The protection of your personal data at the heart of Renault Group's ethics

Compliance with regulations on the protection of personal data is an opportunity to strengthen the trust between Renault Group and its stakeholders (shareholders, customers, suppliers, employees). As trust is a value that Renault Group particularly values, the protection of personal data is one of our ethical benchmarks in the conduct of our actions.

To this end, Renault Group has launched a regulatory compliance programme based on governance, processes and tools dedicated to the protection of everyone's personal data.

As part of this programme, Renault Group has :

- Appointed a Group Data Protection Officer, responsible for ensuring compliance with the rules for protecting your personal data throughout the Group;
- Established internal policies on the protection of personal data and set up a training programme for its employees;
- Implemented procedures to enable youtoexercise your rights with regard to your personal data.

Thetransparent use of your personal data

In the course of its business, Renault Group may collect, use and store some of your personal data, i.e. information that can be used to identify you. Renault Group intends to ensure the greatest possible transparency with regard to the processing of the personal data that you provide to it or the personal data that it collects through the various contacts that you may have with it.

The purpose of the Group's information policies relating to data protection is to inform you of the conditions under which your personal data is processed by Renault Group, as well as the rights and options you have to control your data and protect your privacy.

Renault Group uses your personal data in particular to manage its relationship with you, improve its products and services, manage its research and development activities and organise its events.

More detailed information on the processing of your personal data, in particular the procedure to follow in order to exercise your rights, is made available to you at the time of collection of your personal data, on each Group website (Information on the protection of your personal data), mobile application or contractual documentation that will be provided to you.
For information relating to personal data that we collect automatically, such as IP address and cookies, a cookie policy is also available on each Renault Group website or mobile application.

Use of your personal data in compliance with obligations
Renault endeavours to comply with all applicable obligations relating to the protection of personal data.

In this respect, Renault Group ensures that each processing of personal data complies with the principles set out in the applicable regulations:

- Renault Group undertakes to collect and process your personal data for explicit, legitimate and specific purposes in connection with its various activities (Specific purpose).
- Only the data strictly necessary to carry out the activity is collected (Minimisation)
- The data is accurate, complete and, where necessary, kept up to date (Relevance of data).
- A data retention policy is defined, and at the end of the retention periods, the data is destroyed or anonymised (Limited retention).
- An activity creating a high risk for the rights and freedoms of individuals is subject to a prior impact study (Impact study).
- Data protection is integrated "by design" (privacy by design) and "by default" with a high level of protection (privacy by default).
- Data is secured and kept confidential (security).
- Each processing operation is based on a legitimate basis laid down by law (lawfulness).
- Relations with our partners and service providers are controlled and data transfers are regulated.

Use of your data in complete security

Renault Group works to ensure the security of all your personal data for as long as it is held, in particular against any unauthorised use or disclosure. To this end, Renault Group implements physical and logical security measures appropriate to the sensitivity of the personal data and the processing carried out, and in compliance with the rules of the art and the standards imposed on it.

If, despite all these measures, you notice that some of them have been the subject of a security incident, you can inform us at any time at this address: list.databreach@renault.com. We will then take the necessary measures to put an end to this incident.

Renault enables you to exercise your rights

Renault Group does everything in its power to ensure that you have control over your personal data.

The rights you have under the GDPR are as follows:

A right to erasure (or the right to be forgotten): you have the right to have your data erased or deleted. This right may be limited in the light of our contractual obligations (current contract) or legal obligations (prevention of legal action in particular).

A right to object to the processing of your personal data, subject to justifying reasons relating to your particular situation, and a right to request the limitation of the processing of your personal data, in certain cases provided for by the regulations.

A right to object to any commercial canvassing: you may at any time ask not to receive any further communications relating to our offers, news and events. This right can be exercised via the unsubscribe link included in each prospecting email. You may also object to being profiled.

A right to withdraw your consent at any time, for the purposes for which we have collected your consent.

A right to information: you have the right to obtain clear, transparent and comprehensible information on how we use your personal data and on your rights. This policy is an example.

A right of access to your personal data : you have the right to obtain information about the processing of your personal data (in particular the data that is used, for what purposes, etc.) and a copy of it.

A right of rectification: you have the right to have your data rectified if it is inaccurate or incomplete, despite our efforts to keep it up to date. This will enable us to comply with our obligation to keep your data up to date.

A right to the portability of your data, i.e., under certain conditions, the right to receive the personal data you have provided to us, in a structured, commonly used computer format, and to have it transmitted to a third party if this is technically possible.

You also have the right to contact the Data Protection Authority in your country to lodge a complaint against Renault Group's data protection and privacy practices. We encourage you to contact us before making any complaint, so that we can try to resolve your concern together.

If you wish to exercise these rights or if you have any questions or complaints regarding the processing of your personal data, we invite you to contact us via the contact details mentioned in the information notices applicable in your country.

This policy may be updated from time to time. You are therefore invited to consult it regularly.