Facility visitor notice

This privacy notice aims to give you information on how Tieto collects and processes your personal data and informs you about your privacy rights when you: visit our offices, sites and other facilities.

Personal data categories

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data such as first name, last name, username or similar identifier.
• Contact Data such as address, email address, telephone numbers, social media contact.
• Employment Data such as title, company name, department name.
• Monitoring and Recording Data such as video recordings, images and other similar data produced by CCTV cameras, internet-enabled cameras or other similar means.
• Access Management Data such as your access rights, information regarding your use of our facilities through access security logs (in cases where you are using our access readers or chips) and information collected for providing ID cards

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not generally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. In the limited cases where we do process such data, we do this in accordance with the applicable legislation. If you choose to provide us with unsolicited sensitive personal data through our websites, you are consenting to the processing of that personal information to the extent necessary and to the extent permitted by applicable legislation.

Collection of personal data

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise.

Automated technologies or interactions. We may automatically collect your personal information through cameras, video surveillance and CCTV technologies, readers or chips.

IF YOU FAIL TO PROVIDE PERSONAL DATA

Where we need to collect personal data by law, in order to protect the legitimate interest pursued by the processing, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to grant you access to our offices, sites and other facilities.

Purpose and legal basis of processing

We will only use your personal data for specific purposes that have an appropriate legal basis. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data for more than one purpose depending on your actions, your interactions with us, and our relationship with the company where you are employed.