports are handed over to our audit function without individual identification.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

S1 Own workforce
ESRS S1 Own workforce, We secure equal treatment and equal opportunities for everyone.
An impact resulting from our operations
Materiality:
Very large


Description 
We ensure the uniform treatment of our employees. Our company has an equality policy, ethical guidelines, and a sustainability program. These include the requirements for equal treatment.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Small  

Policies promoting the impact

G1 Business conduct
ESRS G1 Local employment and jobs are important to us
An impact resulting from our operations
Materiality:
Very large


Description 
Loiste employs locally, and this supports the company's growth, local education, and regional viability.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Small  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E1 Climate change
ESRS G1 Utilizing waste heat from other operators in the area reduces the procurement of raw materials for combustion
An external impact affecting our financials
Materiality:
Very large


Description 
We participate in the processes of facilities that produce waste heat by purchasing heat for beneficial use in the district heating business. Waste heat reduces the costs associated with combustion.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

G1 Business conduct
ESRS G1 Business conduct: We are politically independent
An impact resulting from our operations
Materiality:
Very large


Description 
Political engagement does not affect our company; we do not participate in political influence in our business operations in accordance with our sustainability program.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Moderate  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

S4 Consumers and end-users
ESRS S4 Ensuring equality for consumers and end users
An impact resulting from our operations
Materiality:
Very large


Description 
We influence equality in our region and do not discriminate against customers. We treat all consumers and residents in our region equally, taking into account: • Non-discrimination • Access to products and services • Responsible products

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

S4 Consumers and end-users
ESRS S4 Ensuring the personal safety of consumers and end-users
An impact resulting from our operations
Materiality:
Very large


Description 
We impact the safety of the residents in the area. We ensure the safety of the residents in our area during construction and maintenance work. We are responsible for safe electrical and heating connections. • Health and safety • Security of a person • Protection of children

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Very large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Pollution of air
An impact resulting from our operations
Materiality:
Large


Description 
Our goal is to transition to fully carbon-neutral and emission-free heat production by 2026 in our business operations. We use waste heat and origin-certified electricity for heat production. We will discontinue acquiring heat from a plant that uses combustion technology, thereby eliminating the associated noise nuisance at that production facility. We require our contractors and suppliers to be low-emission and to minimize the use of fossil fuels.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: In 1-5 years  Scale: Very large  Scope: Small   Remediability: Difficult

Policies promoting the impact #Procurement Policy and Procurement Handbook

E1 Climate change
ESRS E1 Adapting to climate change
An external impact affecting our financials
Materiality:
Large


Description 
Climate change affects weather conditions: it leads to storms, wind damage, flooding, and increased snow loads. Dryness and heat can increase the risk of wildfires in nature and cause insect damage through forest destruction. Trees may fall on power lines, causing damage and power outages. Adapting to climate change influences business investments and future solutions. Necessary measures have been taken into account for each business at both strategic and operational levels. Loiste must have sufficient resources to manage storm situations when they occur. In practice, when building the electricity network, cables are laid underground and the network is relocated alongside roads, away from forested areas. In hydropower production, the plants’ regulation capacity must be considered to ensure water level regulation limits are not exceeded. Changes in temperature affect fuel procurement, ensuring we have sufficiently stocked raw materials.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E4 Biodiversity and ecosystems
ESRS E4 Biological diversity and ecosystems consideration in our area of activity
An impact resulting from our operations
Materiality:
Large


Description 
Direct impact factors leading to the decline of biological diversity: Climate change, changes in land use, changes in the use of freshwater and seas, direct utilization, harmful invasive species, pollution, and others. We build the electricity network in various terrain types within our area. We take all environmental impacts into account during the design phase, and we do not construct structures in the vicinity of areas that are valuable in terms of natural habitats. Electricity network or district heating structures are not located in Natura 2000 areas. Hydropower does not affect natural biodiversity, as it is long-lasting and the rivers have not remained in a natural state for a long time. We restock fish as required.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In a year  Scale: Moderate  Scope: Moderate  

Policies promoting the impact #Procurement Policy and Procurement Handbook

G1 Business conduct
ESRS G1 Business conduct: The relationships with suppliers of goods and services are good.
An impact resulting from our operations
Materiality:
Large


Description 
Stable supplier relationships safeguard the continuity of our operations. We ensure our suppliers’ responsible practices through our procurement policy and operational guidelines. We conduct annual supplier evaluations to measure their performance against our requirements.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Moderate  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E1 Climate change
ESRS E1 Energy: Reducing energy consumption and considering energy efficiency
An impact resulting from our operations
Materiality:
Large


Description 
Reducing energy consumption and taking energy efficiency into account affects the environment through the company when we implement energy-saving solutions. In electricity and heat production, we are phasing out the use of fossil fuels. We require the following:

• We require that the requirements set by Loiste and by legislation for products, components, and services are met.
• The conformity of products, components, and services must be ensured and documented.
• The practical implementation of verifying and documenting conformity is agreed upon at the project/process level.
• For products, fulfillment of requirements must be demonstrated using technical documentation prepared by the manufacturer (compliance with legislation).
• For products, efforts should be made to use BAT products (Best Available Technology).
• Conformity required by Loiste is demonstrated through tests, measurement certificates, or other documents.
• For services, the supplier must meet the quality of service described by Loiste, which is measured according to the SLA definition.


Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In a year  Scale: Large  Scope: Small  

Policies promoting the impact #Procurement Policy and Procurement Handbook

G1 Business conduct
ESRS G1 Business conduct: We prevent corruption and bribery
An impact resulting from our operations
Materiality:
Large


Description 
We have Loiste's governance rules, Code of Conduct, and reporting channels. Nevertheless, bribery or corruption may be associated with our own operations or with those in our value chain.

Features
Nature: Positive   Impacts: Directly   Probability of occurrence Very small:   Existence: Potential   When: At the moment  Scale: Large  Scope: Large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Substances of concern: Hazardous chemicals
An impact resulting from our operations
Materiality:
Large


Description 
We have taken into account the chemicals mentioned in Regulation (EC) No 1907/2006 (REACH) Article 57 and their usage in our company. Our company does not engage in operations where chemicals are used in production, but materials containing hazardous chemicals are otherwise used in process equipment (e.g., measuring devices, transformers, and poles). We have considered the possibility of exposure by providing guidance on adequate protection and monitoring health data.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Moderate  Scope: Very small   Remediability: Easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

S3 Affected communities
ESRS S3 Impact on the community. Ensuring the civil rights, political rights, and the rights of indigenous peoples within communities
An impact resulting from our operations
Materiality:
Large


Description 
Our company operates as part of the regional authorities, residents, and customers, but we are not involved in activities that restrict the following: The communities’ civil rights, political rights, and the rights of indigenous peoples: • Freedom of expression • Freedom of assembly • Impacts on human rights defenders • Free, prior and informed consent • Self-determination • Cultural rights

Features
Nature: Positive   Impacts: Indirectly     Existence: Actual   When: At the moment  Scale: Large  Scope: Large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E4 Biodiversity and ecosystems
ESRS E4 Biological diversity and ecosystems may require investments.
An external impact affecting our financials
Materiality:
Large


Description 
If legislation on fish stocking obligations mandates the construction of fish ladders, this will have an economic impact and require new investments.

Features
Appears: In future  
Financial impact: Large  
Type: Risk  When: In 1-5 years   Probability: Moderate  

Policies promoting the impact #Procurement Policy and Procurement Handbook

G1 Business conduct
ESRS G1 Business conduct: Animal welfare
An impact resulting from our operations
Materiality:
Large


Description 
Our operations may adversely affect animal welfare near hydropower plants and during the construction of the electricity network. We have instructed our stakeholders to take into account the impacts of construction on habitats so that the effect is minimized.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Large   Remediability: Difficult

Policies promoting the impact

E3 Water and marine resources
ESRS E3 Water and marine resources: Water consumption
An impact resulting from our operations
Materiality:
Large


Description 
In our business, water is used in the closed loop of the district heating network. This has only a local impact and does not affect the seas, which are located far away.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Large   Remediability: Relatively difficult

Policies promoting the impact

E4 Biodiversity and ecosystems
ESRS E4 Impacts on the state of species
An impact resulting from our operations
Materiality:
Large


Description 
We consider the environmental impacts of construction during the design phase and, depending on the scale and effects of the project, we conduct the necessary environmental impact assessments.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Moderate  Scope: Very small   Remediability: Relatively difficult

Policies promoting the impact #Procurement Policy and Procurement Handbook

S3 Affected communities
ESRS S3 Impact on the community. The communities' economic, social, and cultural rights
An impact resulting from our operations
Materiality:
Large


Description 
Our company does not affect, nor is it affected by: Communities’ economic, social and cultural rights: • Adequate living conditions • Adequate food • Water and sanitation • Land-related impacts Our company will ensure that local residents have access to affordable and reliable electricity and heat. • Security-related impacts

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: In a year  Scale: Large  Scope: Large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Pollution of water
An impact resulting from our operations
Materiality:
Large


Description 
In areas where the network is built, bodies of water and their drainage areas require special care. During construction, it is important to ensure we do not pollute these water bodies and to avoid groundwater areas.
Hydropower plants do not pose a widespread emission risk to the environment. In operating hydropower plants, we strive to prevent oil leaks into bodies of water in the event of equipment failures.


Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Very small   Remediability: Difficult

Policies promoting the impact #Procurement Policy and Procurement Handbook

E4 Biodiversity and ecosystems
ESRS E4 Impacts on the extent and condition of ecosystems and on ecosystem services and dependencies on them
An external impact affecting our financials
Materiality:
Large


Description 
The extent of the ecosystem may restrict the location of solar and wind power construction, as well as the areas for building the electricity network. We take all environmental impacts into account during the design phase, and we do not build near sites that are valuable in terms of natural habitats. We cannot build in areas where the environment and ecosystem have been determined to require protection during the preliminary investigation.

Features
Appears: At the moment  
Nature: Positive  
Financial impact: Large  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E5 Resource use and circular economy
ESRS E5 Promoting circular economy
An impact resulting from our operations
Materiality:
Moderate


Description 
We promote a circular economy. We use recycled materials whenever possible. We have an operational plan for recycling waste and for the designated sorting of disassembled materials. During renovations and repair work, the handling of disassembled materials is carried out by the contractor as part of a comprehensive contract, including waste sorting reporting. We ensure the functionality and usability of components throughout the entire technical lifecycle through planned maintenance.

Features
Nature: Positive   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Small  Scope: Moderate  

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Substances of concern: In production equipment
An impact resulting from our operations
Materiality:
Moderate


Description 
Problematic substances can end up in nature through the company’s operations. Efforts have been made to prevent this using safety basins and absorption fields.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Very small   Remediability: Relatively difficult

Policies promoting the impact #Procurement Policy and Procurement Handbook

E3 Water and marine resources
ESRS E3 Water and marine resources: Extraction and use of marine resources
An impact resulting from our operations
Materiality:
Small


Description 
Our hydropower production affects lakes and fish stocks. The company has regulatory permits that we must follow. This does not impact the seas. Their location is far away.

Features
Nature: Negative   Impacts: Directly   Probability of occurrence Very small:   Existence: Potential   When: At the moment  Scale: Small  Scope: Very small   Remediability: Easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Pollution of living organisms
An impact resulting from our operations
Materiality:
Small


Description 
When planning electricity network substations, bodies of water and groundwater areas are taken into account when determining the location and structure of the substations. If necessary, an oil collection basin is installed for the transformers. If transformer oil leaks into the soil during a fault situation, the contaminated soil is removed and necessary soil samples are taken to ensure that no transformer oil remains in the soil.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Small  Scope: Very small   Remediability: Easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Pollution of soil
An impact resulting from our operations
Materiality:
Small


Description 
When planning electricity network substations, bodies of water and groundwater areas are taken into account when determining the location and structure of the substations. If necessary, an oil collection basin is installed for the transformers. If transformer oil leaks into the soil during a fault situation, the contaminated soil is removed and necessary soil samples are taken to ensure that no transformer oil remains in the soil.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Large  Scope: Very small   Remediability: Relatively difficult

Policies promoting the impact #Procurement Policy and Procurement Handbook

E3 Water and marine resources
ESRS E3 Water and marine resources: Water consumption
An impact resulting from our operations
Materiality:
Very small


Description 
In our business, water is used in the closed loop of the district heating network. This has only a local impact and does not affect the seas, which are located far away.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very small  Scope: Very small   Remediability: Very easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

E3 Water and marine resources
ESRS E3 Water and marine resources: Water withdrawals
An impact resulting from our operations
Materiality:
Very small


Description 
In our business, water is used in the closed loop of the district heating network. This has only a local impact and does not affect the seas, which are located far away.

Features
Nature: Negative   Impacts: Indirectly     Existence: Actual   When: At the moment  Scale: Very small  Scope: Very small   Remediability: Very easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

E3 Water and marine resources
ESRS E3 Water and marine resources: Water discharges
An impact resulting from our operations
Materiality:
Very small


Description 
Our operations do not cause discharges into water bodies. Leaks from the district heating pipeline occur due to steam formation. Wastewater is generated from office water, and it is connected to the municipality's wastewater network. Our operations have no impact on the seas, as they are located far away.

Features
Nature: Negative   Impacts: Directly     Existence: Actual   When: At the moment  Scale: Very small  Scope: Very small   Remediability: Very easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

E2 Pollution
ESRS E2 Microplastics: Microplastic emissions from our own operations
An impact resulting from our operations
Materiality:
Very small


Description 
The impact of microplastics originating from our activities on the environment and health has been identified and assessed. Our operations do not generate microplastic emissions into the environment.

Features
Nature: Negative   Impacts: Indirectly   Probability of occurrence Very small:   Existence: Potential   When: At the moment  Scale: Very small  Scope: Very small   Remediability: Very easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

E3 Water and marine resources
ESRS E3 Water and marine resources: Water discharges in the oceans
An impact resulting from our operations
Materiality:
Very small


Description 
Only a local impact, no impact on the seas. Their location is far away.

Features
Nature: Negative   Impacts: Indirectly     Existence: Actual   When: At the moment  Scale: Very small  Scope: Very small   Remediability: Very easy

Policies promoting the impact #Procurement Policy and Procurement Handbook

Policies

Sustainability Program Management System

Responsible for implementing: Lasse Aarnio

Sustainability Program Management System GOV-5 (Responsibility: Board of Directors)

Clarification, monitoring, analysis, and evaluation: Business units
Review: Management team
Reporting: Group Board of Directors
Prepared: 2022
Reviewed: 2024

The management system included in the sustainability program (ISO 9001:2015, ISO 14001:2015, ISO 45001:2018, ETJ+) covers all business operations and support processes of the Loiste companies. It supports the implementation of the company's goals, values, and strategy. The goal of the sustainability program is to measure and monitor transparency, good governance, and the consideration of people and the environment in accordance with applicable rules. The operational policy is part of the sustainability program.

The company's Board of Directors has established and approved the guiding policies for sustainable development, the code of ethics, other policies, and the board's rules of procedure. These policies and guidelines complement relevant legislation, the shareholder agreement, articles of association, and the City of Kajaani's group instructions and ownership policy. The board monitors the implementation of the principles set in the policies. Our strategy defines our commitment to systematic and continuous development. The aim of Loiste’s management system is to ensure the safe, sustainable, reliable, and cost-effective management of operations, products, and services, considering their full life cycle and the functionality of its own, partner, and customer processes.

The policies are reviewed regularly and updated as needed to reflect operational practices and current standards. They apply to the entire Group. Practices are monitored in business unit meetings. The implementation of the policies and the management of the system are audited internally and externally at least annually.

Policies of Loiste Group:
• Sustainability Program Operational Policy
• Risk Policy
• Procurement Policy (including supplier management)
• Corporate Governance and Control System

We operate with attention to stakeholder needs, expectations, and the value of collaboration. Our operating models are described in processes that include monitoring and measurement of our sustainability performance, meeting the requirements of quality systems, ESG frameworks, and the EU taxonomy. Loiste is committed to upholding equality and non-discrimination throughout its operations, in accordance with the UN human rights principles, ILO, and OECD guidelines. We also expect compliance with these standards from our value chain and suppliers in the context of responsible business conduct.

• Loiste companies operate responsibly and transparently in all activities.
• We assess and review double materiality in accordance with ESRS standards as part of risk management.
• We identify stakeholder needs and expectations and integrate them into operations through our processes. Key stakeholders include customers, personnel, suppliers and partners, authorities, financiers, and owners.
• We value diversity.
• We actively monitor changes in the operating environment.
• We consider legal and international agreement perspectives in our work.

Environment

• Climate change mitigation: We aim to develop our operations in a way that maximizes their positive impact on climate change mitigation.
• We promote adaptation to climate change and ensure our infrastructure is protected from its effects as effectively as possible.
• We support the sustainable use and protection of water resources and marine natural resources.
• We promote the transition to a circular economy.
• We prevent environmental degradation.
• We protect biodiversity and various ecosystems and aim to restore them. We free up land for forest growth and carbon sinks by relocating power lines along roads and by underground cabling.

Social Sustainability

We aim to be the most attractive workplace in the energy sector, composed of top professionals. At Loiste, well-being and happiness are created through freedom to influence, collaborative action and development, shared values, and the growth and progress we foster. The goal of our personnel strategy is to ensure the expertise needed to meet critical and strategic objectives during times of change, to engage and motivate people, and to provide a framework in which our professionals can continuously develop their skills as the energy sector and our needs evolve. Together, we are building a culture of trust, openness, and collaboration. We encourage experts to take responsibility.

• We develop and maintain a company culture that respects aspects such as gender, diversity, working conditions, human rights, and the respect of human rights.
• We aim to employ locally and provide training for our staff.
• We require good personnel management and maintenance of professional qualifications from our partners.
• We comply with ILO, OECD, and UN human rights principles.

Social Responsibility

We comply with the values of Loiste Group. Loiste has adopted a Code of Ethics that must be followed in all activities. Through our commitment to social responsibility, we contribute to the well-being of society. Responsibility includes statutory elements such as employee social security and occupational healthcare, as well as voluntary investments. Actions that have a positive impact on employees, stakeholders, and society generate financial added value and competitive advantage. Loiste expects its suppliers to ensure good working conditions for employees in the value chain, which we also assess in supplier evaluations.

For employees, we consider:
• Employment security
• Working hours
• Sufficient wages
• Dialogue between labor market parties
• Freedom of association, including works councils
• Collective bargaining agreements in place
• Work-life balance
• Occupational health and safety
• Child labor is prohibited
• Forced labor is prohibited
• Discrimination is prohibited
• Indigenous peoples’ rights are respected

Loiste Group’s social responsibility applies not only to its own personnel but also to the personnel of partners, contractors, and subcontractors when they work on our behalf. Responsibility also includes selecting subcontractors who take care of their own employees. We have monitored employee well-being annually since 2003 through a staff barometer survey. Since 2016, the employee survey has been conducted using the Great Place To Work method, which allows us to address potential work-related challenges at an early stage. In addition, we regularly conduct an anonymous "Mood Survey" where employees can submit open feedback or questions to management, which are addressed in staff briefings. Constructive development discussions with supervisors and opportunities for confidential feedback are considered important. We strongly support staff’s voluntary education.

Our personnel are our most important asset and resource, and we encourage and support them to:
- actively participate in planning and developing our operations
- learn to manage continuous change
- develop professionally
- seek meaningful and challenging work
- maintain their physical and mental well-being

Our goal is to be a united team whose members can work together flexibly and are willing to solve workplace challenges boldly and constructively. Our actions are guided by self-initiative and open-mindedness.

Equality and Non-Discrimination Program

Loiste is committed to promoting equality and non-discrimination in all its operations. Our goal is to be an innovative and developing work community where every employee is accepted as they are. Equality is promoted through an inclusive approach involving the entire staff. Loiste Group has an Equality and Non-Discrimination Program, which guides our operations.

Equality must be promoted systematically and with clear goals, creating conditions that do not prevent the realization of equality. The planning must identify solutions that increase gender equality. The aim of promoting equality and implementing related measures is to ensure that procedures in areas such as recruitment, task allocation, training, remuneration, employment benefits, and obligations related to work and employment relationships are genuinely non-discriminatory. This means practical efforts to promote equality.

We value individual freedom and beliefs. We respect each other equally regardless of age, gender, organizational position, or other personal characteristics. We actively provide feedback and develop various forms of recognition. We recognize and reward individual employees for significant work achievements.

Our company has a formal Equality and Non-Discrimination Program. Equality is promoted through inclusive practices involving all personnel and coordinated by the company's occupational health and safety (OHS) team.

Occupational Health and Safety

Occupational health refers to physical and mental work capacity and health. The goal of OHS activities is to maintain employee health and prevent hazards and harm caused by work and working conditions.

Occupational safety means that the physical, mental, and social working conditions at the workplace are in order. When employees have a safe environment, a functional work community, and work that is appropriately demanding, their work is meaningful and productive.

Occupational safety is a cooperative effort between the employer and employees to ensure a safe and healthy working environment.

Identification of occupational health and safety hazards, monitoring of legislation, and assessment of social risks (Responsibility: HR Manager, Occupational Safety Manager)

We promote the health, safety, and well-being of our personnel, as well as proactive and knowledge-based well-being management. Our goal is a zero-accident Loiste. Together with our staff, we ensure a safe, healthy, and productive work environment and smooth working conditions. We support the comprehensive physical, mental, and social well-being of our employees.

We take care of our employees' work ability throughout their careers and provide support in various situations.

Our activities must not pose health or safety risks to our employees or external individuals. We require the same from our service providers – that they ensure the safety and well-being of their personnel.

Occupational health and safety indicators are regularly monitored in various committees and service management meetings. More detailed descriptions are recorded in locations specified in process documentation. Loiste Group complies with relevant legislation, standards, and other applicable regulations. Occupational safety and employee representation activities are organized in accordance with the law.

Legislation is monitored through a legal system in accordance with the process and annual schedule, reviewed four times per year. The OHS committee and the HR Manager identify the most significant social and occupational health and safety risks and hazards based on collected information. This data is gathered from various measurements and feedback, as well as through personal discussions and training. For suppliers, data is collected through service management meetings and digital reporting channels. Customers may also contact customer service.

Social Aspects Related to Personnel and Stakeholders

As part of the sustainability program, we consider the following social aspects, which are covered by our practices:

• Child labor: Child labor is prohibited both in our own operations and those of our suppliers.
• Community development: We develop our community in cooperation with stakeholders.
• Customer satisfaction: We continuously improve and monitor customer satisfaction.
• Diversity, equity, and inclusion: We ensure and require the implementation and adherence to diversity, equity, and inclusion in both our own and our suppliers’ operations.
• We follow the International Labour Organization (ILO) rules in our own operations, procurement requirements, and across our value chain.
• Employee engagement: We engage employees by enabling their active participation in company development, training opportunities, and providing various employee benefits.
• Forced or compulsory labor: Forced labor is prohibited in our own operations and those of our suppliers.
• Freedom of association: Everyone has the right to freedom of association, which must also be respected by our stakeholders.
• Health and safety – community: We ensure a safe environment for the residents of our community.
• Health and safety – contractors: We require compliance with occupational health and safety guidelines.
• Health and safety – employees: We require compliance with occupational health and safety guidelines.
• Health and safety – supply chain: We require compliance with occupational health and safety guidelines.
• Health and safety – users: We ensure a safe environment for the residents of our community.
• Labor standards and working conditions: We require a safe working environment, labor standards, and proper guidance.
• Local employment: We hire local personnel and, where possible, local businesses.
• Societal corporate partnerships: We cooperate closely with other companies whenever possible.
• Stakeholder relations: We maintain ongoing dialogue with our stakeholders.

Development of Social Aspects

By considering social aspects, we can broadly create services, jobs, and well-being. These topics are addressed through personnel management, leadership, strategy, and partner management. Loiste adheres to an Equality and Non-Discrimination Program and reports monitoring results to authorities annually.

The program is based on the Group’s own starting points and meets the legal requirements set for it. The effectiveness of equality is measured using various staff surveys and statistics. Social aspects of suppliers are described in supplier requirements. Specific questions and indicators for suppliers are monitored via service management meetings and an annual digital questionnaire. The questionnaire is aligned with the ESRS standard.

Customers and residents can provide information through online forms available on our public website, in addition to direct customer contacts.

Personnel Policy

Our personnel policy is based on Loiste’s mission, vision, strategy, values, and responsible operational and leadership principles. A good employee experience is built on the consistent and uncompromising implementation of these principles.

Objectives of the Personnel Policy
• The objective of the policy is to ensure that competent and committed personnel, who understand Loiste’s direction and their own goals, provide the foundation for achieving strong and sustainable financial results.
• Our personnel policy consists of Loiste’s key principles across areas of HR management.
• The policy covers all operations within Loiste Group. Business units and teams are responsible for implementation and resourcing within their own functions.
• Our operating principles define how all Loiste employees work and collaborate. All our actions are grounded in our four core values: Customer Focus, Together We Achieve More, Joyfulness, and Responsibility.

Leadership
• No issue is too small to be discussed across teams. Providing feedback and development ideas is important and encouraged. All issues are company issues, and feedback contributes to our development.
• The cornerstones of Loiste leadership are strategy-driven management, enabling success, trust, and mutual respect.
• Performance management supports the implementation of our strategy and business goals through strong employee performance. Setting personal goals aligned with business targets, monitoring progress, providing regular feedback, and evaluating performance help motivate and engage employees. Employees are responsible for their own performance management, supported by their supervisors. Supervisors conduct regular discussions with each of their team members. Ongoing performance management and dialogue play a critical role in ensuring successful strategy execution.

Rewarding

• The core principles of our rewarding system are competitive total compensation based on performance and fair treatment of employees. The goal of rewarding is to encourage strong performance and recognize achievements. It ensures the success of the company. Rewarding practices are based on our strategy and business goals and are supported by regular salary reviews, group-wide and business-specific performance bonuses, and common employee benefits.

Competence
• Our competence development solutions are based on our strategy and business goals, aiming to guide personal learning paths and needs-based learning. Competence development lays the foundation for success at work and employee well-being.
• We ensure thorough onboarding of our employees. Employees are responsible for their own competence, and supervisors support the development of their team members’ skills.
• Development discussions play a key role in competence development. Supervisors conduct these discussions with employees at least twice a year. In addition, we provide regular feedback on job performance. We develop the competence of our supervisors to ensure high-quality leadership and supervisory work.
• When evaluating strategy and success, it is important to consider which work is done in-house and what services or resources are procured externally.

