Universal Registration Document 2020

3.9.7 Report by one of the Statutory Auditors, appointed as independent third party on the consolidated non-financial statement

This is a free English translation of the Statutory Auditor’s report issued in French and is provided solely for the convenience of English-speaking readers. This report should be read in conjunction with, and construed in accordance with, French law and professional standards applicable in France.

For the year ended 31 December 2020

To the Annual General Meeting,

In our capacity as Statutory Auditors of your company (hereinafter the “entity”) appointed as independent third party, and accredited by the French Accreditation Committee (Comité Français d’Accréditation or COFRAC) under number 3-1049⁽¹⁾,
we hereby report to you on the consolidated non-financial statement for the year ended 31 December 2020 (herein after the “Statement”), included in the Management Report pursuant to the requirements of articles L. 225-102-1,
R. 225-105 and R. 225-105-1 of the French Commercial Code (Code de commerce).

Responsibility of the entity

The Management Board is responsible for preparing the Statement, including a presentation of the business model, a description of the principal non-financial risks, a presentation of the policies implemented considering those risks and the out comes of said policies, including key performance indicators.

The Statement has been prepared in accordance with the entity’s procedures (herein after the “Guidelines”), the main elements of which are presented in the Statement and available upon request at the entity’s head office.

Independence and quality control

Our independence is defined by the requirements of article L.822-11-3 of the
French Commercial Code and the French Code of Ethics (Code de déontologie) of our profession. In addition, we have implemented a system of quality control including documented policies and procedures regarding compliance with applicable legal and regulatory requirements, the ethical requirements and French professional guidance.

Responsibility of the Statutory Auditor appointed as independent third party

On the basis of our work, our responsibility is to provide a report expressing a limited assurance conclusion on:

• the compliance of the Statement with the requirements of article R. 225-105 of the French Commercial Code;
• the fairness of the information provided in accordance with article R.225-105 I, 3^° and II of the French Commercial Code, i.e., the outcomes, including key performance indicators, and the measures implemented considering the principal risks (herein after the “Information”).

Our responsibility is also to provide a report expressing, at the request of the entity and outside of the scope of accreditation, a reasonable assurance conclusion that information selected by the entity, presented in Appendix 1 and identified with the symbol √ in chapter 3 has been prepared, in all material respects, in accordance with the Guidelines

However, it is not our responsibility to comment on the entity’s compliance with other applicable legal and regulatory requirements, in particular the French duty of care law and anti-corruption and tax avoidance legislation nor on the compliance of products and services with the applicable regulations.

Nature and scope of our work

The work described below was performed in accordance with the provisions of Article A. 225-1 et seq. of the French Commercial Code, as well as with the  professional guidance of the French Institute of Statutory Auditors (Compagnie nationale des commissaires aux comptes or CNCC) applicable to such engagements and with ISAE 3000⁽²⁾ :

• We obtained an understanding of all the consolidated entities’ activities, and the description of the principal risks associated;
• We assessed the suitability of the criteria of the Guidelines with respect to the irrelevance, completeness, reliability, neutrality and understandability, with due consideration of industry best practices, where appropriate;
• We verified that the Statement includes each category of social and environmental information set out in article L. 225-102-1 III as well as information regarding compliance with human rights and anti-corruption and tax avoidance legislation set out in article L. 22-10-36;
• We verified that the Statement provides the information required under article
  R. 225-105 II of the French Commercial Code, where relevant with respect to the principal risks, and includes, where applicable, an explanation for the absence of the information required under article L. 225-102-1 III, paragraph 2 of the French Commercial Code;
• We verified that the Statement presents the business model and a description of principal risks associated with all the consolidated entities’ activities, including where relevant and proportionate, the risks associated with their business relationships, their products or services, as well as their policies, measures and the outcomes thereof, including key performance indicators associated to the principal risks;
• We referred to documentary sources and conducted interviews to:

• We verified that the Statement covers the scope of consolidation, i.e. all the consolidated entities in accordance with article L. 233-16 of the French Commercial Code within the limitations set out in the Statement;
• We obtained an understanding of internal control and risk management procedures the entity has put in place and assessed the data collection process to ensure the completeness and fairness of the Information;
• For the key performance indicators and other quantitative outcomes that we considered to be the most important presented in Appendix 1, we implemented:

• We assessed the overall consistency of the Statement based on our knowledge of all the consolidated entities.

We believe that the work carried out, based on our professional judgment, is sufficient to provide a basis for our limited assurance conclusion; a higher level of assurance would have required us to carry out more extensive procedures.