QUADIENT - 2020 Universal Registration Document

RISK FACTORS AND INTERNAL CONTROL Internal control and internal audit procedures

Ethical reference framework

APPLICATION OF THE SAPIN 2 LAW French Sapin II law which went into force on 1 June 2017 requires large companies to implement an anti-corruption compliance program within all their subsidiaries. The anti-corruption compliance program involves the adaptation of the code of ethic in order to define and illustrate prohibited acts and behaviours likely to characterize acts of corruption or of influence peddling. Such code of ethic have been incorporated into internal applicable rules and regulations of each Group company. To comply with the legal requirements, Quadient Group ensure that: the code of ethic is made available to and understood ● by all employees; sanctions are imposed for breaching the code of ● conduct and notably for corruption and influence peddling; a training including a quizz on code of ethics has been ● performed for all employees; the Sapin II law risk assessment has also been updated ● in 2020. Within the technology and innovation department, the information systems teams are continuing the harmonization of the ERP (1) /CRM (2) within the Group. Moreover, to support the deployment of SaaS-based Communication and Shipping Solutions (CSS), the Group’s platform has been enhanced to offer subscription models to clients. The security of information systems is a major focus for Quadient. This need for security is even greater with the deployment of new SaaS solutions. With that in mind, the Group established a specialized structure whose purpose is to ensure the roll out of the security policy and ultimately to ensure the compliance of all structures marketing digital offers under ISO 27001. At the core of information systems, data management is paramount. By harnessing Big Data technologies, Quadient is developing solutions to improve internal operations and providing solutions to clients. In this regard, the Group is ensuring that employee or client data management is compliant with the new GDPR regulations which will become effective from May 2018. To ensure such compliance, a focused structure was established in 2017 with the support of an expert in the field. Information Systems

The integration of new activities and the strategic shift that the Group has made in recent years has led him to redefine its values to better reflect its organisational identity: THE GROUP’S ETHICAL PRINCIPLES The Group put in place its code of ethic and published it early 2017. Based on Quadient’s new corporate values, the code of ethic lays down the main ethical standards and behaviours that the Group wants to promote in its relations with its customers, suppliers, investors, partners and employees. The Group’s code of ethic lays out the key values which are then rolled out at each subsidiary. It is then the responsibility of each subsidiary to follow through with the necessary reminders to observe local regulations and practices in effect. The code of ethic covers the following topics: respect for fundamental human rights; ● commitment to employees (health, work safety, ● diversity, open dialogue, employability, etc.); business integrity: antitrust regulation, conflict of ● interest, bribery, insider trading, relation with third party; Group assets and third party assets: asset protection, ● confidential data and data protection, intellectual property; responsible citizenship and commitment. ● A person in charge has been appointed for each topic: employee (Group human resources), fraud and conflict of interest (Director of internal control), bribery and competition (Group legal counsel), responsible citizenship and commitment (Group Director of quality). A whistle-blowing procedure has been set up at each level. Operational management of each entity is in charge of communicating and applying of code of ethics.

4

(1)

Enterprise Resource Planning.

(2)

Customer Relationship Management.

99

UNIVERSAL REGISTRATION DOCUMENT 2020

Made with FlippingBook flipbook maker