Recruitment
• We continuously develop our recruitment methods, leadership recruitment skills, and the applicant experience.
• In recruitment, we are committed to equality, non-discrimination, and selection based on factors that predict success in the role. In our hiring decisions, we emphasize energy and subject matter expertise, education, and motivation.
• We support internal career paths, aiming for diverse and long-term employment relationships that allow employees to grow and develop.
• We manage the entire employment lifecycle and succession planning on an ongoing basis.
• We develop cooperation with educational institutions to ensure a supply of new talent.

Salary and Reward Policy

Board of Directors: The company's Board of Directors oversees the implementation of the salary and reward policy and makes necessary decisions regarding compensation practices. The incentive system is updated annually and approved by the Group's Board of Directors.

1. Introduction

Loiste Group’s salary and reward policy is designed to support the company’s strategic objectives, attract and retain skilled employees, and ensure that compensation practices are fair, competitive, and transparent. The incentive system is updated annually and approved by the Group Board. Achievement of sustainability goals also affects the compensation of governing, managing, and supervisory bodies.

2. Salary Principles

Competitiveness: Our salary levels are competitive compared to the industry average. We regularly use market and salary surveys to ensure our pay is up to date.

Fairness: Compensation is based on job demands, employee competence, and performance. Job evaluation is based on the Mercer International Position Evaluation (IPE) system.

Transparency: Our salary system is clear and open to all employees. Employees are regularly informed about the principles and practices of compensation.

3. Reward Principles

Performance-based: Rewards are based on employee performance and achieved goals. Performance evaluations and target achievement metrics form the basis for rewards.

Motivation: The reward system aims to motivate employees and promote their commitment to the company. We offer various forms of rewards to meet the needs and expectations of employees.

Equity: All employees are treated equitably and without discrimination. Reward practices are consistent and fair for everyone.

Loiste’s carbon neutrality is a strategic goal for sustainable development, directed by the CEO and implemented by business management. Employees receive performance-based bonuses based on the company’s financial results and achievement of strategic goals, including sustainability targets. The sustainability strategy aims for Loiste to be carbon neutral in its own operations by 2026 and for emissions from suppliers to be below 10% by 2030. This is measured using the GRESB and CO2 indicators. Bonuses are determined 50% by financial performance and 50% by personal goals, including progress on sustainability actions.

Good Governance

Good governance means that all parties are treated equally and statutory rights are recognized. Owners are encouraged to participate in the company’s activities, and they receive regular and accurate reporting on the organization’s financial situation. In addition, good governance involves the guidance and oversight by the organization’s governing bodies and accountability.

Our oversight responsibilities cover the timely and accurate reporting of financial information as well as auditing, internal control, risk management, compliance with laws and regulations, and ensuring that management and governance practices are properly arranged.

Business managers are responsible for overseeing impacts, risks, and opportunities. The organization’s group-level management team compiles information and, supported by the ESG Controller, reports to the group’s board of directors. Actions reflecting the impacts, risks, and opportunities are described in the corporate governance model, which outlines the business managers’ authority in relation to subsidiaries. CEOs of the subsidiaries seek investment decisions from the group’s board of directors. Business management is responsible for updating the policies. They are supported by the ESG Controller.

The administrative, managerial, and supervisory bodies decide that, in order to monitor sustainability matters, an external specialist will be used to support the group’s ESG Controller. Appropriate skills and expertise are developed through training and internal guidance meetings on sustainability within the group.
Representatives of the business units regularly review sustainability issues in supplier service management meetings in accordance with the procurement policy guidelines. Continuous orientation and guidance ensure that these skills and expertise relate to the company’s material impacts, risks, and opportunities.

Administration must ensure independence, cybersecurity, data protection, authorizations, remuneration methods, and the identification and prevention of conflicts of interest. Any significant conflicts of interest related to our business are sufficiently examined and acted upon if necessary. We require good governance from our partners as well and promote the realization of good governance throughout our value chain. We reserve sufficient resources and tools to carry out our operations in the manner we desire, as well as to develop our operations and competence.
We engage, encourage, and commit our own employees and those of our partners to improve efficiency, occupational safety and well-being, environmental impact, and energy efficiency.
In new investments, we adopt the best and most reliable available technical and financial solutions. We guide our customers to act responsibly in decisions affecting safety, the environment, and energy efficiency. We require our partners to commit to our practices and policies. We support the development of our partners’ operations and management, and improve the performance of the entire network from the perspectives of quality, efficiency, safety, environmental impact, and energy efficiency. Our management system meets the requirements of the ISO 9001 quality management system, ISO 14001 environmental management system, ISO 45001 occupational health and safety management system, and the ETJ+ energy efficiency system.

Our responsibility program includes the following practices related to governance:
• Audit committee structure/independence: Auditors are independent of the company.
• Board composition: The Board is elected by the General Meeting, and Board members are not employed by the company. We require Board members to confirm they and their family members have no commitments to the group or its subsidiaries.
• Board’s ESG oversight: The Board approves policies and receives reports on the implementation of the strategy.
• Bribery and corruption: Bribery is prohibited, and ethical guidelines must be followed.
• Remuneration committee structure/independence: The remuneration committee represents different stakeholders, and no committee member may be someone who might receive remuneration.
• Conflicts of interest: Conflicts of interest are prohibited and are also addressed in the procurement policy.
• Cybersecurity: A designated individual is responsible for data protection and information security for the entire group in accordance with NIS2 rules.
• Data protection and privacy: We comply with the legislation.
• Delegation of authority: We follow a multi-layered approval process concerning authority.
• Management remuneration: The group’s Board of Directors decides on executive remuneration.
• Fraud: Fraud is prohibited and criminalized.
• Independence of the Chairman of the Board: The Board is elected by the General Meeting, and Board members are not employed by the company. The Chairman is elected by the Board.
• Lobbying activities: Lobbying is prohibited, and ethical guidelines must be followed.
• Political contributions: Political activities and affiliations are prohibited.
• Shareholder rights: Shareholder rights are defined in the agreements.
• Whistleblowing protection: Whistleblower protection is in place, and a reporting channel is available.

Quality Management as Part of the Operating Policy

As part of Loiste’s responsibility program, quality management creates a common foundation for quality work in our various business operations. We address the elements of quality management as part of all business-related processes, from procurement to monitoring.

Quality management includes 6 basic elements:

1. The starting point is the needs and expectations of our customers, whose fulfillment is essential for Loiste’s success.
2. We keep Loiste’s assets reliable and available.
3. In our operations, we comply with Loiste’s ethical principles, current regulations, and values.
4. A competent and motivated staff is a basic prerequisite for our operations, and we want to be the most attractive workplace in the field.
5. We monitor and measure the quality of our operations and are committed to continuous improvement.
6. We extend the work in accordance with quality management to our partners as well and expect the same from them.

The implementation of quality management is measured at various times based on the areas defined in the indicators.

Development of Governance

The task of administrative services is to support the boards and business management of its client companies in finance, economics, information, and HR management, as well as in potential corporate arrangements. Its task is also to provide personnel and communication services to its clients to an agreed extent, and to coordinate competence development and project management.

In addition, in collaboration with the boards, management teams, business management, and experts of different companies, it coordinates the development and maintenance of the Loiste companies’ business ecosystem. It is also responsible, to an agreed extent, for coordinating development work related to management and quality systems, as well as the group’s information management (quality, environmental, occupational health and safety, information and cyber security, and corporate responsibility activities).

We are also developing administrative information access within our supplier value chain. We collect the data required by supplier requirements both in service management meetings and through a distributed online survey. The survey form complies with the ESRS standard.

Statutory and Regulatory Requirements and Permit Conditions (Responsibility: CEO and ESG Controller)

Legislative monitoring and other requirements for complying with regulatory guidelines are observed in conjunction with operational activities and committees. The committees report to the business units and the management team.
Business units monitor the development of the legislation relevant to their respective business areas and are responsible for compliance with the legislation. This takes place by actively participating in the preparatory bodies of the industry association and by distributing materials related to changes in legislation within the organization as received from the industry association. In addition, legislative monitoring services are used, and at least once a year, the extended management team reviews any changes in legislation and how those changes will be taken into account in operations.

Emergency, Disruption, and Accident Situations (Responsibility: Director in Charge of Continuity Management)

In crisis situations, the separate crisis plan of Loiste Oy’s business companies is followed. The continuity management group reviews the up-to-dateness of the crisis plan for Loiste Oy’s business companies.

Emergency, disruption, and accident situations related to the business are taken into account in the operating procedures of the business units. Identifying and providing instructions for these situations is the responsibility of the business unit.

Emergency, disruption, and accident situations related to properties are addressed in the rescue plan. The rescue plan has been reviewed with the personnel by an external trainer.

Statutory training is monitored by the business operations and arranged in cooperation with the HR unit.

At least 5% of personnel must have completed first aid training. The HR unit is responsible for organizing this training.

Committees

Various committees ensure and prepare compliance with standards, which is reflected in the day-to-day operations of all our business units. The role of the committees is to ensure that strategy and policies are taken into account in processes and to monitor the set operational quality indicators. The committees forward information within the organization using agreed procedures. The work of the committees and management is also evaluated through internal audits. The monitoring of processes is addressed in different committees:

• Environment and Energy Efficiency and OHS Committee, as well as Continuity Management
• Data Protection Working Group
• Service Management and Steering Groups

Target Programs and Measures

Target programs are set in the business units, which are approved by the business units and the group management. The follow-up of the target programs is carried out in various committees using indicators. The committees further share information for use by different business organizations and verify the indicators as agreed.

Environment and Energy Efficiency

The company’s goal is to improve energy efficiency and make environmentally friendly choices across its different business operations. We pay attention to waste management and final disposal, particularly focusing on hazardous waste and minimizing its generation. We measure and monitor proper handling of waste.

The basic principle of our environmental and energy policy is to ensure responsible business activities from an environmental perspective. The policy also aims to care for the environment and minimize greenhouse gas emissions that contribute to climate change. The environmental and energy efficiency laws and regulations form the minimum requirements for our operations, which we supplement in accordance with the EU taxonomy and EU-level directive requirements.

We use renewable energy sources as much as possible in heat and electricity production. In energy production, we strive for solutions that promote sustainable development and support energy efficiency and the use of renewable energy sources. In our business operations, we also take into account energy-saving measures.

We promote the efficient use of energy both in our own operations and those of our customers. We maintain the competence of our personnel in environmental and energy efficiency matters. We consider environmental and energy efficiency when planning new investments. Our public website provides guidance on questions related to energy efficiency for our customers. We pay attention to continuous risk management. We regularly communicate about our environmental and energy efficiency measures.

In terms of water usage in business processes, we take environmental impacts into account and improve water-related energy efficiency while minimizing water losses. Our responsibility extends to water usage, its availability, and water quality. We aim to minimize water consumption in properties and reduce wastewater generation.

Regarding environmental risks, we engage in preventive measures. However, if an environmental incident occurs despite all preventive actions, we strive to mitigate its effects as quickly as possible, contact the relevant authorities, and openly communicate the development of the situation.

Organization of Environmental Management

The impacts on the environment, as well as objectives and measurements, are monitored by the Environment and Energy Efficiency Group, which reports to the business units and management team. The management team includes representatives from each business unit, group governance, and company management.

Identifying Environmental Aspects and Significant Impacts (Responsibility: Environmental Manager and ESG Controller)

Information is reviewed and updated if necessary in meetings held four times a year, and the results are reported to the management team. The aim is to identify the most significant interfaces where the company’s operations affect the environment. The assessment of these aspects is also carried out when there are significant changes in operations or in the surrounding society. Dialogue regarding impact assessment is also conducted with stakeholders.

Significant Environmental Impacts

Based on environmental aspects, the management team evaluates the significance of environmental impacts on both the business and the environment. These evaluations form the basis for preparing goals and objectives to be approved.

Environmental Responsibilities

Environmental responsibilities and environmental permits are addressed, as necessary, in the business units’ operating instructions in the legal guidance portal and other internal channels for each business unit.

ETJ, i.e., the Energy Efficiency System

ETJ+ (the Energy Efficiency System) is maintained and monitored by the Environment and Energy Efficiency Committee. Loiste companies are part of the energy efficiency agreement.

Corrective and Preventive Actions, and Identifying Opportunities

Corrective Actions

Corrective actions for processes and operations are initiated by the person responsible, within the scope of their authority, based on feedback, deviations, or other indications received. If necessary, the need for action is forwarded to development groups or management teams for consideration.

Preventive Actions and Identifying Opportunities

Preventive actions for processes and operations are initiated based on risk assessments. The actions are initiated by the person responsible, within the scope of their authority. If necessary, the need for action is forwarded to development groups or management teams for consideration. The development groups, management team, and process owners assess possibilities for improvement in relation to identified risks.

Monitoring and Improving Operations

Management Team Work

Management Team

Meets twice a month. No meeting is held in July. The management team handles matters related to Loiste’s operational management. The operational management reports to the group’s Board of Directors.

Four times a year, meetings address planning and monitoring of quality, environmental, and OHS issues, with an emphasis on HR-related matters. In addition to the aforementioned topics, these meetings cover the planning and monitoring of owner and customer perspectives as well as process development and HR matters across the business units.

Composition: Business unit managers, HR manager, and financial controllers. Individuals responsible for sustainability, IT, and HR matters are separately invited regarding those areas.

Environment and Energy Efficiency, OHS Group, and Continuity Management Group

Meets four times a year according to a predetermined agenda. Preparation work related to environmental issues is the responsibility of the Environment and Energy Efficiency Group. The group’s tasks include:
• Creating and maintaining the energy policy
• Defining energy objectives and targets
• Defining targets for energy and site audits
• Using the ETJ+ energy management system in compliance with its requirements
• Reducing emissions and monitoring the achievement of sustainable development and CO2 neutrality
• Continuity management controls and monitoring in business units

This committee, combined, also acts as an advisory body to the management team, with tasks related to the planning, monitoring, and development of HR and OHS matters. Meeting materials are available on the Teams channel. All meetings are documented.

Monitoring, developing, and reporting on continuity management issues to the management team come separately from the business units.

Business Unit Meetings

A steering and development group meeting is held monthly. In addition, various development or project group meetings are conducted.

Management Review

Purpose
• The purpose of the reviews is to provide essential information about the group’s operations and development direction, as well as the suitability of the management system for guiding the group’s activities.
• The goal of the reviews is to identify key development needs and make decisions on corrective actions.

Scope
• The management team addresses the entire group’s operations at the group level. Management reviews focus only on issues relevant to the company’s operations.

Timing of Reviews
• Reviews are conducted once a year, around September-October, in conjunction with the internal audit.

Conducting the Review
• Reviews are carried out according to an agenda and annual plan.
• Successful reviews require thorough preparation.
• Minutes are taken of the review meetings and made available to all personnel.

Stakeholders

Cooperation with stakeholders affected by our activities is crucial for the company’s ongoing supplier evaluation process and for assessing material sustainability issues.

Resource Management

Personnel (Responsibility: CEO, HR Manager)

• Personnel in permanent employment within the group fall under the HR department.
• We may also employ fixed-term workers, trainees, and students as needed and when possible. Consultative labor is also used when necessary.
• The need for human resources is determined by the business management.

Personnel Competence Requirements and Development

Factors that affect the development of personnel competence include, for example:
• Changes in the industry
• General changes in society
• Technological advancements
• Changes in age structure
• Changes in corporate structure

Additional training needs required by the business are assessed in several ways, including:
• Statutory requirements
• Competence needs identified in performance reviews
• Needs arising from business strategies and goals
• Needs identified in audits

The impact of competence development is evaluated using various operational indicators.

Planning Work Practices and Tasks
Business management plans work practices, which are documented in the management system. The planning of tasks is carried out by business managers. In task planning, we consider both business needs and the employees’ personal attributes.

Salary, Incentive, and Recognition Procedures

Salary, incentive, and recognition procedures are described in our processes and internal documentation on the Intranet.

Compensation Policy

Group companies follow the applicable collective labor agreement. Salary increases are implemented at least in line with national wage agreements. The salary levels of different employee groups are reviewed annually by the CEO, unit managers, the HR manager, and the representative of the respective employee group. A performance-based incentive system is in use.

Necessary Information, Availability, Maintenance, and Protection (Responsibility: IT Manager)

General

Information essential to the business is produced and stored in various IT systems. In addition, important data is stored, for example, on paper, in recordings, and in images. The handling of records and documents follows the document management guidelines described in the operating procedures.

Protection of Documents and Records

Paper documents are stored in a separate fireproof archive area with controlled access.

Other recorded materials are stored in a fireproof location and, wherever possible, converted into electronic format. Such records include drawings, audio recordings, slides, photos, videos, etc.

Protection of Electronically Stored Data

Physical protection, access control, burglary protection, and fire alarms are described in separate operating procedures. External threats to data are addressed through firewall protection of data communications. The IT department is responsible for this implementation.

Measurement, Analysis, and Improvement (Responsibility: CEO)

Monitoring, Measurements, and Operational Results

Day-to-day operations are carried out by company personnel in cooperation with their supervisors. The supervisors’ and other responsible persons’ job descriptions include daily monitoring and oversight within their respective areas of responsibility. A more detailed description of daily oversight is provided in the operating procedures and processes for each area of responsibility and process.

Monthly, or according to another defined schedule, the measurement results for the critical success factors of each area of responsibility are reviewed in business and support unit meetings and collectively at the management team meetings for Loiste Oy’s business companies.

The quality of telephone services delivered by customer service is monitored by the service provider. A detailed description of this process is found in the customer service process descriptions.

The results of quality assessments are analyzed by the person responsible for customer service (for operational monitoring and development).

Supervisors’ and other responsible persons’ job descriptions include guiding personnel and developing competence within their area of responsibility. In addition to ensuring that work tasks proceed smoothly, supervisors must monitor their staff’s well-being and ensure that occupational health and safety objectives are met. They are supported in this work by their own supervisors, the group’s CEO, the HR manager, the group’s occupational health and safety guidelines, and the management team. Employee well-being is regularly monitored through measures such as staff barometers and workplace climate surveys.

The entire staff contributes to the development of products, services, and processes within their own areas of responsibility. Targets set for products and services, as well as the indicators used to track performance, are described in the operating and work instructions of each business and support unit.

Process performance is monitored daily by the individuals responsible. Monthly, they report to their supervisor or the business unit’s management team on progress toward process targets using the indicators described in the process cards.

Regular service management and review meetings are held with the most significant partners and suppliers to assess and develop the collaboration. For other suppliers and partners, monitoring and development of their performance is the responsibility of the individual who uses their services.

With the assistance of their supervisors, the responsible individuals must each ensure that the environmental objectives set are achieved. At the group level, the monitoring and guidance of environmental objectives are carried out by the quality management team.

Data Analysis, Identifying Opportunities, and Improvement

Data analysis and corrective actions are the responsibility of the respective business units. If needed, issues are addressed in the group’s management team. Procedures for handling any non-conforming products or services are described in the operating procedures. Business units decide on their own development projects based on their objectives and goals.

Joint development projects that involve multiple business units and support services are initiated based on a decision by the group’s management team.

Assessments

Internal Assessments/Audits
We monitor our operational level and compliance with the management system requirements through internal assessments. The assessment team consists of an external evaluator, a process owner, and the ESG Controller. This ensures that sufficient time resources are allocated to the people involved for conducting the assessment properly. We regularly monitor operational levels and compliance with the management system requirements through both internal and external audits.

The purpose of an internal assessment is to inform company management about any development needs within the management system and processes. In addition, the assessor’s role includes a consultative aspect to help promote effective and high-quality operations in every possible way.

The internal assessment program is available to all employees internally.

External Surveillance Evaluation/Audit
An external surveillance evaluation is conducted once a year according to the plan provided by the external evaluator. The ESG Controller handles the practical arrangements for the surveillance evaluation. The documentation of the external surveillance evaluation is stored internally for all personnel to access. Auditing is performed once a year according to the schedule and audit program provided by the external auditor.

Risk Assessments
Risk assessments are performed as part of daily work under supervisory duties. Any identified risks must be reported without delay to business management. Risk assessments are then conducted by the business units and/or the group’s management team. Related documentation is attached to the minutes of the management team meetings. The company has a separate risk policy.

Target:

ESG Social responsibility personnel

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Through continuous dialogue and an open company culture, personnel are involved in the development of the company and processes through various teams and committees. The result is:
- Staff commitment
- Taking care of the equal participation of personnel
- Full participation of personnel
- The basic prerequisite for our operation is competent and motivated staff
- We want to be the most interesting workplace in the industry
- Transparency and quality



Risks and possibilities

Risk: Social risk, human rights, non-discrimination. Engagement and development: Employee feedback is not being considered. Social risk
The worst consequences: Mental strain and improvement of functioning is ignored and not done
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
Trust Index, development actions and monitoring based on GPTW results. Employee observations, GPTW, feedback links are also in use: development suggestions, feedback, and implemented improvements (indicator).
Opportunity: Involving people and developing open cooperation Significance: Large Probability: Large
Actions:
Based on Trust Index, GPTW results, development measures and monitoring, dialogue and early communication create an atmosphere of trust and staff retention improves.
Opportunity: Resource efficiency: Benefits for workforce management and planning (e.g., better health and safety, employee satisfaction), leading to lower costs Significance: Moderate Probability: Large
Actions:
Social responsibility / sustainability program. By taking care of both our own staff and contractors, we ensure the retention and well-being of skilled personnel.

Metrics

S1-15 Percentage of employees who have taken parental leave


Measurement frequency: Annually


S1-15 Percentage of employees who have taken parental leave by gender
Men / Women

Measurement frequency: Annually


Trust Index™ research result, GPTW certificate


Measurement frequency: Not defined


S1-15 Percentage of employees entitled to parental leave


Measurement frequency: Not defined


Actions caused by the workplace survey and personnel survey (GPTW).
metric: issues classified as critical, measures planned and implemented

Measurement frequency: Not defined


Number of development discussions and training
metric: development discussions 2 (3) times a year/visit

Measurement frequency: Not defined


Compliance with the Cooperative Act and HR management team meetings held
The occurrence of findings and deviations and their treatment organized. Human rights, equality, ethical rules

Measurement frequency: Not defined


Staff feedback and development proposals, as well as processing management
passed proposals and improvements pcs

Measurement frequency: Not defined


Staff mood survey
Satisfaction measurement

Measurement frequency: Not defined


Target:

ESG Social responsibility Development of personnel skills

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Allowing continuous training of personnel to enable meaningful work and career development.


Risks and possibilities

Opportunity: Competent and motivated staff by enabling training Significance: Large Probability: Moderate
Actions:
Personnel look forward to the opportunity to develop their professional and social skills and, as their skills develop, to advance in their careers. Personnel are supported in training. Training needs are reviewed in personal development discussions.

Metrics

Number of training days / person / year


Measurement frequency: Not defined


Target:

ESG Social responsibility The gender and age distribution of the personnel is balanced, provision has been made for retirements and backup arrangements have been ensured

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Recruitments are planned in time and are part of the quality work of the management teams.


Risks and possibilities

Risk: Diversity, equality, and inclusion: Social risk, human rights, non-discrimination/ The gender and age distribution of the personnel has not been balanced, no provision has been made for retirements and backup arrangements have not been ensured Significance: Large Probability: Slight
Actions:
Gender and age distribution is monitored in human resources management, and retirement schedules are considered in recruitment plans for new personnel. At least two experts are allocated to each job role. Employee feedback is collected regularly and processed in the occupational safety committee, with necessary actions taken through HR. A good workplace umbrella and methods for addressing issues are in place. Cooperation meetings are held between management and staff. Equality and diversity policies are in place.

