Assurance report of the independent German Public Auditor on a limited assurance engagement in relation to the consolidated non-financial statement included in the group management report.
To the Norma Group SE, Maintal
Assurance Conclusion
We have conducted a limited assurance engagement on the consolidated non-financial statement of NORMA Group SE, Maintal for the financial year from January 1 to December 31, 2025, included in section "Consolidated Non-financial Statement" of the group management report, prepared to fulfil the requirements of Sections 315b and 315c of the HGB [Handelsgesetzbuch: German Commercial Code] including the information contained in this consolidated non-financial statement to fulfill the requirements of Article 8 of Regulation (EU) 2020/852 (hereinafter the "consolidated non-financial reporting").
Based on the procedures performed and the evidence obtained, nothing has come to our attention that causes us to believe that the accompanying consolidated non-financial reporting for the financial year from January 1 to December 31, 2025 is not prepared, in all material respects, in accordance with Sections 315b and 315c HGB, the requirements of Article 8 of Regulation (EU) 2020/852 and the supplementary criteria presented by the executive directors of the Company.
Basis for the Assurance Conclusion
We conducted our assurance engagement in accordance with International Standard on Assurance Engagements (ISAE) 3000 (Revised): Assurance Engagements Other Than Audits or Reviews of Historical Financial Information issued by the International Auditing and Assurance Standards Board (IAASB).
The procedures in a limited assurance engagement vary in nature and timing from, and are less in extent than for, a reasonable assurance engagement. Consequently, the level of assurance obtained is substantially lower than the assurance that would have been obtained had a reasonable assurance engagement been performed.
Our responsibilities under ISAE 3000 (Revised) are further described in the section “German Public Auditor’s Responsibilities for the Assurance Engagement on the consolidated non-financial reporting”.
We are independent of the entity in accordance with the requirements of European law and German commercial and professional law, and we have fulfilled our other German professional responsibilities in accordance with these requirements. Our audit firm has applied the requirements for a system of quality control as set forth in the IDW Quality Management Standard issued by the Institut der Wirtschaftsprüfer [Institute of Public Auditors in Germany] (IDW): Requirements for Quality Management in the Audit Firm (IDW QMS 1 (09.2022)) and International Standard on Quality Management (ISQM) 1 issued by the IAASB. We believe that the evidence we have obtained is sufficient and appropriate to provide a basis for our assurance conclusion.
Emphasis of Matter – Principles for the preparation of the consolidated non-financial reporting
Without modifying our assurance conclusion, we refer to the disclosures in the consolidated non-financial reporting, which describe the principles for the preparation of the consolidated non-financial reporting. Accordingly, the Company has applied the European Sustainability Reporting Standards (ESRS) to the extent specified in Section X of the consolidated non-financial reporting.
Responsibilities of the Executive Directors and the Supervisory Board for the consolidated non-financial reporting
The executive directors are responsible for the preparation of the consolidated non-financial reporting in accordance with the applicable German legal and other European requirements as well as with the supplementary criteria presented by the executive directors of the Company and for designing, implementing and maintaining such internal control that they have considered necessary to enable the preparation of a consolidated non-financial reporting in accordance with these requirements that is free from material misstatement, whether due to fraud (i.e., fraudulent sustainability reporting in the consolidated non-financial reporting) or error.
This responsibility of the executive directors includes establishing and maintaining the materiality assessment process, selecting and applying appropriate reporting policies for preparing the consolidated non-financial reporting, as well as making assumptions and estimates and ascertaining forward-looking information for individual sustainability-related disclosures.
The Supervisory Board is responsible for overseeing the process for the preparation of the consolidated non-financial reporting.
Inherent Limitations in Preparing the consolidated non-financial reporting
The CSRD and the applicable German legal and other European requirements contain wording and terms that are subject to considerable interpretation uncertainties and for which no authoritative, comprehensive interpretations have yet been published. Therefore, the executive directors have disclosed their interpretations of such wording and terms in section “EU Taxonomy” of the consolidated non-financial reporting. The executive directors are responsible for the reasonableness of these interpretations. As such wording and terms may be interpreted differently by regulators or courts, the legality of measurements or evaluations of sustainability matters based on these interpretations is uncertain. As further described in section “Disclosures related to estimation and earnings uncertainties and other requirements (BP-2)” respectively “Climate Change” of the consolidated non-financial reporting, the quantification of the non-financial performance indicators in sections regarding Scope 3 Emissions (E1-6) are also subject to inherent uncertainties due to significant estimation and measurement uncertainties.
