PRIVACY POLICY

This privacy policy (hereinafter the "Policy") aims to inform visitors or users (hereinafter the "User") of the website www.pionniers.veolia.com (hereinafter the "Site") about the protection of their personal data in accordance with Law No. 78-17 of January 6, 1978 on information technology, files and freedoms as amended by the law of June 20, 2018, Decree No. 2019-536 of May 29, 2019 and Regulation No. 2016-679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter collectively the "Regulation").

The publisher of the Site is the company, Veolia ENVIRONNEMENT SA, a public limited company with a capital of 3,576,919,375 euros, registered with the RCS of Paris under number 403 210 032, with its head office Environnement whose registered office is at 21, rue la Boétie - 75008 Paris, France (hereinafter the "Publisher").

The Policy may be modified at any time by Veolia, in order to comply with any regulatory, jurisprudential, editorial or technical developments.

This Privacy Policy is an integral part of the General Terms of Use of the Site.

The methods of collection and processing of information collected through cookies are set out in the "Cookie Policy".

Identification of the data controller

The data controller for the User's personal data is the publisher.

Description of processing activities

As part of the operation of the Site, the Publisher may collect and process personal data in order to allow the User to access the features and services offered by the Site (hereinafter the "Services").

1) What categories of data are collected?

- Data voluntarily published by the User: refers to the personal information voluntarily communicated by the User to the Publisher using social networks to share the content of the site or to follow Veolia's accounts on social networks (hereinafter "Published Data").

All of this data is collectively referred to as the "Data".

2) Why does the Publisher collect User's Data?

The Data is collected for the purpose of ensuring the proper functioning and administration of the website.

3) On what legal basis are the processing activities of User's Data based?

The processing of Data is only lawful if it is based on one of the legal bases defined by the Regulation. As part of the operation of the Site, the processing activities are based on the following legal bases:

- Veolia's legitimate interest.

- Consent obtained through a checkbox.

4) Recipients of the collected Data

The collected Data is intended for the internal services of the data controller.

This may include, for example, the "Communication" department, Veolia staff responsible for publishing content and the technical administration of the Site, and their hierarchy, authorized service providers, Site Users, and Veolia's information systems security control staff.

Internal recipients may also be entities of the Veolia Group located in the European Union (EU) or outside the EU, provided that any transfer of Data outside the EU will be carried out in accordance with the conditions of the article "Transfer of Data outside the European Union" below.

Each recipient subsidiary may, as the case may be, act as a data processor or data controller for the communicated Data.

The Data may also be transferred/used by third parties under the following conditions:

- Data transferred to authorities and/or public bodies
In accordance with applicable regulations, the Data may be transmitted to the competent authorities upon request, including public bodies, exclusively to meet legal obligations, legal auxiliaries, ministerial officers and organizations responsible for debt collection, as well as in the event of the search for perpetrators of offenses committed on the Internet.

- Data communicated to third parties
The Data may be communicated or made accessible to subcontractors, suppliers, and third-party service providers of the Publisher (such as the Site's host, Veolia's IT and/or technical service providers).

- Social networks
The User has the option to share pages of interest on social networks by clicking on sharing buttons. The collection of information through social media sharing buttons is subject to the privacy policies of these third parties and our cookie policy. We invite you to read the policies of these social networks to understand how your personal data is used.

Exercise of User's rights

In accordance with the Regulation, any individual User has the right to access, rectify, delete, and limit the Data concerning him/her.

For all processing operations carried out as part of the Site and only within this framework, regardless of the data controller, the User may exercise his/her rights,

- by writing to dpo.vesa@veolia.com or

by mail to: Veolia - Communication Department, 30, rue Madeleine-Vionnet, 93300 Aubervilliers

upon sending proof of identity, or any other official document.

In case of difficulty regarding the management of his/her personal data by the Publisher, the User may contact Veolia's Data Protection Officer (email address: dpo.vesa@veolia.com). If the DPO's response is not satisfactory, the User may file a complaint with the competent supervisory authority at the following address: CNIL - 3, place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.

The Publisher reminds that the User may, for legitimate reasons, object to the processing of Data concerning him/her.

When the processing is based on consent, the User has the possibility to withdraw his/her consent at any time by sending an email to dpo.vesa@veolia.com.

It should be noted that if the User exercises certain rights mentioned above, the Publisher may be unable to perform the necessary actions to achieve the purposes described above, or the User may not be able to use all or part of the Services.

The Publisher is obliged to keep the Data collected from Users up to date. It is therefore recommended that the User inform the Publisher of any changes to his/her information by sending an email to the following address: dpo.vesa@veolia.com.

Retention period and archiving of data

User's Data will not be retained beyond the period strictly necessary for the purposes stated herein and in accordance with the Regulation.

In this regard:

- Data collected on social networks are kept for a maximum period of 25 months from the activation of Cookies by the User on the website.

The Data is kept in intermediate archiving to allow Veolia to defend itself in the event of possible legal actions or for the purposes of prevention and detection of criminal offenses, in order to provide this Data to the judicial authority.

At the end of the intermediate archiving period, the User's Data will be permanently deleted.

In addition, the Publisher may retain Data in a permanently anonymized form for the purpose of producing statistical studies. In no case do these studies allow the identification of Users, and they only concern trends based on aggregated Data.

Security

The Publisher takes appropriate technical and organizational measures to ensure the security of the Data and to prevent unauthorized access or disclosure of the User's Data. However, the Publisher cannot guarantee the elimination of any risk of diversion, alteration, unlawful reproduction, or misuse of the Data.

The Database created when registering User's Data is strictly confidential. Veolia undertakes to take all necessary precautions, organizational and technical measures to preserve the security, integrity, and confidentiality of the Data and in particular, to prevent them from being distorted, damaged, or accessed by unauthorized third parties.