Privacy Policy

Last updated: October 2026

Havas is committed to protecting your privacy and personal data.

01Purpose

This policy informs you of our data processing practices and how your personal data is collected and used by Havas. Please read it all the way through. This policy is linked from the bottom of each page of this website. Havas is committed to protecting the right to privacy and data protection, and to complying with national and international data protection laws. Havas is committed to maintaining the confidentiality of any personal data and to strictly limiting its disclosure in accordance with national laws and current regulations.

This policy applies to Havas subsidiaries, including Havas Media Middle East, acting in their capacity as data controller.

02Definitions

The terms below have the following meaning, in both the singular and plural:

• Personal data means any information relating to an identified or identifiable natural person, directly or indirectly, within the meaning of the Regulations.
• Data subject means a natural person whose personal data is processed by Havas.
• Regulations means the privacy regulations applicable to the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”), and any national data protection laws that apply.
• Data controller means a natural or legal person who determines the means and purposes of the processing of personal data within the meaning of the Regulations.
• Processor means a natural or legal person who processes data on behalf of the data controller in connection with a service.
• Website means the Converged website on which this policy is published, operated by Havas Media Middle East.
• Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

03How do we process your personal data?

This policy applies in all Havas subsidiaries in their capacity as data controller, unless national legislation provides for specific rules.

When you browse and interact with the Website, and in general during your interactions or exchanges with Havas, Havas may collect and process your data in order to manage activities conducted on its own account, as data controller.

Havas respects the right of each individual, employee, applicant, customer, supplier, partner, administrator, subscriber, prospect or internet user to have their personal data protected. Havas observes the principles defined by the Regulations:

• processing your personal data fairly, lawfully and in a transparent manner;
• collecting your personal data for explicit, specified and legitimate purposes, and not processing it further in ways incompatible with those purposes;
• ensuring that the personal data collected is relevant, proportionate and not excessive with regard to the purposes for which it is collected and processed. Personal data may be anonymised when feasible and appropriate, depending on the nature of the data and the risks associated with the intended uses;
• keeping your personal data accurate and up to date where necessary. We will take reasonable steps to rectify or delete inaccurate or incomplete data;
• keeping personal data only for the time necessary for the purposes for which it is collected and processed;
• processing personal data in accordance with the rights of individuals;
• taking technical, physical and organisational measures to secure your data and prevent unauthorised access, unlawful processing and unauthorised or accidental loss, destruction or damage of personal data;
• processing your personal data in accordance with the legal bases for processing, including collecting consent when required.

04What types of personal data are collected?

In its capacity as data controller, Havas collects and processes your personal data after informing you accordingly. Personal data is any information relating to an identified or identifiable natural person. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity. This policy does not cover data rendered anonymous, that is, when individuals are no longer identifiable or are identifiable only with a disproportionately large expense in time, cost and labour. If anonymous data becomes identifiable, or if pseudonyms are used and allow individuals to be identified, this policy will apply. It is up to you whether or not to disclose personal data to us. However, if you choose not to do so, we reserve the right not to register you as a user or not to provide you with the requested service.

In general, your personal data is collected directly from you, but it may also be collected from third parties.

The types of personal data we process include:

• your identification data (first name, last name, pseudonym, gender, email address, postal address, telephone number and, where applicable, photograph and social media profile);
• your professional data (your educational and professional background for job applicants, your job title, your company);
• your login data (your IP address and, where applicable, your online ID and your Havas online user password);
• your browsing data and expressed preferences (traffic and browsing history on Havas websites, and data from cookies and trackers on Havas websites).

Except where required by specific legal obligations, we do not collect so-called “sensitive” personal data or special categories of personal data.

In general, and with some exceptions, the use of Havas websites and Havas pages on social networks is reserved for adults.

05Purposes, legal bases and retention periods

In accordance with the Regulations, the personal data we collect is used for the purposes for which it was collected, for the period of time indicated in the table below.

If litigation or proceedings, particularly legal proceedings, are initiated before the end of the above periods and require the retention of personal data, in particular for the establishment, exercise or defence of rights, that personal data will be retained for the duration of the proceedings and until all legal remedies are exhausted.

06Who receives your data?

Your personal data may be disclosed to staff in the following departments, according to their powers and authorisations, and only where necessary for their activity and the purposes strictly pursued:

• Internal recipients: General Secretariat, Communication, Legal, Finance and Accounting, Purchasing, Business Development, Digital, IT, General Services and Human Resources departments.
• External recipients: the hosting providers of our websites, our auditors and statutory auditors, our legal advisers, our insurers, our duly authorised partners, service providers and subcontractors we may use to carry out our activities, tax and social security bodies, public authorities, court officers and ministerial officers where applicable.

For further information on the Havas group, please visit havas.com.

07Data transfers

Your personal data collected and processed for the purposes described above may in certain cases be transferred to companies in other countries, including outside the European Union and outside the country in which it was collected. Some of these countries provide an adequate level of data protection.