Metrics

Personnel policy and plan
The gender and age distribution of the personnel has been balanced, provision has been made for retirements and backup arrangements have been ensured

Measurement frequency: Not defined


Target:

ESG Social responsibility Non-discrimination and human values

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Our activities: We ensure that the described and complied with:
- The right to life and health
- Non-discrimination
- Combining work and family
- Privacy policy
- Human rights risk management
- Enabling trade association activities
- Prohibition of slave labor and forced labor
- Prohibition of human trafficking
- Prohibited child labor

Combating social human rights violations, e.g. by refraining from activities that cause risks
- elimination of the cause of the risk
- reducing the probability of the risk materializing
- preparing for or influencing the consequences of the realization of the risk
- [risk acceptance]



Risks and possibilities

Risk: Inclusion and diversity: The composition of governing bodies and the distribution of employees by employee group according to gender, age group, minority group membership and other indicators of diversity, including discrimination. Social risk, governance responsibility
Worst Consequences: Low/Decreasing Diversity and Inclusion The level of board work can lead to poorer performance, tarnish the company's reputation, and lead to hiring and recruiting challenges.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance
Risk: Child labour/forced labor or compulsory labour. Social risk, governance responsibility
Worst consequences: The use of child labor or forced labor can lead to severe reputational impacts. The current EU policy development forces most companies to report their approach to these issues in the future, including in the supply chain. Insufficient processes and disclosure can have regulatory and reputational consequences. Child labor/Forced labor or compulsory labor: Child labor refers to work that deprives children of their childhood, potential, and dignity and harms their physical or mental development, including disrupting their education. More specifically, it refers to work that is not allowed for underage children. Forced or compulsory labor: Any work or service that is required from anyone under the threat of punishment and to which the person has not voluntarily agreed. The use of any child labor or forced labor can lead to severe reputational impacts. The current EU policy development forces most companies to report their approach to these issues in the future, including in the supply chain. Insufficient processes and disclosure can have regulatory and reputational consequences.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance
Risk: Freedom of association: The right of employers and employees to establish, join and manage their own organizations without prior permission or interference from the state or any other entity. Social risk, governance responsibility
The worst consequences: The lack of freedom of association in board work in the company and in the supply chain can have negative reputational effects.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Policy and journalist management, monitoring, trainings
Risk: Human rights and non-discrimination are ignored, UN human rights: right to life and health, prohibition of slave labor and forced labor, prohibition of human trafficking, prohibited child labor, enabling trade union activities, non-discrimination, combining work and family, privacy protection. Social risk
Worst consequences: Failure to comply with the law, resulting in official sanctions: reputational damage, fine, additional fees
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Large Probability: Very little or nothing
Actions:
A good workplace umbrella and methods for addressing issues are in use. Cooperation meetings are held between management and staff. Equality and diversity policies are in place. Employee feedback can be collected through feedback received by the shop steward, feedback channels, whistleblowing, or through the occupational safety representative. Feedback is processed in the occupational safety committee and forwarded to the management team and, if necessary, to the group board.
Risk: Human rights and non-discrimination: Compliance with equality is ignored. Social risk
Worst consequences: Failure to comply with the law, resulting in official sanctions: reputational damage, fine, additional fees
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Large Probability: Very little or nothing
Actions:
The umbrella of a good workplace and the methods of public speaking are used. Cooperation meetings with management and personnel. Equality and equality policy in use.
Risk: Human rights and non-discrimination: Full participation of personnel. Social risk
The worst consequences: Development ideas are not put into practice and problem findings remain unprocessed and untracked.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
Staff observations, GPTW, feedback links also available. Development proposals, feedback and past improvements (meter)
Risk: Contractors and service providers: Human rights and non-discrimination are not being considered. UN Human Rights: Right to life and health, Prohibition of slave labor and forced labor, Prohibition of human trafficking, Prohibition of child labor, Enabling trade union activities, Non-discrimination, Work-life balance, Privacy protection. Social risk
Worst consequences: Failure to comply with the law, resulting in official sanctions: reputational damage, fine, additional fees
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Large Probability: Very little or nothing
Actions:
Service management meetings with management and personnel. Policy compliance and monitoring using different methods
Risk: Contractors, residents and service providers: Compliance with equality is ignored. Social risk
Worst consequences: Failure to comply with the law, resulting in official sanctions: reputational damage, fine, additional fees
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Large Probability: Very little or nothing
Actions:
Service management meetings with management and staff. Compliance with policy and monitoring through various methods. Fair treatment and service for residents, regardless of the customer's digital capabilities. An anonymous feedback channel is available, where deviations, observations, and areas for development can be reported either anonymously or with contact details.
Risk: Inclusion and diversity. Social risk, governance responsibility
The composition of governance bodies and the distribution of employees by employee groups based on gender, age group, membership in minority groups, and other diversity indicators, including discrimination.
Worst consequences Low/declining diversity and inclusion at the board level may lead to poorer performance, damage to the company's reputation, and recruitment and hiring challenges.
Period: 1 month -
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Consideration of equality, adherence to ethical guidelines, and monitoring throughout the entire value chain.
Risk: Labor standards and working conditions. Social risk, governance responsibility:
Labor standards and working conditions are at the core of wage labor and employment relationships. Working conditions cover a wide range of topics and issues related to working hours (work hours, rest periods, and work schedules), compensation, as well as the physical conditions and mental demands present at the workplace. Any combination of low labor standards and poor working conditions can lead to severe reputational damage. The current EU policy development forces most companies to report their approach to these issues in the future, including in the supply chain. Insufficient disclosure can have regulatory and reputational consequences.
Period: 1 month ->
Significance: Moderate Probability: Very little or nothing
Actions:
Consideration of equality, adherence to ethical guidelines, and monitoring throughout the entire value chain.
Residual risk:
Verification across the entire value chain is challenging for the production of construction and maintenance materials.

Metrics

No violations of UN and OECD human rights rules


Measurement frequency: Not defined


Stakeholders comply with UN human rights
Reviewed and reviewed at service management meetings.

Measurement frequency: Not defined


Target:

ESG Social responsibility-Stakeholders

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

- The right to life and health
- Non-discrimination
- Combining work and family
- Privacy protection/Human rights risk management
- Enabling trade association activities
- Prohibition of slave labor and forced labor
- Prohibition of human trafficking
- Prohibited child labor

Combating social human rights violations, e.g. by refraining from activities that cause risks
- elimination of the cause of the risk
- reducing the probability of the risk materializing
- preparing for or influencing the consequences of the realization of the risk
- [risk acceptance]



Risks and possibilities

Risk: Health and Safety: Contractors. The principles of occupational health and safety management systems include policy development, analysis and management of health and safety risks, training, and recording and investigation of occupational health and safety deviations. Social risk, governance responsibility
Worst consequences: Lack of occupational health and safety management systems can increase the likelihood of occupational health and safety accidents.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance. Regular measurement and monitoring of LTIF and TRIF indicators. Systematic analysis of accidents and serious near misses and sharing of lessons learned.

Metrics

Compliance with OECD guidelines and Occupational health and safety processes in stakeholders
Health and Safety: Contractors. The principles of occupational health and safety management systems include policy development, analysis and management of health and safety risks, training, and recording and investigation of occupational health and safety deviations.

Measurement frequency: Not defined


Target:

ESG Social responsibility - Customers and residents of the area

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Customer focus, customer satisfaction, customers as a stakeholder The starting point is the needs and expectations of our customers, the fulfillment of which is a prerequisite for Loiste's success.


Risks and possibilities

Risk: Customer satisfaction: Customer satisfaction measures an entity's sensitivity to customer needs and preferences, and from an organizational perspective, it is essential for long-term success. In the context of sustainable development, customer satisfaction gives an idea of ​​how the entity approaches its relationship with one stakeholder group (customers). Social risk, governance responsibility
Worst Consequences: Low/declining customer satisfaction can have serious consequences for the future of the company.
Criticality: Action is required
Probable realization: 5-20 years
Significance: Moderate Probability: Slight
Actions:
Personal high-quality customer service and customer feedback surveys and actions based on them
Risk: Construction sites pose a danger to bystanders (hot water/steam, trenches). District heating risk
Description: Obsolete equipment, site supervision and plans, occupational safety negligence, operating/operating errors at production facilities
The worst consequences: Equipment breakdowns, production losses, work accidents, financial losses, personal and property damage
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Very large Probability: Very little or nothing
Actions:
For protection, a concrete cover or plywood board (not chipboard) is used in the wells.

Metrics

Customers and residents of the area are taken into account in occupational safety plans and feedback in management


Measurement frequency: Not defined


Target:

ESG Social responsibility Participation of partners and collaborators

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Continuous dialogue with stakeholders, feedback channels and processes for identifying development targets in use.
1. Feedback channel in use and measures in implementation
- Observations
- Development proposals
2. Feedback sessions with stakeholders
- Partner management meetings
3. SLA-Measures and measures caused by their results 4. Measures of target programs in implementation:
- Stakeholder communication
- Supplier evaluations for significant suppliers annually and for all at the time of the conclusion of the contract - process
- Implementation of the commitment plan
- Education
- Review and evaluation of the cooperation program



Risks and possibilities

Risk: Community Development: The process of community members coming together to take joint action and develop solutions to common problems. Social risk, governance responsibility
Worst consequences: Minimum level in the community board
Criticality: No action
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Community meetings with residents.
Risk: Supplier relationships, stakeholder relationships: The practice of creating mutually beneficial connections with third-party groups and individuals who share a common interest. Social risk, governance responsibility
Worst consequences: A lack of stakeholder engagement can lead to reputational damage.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Regular meetings with different stakeholders.

Metrics

Continuous dialogue with stakeholders, feedback channels and processes for identifying development targets in use.


Measurement frequency: Not defined


Target:

ESG Social responsibility-Stakeholder complaint process

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Feedback channel in use and measures in development - process for stakeholder communication (subsections may be mentioned elsewhere in this board for repetition in different contexts) complaints that concern the following stakeholders: note:
- Clients/customers
- Community
- Contractors
- Employees
- Investors/shareholders
- Regulators/Government
- Special interest groups
- Reporters
- Supply chain (Tier 1 suppliers and contractors)
Netlinks Ceriffi Check, which stakeholders can use to report complaints with the following features:
- Easy to use and easy to understand
- Anonymous
- Dialogue based
- Equality and compatibility of rights
- Based on development - Legal and safe
- There are no sanctions for the stakeholder group



Risks and possibilities

Opportunity: Using stakeholder complaints to improve processes. Significance: Moderate Probability: Moderate
Actions:
With the help of an open feedback link from stakeholders, operations can be developed.

Metrics

Feedback from stakeholders, customers, residents and suppliers
Number of feedbacks and processing status from Ceriffi Check

Measurement frequency: Not defined


Target:

ESG Social responsibility - stakeholder engagement program

Significance :
Very little or nothing
Influenceability :
Very little or nothing
Impact materialityVery little or nothing :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Process monitoring and documentation available. Aligned stakeholder engagement program with third party standards and/or guidelines. There is a stakeholder engagement program for everyone
- Community/Public
- Contractors
- Investors/shareholders
- Regulators/Government
- Special interest groups
- others



Risks and possibilities

Risk: Diversity, equality, and inclusion: Employee engagement: Employee participation, commitment, and satisfaction with the overall experience. Social risk, governance responsibility
Worst consequences: Low/declining employee engagement can have serious consequences for the company's future.
Criticality: The situation should be monitored
Likely occurrence: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Policy and supplier management, monitoring, trainings
Risk: Corporate social partnership: Entity partnerships with organizations that have social goals that are the organization's primary purpose. Social risk, governance responsibility
Worst Consequences: Lack of cooperation with nonprofits can lead to reputational damage.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Cooperation and meetings with operators in the area.
Opportunity: Engaging stakeholders improves interaction. Significance: Moderate Probability: Moderate
Actions:
Engaging stakeholders creates confidential stability for cooperation and working with different stakeholders is flexible.

Metrics

Environmental protection level monitoring: Air pollution and greenhouse gas emissions: 2024 CO₂ emissions lower than 2023
Operations do not pollute the air and Scope 3 emissions have been reduced the most during 2024 by making the distribution network’s loss electricity emission-free CO2 emissions in 2024 are 25 % lower than in 2023 CO2-free (net-zero) district heating investments are beginning

Base value: 73350 ton CO2e/year / 2023 % (2024) The base value is the value to which the development of the measure is compared.
Measurement frequency: Not defined Aim 2028: 6421 ton CO2e/year %


Environmental protection level monitoring: Energy efficiency Decrease in supply water temperature by several degrees, which reduces losses in the network.
Objective: an average of two (2) degrees lower supply water temperature, meaning one degree corresponds to a reduction in network losses of 240 MWh per year. Report the achieved MWh savings. Other identified benefits: • Heat pump production efficiency improves, priming needs decrease (in new production) • CHP utilization rate increases, i.e. more backpressure electricity +0.2 % • Waste heat utilization becomes easier • Use of the heat network as a thermal battery increases capacity

Base value: 480 MW kWh (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: 1000 MW kWh


Tariff change, where the customer pays for the temperature drop of the heat exchanger.
The benefit is reduced pumping costs and losses. Benefit xx MWh target and how much yy MWh is achieved each year. Both the target and the estimated amount of savings in MWh are reported.

Base value: 480 MW kWh (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: 1000 MW kWh


Dismantled overhead lines, freed up for forestry use, which enables carbon sequestration
increase METER 70 hectares of freed land released for forestry use, which enables carbon sequestration. Action: according to the plans, overhead cables will be replaced with underground cabling. Data available: via network value statistics directly. Guidance of contractors and communication of environmental issues

Base value: 85 ha (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: 70 ha 


Measures that improve energy efficiency in the electricity network business in accordance with the Motiva commitment.
Measures to permanently improve the energy efficiency of the electricity network, from which the accumulated annual saving energy is 220 MWh / year according to the Energy Efficiency Agreement (1984 MWh / 9 years). Procedure: Same as Motiva.Data available: Monitoring from the Motiva website and network value statistics directly.

Base value: 220 MW (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: 1100 MW 


Stakeholder engagement program
Process monitoring and documentation available. Aligned stakeholder engagement program with third party standards and/or guidelines. There is a stakeholder engagement program for everyone

Measurement frequency: Not defined


Environmental protection level monitoring: Biological diversity and habitat
Environmental protection level monitoring: Biological diversity and habitat Valuable natural sites are taken into account and assessment documents are available. Construction and operations are not conducted in areas sensitive to biodiversity or in their vicinity. Electricity network structures are not placed in Natura 2000 areas.

Measurement frequency: Quarterly


Biofuels have been obtained from permitted countries and the certificates of origin exist.
Origin certificates are available and have been audited.

Measurement frequency: Not defined


Social performance monitoring
No deviations in the following areas. Accident data and near-miss reports are measured separately and monitored monthly: Child labor Community development Customer satisfaction Diversity, equality, and inclusion Employee engagement Forced labor or compulsory labor Freedom of association Health and safety: community Health and safety: contractors Health and safety: employees Health and safety: supply chain Health and safety: users Labor standards and working conditions Local employment Social enterprise partnerships Stakeholder relationships

Measurement frequency: Every 6 months


Waste management is organized appropriately and documented.
Proof documents provided by the recipient for waste transports are available.

Measurement frequency: Not defined


Target:

ESG Social responsibility-Occupational health and safety goals, and risk assessment/hazard identification Partners and contractors Own staff

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Reporting further to management and available in English. evidence/documents support all material social issues:
- Community development
- Customer satisfaction
- Employee engagement
- Health and safety: community
- Health and safety: contractors
- Health and safety: employees
- Local employment
- Social business partnership
- Stakeholder relations



Risks and possibilities

Risk: Work standards and working conditions: Work standards and working conditions are at the core of paid work and employment relationships. Working conditions cover a wide range of topics and questions, from working hours (working hours, rest periods and work schedules) to remuneration, as well as the physical conditions and mental requirements in the workplace. Social risk, governance responsibility
Worst Consequences: Any combination of low work standards and working conditions can lead to serious reputational damage. Current policy developments in the EU force most companies to report on their approach to these issues in the future, including in the supply chain. Inadequate disclosure can have regulatory and reputational implications.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance
Risk: Health and Safety: Community. The principles of occupational health and safety management systems include policy development, analysis and management of health and safety risks, training, and recording and investigation of occupational health and safety deviations. Social risk, governance responsibility
Worst consequences: Lack of occupational health and safety management systems can increase the likelihood of occupational health and safety accidents.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance
Risk: Health and safety: workers. The principles of occupational health and safety management systems include policy development, analysis and management of health and safety risks, training, and recording and investigation of occupational health and safety deviations. Social risk, governance responsibility
Worst consequences: Lack of occupational health and safety management systems can increase the likelihood of occupational health and safety accidents.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance. Regular measurement and monitoring of LTIF and TRIF indicators. Systematic analysis of accidents and serious near misses and sharing of lessons learned.
Risk: Health and safety: the supply chain. The principles of occupational health and safety management systems include policy development, analysis and management of health and safety risks, training, and recording and investigation of occupational health and safety deviations. Social risk, governance responsibility
Worst consequences: Lack of occupational health and safety management systems can increase the likelihood of occupational health and safety accidents.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance
Risk: Health and safety: users. The principles of occupational health and safety management systems include policy development, analysis and management of health and safety risks, training, and recording and investigation of occupational health and safety deviations. Social risk, governance responsibility
Worst consequences: Lack of occupational health and safety management systems can increase the likelihood of occupational health and safety accidents.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
TTT metrics, monitoring, training and guidance
Risk: Accident in the yard, etc., slipping / tripping. Social risk
Worst consequences: Injury
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Compacting the sanding of the yard area
Risk: Health and safety: contractors, suppliers: Accident while performing Loiste's duties. Social risk
Worst consequences: Injury
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Ensuring appropriate protective equipment and work practices, with reminders in cooperation meetings. Monitoring is carried out through regular inspections, safety observations are recorded in systems, and reviewed regularly with corrective actions documented.
Risk: Health and safety: community and local residents: Accident at Loiste's site. Social risk
Worst consequences: Injury
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Appropriate hazard signs and site markings have been established. Ensuring safety and reminders in cooperation meetings. Safety reviews and observations, as well as corrective actions, are recorded and reviewed in the occupational safety committee.
Risk: Exposing chemicals and occupational diseases: TTT instructions are not taken into account and an accident occurs. Social risk
Worst consequences: Exposure
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Safety instructions visible, training and familiarization, monitoring. Taking care of ergonomics and a reminder.
Risk: Threat of violence: An unauthorized person or our own personnel behaves in a threatening manner. Social risk
Worst consequences: Accident
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Slight
Actions:
Instructions in case of dangerous situations, personnel well-being monitoring and rescue plan

Metrics

Health percentage
Percentage of persons who have had no sickness absences at all Target: Loiste-yhtiöt Oy, Kajave Oy, Loiste Lämpö Oy, Loiste Holding Oy > 50%

Measurement frequency: Not defined


Number of sick days
The days of sick leave per person indicator describes the number of days of sick leave in proportion to the number of people. target: Loiste-yhtiöt Oy, Kajave Oy, Loiste Lämpö Oy, Loiste Holding Oy sickness absence target <2 days

Measurement frequency: Not defined


Number of accidents
Target: Loiste-yhtiot Oy, Kajave Oy, Loiste Lämpö Oy, Loiste Holding Oy: 0 and Contractors 0

Measurement frequency: Not defined


LTIF
including contractors < 4

Measurement frequency: Not defined


LTRIF
including contractors < 5

Measurement frequency: Not defined


Consideration and prevention of near misses and dangerous situations
Safety observations, business operations also includes partners closely monitoring situations: goal 2024 notifications > 5 own and contractors

Measurement frequency: Not defined


Based on the near miss notifications, the number of corrective measures and the degree of implementation were approximated


Measurement frequency: Not defined


Target:

ESG Administration and management

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

As an example of management, management audits and management reviews of processes. We maintain asset level certificates and ESG-related performance verification in accordance with the procurement policy, also with documents available from the contractor, and we perform the review checks of the Loistee code.
- Observations (whistleblow) (meter)
- External relations and side activities Outside of Loistei (Management agreement)
- Observations (meter) Start tracking the following actions
- Material administrative issues:
- Structure/independence of the remuneration committee - Implementation of the communication plan
- The role and operation of process owners.
- Administrative inspection
- Owner reporting of deviations
- Other notification uses

The ESG Management part evaluates the way the company is managed, examines practices, internal audit measures and management systems, as well as, among other things, the company's management, management remuneration, audits and shareholders' rights.

- Evidence-based decision-making
- Delegation of authorization, verification possible through documentation
- Remuneration of management
- Shareholder's rights

Management methods and monitoring in use:
- Identified risks vs. realized risks
- Residual risks and their magnitude/significance
- We monitor and measure the quality of our operations and are committed to the continuous development of our operations

Documentation available:
All proofs/documents are accompanied by an English translation:
- Structure/independence of the audit committee
- Board composition
- The board's ESG monitoring
- Structure/independence of the Remuneration Committee
- Conflicts of interest
- Data protection and privacy
- Remuneration of management
- Fraud
- Independence of the chairman of the board
- Lobbying activities
- Political contributions
- Shareholder's rights
- The documentation exists and the translation is available in the Responsibility program.

In use, the following essential administrative issues are documented in the administrative practices:
- Cyber ​​security
- Transfer of authorization
- Protection of whistleblowers
- Notification channel and monitoring in use



Risks and possibilities

Risk: Violation of ethical rules. Administrative risk
Worst consequences: Violation of ethical rules causes material or reputational damage
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
- Stakeholder index (meter)
-Observations (whistleblow?) (meter)

Risk: The management's authorizations have not worked. Administrative risk
Worst consequences: Unauthorized activity causes abuse
Criticality: An essential part of the control model
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
The granting of authorizations has been done in different stages, and it is not possible to bypass them. To be documented.
Risk: The operation according to the quality system is not carried out. Administrative risk
The worst consequences: The suppliers' actions cause dangerous situations or a reputational risk
Criticality: An essential part of the control model
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
- Criteria for suppliers and results of audits (meter)
-Observations regarding partners (meter)

Risk: The management's remuneration practices are not transparent or are contrary to the Ethical Guidelines. Administrative risk
The worst consequences: Acting unethically, corruption
Criticality: An essential part of the control model
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
Open reporting to owners, auditing and verification of accounting
Risk: Bribery: Offering, giving, receiving or acquiring something of value in order to influence the actions of a public official or other person responsible for public or legal positions of trust. Administrative risk
Worst Consequences: Any incident or association with bribery or corruption can result in serious direct financial and reputational consequences. This includes supply chain entities.
Criticality: An essential part of the control model
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: Corruption: Abuse of trusted power for private gain. Administrative risk
The worst consequences: Any events or associations with the government's work
Criticality: An essential part of the control model
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: Fraudulent fraud intended to produce financial or personal gain. Administrative risk
Worst Consequences: Any occurrence or association with fraud can result in serious direct financial and reputational consequences. This includes supply chain entities.
Criticality: The situation must be monitored
Significance: Moderate Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: Conflicts of interest: Situations in which an individual has to choose between the demands of his job and his own private interests. Administrative risk
Worst Consequences: Any event or combination of conflicts of interest can lead to direct financial and reputational consequences. This includes supply chain entities.
Criticality: The situation must be monitored
Significance: Slight Probability: Slight
Actions:
Corporate governance and control
Risk: Lobbying: All activities aimed at influencing the policies and decisions of a government or institution in favor of a specific cause or outcome. Administrative risk
Worst Consequences: Lack of transparency about lobbying or promoting a particular outcome can lead to reputation. This includes actions taken by the trade association on behalf of the company.
Criticality: An essential part of the control model
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Open reporting to owners, auditing and verification of accounting
Risk: Political contributions are prohibited, with the risk being the use of political donations and failure to comply with guidelines. The organization makes monetary and non-monetary donations to politically influential parties, including political donations made through third parties. Administrative risk
Worst Consequences: Lack of transparency about political donations or political contributions to certain political organizations can lead to a reputation. This includes actions taken by the trade association on behalf of the company.
Criticality: An essential part of the control model
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: Whistleblower protection has been inadequately implemented: There must be a process that provides protection for individuals who wish to expose illegal, unethical, or dangerous practices. An effective whistleblowing mechanism defines clear procedures and channels to facilitate reporting of misconduct and corruption, defines protected disclosures, outlines measures regarding retaliatory actions, and specifies consequences. Administrative risk
Worst Consequences: Weak whistleblower protections can result in less reporting of potential illegal, unethical or dangerous practices, increasing the risk that actual illegal, unethical or dangerous practices will be allowed to occur.
Criticality: Very critical, An essential part of the control model
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: Remuneration of management: Financial and non-financial remuneration of management in a way that motivates managers to carry out their duties in accordance with the company's goals and risk tolerance. Administrative risk
Worst consequences: A lack of focus on ensuring that managers are rewarded in a way that motivates them to perform their roles in line with the company's goals and risk tolerance increases the risk that remuneration does not motivate managers to perform their duties in line with the company's goals and risk tolerance.
Criticality: An essential part of the control model
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: The board's ESG oversight is inadequate: The highest committee or position that officially evaluates and approves the organization's sustainability report and ensures that all material topics are addressed. Administrative risk
Worst Consequences: Unauthorized use of any customer data can lead to direct financial and reputational consequences.
Criticality: Critical, monitoring the effects of measures
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: The independence of the board chairman has not been ensured: The chairman should be an external board member with no executive role within the organization and should not be under the influence of any other inappropriate internal or external, political or ownership-related relationship that would impair the board member's ability to exercise independent judgment. Administrative risk
Worst Consequences: The lack of clear ESG responsibilities in the board can lead to weaker corporate governance on ESG issues, increasing the risk of actual ESG events.
Criticality: Monitoring the effects of actions
Significance: Large Probability: Slight
Actions:
Corporate governance and supervision, the chairman of the board may not have management positions in the company, as this may hinder the chairman of the board from using objective judgment.
Risk: Delegation of authority is inadequate: The process is not in place for delegating authority on financial, environmental, and social matters from the highest governing bodies to the organization, with approval from a sufficient number of parties. Administrative risk
Worst Consequences: Lack of a clear process for delegating authority from the board can lead to weaker governance of ESG issues, increasing the risk of actual ESG events.
Criticality: The situation must be monitored
Significance: Slight Probability: Slight
Actions:
Corporate governance and control
Risk: The board composition rules have not been followed: Composition of the board and its committees: (i) non-executive or non-executive person, (ii) independence, (iii) term of office in the governing body, (iv) number of other significant tasks and commitments of each person and nature of commitments, (v) gender , (vi) belonging to underrepresented social groups, (vii) qualifications related to economic, environmental and social impacts, (viii) representation of stakeholders. Administrative risk
Worst consequences: Lack of focus on the composition of the board and its committees can weaken the governance culture.
Criticality: The situation must be monitored
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: The structure/independence of the audit committee has not been ensured, and the guideline has not been followed. The guideline is: The company's board should establish an audit committee to assist in carrying out its fiduciary duties. An effective audit committee is an important part of a strong governance culture, and it should have a clear description of its roles and responsibilities. Administrative risk
Worst consequences: The lack of an independent audit committee can weaken the governance culture.
Criticality: The situation must be monitored
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: The structure/independence rules of the remuneration committee have not been followed. The guideline is: Compensation decisions are critical to the governance of many units. Remuneration committees or similar organizations should be established to manage employee compensation and ensure that employee compensation decisions are made in a fair, consistent, and independent manner. An independent remuneration committee can be one indicator of effective governance. Administrative risk
Worst consequences: The lack of an independent audit committee can weaken the governance culture.
Criticality: The situation must be monitored
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Corporate governance and control
Risk: Careless communication or messaging. Leads to reputational damage.
Description: Loiste's internal and external communication has not been handled with quality.
Criticality: The situation must be monitored
Probable implementation: 1-11 months
Significance: Moderate Probability: Moderate
Actions:

Risk: Risk of exposure to litigation: Poor corporate governance can lead to exposure to legal actions. Increased costs resulting from fines and judgments and/or a decrease in demand for products and services. Significance: Moderate Probability: Very little or nothing
Actions:
Ongoing monitoring and controls for compliance with governance rules.

Metrics

Governance oversight: Audit committee structure/independence Board composition Board ESG oversight Bribery and corruption Remuneration committee structure/independence Conflicts of interest Fraud Chairperson independence Lobbying activities Political contributions
The group's governance system, ownership guidelines, shareholder agreement, and articles of association define good governance. Owners guide the governance. Through the reporting of the whistleblowing channel, misconduct can be anonymously reported. The performance indicators are detected deviations and whistleblow reports.

