ANTALIS DATA PRIVACY NOTICE

Effective date: July 2018 - udate May 2025

It is an Antalis commitment to protect the personal data of all employees and job candidates sharing personal data with the company. With the aim to inform you about your rights and also on the different initiatives put in place by Antalis to protect your personal data, we have created this Privacy Notice, which we have structured in the following 10 chapters. It is important that you read and understand it.

1. Who we are
2. Who does this privacy notice apply to?
3. What information is covered?
4. The information we collect and how we use it
5. Data Retention
6. International Transfers
7. Disclosures
8. Service providers
9. Keeping your information up to date
10. Your rights

1. Who we are

Antalis is a French Société par Actions Simplifiée, registered with the Commercial and Companies Trade Registry of Nanterre under number 410 336 069, and having is registered office at 8 rue de Seine, 92100 Boulogne-Billancourt (France).“Antalis Group” refers to Antalis SAS and each of its direct and indirect subsidiaries.
As part of our company values, we take very seriously the protection of the privacy of our employees and candidates. The Antalis Group is committed to collecting, maintaining, and using personal information in accordance with the provisions of data protection laws in the European Union and elsewhere.

Through its Code of Conduct, the Antalis Group recognizes the fundamental and inalienable right, for all individuals, to the protection of their private life and personal data. The Antalis Group implement the necessary procedures so that the collection and processing of personal data is performed in accordance with applicable law and with due respect of the individuals, as well as the security and confidentiality of their information.

The Antalis Group updates its processes in accordance to the EU Regulation 2016/679 on Personal Data Protection by setting up an internal program of data protection to sponsor a consistent standard across the Antalis Group when collecting, using, and managing personal information.

Standard across our ANTALIS Group when collecting, using and managing personal information.

The data controller(s) in respect of your personal information will be the Company or Companies within the Antalis Group, which shall be hereafter referred to as “ANTALIS” or ‘we”, “our”, “us”, where you are employed or are an active job candidate. This privacy notice explains how we may collect, use and disclose information about our employees and candidates and describes the rights you have in respect of your own personal information. The following information should help you understand the purpose of this document.

2. Who does this privacy notice apply to?

This privacy notice is applicable to all employees and candidates. The term “employee” is defined as a person working for Antalis under a contract of employment or assimilated (including trainees, apprentices etc.).

3. What information is covered?

In this privacy notice, “personal information” means any information (whether electronic or written) relating to an individual who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of such individual.

It also includes special categories of personal information (“special category data”) from which we can determine or infer an individual's racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, membership of a trade union, physical or mental health or condition (including biometric and genetic data), sexual life/orientation, or judicial data (including information concerning the commission or alleged commission of a criminal offence and any sentence or penalty imposed).

ANTALIS will only collect special category data if it is necessary for one of the purposes described below. Further information about when and why we may need to do this is set out in Section 4 “The information we collect and how we use it” below.

4. The information we collect and how we use it

ANTALIS may use your personal information for a variety of purposes, as outlined in the following sections.

We are committed to collecting and using only the personal information that is necessary for the management and administration of pre-employment, employment, and post- employment matters. Antalis uses Personal Data for business operations, employee development, information technology, administrative purposes, and when required in the course of judicial or administrative proceedings or otherwise by applicable law to protect the interests of Antalis and third parties, or with appropriate notification as required by law. Antalis may provide information about the employees to third parties for purposes related to employment or the administration of Antalis’ compensation, benefits and human resources programs.

One of our company’s fundamental values is based on trust therefore, you can also find more details about the purposes, the information we may collect, the source of the information and the legal authority relied upon by ANTALIS by sending a request to the following dedicated email dataprotection-HRHQ@Antalis.com.

