PRIVACY NOTICE REGARDING THE HOLDING OF A PLANET CARE CHALLENGE APPLICATION TO SANOFI EMPLOYEES

SANOFI understands the importance of privacy and the protection of personal data and is committed to ensure optimal protection and security of your personal data. This notice outlines the information about how SANOFI processes your personal data. This privacy notice should be read in conjunction with the local employee privacy notice, if any.

 

WHAT PERSONAL DATA WE COLLECT ABOUT YOU? 

The personal data we process about you are: your first name, last name, professional email address, Business Unit or global function, country, vote and the ideas generated for the Planet Care Challenge.

 

HOW WE OBTAIN YOUR PERSONAL DATA? 

We collect and process your personal data while using our technology tools and services and via the information that you provide to the platform of our trusted service provider (ie Agorize) linked to the Planet Care Challenge. The participation to this challenge is on a voluntary basis. Please note that if you refuse to communicate your personal data or object to its processing, SANOFI may not be able to grant you access, to vote and/or to submit ideas in the platform.

 

WHY WE PROCESS YOUR PERSONAL DATA? 

We collect your personal data for the holding of the Planet Care Challenge. The purpose of the Planet Care Challenge is to identify, develop and prepare the implementation of new solutions for the environment in a collaborative and agile manner between Sanofi employees and collaborator of external partners.

This initiative will help in minimizing the environmental impacts of our products throughout their life cycle, engaging our people, patients and partners to transform healthcare practices for a more sustainable future, and mobilizing our workforce for environmental sustainability by promoting an environmentally-conscious culture in the workplace.

You’re asked to vote for projects among a shortlist of proposals which are available via the platform of ourtrusted service provider (ie Agorize). Please note that your vote is confidential – and not anonymous – as it is available to the team which is conducting the Planet Care Challenge and our trusted service provider (ie Agorize) for the performance of the Planet Care Challenge.

We will process your personal data to execute the contract we signed with the trusted service provider (ie Agorize) and for the legitimate interest of SANOFI.

 

HOW LONG YOUR DATA WILL BE RETAINED? 

We always keep your personal data for the legally permitted time period, i.e. 3 months after the closing of the Planet Care Challenge unless further retention is necessary to meet legal or regulatory requirements or to the protection of SANOFI’s interests. Collected personal data will be removed at the end of the retention period.

 

WHO WILL HAVE ACCESS TO YOUR DATA? 

By default, collected personal data is only available to the team which is conducting the Planet Care Challenge and our trusted service provider for the performance of the Planet Care Challenge. Please note that we can also share your personal data with: 2/2 Internal

  • Other departments throughout SANOFI, including Security, EHS, P&C, Legal, IT, internal audit and where required by law
  • Trusted third parties, such as our professional advisors and auditors, security partners, digital partners
  • Local or foreign regulators, governments and law enforcement authorities

 

WHAT ARE THE SECURITY MEASURES TO PROTECT YOUR PERSONAL DATA?

SANOFI has implemented a variety of technical and organizational procedures and measures to ensure the integrity and confidentiality of your personal data from unauthorized access, use and disclosure.

These measures consider the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk and severity for the rights and freedoms of individuals. These procedures and measures are also implemented by the trusted service provider (ie Agorize) for the performance of the Planet Care Challenge.

WHAT ARE MY RIGHTS CONCERNING MY PERSONAL DATA? 

In accordance with the rights granted to you by law, you are entitled to :

  • access by simple request to your personal data – in which case you may request to receive a copy of your personal data, unless such personal data is made available to you directly
  • request a rectification of your personal data if such is inaccurate, incomplete or obsolete
  • obtain the deletion of your personal data in the specific cases provided for by law
  • obtain a limitation of the processing of your data in the specific cases provided for by law
  • if applicable, receive your data in a standard format for transmission to another controller
  • to lodge a complaint with your data protection authority: France: Commission nationale de l'informatique et des libertés (lit. 'National Commission on Informatics and Liberty').

 

WHO TO CONTACT FOR QUERIES? 

To exercise your rights as set out above, please go this website to identify your privacy officer: Our Privacy Officers (sharepoint.com).  

 

WHO IS RESPONSIBLE FOR YOUR DATA PROCESSING? 

The personal data is collected and processed under the control of SANOFI PASTEUR SA 14 Espace Henry Vallée, 69007 Lyon.