Measurement frequency: Every 6 months


Notifications from the Whistleblow notification channel
Number and corrective actions has been done

Measurement frequency: Not defined


Audit deviations


Measurement frequency: Not defined


Delegation of authority - Remuneration of management - Shareholder's rights
Management model described, access rights process in place

Measurement frequency: Not defined


Data protection: Whistleblower protection, cybersecurity
No violations in whistleblower protection / cybersecurity, monitoring through data protection committee meetings.

Measurement frequency: Quarterly


Target:

ESG Administration - Continuity management

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

We monitor and measure the quality of our operations and are committed to the continuous development of our operations. We maintain a preparedness and preparedness plan and crisis management has been instructed. Every two years, we deliver to the Energy Agency contingency and preparedness plans for the electricity network. As part of preparedness, together with our partners, we regularly train for electricity distribution disruptions.


Risks and possibilities

Risk: Disturbance communication in problem situations: dependency relationships and methods of contact have not been identified. Risk related to continuity management
The worst consequences: Corrective measures are not taken and the business risk increases.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Large Probability: Very little or nothing
Actions:
Disturbance situations described and methods of operation communicated: Work instructions exist. Processing and Reported deviations and their corrective measures
Risk: Changes in the operating environment were not identified sufficiently extensively and in time. Risk related to continuity management
The worst consequences: Tasks remain undone even in critical areas and the company's operating conditions deteriorate.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Processing and reported deviations and their corrective measures
Risk: Cybersecurity Protecting Internet-connected systems, including hardware, software, and data, from unauthorized use or access. In particular, malicious attacks can pose a significant threat to infrastructure assets. Administrative risk
Worst Consequences: Unauthorized use of or access to any system (hardware, software and data) can result in serious direct financial consequences.
Criticality: Very critical, monitoring the effects of measures
Significance: Moderate Probability: Moderate
Actions:
Together with information management service providers, we assess information security and measures to ensure cyber security are carried out as part of information management. Security is part of the policy of the Corporate Governance administration.
Risk: Data protection and privacy: Customer privacy includes, among other things, data protection; using data or information only for its original purpose, unless otherwise specifically agreed; duty of confidentiality; and protecting data from misuse or theft. Administrative risk
Worst Consequences: Unauthorized use of or access to any system (hardware, software and data) can result in serious direct financial consequences.
Criticality: Very critical. The situation must be monitored
Significance: Moderate Probability: Slight
Actions:
Corporate governance and control
Risk: Local Employment: Providing jobs and skills to local workers and local contractors. Social risk, governance responsibility
Worst consequences: The lack of a local employment policy can lead to reputational damage.
Criticality: No action
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Cooperation between educational institutions and local employment for open positions
Risk: Direct impacts from physical risks: Increased capital costs: capital costs and operating costs will increase if assets are breached by the effects of climate change. Financial risk
The worst consequences: Supply interruptions and disruptions in the electricity network cause operating costs and new, more efficient investments are needed
Criticality: The situation must be monitored
Significance: Very little or nothing Probability: Slight
Actions:
Ground cabling and moving to the roadside and processing of the rolling forest
Risk: Insurance risk: Indirect impacts caused by physical risks: Increased insurance premiums and the possibility of reduced insurance availability for assets in "high-risk" locations – Insurance is not up to date. Financial risk
Worst consequences: The insurance covers the portion of the fault repair that exceeds the deductible. Does not replace standard allowances.
Criticality: The situation must be monitored
Significance: Slight Probability: Slight
Actions:
-Construction of a weatherproof network, plan for predictive copying, rolling forest processing, getting to know the use of new technology (elastic bands, drone)
-Regular inspection of insurance coverage, preparing for major disruptions
-Regular review of insurance coverage, preparation for major disruptions
-Regular dialogue with the insurance association, changing/competing insurance policies independently. (risk amount calculated for four years)

Risk: Indirect effects caused by physical risks: Increased operating costs - the storm damages the property, the operating costs increase. Financial risk
The worst consequences: Supply failures and disturbances in the electricity network
Criticality: No action
Significance: Moderate Probability: Very little or nothing
Actions:
Proactive maintenance, so that the structures are in good condition and withstand the effects of climate change.
Risk: Indirect impacts from physical risks: Reduced income and higher costs due to negative impacts on labor, capital costs and operating costs increase, if the impact of climate change breaks assets, then there is less income. Financial risk
The worst consequences: Supply interruptions and disruptions in the electricity network cause operating costs and new, more efficient investments are needed.
Criticality: The situation must be monitored
Significance: Slight Probability: Slight
Actions:
Anticipatory maintenance and network maintenance planning and implementation on schedule.
Risk: Indirect effects caused by physical risks: Reduced production capacity - production capacity decreases due to physical changes. Financial risk
Worst consequences: If only one production unit and not enough raw materials to produce energy
Criticality: Action is required
Significance: Slight Probability: Slight
Actions:
Diversifies production into different forms of production with different raw materials in order to reduce the effects of climate change
Risk: Technology: Grid quality disturbances caused by wind power. Power grid business risk
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
Careful implementation of protections and improvement of existing ones.
Risk: Vandalism, sabotage, thieves. Electricity production risk
Description: Financial benefit, paralyzing operations
Criticality: The situation must be monitored
Probable implementation: 1-11 months
Significance: Moderate Probability: Moderate
Actions:
Lighting technology and operational controls and insurances in order.
Risk: Production: Cybersecurity The protection of internet-connected systems, including hardware, software and data, from unauthorized use or access. In particular, malicious attacks can pose a significant threat to infrastructure assets. Electricity production risk
Description: Unauthorized use of or access to any system (hardware, software and data) can lead to serious direct financial consequences.
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Moderate Probability: Moderate
Actions:
Together with IT service providers, we assess information security, and cybersecurity measures are implemented as part of IT management.
Risk: Reputation: Changing customer behavior. Consumer preferences shift, industry stigmatization, increased stakeholder concern or negative stakeholder feedback. Changing customer behavior, competition for heating methods intensifies further. District heating risk
Description: District heating pricing and environmental values
The worst consequences: Loss of customers, new sales cease
Criticality: Immediate action is required
Probable realization: 1-5 years
Significance: Large Probability: Very large
Actions:
Cost efficiency and customer pricing balance. Active launching of new products based on the new production portfolio.
Risk: Vandalism, sabotage, thieves. District heating risk
Description: Financial benefit, paralyzing operations
The worst consequences: Property damage, making operations difficult
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Moderate Probability: Moderate
Actions:
Camera surveillance, security shops.
Risk: During a power shortage, district heating customers' heat is cut off. District heating risk
Description: Electricity shortage, Fingrid
The worst consequences: The temperature control of the hot domestic water of district heating customers does not work. In some cases, it can cause the hot water to overheat and pose a personal or property risk to the customer. Luoiste Lämö and district heating in general have a bad reputation.
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Moderate Probability: Very little or nothing
Actions:
Informing customers. The energy industry has recognized the risk and is issuing a press release.
Risk: The capacity challenges of connecting new production to the electricity grid Significance: Large Probability: Moderate
Actions:
Active promotion of cooperation with Fingrid main network in order to solve the problem.
Risk: Transition risk: Failed investment in new technology. Significance: Large Probability: Very little or nothing
Actions:
Reliable suppliers are used: Supplier, product, and service criteria meet quality requirements and EU taxonomy criteria.
Residual risk:
References for the new technology are still limited, as is the user experience.
Opportunity: Flexibility; Increased market value due to flexibility planning (e.g., infrastructure, land, buildings) Significance: Slight Probability: Slight
Actions:
Opportunities are limited, no flexibility for different parties.
Opportunity: Flexibility; Increased reliability of the supply chain and the ability to operate under different conditions Significance: Slight Probability: Slight
Actions:
Considered in the procurement policy and requires commitment from the value chain.
Opportunity: Flexibility; Increased revenue due to new products and services related to ensuring flexibility Significance: Slight Probability: Slight
Actions:
Renewable energy production opportunities are included in the sustainability program and strategy, with flexibility coming through service models.
Opportunity: Resource efficiency; Use of more efficient modes of transportation Significance: Slight Probability: Slight
Actions:
Use of new technologies: electric vehicles, electric machinery, biogas, etc. Reduction in SCOPE 3 emissions
Opportunity: Resource efficiency; Use of more efficient production and distribution processes Significance: Moderate Probability: Moderate
Actions:
Stakeholder logistics carbon neutrality, SCOPE 3 decreases
Opportunity: Resource efficiency; Use of recycling Significance: Slight Probability: Slight
Actions:
Waste volume decreases, costs decrease
Opportunity: Products and services; Ability to diversify the business Significance: Moderate Probability: Moderate
Actions:
Grow the business and stabilize revenue opportunities
Opportunity: Products and services; Change in consumer preferences Significance: Large Probability: Large
Actions:
With new technologies, it is possible to sell carbon-free thermal energy to customers
Opportunity: Markets; Access to new markets Significance: Moderate Probability: Moderate
Actions:
With new technologies, it is possible to expand markets regionally.
Opportunity: Markets; Utilization of public sector incentives Significance: Slight Probability: Slight
Actions:
Markets can be more effectively expanded by leveraging funding opportunities.
Opportunity: Markets; Access to new assets and locations requiring insurance coverage Significance: Slight Probability: Slight
Actions:
Markets can be more effectively expanded by leveraging funding opportunities.
Opportunity: Flexibility; Participation in renewable energy programs and implementation of energy efficiency measures Significance: Moderate Probability: Moderate
Actions:
Support sustainable development strategies and decarbonization goals, and through power plant solutions, diversify the offering.
Opportunity: Flexibility; Resource substitutes / diversification Significance: Moderate Probability: Moderate
Actions:
Resources are efficiently available when needed, requiring long-term contracts with suppliers.
Opportunity: Products and services; Replacing current products and services with low-emission alternatives Significance: Moderate Probability: Moderate
Actions:
Support sustainable development strategies and decarbonization goals. New production methods are investments, and their implementation has been initiated.

Metrics

Continuity management has been regularly reviewed and the processes described and monitored


Measurement frequency: Not defined


Target:

ESG Social responsibility: Customer satisfaction measurement and feedback channels in use

Significance :
Large
Influenceability :
Moderate
Impact materialitySlight :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Customer satisfaction is measured immediately after each customer contact, and broader surveys are conducted annually with a sample of the entire customer base. The methods must be in place, transparent, and easy to yield results.


Risks and possibilities

Opportunity: Measuring customer satisfaction improves good customer management. Significance: Large Probability: Moderate
Actions:
Customer satisfaction provides direct feedback for promoting the development of operations and taking into account the customer's needs.

Metrics

Customer satisfaction CSAT, Level 1
CSAT % (SLA target level 90% level 1 and 85% level 2): CSAT = Customer Satisfaction Score (values ​​4 and 5 on a scale of 1-5)

Measurement frequency: Not defined


CES
CES average (unofficial target level >4): CES = Customer Effort Score (scale 1-5) The answer options at that time were: 1 = Very low effort 2 = Low effort 3 = Neutral 4 = High effort 5 = Very high effort

Measurement frequency: Not defined


FCR first contact time resolution rate, electricity network business
The first resolution rate measures how often the customer's issue is resolved during the first contact (call, chat, e-mail, online form, etc.) and the customer does not therefore have to contact the same issue again.

Measurement frequency: Not defined


Target:

ESG Management-supplier management Management/reporting and monitoring of deviations, observations and feedback channels

Significance :
Large
Influenceability :
Moderate
Impact materialitySlight :  : 

Description 

The target is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Deviations and observations web channel is actively used in supplier management.


Risks and possibilities

Opportunity: Taking supplier feedback into account creates a better opportunity for cooperation. Significance: Moderate Probability: Moderate
Actions:
Supplier feedback develops cooperation.

Metrics

Monitoring of suppliers' deviations, observations and feedback channels is in use and measures have been taken.


Measurement frequency: Not defined


Service management meetings held and SLA monitoring in order


Measurement frequency: Not defined


Back to top


Risk Policy

Responsible for implementing: Lasse Aarnio

Impacts to promote:

Risk Policy GOV-5 (Responsibility: Board of Directors)
Investigation, Monitoring, Analysis, and Assessment: Business Units
Review: Management Team
Reporting: Group Board of Directors
Prepared: 2022
Amendment Update: 2024

A review is conducted and reported to the Board at least once a year.

The risk policy covers the following areas for the entire value chain and the Loiste Group:
• Management systems and owners
• Environmental risk assessment
• Social and OHS risk assessment
• Governance risk assessment
• Strategy resilience to climate-related risks
• Identification of climate-related transition risk
• Assessment of the impacts of climate-related transition risks
• Identification of physical risk
• Assessment of the impacts of physical risks
• Identification of climate-related physical risk
• Assessment of the impacts of climate-related physical risks
• Identification of climate-related opportunities
• Assessment of the impacts of climate-related opportunities
• Monitoring the level of environmental protection
• Monitoring social and OHS performance
• Monitoring governance performance
• Finance, IT management, and cybersecurity

The Group has separate risk management guidelines for each business unit.

In the risk assessment process, the following are carried out:

• risk identification,
• materiality assessment,
• the business’s ability to withstand climate change,
• impact assessment,
• identification of opportunities,
• scope and monitoring plan, and
• regular measurement and follow-up.

The scope of analysis is described in more detail in the context of risk and opportunity management.

In the risk identification process, negative impacts are prioritized based on business continuity and financial impact as well as their relative severity and probability. The impacts of opportunities are assessed based on their relative scope and likelihood. In addition, it is determined which sustainability issues are significant to ensuring business continuity, making investments, and reporting. The probability, magnitude, and nature of identified risks and opportunities are assessed by examining market observations, financial forecasts, legislation, strategy, and ownership guidelines in combination. Risks related to sustainable development, the effects of climate change, and climate mitigation are prioritized highly compared to other types of risks, as the Loiste Group’s strategy is based on sustainable development, with a strategic goal of achieving carbon neutrality in its own operations by 2026. The process of identifying, assessing, and managing impacts, opportunities, and risks is integrated into the general risk management process and is used to evaluate the general risk profile and risk management procedures.

Additionally, the policy takes into account separate risk management guidelines for individual business units. The Risk Policy and its appendices contain the following policies: Continuity Management, Production Risk Policy, Production Risk Mandate, Crisis Management Rules and Guidelines, REMIT Compliance – Inside Information, Cybersecurity, Authorizations and Information Security Risk Management, Environmental Risks, Social Risks, and Governance Risks.

Risks are assessed during business processes in different business units and across process areas, and efforts are made to prevent and manage them in the best possible way in both our own operations and in partner management. Monitoring regulations and guidance is part of process management, as are reporting observations and deviations, identifying development areas, and implementing improvements. Risks are analyzed and updated for negative impacts and opportunities in the business units at least twice a year and reported both to the common business management team and the group’s board after analysis and updates. At the same time, the effect of the identified risks’ negative impacts and opportunities on the business and strategy is updated. The assessment process is included in the annual schedule, and the process is carried out in the same way each time, taking into account changes in the operating environment. There are no changes to previous methods.

Risk management involves controlling identified risks by various means such as eliminating or reducing risks. The Risk Policy and its various components include a description of the risk management method. The Risk Policy identifies the risks of different business units and describes the tasks and processes for detecting, preventing, and taking corrective actions related to risks and opportunities. It also defines measurement and scheduling as well as risk classification. The Risk Policy sets out the procedures for achieving the desired intent. Internal control is a form of management that ensures personnel and processes operate correctly and in compliance with the law. The Risk Management Policy provides guidance for internal control and risk management. Responsibility for risk management lies with the Group’s Board of Directors. Risks are regularly dealt with twice a year by the Group’s Board or more often if necessary. Risks are analyzed and updated by business unit, and the joint management team of the business units reviews the updates before the board meeting. The Risk Policy is described in a separate document.

Company Stakeholders and Risk Perspective

The company’s value chain and the success of various stakeholder relationships significantly influence the company’s operations and the achievement of its objectives. The company’s operational risks can be viewed from the perspective of stakeholder relationships being compromised.

Risks associated with different stakeholder relationships are discussed in more detail in the risk management information.

Responsibilities in Risk Management

Responsibility for risk management lies with business unit management and the Board of Directors. Operational working groups assess risks, materiality, and the operating environment, reporting forward within their organizations. Responsibility for risk management rests with every employee in the organization. Each employee is obliged to report observed risks that threaten the company’s objectives or the well-being of personnel and the environment. The obligation to inform at least one’s supervisor is not limited by internal business or company boundaries. Any identified risks must be brought to the attention of business management without delay. Risk assessment is thus carried out in the business units and/or the Group’s management team. Relevant documentation is appended to the management teams’ meeting minutes.

Within the Group, the following working groups and responsible persons can be contacted to raise issues that need attention or resolution:

I Environmental, Energy Efficiency, and Climate-Related Risks: Environment, Energy Efficiency, and OHS Committee
• Chaired by the Production Manager
• Convenes four times a year and includes representatives from all business units plus an external assessor
• Tasked with coordinating the Group’s environmental matters and evaluating the Group’s environmental risks

II Electricity Trading and Risk Management: Energy Production
• The group includes representatives from the service provider, the Loiste Energia Oy Business Director, and the Production Manager; the Group’s CEO and other individuals may also be invited
• Meetings are intended to be held weekly, at least once a month
• Tasked with coordinating the management of risks related to electricity trading in accordance with the risk management policy set by the Board
• The group reports to the Board through the CEO

III Social Risks Related to Staff and Stakeholder Well-Being: Environment, Energy Efficiency, and OHS Committee
• Preparatory responsibility lies with the Occupational Safety Manager
• Includes representatives from all business units plus an external assessor
• Tasked with coordinating statutory and other matters relating to staff and staff well-being
• The committee reports to the Management Team, authorities, the CEO, and staff as appropriate

IV Communications, Corporate Image, Governance Risk
• Group Management Team

V Business Risks, Strategy, Physical Risks, Climate-Related Transition Risk, Governance Risk: Management Team and Group Board
• Chaired by the CEO
• Includes representatives from each business unit
• Responsible for systematic, goal-oriented development of risk management and increasing organizational knowledge of uncertainties related to business operations and how to limit those uncertainties, for example, coordinating actions based on risk mapping, updating the company’s insurance coverage, and managing insurance-related events

VI Information Security
• Group IT Manager, reporting to the CEO
• Data Protection Working Group, which meets at least three times a year

VII Properties
• Person responsible for the Group’s properties, reporting to the CEO

VIII Contracts, Supplier Management
• Business unit managers and contract managers
• The law firms used by the Group

IX Risks Related to Changes in the Business Environment: Group Management Team
• Business unit managers are responsible for developing their units and responding to identified risks
• The Group Management Team is responsible for developing the business in line with targets set by the owners
• The Group Management Team is chaired by the CEO, who reports to the Board

Process Risk Perspectives

In a process-based organization, the primary responsibility for considering risk management perspectives within a process lies with the process owner.

Process risk perspectives are the same as considerations related to balancing the company’s stakeholder relationships. These previously mentioned points can be further broken down into more detailed aspects in process risk management.

Some perspectives on process risks include:

• Ensuring sufficient flow of information within a process and at the interface between processes
• Business information security aspects, risks related to subcontracting and partnerships, such as information security, key personnel, contract risks, and image risks in all activities; do implemented solutions support the desired corporate image?
• Risks related to staff competence; is the right kind of expertise at a sufficiently deep level available?
• Staff capacity for development; are there enough human resources capable of evolving to meet future skill requirements?
• “Dangerous work combinations” in processes where performing and monitoring tasks fall to the same person
• Backup arrangements; is there critical information in the process that only one person knows, with no backup system?
• Changes in the operating environment; are we developing the process to meet yesterday’s challenges instead of tomorrow’s, and how do we ensure timely detection of changes in the business environment?
• Equipment functionality; is there sufficient reliability for critical equipment or data connections from the process’s perspective?
• Climate-related transition and physical risks to ensure business continuity
• Cybersecurity issues in our own business and with stakeholders
• If the functional means to reduce financial uncertainty to a reasonable level do not exist, can the risks be insured or otherwise safeguarded?

Continuity Management Policy

General
Identifying physical risk is part of continuity management. Physical risk can arise from climate change, vandalism, or other physical disruptions to assets. Loiste’s products and services are produced through a network of multiple actors. The operational capacity and reliability of the entire Loiste network is improved by developing the operational reliability of every organization within the network. Maintaining and developing the operational capacity of the Loiste network also contributes to the security of supply in our society.

Continuity management encompasses all measures by which Loiste, through planned and implemented arrangements and its management system, manages various disruptions that threaten its operations. Loiste’s continuity management procedures ensure, for its customers and stakeholders, the availability of products and services under various disruption scenarios and during exceptional circumstances.

Loiste’s continuity management consists of the risk management and continuity planning of its different business and support functions and core processes, as well as recovery planning for the various IT and communication services and solutions that support them, plus crisis management planning.

The continuity management system (applying BCMS, SFS-EN ISO 22301:2014) is part of Loiste’s management and quality system (applying SFS-EN ISO 9001:2014). It is where the continuity of business units and core processes is planned, implemented, operated, monitored, reviewed, maintained, and improved. The management system includes the organizational structure, policies and principles, planning activities, responsibilities, procedures, processes, and resources. Loiste’s management system, together with the associated Loiste continuity management system and its procedures, is therefore documented and made available to the organization via Loiste’s internal channels.

Loiste’s continuity management is management and expert work that:
• Identifies risks, disruptions, and dependencies in its business and support functions (risk management),
• Plans, organizes, and implements procedures for different disruption scenarios (preparedness and readiness plans, ICT recovery plans),
• Ensures that its critical partners can operate under disruption conditions (contract-based preparedness – use of SOPIVA recommendations in partnership agreements), and
• Protects its business interests and value creation capability.

Loiste utilizes the National Emergency Supply Agency’s HVO Extranet portal and SOPIVA recommendations in its continuity management.

Continuity Management Objectives

Loiste’s management and quality system aims to ensure safe, sustainable, reliable, and cost-effective operations, products, and services, taking into account their entire life cycle and the functionality of its own processes, partners, and customers.

Another objective is to deliver sufficiently high-quality products and services to its customers at the lowest total cost, considering direct and indirect costs, ensuring smooth operation across different activity chains, and systematically developing collaboration with various suppliers and customers.

By systematically developing continuity management, Loiste:
• Reduces costs arising from various operational interruptions,
• Creates confidence in different disruption situations regarding the ability of its responsible persons and partners to act,
• Improves efficiency in different disruptions and speeds up recovery,
• Increases the competence of those responsible for operations development, and
• Maintains its reputation as a reliable supplier and partner.

Loiste’s continuity management also takes into account its other policies and guidelines related to infrastructure, information systems, and reporting.

Wherever possible, Loiste’s various units share, utilize, and jointly develop operating models, information systems, processes, and best practices.

Loiste’s continuity management operates as planned and meets its objectives when all of the following areas are in order:

Leadership
1. Loiste has identified the core factors, obligations, and dependencies that guide the continuity and management of special situations in its core functions.
2. Requirements for continuity management, imposed by core functions, have been defined.
3. Management requires continuity management planning for core functions and critical support functions.
4. Continuity management is organized and assigned as part of normal leadership, operations, and management of the partnership network.
5. Coordination of continuity planning is assigned.
6. Resources have been allocated to meet continuity management targets.
7. Continuity planning is carried out in collaboration with core and support functions as well as critical partners.
8. Responsibilities and operating models for communication and reporting with key stakeholders have been defined and organized.
9. Management monitors the development of continuity management, continuity planning, and the effects and costs of measures.

Operating Principles
1. The management of special situations is organized, instructed, and included in the management and quality system and the operating models described therein.
2. Loiste’s interaction with its operating environment is taken into account in its activities.
3. A regular risk management procedure is in use.
4. The results of risk management guide the development of continuity management.
5. Continuity management measures support the objectives of Loiste’s core functions.
6. The continuity of services within Loiste’s operational network is planned and agreed upon.
7. Procedures for managing special situations are planned and described in Loiste’s management and quality system.
8. Crisis communication procedures are described and practiced in Loiste’s Crisis Plan.
9. Instructions for managing disturbances in critical core and support functions have been prepared, employees have been trained, and the procedures have been practiced.

Human Resources
1. Role- or task-specific requirements have been set for continuity management competence; the level of expertise is known, and it is being developed.
2. Loiste encourages staff to follow and develop a sound continuity management and information security model.
3. Loiste has agreed on a method for monitoring operations, reporting security incidents, and handling misconduct.
4. The key roles and individuals in Loiste’s core and critical support functions have been identified and backup arrangements planned.
5. Loiste’s own personnel and its use are planned and dimensioned, at least for core and critical support functions and partnerships, in accordance with the requirements of continuity management.

Partnerships
1. Partners, subcontractors, and resources critical to Loiste’s operations and services have been identified.
2. Contracts include requirements for implementing continuity management.
3. The obligation to manage continuity in critical operations extends to the most essential supplier network (critical partners in terms of continuity management).
4. Cooperation with partners to manage disruptions and special situations is organized and assigned.

Evaluation
The implementation and appropriateness of Loiste’s continuity management are regularly monitored and evaluated.

Continuity Management Organization

Loiste’s Environment, Energy Efficiency, and OHS Group coordinates the different areas of continuity management under the leadership of the person responsible for continuity management, ensuring that the activity is clearly organized and integrated into Loiste’s management and quality system.

Coordination of the different areas of continuity management is undertaken by the Continuity Management Group established by Loiste’s Environment, Energy Efficiency, and OHS Group, which includes (the stakeholder group to be managed):
• Those responsible for continuity management in the business units (Continuity Management Group),
• The HVO Extranet contact person (responsible for various aspects of the maturity analysis),
• The person responsible for preparedness and contingency planning (preparedness and contingency managers),
• The individual responsible for risk management (business and support unit leaders), and
• Those responsible for information systems, communications, and cybersecurity (system owners).

A key aspect of Loiste’s continuity management is the self-assessment of various areas (HVO Extranet, Vahti, business and support function risk analyses) and the resulting development, recovery, and crisis plans. These enable the individuals responsible to evaluate the current state of Loiste’s operations and those of its partners, set development goals, and systematically monitor development progress. Implementation of the development plans compiled by area of responsibility is regularly monitored in the Quality and Environment Committee.

