SANOFI Corporate Privacy Policy for External Candidates

During the recruitment procedure, SANOFI may process data that directly or indirectly identify you such as:

• Identification data (e.g. name, date of birth, gender, age, postal address, e-mail address, telephone number, your profile on a professional social media platform, audio and video of the interview, etc.)
• Data related to your personal life (e.g. your hobbies, your family status, etc.)
• Data related to your professional life (e.g. your education and work experience, etc.)

SANOFI may also process information regarding your internet connection and the equipment you use to access our recruitment websites, and usage details, such as your Internet Protocol (IP) address, account credentials (username & password).

Where relevant, necessary and authorized by law, the Personal Data processed may include sensitive personal data (e.g. religion, health information, etc.).

For some roles and if the legislation of your country authorizes it, information about criminal convictions and offences may be processed.

SANOFI collects your Personal Data directly from you, when you:

• Create an account and profile on our websites 
• Fill in forms 
• Share your resumé
• Share Personal Data during interviews

Your Personal Data may be collected from third parties, for instance recruitment agencies or the colleagues that you provided as your reference.

Where allowed by law, we may collect personal information from public sources including social media, public websites, publications, etc.

SANOFI may process your Personal Data for the various purposes set out below.

Purpose 1: Make a pre-selection of candidates

Based on legitimate interests and in order to perform precontractual measures, SANOFI may use your Personal Data to consider your application. Therefore, your Personal Data is used to assess your profile and create a shortlist of candidates. 

Purpose 2: Select candidates 

Based on legitimate interests and in order to perform precontractual measures, SANOFI may use your Personal Data to manage the recruitment process. Therefore, your Personal Data is used to respond to your application, to conduct interviews, and check your background and references, and any other relevant documents (immigration, diplomas, identity). 

SANOFI maintains clear boundaries between personal and business interactions. Therefore, regarding the employment of relatives, no preferential treatments are afforded to candidates related to employees.

During the recruitment process, if you provide personal information of a professional reference, such as a colleague, we assume that you had their permission to do so.

Where authorized by the law, the interview may be recorded. 

Purpose 3: Manage the pre-hiring process (Onboarding process)

In order to perform precontractual measures, SANOFI may use your Personal Data to adjust a recruitment offer and prepare contractual documents, to set up your arrival (IT, etc.) and to prepare your onboarding. During this pre-hiring phase, SANOFI may process Personal Data such as your family status, current compensation and benefits, and other financial information. The aim is to produce a compensation proposal that is relevant. 

Purpose 4: Constitute a data base of applications 

Based on its legitimate interests, SANOFI may retain your Personal Data on records to let you know about other opportunities or consider you for other job openings.

Purpose 5: Comply with legal obligations 

SANOFI may process your Personal Data to respond to legal requests from administrative or judicial authorities, in accordance with applicable laws and regulations.  

SANOFI will process your Personal Data to comply with the applicable legislation, including the legislation regarding employment and social security, immigration.

Only the persons who are involved in the recruitment and onboarding process have access to your Personal Data. SANOFI may transfer your Personal Data to third parties involved in the recruitment process. SANOFI imposes to third parties adequate technical and organizational measures and safeguards, including contractual relations to ensure the protection of your Personal Data, according to applicable data protection Law. 

The recipients may include:

• SANOFI’s employees and its affiliates that are involved in the recruitment process 
• Our partners and processors (interim agencies or external recruiters)
• Legal and administrative authorities, as required by applicable laws 

SANOFI is a multinational organization with affiliates, partners and subcontractors located in many countries around the world. For that reason, SANOFI may need to transfer (via access, visualization, storage..) your Personal Data in other jurisdictions, including from the European Economic Area to outside the European Economic Area, in countries which may not be regarded as providing the same level of protection as the jurisdiction you are based in.

In cases where SANOFI needs to transfer Personal Data outside the European Union, it shall ensure that adequate safeguards, as required under applicable data protection legislation, will be implemented (including, notably, the European Commission’s Standard Contractual Clauses, as applicable).

In the case of intra-group transfers of Personal Data, SANOFI shall apply its “Binding Corporate Rules” validated by the EU Data Protection Authorities. 

Your Personal Data will be kept as long as necessary to complete the recruitment procedure.

If you are hired, your data will be processed for the performance of your Labor contract, SANOFI acting as your Employer, and you, as an Employee.

If you are not the chosen candidate, and unless you object, SANOFI may keep those Personal Data longer in order to manage our data base of applications but no more than two years after our last interaction (the duration may be shorter in some countries due to local legislation). 

External candidates can request a purge of their data in Workday (“Delete my information” self-service in the applicant management tool). 

Personal information, such as your work experience, that allow us to assess your profile are necessary. Without it we may not be able to consider your application.

We do not intend to process Personal Data for any other purpose that is listed in this Privacy Policy. However, should processing of Personal Data for purposes other than those for which the Personal Data was initially collected occur, we will comply with the requirements pursuant to applicable laws.

SANOFI has implemented a variety of technical and organizational procedures and measures to ensure the integrity and confidentiality of your Personal Data from unauthorized access, use and disclosure. These measures take into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

For instance, we store your Personal Data on servers that have various types of technical and physical access controls, which may include, for instance, if appropriate, encryption. We may also aggregate, pseudonymize or anonymize Personal Data to ensure that no personally identifiable information is communicated to third parties.

You may, where required by applicable law and subject to limitations which may apply by exceptions or legal requirements, be entitled: 

• To have access upon simple request to your Personal Data. You may receive a copy of such data; unless it is directly available to you, for instance within your personal account in the applicant management tool
• To obtain a rectification of your Personal Data should your Personal Data be inaccurate, incomplete, or obsolete
• To obtain the deletion of your Personal Data in the situations set forth by applicable data protection law (“right to be forgotten”)
• To withdraw your consent, at any time, to data processing without affecting the lawfulness of processing, where your Personal Data has been collected and processed on the basis of your consent
• To object the processing of your Personal data, where your Personal Data has been collected and processed on the basis of legitimate interests of SANOFI, in which case you will need to justify your request by explaining to us your particular situation
• To request a limitation of the data processing in the situations set forth by applicable law
• To request that some of the Personal Data you provided to us is brought to you, or to another data controller, in a commonly used, machine-readable format

While we suggest that you contact us beforehand, you are entitled to lodge a complaint with your local Data Protection Authority regarding the processing of your Personal Data.

If you would like to exercise any of these rights, please contact us as described in the “How to Contact Us” section below.

SANOFI welcomes any questions or comments you may have regarding this Policy or its implementation. Any such questions or comments should be submitted using the following here.

Sanofi US (Sanofi-Aventis U.S. LLC and Sanofi US Services Inc.) respects the interest that visitors to our websites have in understanding what information is collected electronically, how it is collected, to whom it is or may be disclosed and how it is used. Sanofi US has developed this online privacy policy to address those questions.