Technical Instruction for Using the Electronic Data Delivery System of the Croatian Financial Services Supervisory Agency

1 The Administrative Board of the Croatian Financial Services Supervisory Agency, pursuant to Article 17, paragraph 1, item 10 of the Statute of the Croatian Financial Services Supervisory Agency ("Official Gazette" No. 53/12), at the meeting held on December 21, 2022, adopted TECHNICAL INSTRUCTION FOR THE USE OF THE ELECTRONIC DATA DELIVERY SYSTEM OF THE CROATIAN FINANCIAL SERVICES SUPERVISORY AGENCY reports.hanfa.hr

1. Definitions Certain terms, within the meaning of this Technical Instruction (hereinafter: Instruction), have the following meanings: (1) Obligor is the supervised entity obliged to submit reports to the Croatian Financial Services Supervisory Agency (hereinafter: HANFA); (2) HANFA's Electronic Contact Point is the email address pisarnica@hanfa.hr (3) The Issuer of the digital certificate for authentication on the Electronic Data Delivery System of HANFA is the Financial Agency (hereinafter: FINA).
2. Introduction This Instruction describes the method of using the services of HANFA's Electronic Data Delivery System (reports.hanfa.hr) (hereinafter: System). Referring to the application of the technical instruction for using the web form entry service and electronic documentation delivery in certain HANFA rulebooks is considered a reference to this Instruction. Several prerequisites must be met for successful use of the System: • Possession of an authentication certificate issued by the Digital Certificate Issuer • Installation of necessary components according to the Digital Certificate Issuer's instructions • A computer with Internet access • Registration of the Obligor

2 After downloading the USB stick with the digital certificate, the user is obliged to register their digital certificate using the appropriate interface on HANFA's website. An Obligor whose valid certificate is already registered in HANFA does not need to register it again. 3. Registration of the Obligor Launch a web browser and open HANFA's website: https://www.hanfa.hr Image 1. Website of the Croatian Financial Services Supervisory Agency In the menu on the right side, select the module “reports.hanfa.hr”.

3 Insert the USB stick into the computer and in the menu on the right side, select the “Registration” tab. Image 2. Initial user interface of reports.hanfa.hr To log in to the system, first select the certificate with which you wish to log in. Mark the desired certificate and then confirm the selected certificate by clicking “OK”. Image 3. User interface for system registration After selecting the certificate, it is necessary to enter the PIN for access to the cryptographic device (USB stick) on which your certificate is located. Enter the PIN and confirm the entry by clicking “OK”.

4 Image 4. User interface for entering the digital certificate PIN If you are already a registered Obligor, the following message will appear on the user interface: Image 5. Message in case of attempt to register an already registered Obligor

5 If you are not a registered Obligor, fill out the form and select the “Register” action. Image 6. Interface for entering data during registration After successful registration, a message about the successful registration will be displayed. Image 7. Message in case of successful registration

6 4. Access to the Electronic Data Delivery System of HANFA To obtain authorization to submit certain types of reports, Obligors are obliged to submit a completed and signed HANFA Access Form, the template of which can be downloaded from HANFA's website. The completed Access Form, signed with a qualified electronic signature, is submitted electronically to the address of HANFA's Electronic Contact Point. The Access Form can also be submitted via postal service providers or in person, in which case it must be hand-signed. Upon receipt of the correctly filled Access Form, the Obligor will be assigned permissions to submit certain reports. Access to the System is granted only to persons authorized by the Obligors to submit data. 5. Data Delivery 5.1. Prerequisites for Work Before logging into the System, the Obligor must be registered and must submit the appropriate Access Form for using the System, on the basis of which permissions for submitting certain reports will be assigned. 5.2. Logging into the System You can access the System at any time by opening HANFA's website https://www.hanfa.hr

7 Image 8. Website of the Croatian Financial Services Supervisory Agency In the menu on the right side, select the module “reports.hanfa.hr”. The initial user interface of the System will be displayed.

8 Image 9. Initial user interface of reports.hanfa.hr Insert the USB stick into the computer and in the menu on the right side, select the “Login” tab. To log in to the System, first select the certificate with which you wish to log in and confirm your selection by clicking “OK”. Image 10. User interface for logging into the system After selecting the certificate, it is necessary to enter the PIN for access to the cryptographic device (USB stick) on which your certificate is located. Enter the PIN and confirm the entry by clicking “OK”. After successful login, the initial user interface is displayed.

9 Image 11. Initial user interface of reports.hanfa.hr In case of unsuccessful login, the following message is displayed: Image 12. Message in case of unsuccessful login

10 5.3. Submission of Reports On the left side of the user interface, select the “Report Submission” menu. Image 13. Selection of “Report Submission” menu The method of creating and submitting reports in electronic form is defined by instructions for individual Obligors and is available on HANFA's website. To submit a specific report, select the type of report from the drop-down menu, the name of the entity, and the time period for which you are submitting data.

11 Image 14. Selection of report type Image 15. Report submission By selecting the “Browse” action next to the corresponding data type, select the file stored on your computer that you intend to submit to the System. After attaching all necessary files for data submission to the System, select the “Send” action.

