Financial sustainability

Data are the business foundation of the EOS Group. This is why we employ around 90 people across the Group to constantly improve data protection and information security. With the help of monitoring tools, we were able to identify and stop around 600 attempted attacks in 2022/23 alone. As part of the new “Iron EOS” program, we are currently establishing a protection system that will enable us to respond not just quickly but also in a coordinated way across the entire Group.

The EOS Group is involved in 23 European debt collection associations and various initiatives to help create strict and binding standards and responsible guidelines in the debt collection sector. 

To eliminate irregularities, the EOS Group also operates a platform that offers whistleblowers a protected space and is integrated in the mechanism of the Otto Group. There, employees, suppliers, service providers and customers can report compliance violations at EOS and in the Otto Group. None of the five cases reported in 2022/23 were substantial or necessitated a countermeasure.

The business in non-performing loans calls for a high degree of responsibility. As part of a family company, the Otto Group, we are also mindful of pricing that meets the interests and ethical standards of all parties in the long term. For example: In partnership with the World Bank subsidiary International Finance Corporation (IFC), EOS will invest more than €100 million in non-performing loans and real estate in Eastern Europe within three years, in compliance with ESG (Environmental, Social and Governance) standards. 

When choosing partners and customers, EOS also applies strict criteria. This includes not just the regular checks of partners and companies in respect of how they handle issues like human rights, money laundering and corruption, but also an industry blacklist.

Our Code of Conduct for service providers, which contains the UN SDGs and clauses from the Supply Chain Duty of Care Act, ensures fair handling by and with suppliers.

Protecting the data of staff and clients is essential. EOS France therefore makes it a point to raise awareness and offer training for its staff on the principles of personal data protection (security, privacy, minimisation, fair and lawful collection, etc.) and IT security through different channels:

• In-person training for operational staff members as part of their onboarding.
• An e-learning module within three months of arrival for new staff members.
• Awareness campaigns are sent out by email and broadcast on on-site digital screens. Thus, regular refreshers on the GDPR rules to follow and rules pertaining to data security are given.

As cyberattacks are getting increasingly common and sophisticated, the IT department of EOS France regularly raises awareness among staff via internal training:

• An e-learning module is included as part of the compulsory training programme. Refresher modules are sent out annually and updated based on the current affairs and new threats.
• Awareness campaigns are sent out by email and broadcast on on-site digital screens.
• Phishing test campaigns are sent out (at least twice a year), the results of which are shared with all staff.

Ensuring that client payments are trustworthy is essential for EOS France. For this reason, an e-learning module on anti-money laundering and combating the financing of terrorism has been developed in-house. This module, which includes a quiz, raises awareness for new employees upon their arrival, encouraging them in particular to be extremely vigilant when processing payments from debtors (considering the issuer, amount, source of the funds, etc.).