DNFP 2020

2020 DECLARATION OF NON-FINANCIAL PERFORMANCE OF THE DESCOURS & CABAUD GROUP 35 % of compliance on the part of European subsidiaries % of requests to exercise rights processed within due time limits THE EUROPEAN GENERAL DATA PROTECTION REGULATION (GDPR): The coming into force of the General Data Protection Regulation requires the implementation of organisational, technical and procedural means to ensure the validation and maintenance of compliance on the part of companies. The risk factors and their consequences: The risks in the event of non-compliance are primarily financial, as non-observance can be punishable by administrative and financial penalties of up to 20 million euros or 4% of the Group's turnover. Beyond this, the impact on the Group's image is liable to lead to a loss of confidence detrimental to the company's business. The means of control: The Executive Board has a long-term commitment to compliance with the GDPR. Verification of continuing compliance with the GDPR is ensured, at a European level, by the Data Protection Officer (DPO), who guarantees compliance with the GDPR for all new projects. Attention is focused mainly, although not exclusively, on the following aspects: • personal information concerning data processing (of websites, for example, including the management of cookies), • the management of individuals’ requests to exercise their rights, • the protection of personal data, • the management of processing records. Monitoring and, when necessary, back-up for the subsidiaries is put in place for the maintenance of compliance and the management of individuals’ requests to exercise their rights. Key performance indicators: Our objective is to process within the time limits indicated all the requests made by individuals to exercise their rights. Any deviation from the objective of 100% attainment is a source of improvement for the processing of these requests. In the context of its policy of external growth, one of the Company’s challenges is to ensure compliance with the GDPR on the part of any new European subsidiaries that we may have acquired. This requires particular vigilance when such companies are integrated. Our objective is 100% compliance for all our European subsidiaries. 50% 50% 60% 60% 70% 70% 80% 80% 90% 90% 100% 100% 110% 110% 2019 2019 2020 2020 99% 100% 96% 98% Target 100% Target 100%