PSA_GROUP_REGISTRATION_DOCUMENT_2017

DECLARATION ON EXTRA-FINANCIAL PERFORMANCE Corporate sustainable Development Commitment

incorporation of privacy by design and privacy by default „ principles into the methods: the Group is adapting its processes for treating personal „ data (making the opt-in option general for example) and has drafted guidelines for auditing these treatment processes before they are implemented, the Group has introduced specific governance (internal and „ subcontractor audits) and stipulates in its contracts that its partners and suppliers demonstrate the same level of commitment to data protection, the Group has updated its data protection policy and its „ guidelines for auditing the treatment processes for personal data, the Group conducted an audit and compliance project on „ these activities during the second half of 2017 to ensure full compliance in the first quarter of 2018; notification of security loopholes; „ strengthening individuals’ rights over their data (the right to be „ forgotten, the right to data portability, strengthening transparency and systematically informing all individuals on their rights, obtaining the informed consent of consumers regarding the use of their data, etc.): the Group is working to ensure a standard approach across the „ Group for the collection and administration of personal data in the management of relations with customers by centralising all personal data and the related customer consents in one single database so that consumer requests can be dealt with more efficiently in relation to the exercise of their rights. In particular, it is standardizing: all data protection references in its various contracts: „ purchase orders, after-sales services, connected services, Internet forms, etc, management of consents from prospective customers and „ customers by establishing a consent policy and acquiring an IT tool to centralise these;

the Group has also developed the sales methods used to „ inform customers on how their personal data is processed, in particular when handing over a connected vehicle (explanations of the new communication devices and how they can be disconnected); stepping up the controls and sanctions by the regulatory „ authorities (as a percentage of worldwide revenue). The Group has also drafted and distributed internal guidelines for best practices. The Group is also running employee training and awareness sessions which are also offered at the points of sale. Once the process of validating the European Regulation started, we updated internal training materials for Group employees. A working group was set up with Group operating units and human resources to identify and train employees exposed to compliance with the Regulation. Thus, a dedicated e-learning training programme for managing personal data was taken by almost 2,500 employees in total by end-2017. Finally, the Group is constantly improving the security of its data storage and exchange networks and uses the latest cybersecurity techniques to protect itself from malicious intrusion. Consumer credit The distribution of consumer credit, which accounts for nearly 70% of loans distributed by Banque PSA Finance and its subsidiaries and branches (approximately 70% of these loans went to customers and 30% to dealers), has been subject to specific legislation to protect consumer rights, particularly in the European Union since the adoption of the Consumer Credit Directive 2008/48/EC, which has now been transposed into national law by the various EU member states. This directive creates stricter obligations for advertising, pre-contractual information, solvency studies of borrowers and contractual information, all of which have been implemented by Banque PSA Finance and its affected subsidiaries and/or branches.

Partnerships and sponsors to promote regional and/or local 2.3.3. community development DPEF.31 DPEF.33

Groupe PSA is often one of the largest private employers in areas where it has an industrial presence. As a core economic player, the Group assumes its social responsibility commitments in its various territories. The Group is firmly convinced that mobility is a global societal challenge and a fundamental right. Mobility goes hand in hand with economic development. It is a cause of autonomy, progress and innovation. Groupe PSA’s commitment is demonstrated through the actions of its Corporate Foundation and deepened by the

discussions that take place within the Laboratoire de la Mobilité inclusive. The mobility access experiments conducted also allow the Group to explore new, more inclusive business models; The PSA Foundation lends its support to projects putting mobility to work to promote social integration, strengthen social ties and expand access to culture and education. In 2017, it supported 91 projects for a total amount of €2.3 million. Detailed information is available in Section 7.2 of the Group’s CSR Report on the PSA Foundation site: www.fondation-psa.com

67

GROUPE PSA - 2017 REGISTRATION DOCUMENT