SNCF Group Ethics Whistleblowing System

Why submit a report?

The relationship of trust between the SNCF Group and its employees, customers, suppliers and partners is of the utmost importance. It involves high ethical standards and compliance with laws and regulations.

You may be aware of behaviours or risks, which could pose a threat to our Group, its employees or its stakeholders. Your report, if proven to be well-founded, will enable us to identify them in good time, to avoid damage to rectify them or to improve our organisation as a whole.

We need to offer you, the author of this report, protection. That is why we provide you with this secure communication platform. Your data will be protected and you will be able to remain anonymous.

Anyone using the SNCF Group whistleblowing system in good faith cannot be excluded from recruitment procedures or from access to an internship or a period of professional training, be punished, dismissed or be the subject of direct or indirect discriminatory measures, in particular with regard to remuneration, profit-sharing or distribution of shares, training, reclassification, assignment, qualification, ranking, professional promotion, transfer or contract renewal.

However, if the reports are found to have been made in bad faith, in particular if they are made with the intention of discrediting one or more natural or legal persons, or if they are deliberately misleading, their authors may be subject to disciplinary proceedings and/or legal proceedings.

What reports can be submitted?

You may submit reports concerning alleged or proven breaches of laws, regulations or the SNCF Group's Ethics Charter or other internal regulations, as well as any unlawful acts relating to the following topics:

• Discrimination and moral harassment
• Sexual harassment or sexual and gender-based violence
• Violation of social and labour standards/illegal or fictitious employment
• Violation of occupational health, hygiene and safety regulations
• Violation of environmental protection regulations
• Violation of human rights and fundamental freedoms
• Corruption/influence peddling/conflict of interests
• Misappropriation of assets/money laundering/fraud/falsification of books and records
• Anti-competitive policy or transmission of confidential information
• Breach of applicable rules on the protection of personal data
• Other unethical practice including neutrality and secularism

For more information on these topics or on the reporting process, please refer to our Whistleblowing Guide.

This system is not intended to receive and deal with:

• A rail safety emergency which would pose a significant and immediate threat to human health, safety or life, or which could result in extensive and irreparable material damage. In such cases, it is imperative to contact the local authorities or the emergency numbers (Police, EMS, Rescue, Fire Service, etc.) in force in the country as a matter of priority.
• Any request related to the updating of workplace risk assessments in the Safety at Work Platform (STP) or to failures to comply with prevention measures imposed by it.
• Any request to consult the Single Document of your entity or to make remarks concerning it.

In the last two cases, it is imperative that you make your requests directly to your managerial line for rapid handling.

How does a report work and how do I confirm my postbox?

If you wish to send a report, either by name or anonymously, click on ‘Submit report’ on the top left-hand side of the homepage.

The reporting process involves four stages:

1. You must read the information about protecting your personal data and answer a security query (Captcha system).
2. After answering the security query, you will be taken to a page where you will be asked to indicate the category of your report.
3. On the reporting page you will need to answer questions about the case. You can also complete your report in writing. You can also attach any type of file to document this. After sending your report, you will receive a receipt with a reference number.
4. Next, please confirm your own secured postbox. It will allow you to receive our feedback and answer any potential questions.

If you have previously submitted a report and already have a secured postbox, you can access it via the ‘Login’ button. Once again, you will first have to answer a security query.

As long as you do not provide any information that can be used to trace your identity, the BKMS^® System (Business Keeper Monitoring System) will technically guarantee your anonymity.

How can I receive a response while remaining anonymous?

The SNCF Group uses the BKMS^® system on this platform. Certification for its level of data protection is provided by an independent organisation.

When confirming your secured postbox, you choose a user name and password yourself. Encryption and other security measures guarantee that your report and the information contained in it remain anonymous at all times.

As long as you do not provide any information that can be used to identify you, the BKMS^® system will technically protect your anonymity. You can also choose to remain anonymous in the dialogue matrices submitted to you.

An authorised person from the SNCF Group will correspond with you via a secured postbox.

You may be asked for further information if there are any details that need to be clarified. You will be informed of the outcome of your report.

Your personal data will remain protected at all times during the exchange.