Universal Registration Document 2024

SUSTAINABILITY REPORT 4 GOVERNANCE MATTERS

In accordance with its duty of vigilance, ADP SA maps the risks of infringement of Human Rights and fundamental freedoms, the health and safety of individuals, and the environment, resulting from the activities of contractors or suppliers with whom the company has an established commercial relationship. Each type of purchase (450 purchasing segments covering all the products/services used by the company) has been the subject of a risk assessment covering ten areas of environmental risk and four areas of social/Human Rights/ fundamental freedoms risk.

Purchasing risk mapping is used to measure ADP SA's level of exposure, influence and dependence in these purchasing segments. The risks identified are differentiated according to their position in the supply chain and the Group’s ability to remediate the risk under applicable law. The capacity to influence is evaluated based on the type of order (catalogue or customised), the supplier (wholesaler, producer) and the amount. It can be interpreted as the client's ability to define its requirements of the supplier to a greater or lesser extent and to exercise an expected level of control over the value chain.

Grouped into purchasing families for greater clarity, this analysis highlights the following key risks (see table below, ADP SA scope):

Potential damage to health, safety and Human Rights in labour-intensive contracts, such as on-site services, is moderate, given: u French social regulations. In 2024, 96% of ADP SA's suppliers were based in France; u prevention and mitigation measures in place. The impact of the activities of ADP SA's suppliers on climate change (including risks linked to carbon emissions) is the subject of an in-depth assessment demonstrating the need to take this risk into account in a proportionate manner for all purchasing families (but mainly the building and infrastructure works, airport equipment and IT and telecoms purchasing families). This creates opportunities for willing partners, who appreciate the measurement, empowerment and recognition of these initiatives.

ADP SA's main risks are: u upstream of the value chain for airport equipment and energy; u during the performance phase for services and works; u at the end of the waste treatment chain. [See the duty of vigilance matter in section 4.2.5 of this report on the circular economy and waste treatment] None of the services purchased generates an "extreme" risk such as explosives or ore extraction. The identification of purchasing risks has been implemented using an identical method and a shared framework as part of the analysis of CSRD IROs, corresponding to the environments of all the subsidiaries in the consolidated scope. The main risks are illustrated in section [S2-ESRS 2 SBM-3-11].

487

UNIVERSAL REGISTRATION DOCUMENT 2024 w AÉROPORTS DE PARIS