In other cases, transfers of your personal data are governed by appropriate safeguards to ensure the confidentiality and security of the transferred data. In this regard, Havas may conclude contractual clauses with the recipients of that data, in accordance with the recommendations of the European Commission, to ensure appropriate safeguards are in place. Where the legislation of the destination country does not provide protection equivalent to that offered by the Regulations, we will ensure that additional measures are implemented to guarantee a level of protection essentially equivalent to that provided in the European Union, and that this protection is effective.

Transfers of personal data outside the European Union are also lawful where, in particular, (i) the transfer is necessary for the performance of a contract between the data subject and the data controller, or for pre-contractual measures taken at the data subject’s request; (ii) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the data controller and another natural or legal person; or (iii) the data subject has given explicit consent to the proposed transfer, after being informed of the risks the transfer could entail due to the absence of an adequacy decision and appropriate safeguards.

08Security and subcontracting

Havas places particular importance on the security of your personal data. Havas has therefore implemented technical and organisational measures tailored to the nature of the personal data, to ensure its integrity and confidentiality and to protect it against malicious intrusion, loss, alteration or disclosure to unauthorised third parties. Nevertheless, the security and confidentiality of personal data depend on everyone’s good practice, and we encourage you to remain vigilant.

When Havas uses a processor, we only disclose personal data to it after obtaining a commitment and guarantees from that processor regarding its ability to meet security and confidentiality requirements, and after entering into a written contract with it.

09Third-party websites and social networks

Havas websites and services may provide links to third-party applications, products, services or websites to facilitate your browsing and for your information. If you follow these links, you will leave the Website. Havas does not control these third-party websites or their privacy and data protection practices, which may differ from ours. We do not finance or represent any of these third-party websites and accept no responsibility for their content or their personal data practices. Personal data you choose to provide through such websites, or which is collected by such third parties, is not covered by this policy. We encourage you to review the privacy policy of any website you interact with before allowing your personal data to be collected and used.

We may also provide links to social networks that allow you to share information with your own networks and interact. When you use these links, information about you may be collected or shared. We encourage you to review the privacy policies of the social networks you interact with to find out what information may be collected, used or shared. If you post, comment, indicate interests or share personal data in any public forum, social network, blog or similar forum, any personal information you post may be collected or used by other users of those forums and networks. Havas cannot be held liable for such third-party uses, which are not its responsibility.

10Cookies and trackers

The Website uses Google Tag Manager, a tag management service provided by Google, to load analytics and measurement tags. These tags may set cookies or use similar technologies on your device to understand how visitors use the Website. Where required by the Regulations, we only set non-essential cookies and trackers with your consent. You can also block or delete cookies at any time through your browser settings.

11Your personal data rights

Havas is particularly concerned with respecting the rights granted to you in connection with the processing it carries out, to guarantee fair and transparent processing with regard to the particular circumstances and context in which your personal data is processed.

Right of access

You have the right to obtain confirmation as to whether or not your personal data is being processed and, where it is, to request a copy of your data and information concerning:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
• where possible, the envisaged retention period of the personal data or, where this is not possible, the criteria used to determine that period;
• the existence of the right to request from the data controller rectification or erasure of your personal data, restriction of its processing, and the right to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• information about the source of the data where it was not collected directly from you;
• the existence, where appropriate, of automated decision-making, including profiling, and in that case meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing.

Right to rectification

You can ask us to correct or complete your personal data if it is inaccurate, incomplete, ambiguous or outdated.

Right to erasure

You can ask us to erase your personal data in the cases provided for by the Regulations. The right to erasure is not a general right and can only be granted where one of the grounds provided for in the applicable Regulations applies.

Right to restrict processing

You may request that the processing of your personal data be restricted in the cases provided for by the Regulations.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data whose legal basis is the legitimate interest pursued by the data controller.

If you exercise this right, we will no longer process your personal data for the processing concerned, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Right to data portability

You have the right to data portability with regard to your personal data. This is not a general right: it applies only to automated processing, not to manual or paper processing, and only to processing whose legal basis is your consent or the performance of a contract or pre-contractual measures.

Right to withdraw consent

Where our processing is based on your consent, you can withdraw it at any time. We will then stop processing your personal data, without affecting the lawfulness of processing carried out before you withdrew consent.

Right to lodge a complaint

You have the right to lodge a complaint with the data protection supervisory authority in your country of residence, without prejudice to any other administrative or judicial remedy.

How to exercise your rights

You can exercise your rights by contacting the Havas Data Protection Officer:

• by email at dpo@havas.com;
• by post to: Havas Data Protection Officer, 29/30 quai de Dion Bouton, 92800 Puteaux Cedex, France.

We will reply as soon as possible and in any event within one month of receiving your request. Where necessary, we may extend this period by two months, taking into account the complexity and number of requests, and we will inform you if we do so.

12Changes to this policy

Havas reserves the right to amend this policy where necessary, for example to comply with changes in law or regulation, in Havas practices and procedures, or with requirements imposed by data protection authorities. The updated policy will be published on the Website. Please check it regularly.

If you have any questions or comments about this policy, please contact the Havas Data Protection Officer using the details in section 11 above.