Personal identification and personal status

At ANTALIS we collect and maintain a variety of information about our employees and candidates to enter into an employment contract or agreement with you and to meet our obligations under your employment contract or agreement. The personal data we collect may include some or all of the following:

Title	First Name	Last Name
Other Name(s)	E-mail	Gender
Date of birth	Photo	Address
Phone Number(s)	Bank Account Details	Emergency contact details
Social Security number	Nationality	Marital status
Next of kin	Job Role	Employment type
Department	Location	Employee ID
Salary, Taxes and Contributions	Bonus/Commission	Records of holidays, sickness, disability and other absence
Pension scheme records	Benefits records	Disciplinary and grievance records
Vehicle make(s)	Vehicle Registration Number(s)	Union membership

Career

We are committed to support our current and future employees to grow their talent and skills, we may collect details about your career during the course of your employment, for the purpose of employee’s development and career progression. This data may include but is not limited to:

Resume/CV	Diploma(s)	Reference check records
Pre-employment references	Awards	Training records/certifications
Appraisals	Performance reviews	Personal development plan
Talent reviews	Compensation reviews

IT, connection data and security

We believe in accountability and when permitted by applicable law, ANTALIS may record and/or monitor telephone calls made and received, electronic communications sent to or received by ANTALIS’s networks in order to protect our business and verify compliance with our policies and relevant legal requirements. Any such recording and/or monitoring will be carried out for lawful business purposes only and in accordance with applicable laws and regulations. This may include the following purposes:

Recording facts (including converting voice messages into text)
Establishing compliance with ANTALIS’s policies and procedures
Complying with applicable laws and regulations
For crime prevention / detection and investigating unauthorized use
To monitor the effective use and operation of ANTALIS’s networks and systems
For training and quality control

On or in our premises, your image may be captured on CCTV systems operated by ANTALIS or the entity which manages our premises. Building access control systems may also capture the location, time and date of your entry and exit of our offices.

The below data may be accessed:

IP Addresses	Logs	Call recordings
Video surveillance	Meta-data	Mail records

Location data

For the purpose of your employment contract and professional activities, we may provide you with tools/equipment’s such as: mobile phone, computer, cars, access badges, etc.

The below data may be collected:

GPS Tracking records

Mobile phone tracking

Business trip records

Cookies

If you use our websites, we share with you that they use cookies and other web traffic analysis tools (eg, Pixel Tracking, Google Analytics, etc.). Please note that each Antalis website might have different rules applied locally. You can verify these rules by searching the cookie policy available in the footnote of our websites.

For more information and reference you can consult our cookies- use-policy from Antalis corporate website.

5. Data Retention

Rest assured that ANTALIS will store your personal data for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information is collected, or as may be permitted under applicable data protection laws.

To determine the appropriate retention period, we will consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process the data and whether we can achieve those purposes through other means, and the applicable legal requirements.

ANTALIS will retain personal information only for as long as it is needed for the purposes described in Section 4 “The information we collect and how we use it”. Note that retention periods may vary in different jurisdictions. Personal Data is usually kept for a minimum period of 2 years.

We may need to retain information for significant periods of time in order to establish, exercise or defend our legal rights, and for archiving and historical purposes. Where possible and practical, personal information will be rendered anonymous through the removal, substitution or blocking of details which enable individuals to be identified.

6. International transfers

As a group operating on a global basis, like most international businesses, we have centralized certain aspects of our Human Resources administration and records management, sharing and opening great development opportunities of growth to our employees. As a result, your personal information may be transferred outside the country of origin (which includes transfers outside the European Economic Area) and may be accessed across ANTALIS on a global basis.

Trust is one of our TEAM VALUES by which we operate, therefore we will take all necessary security and legal precautions to ensure the safety and integrity of your personal information that is transferred within ANTALIS to allow for global transfers within ANTALIS of personal information originating in the EEA in accordance with applicable European Privacy Laws through the use of the same standards of protection for personal information. Your personal information will therefore be given the same level of protection regardless of our location within ANTALIS.
Bear in mind that your personal information will also be accessed by ANTALIS’s service providers who may be located in other jurisdictions. For more information, see section 8 Service providers below.

