Skip to content

Personal Data and Cookies Charter

Welcome to the website TotalEnergies Careers.

The Personal Data and Cookies Charter (hereinafter “Charter”) aims to inform you about your rights that you can exercise regarding the processing of your data and describes the measures that we take to protect these data.

TotalEnergies SE is the « data controller » with responsability for personal data processing on the website. These processing operations are carried out in accordance with the applicable law.

1. Purpose of processing, legal basis, the period of storage and types of data collected

When visiting the website you may need to provide us with personal data such your contact data and/or your personal data necessary for the management of your application (e.g.: C.V., cover letter, diplomas...).

  • You agree that we can process your data. This information is necessary to process your request, otherwise it cannot be processed. You can withdraw your consent at any time without this calling into question the processing of your data by writing to the following address: [email protected].
  • The information is necessary to enable us to fulfill our legal obligations. If you fail to answer the mandatory questions, we will not be able to process your request.
Purpose of processing Retention period Duration of data retention
Processing operation n°1 : Recruitment management (creation of your candidate account, management of all stages of your application and proposal of job offers corresponding to your profile) Consent

The duration of retention of your data is according to the legislation in force or the recommendations of the country of the offer on which you apply:

Australia, Denmark, Germany, Malaysia, Sierra Leone: Six (6) months (if there has been no action on your account)
Colombia, Ghana, India, Malawi, Mexico, United Kingdom, Qatar, Tanzania: Twelve (12) months (if there has been no action on your account)
FRANCE AND ALL OTHER COUNTRIES: TWENTY-FOUR (24) MONTHS (if there has been no action on your account)

3. Recipients of the data

In order to carry out the processing provided for in this Charter, your personal data may be communicated to certain departments of the data controller or companies of the TotalEnergies company, as well as to certain service providers or subcontractors, in particular external recruiters for the sole purpose of selecting candidates and recruiting, or service providers responsible for the technical management of the candidate portal.

If you post a comment online, some of your personal data may be published on the website and the candidate portal. Given the characteristics of the Internet network, which are the free capture of information disseminated and the difficulty, or even the impossibility, of controlling the use that could be made of it by third parties, we recommend that you do not mention your personal data in this field and we inform you that you can object to such dissemination by contacting us at the contact address specified below.

4. Data transfers

Any transfer of data to a third country outside the European Economic Area is done in accordance with the applicable regulations and in such a way as to ensure adequate data protection. As part of the services provided on the site, your data may be transferred to companies of the TotalEnergies Company located outside the European Union.

In order to ensure adequate protection of personal data originating in the European Economic Area that may be transferred to TotalEnergies entities located outside the European Economic Area, Binding Corporate Rules (BCR) have been adopted. For transfers of personal data not covered by BCRs to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information about our BCR, you can click here. For information on the other measures, we have in place to ensure adequate protection, please write to the contact address below.

5. Data security and confidentiality

The data controller takes appropriate steps to preserve the security and confidentiality of your personal data, including to prevent them from being distorted, damaged, or disclosed to unauthorized third parties.

6. Cookies management

A cookie is a file which enables a website to save information relating to your computer’s browsing of the website to make your visits to the website smoother.

Cookies are text files that are stored on yourcomputer’s browser. They allow access to various information about you. Some of them belong to the publisher of the website (First party) and some to third parties. The table below details each cookie on the website.

We enable cookies once you have given your consent, except for technical cookies that are necessary to provide the service you request on website.

The cookies proposed by the data controller

Cookie Description Duration
Site (has_js) Contains information about the browsing session and allows the user to access the site Deleted at the end of the browsing
Site (cookie_agreed) Stores a user's choice regarding cookies 13 months
Drupal.language Drupal configuration cookie (redirection by language) 7 days
Drupal_language_redirection Drupal configuration cookie 1 year
Drupal.tableDrag.showWeight Drupal configuration cookie 1 year
authorized_config Allows to know which services have been refused or accepted by the user 1 year
getaquote In a Find My Product form, records user input 1 year
cookie-agreed Cookie created by Smile to remember the user's choice regarding cookies in the context of the RGPD 1 year 1 day

 

Cookies offered by third parties

Cookie Description Duration
__unam Cookie set by ShareThis to enable content sharing 9 months
_trossion Allows the presentation of offers adapted to the user's interests on the Internet (doubleclick.net) 1 year and 1 month
_troRUID Allows to present offers adapted to the user's interests on the Internet (doubleclick.net) 6 months
_troSYNC Allows to present offers adapted to the interests of the user on Internet (doubleclick.net) 6 months

 

