Data Privacy Notice

Data Privacy Notice

Orange Engage for Change Site

Orange MEA S.A. (hereafter referred to as “Orange”), in its capacity as a data processor, places considerable importance on protecting the personal data of the individuals affected by the data processing operations it performs.

The purpose of the present Data Privacy Notice is to inform you of how Orange processes personal data in the context of using the Orange Engage for Change website.

What is the Orange Engage for Change site?

Engage for Change is a website available to Orange and related employees in our 17 countries in Africa and the Middle East, enabling them to discover projects with a social impact and to participate in commitment opportunities. Apart from this section dedicated exclusively to internal targets, the entire platform is accessible to the general public.

Why does Orange process your personal data and on what basis?

When you use the website, Orange processes your data for the purposes of:

Identifying Orange employees and personalizing their profile for taking part in the commitment opportunities offered by subsidiaries.

What personal data is processed?

The following personal data is processed in connection with the use of the site:

• Your data retrieved from the Group Intra-directory:

o Your identification data (name, gender, date of birth, department, country, hierarchical affiliation)

o Your contact data (e-mail and telephone number). Your e-mail is necessary to ensure that you are an Orange employee and to confirm your registration.

• Your interaction data (preferences for areas of action, targets & skills, testimonials following participation in a commitment opportunity)

Who has access to your personal data?

By virtue of their functions and within the limits of their respective attributions, collected data is intended for:

• Authorized internal departments within Orange: country administrator, Program Managers (CSR, ODC, Foundation), HR manager and contributors (CSR, ODC, Foundation) in order to manage requests for participation in commitment opportunities. The contracted service provider (Pixelium) processes the collected data according to Orange's instructions.

• The GOS entity, which hosts the Engage for Change platform database.

Please note that in accordance with current laws and regulations, data may be transmitted to the competent authorities, at their request, in their capacity as Authorized Third Parties.

How long is personal data stored?

Orange retains your personal data for as long as necessary for the operations for which it was collected, in compliance with the regulations in force. As such:

Your identification data (name, gender, date of birth, department, country, hierarchical affiliation) and contact data (e-mail address, business telephone number) are required to access and use the site, and are kept for as long as you have an active account on the Engage for Change site.

- Your interaction data with the administrators (e.g. comments made following your participation in an action) will not be kept if your comment is deleted.

What are your rights and how can you exercise them?

You have a right to access and rectify your areas of interest at any time, in particular via the "My profile/My areas of interest" section.

In cases where personal data processing requires your consent, please note that you may withdraw your consent at any time.

To exercise your rights, you may write to us and provide proof of your identity at measec.dpo@orange.com

Please note that you have the right to submit a request to the Commission Nationale de l'Informatique et des Libertés (CNIL), the oversight authority responsible for compliance with personal data protection obligations in France. We encourage you to contact us before making any request to the CNIL, so that we can try to resolve your problem together.

Contact information for the Data Protection Officer:

You can contact the Orange Data Protection Officer with any questions relating to the protection of personal data by e-mail: measec.dpo@orange.com

Is personal data transferred outside the EU?

Personal data collected and processed by Orange in connection with the use of the Engage for Change website is transferred outside the European Union.

In cases where personal data is transferred outside the European Union, Orange will take the appropriate measures, in particular contractual measures, to ensure the protection of your data and compliance with the applicable regulations on the protection of personal data.

How is your personal data secured?

Orange ensures that your data is treated with the utmost security and confidentiality, including when certain operations are carried out by subcontractors. To this end, appropriate technical and organizational measures are taken to prevent the loss, misuse, alteration or deletion of your personal data. These measures are adapted according to the level of sensitivity of the data.

Amendments to the present Data Privacy Notice

The present Data Privacy Notice may be subject to change.

Last updated: 05/15/2024