12 In case of successful data submission, you will receive a System confirmation. 5.4. Downloading Confirmation On the left side of the user interface, select the “Confirmations” menu. Image 16. Selection of “Confirmations” menu By selecting the “Confirmations” menu, the user interface for downloading confirmations will be displayed. Download the confirmation of successful data submission by selecting the icon next to the desired report.

13 Image 17. Downloading confirmation The confirmation is created in pdf format. Image 18. Example of downloaded confirmation

14 5.5. Inability to Submit Data In justified cases of technical inability to submit or improperly executed submission (e.g., system failure, inability to read received documentation, etc.), the Obligor is obliged to submit data in written form to HANFA's Electronic Contact Point or via postal service providers or in person for the purpose of timely reporting. The Obligor is obliged to submit data through the System as described in Chapter 5 of this Instruction as soon as the reasons for such inability cease, and no later than within 8 days from the cessation of circumstances that caused the technical inability to submit. 6. Web Forms The Web Forms module serves to prepare documentation for electronic delivery and is publicly available on the website reports.hanfa.hr. Through the Web Forms module, the Obligor can enter data through a web form, save partially entered data, and ultimately create an XML file to be submitted through the Report Submission module. 6.1. Filling out Web Forms On the user interface of reports.hanfa.hr, select the “Web Forms” menu. Image 19. Selection of “Web Forms” menu

15 After selecting the “Web Forms” menu, the user interface is displayed showing two menus in which it is necessary to select the type of supervised entity and the type of form. Image 20. Web Forms user interface The Obligor selects the type of entity to which they belong in the “Select Type of Supervised Entity” menu, and in the “Form Type” menu, selects the type of form through which data is submitted. Image 21. Example of selecting type of supervised entity and form type

16 A detailed description of Web Forms and instructions for their content completion are found in separate instructions for filling out Web Forms depending on the activity of the Obligor, or the HANFA supervised entity, and are published on HANFA's website. After selecting a specific form type, all forms contained within that form type appear. Image 22. Example of forms within selected form type For each type of Web Form, entry in the “As of” and “OIB” (Personal Identification Number) fields is mandatory.

17 Image 23. Mandatory entry in “As of” and “OIB” fields When filling out the Web Form, mandatory fields are marked with an asterisk, while fields not marked with an asterisk are optional. Next to certain fields where a question mark is indicated, selecting the question mark displays an explanation related to that field. Image 24. Display of (non-)mandatory individual fields and actions for obtaining explanations for individual fields

18 After entering all data in the Web Form, it is necessary to select the “Download” action. After selecting the “Download” action, the web form is generated into an XML file, after which it must be saved to the Obligor's personal computer. It is also possible to download only a partially filled Web Form. A partially filled form can be reloaded by selecting the “Select XML” action in the “Enter existing XML file” field, after which work on the forms can continue. Image 25. Action for entering existing XML file By selecting the “Select XML” action in the “Enter existing XML file” field, it is possible to load already filled Web Forms to check the content entered in the Web Forms by selecting the “Validate” action. 6.2. Documentation Not Covered by Standardized Web Form Format The Obligor, or supervised entity, can submit a file that is not standardized through the web form format from the previous chapter. It is submitted by selecting the offered value within the “Form Type” category that has the phrase “submission of electronic documents” in its name. The name will first list the type of previously selected supervised entity (from the drop-down menu “Type of Supervised Entity”), for example “Leasing companies submission of electronic documents” if the entity type “Leasing companies” is selected.

19 Image 26. Submission of electronic documents It is necessary to enter mandatory data in the “As of” and “OIB” fields and then select the “Download” action to download the created XML. Image 28. Example of filled data and added documents

20 For each file, the “Document Name” field must be filled in, into which the name is entered from which it is visible what data the supervised entity is submitting to HANFA, or what procedure is involved, or under which obligation or request the supervised entity is submitting data to HANFA. When submitting multiple documents, after loading the first file, it is necessary to select the “Add” action, after which a new field for entering the document name appears, into which the name of the new file can be entered. When submitting electronic documents, it is possible to send a minimum of one and a maximum of twenty files. After selecting the “Download” action, the system generates an XML file with data in digital format, after which it must be saved to the Obligor's personal computer. Image 29. Example of downloaded XML 6.3. Data Submission After downloading the Web Form (XML file) or XML file with data in digital format and signing it in accordance with the Technical Instruction for the Application of Electronic Signature in the Reporting Procedure of the Croatian Financial Services Supervisory Agency, the Obligor submits reports through the standard way as described in Chapter 5. Data Delivery.

21 7. Final and Transitional Provisions This Instruction enters into force on January 1, 2023. With the entry into force of this Instruction, the Technical Instruction for Login and Work with the Interface of the Electronic Data Delivery System CLASS: 011-02/15-08/04, REGISTRATION NO: 326-01-220-222-15-1 of December 11, 2015, and the Technical Instruction for Using the Web Form Entry Service and Electronic Documentation Delivery CLASS: 011-02/16-08/02, REGISTRATION NO: 326-01-220-223-16-2 of October 14, 2016, cease to be valid. CLASS: 025-04/22-02/06 REGISTRATION NO: 326-01-30-35-22-1 Zagreb, December 21, 2022 CHAIRMAN OF THE ADMINISTRATIVE BOARD dr. sc. Ante Žigman