Planning related to security of supply is carried out under the leadership of Loiste’s preparedness and contingency manager, involving those responsible for preparedness and contingency in Loiste’s various business units.

In analyzing and developing operations, Loiste uses the HVO Extranet portal maintained by the National Emergency Supply Agency, through which Loiste’s maturity analyses are updated annually. Using the maturity analysis and report, Loiste obtains information on the susceptibility of its operations to disruptions and its operational dependencies, as well as comparisons with other industry actors for its own development planning. The HVO Extranet portal also provides instructions and bulletins to support Loiste’s continuity management development. The HVO Extranet contact person is responsible for maintaining the HVO Extranet portal and conducting the annual maturity analysis.

When working with and signing contracts with critical partners, Loiste applies the SOPIVA recommendations maintained by the National Emergency Supply Agency. The objectives of maintaining and using these recommendations are to:
• Provide the contracting parties with common basics of continuity management and a shared language, and to support integrating related procedures into companies’ service management and daily operations.
• Maintain a mutually beneficial operational situation for the contracting parties.
• Improve delivery reliability for products and services produced across various networks.
• Enhance the operational reliability of the company, its operational network, and critical stakeholders, as well as society’s security of supply.

Loiste’s continuity and recovery planning for its information and communication systems, as well as cybersecurity, is secured under the direction of the person responsible for these areas and the system owners (annual updates of analyses, recovery plans, and their review within the System Owner Group). Cybersecurity is a dimension of security aimed at ensuring the safety of an electronic and networked society. The goal is to identify, prevent, and prepare for the impacts of disruptions to electronic and networked systems on society’s and Loiste’s critical functions.

The planning and development of Loiste’s crisis and risk management is coordinated by the individual responsible for risk management, together with the leaders of the business and support functions. Risk management is integrated into Loiste’s strategy and management processes as well as planning and reporting. The business units are responsible for crisis plans, crisis management development, related reporting, and practicing these efforts with the support of the Environment, OHS, and Continuity Management Group. Managing risks and crises involves identifying, analyzing, and financially overseeing risks threatening Loiste’s revenue streams, assets, or personnel. Assets to be protected include Loiste’s fixed assets (buildings, land, energy transmission and distribution networks, production facilities, etc.), movable property (equipment needed for Loiste’s operations, vehicles, documents, data, etc.), and intangible property (expertise, corporate and trade secrets, reputation, brand, etc.).

Loiste Companies’ Information Security Policy
Updated: 2023

The Information Security Policy covers all of Loiste’s business activities and extends to partner management. The primary goal of Loiste’s information security is to ensure the continuity of operations under all circumstances. Information security must enable the availability, integrity, reliability, and confidentiality of information systems and data under all conditions and in all business processes.

In data processing, we exercise appropriate care and adhere to laws and regulations as a minimum requirement. Information security in all its facets meets at least generally accepted practices. Staff awareness of information security is maintained and developed through training and communication.

We actively monitor developments in information security and incorporate the insights we gain into our operations. We develop information security in cooperation with our partners and stakeholders.

Risk Assessment

Risks related to data processing are regularly identified and analyzed, and corrective measures are taken, for example, by updating guidelines. Business impacts are considered during risk assessment. Risk assessment is part of acquiring new systems, managing partners, and controlling changes in the industry.

Misuse of or attempts at misuse of information security are systematically reported to top management. IT risks are regularly reviewed internally and with partners.

1.2 Classification and Handling of Information

Loiste uses a data classification method that defines how information should be classified, what information security controls exist, and how data should be handled. The guidance also includes instructions on information storage and archiving. Loiste uses the Digiturvamalli model for information management and information security work.

1.3 Processing of Personal Data

Data processing guidelines and the privacy policy define how personal data should be handled and stored. Different workflow and system guidelines specify where and by whom personal data is processed. GDPR matters are regularly reviewed in the Data Protection Working Group. The system and application development processes include stages for analyzing data protection requirements applicable to the purposes of personal data use. Deviations identified during checks on data usage are reported without undue delay to service providers, counterparts, or individuals in accordance with directives and laws, along with any corrective measures taken.

1.4 Information Security Requirements

Information security and technical matters are handled by an external partner responsible for the technical aspects. We have a 24/7/365 CSOC service in place. The level of information security must meet the specified requirements and is regularly monitored by administrative and technical means. We utilize and keep track of national data protection and information security bulletins from Traficom in our regular IT management meetings. We report any security, information security, or data protection incidents or threats thereof to company management, partners, and, if necessary, authorities without undue delay.

1.5 Information Security Requirements under EU Directive NIS2

The latest version of the Network and Information Systems Directive (NIS2) approved by EU member states on November 10, 2022, sets cybersecurity requirements for critical infrastructure across the Union and guarantees uniform sanctions. The Directive will be applicable from 2024 onward. NIS2 is to European cybersecurity what GDPR is to European data protection. NIS2 adds new requirements for organizations in four primary areas: governance, regulatory reporting, risk management, and business continuity. The aim is to enhance Europe’s capability to withstand current and future cyber threats.

Governance
Management must be aware of and understand the directive’s requirements and risk management measures. They have direct responsibility to identify and address cyber risks in order to comply with requirements.

Reporting to Authorities
Organizations must have established processes to ensure proper reporting to authorities. For example, major incidents must be reported within 24 hours.

Risk Management
To meet the new requirements, organizations must implement measures to minimize risks and consequences. This includes incident management, improved supply chain security, network security, access control, and encryption.

Business Continuity
Organizations must consider how to ensure business continuity in the event of major cyber incidents. This includes system recovery, emergency measures, and establishing a crisis management team.

In Loiste Companies, to ensure compliance with the NIS2 Directive, at a minimum we:

• Have a procedure in place for responding to an information security incident. This means, for instance, that backups must be current. We have also prepared recovery plans for critical ICT systems.
• Include practices for handling and reporting vulnerabilities as part of system procurement.
• Provide regular information security and data protection training for our staff.
• Include encryption usage guidelines and procedures in Loiste’s information security instructions.
• Control and manage user permissions in line with job roles, ensuring their oversight.
• Include in partner contracts the possibility of conducting security clearances for personnel working for Loiste.
• Use an IT system management tool and configuration management system for ICT assets, ensuring they are used and handled correctly.
• Use two-factor authentication (2FA) in ICT systems.

1.6 Training

Staff are trained during the onboarding phase, and information security issues are revisited as part of process controls in partner management. Partners receive information security updates and additional training as necessary.

Cybersecurity, Authorizations, and Information Security Risk Management and Monitoring

Technical management and auditing of cybersecurity are handled through partners, with regular reporting and alert mechanisms in place. Access management uses MFA (multifactor authentication) wherever possible. The IT auditor conducts reviews on a regular basis. Backup and related practices are provided by a partner.

Continuity and recovery planning for Loiste’s information systems and communication systems, as well as cybersecurity, is ensured under the direction of the individual responsible for these areas, involving system owners (annual updates of analyses, recovery plans, and their review with those responsible for processes). Cybersecurity is a dimension of security aimed at ensuring an electronic and networked society’s safety. The goal is to identify, prevent, and prepare for the impacts of disruptions to electronic and networked systems on society and Loiste’s critical operations.

In data processing, we exercise appropriate care and treat laws and regulations as the minimum standard.
Information security in all its facets meets at least generally accepted practices.
Staff knowledge of information security is maintained and developed through training and communication.
Data processing risks are identified and analyzed, and corrective actions are taken (e.g., updating guidelines).
• We actively monitor developments in information security and apply insights to our operations.
• We develop information security together with our partners and stakeholders.
• Technical management and audits of cybersecurity are conducted via partners with regular reporting and alert mechanisms.
• MFA (multifactor authentication) is used wherever possible.
• The IT auditor performs regular reviews.
• Backup services are sourced from a partner.
• Information security and technical matters are handled by an external partner that manages technical solutions, continuously monitors technical security, and reports to the Group (CSOC).
• Misuse or attempted misuse of information security is systematically reported to top management.
• The System Owner Group reviews information security issues, conducting risk assessments and follow-up on IT matters.
• GDPR matters are reviewed in the Data Protection Working Group.
• IT risks are regularly reviewed internally and with partners.

User Access and Data Access

User rights and access to data are managed in collaboration with the IT partner:
• User rights and employee accounts are governed by a standardized process with a three-step approval method.
• Access rights are personal; there are no general shared IDs.
• Access rights are defined according to usage needs and job descriptions.
• Access rights are regularly reviewed both internally and during the external IT audit.
• By default, access is granted only to what is necessary for work.
• Data may only be used for performing job duties.
• User knowledge of information security must be maintained through regular training.
• Access rights change when a job description changes. The user’s supervisor is responsible for notification, and the change is managed via the same standardized process.
• If access rights are no longer needed, the user’s access through firewalls is terminated immediately upon notification.
• User access creation request:
o The request is initiated/first approved by the user’s supervisor or an equivalent responsible person.
o Then, the request is verified and approved by Loiste’s IT department.
o The request’s content and the individual’s role and job description are verified.
o The individual’s contact information, email, and phone number are confirmed.
o Finally, the service provider creates the user in accordance with the request and notifies that the access is set up.
o The granted rights and scope can be reviewed.

• User access termination request:
o The request’s content, role, and job description are verified.
o The individual’s contact information, email, and phone number are confirmed.
o The user’s supervisor or an equivalent responsible person requests termination.
o Then, the request is verified and approved by Loiste’s IT department.
o Finally, the service provider removes the user’s access as requested and notifies the request initiator and the IT department.
o Ongoing validity can be reviewed.

Usernames and Passwords

• Passwords must be at least 12 characters long, including special characters and numbers.
• Shared or common usernames and passwords must not be used.
• Passwords must be stored carefully.
• If there is any suspicion that a password may have been exposed to outsiders (e.g., through phishing), the password must be changed immediately.
• Multifactor authentication (MFA) is used wherever possible.

2.2 Network Communications/Integrations

Network traffic is VPN tunneled whenever possible. Integrations are carried out via the Client’s integration platform. The Client’s systems are used and connected with according to separately agreed procedures. In addition, critical communication connections are redundant and monitored.

2.3 Systems

The supplier must protect the systems used in service operations with modern methods, considering information and physical security. The system’s data must be backed up in such a way that the system can be restored to an operational state without significant data loss. Equipment critical to operations must be redundant. Direct external access to critical systems by a user or external network traffic is not permitted. A written recovery plan must be created for critical systems, and the plan must also be tested in practice. Major systems must have testing environments and log management.
Systems are continuously updated by the service provider, and firewalls and information security are continuously improved.

Other

The Client has the right to audit the above-mentioned matters. The supplier must immediately inform the Client’s representative of any deviations.

Insuring cybersecurity involves managing residual risk, which in an IT environment should ideally be minimized. This is because lost or corrupted data may not always be recoverable. Consequently, we focus on preventative procedures that protect valuable business information and ensure sufficiently quick recovery from malfunctions. For instance, we use:

• A modern backup service in which data is transferred to and stored in a data center 200 km away (ISO 27001 certified partner).
• A virtualized server environment that allows software-based server backups, enabling rapid recovery. Additionally, critical systems are redundant, so operations usually continue without issue from a user perspective in problem situations. The server environment’s hardware platforms are also redundant.
• A CSOC (Cyber Security Operation Center) service, where the information security level of our critical equipment is monitored by our security partner (ISO 27001 certified) in a control room, and any critical anomalies are responded to immediately.
• An up-to-date redundant firewall environment that generates continuous logs for the CSOC. Partner connections are made using secure VPN connections.
• Our partner companies’ users access our applications via a virtualization platform, meaning they do not have direct access to our network.
• Information security audits.
• Our ICT environment is covered by traditional property and business interruption insurance.

Evaluating insurable residual risk and maintaining appropriate insurance coverage is a collaborative effort between IT management and finance. This includes periodically assessing the need for cyber insurance.

Dealing with Deviations

Deviations are dealt with immediately in cooperation with partners; other deviations are addressed in the process as corrective or development measures.

Organization, Roles, and Responsibilities Related to Information Security

Hardware and applications that belong to information systems are managed via partners. The contracts include descriptions of access management, logging, and GDPR reporting. Any handling of personal data must be done with particular care and caution. Log monitoring must be possible, and logs must be retained and disposed of in accordance with applicable law. Agreed practices for cybersecurity and data protection apply to hardware and application partners. Contracts oblige service providers to manage access control, designate responsible personnel, and provide training to ensure information is not disclosed to unauthorized parties during service delivery. This covers the start, operational period, and maintenance or disposal of data media. When disposing of media, the service provider is responsible for proper access management and destruction processes. Service providers must sign a data processing agreement and a description of processing activities that comply with EU data protection regulations.

Loiste companies operate in a network of various service providers. These providers handle fundamental processes for the business units in areas such as customer service, contract management, and billing, as well as IT system services. Each has specifically defined role-based permissions to access data. Role-based openings, changes, and closings of permissions are carried out through a standardized and documented process (described in section 2.1). The network environment is protected with robust firewalls, monitoring, and two-step authentication.

Loiste companies have a designated person who, in cooperation with the service provider, ensures operational and hardware/software data communication security throughout the lifecycle. There are regular meetings with service providers to review observations, deviations, development areas, and risks.

Target:

ESG Administration - cyber security, information security and data protection

Significance :
Very large
Influenceability :
Moderate
Impact materialityModerate :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Risk management procedures are in place: User terminals are protected against external threats with suitable software products. Data networks are protected by firewalls and only permitted traffic is allowed through. The authorization process, control and double authentication prevent unauthorized use of the systems. In addition, the CSOC service is in use, which reacts immediately to critical information security events affecting the company's network.


Risks and possibilities

Risk: Information security risks related to personnel. Information management risk
The worst consequences: Data leaks, accidental destruction of data, errors in the use of systems, installation errors, configuration errors, unauthorized use or theft of data
Criticality: Action is required
Significance: Large Probability: Moderate
Actions:
Risks related to the use of information are managed in such a way that access to the systems and access levels are appropriate for the job. Users' workstation rights are limited to ensure the level of information security. Installation and configuration errors are managed with a post-installation testing procedure. Orientation and the necessary training ensure the proper use of the systems. Personnel information security and data protection knowledge is maintained through training. We will organize data protection-related training for all employees in Q1/2023 and an information security information attack in Q1/2023. The business management has to take care of employee training and the duty of confidentiality.
Risk: Telecommunication connections to other companies. Information management risk
The worst consequences: Data leaks, unauthorized access to systems, connections not working
Criticality: The situation must be monitored
Significance: Large Probability: Very little or nothing
Actions:
Communication connections to external companies and login options are encrypted.

Metrics

Cyber ​​security
Data security breach cases

Measurement frequency: Not defined


Supplier evaluation results


Measurement frequency: Not defined


Back to top


Sustainable Development Strategy / Policy

Responsible for implementing: Lasse Aarnio

(ESRS 2-MDR-P) The scope of this policy applies to all business operations, aiming to make the upstream portion of the value chain, procurement, and our own production as carbon-neutral as possible, while also committing suppliers insofar as they participate in Loiste’s projects or Loiste’s procurement chain.
By implementing our strategy, we reduce greenhouse gas emissions, benefiting our customers, owners, financiers, and local residents. In addition, we support the national transition toward a low-carbon society.

The Board of Directors of the Loiste Group has outlined and approved a sustainable development strategy/policy. The strategy defines the target state and the methods by which the community and suppliers commit to ESG principles. By committing to the CSRD directives and the related standards and principles, our company publicly expresses its commitment. To support this commitment, our business operations are guided to follow the EU taxonomy and ESRS standards and other reference frameworks.

(ESRS 2-MDR-A) Net zero target: Our goal is to be carbon-neutral by the end of 2026 in our own operations. Loiste Lämpö is investing in CO2-free district heating production.


1. SCOPE 1: The target is a -100% reduction by 2026, by which time our own heat production will be ready.

2. SCOPE 2: CO2-free from 2024 onward.

3. SCOPE 3: Reduced by less than 10% from 2023 to 2030. This depends on the preparedness of suppliers and contractors to achieve carbon neutrality.


We measure the target level relatively as a percentage from 2023. The scope includes the entire value chain, both up- and downstream. Operators are located in Finland, so the geographic scope is national. The starting point is 54,267 tons CO2e, and the 2030 target is 3,311 tons CO2e. The method is based on investments in our own operations; the scenario does not assume any hypothetical data, nor does it rely on speculative calculations regarding the company’s environmental objectives. We require that our main contractors commit to reducing their own emissions (SCOPE 3). We monitor, measure, and calculate emissions and assess progress annually. The largest financial impact for SCOPE 1 is the investment (CAPEX), and the CO2 emissions tied to constructing the investment are reported as part of the 2026 emissions. The equipment and materials must meet the minimum value requirements of the EU taxonomy regulation. The SCOPE 1 emission reductions in our own production are based on new technology in district heating production that utilizes waste heat from data centers and heat produced with carbon-neutral electricity. SCOPE 2 is already carbon-neutral energy consumed in our own properties (OPEX). For SCOPE 3 in OPEX and electricity network business CAPEX, we have asked suppliers how the biggest suppliers can reduce greenhouse gas emissions by 2035. After 2026, we will no longer purchase district heating from Kainuun Voima Oy, which has produced it using coal, peat, oil, or gas in addition to biofuel. Our target for carbon-neutral district heating production is by the end of 2026. This investment is already underway. (SBM-1) The company’s strategy is largely based on transforming district heating production to CO2-free (net zero) and aiming for carbon neutrality among suppliers in the value chain in line with the strategy for SCOPE 3. These are significant for sustainability and affect the timeframe set in Loiste’s sustainable development strategy, particularly for SCOPE 3, where stakeholder challenges are greatest. Measurement and verification (ESRS 2 - MDR-M) are carried out such that SCOPE 1 is verified by an external auditor (KIWA Inspecta), SCOPE 2 certificates are obtained from energy suppliers, and SCOPE 3 data are either obtained from suppliers or calculated using the Position Green application.

We are committed to supporting Finland’s transition to carbon neutrality by 2035. In line with our strategy, we are also investing in solar power. We enable our customers to switch to renewable energy by developing the electricity grid to meet changing needs. We are committed to preventing both our own environmental risks and those arising from climate change. We participate in social initiatives where we can make a difference and leverage our expertise for the benefit of the climate. We also require our partners to take concrete actions to achieve a CO2-free Finland and to act responsibly within the value chain according to ESRS standards.

Guidelines:

• We are committed to preventing both our own environmental risks and those arising from climate change. We are a responsible renewer of energy infrastructure, complying with environmental, social, and governance responsibility principles.
• We are involved in moving toward a low-carbon and resource-efficient society by promoting the adoption of renewable and innovative forms of energy production and storage.
• Our climate commitment: Concerning the climate change strategy, we are committed to supporting Finland’s transition to carbon neutrality by 2035.
• Our goal is to be carbon-neutral in our own operations by 2026. (Indicator: procurement contracts and emissions calculations)
• We are also investing in and building wind power.
• We are committed to preventing environmental risks and the risks posed by climate change.
• We are committed to the UN Human rights, Climate Agreement, EU Taxonomy directives, OECD standards, CSRD directives, and other requirements stemming from sustainable development within ESG.
• We participate in social projects where we can have an impact and where we can utilize our expertise to benefit the climate. We enable a green transition for our customers by developing the electricity grid to meet changing needs.
• We also require our partners to take concrete actions toward achieving a CO2-free Finland and to act responsibly throughout the value chain in accordance with ESRS standards. (Procurement Policy)
• Loiste companies require that companies providing services to Loiste take care of the following areas:
• Responsibility, good governance, operational quality, environmental impacts, occupational health and safety, respect for human rights, prevention of corruption and bribery.
• We include requirements for sustainable development and “green financing” in plans for new investments.
• We certify structures and services according to ESG (Environmental, Social, and Governance) requirements.
• We enable our customers’ green transition by developing the electricity grid to meet changing needs.

The company’s strategy is updated annually, and its main focus areas are regularly reviewed as part of the sustainable development strategy. Plans related to these areas are reviewed, updated, and monitored regularly in the business processes. The Group’s Board of Directors is responsible for the Group strategy. The CEO is responsible for preparing and implementing the strategy, delegating responsibility for business strategy planning to the business directors. The CEO prepares the strategy and implements it together with the Group’s management team. Employees within the organization are involved in strategy preparation. Implementation of the strategy is regularly reviewed with all personnel. A schedule is drawn up for the measures included in the strategy, and responsible individuals are assigned. The business plans of each unit are part of the overall strategy. Strategy implementation is guided and priorities are set in monthly management team meetings. Responsible individuals keep the strategy management monitoring tools up to date.

The sustainable development strategy/policy covers the following environment-related topics, in which we strive to develop and improve our operations and reduce the risks caused by our activities:

• Air pollution: We will transition our operations to be emission-free according to the set target.
• Biodiversity and habitats: We protect habitats and biodiversity in the areas where we operate.
• Contaminated land: We do not pollute the soil, and we protect our equipment from soil emissions.
• Energy: We operate with high energy efficiency and require our equipment and suppliers to do the same.
• Greenhouse gas emissions: We will transition our operations to be carbon-neutral in line with the set target.
• Hazardous substances: We minimize the use of hazardous substances where possible and monitor our equipment.
• Light pollution: Our operations do not cause light pollution.
• Material procurement and resource efficiency: Our procurement policy guides purchasing and supports the circular economy.
• Net zero: Our goal is to achieve net zero for all emissions.
• Noise pollution: Our operations do not create noise, and construction-related noise is scheduled during waking hours.
• Physical risk: Our areas are protected and secured from outside entry, and we require employees to use proper protection.
• Waste: We minimize waste generation and ensure proper sorting and delivery for further utilization.
• Water discharge/outflow: We reduce water consumption.
• Water inflows/disposals: We reduce water consumption.

Target:

ESG Environmental waste management

Significance :
Moderate
Influenceability :
Large
Impact materialitySlight :  : 

Description 

The goal is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Proper management and minimization of hazardous waste: Waste quantity and transfer documents documented and available

Proper handling of waste management in the service chain and in our own operations has been done properly. Monitoring in site meetings, service management and data collection from contractors

The amount of hazardous substances and their processing process, the amount of hazardous substances and their processing process described and monitored / documented
Promotion of the circular economy is ensured in business documents.



Risks and possibilities

Risk: Waste management: Improper disposal of hazardous waste. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Waste quantity and transfer documents, controls and monitoring: proper management of waste management in the service chain and in our own operations. Monitoring in site meetings, service management and data collection from contractors
Risk: Waste management: Improper disposal of recyclable waste. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Waste quantity and transfer documents, controls and monitoring: proper management of waste management in the service chain and in our own operations. Monitoring in site meetings, service management and data collection from contractors
Risk: Waste management: Water management has not been managed. Environmental risk
Worst consequences: Financial loss
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
Management of water flows directly and indirectly related to own operations and water reuse in processes
Target:

ESG Environment - Energy efficiency

Significance :
Moderate
Influenceability :
Large
Impact materialitySlight :  : 

Description 

The target is of medium-term duration, from one reporting period to 5 years.

Actions

A decrease in the temperature of the supply water by several degrees, which reduces losses in the network. Tariff change where the customer pays for the heat exchanger's temperature drop Network renovations


Risks and possibilities

Risk: Energy efficiency measures are overlooked. Equipment purchases are not energy-efficient, and energy efficiency is not improved to reduce losses. Significance: Slight Probability: Very little or nothing
Actions:
Energy efficiency measures have action plans and annual monitoring. Commitment to improving energy efficiency is made through regulatory notifications and internal actions, as per Motiva (ETJ+).
Opportunity: Renovating heat production to become CO2 free Significance: Very large Probability: Very large
Actions:
Lower operating costs by utilizing computer room heat and new technology (e.g. due to increased efficiency and cost savings)
Opportunity: Renovating heat production to become CO2 free Significance: Slight Probability: Slight
Actions:
The production capacity is sized to meet the need, so there is no essential possibility "Increased production capacity, which increases income"
Opportunity: Resource efficiency: Lower operating costs (e.g., due to increased efficiency and cost savings) Significance: Large Probability: Moderate
Actions:
In our procurement policy, we have outlined energy efficiency requirements, based on which we reduce energy losses and lower costs.
Opportunity: Resource efficiency: Increased production capacity, leading to higher revenues Significance: Large Probability: Moderate
Actions:
Renewable energy production opportunities are included in the sustainability program and strategy, as we increase renewable energy production to mitigate climate change.
Opportunity: Resource efficiency: Increase in the value of fixed assets (e.g., highly rated energy-efficient buildings) Significance: Very little or nothing Probability: Very little or nothing
Actions:
The increase in the value of fixed assets does not affect the business.
Opportunity: Resource efficiency: Increasing recycling Significance: Slight Probability: Slight
Actions:
Cost benefits can be realized directly, and waste costs decrease. The age of equipment in renovation projects does not strongly support the possibility of recycling, as they do not meet new technology and energy efficiency requirements.
Opportunity: Resource efficiency: Reduced water consumption and usage Significance: Slight Probability: Slight
Actions:
Water consumption is very low, so reducing it does not increase opportunities or risks.
Opportunity: Energy sources: Lower operating costs (e.g., by using the lowest cost savings) Significance: Very large Probability: Large
Actions:
New heat production facility solution and utilization of waste heat. Modernizing heat production to be CO2-free.
Opportunity: Energy sources: Reduced risk of future price increases for fossil fuels Significance: Large Probability: Large
Actions:
New heat production facility solution and utilization of waste heat
Opportunity: Energy sources: Reduced exposure to greenhouse gas emissions, and thus less sensitivity to changes in carbon prices Significance: Large Probability: Large
Actions:
New heat production facility solution and utilization of waste heat
Opportunity: Energy sources: Return on investment in low-emission technology Significance: Large Probability: Large
Actions:
New heat production facility solution and utilization of waste heat. Modernizing heat production to be CO2-free.
Opportunity: Energy sources: New facilities enable increased access to capital (e.g., as more investors prefer low-emission producers) Significance: Large Probability: Large
Actions:
Renewable energy production opportunities are included in the sustainability program and strategy. Modernizing heat production to be CO2-free.
Opportunity: Energy sources: Reputational benefits that increase demand for goods/services Significance: Large Probability: Large
Actions:
New heat production facility solution and utilization of waste heat. Modernizing heat production to be CO2-free.
Opportunity: Products and services; Increased revenue due to the demand for low-emission products and services Significance: Large Probability: Large
Actions:
Revenue growth potential is limited in the heat business. In the electricity grid business, there is growth potential, as renewable energy production is planned for the area.
Opportunity: Products and services; Increased revenue due to new solutions for adaptation needs (e.g., insurance risk transfer products and services) Significance: Large Probability: Large
Actions:
Revenue growth can be leveraged for business growth investments.
Opportunity: Products and services; Better competitive positioning to meet changing consumer preferences, leading to increased revenue Significance: Large Probability: Large
Actions:
We can offer carbon-free heat to our customers, creating an opportunity for customer growth.
Opportunity: Markets; Increased revenue due to access to new and emerging markets (e.g., partnerships with governments, development banks) Significance: Very little or nothing Probability: Very little or nothing
Actions:
Opportunities are limited, the market area is small.
Opportunity: Markets; Diversification of financial resources (e.g., green bonds and infrastructure) Significance: Slight Probability: Slight
Actions:
Opportunities for new ones are limited, but commitment to existing ones is strong.
Opportunity: Resource efficiency; Move to more efficient buildings Significance: Slight Probability: Slight
Actions:
Energy efficiency in office buildings potentially more effective, with more efficient use of spaces.
Opportunity: Resource efficiency; Reduced water consumption and usage Significance: Slight Probability: Slight
Actions:
Energy efficiency in office buildings potentially more effective, with more efficient use of spaces. Water consumption is very low.
Opportunity: Energy source; Use of low-emission energy sources Significance: Large Probability: Large
Actions:
Emissions decrease and own energy consumption is carbon-free (SCOPE 2)
Opportunity: Energy source; Utilization of supportive political incentives Significance: Very little or nothing Probability: Very little or nothing
Actions:
Leveraging national funding opportunities in investments helps support carbon-free procurement initiatives.
Opportunity: Energy source; Use of new technologies Significance: Moderate Probability: Moderate
Actions:
Support sustainable development strategies and decarbonization goals
Opportunity: Energy source; Participation in carbon markets Significance: Very little or nothing Probability: Very little or nothing
Actions:
The goal is to become completely carbon-free, with no need for participation in carbon markets.
Opportunity: Energy source; Transition towards decentralized energy production Significance: Very little or nothing Probability: Very little or nothing
Actions:
Support sustainable development strategies and decarbonization goals, with the use of renewable energy sources included in investments.
Opportunity: Products and services; Development and/or expansion of low-emission goods and services Significance: Moderate Probability: Large
Actions:
Support sustainable development strategies and decarbonization goals
Opportunity: Products and services; Development of climate change and insurance risk solutions Significance: Moderate Probability: Moderate
Actions:
Risk mitigation and efficient cost monitoring
Opportunity: Products and services; Development of new products or services through R&D and innovation Significance: Moderate Probability: Moderate
Actions:
Support sustainable development strategies and decarbonization goals
Target:

ESG Environment - Scope 1-2-3, CO2 zero goal

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The target is of medium-term duration, from one reporting period to 5 years.

