Key definitions
“Personal data” means any information relating to an identified or identifiable natural person.
“Data Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing.
“GDPR” or “General Data Protection Regulation” means Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
“Processor” means the natural or legal person which processes personal data on behalf of the Data Controller.
“Processing” means any operation performed on personal data.
Data Controller
Atos SE collects and processes your personal data in its capacity as Data Controller.
Data Protection Officer
Atos Group Data Protection Office: dpo-global@atos.net
Purpose of the processing
The Combined General Meeting will be held on 22 May 2026. Shareholders and non-shareholders, hereinafter collectively referred to as “participants”, will be able to attend live via a webcast made available by Atos.
Atos and its subcontractor, Company Webcast B.V., part of Euronext Corporate Services BV, process your personal data for the following purposes:
- Logging into and accessing the webcast platform
- Identifying participants (name, first name, email address, and status as shareholder or non-shareholder)
- Enabling interaction features (e.g. questions, polls)
- Producing connection and usage statistics (including viewing duration and interactions)
- Ensuring the proper functioning, security, and performance of the webcast service
Legal basis for the processing
Atos processes your personal data based on its legitimate interests, namely to:
- Ensuring secure and controlled access to the webcast
- Managing participation and interactions
- Monitoring performance, troubleshooting, and improving the webcast service
Categories of personal data
In relation to the purposes described above, Atos, acting together with its processor, collects and processes the following categories of personal data:
- Identity and contact data: title, surname, first name, email address, company (if applicable), language, role/status (shareholder or non-shareholder)
- Connection and usage data: date and time of access, duration of viewing, content viewed
- Interaction data: questions submitted, poll responses
- Technical data (via cookies or similar technologies): authentication and session identifiers, device-related information necessary for video delivery
Recipients or categories of recipients
Your personal data will be processed by the Investor Relations department and may also be processed by our partners involved in organising and/or broadcasting the webcast, in particular our webcasting processor Company Webcast B.V. (Engagestream solution). The Company Webcast/Engagestream privacy policy is available here.
Roles and personal data processing activities of the processor
As part of the webcast service, Atos remains the Data Controller and Company Webcast B.V. acts as a processor for hosting and operating the webcast platform.
- Data processed by the processor: contact data provided during registration (name, email address, possibly company information) and webcast usage/viewing data (date of viewing, viewing duration, parts viewed), as well as data entered when using interactive features (questions, polls).
- Processor purposes: administration/provision of the webcast service and assistance with use of the platform; development, testing and improvement of the product (Company Webcast indicates it does not use this data to contact you).
- Data sharing: Company Webcast shares contact data and usage data with Atos for reporting purposes; disclosures may occur if required by law and in the event of a transaction involving all or part of the provider’s assets/business.
- Cookies and similar technologies: the platform may place necessary functional cookies (in particular for registration and/or authentication and to remember participation in a poll); local storage technology (localStorage) may be used by the video player (Bitmovin) to determine the optimal video quality (with no personal data collected according to the provider’s privacy policy).
- Processor contact: for any questions about Company Webcast’s practices, the privacy policy mentions compliance@companywebcast.com
Access is strictly limited to people who need to process such personal data as part of their duties and for the purpose for which the data is processed.
Transfer outside the European Economic Area
There is no transfer of personal data outside the EEA.
Retention period
Your personal data is retained in accordance with applicable legislation and with appropriate security measures considering the processing operations. We retain your personal data for an appropriate period necessary to achieve the purposes described in this notice.
More specifically, the retention period for each purpose is as follows:
| Purpose | Retention period |
|---|
| Connection to the platform; creation of an identification file enabling Atos to know the title, last name, first name, email address and status of persons (shareholder or non-shareholder) connecting to the meeting or its replay (the “webcast”) | Two years from the date the meeting is put online, or any longer period that may be required by applicable legal provisions regarding the period during which the meeting recording may be consulted. |
| Producing statistics on connections to the webcast (connection, interaction and technical data) | Two years from the date the meeting is put online, or any longer period that may be required by applicable legal provisions regarding the period during which the meeting recording may be consulted. |
Data subject rights
Under applicable law, you have the following rights:
- Right of access: you have the right to ask us for a copy of your personal data.
- Right to rectification: you have the right to ask us to rectify personal data you believe is inaccurate. You also have the right to ask us to complete information you believe is incomplete.
- Right to erasure: if the processing is based on your consent, you have the right to withdraw your consent at any time and ask us to erase your personal data.
- Right to object: you have the right to object to the processing of your personal data.
Exercising your rights is free of charge. If you make a request, we have one month to respond from receipt of your request. In certain cases, depending on the complexity of the request, this period may be extended by two months.
If you would like more information about your rights, you can consult the CNIL website: www.cnil.fr. If you wish to exercise any of these rights, or if you have any questions about the processing of your personal data, you can contact our Data Protection Officer via this form.
How do we obtain personal data?
The personal information we process is provided directly by you.
Automated individual decision-making
No automated decision-making is carried out as part of this processing.
Automated individual decision-making
No automated decision-making is carried out.
Complaint
If you consider that Atos is not complying with its legal obligations relating to the protection of your personal data, you may lodge a complaint with the CNIL.
