SANOFI Privacy notice

Regarding the organization of Innovation Challenges

 

Last update: November 2025

 

SANOFI understands the importance of privacy and the protection of personal data and is committed to ensure protection and security of personal data at every level within its organization.

The processing of personal data is a key component of SANOFI’s relationship with you as SANOFI is accountable for the processing of your Personal Data, acting as Controller.

Under data protection laws we’re required to provide you with specific information regarding how SANOFI is processing your personal data.

 

1. Personal Data

 1.1. What type of personal data does SANOFI process?

Personal data SANOFI processes about you may include your first name, last name, professional email address, professional phone number, picture, video, audio and video recordings, company, job title, location, qualifications, and the content you produce regarding the collaboration on scientific or technical projects (ie Innovation Challenges), and – if applicable – your vote to elect to most suitable candidate to the challenge

 

1.2. How does SANOFI collect Personal Data?

SANOFI collects and processes your Personal Data from its database and directly from you while using our technology tools and services and via the information that you provide to the platform of our trusted service provider (ie Agorize) linked to the Innovation Challenge. 

The participation to this challenge is on a voluntary basis. Please note that if you refuse to communicate your personal data or object to its processing, SANOFI may not be able to grant you access, to submit ideas and to further run the Innovation Challenge with regards to the project you submit.

 

2. Why does SANOFI process your Personal Data?

 

We collect your personal data for two different reasons:

 

2.1. The holding the Innovation Challenge

 

The aim of an Innovation Challenge is about:

    • Either to mobilize SANOFI employees or external contributors for the completion of a challenge 
    • Or the identification of the best start-ups or academic labs to address Sanofi scientific/technical challenges

which consists in the achievement of goals which match SANOFI ambitions and key priorities.

 

You’ll be asked to submit innovative ideas through a specific form which is available through the platform of our trusted service provider Agorize. Experts & jury of SANOFI will pre-select projects based on the submitted forms. This pre-selection will be done through Agorize platform. Shortlisted projects teams will then be asked to prepare a deliverable (e.g. a presentation or a video pitch) which will be uploaded on Agorize platform.

 

2.2. The selection of the most suitable project

 

The selection of the most suitable project will happen:

    • Either via experts & jury of SANOFI who will select the most suitable project among a shortlist of proposals which are available via the platform of our trusted service provider (ie Agorize). 
    • Or SANOFI employees will be asked to vote for projects among a shortlist of proposals which are available via the platform of our trusted service provider (ie Agorize). Please note that the vote is confidential – and not anonymous – as it is available to the team which is conducting the Innovation Challenge and our trusted service provider (ie Agorize) for the performance of the Innovation Challenge.

We will process your personal data on the following lawful basis:

    • On the execution of the contract we signed with the trusted service provider (ie Agorize),
    • On the legitimate interest of SANOFI regarding the mobilization of SANOFI employees or external contributors
    • On the consent provided by representatives of start-ups or academic labs which address Sanofi scientific/technical challenges when registering to the Agorize platform 

3. Who will have access to your Personal Data?

By default, collected personal data is only available to the team which is conducting the Innovation Challenge and our trusted service provider Agorize.  Please note that we can also share your personal data with: 

-    Other departments throughout SANOFI, including Security, EHS, P&C, Legal, IT, internal audit and where required by law 
-    Trusted third parties, such as our professional advisors and auditors, security partners, digital partners 
-    Local or foreign regulators, governments and law enforcement authorities. 

 

4. How long does SANOFI keep your Personal Data?

SANOFI always keeps your Personal Data for the period required by law and where it is needed to do so in connection with possible legal action or an investigation involving SANOFI. 

According to the Personal Data processing the applicable retention period is 3 months after the end of the project. Collected personal data will be removed from Agorize ecosystem at the end of this retention period.

Submitted projects and its related personal data will downloaded by SANOFI in its ecosystem and archived during 24 months in case of any further activation of other projects. Collected personal data will be removed from SANOFI ecosystem at the end of this retention period.

 

5. Your Privacy and Data Subject Rights

You have rights SANOFI needs to make you aware of. You may, where required by applicable law and subject to limitations (which could apply by exceptions or legal requirements locally applicable), be entitled:

  •         To have access upon simple request to your Personal Data. You may receive a copy of such data unless it is directly available to you, for instance within your personal registration.
  •         To obtain a rectification of your Personal Data if inaccurate, incomplete, or obsolete.
  •         To obtain the deletion of your Personal Data in the situations set forth by Privacy Laws (‘right to be forgotten’).
  •         To object to the processing of your Personal Data, where your Personal Data has been used based on SANOFI’s legitimate interests, in which case you will need to support your request by explaining your situation.
  •         To request a limitation of the Personal Data Processing Activity in the situations set forth by Privacy Laws.
  •         To request that some of the Personal Data you provided to SANOFI are brought to you, or to another Controller, in a commonly used, machine-readable format.

If you would like to exercise any of these rights, please use SANOFI’s contact form to open a Data Subject request.  You are also entitled to lodge a complaint before your local data protection authority regarding the processing of your personal data or before our local data protection authority regarding the processing of your Personal Data (ie Commission Nationale de l'Informatique et des Libertés (lit. 'National Commission on Informatics and Liberty').

 

6. Who is responsible for managing your Personal Data?

The personal data is collected and processed under the control of Sanofi Winthrop Industrie (82 avenue Raspail, 94250 Gentilly, France; registered under RCS number 775 662 257).