Actions

The Scope 1-2-3 goal is set for the end of 2026. This requires the carbon neutrality of one's own operations and a requirement for suppliers. In monitoring with the help of supplier evaluations. We use the waste heat of data centers in the production of district heat.


Risks and possibilities

Risk: Rising emission costs. Climate change legislation risk
Description: The price of emission rights rises on the market or production that requires emission rights has to be used.
Criticality: Action is required
Probable realization: 1-5 years
Significance: Moderate Probability: Moderate
Actions:
High-quality forecasting and procurement of emission rights as needed.
Risk: Biofuel availability problems. District heating risk
Description: Biofuel is not available due to strong demand growth. The desired amount of peat is not available due to the rainy summer and the closing of the peat bogs.
Worst consequences: Substitute fuel significantly more expensive (peat, oil, LNG)
Criticality: Immediate action is required
Probable realization: 1-30 days
Significance: Very large Probability: Very large
Actions:
- We keep the procurement channels and the number of suppliers large enough to reduce the supplier risk.
- We offer competitive prices for products and ensure regular contact with suppliers.
- Cooperation agreements for companies making industrial investments

Risk: The price of greenhouse gas emissions rises, and the enforcement of emission reporting obligations increases. District heating risk
Description: The worst consequences: The price of emission rights rises on the market or production that requires emission rights has to be used. The amount of emissions is affected by the fuels used, if fossil fuels have to be used more
Criticality: Immediate action is required
Probable realization: 1-30 days
Significance: Very large Probability: Very large
Actions:
Increasing procurement resources enables the adoption of new practices in sourcing fossil-free products. - Fully utilize waste heat from data centers - Rapid implementation of the new production portfolio, ensuring the reliability of core production - Procure as much biofuel as possible
Risk: Acceptability of combustion, future unprofitability due to changes in legislation or EU requirements. District heating risk
Description: Political fuel policies, combustion becoming taxable (which will be interpreted as part of the bio-category, e.g., industrial by-products), tightening of emission factors, tightening of hydropower legislation.
The worst consequences: Costs go up. Additional work in fuel procurement. Fossil-free fuel sufficiency may come into play.
Criticality: Action is required
Probable realization: 1-30 days
Significance: Large Probability: Moderate
Actions:
Increasing the number of biofuel suppliers. Introduction of new technologies.
Target:

ESG Administration - Maintenance reliability of electricity networks

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The target is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Improving supply reliability, implementing contingency and preparedness plans, securing sufficient resources, and engaging in cooperation with authorities and training. Process owners are designated and responsibilities are assigned.


Risks and possibilities

Risk: The maintenance security of the electricity networks is not at the planned level, long power outages Significance: Large Probability: Slight
Actions:
Continuous security of supply with annual investments.
Opportunity: Securing the security of electricity grids with annual plans. Significance: Large Probability: Large
Actions:
Improving delivery reliability reduces disruption-related damages and damage repair costs

Metrics

Disruption caused harm (DCH)


Measurement frequency: Not defined


Target:

ESG Administration - Transmission capacity of electricity networks

Significance :
Large
Influenceability :
Large
Impact materialityModerate :  : 

Description 

The target is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

We take into account the demands placed on it by the ongoing energy revolution in the development of electricity networks, such as increased decentralized production and the electrification of industry. We draw up a development plan for electricity networks every two years and collect the opinions of customers and other stakeholders through a public consultation.


Risks and possibilities

Risk: The transmission capacity of electricity networks is not sufficient Significance: Moderate Probability: Slight
Actions:
In order not to lose potential customers, the transmission capacity of the electricity network must be secured. Let's secure the annual investments.
Opportunity: The transmission capacity of electricity networks is secured. Significance: Large Probability: Moderate
Actions:
Strong transmission connections bring new customers to the area.

Metrics

Growth investments to secure the transmission capacity of electricity grids


Measurement frequency: Not defined


Target:

ESG Administration - Digitalization

Significance :
Large
Influenceability :
Moderate
Impact materialitySlight :  : 

Description 

The target is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

We develop the electricity markets based on working groups’ proposals, with customer centricity as the foundation, as well as increasing demand response and decentralized electricity generation, and ensuring a fair and equitable distribution of costs among the users of the electricity system. We leverage digitalization for the efficient operation of electricity networks and the pinpointing of fault locations. We enable remote reading of electricity consumption and daily reporting, thereby enhancing customers' awareness of their own energy usage and facilitating efficient and timely electricity consumption.


Risks and possibilities

Opportunity: Cyber ​​security. District heating risk
Description: Protecting Internet-connected systems, including hardware, software, and data, from unauthorized use or access. In particular, malicious attacks can pose a significant threat to infrastructure assets.
Worst Consequences: Unauthorized use of or access to any system (hardware, software and data) can result in serious direct financial consequences.
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Moderate Probability: Moderate
Actions:
Together with information management service providers, we assess information security and measures to ensure cyber security are carried out as part of information management.

Metrics

Using of digitalization
We leverage digitalization in the efficient operation of electricity grids and in pinpointing fault locations.

Measurement frequency: Not defined


Target:

ESG Environment-Business environment, climate change/Chronic stressors/ EU taxonomy

Significance :
Slight
Influenceability :
Slight
Impact materialityVery little or nothing :  : 

Description 

The target is continuous in duration (long = over 5 years) and monitoring is conducted over one reporting period (short).

Actions

Minimizing the physical risks caused by climate change:
Physical climate risks are identified and assessed in accordance with Appendix A of the EU taxonomy delegated regulation. We participate in climate change mitigation with new investments in our operations. We monitor the service network's environment and compliance with reducing greenhouse emissions.
Environment and EU taxonomy
1. Mitigation of climate change
2. Adaptation to climate change
3. Protection of water and marine resources
The protection of water bodies is taken care of in accordance with ESG. The operating programs of hydroelectric power plants are activities subject to a permit, environmental permit regulations are taken into account and we react quickly in accordance with the prevailing conditions, so that the coastal areas of the waters are protected.

Supply chain engagement program (SE2) ESG-specific requirements are applied to external parties and suppliers
1. Risk assessment and review as well as development monitoring up to date and reported
2. Identified risks vs. realized risks
3. Residual risks and their magnitude/significance

- Use of renewable energy sources and minimization of CO2 emissions
- Increasing the use of wind and solar power
- climate change and the promotion of green district heating (share of sales)

The management of water flows and the reuse of water in the processes have been taken into account. Management of water flows directly and indirectly related to own operations and water reuse in processes, Include the following essential environmental issues in the environmental policy: - - Water outflows/emissions Climate change can affect water flows, in which case minimization of the impact can be limited through own methods.

Protecting water bodies and source areas in the construction of the electricity network

Environment, ESG consideration of biodiversity and EU taxonomy: Nature values ​​and emissions are taken into account in all of our own operations throughout the value chain, from acquisition to final disposal.

Safeguarding natural diversity: In construction planning, nature values ​​are taken into account and diversity is preserved. We avoid building on valuable natural sites and free up former power lines for forest growth.

Adaptation to climate change is taken into account:
- Heat production flexibility and environmentally friendly production
- Durability of the electricity network and security of supply
We pay attention to new technologies in our investments



Risks and possibilities

Risk: Soil pollution: Environmental risk and natural pollution / oil spill Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
We comply with quality requirements and monitor the metrics of business operations and control reporting with various measures.
Risk: Soil contamination in the service provider's process : Violation of ESG Environmental Responsibility rules. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Environmental risks, partners, environmental emissions and reporting: we monitor the service network's compliance with reducing environmental and greenhouse gas emissions
Risk: Soil pollution/chemical spill: Violation of EU Taxonomy rules. Environmental risk
Worst consequences: Financial loss
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
We comply with quality requirements and monitor the metrics of business operations and control reporting with various measures. Assessment and review of risks and monitoring of development in committees
Risk: Chemical leakage into the environment: Environmental risk and natural pollution. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
We comply with quality requirements and monitor the metrics of business operations and control reporting with various measures
Risk: Chemical leakage into the environment: Violation of ESG Environmental responsibility rules. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
Environmental risks, partners, environmental emissions and reporting: we monitor the service network's compliance with reducing environmental and greenhouse gas emissions
Risk: Soil pollution/chemical leakage in the service provider's process: Violation of EU Taxonomy rules. Environmental risk
Worst consequences: Financial loss
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
We comply with quality requirements and monitor service production business operations metrics and control reporting with various metrics. Assessment and review of risks and monitoring of development in committees
Risk: Emissions, Noise harm to the environment and impact on the residents of the area: The noise exceeds the permitted values. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
We comply with quality requirements and monitor the metrics of business operations and control reporting with various measures. Assessment and review of risks and monitoring of development in committees
Risk: Emissions to water and air: Environmental risk and pollution of nature and failure to reduce greenhouse emissions. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Existing product and service mandates and their regulation not being in line with strategy and legislation may lead to exposure to litigation.
Significance: Moderate Probability: Very little or nothing
Actions:
We comply with quality requirements and monitor the metrics of business operations and control reporting with various measures
Risk: Emissions to air and water in the service provider's process: Violation of ESG Environmental Responsibility rules. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Environmental risks, Partners, environmental emissions and reporting: we monitor the service network's compliance with the environment and reduction of greenhouse gas emissions Assessment and review of risks and monitoring of development in committees
Risk: Biodiversity and habitat: Destruction of biodiversity and failure in regulating hydropower production: Insufficient attention and seriousness are given to the consideration of protected natural areas and generally water protection areas during the construction phase and for hydropower during the production phase. Environmental risk
The worst consequences: Costs and sanctions, negative customer feedback and official sanctions if the water production run fails
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
The strategy and planning of the procurement phase and reviews done. Entries made for follow-up appropriately with transparency of documents. Continuous monitoring of regulation of hydropower production and timely response
Risk: Biodiversity destruction and failure to regulate hydropower production: ESG Violation of environmental responsibility rules. Environmental risk
Worst consequences: Costs and sanctions
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
The strategy and planning of the procurement phase and reviews done. Entries made for follow-up appropriately with transparency of documents.
Risk: Biodiversity destruction and failure to regulate hydropower generation: EU Taxonomy breaking the rules. Environmental risk
Worst consequences: Financial loss
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Very little or nothing
Actions:
The strategy and planning of the procurement phase and reviews done. Entries made for follow-up appropriately with transparency of documents.
Risk: Business environment, climate change and chronic stressors: Precipitation. Environmental risk
The worst consequences: The control of hydropower production becomes more difficult
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Securing bypasses in hydropower, underground cabling with the electric network
Risk: Business environment, climate change, and chronic stress factors: Drought stress, river and other waterway floods, disaster floods, and sea-level rise. Environmental risk
The worst consequences: Rainfall increases flooding and there is too much water in waterways and terrain, making it difficult to manage hydropower production
Criticality: The situation must be monitored
Probable realization: 1-30 days
Significance: Slight Probability: Slight
Actions:
Consideration of the flood risk in connection with construction and management of flood waters for production facilities should be taken care of, e.g. with the help of floodgates.
Risk: Business environment, climate change and chronic stressors: Snowfalls are increasing, snow load. Environmental risk
The worst consequences: Supply interruptions and breakdowns in the electricity network
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Underground cabling and moving to the roadside and rolling forest treatment
Risk: Business environment, climate change, and chronic stress factors: Extratropical storm, wind, storm, hail, tropical cyclone. Environmental risk
The worst consequences: Supply interruptions and breakdowns in the electricity network
Criticality: Action is required
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Underground cabling and moving to the roadside and rolling forest treatment
Risk: Business environment, climate change and chronic stressors: Drought and wildfires due to drought. Environmental risk
The worst consequences: Water production decreases
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
You can't influence the rainfall, you have to act within the limits of the legislation
Risk: Business environment, climate change and chronic stressors: Temperature. Environmental risk
The worst consequences: Supply interruptions and breakdowns in the electricity network.
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Improving the supply security of the electricity network, by increasing underground cabling, building new overhead lines along roads, increasing network automation and building ring connections, and maintaining sufficient fault repair readiness.
Risk: Business environment, climate change and chronic stressors: Heat stress. Environmental risk
The worst consequences: Too hot weather affects network structures. Supply interruptions and supply interruptions online, structural failures
Criticality: The situation must be monitored
Probable realization: more than 20 years
Significance: Slight Probability: Very little or nothing
Actions:
No risk in Finland
Risk: Business environment, climate change and chronic stressors: Average temperature rise. Environmental risk
The worst consequences: Due to the rise in temperature, customers do not need district heating as much. Decrease in income.
Criticality: The situation must be monitored
Probable realization: 1-30 days
Significance: Slight Probability: Very little or nothing
Actions:
Monitor the effect of temperatures on infrastructure structures and take corrective measures in time.
Risk: Business environment, climate change and chronic stressors: Erosion. Environmental risk
The worst consequences: Damage to structures
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Ground cabling
Risk: Business environment, climate change and chronic stressors: Insect damage in forests. Environmental risk
The worst consequences: In the vicinity of power lines, trees weaken and forest destruction increases
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Very little or nothing
Actions:
Ground cabling and moving to the roadside
Risk: Business environment, climate change and chronic stressors: Roads and their condition. Environmental risk
The worst consequences: The accessibility of the destinations decreases
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Not affected if not owned
Risk: Business environment, climate change and chronic stress factors: Increase in zoonoses (viral diseases, etc.). Environmental risk
Worst consequences: Getting sick
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
Information and care TTT
Risk: Business environment, climate change and chronic stressors: Residents moving out of the area. Environmental risk
The worst consequences: The working-age population decreases and the number of places to use the network decreases
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Slight Probability: Slight
Actions:
We actively monitor population forecasts and regional development and take these into account in the long-term development plan of the electricity network
Risk: Business environment, climate change and chronic stressors: Impact of climate change on mental health. Environmental risk
Worst consequences: Getting sick
Criticality: The situation must be monitored
Probable realization: 1-30 days
Significance: Slight Probability: Very little or nothing
Actions:
Information and care TTT
Risk: Environmental risk assessment: Physical risk, acute physical climate change hazards: Extratropical storm. Environmental risk
The worst consequences: The storm destroys property, operating costs increase, power grid supply failures
Criticality: The situation must be monitored
Probable realization: 1-30 days
Significance: Slight Probability: Very little or nothing
Actions:
No risk in Finland
Opportunity: Utilization of new technologies: prevention and remedial measures of oil spills, chemical spills and natural pollution, reduction of greenhouse gas emissions
Significance: Moderate Probability: Moderate
Actions:
Together with our service providers and independently, we explore BAT (best available technologies) technologies that we can use to prevent or minimize environmental impacts.
Opportunity: Development of monitoring methods and dialogue with suppliers: Fulfillment and compliance with ESG Environmental responsibility and EU Taxonomy requirements
Significance: Very large Probability: Moderate
Actions:
Familiarizing suppliers and personnel with requirements, collaboratively developing solutions to meet requirements
Opportunity: Average temperature increase: Generating electricity through heat for the electricity market instead of district heating
Significance: Moderate Probability: Slight
Actions:
Flexible production units and battery technology
Risk: Technology: The green transition creates bottlenecks in the distribution network and makes it difficult to operate the network and requires premature additional investments. Power grid business risk
Criticality: The situation must be monitored and measures scheduled
Probable realization: 1-5 years
Significance: Slight Probability: Slight
Actions:
Future developments in network dimensioning are taken into account
Risk: Technology: The lifespan of current overhead power line poles is short due to the environmentally friendly impregnating agents used. Power grid business risk
Criticality: The situation must be monitored and measures scheduled
Probable realization: 1-5 years
Significance: Very little or nothing Probability: Slight
Actions:
Ground cabling will be added, decay will be taken into account in the placement of poles and the structure of the pole foot.
Risk: Fuel prices are rising. Electricity production risk
Description: Availability problems, expansion of procurement areas to the area of ​​another production unit, competition for limited raw material
Criticality: Action is required
Probable realization: 1-30 days
Significance: Large Probability: Moderate
Actions:
High-quality forecasting and procurement of fuel quantities as needed.
Risk: Regulatory risk: Future unprofitability due to changes in legislation or EU requirements, increase in raw material costs and taxation. Electricity production risk
Description: Political fuel policies lead to increased costs, and with the chosen raw materials, the reputation suffers.
Criticality: Action is required
Probable realization: 5-20 years
Significance: Very little or nothing Probability: Large
Actions:
Proactively considering EU directives and legislation to avoid investing in outdated technology.
Risk: Wrong choice of production plant. Electricity production risk
Description: The development of the market and new technologies can quickly make the production structure unprofitable
Criticality: Action is required
Probable realization: 5-20 years
Significance: Very large Probability: Moderate
Actions:

Risk: Natural upheaval. Electricity production risk
Description: Climate change and its consequences
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Large Probability: Very little or nothing
Actions:
The structures and the environment are built to withstand unexpected natural upheavals, and risk management must be taken into account in investment plans.
Risk: Costs of transitioning to low-emission technology: Investment project costs exceed the budget. Electricity production risk
Description: Incorrectly budgeted investment
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Moderate Probability: Slight
Actions:

Risk: Fuel prices are rising. District heating risk
Description: Availability problems, expansion of procurement areas to the area of ​​another production unit, competition for limited raw material
The worst consequences: Leads to a strong increase in the unit price of energy, to sellers waiting in trade in the hope of a better price, which in turn causes supply problems and, at worst, production restrictions. Profitability suffers because the price increase cannot be passed on to customers in full
Criticality: Immediate action is required
Probable implementation: 1-11 months
Significance: Very large Probability: Very large
Actions:
By increasing procurement resources, a more widely mapped and negotiated fuel mixture price can be made as competitive as possible
- Let's make full use of the data center's waste heat
- The productions of the new production portfolio have components that reduce price risk.

Risk: Future unprofitability due to changes in legislation or EU requirements, raw material cost increases may raise the prices of products for sale, marketing becomes more difficult, and customer behavior may change. District heating risk. District heating risk
Description: Political fuel policies lead to increased costs, and with the chosen raw materials, the reputation suffers.
Worst consequences: Burning unprofitable, because not all costs can be included in customer prices. Biofuel as part of emissions trading (acquisition of emission rights)
Criticality: Immediate action is required
Probable realization: 5-20 years
Significance: Slight Probability: Moderate
Actions:
To implement the investment as soon as possible.
Risk: Temperature variation. District heating risk
Description: Colder weather conditions lead to higher turnover, warmer weather conditions correspondingly decrease turnover. Prediction becomes more difficult.
The worst consequences: In the production of heat, the importance of temperature for consumption is considerable. Increase profits if production costs remain below the selling price. It can also lead to having to use expensive fuels.
Criticality: The situation must be monitored
Probable realization: 1-5 years
Significance: Moderate Probability: Moderate
Actions:
Electricity production is protected to guarantee cash flow. Checking the prediction model, but it evolves on its own (learning), but checking. If the weather is warm, the production of electricity can be done with auxiliary cooling/condensate - in cold weather, otherwise the basic production will increase, so the risk can be managed this way too.
Risk: Wrong choice of production plant. District heating risk
Description: The predicted behavior pattern of customers changes and makes the production structure unnecessary, operating with poor efficiency or suffering from a lack of raw materials
The worst consequences: A drastic increase in the production cost and the impossibility of passing it on to the customer price
Criticality: Action is required
Probable realization: 5-20 years
Significance: Very large Probability: Moderate
Actions:

Risk: Natural upheaval. District heating risk
Description: Climate change and its consequences
The worst consequences: Property damage, heavy rains, water entering the wells of the KL network, "additional cooling" does not work in hot weather
Criticality: The situation must be monitored
Probable realization: 5-20 years
Significance: Moderate Probability: Very little or nothing
Actions:
Forecast according to information.
Risk: Natural disaster: Damage to electricity transmission lines. District heating risk
Description: Natural phenomena and storms etc., vandalism, human damage (excavator)
The worst consequences: Production stoppage / disruption, PLK starts backup power
Criticality: No action
Probable realization: 1-5 years
Significance: Very little or nothing Probability: Moderate
Actions:
Purchase of backup power machines, necessary electricity
Opportunity: Temperature variation: Can enable new solutions in energy production and storage
Significance: Moderate Probability: Moderate
Actions:
Tracking innovation
Risk: Environmental risk assessment: Light pollution. Significance: Very little or nothing Probability: Very little or nothing
Actions:
There is no light pollution in the business, and there are no strong light sources.
Risk: Environmental risk: Material sourcing and resource efficiency. Procured materials do not meet EU taxonomy requirements, potentially resulting in a low recycling rate. Significance: Moderate Probability: Very little or nothing
Actions:
Materials and resources must meet the established EU taxonomy requirements.
Residual risk:
Supplier awareness regarding procurement may be partially insufficient to ensure adequate verification.
Opportunity: Uncertainty in market signals: Replacing current products and services with low-emission alternatives. Significance: Very large Probability: Very large
Actions:
The new district heating production is based on renewable energy sources. New products for customers.
Risk: The comprehensive assessment of sustainable development transition risk is inadequate, with the process of evaluating the material economic impacts of transition risks on the community's business and/or financial plans missing. Additionally, sudden and unexpected changes in energy costs may occur, and the revenue distribution could shift, weakening turnover. The production structure will need to be modified, and assets must be revalued, possibly causing a decrease in value. Production capacity may decrease, and the availability of capital and financing may become more difficult. Business risk
Political decisions affect the sustainable development timeline and the impact of cost increases on business development: Depreciation, asset impairments, and write-downs of existing assets, as well as potentially increased costs due to fines and judgments, and/or a decrease in demand for products and services. As a result, reputational damage, marketing difficulties, and business continuity management issues arise. Criticality: To be monitored
Likely occurrence: 1-5 years
Significance: Slight Probability: Very little or nothing
Actions:
The strategy must comply with EU and national legislation and incorporate the selected new sustainable technologies.
Residual risk:
Changes in legislation / or technology is not sufficiently and profitably available.
Risk: The comprehensive assessment of sustainable development transition risk is inadequate, with the process of evaluating the material economic impacts of transition risks on the community's business and/or financial plans missing. Transition risk: "The technology impact assessment process has been insufficient regarding technological development: • Impairments and write-downs of existing assets • Decreased demand for products and services • Research and development expenses for new and alternative technologies • Delays in capital investments for technology development • Increased costs for the implementation and adoption of new practices and processes" Business risk
Criticality: To be monitored
Likely occurrence: Over 5 years
Significance: Slight Probability: Very little or nothing
Actions:
Precise determination of investments and procurement guidelines / monitoring
Residual risk:
The timing of technological development is uncertain.

Metrics

Monitoring the level of environmental protection: Contaminated land Hazardous substances Light pollution Material procurement and resource efficiency Noise pollution Physical risk, environmental damage Water use (outflows) Water use (inflows)
Number of observations and deviations and corrective actions carried out

Base value: 0 kpl 2023 pcs (2024) The base value is the value to which the development of the measure is compared.
Measurement frequency: Quarterly Aim 2023: 0 pcs


In new gas-insulated switchgear equipment, SF₆ devices are not used by default.


Base value: (2024) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2026: 0 


Promote enabling suppliers to report in accordance with VSME requirements


Base value: Kyllä / Yes (2024) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2026: Kyllä / Yes 


Changing the heat production structure to CO2 free with new investments
Duration 2026.

