Niagalé MAGASSA

Data protection - GDPR : • Support to the Group DPO • Contract analysis and negotiation • Operational support to Business teams • Support to the customer service team in handling data subject rights requests • Implementation of a Privacy by Design process • Update of the Group processing register • Management of local processing registers and implementation across subsidiaries • Management of disputes and incidents • Coordination of the network of GDPR champions across countries

Anti-corruption - Sapin II: • Steering and coordination of the migration of the Group third‑party assessment tool to a standardised version • Coordination of the project to redesign the Group Code of Conduct (script and translations) • Oversight and coordination of the update of Group e‑learning modules with internal and external stakeholders (script, translations, testing, deployment) • Coordination of the update and integration of local anti‑corruption risk maps (14 subsidiaries) and Group CSR risk mapping into the GRC tool • Support to Procurement and CSR teams in developing the supplier assessment process and the corresponding internal procedure • Participation in interviews for the Group accounting controls risk mapping • Management of the ethics hotline (whistleblowing) and internal investigations when required • Analysis, review, and negotiation of contractual clauses (ethics and anti‑corruption, international sanctions, CSR) and external Codes of Conduct • Annual review of compliance policies (third‑party due diligence, whistleblowing, internal investigations) • Management of gifts and hospitality declarations and annual reporting • Promotion of a compliance culture through targeted awareness initiatives, recurring training workshops, and communication of key updates • Preparation and facilitation of the local compliance officers’ network and compliance committees • Preparation and monitoring of the annual compliance plan (incl. budget)

• Oversight of the local Remediation Plan project: coordination and alignment between the French parent company and Eurofactor GmbH • Management of the EWRA campaign for sanctions and AML/CFT risk assessment (client, third-party, product, service, and country risks, as well as review of related internal policies) • Use, maintenance, and optimisation of the screening tool • Conducting investigations and, where necessary, escalating sanctions-related alerts • Development of Salesforce as a KYC/KYB tool (data collection, reporting model creation, enhancement of Fircosoft screening) • Delivery of training sessions (database screening, alert handling, and investigations) • Preparation of sanctions-related alert reports • Execution of compliance internal controls as part of the annual control plan • Preparation of compliance opinions (country risk, activity risk, and dual‑use goods)