Who we are and what is this notice about.

Opella is a multinational group that includes Opella Healthcare with its affiliates and subsidiaries (collectively “Opella”).

Your Personal Data (or Data) is any information that is about you, or is related to you and used to learn, evaluate, or decide something about you. Opella understands the importance of privacy and the protection of Personal Data and is committed to ensure protection and security of Data we process.

This Global Privacy Notice explains how and why we may process your Personal Data as part of our recruitment process, when you interact with us as a job applicant (including active and passive candidates and job seekers).

If you interact with us in different capacities (e.g., as a visitor to our websites or a participant in an event) or if certain jurisdictions apply to you, please refer to the other relevant Privacy Notices on Opella.com for additional information.

Opella Healthcare Group SAS (“we”, “us”), a company with registered office in 157 avenue Charles de Gaulle, 92200 Neuilly-sur-Seine, France, is responsible for all recruitment activities within Opella and for all the relevant uses of your Personal Data in such context, as described in this Global Privacy Notice and according to applicable data protection laws.

What Data we collect about you and why.

The Personal Data we may collect about you belong to the following categories:

  • Personal identification data, such as name surname, preferred name;
  • Images, such as pictures on your CV, video recordings (in case of recorded interviews);
  • Contact details, such as home address, email addresses, phone numbers, and other contact information;
  • Communication information, such as email subject line and contents, IM contents, and other communications exchanged as part of the recruitment process;
  • Financial information, such as financial account data (bank account), financial transaction data (possible expenses occurred as part of the recruitment process);
  • Educational and professional qualifications, such as academic degrees or diplomas, professional certifications or licenses, training or workshop completions, scholarships or academic awards, membership in professional bodies, published works or research, relevant coursework or specialized training, examinations or tests passed, languages spoken;
  • Employment history and records, such as previous employers, dates of employment, positions held;
  • Evaluation and assessment data, such as job interviews feedback, notes, observations, results from aptitude or skills tests, assessment and self-assessment outcomes, performance appraisal scores;
  • Preferences and behavioral information, such as applications history, preferred job types and roles;
  • Travel, transport and mobility information, such as information about possible travel arranged or requested by us as part of the recruitment process.
     

In addition, in certain countries, we may process the following categories of data only when it is strictly necessary to comply with our legal or regulatory obligations, or to mitigate high-risks, and subject to completion of thorough risk assessments and adoption of state-of-the art security measures:

  • Medical, health and impairment information, limited to what it is strictly relevant to the recruitment process, such as information about any disabilities or impairments to ensure that reasonable accommodations during the recruitment process, or belonging to protected categories to which a specific job position may be dedicated;
  • Judicial information, such as background check information.
  • Self-identification information, such as gender, race, national or ethnic origin, veteran status, etc.


Depending on the type of position you are applying to and its scope, we may process such Personal Data for one or more of the following purposes:

  • to manage recruitment of employees, when, for example:
    • collecting application data: gathering information from resumes, cover letters, and application forms;
    • screening and shortlisting: identify the most suitable individuals for open positions;
    • job Interviews: coordinating and scheduling interviews with selected candidates, and performing phone, video, or in-person interviews to assess candidate suitability;
    • assessments and tests: administering skills tests, personality assessments, or other evaluations;
    • background and reference checks: verifying employment history, education, and conducting criminal background checks;
    • offer management: preparing and sending job offers to selected candidates;
    • holding candidates’ database: maintaining a global repository of potential candidates to be considered for future openings;
    • Improving the recruitment process: measuring recruitment performance, enhancing diversity and inclusion, and gauging satisfaction levels of both candidates and internal teams involved in the hiring process;
  • to manage travels and expenses, for example to organize on site job interviews and reimburse possible expenses to job applicants;
  • to fulfill our legal, regulatory, ethical and compliance obligations, for example with regards to transparency, managing conflicts of interest and alerts reporting, fighting against fraud, conducting internal investigations, audit, managing conflict of interest reporting, fulfilling our equal employment obligations;
  • to establish, exercise or defend our legal rights, for example to handle and oversee disputes, claims, and litigations.
     

We process your Personal Data to pursue our legitimate interests, as well as those of our affiliates within Opella, in the recruitment and selection of candidates. In particular, this includes:

  • Efficient Recruitment Process: allowing for a streamlined and consistent approach to managing candidate Data across all Opella affiliates. This ensures that the recruitment process is efficient and effective, reducing duplication of efforts and improving coordination.
  • Quality of Hire: ensuring that the selection criteria and processes are standardized, leading to higher quality hires that meet Opella’s needs and standards.
  • Compliance and Risk Management: helping maintain compliance with data protection regulations and mitigates risks associated with Data handling, by ensuring that all affiliates adhere to the same high standards of data protection.
  • Resource Optimization: allowing Opella to optimize resources, both human and technological, ensuring that the recruitment process is cost-effective and utilizes the best available tools and practices.
     

For the sake of clarity, this Global Privacy Notice does not cover the processing of Data of successful candidates to facilitate the negotiation, drafting, and finalization of employment contracts. The information about these pre-boarding activities can be found on the Global Privacy Notices to Employees that will be made available to all the new Opella’s employees when their Personal Data is collected.
In addition, when you interact with us in one or more of the following capacities:

  • visitors to our websites and social media pages;
  • visitors to our locations (e.g. in case of in person job interviews);
  • users of our online services and applications (e.g. our career portal);


please refer to the corresponding Global Privacy Notices published on Opella.com to learn more about additional uses of your Data in such contexts.

Further and temporary joint processing of your Data by Opella and Sanofi. 

