Privacy notes

Scope of this Privacy notice

This privacy notice aims to give you information on how Tietoevry collects and processes your personal data and tells you about your privacy rights and how the law protects you, when:

1. your personal information is used for the management of our relationship with our customer, or
2. your personal information is used for the management of our relationship with our vendor or partner, or
3. your personal information is used for the execution of our sales opportunity, or
4. your personal information is used in the connection of our offering delivery for our own business purposes, or
5. you are acting in a position where there is another legitimate business purpose for the processing of your data (external stakeholder). This can be the case, for example when you are working for press and media and your personal information is used for our external communication purposes.

Personal data categories

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data such as first name, last name, username or similar identifier.
• Contact Data such as an address, email address and telephone numbers.
• Employment Data such as job title, company name, department name, role classification.
• Profile Data such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data such as information about how you use our website, products and services.
• Marketing and Communications Data such as your preferences in receiving marketing from us and our third parties and your communication preferences.
• Sales and Customer Relationship Data such as a role in the company, access rights, offering details and activity.
• Project management and Continuous services related Data such as allocations, hour bookings and role.
• Customer feedback Data such as customer responses to relationship and delivery experience surveys.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not generally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. In the limited cases where we do process such data, we do this in accordance with the applicable legislation.

Collection of personal data

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your personal information by filling in forms or by corresponding with us by post, phone, email or otherwise. This information will be then included in our Customer Relationship Management (CRM) or Vendor/Partner management databases by our professionals based on their interactions with you.

Submitted to us by the company we have connection with. Your personal information can be submitted to us directly by the company we are connected to for the purposes of facilitating the relationship with us.

Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

• Identity, Contact, and Employment Data from third parties (including data brokers or aggregators) or from publicly available sources (e.g. published articles, press releases, your public posts on social media sites if relevant for business purpose).

Purpose and legal basis of processing

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us at privacy@tietoevry.com if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

MARKETING COMMUNICATION AND OPTING OUT

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

You can ask us or third parties to stop sending you marketing messages at any time by checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by contacting us at privacy@tietoevry.com at any time. In such cases, we will retain minimum personal data to note that you opted out in order to avoid contacting you again.

Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.

PROMOTIONAL OFFERS FROM US

We may use your personal information to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have given your consent to us sending marketing communication to you, or if you (or the company you represent) have purchased goods or services from us and you have not opted out of receiving that marketing.

THIRD-PARTY MARKETING

We will get your express opt-in consent before we share your personal data with any company outside the Tietoevry group of companies for marketing purposes.

TARGETED EMAIL

We send commercial e-mails that typically include technologies (web beacons, cookies or similar) that allow us to know whether you open, read, or delete the message, and links you may click. When you click a link in a marketing e-mail you receive from us, we will also use a cookie to log what pages you view and what content you download from our websites, even if you are not registered at or signed into our site.

COMBINING AND ANALYZING DATA

We may combine the data collected about you from publicly available sources, and from our different e-mail, website, and personal interactions with you. We combine this data to better assess your experience with Tietoevry and to perform the other activities described in our privacy notice.