Base value: 54267 ton CO2e/year /2023 tCO2eq (2024) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2026: 0 tCO2eq


2025 Suppliers and contractors: CO2 emissions
net zero goals set and export put into practice with suppliers and contractors District heating's CO2-free (net-zero) investments are ongoing

Base value: 6224 ton CO2e/year tCO2eq (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: 5000 tCO2eq


Emission-free district heating production in use
District heating investments completed Q2/2026 and it is in EU taxonomy and CO2-free district heating business. 2026 CO2 is 100% less than 2023, own operations, suppliers 12% 2026 -> CO2 emissions continue with suppliers and contractors At the end of 2026, CO2 will be ~100% lower than in 2023

Base value: 100 % % (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: - 89 % %


Customer guidance on the new district heating tariff and ways to increase the temperature drop in heat exchangers


Base value: Kyllä (2023) The base value is the value to which the development of the measure is compared.
Measurement frequency: Annually Aim 2028: Kyllä 


Feedback related to the environment
Number of feedbacks and processing status Ceriffi Check

Measurement frequency: Not defined


Reducing the proportion of peat in the main boiler
Goal: The proportion of peat in the main boiler is 10%, the rest is wood

Measurement frequency: Not defined


Back to top


Procurement Policy and Procurement Handbook

Responsible for implementing: Lasse Aarnio

Impacts to promote:

Procurement Policy and Procurement Handbook GOV-5 (Responsibility: Board of Directors)
Investigation, monitoring, analysis, and assessment: business units
Review: management team
Reporting: Group Board of Directors
Prepared: 2022
Amendment Update: 2024
Approved: Board Meeting 14.11.2023, reviewed annually if needed.

Purpose

In this procurement policy, “procurement” refers to the purchase and leasing of goods and services (including leasing arrangements) from companies outside the Group. The procurement policy applies to all Loiste companies.

Procurement Objectives

Responsibility reporting must cover the entire value chain of the company’s operations. Through the value chain, the environmental, social, and governance-related risks and opportunities associated with the company’s operations are identified, assessed, and managed. The value chain includes all operations that contribute to creating a product or service, as well as the suppliers and other stakeholders of the company (from raw material procurement/product (service) design to delivery or production and eventual disposal). By analyzing the value chain, companies can identify areas where they can reduce their environmental impacts, improve employee working conditions, and enhance overall sustainability performance.

Loiste companies engage in responsible collaboration with various partners and suppliers. Our supplier relationships are based on mutual contracts entered into by the contracting parties, the principles of Loiste’s responsibility program, and ethical rules. Supplier selection is based on our procurement policy, and in addition, we define in this procurement handbook the principles of collaboration, rules, and supplier evaluation methods (Loiste Companies_Procurement Policy). Contracts and operating models must specify the scope and content of operations. If a supplier fails to comply with contract terms or Loiste’s rules or causes harm to Loiste, the contract may be terminated. If contract terms are not up to date, they must be renegotiated and revised. The purchaser and invoice handler must follow Loiste’s purchasing guidelines and handling principles according to the value of the purchase (purchase and invoice approval instructions).

We expect our suppliers to share our same set of responsible values. We demonstrate our responsibility by acknowledging and fulfilling the essential areas of our operations in accordance with the responsibility program (environmental, social, and governance).

Suppliers are evaluated annually based on Loiste’s current supplier list.

The goal is the safe, sustainable, reliable, and cost-effective procurement of products and services, taking into account their entire life cycle as well as the processes of the Group and its customers. Our procurement takes into consideration the Group’s existing guidelines, e.g., regarding sustainable development, infrastructure, information systems, counterparty risk, and reporting (CSRD/Corporate Sustainability Reporting Directive and ESRS/European Sustainability Reporting Standards). The procured item, product, or service must meet legal requirements. Our procurement processes consider responsibility from environmental, social, economic, and governance perspectives. We comply with the Special Sectors Procurement Act, adhere to good governance practices, and require the same from our partners. Risks related to procurement are assessed as part of business risk management. We require our partners and suppliers to commit to sustainable development and the principle of continuous improvement.

Requirements for the availability of services must be taken into account in the procurement of services critical to security of supply.

Wherever possible, the Group’s various units share, utilize, and jointly develop operating models, IT systems, processes, and best practices. Companies supplying services or products to Loiste, as well as the products and services themselves, are assessed during the bidding stage and supplier audits are carried out during the contractual relationship. The objectives for supplier evaluation and auditing stem from Loiste’s responsibility program and from requirements regarding products and services.
Regular meetings are held with suppliers to review reportable matters, feedback, and development areas in accordance with the rules, considering environmental, social, and governance perspectives in line with the responsibility program.

Procurement Principles

Procurement Strategy

Business units determine a procurement strategy that best supports their business objectives at any given time, adhering to the procurement principles described in the procurement policy and procurement handbook.

Competitive Bidding

The procurement competition is organized in the most appropriate way, based on the scope, value, quality, and market situation of the procurement.

To ensure successful procurement, the necessary technical, legal, or other expert assistance is utilized. Responsibility for procurement and its success lies with business management.

Active market dialogue ensures the development of the regional service market, helps schedule the tender process properly, and secures a sufficient supply for upcoming tenders.

The competitive bidding process must be fair and non-discriminatory toward bidders, and the choice must be based on as objective selection criteria as possible. For individual procurements exceeding 10,000 euros, at least two bids must be requested if available. The chosen supplier must meet the requirements of Loiste companies’ Credit Risk Policy.

Purchasing

Purchasing primarily utilizes the existing framework agreement arrangement. Approvals are done according to Loiste’s governance model, following defined lines of responsibility and the so-called “four-eyes principle.” An exception is the urgent repair work ordered under a framework agreement, including parts, in accordance with Corporate Governance guidance. Expense invoices are checked by the purchaser and then approved by an individual with approval authority.

Compliance with Legislation

In all our operations, we follow Loiste Group’s good governance and ethical rules, national legislation, regulatory requirements, and national and international agreements. We also require this of our suppliers. Procurement must not involve bribery on the part of either the buyer or supplier, nor such hospitality or gifts that could influence decision-making.

District heating and electricity network businesses are covered by the Special Sectors Procurement Act.

Contracts

Particular care must be taken when drafting contracts to ensure that Loiste’s interests are protected even in cases of discontinuity or conflict. Comprehensive contracts and accompanying documents ensure a mutual understanding between the parties about the responsibilities and obligations related to the procurement.

Any disputes between the parties are settled in accordance with Corporate Governance guidelines.

Payment installments must be in balance with the performance received. In long-term procurements and deliveries under Corporate Governance guidelines, the supplier is required to provide a performance bond for the work period and warranty period. The supplier must provide a warranty bond for the warranty period of the delivery. In deliveries with multiple payment installments, ownership rights to the partial performance must preferably be transferred to the client.

The procurement contract must include adequate insurance coverage that covers all general and product liability risks. Upon request, the supplier must provide the Buyer with the relevant insurance certificates.

The payment term used in contracts is defined in more detailed procurement instructions.

Contracts must be made in writing. The contract must always include the terms of delivery. The scope of the matter to be agreed upon determines the type of contract package used. With a supplier, one of the following may be drawn up:

1. Framework Agreement
a. Framework Agreement
b. Delivery Agreement
c. Service Agreement
d. General Terms and Conditions
e. Special Terms and Conditions
f. Other contractual appendices

2. Procurement Agreement

3. Delivery Agreement

4. Loiste General Terms of Delivery

Contracts are reviewed, and legal services may be utilized in this review. Larger contracts are usually reviewed by attorneys. Particular care must be taken when drafting contracts to ensure that Loiste’s interests are protected even in cases of discontinuity or conflict. Comprehensive contracts and accompanying documents ensure a mutual understanding between the parties about the responsibilities and obligations related to the procurement.

Any disputes between the parties are primarily settled in District Court. If the contract value is high, arbitration may also be used.

Payment installments must be in balance with the performance received. For the warranty period of the delivery, the supplier must provide a warranty bond. In deliveries with multiple payment installments, ownership rights to the partial performance must preferably be transferred to the client.

The procurement contract must include adequate insurance coverage that covers all general and product liability risks. Upon request, the supplier must provide the Buyer with the relevant insurance certificates.

Unless otherwise agreed upon for compelling reasons, the payment term under the contracts is 30 days net.

Supplier Evaluation Criteria

To ensure the quality, efficiency, and responsibility of its operations, Loiste has set criteria for its suppliers at both the company level and the service or product level. We have established criteria for our suppliers, which are monitored and measured during the selection phase and throughout the contractual relationship.

We annually examine the responsibility of our suppliers and carry out supplier evaluations. We conduct a more extensive supplier evaluation for those whose impact on our business is significant or whose operations present risks concerning environmental management or other aspects of responsible business.

Loiste is committed to identifying the responsibility impacts of its value chain and reporting them as part of its responsibility reporting. Suppliers are part of our value chain, and we need information about them and the impact of their operations.

Loiste and all parties involved in Loiste’s operations show their commitment to fulfilling the responsibility requirements regarding environmental, social, and governance issues throughout their entire value chain.

Loiste companies require that companies providing services to Loiste report information concerning responsibility, good governance, operational quality, product and service compliance, environmental impacts and OHS, respect for human rights, anti-corruption, and anti-bribery to Loiste during the supplier selection phase and throughout the contract period as part of supplier evaluations.

To ensure suppliers and their products and services meet the criteria, Loiste conducts supplier audits. Suppliers are required to cooperate and be transparent during audits.

These operating instructions set general requirements for suppliers regarding their responsibilities in conducting business responsibly. The supplier pledges to operate responsibly and meet the requirements in its activities.

“Our goal is to be carbon neutral by the end of 2026 in our own operations, and we are committed to supporting Finland’s transition to carbon neutrality by 2035.
We also expect concrete actions from our partners to support Loiste in achieving our goal.
We are committed to strong preventive work to avoid environmental risks in our operations.
We participate in social projects where we can have an influence and use our expertise for the benefit of the climate.”

Defining the Value Chain

Responsibility reporting must cover the entire value chain of the company’s operations. Through the value chain, the environmental, social, and governance-related risks and opportunities associated with the company’s operations are identified, assessed, and managed. The value chain includes all activities contributing to creating a product or service, and the suppliers and other stakeholders of the company (from raw material procurement/product (service) design to delivery or production and eventually disposal). By analyzing the value chain, companies can identify areas where they can reduce their environmental impact, improve working conditions, and enhance overall sustainability performance.

Management Responsibilities and Commitment

The supplier must comply with all applicable legislation and any permit requirements relevant to its operations.

The supplier must identify, take into account, fulfill, and demonstrate compliance with Loiste’s supplier requirements. At the contract stage, the supplier commits to Loiste’s specified criteria and to demonstrating compliance with them.

Supplier Management

Systematic supplier management ensures the principle of continuous improvement and secures the best overall solution for each procurement. Business units are responsible for classifying their suppliers in accordance with the principles of supplier management described in the procurement handbook. For suppliers with framework or annual contracts, or from whom purchases are made repeatedly each year, a supplier list is maintained in the financial system.

Criteria for Supplier Companies

As part of supplier management, suppliers are evaluated during the bidding stage and the contractual relationship. The criteria for evaluation and auditing stem from the needs of responsible business units, contract compliance, and Loiste’s responsibility program.

The supplier must comply with all applicable legislation and any permit requirements relevant to its operations.

The supplier must identify, take into account, fulfill, and demonstrate compliance with Loiste’s supplier requirements. At the contract stage, the supplier commits to Loiste’s specified criteria and to demonstrating compliance with them.

Finance and Funding

Credit rating and the supplier’s financial condition
- The supplier must be financially stable.
- If necessary, we require collateral.

Compliance with the Contractor’s Obligations Act

No older than three (3) months, the following documents and statements:
- A statement indicating whether the company is registered in the prepayment register, employer register, and the VAT register in accordance with the Prepayment Act (1118/1996) and the Value Added Tax Act (1501/1993).
- An extract from the Trade Register.
- A statement indicating that the company has no tax debt as referred to in Section 20 b, Paragraph 1, Subsection 2 of the Act on the Publicity and Confidentiality of Tax Information (1346/1999) or a statement from the authority on the amount of tax debt.
- Certificates confirming that employees’ pension insurance premiums have been taken out and paid, or evidence of an agreement for paying overdue pension insurance premiums.
- A statement on the applicable collective labor agreement or the essential employment terms.
- A statement on the arrangement of occupational health care.
- A certificate of insurance under the Workers’ Compensation and Occupational Diseases Act.
- In the construction sector, proof of mandatory accident insurance arrangements.
- Documents must also verify that none of the company’s responsible persons are subject to a business prohibition. No contract may be entered into with a party whose legally required disclosures reveal that a responsible individual is subject to a business prohibition.

Management Model and Good Governance

- We require the supplier to disclose information on its management systems, how compliance is ensured across the value chain, and any certifications or audits conducted by third parties.
- Loiste ensures that fair operating principles are followed in suppliers’ processes: transparency, ethics, and anti-corruption measures.

Supplier and Subcontractor Management and Ensuring Responsibility

- We require the supplier to demonstrate how it manages its supply chain and subcontracting chain, and how it ensures responsibility in its value chain.
- We need information on how the supplier carries out public responsibility reporting.

EU Taxonomy Requirements

Loiste is committed in its own operations to improving the following environmental aspects:
- Climate change mitigation
- Adaptation to climate change
- Protection of water (and marine) resources
- Promoting the circular economy
- Preventing environmental pollution
- Protecting ecosystems and biodiversity.
- We require information from our suppliers on how they address these aspects within their value chains and ensure positive progress.
- We require the supplier to commit to providing Loiste, upon request, with proof of compliance with environmental legislation and permits.
- We investigate whether our suppliers’ operations are covered by the EU taxonomy and whether they meet the EU taxonomy requirements.

The taxonomy promotes the following objectives:
1. Climate change mitigation
2. Adaptation to climate change
3. Protection of water (and marine) resources
4. Promoting the circular economy
5. Preventing environmental pollution
6. Protecting ecosystems and biodiversity.

Loiste demonstrates its EU taxonomy compliance through fulfilling technical screening criteria and minimum safeguards. Suppliers commit to providing necessary information related to demonstrating Loiste’s taxonomy compliance.

Here is a link to the technical screening criteria.

1. Case-specific technical screening criteria for Loiste’s business
2. Minimum safeguard measures:
- Fair competition
- Taxation
- Anti-corruption
- Human rights, incl. labor rights and consumer protection

We require the supplier to commit to providing Loiste with documentation on compliance with environmental legislation and permits.

Compliance of Products and Components

Our suppliers and their products and services must meet our performance and operational requirements. Key requirements must be set out in the procurement documents and contracts related to the procurement. These requirements generally follow standard practices, guidelines, and principles used in the industry.
- We require that products and components meet their specified requirements. Compliance must be demonstrated through documents such as a CE mark, DoP (Declaration of Performance for construction products), DoC (Declaration of Conformity for machinery and electrical equipment).
- For construction products, the requirement in line with the hEN standard must be identified (standards available: hEN Helpdesk for harmonized product standards).
- If no hEN standard is available for a construction product, compliance must be demonstrated via a type approval certificate or site-specific acceptance showing the performance requirements, along with documentation confirming compliance and performance.
- Possible Environmental Product Declarations (EPD) or Climate Declarations and material declarations
- Energy efficiency data according to product-specific requirements
- The relevant directives and standards applying to the product must be specified.
- The supplier must provide appropriate operating, maintenance, and installation instructions.
- SF6 gas is replaced by other chemicals.

Compliance of Services

- For services, the supplier must fulfill the quality of service described by Loiste, measured according to the SLA definition.
- Services must comply with the relevant legislation.

During Delivery, the Supplier Must:

- Report greenhouse gas emissions (CO2 equivalent) from operations or products allocated to the client company in terms of quantity, not in euros.
- Greenhouse gas (CO2e) calculations must meet the GHG Protocol, and the supplier may be required to provide documentation on calculation methods.
- Report required occupational health and safety (OHS) data related to activities for the client company.
- Provide waste reporting to the client company regarding waste generated in activities relevant to the client company.

Waste

We require the supplier to prevent environmental pollution and ensure proper waste management.

Work Practices in the Value Chain

We require the supplier to ensure/verify the following work practices throughout its value chain:
1. Fair wages
2. Working conditions
3. Working hours
4. Employment benefits
5. Compliance with labor laws

Human Rights and Working Conditions

The supplier must ensure respect for all internationally recognized human rights within its value chain and avoid causing or contributing to human rights violations.

Employee Well-being and Occupational Safety in the Value Chain

We require the supplier to look after employee well-being and occupational health.

Diversity and Inclusion in the Value Chain

We require the supplier to prevent discrimination and ensure diversity and equal treatment in all circumstances.

Stakeholder Engagement in the Value Chain

We require that cooperation with various stakeholders in all value chains be conducted responsibly, openly, and equitably.

Data Protection, Information Security, and Cybersecurity

We require our suppliers to comply with the guidelines of the Cybersecurity Center, data protection regulations and authorities’ directives, as well as the data protection and information security guidelines provided by the client, including cybersecurity and physical information security guidance.
- We require the supplier to manage and be responsible for information security, training, and data protection.
- We require appropriate handling of data and personal data in compliance with the law.

Environmental and Social Responsibility, and Social Responsibility

We require our suppliers to comply with national and international environmental laws and regulatory requirements, and to operate in an environmentally and socially responsible manner. Where necessary, we provide instructions in contracts or other guidelines regarding environmental and energy efficiency requirements (e.g., energy efficiency labeling or certification). Environmental requirements are derived from legislation guiding the client’s operations and the client’s environmental and energy policy.

Safety Issues

Contractors, service providers, and their subcontractors working on company premises or worksites must, in addition to general occupational safety laws and regulations, comply with the Group’s occupational safety guidelines and instructions. Security clearances and possible substance and drug tests for supplier personnel must be enabled if the nature of the service requires it. These requirements must be documented in the procurement contracts.

Confidentiality

We require suppliers to sign a non-disclosure agreement if the task requires or permits access to confidential orders, contracts, and all related documents and information. Contracts must ensure that suppliers also require their subcontractors to commit to equivalent confidentiality obligations.

Payment

Payment must be made in accordance with the contract. Under no circumstances is payment made in cash. It is made against an invoice, usually submitted retroactively. The purchaser and the person approving the invoice must be different individuals. Payment is made to the official bank account of the company.

Supplier Selection

Procurement is generally based on bids received in response to requests for proposals. When entering into a contract, we utilize legal expertise in proportion to the contract risks. Procurement contracts are stored in the contract database.

The arrangement and scope of competitive bidding is determined based on the significance of the procurement, in compliance with legislation.

The supplier’s compliance with the Contractor’s Obligations Act, creditworthiness, and any necessary financial details are verified before selecting a new significant supplier. If necessary, the supplier is required to provide a performance bond for the work and warranty periods. During the procurement phase, it is verified that the supplier is not directly or indirectly on a sanctions list or disqualified. (In new contracts since 9.4.2022, and in older contracts the continued implementation was prohibited on 10.10.2022 (https://eur-lex.europa.eu/legal-content/FI/TXT/PDF/?uri=CELEX:32022D0578&from=FI))

Documentation of Procurement Documents

Procurement contracts and their appendices must be archived in Loiste’s database.

All documents and appendices must be held by Loiste companies, following the documentation retention:
1. We store the bid and contract documentation:
- Requests for Proposals
- Contracts, request for proposals, and decisions
We store the materials related to service management and delivery in Service Management Memos according to process descriptions.
- Feedback, observations, and development follow-up via the Ceriffi Check channel
- Supplier evaluation and audit via the Ceriffi Check channel

Procurement Handbook: Other Notable Practices

Supplier management and procurement must also take into account responsible operating instructions provided by authorities. There is a governance model for managing long-term supplier relationships. To enable feedback management, Ceriffi Check links can be distributed to suppliers.

Conflict of Interest
If a Loiste employee is involved in selecting a supplier and has personal interests, the employee must inform his/her supervisor in advance. After a contract has been signed with a partner, a Loiste employee must not request private services from that supplier unless specifically approved by the supervisor.

Additional Factors in Supplier Selection

When choosing a supplier, attention is paid to how well the overall solution meets the needs of Loiste companies. Selection criteria include, among others, the company’s expertise, reliability, responsibility, resources, and price of delivery.

The supplier’s creditworthiness and any necessary financial details are verified before selecting a new supplier. If necessary, the supplier is required to provide a performance bond for the work and warranty period.
During the bidding stage, a list of required information is provided to the supplier so that bids can be compared, and compliance with requirements can be verified.

To ensure the quality, efficiency, and responsibility of its operations, Loiste has set criteria for its suppliers at both the company level and the service/product level. We have established criteria for our suppliers, which are monitored and measured during the selection phase and throughout the contractual relationship.

The Loiste Group strives to achieve carbon neutrality across its entire value chain by 2026. We also expect carbon neutrality from our suppliers. We communicate our requirements already at the competition stage.

Supplier guidance and product/service criteria ensure compliance of products, components, and services with Loiste’s requirements and legislative requirements. Practical implementation is documented at the project/process level.

We annually examine the responsibility of our suppliers and carry out supplier evaluations. We conduct a more extensive supplier evaluation for those whose impact on our business is significant, or whose operations involve environmental risks or other risks regarding responsible business.

Loiste is committed to identifying the responsibility impacts of its value chain and reporting them as part of its responsibility reporting. Suppliers are part of our value chain, and we need information about them and the impact of their operations.

Loiste and all parties involved in Loiste’s operations show their commitment to fulfilling the responsibility requirements concerning environmental, social, and governance issues throughout their entire value chain.

Loiste companies require that companies providing services to Loiste report information related to responsibility, good governance, operational quality, product and service compliance, environmental impacts and OHS, respect for human rights, prevention of corruption and bribery, during the supplier selection phase and throughout the contract period as part of supplier evaluations.

To ensure suppliers and their products and services meet the criteria, Loiste conducts supplier audits. Suppliers are required to cooperate and be transparent during audits.

These operating instructions set general requirements for suppliers regarding their responsibilities in conducting business responsibly. The supplier affirms that it operates responsibly and meets these requirements in its activities.

Purchase Terms

General
This handbook applies to all Loiste companies’ orders and purchases from suppliers. No deviating terms apply unless approved electronically or in writing by the purchaser.

The handbook applies to all contracts in the following order:
- Contract document
- Appendices to the contract document, excluding general and special terms
- Applicable special terms
- Applicable general terms and conditions
- Requirements in this handbook
- Other terms

If the documents are contradictory in content, the contract takes precedence, followed by the other documents in the order of precedence mentioned above.

Quotation, Order, and Changes
To be valid, all orders must be made electronically or in writing. Any change, correction, or addition to the order becomes part of the order only if both parties approve it electronically or in writing. The contract must include a provision that a binding contract between the contracting parties is formed only once all parties have signed the agreement or once the order has otherwise been placed.

Delivery Time and Delay
If delivery is delayed due to reasons attributable to the Supplier, the Supplier is obligated to pay a contract penalty in the amount specified during the contract stage. Payment of the contract penalty does not limit the purchaser’s right to claim damages under the law.
If the delivery is significantly delayed beyond the agreed delivery date, the purchaser has the right to cancel the contract in whole or in part at its discretion and seek damages.

Back to top


Credit Risk Policy

Responsible for implementing: Lasse Aarnio

Impacts to promote:

Update: 2022
Review: 2024

1 Introduction

1.1 Loiste Group’s Credit Risk Policy

Loiste Group’s Credit Risk Policy is part of Loiste Group’s responsibility program and policy, and it regulates counterparty risk activities and related risk management measures.
The Credit Risk Policy must be followed in all subsidiaries and business units managed by Loiste. The purpose of this policy is to provide stringent guidelines that meet the requirements of credit and counterparty risk management and to support each business unit in achieving its targeted business results despite prevailing counterparty risk.
Loiste Group’s Finance function assesses each individual counterparty’s creditworthiness throughout the Group, utilizing external credit rating agencies as needed.

1.2 Objectives and Scope of the Credit Risk Policy

The objective of Loiste’s Credit Risk Policy is to enable Loiste’s financial objectives while managing counterparty risks. As Loiste’s operating environment evolves, the Group’s credit risk management must control overall credit risk in all business decisions and ensure that any potential impacts on profits are quantitatively measured and remain within defined limits.
All Loiste personnel must comply with the Credit Risk Policy. The Board of Directors of Loiste monitors compliance with this requirement.
The purpose of the Credit Risk Policy is:
• To define credit risk and situations in which credit risk materializes, using metrics
• To define key risk management and governance processes
• To set risk mandates and counterparty limits

All Loiste employees who interact with customers, sellers, and trading counterparties must comply with the Credit Risk Policy as well as all applicable laws, rules, and regulations. Employees must not disclose confidential business or operational information to other employees or third parties without the authorization of an appropriate supervisor.

An essential part of the risk management framework is the approval processes, document archiving, and the outcomes of the risk management process. As a general principle, the credit approval process must be completed before any acceptable business transaction. No contractual activity is allowed without completion of Know-Your-Customer (KYC) and a creditworthiness assessment (see Section 6, Know Your Customer (KYC)).

Counterparties are always first asked to fill out KYC data and go through Loiste Group’s creditworthiness process to determine counterparty rating, pricing, and a counterparty-specific credit limit.

1.3 Validity, Responsibilities, and Approval Process of the Credit Risk Policy

Loiste’s Board of Directors approves the Credit Risk Policy. The Board also processes and approves changes to the main part of the Credit Risk Policy.
This version of the Loiste Group Credit Risk Policy fully replaces the previously approved version of Loiste Group’s Credit Risk Policy.