Statistics cookies

Cookie Description Duration
_ga Cookie used by Google Universal Analytics, allowing to identify the user by a unique id randomly generated 1 year
gid Cookie used by Google Universal Analytics, allowing to identify the user by a unique id randomly generated 24 hours
xtant Cookie set by AT Internet (Analytics) containing a technical value related to the management of identified visitors. Used by XITI 6 months
xtat Cookie set by AT Internet (Analytics) containing a textual identifier of the visitor. Used by XITI 6 months
xtvrn Cookie set by AT Internet (Analytics) listing the numsites (unique site identifier) encountered by the visitor. Used by XITI 6 months
_utma Cookie set by Google Analytics to identify a visitor 2 years
_utmz Cookie set by Google Analytics to identify the visitor's entry point to the site, device, campaign (if set via a tracker or AdWords) and search query 6 months
atuserid Cookie set by AT Internet (Analytics) to identify visitors to sites in first-party cookie (nb. Cookie does not use a different domain name than the site). Used by XITI 1 year 1 day
dtCookie Cookie set by Dynatrace (Analytics) containing the session ID (performance tracking) 1 minute
dtLatC Cookie set by Dynatrace (Analytics) to measure server latency (performance tracking) 1 minute
dtPC Cookie set by Dynatrace (Analytics) to identify the best place to measure performance (performance tracking) 1 minute
dtSa Cookie set by Dynatrace (Analytics) as intermediate storage to track user actions (performance tracking) 1 minute
rxVisitor Cookie set by Dynatrace (Analytics) to identify the visitor (performance tracking) 1 minute
rxvt Cookie set by Dynatrace (Analytics) to identify the end of the user's session (performance tracking) 1 minute
atidvisitor Cookie set by AT Internet (Analytics) to count the numsites (unique identifiers of a site) seen by the visitor and store the visitor's identifiers. Used by XITI 6 months
dtCookie Cookie set by Dynatrace (Analytics) containing session ID (performance tracking) 1 minute
dtLatC Cookie set by Dynatrace (Analytics) to measure server latency (performance tracking) 1 minute

 

How to withdraw your consent ?

When you first connect to the website, you may or may not give your consent to the use of cookies and/or proceed to a parameterization. If afterwards you wish to change your choices, you can manage your cookies by going to the footer of our website or application or via a reminder button named "cookies".

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

7. Your rights / Contact

In accordance with the regulations in force, you have the right to access, rectify, portability, and deletion of data concerning you. You may also request the limitation of the processing, the portability of your personal data if necessary and/or lodge a complaint with the competent supervisory authority.

To exercise your rights and to ask us about the processing of your personal data, you can contact [email protected] .

If you believe, after having contacted us, that your rights have not been respected, you may lodge a complaint with the competent supervisory authority.

 

Appendix 1 : List of legal basis for data processing activities

  POSSIBLE LEGAL BASIS EXPLANATIONS AND EXAMPLES
The legal basis for the processing of personal data Legitimate interest

Legitimate interest may be a legal basis when you can answer ‘yes’ to this question: “might the data subject reasonably expect this data processing operation?” If so, you should specify the legitimate interests pursued by the controller or by a third party.

Examples: safety and security of people and goods, protection and fight against fraud; prevention for the sake of safety and security (including IT security); protection of privacy, statistics etc.

Contractual nature

The performance of a contract (processing of personal data is strictly necessary for the performance of a contract) or the intention to conclude a contract may be a legal basis for processing. If so, you should specify whether the requirement to provide data is necessary for the conclusion of this contract, and any consequences of not providing these data.

Examples: service performance ; processing of employees’ data to send out payslips ; employee management ; processing of data so that purchases can be delivered, etc.

Consent of the data subject

Consent is defined as “any freely given specific and informed indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.” If consent is the legal basis for processing, it must be possible to withdraw it at any time, it being made clear that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. NB: for children below the age of 16, 15 (in France) or 13 in some States, it is necessary to obtain the consent or authorization “of the holder of parental responsibility”. IN PRACTICE for valid consent: provide a (not pre-ticked) check box; or a choice of technical settings; or a statement or conduct which clearly indicates in this context the data subject's acceptance of the proposed processing.

Examples: the use of visitors’ photographs for the in-house magazine, etc.

Legal obligation

Data processing is required by law; in this case, legal obligation is the legal basis for processing.

Examples: fight against money laundering and anti-terrorism financing procedures ; processing of remuneration data for social security; processing of remuneration data for the tax authorities; legal requisitions etc.

Vital interest

Data processing is required by the fact that the vital interest of the data subject or another natural person is at stake. Vital interest is equivalent to a question of life or death, or threats entailing a risk of injury or harm to the health of the data subject or a third party.

Examples: processing of an employee's data for the purposes of repatriation.

  Public interest Examples : Pandemic management etc This case is quite rare, so it is not mentioned here. Contact the legal department if necessary.