This privacy notice provides information about how Sanofi collects and processes your personal data when you register for and/or attend one of our webinars or virtual events.
Should you decide to attend one of our webinars or virtual events, you may need to sign-up to the platform through which it is provided (such as Zoom, Microsoft Teams or SpotMe), and for your use of their service, they will be the data controller. To find information about how they process your personal data, please see their privacy information (e.g. for Zoom at https://zoom.us/privacy, Microsoft Teams at https://privacy.microsoft.com/en-us/privacystatement and SpotMe at https://spotme.com/app-privacy-policy/.)
Please note, we may use tracking pixels and other technologies to track when emails we send you in relation to a webinar or virtual event have been opened and which links in an email have been clicked. For more information, including how to turn off tracking pixels, see ‘What personal data do we collect about you?’ and ‘How will we use your personal data?’ below.
It is important you read this privacy notice together with our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland), which contains more detailed information about our data processing activities.
1. Who is Sanofi?
Sanofi is made up of different legal entities; in the UK and Ireland Sanofi conducts its business through Aventis Pharma Limited and Sanofi-Aventis Ireland Limited. When we mention “Sanofi” we are referring to the relevant company in the Sanofi group responsible for processing your data. For the purposes of applicable data protection laws, Aventis Pharma Limited and Sanofi-Aventis Ireland Limited are data controllers in respect of your personal data.
2. What personal data do we collect about you?
If you register for and/or attend one of our webinars or virtual events, we may collect and process the following personal data about you:
- data that you provide to register for the webinar or virtual event and/or to request further information about the webinar or virtual event, such as your name, email address, confirmation that you are a healthcare professional, professional registration number, work organisation, work address and speciality;
- data that you provide if you contact us about a webinar or virtual event, such as your name and contact details;
- data that you provide if you contribute to the webinar or virtual event, including by asking a question and/or through the poll, question and answer and/or chat functionality during the webinar or virtual event;
- data that you provide by responding to feedback requests, questionnaires and/or surveys after the webinar or virtual event;
- data that you provide in the event that you report an adverse event in relation to a Sanofi medicine; and
- data that we collect about your opening of the email (including time and date, your IP address, the location where you opened the email, the type of device, browser and operating system used to open the email) and the links you click on in the email. We collect this data through the use of tracking pixels and encoded URL strings that we may use in emails we send you about the webinar or virtual event. Tracking pixels are small image files which are embedded in emails and downloaded to your device when you load the pictures in an email. You can turn off pixels by turning off the images in the email itself. Encoded URL strings are pieces of code that are added to links. These do not use any technology (e.g. local storage, cookies etc.) to store or access data on your device. Through the use of tracking pixels and encoded URL strings we collect information.
3. How will we use your personal data?
We will only use your personal data for the purpose for which we collected it. We have set out below, in a table format, a description of the ways we may use your personal data, and which of the legal grounds we rely on to do so.
| Purpose/Activity | Legal basis for processing |
|---|---|
| To provide the webinar or virtual event, including to record your attendance, obtain your feedback and provide CPD certificates. If you register for or attend one of our webinars or virtual events, we may email you after the event to share copies of the slides and/or recordings of the webinar or virtual event. | Necessary for our legitimate interests (provision of the webinar or virtual event, complying with our regulatory obligations and developing our products/services). |
| To respond to your queries and requests. | Necessary for our legitimate interests (to respond to your queries and requests). |
| To gather and analyse your views and feedback. | Necessary for our legitimate interests (to develop our products/services). |
|
We may also use your data to personalise the way we communicate with you and the content of those communications (through all channels) to ensure they are in line with your preferences and relevant to your practice and interests. This may include combining your data with other information we may already have about you from other sources (e.g. from our interactions through other channels). It may also include analysing and predicting your preferences, interests and prescribing behaviours. We may use segmentation techniques to do this, which involves dividing our customers into smaller groups or “segments” that are likely to have similar preferences and interests, so that we can personalise our communications with you. |
Necessary for our legitimate interests (to develop our products/services and grow our business). |
| To manage and report adverse events and monitor the safety of our medicines. | Necessary to comply with a legal obligation. |
| To measure the performance and improve the content of our emails (for example, by ensuring that our emails are compatible with your type of browser or device). | Necessary to comply with a legal obligation. |
Please note, we may also record webinars and virtual events and any contribution you make to it, which we may share with attendees (as well as those that registered but could not attend) and also use the purposes of further education both internally and externally (such as on our websites or in other training materials or programmes). If you would like your contribution to be anonymous, please state this if you are submitting a question or query. By making a contribution to a webinar or virtual event you are giving us your consent to record that contribution and to use it for any purpose related to the subject of the webinar or virtual event.
If, when you register for a webinar or virtual event, you sign-up to receive email updates from Sanofi, we will also use your personal data in ways described in our separate Staying in Touch Privacy Notice (available here if you are based in the UK or here if you are based in Ireland). You may unsubscribe from receiving these emails at any time by following instructions which will be provided in each email.
4. With whom do we share your personal data?
We may share your personal data with: (i) other companies in the Sanofi group; (ii) selected service provider(s) (such as IT resource providers, research organisations, marketing agencies and CPD providers) who assist Sanofi in the processing of your personal data for the above purposes.
If you report an adverse event in relation to a Sanofi medicine, we may share your data with: (a) external service provider(s) who will process your data in compliance with their contractual obligations to Sanofi; and/or (iii) national and/or international health authorities and regulatory bodies. We may also contact you to discuss the adverse event further.
In the event that we share your data with any third parties, we will require that all such third parties: (a) undertake to comply with data protection laws and the principles of this Privacy Notice and our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland); (b) only process the data for the purposes described in this Privacy Notice and our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland) and in accordance with our instructions; and (c) implement appropriate technical and organisational security measures designed to protect the integrity and confidentiality of your personal data.
For more details about who else we may share your personal data with, please see our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland).
5. International transfers
Some recipients of your personal data may be located in countries outside the UK (if you are based in the UK) or the European Economic Area (if you are based in Ireland), which may not ensure the same level of personal data protection as the country in which you are located. For more details, please see our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland).
6. What rights do you have in respect of your personal data?
Under certain circumstances you have rights under data protection laws in relation to your personal data, including the right to object to use of your personal data where we are relying on a legitimate interest. You also have the right to make a complaint at any time to the supervisory authority for data protection issues. In the UK this is the Information Commissioner's Office (www.ico.org.uk) and in Ireland this is the Data Protection Commission (https://www.dataprotection.ie/). For more details on your rights, including on how to exercise any of these rights, please see our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland).
7. How can you get more information?
If you are looking for more information on how we process your personal data, including on data security and data retention, please see our Privacy Policy (available here if you are based in the UK or here if you are based in Ireland).
If you have any questions about this privacy notice or our data protection practices, please contact the relevant Sanofi Data Protection Officer using the details below:
Sanofi UK
Post: 410 Thames Valley Park Drive, Reading, Berkshire, United Kingdom, RG6 1PT
Email: GB-DataProtection@sanofi.com
Sanofi Ireland
Post: 18 Riverwalk, National Digital Park, Citywest Business Campus, Dublin 24, Republic of Ireland
Email: IEdataprotection@sanofi.com
Last updated: March 2023
Job bag number: MAT-XU-2301136 (v1.0)
Date of preparation: March 2023