These inherent limitations also affect the assurance engagement on the consolidated non-financial reporting.
German Public Auditor’s Responsibilities for the Assurance Engagement on the consolidated non-financial reporting
Our objective is to express a limited assurance conclusion, based on the assurance engagement we have conducted, on whether any matters have come to our attention that cause us to believe that the consolidated non-financial reporting has not been prepared, in all material respects, in accordance with the applicable German legal and other European requirements and the supplementary criteria presented by the company’s executive directors, and to issue an assurance report that includes our assurance conclusion on the consolidated non-financial reporting.
As part of a limited assurance engagement in accordance with ISAE 3000 (Revised), we exercise professional judgment and maintain professional skepticism. We also:
•obtain an understanding of the process used to prepare the consolidated non-financial reporting, including the materiality assessment process carried out by the entity to identify the disclosures to be reported in the consolidated non-financial reporting.
•identify disclosures where a material misstatement due to fraud or error is likely to arise, design and perform procedures to address these disclosures and obtain limited assurance to support the assurance conclusion. The risk of not detecting a material misstatement resulting from fraud is higher than the risk of not detecting a material misstatement resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations or the override of internal control.
•consider the forward-looking information, including the appropriateness of the underlying assumptions. There is a substantial unavoidable risk that future events will differ materially from the forward-looking information.
Summary of the Procedures Performed by the German Public Auditor
A limited assurance engagement involves the performance of procedures to obtain evidence about the sustainability information. The nature, timing and extent of the selected procedures are subject to our professional judgment.
In performing our limited assurance engagement, we:
•evaluated the suitability of the criteria as a whole presented by the executive directors in the consolidated non-financial reporting
•inquired of the executive directors and relevant employees involved in the preparation of the consolidated non-financial reporting about the preparation process, including the materiality assessment process carried out by the entity to identify the disclosures to be reported in the consolidated non-financial reporting, and about the internal controls relating to this process
•evaluated the reporting policies used by the executive directors to prepare the consolidated non-financial reporting
•evaluated the reasonableness of the estimates and related information provided by the executive directors. If, in accordance with the ESRS, the executive directors estimate the value chain information to be reported for a case in which the executive directors are unable to obtain the information from the value chain despite making reasonable efforts, our assurance engagement is limited to evaluating whether the executive directors have undertaken these estimates in accordance with the ESRS and assessing the reasonableness of these estimates, but does not include identifying information in the value chain that the executive directors were unable to obtain
•performed analytical procedures and made inquiries in relation to selected information in the consolidated non-financial reporting
•conducted site visits
•considered the presentation of the information in the consolidated non-financial reporting
•considered the process for identifying taxonomy-eligible and taxonomy-aligned economic activities and the corresponding disclosures in the consolidated non-financial reporting.
Restriction of Use / Clause on General Engagement Terms
This assurance report is solely addressed to NORMA Group SE, Maintal.
The engagement, in the performance of which we have provided the services described above on behalf of NORMA Group SE, Maintal, was carried out on the basis of the General Engagement Terms for Wirtschaftsprüferinnen, Wirtschaftsprüfer und Wirtschaftsprüfungsgesellschaften (Allgemeine Auftragsbedingungen für Wirtschaftsprüferinnen, Wirtschaftsprüfer und Wirtschaftsprüfungsgesellschaften) dated as of January 1, 2024 (www. kpmg.de/AAB_2024). By taking note of and using the information as contained in our report each recipient confirms to have taken note of the terms and conditions stipulated in the aforementioned General Engagement Terms (including the liability limitations to EUR 4 million specified in item No. 9 included therein) and acknowledges their validity in relation to us.
Mannheim, den 18. March 2026
KPMG AG
Wirtschaftsprüfungsgesellschaft
[Original German version signed by:]
Matthias Forstreuter Timo Wiegand
Wirtschaftsprüfer Wirtschaftsprüfer
[German Public Auditor] [German Public Auditor]
Legend
These contents are part of the Non-financial Group Report and were subject to a separate limited assurance examination.