The Group’s policy on the protection of personal data notably includes the following themes: • compliance with the basic principles of personal data protection laid down in the GDPR; • the security of personal data as well as the main principles in the event of a personal data breach (declaration to the regulator and/or to the data subjects when necessary, documentation of cases); • the framework for cross-border data transfers and processing; • the supervision of operations presenting particular risks for data subjects.