7. Disclosures

ANTALIS may disclose your personal information (i) where this is necessary for the stated purposes, including within ANTALIS itself; (ii) if required by applicable law; (iii) in connection with a reorganization, sale or merger, (iv) if we believe that such disclosure is necessary to enforce or apply terms of contract and other agreements or otherwise protect and defend ANTALIS’s rights, property or safety; (v) in order to comply with a judicial proceeding, court order or other legal obligation, or a regulatory or government inquiry; or (vi) with your consent. We would like to draw particular attention to the fact that in some jurisdictions, ANTALIS has a legal obligation to report suspicious transactions and other activity to relevant regulatory authorities under anti-money laundering, terrorist financing, insider dealing or related legislation. ANTALIS may also report suspected criminal activity to the police and other law enforcement bodies. We may not be permitted to inform you about this in advance of the disclosure, or at all.

Third party recipients of personal information relating to employees may include:
•   Tax and Customs & Excise authorities
•   Regulatory and other professional bodies
•   Stock exchange and listing authorities
•   Public registries of company directors and shareholdings
•   Providers of identity verification services
•   The courts, police and law enforcement agencies
•   Government departments and agencies
•   Auditors and professional advisers (including professional indemnity insurers and advisers)

We assure you that we will use all reasonable efforts to disclose the minimum personal information necessary in each case.

8. Service providers

Third parties providing services to ANTALIS are referred to as “Sub-contractors.” ANTALIS will put in place contracts with Sub-contractors which address the requirements of relevant privacy laws. Sub-contractors will be required to use appropriate security measures to protect personal information and will be prohibited from using personal information other than as instructed by ANTALIS.

Sub-contractors who process personal information on behalf of ANTALIS may be located in Europe or other countries around the world. ANTALIS will ensure that Sub-contractors comply with any applicable legal requirements for transferring personal information outside the jurisdiction in which it was originally collected. For data collected in the European Economic Area or which relates to data subjects in the EEA, ANTALIS will require Sub-contractors to execute the Standard Contractual Clauses for the transfer of personal information to third countries, as sanctioned under applicable European privacy laws.

9. Keeping your information up to date

ANTALIS makes every effort to maintain the accuracy and completeness of the personal information held by ANTALIS.
To help us ensure we have the most up to date information about you, it is important that you inform us of any updates to your contact details or other personal information.

10. Your rights

You have the following rights in relation to your personal information:

to access the personal information held by ANTALIS about you;
to have your personal information corrected, for example if it is incomplete or incorrect
in certain circumstances and subject to applicable law, the right to restrict or object to the processing of your personal information, or request that your personal information is erased;
- in certain circumstances and subject to applicable law, the right to receive a copy of the personal information which you have provided to ANTALIS, in a structured, commonly used and machine-readable format (known as “data portability”);
- where you have provided personal information voluntarily, or otherwise consented to its use, the right to withdraw your consent;
- the right to complain to a Data Protection Authority (see further below).

What if you are under 16?

If you are under the age of 16 or not of legal age in your country, please ensure that you have permission from your parents/legal representative before providing us with personal data about you. Minors under 16 years old or under the legal age in your country are not allowed to provide us with their personal data without such authorization.

Right to lodge a complaint

If our response does not satisfy you or if you believe that we are not processing your personal data in accordance with applicable law, you can lodge a complaint with the relevant data protection supervisory authority of your country.

Amendments to this declaration

This Privacy Notice has been updated in May 2025. We may make changes from time to time or modify it as necessary to comply with any applicable data protection law. You may wish to review it again on an ad hoc basis. Any changes to any provision of the Privacy Notice will apply from the date of publication on our websites.

Query

Please, be sure you understood well the content of this privacy notice. Should you have a query about it or should you wish to exercise your rights please contact us by sending a request to the following dedicated email dataprotection- HRHQ@Antalis.com