DERICHEBOURG - Universal registration document 2018-2019

1

CSR report (serving as statement of extra-financial performance) Duty of vigilance

For example, as part of Facility Management services, MyDBox, a new customer request monitoring portal, has been set up, enabling requests to be monitored by means of the service catalog portal. It is possible to view whether the request is on-going, fulfilled or closed in real time in its environment and to view, via indicators, compliance with “Service Level Agreements” (SLA). The request declaration can be made through the portal, a mobile application, via QR codes or sensors (DOD Program – Derichebourg On Demand) according to the customer file organization and the proposed modules.

The data collected can also be made available in the customer’s tools, on BIM (Building Information Modeling) platforms or CAMM (Computer Assisted Maintenance Management) software for multi-technical maintenance. The information system developed for the Urban Area Solutions activity, Dclic enables real-time monitoring of service completion. Derichebourg Énergie has introduced Advizéo, a software program that enables energy consumption at customers' sites to be monitored. This year Derichebourg Propreté launched its new service monitoring tool, My Pilot, which provides customers with information regarding the monitoring of their services.

Duty of vigilance 1.8

This section describes the Derichebourg Group's duty of vigilance plan in accordance with the provisions of law no. 2017-399 of March 27, 2017 on the duty of vigilance. This is based upon “reasonable vigilance measures that are appropriate for identifying risks and preventing serious breaches of human rights and fundamental freedoms and protecting the health and safety of individuals and of the environment.” The policy is led by the secretary general through the CSR Committee and aims to cover all of the Group's activities. The committee meets three times a year and comprises permanent members (secretary general, Finance Department, Human Resources and CSR Departments) and experts in specific areas (insurance, legal). Its role is to monitor action plans and the effectiveness of the measures put in place, by using management indicators and the Group's internal control system. As part of this, the following tasks were completed. two mapping exercises identifying, analyzing and ranking risks such p as those defined in section 1.2: CSR risk mapping and the mapping of corruption risks in accordance with law no. 2016-1691 of December 9, 2016, known as the Sapin 2 law; procedures for regularly evaluating suppliers, customers and p subcontractors. The Group evaluates its most important stakeholders (customers and suppliers), both in terms of revenue and criticality, by using a questionnaire combining Sapin 2, CSR and duty of vigilance obligations. risk mitigation initiatives implemented within the Derichebourg p Group in respect of: health & safety ● As a committed employer, the Group has a safety policy that sets out ambitious targets (eradicating serious and fatal accidents, reducing the frequency rate of workplace accidents, introducing ISO 45001 certified management systems by 2022, preventing occupational illnesses, managing on-site fire risks, managing risks related to outsourcing its

activities as described in section 1.4.1 “Deploying a risk prevention policy to ensure the safety of employees and preserve their health”. environment ● In order to reduce its environmental footprint, the Group has initiated actions to reduce energy consumption both on its shredding lines (in particular, by using motors with improved energy performance) and by managing the transportation activity. In addition, the Group makes a continuous contribution to preserving natural resources by recycling metal waste and playing an active role in the circular economy. human rights ● Developing skills, keeping people in jobs, diversity and combating illegal work are also major aspects of the Group's HR policy. In addition, training and awareness-raising initiatives have been deployed for those employees most exposed to corruption-related risks. An ethics charter and a Code of Conduct have been distributed. The Group's general sales and purchasing conditions contain a CSR and anti-corruption clause. The Group has introduced its Code of Conduct incorporating the p whistle-blowing system following consultation with employee representative bodies. This code, which is intended for a wide-ranging audience (employees and third parties), is available on the Group's Internet and intranet sites. There is an email address (ethique@derichebourg.com) which allows the confidentiality of information communicated by means of this system to be guaranteed. In particular, its scope includes issues related to human rights, health and safety of people and environmental damage. The combined CSR, Sapin 2 and duty of vigilance questionnaire for p assessment of third parties has been sent to all suppliers identified as significant. This approach is currently being rolled out for customers. Responses are being monitored. The assessment of questionnaire responses will, in particular, enable the system's effectiveness to be measured.

DERICHEBOURG p 2018/2019 Universal Registration Document 52