Welcome to the reporting portal of Boiron

Pursuant to our rules of ethics and applicable legal provisions, this platform is designed as a secure space to submit reports and have secured exchange messages. It is accessible to all employees and third parties as described in the internal report system.

Submit a report

Please note that your alert must be serious and factual to be admissible.

It is important to accurately and truthfully recount the facts witnessed and statements made in order to avoid any risk of defamation or disciplinary/legal action.

For your information, the admissibility of your alert will be assessed based on the following points:

Does the report describe a prejudiciable situation?
Do the reported facts contravene the law, regulations, or our ethics rules?
Is any other documentation added to the report (eg photo, document, video, etc.)?
Has the report been made in good faith and without direct financial consideration?
Did the author of the report have personal knowledge of the facts reported, if the information was acquired outside the professional context?

In order to respect the confidentiality and legitimate rights of our employees and stakeholders, all reports will be subject to rigorous analysis and a detailed internal audit.

For the processing of alerts, BOIRON collects the following personal data: surname, first name, position, telephone number, e-mail address.

As the data controller, BOIRON undertakes to process this data in accordance with current regulations on the protection of personal data, in particular Regulation (EU) No. 2016/679 (GDPR) and the French Law nᵒ 78-17 of January 6, 1978 relating to information technology, files and freedoms.

The collection of this data is based on a legal obligation, with the purpose of collecting and processing alerts or reports aimed at revealing a breach of a specific rule. In accordance with the applicable legal provisions, you may exercise the following rights: right of access, right of rectification, right to limit processing by contacting the Data Protection Officer (DPO) of BOIRON at the following address: dpo@boiron.fr. You may also lodge a complaint with the competent authority. In the context of the present processing, data is kept for a period of two months from the closure of the verification operations or until the end of the procedure and the statute of limitations for appeals against the decision in the event of litigation.

Access an existing report

List of case managers

Baudry Juliette Group Human Resources Director

Navarra Julien Group Head of Legal

Sommet Marion Legal Manager- labor law division

Mardirossian Laurent Legal Manager- corporate and compliance division

Useful documentation

User guide

BOIRON Centralized internal alert system

Important

By clicking on the "Make a report" button, you can report conducts or situations contrary to the general interest of which you have personal knowledge or which you have witnessed.

Your identity will be kept confidential during the entirety of the process, including at the time you submit a report, during the review, and after the decision has been issued.

Can I raise a report anonymously?

You can raise a report anonymously. However, we recommend that you identify yourself, as your identity will remain confidential throughout the entire whistleblowing report process.

What happens after a report is raised?

After you raise the report , the platform generates a unique password that you must keep in order to keep track of your report and access the secure e-mail system from the home page.

You will also get a notification:

• confirming that your alert has been received;

• of the measures under consideration or taken to assess the accuracy of your report

• of the measures taken to process the report

The time taken to process your report varies and depends on the complexity of the facts or events reported and on the type of the supporting material provided. All exchanges on the platform are fully encrypted and can be accessed by clicking on the "Access an existing report" button and entering your password

Is my report confidential?

Reports are received and processed in a way that guarantees the strict confidentiality of:

• your identity;

• the identity of the person(s) implicated in the report;

• any third party mentioned in the report;

• the documents, information or data collected in the context the alert.

All persons with knowledge of the content of a report must take all necessary measures to ensure the security and confidentiality of any information or documents provided, not only when it is received but also during the investigations and as long as such information is retained. They are also bound by a heightened contractual confidentiality undertaking

How is the admissibility of my report assessed?

The admissibility of your report will be assessed in particular with regard to the following criteria:

• Are the facts or events reported contrary to the law, regulations or our ethics documents?

• Are the facts or events reported described in sufficient detail?

• Has the report been raised in good faith and without direct financial incentive?

To know

Each report has its own discussion system that allows messages to be sent and received. These exchanges take in account the choice of the notifiting party, if he/she has decided to remain anonymous.

Only designated referents will receive the information contained in the form that you are going to complete and send us. You will be able to track your report and communicate with the referent(s) with the confidential code that is generated by the platform when you submit your report.

Each report will be subject to rigorous analysis and a detailed internal audit.