Following the recent spin-off of Opella from Sanofi, both groups will temporarily share the system in use to collect and process your Data in the context of the respective recruitment activities. This encompasses the mutual visibility of Data of the respective job applicants, that cannot be technically avoided and is limited to authorized users in both groups, who are duly informed and trained (in order to prevent any unauthorized use of the Data of applicants to position of the other group). 

Such cross-visibility on Data constitutes in itself a processing in respect of which Sanofi, a company with registered office at 46, avenue de la Grande Armée, 75017 Paris, France (“Sanofi”), and Opella Healthcare, a company with registered office at 157 avenue Charles de Gaulle, 92200 Neuilly Sur Seine, France, act as Joint Controllers. 

The legal basis for this additional processing is the common legitimate interests of both Sanofi and Opella Healthcare, to ensure the continuity of business activities and operations of their respective groups. 

The responsibilities related to this data processing are allocated equally between the two joint controllers. Each of them is responsible for informing candidates for positions within their own group, taking appropriate measures to limit the risk of unauthorized use of Data, managing any requests to exercise privacy rights, and cooperating with the other in the management of any data breaches. 

For any contact need regarding this specific processing of your Data, including the exercise of data subjects' rights: 

How we collect your Data.

We may collect your Personal Data from different sources and in a variety of circumstances and ways:

  • directly and knowingly from you (for example, when submitting your job application and in your CV);
  • from other affiliates of Opella (limited to applicants who are current or former employees);
  • from Partners or Service Providers (such as headhunters and recruitment agencies);
  • from publicly available sources (such as professional networking sites like LinkedIn, job boards, and social media profiles).
     

In addition, new Data about you may be inferred, derived, generated as part of the processing (for example assessment scores from online tests, interview feedback, and analysis of your interactions with our recruitment platform).

If we obtain your Personal Data from more than one source, we may combine or link such Data and use it for purposes compatible with those for which it was originally collected.

Unsolicited Personal Data

In submitting you job application (for example in your CV or cover letter) or during the recruitment process, you may voluntarily provide us with unsolicited Personal Data. We ask for your collaboration to avoid sharing Personal Data that is unnecessary. Should this happen, we will take reasonable steps to ensure the unnecessary data is not used and is deleted without delay.

Who can access your Data.

Only authorized recipients have access to your Personal Data to perform the activities described above. Such recipients may include:

  • employees and staff of Opella affiliates and subsidiaries, to allow for the processing of your Data for the purposes described in the previous sections;
  • our partners such as service providers, contractors, or vendors, acting upon our instructions for to support the processing of your Data for the purposes described in the previous sections;
  • supervisory & regulation bodies, public authorities, courts, and law enforcement bodies. This may happen, for example, in circumstances that include, but are not limited to fulfilling our reporting obligation; responding to requests from them; when it is necessary to establish, exercise, or defend legal claims; when you request us to do so if this does not constitute a violation of our or others' rights; when it is necessary to prevent physical harm or material financial losses to us or others;
  • professional Advisors and Auditors.
     

Whenever required by the applicable law, we enter into contractual agreements with these recipients to ensure they provide adequate data protection measures, they commit not to use the Data for purposes other than those described in this Global Privacy Notice and cooperate with us to ensure that your rights can be effectively exercised.

Where is your Data processed.

We are part of a multinational group with employees, affiliates, partners and service providers located around the world. Consequently, your Data may be processed in and accessed from countries where different data protection laws apply.

When Personal Data is transferred to or accessed from other jurisdictions, we adopt one of the mechanisms provided by the law to ensure an equivalent level of protection of your Data in the destination country. This includes, for example, the adoption of the Standard Contractual Clauses.

How long we keep your Data.

Your Data will be kept for a period not exceeding the time necessary to achieve the purposes for which it was collected. The criteria for determining the retention period of the Personal Data consider the period of permitted processing (for all the relevant purposes), applicable regulations affecting the minimum or maximum retention period (if any), limitation of rights, and legal bases for processing.

How we protect your Data.

While we strive to protect your Personal Data, no Data transmission, use or storage can be guaranteed as 100% secure. To protect your Data, we adopt technical and organizational measures aimed at reasonably mitigating the risk that such Data is leaked, lost, or used for unauthorized purposes.

If a security incident occurs and affects your Personal Data, we will take reasonable actions to mitigate possible impacts on you. When the incident is likely to result in serious harm this may include a notification to you or to competent authorities.

Your rights.

You have rights regarding your Personal Data which may include, for example:

  • have access to, and receive a copy of your Data;
  • obtain the rectification of your Data, should it be inaccurate, incomplete, or obsolete;
  • obtain the deletion of your Data in situations set forth by applicable data protection laws;
  • withdraw your consent to data processing at any time, without affecting the lawfulness of processing, where your Data has been collected and processed on the basis of your consent;
  • object to the processing of your Data, where it has been collected and processed on the basis of our legitimate interests;
  • request a limitation of data processing activities, in the situations set forth by applicable laws;
  • request that some of the Data you provided to us is brought to you, or to another company, in a commonly used, machine-readable format.
     

Your rights may vary depending on the privacy laws applicable to you and to the specific use of your Data.

If you want to exercise any of your rights, please submit a request using this online form you can access from this webpage: https://www.opella.com/en/privacy-center, or use the other contact indicated in this or other privacy notices.

You are also entitled to lodge a complaint with your local Data Protection Authority.

Contact us.

If you have a question or any concerns regarding our use of your Data, visit https://www.opella.com/en/contact.

Changes to this Global Privacy Notice.

We may update this Global Privacy Notice periodically to reflect changes in the law or our practices. We encourage you to check this page periodically.