Loiste Group’s credit policy comprises the following roles and responsibilities:

1.3.1 Loiste Board of Directors
• Approves Loiste Group’s Credit Policy
• Approves changes to the Credit Risk Policy

1.3.2 Loiste CEO
• Presents Loiste Group’s Credit Policy to Loiste’s Board for approval
• Ensures that Loiste Group’s Credit Policy and limits are observed within the company
• Approves counterparty credit risk in larger sales or procurement contracts upon signing, as per Section 4, within the credit limits approved by Loiste Oy’s Board

1.3.3 Loiste CFO
• Is responsible for creating, maintaining, and revising the Credit Risk Policy as needed, as well as for presenting any changes to the CEO and ultimately to the Board for final approval
• Guides and develops the Group’s credit risk management process (described in Chapter 3)
• Is responsible for and oversees the establishment of creditworthiness criteria
• Approves counterparty credit risk for larger sales or procurement contracts, as per Section 4, within the credit limits approved by Loiste Oy’s Board
• Is responsible for monitoring Loiste Group’s consolidated credit risk position, counterparty credit risk positions, compliance with counterparty limits, and credit losses

1.3.4 Group Treasury
• Evaluates the individual counterparty’s creditworthiness, credit pricing for the counterparty, and the maximum credit limit for the counterparty
• Approves counterparty credit risk as per Section 4, within the credit limits approved by Loiste Oy’s Board
• Manages collateral handling related to energy billing together with Ropo and gives Ropo authority to decide on a guarantee or collateral if the customer is deemed creditworthy

1.3.5 Business Units
• Are responsible for identifying their existing or potential counterparty before entering into a business relationship or contract
• Provide the company name and contact details to Group Treasury so that creditworthiness and the counterparty credit limit can be verified – before finalizing a contract
• Request that the new customer/supplier complete the KYC questionnaire (Section 6, Know Your Customer (KYC)) – capturing the required creditworthiness details (e.g., annual reports) for Group Treasury, and ask Group Treasury to carry out the creditworthiness assessment process to evaluate the counterparty’s credit profile and pricing (proposed credit and credit limit)
• Determine the counterparty’s credit risk in cooperation with Group Treasury

2 Credit Risk Management Process

All credit limit decisions are requested/prepared at the unit level in cooperation with Group Treasury. The business unit submits a request to Group Treasury/Finance Department and applies for credit limits based on the needs of the business units and the counterparty’s creditworthiness. Group Treasury/Treasury proposes a credit limit based on business demand and the counterparty’s creditworthiness. The credit limit decision is made according to the approval chain and Section 4, under the mandates granted by Loiste Oy’s Board, within the defined authorizations.

2.1 Requesting a Group-Wide Limit for a Counterparty

No contractual obligation of any kind may be entered into before first assessing the risk arising from the business in question and ensuring that the counterparty’s creditworthiness and financial strength are sufficient. The counterparty’s creditworthiness must also be reviewed when renewing or extending an existing contract and periodically during the contract term.

The level of credit risk is limited by imposing a specific group-wide credit limit on the counterparty. Credit limits are set based on the potential credit risk posed by the existing or potential business relationship from the Loiste Group’s perspective, taking into account the counterparty’s creditworthiness and financial strength.

A “limit” refers to the approved maximum total credit risk for an individual counterparty across all entities consolidated into Loiste Group. When assessing a counterparty’s credit risk, one must also consider operational disruption risk and any additional costs that might result from switching to a different supplier. In particular, counterparty risk posed by certain banks or trading counterparties with a low credit rating must be identified and managed carefully.

If the creditworthiness criteria are not met, Group Treasury/Finance decides whether the counterparty’s creditworthiness is adequate. If the counterparty is newly established, has no credit rating, and no historical data is available, then after a credit review, a standard payment term may be offered. If the customer fails to pay, the counterparty must pay in cash upfront or provide guarantees to continue business operations.

2.2 Assessing the Counterparty’s Creditworthiness

The purpose of credit risk management is to minimize all potential negative effects associated with counterparty creditworthiness issues. Loiste’s credit risk management is administered by Group Treasury/Finance, which conducts the following core activities:
• Evaluates credit risk based on creditworthiness criteria (Section 5, Credit Criteria)
• Establishes appropriate limits for each counterparty based on the rating or company assessment
• Manages centralized collateral through Ropo operations

Business units are responsible for identifying an existing or potential counterparty before concluding a contract. Standard contract models should always be used. Group Treasury/Treasury confirms payment and invoicing terms as well as exit clauses for situations where the customer violates the contractual terms.

The counterparty must be identified by using a Business ID, which must be verified to identify the counterparty. To assess group-level counterparty risk, the final parent company of the counterparty must also be checked.

The representative of the business unit and the Group Finance department assess the counterparty’s credit risk. The credit risk must cover the entire term of the contract. Group Treasury/Treasury determines the final credit limit for the counterparty according to the mandates of the Credit Risk Policy. If the customer is not considered creditworthy, credit can only be granted if supported by a parent company guarantee (if the parent company is deemed creditworthy), a bank guarantee, collateral, or prepayment. Group Treasury/Treasury manages and decides on acceptable guarantees or collateral. A parent company or bank guarantee, collateral, or pledged funds must be arranged before entering into contractual obligations.

The creditworthiness assessment must be carried out with reasonable credit checks using external data (e.g., credit rating agencies and available company/financial information, as well as prior experiences with the counterparty at Loiste). All relevant information that may affect credit decisions must be taken into account.

2.3 Monitoring Counterparty Creditworthiness and Collateral Management

A counterparty’s rating status may change. Group Treasury/Treasury may request, when necessary, a credit check from the service provider. This monitoring is carried out by collecting updates directly from the credit institution and from payment behavior data.

When the existing counterparty’s creditworthiness deteriorates to an unreasonable level in terms of energy billing, or when the counterparty does not meet its invoice payment obligations, Ropo Collection demands collateral. Accepted collateral types include deposits or approved bank guarantees (instructions in Section 7, Collateral).

Group Treasury/Treasury acts immediately when a limit is exceeded. Possible measures, depending on the situation, may include switching the customer to a prepayment arrangement (if the counterparty cannot pay its outstanding debt to an acceptable level), securing collateral, parent company guarantees, halting deliveries, or increasing the limit if the credit evaluation indicates it is justified.

2.4 Collection

Group Treasury/Finance is responsible for an effective process covering accounts receivable, payment, and collections, in collaboration with Ropo’s collection function. If a counterparty fails to pay its debts, Ropo Collection initiates a prepayment procedure or a delivery shutdown.

Private Customers’ Consumption Bill, Final Bill, or Service
• The first reminder is sent after the due date of the first invoice. The first reminder has a 10-day payment period.
• If the customer does not pay, the first payment request is sent promptly, with a 10-day payment period as well.
• If the customer still does not pay, a second payment request is sent promptly, with a 10-day payment period.
• If the customer does not pay within this time, the first disconnection warning is issued, with a 14-day payment period.
• If the customer does not pay, Loiste simultaneously cuts off supply, and a disconnection request is sent to the distribution company. The receivable goes to recovery.
• If the debt is more than 180 days overdue, it is written off.

Corporate Customers’ Consumption Bill, Final Bill, or Service
• The first reminder is sent after the due date of the first invoice. The first reminder has a 7-day payment period.
• If the customer does not pay, the first payment request is sent promptly, again with a 7-day payment period.
• If the customer does not pay, a second request is issued promptly, with a 7-day payment period.
• If the customer does not pay within this time, the disconnection process is initiated, and the first disconnection warning is sent, giving a 14-day payment period.
• If the customer does not pay, Loiste simultaneously cuts off supply, and a disconnection request is sent to the distribution company. The receivable goes to recovery.
• If the debt is more than 180 days overdue, it is written off.

Connection Bill: Private and Corporate Customers
• The first reminder is sent after the due date of the first invoice. The first reminder has 10/7 days of payment time.
• If the customer does not pay within this time, a worksite connection termination notice is sent with a 14-day payment period.
• If the customer does not pay within this time, worksite connection termination may begin, and the receivable goes to the collection process.

Collateral Bills: Private and Corporate Customers
• If the customer does not pay the first bill on time, a disconnection request is immediately sent to the distribution company.

3 Credit Risk Reporting

Ropo regularly reports on the credit risks and overdue payments of all Loiste Group’s energy billing counterparties to the Group Treasury/Finance department. The report must include a status update on the current delay situation, any changes in the customer’s creditworthiness, and ongoing measures.

4 Credit Limits Approved by Loiste Oy’s Board

If the counterparty does not meet the creditworthiness requirements, a tailored solution may be created in which Loiste Group’s interest charges fully cover certain aspects (e.g., partial advance payments or special rules for construction firms). In these cases, the CEO has special authorization to decide.

Mandate Request Made By Approved By
Size (total) Period

Credit Risk < EUR 100,000 Annual/repetitive Business unit Ropo
Credit Risk < EUR 1 million Annual/repetitive Business unit CFO
Credit Risk < EUR 5 million Annual/repetitive Business unit Group CEO
Credit Risk > EUR 5 million Annual/repetitive Business unit Board
Credit Risk < EUR 1 million Entire liability & contract maturity Business unit CFO
Credit Risk < EUR 5 million Entire liability & contract maturity Business unit Group CEO
Credit Risk > EUR 5 million Entire liability & contract maturity Business unit Board

5 Credit Criteria

Creditworthiness is monitored based on the counterparty’s payment behavior and a third-party binary credit rating, such as from Intrum, Bisnode, Dun & Bradstreet, or equivalent. Either the customer is regarded as creditworthy or not creditworthy.
• Creditworthy: Standard billing terms apply by default. Creditworthiness is monitored in the payment and collection process.
• Not creditworthy: Cash or prepayment is required.

6 Know Your Customer (KYC)

1. Basic Details of the Customer Company
• Company name
• Business ID
• VAT number
• Country of establishment
• Contact person

2. Mandatory Inputs for a Creditworthiness Check
• Excerpt from the Trade Register
• The latest audited financial statements

3. Details of the Customer Company’s Ownership and Group Structure
a. Ultimate owner of the parent company

4. Loiste Group Finance/Treasury Limit Decision
• Creditworthy or not
• Rating
• Group-wide credit limit for the counterparty

7 Collateral

Requesting collateral is related to Loiste’s Credit Policy and is always the primary option. The Credit Policy allows for situational discretion, and the operational guidelines include clarifications for the most common scenarios.
Credit checks are performed via Suomen Asiakastieto’s services. There must be a valid reason for checking a consumer customer’s credit (i.e., establishing a contract (= granting credit) or checking creditworthiness after payment defaults). All queries are logged in Suomen Asiakastieto’s register, and the person conducting the check is personally responsible for the appropriateness of the query. When notification of a contract arrives via Datahub, the system automatically checks credit data.

7.2 Collateral for a Consumer Customer

A private customer’s credit is checked when entering into a contract, changing contract types, moving to a new location, or if payment defaults arise during the contract term.
Collateral may also be required if the individual has no personal ID number when making the contract or refuses to provide it. The collateral covers the value of four months’ electricity bills in euros. The person’s credit rating indicates the severity of the payment default and suggests the recommended credit decision.

If the customer has payment default entries in their credit history when making the contract or significant payment defaults in previous electricity contracts, Loiste has the right to require collateral from the customer separately for both the sales contract and the distribution contract. Upon disconnection, before reconnection, the customer must also pay collateral.

The collateral covers the amount of the invoices in euros for the time between when the invoice is issued and the disconnection date. For private customers, this means the euro amount of four months’ electricity bills, with a minimum of EUR 100. Collateral is always in cash and is linked to the specific customer and point of delivery.

Collateral must be returned to the private customer one year after it is provided, if there have been no significant payment defaults during the period the collateral has been in effect. A significant payment default is defined as disconnection of electricity supply or the presence of unpaid overdue bills at the time of collateral return.

7.3 Collateral for a Corporate Customer

The credit data of a corporate customer is checked when entering into a contract or if there are reasons for requesting collateral during the term of the contract through payment monitoring. The grounds for requiring collateral include significant payment defaults during the contract term. A significant payment default is deemed to be a disconnection warning and multiple overdue bills simultaneously. For a corporate customer, the collateral covers the euro amount of three months of electricity bills.

No credit checks are needed for housing companies, public entities (i.e. municipalities, regions, municipal and state enterprises), banks, insurance companies, Lutheran or Orthodox parishes. Collateral must be returned to a corporate customer after two years if there were no significant payment defaults during the collateral period. A significant payment default is disconnection of electricity supply or the presence of unpaid overdue bills at the time of collateral return.

7.4 Operating Guidelines

7.4.1. Checking and Recording the Credit Rating

The customer’s data is assigned the same credit rating as in Suomen Asiakastieto’s register, along with the check date.
For private customers:
MHL0 = no payment issues
MHL1 = no payment issues, but other remarks (e.g., appointment of a trustee)
MHL2 = Reason for collateral: old payment default entries
MHL3 = Reason for collateral: payment default entries in credit history. This category is also used if there are serious payment defaults in Loiste’s contracts
MHL4 = Reason for collateral: severe and numerous payment default entries

For corporate customers, risk classes range from 1 to 5 (RL1–RL5).

7.4.2. Requiring Collateral

Private Customers
If a new customer’s credit history contains records (MHL2–MHL4), we always require collateral.

If the customer has previously had Loiste contracts and always paid on time, the collateral requirement may be waived in MHL2 and MHL3 categories. If the customer is MHL4 but has always maintained a good payment record with Loiste, collateral may be waived. This can apply, for example, when moving to a new address or changing contract types. In all these cases, credit data is checked regardless.

If the customer is deceased and a new electricity contract is made for the surviving spouse, no collateral is required if the deceased customer’s bills were always paid on time. Credit data is still checked.

Collateral should never come as a surprise to the customer, so the customer must always be contacted by phone before sending the collateral invoice.

Corporate Customers
Collateral is required if an older company (over 4 years old) has a risk class of RL4 or RL5. A new company always poses a risk, and we handle this with a short payment term or collateral:
• A new company (under 4 years old) with payment default records always requires collateral. The payment term is then 14 days.
• If a new company has no payment default entries, an alternative 7-day payment term can be offered, or collateral is requested, which allows a 14-day payment term.
• A contact person must be noted, indicating who agreed to the arrangement.

If a stable, creditworthy payer stands behind the new company (and that payer’s creditworthiness is verified), collateral may be waived as a matter of discretion. Examples include situations where the electricity seller bills the distribution portion, or another reliable entity (like Kesko or similar) is the payer. There are also sectors where bankruptcy or insolvency is extremely rare, and these are considered separately on a case-by-case basis.

If the company has maintained a good payment record with Loiste and is registering new points of delivery, collateral for the new point of delivery may be waived at the company’s discretion.

Collateral must be returned to a corporate customer after two years if there were no significant payment defaults during the collateral period.

Collateral Handling

1. Collateral Amount and Collateral Invoice

The collateral amount is calculated in a separate Excel spreadsheet. The volume of electricity usage and the contract type affect the collateral amount. The smallest collateral is EUR 100. An agreement on collateral and the collateral invoice are created in CX as agreed with the customer. When negotiating the collateral with the customer, they must be clearly informed that failing to pay the collateral does not cancel the contract but instead leads to interruption of electricity supply without further notice.

2. Cutting Off Supply Due to Unpaid Collateral

If the customer does not provide the collateral by the due date, electricity supply is interrupted without further notice. In some cases, the collection department may request that customer service contact the customer regarding the unpaid collateral. According to the terms and conditions of electricity supply, this constitutes a breach of contract whereby the electricity contract can be terminated if not all contractual terms are fulfilled.

3. Collateral Confirmation

Once the collateral amount has been paid, a separate confirmation of receipt is sent to the customer.

Back to top


Yritys AB

Sustainability communication

Responsible for implementing: Lasse Aarnio

The sustainability report is published on the company’s website. Internally, sustainability tracking is reported and communicated during meetings to our own personnel and stakeholders.

Purpose
The purpose of communication is to promote and support the achievement of the companies’ objectives. This means creating, maintaining, and developing communication arrangements through which functional interactive relationships are formed within the Group and with other key stakeholders crucial to operations.

Goals for Communication
In these companies, the goals for communication are proactivity, timeliness, correct content, and truthfulness. Proactivity means that communication is used systematically to achieve the Group’s objectives. Proactivity is closely related to the regularity of communication. It involves both sending and receiving messages: information is shared before others have the chance to do so, and, on the other hand, everyone wants to and knows how to seek out the information they need on their own initiative. Timeliness means that information is available when it is needed. It involves the speed of communication and ensuring that personnel are informed before other target groups.

Correct content and truthfulness mean that communication does not contain errors or withhold essential information. This requires sharing negative news in addition to positive news. When communicating externally, it must also be clearly stated whose opinion or interpretation is being presented: the individual’s or the company’s.

The communication principles apply to all communication within the Group: internal communication among personnel, communication between personnel and customers, and communication between personnel and other external stakeholders.

Communication Target Groups
The main target groups for the companies’ communication are:

  • personnel
  • customers: both current and potential
  • owners
  • media outlets, and through them the general public
  • associated companies
  • strategic partners
  • major suppliers of goods and service providers
  • municipalities in the distribution network area
  • authorities; e.g. Ministry of Employment and the Economy, Energy Authority, consumer authorities, competition authorities, electrical safety authorities, occupational safety authorities
  • various parties in the energy sector: industry associations, employee organizations, employer organizations, distribution network companies, electricity sales companies, district heating companies
    schools and educational institutions

Communication Responsibilities and Organization of Communication Tasks
The CEOs of the Group companies are responsible for the companies’ communication. To manage communication, they have delegated part of their responsibilities within the organization so that each business unit director, as well as the head of the internal support and service process, is responsible for the content and implementation of communication in their own area of responsibility, within the framework created by common principles. In practice, everyone on the staff has some communication responsibilities and tasks.

The principle is that the various business units, as well as the staff of support and service processes, manage their daily communication tasks independently. The Communications Manager is responsible for coordinating communication, developing communication arrangements, and carrying out shared Group communication tasks. The Communications Manager supports business management and staff in the practical implementation of communication.

Financial Information
The companies do not publish their own financial reports for external distribution. A financial statement bulletin is published on the parent company’s results after its release, posted on the intranet and public websites, and distributed to key financial and general media outlets.

Responsibility for internal financial communication to the staff lies with the CEO and business unit directors. The companies’ financial statements are presented annually at the spring staff briefing. In addition, the companies’ financial status and performance are covered at the autumn staff briefing and at other times if necessary.

Environmental Information
Responsibility for both internal and external communication related to environmental issues lies with each business unit director and support unit leader in their respective areas of responsibility. The ESG Controller is responsible for internal communication regarding the environmental management system and its development.

The Communications Manager supports those responsible in the practical implementation of communication.

Crisis Communication
In crisis situations, Loiste Oy’s business units follow their crisis plans, which also include guidelines for communication.

Back to top

Greenhouse gas emissions

Scope 1 emissions refer to the direct emissions resulting from an organization's operations.

Scope 2 emissions refer to emissions caused by the energy purchased or acquired by the organization. Scope 2 emissions can be calculated in two ways: market-based and location-based. The market-based calculation method reveals the actual emissions from the energy procured by the organization, using emission factors provided by the energy suppliers. The location-based calculation method reflects the average emissions in the geographical areas where the energy is consumed, using general, regional, or national emission factors. Therefore, the emission figures obtained from market-based and location-based calculations usually differ from each other. When totaling scope 2 emissions, the emission figures obtained from the market-based calculation method are primarily used. If the market-based method cannot be applied, figures from the location-based method are used.

Scope 3 emissions refer to the organization’s indirect emissions in its upstream and downstream value chain.


Calculation methodology





Emissions

Total greenhouse gas emissions

28413.12 tCO2eq

Scope 1 1165.26 tCO2eq

Scope 2, market-based | location-based 37 | 0.00 tCO2eq

Scope 3 27210.86  tCO2eq


Development of emissions



Chart type

Energy


Energy consumption
Total energy consumption 1874.00 MWh
From fossil sources 68.00 MWh
Fuel from coal and coal products 5.00 MWh
Fuel from crude oil and petroleum products 5.00 MWh
Fuel from natural gas 21.00 MWh
Fuel from other fossil sources 37.00 MWh
Purchased or acquired electricity, heat, steam, and cooling from fossil sources 0.00 MWh
From nuclear sources 0.00 MWh
Fuel from renewable sources 1806.00 MWh
Fuel from renewable sources (including biomass, renewable hydrogen) 757.00 MWh
Purchased or acquired electricity, heat, steam, and cooling from renewable sources 1079.00 MWh
Self-generated non-fuel renewable energy 0.00 MWh

Energy production
Non-renewable energy production 0.00 MWh
Renewable energy production 50525.00 MWh

Waste

The total amount of waste from own operations 2716590 kg
The total amount of hazardous waste generated 57129 kg
The total amount of radioactive waste generated 0 kg
The total amount of non-recycled waste 49036 kg
The percentage of non-recycled waste

Waste directed to disposal 49036 kg
Breakdown 1: Non-hazardous waste and hazardous waste
Non-hazardous waste 17176 kg
Hazardous waste 31860 kg
Breakdown 2: Waste treatment types
Incineration 11871 kg
Landfill 10290 kg
Other disposal operations 26875 kg
Waste diverted from disposal 2667554 kg
Breakdown 1: Non-hazardous waste and hazardous waste
Non-hazardous waste 2642285 kg
Hazardous waste 25269 kg
Breakdown 2: Recovery operation types
Recycling 2483300 kg
Preparation for reuse 147877 kg
Other recovery operations 36377 kg
Background information on the composition of the waste
Demolition waste, cables, etc., and construction waste, Recycling of packaging materials (wood/plastic), Transportation and recycling of materials from dismantled power lines (iron, aluminum, steel, porcelain, glass), impregnated wood (electricity poles).
Background information on the data calculation methodologies used to determine and classify products designed along circular principles
The information is obtained from the waste supplier, who receives reports from the recipient.
General information on the waste


Water consumption

Total water consumption 2287.00
Total water consumption in areas at water risk, including areas of high-water stress 0.00
Total water recycled and reused 2287.00
Total water stored 0.00
Changes in total water storage 0.00
Information on the calculation methodologies used and the acquisition of data
Mittausten ja laskutusmäärien arvot. / Values of measurements and billing quantities.
Information on the water basins’ water quality and quantity and how the data was compiled
Ei erillistä tarvetta. ei kuulu liiketoimintaan. / No separate need. Not part of the business.
Information on water withdrawals and water discharges
Käytetty vesi: - kaukolämpöputkistoon otettu jokivettä. poistuma on prosessissa haihtunutta. - toimistovesi liitetty kunnan vesijohtoverkostoon / Used water: - River water taken for district heating pipes. The discharge is evaporated in the process. - Office water connected to the municipal water supply network.

Water intensity 23.266 m³/milj€




Social topics

Own workforce


Employees
GenderEmployeesPermanent
employees
Temporary
employees
Non-guaranteed
hours employees
Full-time
employees
Part-time
employees
Male262600260
Female161600160
Other000000
Not disclosed000000
Total424200420

Employees that have left the company 4
Employee turnover 9 %
Background information on employee turnover
Main reason for departure: Retirement New employees: 9
Background information on the differences in the headcount information given in this report and the financial statement information
Non-employee workers
Non-employment employee 0
Self-employed people: 0
People provided by undertakings engaged in employment activities: 0
Trainees: 0
Other types of employees relevant to the undertaking: 0
Background information on non-employees:

Governance topics

Incidents of corruption and bribery


Incidents of corruption and bribery
Number of judgments 0
Amount of fines 0
Convictions related to corruption and bribery
Number of cases 0
Confirmed incidents of corruption and bribery
0
Nature of incidents

Actions taken to address violations of procedures and standards for preventing corruption and bribery
0 kpl
Number of incidents that resulted in the dismissal of an employee
0 kpl
Number of incidents that resulted in other disciplinary actions against an employee
0 kpl
Number of incidents related to a business partner where a contract was terminated or not renewed due to the case

Political influence and lobbying activities


Representatives responsible for overseeing political influence and lobbying activities in governance, management and supervisory bodies

Total monetary value of financial and in-kind political contributions made directly and indirectly
0
Total monetary value broken down by area
Total monetary value broken down by type of recipient
Assessment of the total monetary value

Main topics of lobbying activities

Members appointed to governance, management and supervisory bodies who have held a similar position in public administration in the two years preceding the appointment

Transparency register information

Payments


Own payment practices

Average invoice payment time
14 Days
Standard payment terms for the main supplier groups
14 vrk netto 
14 Days
7 vrk netto 
7 Days
Payments made in alignment with standard payment terms
100 %
Legal proceedings currently outstanding for late payments
0 kpl
Additional information about payment practices

Payment practices for customers

Payment methods and terms offered to business and consumer customers
Bank transfer, payment term 7 - 30 days. For consumers, 14 days.
Actions taken in cases where there is an error in invoicing
- The invoice due date is determined based on the billing date. - Invoices are forwarded via Ropo. - If delayed, a notice is posted on the website. - If there is an error in the invoice: contact the customer and send a credit note and a new invoice.
Practices for payment reminders and debt collection
For overdue invoices, payment reminders are sent according to the company's product delivery terms. The receivable is transferred to Ropo Capital Oy's reminder service after the due date of the payment notice. Intrum Ropo Capital Oy sends disconnection warnings, where the disconnection limits follow the general terms of delivery.
Practices for returns, contract cancellations and complaints
Complaints are handled on a case-by-case basis in collaboration with the customer.

Tax footprint


Turnover 98300000.00
Profit before tax 14200000.00


Direct taxes
Direct taxes are taxes that are paid directly to the tax authority. These taxes are imposed directly on a company's income and assets
Corporate tax 1000.00
Property tax 86000.00
Environmental taxes 0.00
Withholding taxes 0.00
Employer contributions 0.00
Employer's earnings-related pension contributions 588000.00
Employer health insurance contributions 42000.00
Employer's unemployment insurance contributions 10000.00
Accident and group life insurance premiums 26000.00
Other taxes 0.00
Total direct taxes 753000.00



Indirect taxes
Indirect taxes are taxes that are collected from the consumption or production of goods and services, rather than directly from a company's income or assets. These taxes are ultimately paid by the end consumer through the price of goods or services.
VAT expensed 0.00
Excise taxes 13031000.00
Customs duties 0.00
Total taxes paid 13031000.00



Remitted taxes
Taxes paid are taxes that a company has collected or withheld and paid to the tax authorities.
Value-added tax (VAT)
Withholding from wages
Withholding from dividends 0.00
Total taxes paid 8460000.00



Tax credits
Tax credits are reductions, allowances, or refunds granted by tax authorities that decrease the amount of taxes payable.
Tax deductions 0.00
Total indirect taxes
Total tax credits 0.00



Total tax footprint 22244000.00