Privacy

Website Visitor Notice

Scope of this notice

This privacy notice aims to give you information on how Tieto collects and processes your personal data and tells you about your privacy rights and how the law protects you, when you:

  • visit our websites (regardless of where you visit is from), or
  • while visiting our website e.g. fill in forms, subscribe to our newsletters and whitepapers, request marketing material to be sent to you, ask us to contact you for other reasons, take part in a competition, promotion or survey, or give us some feedback or comment on our content.

Personal data categories

We collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data such as first name, last name, username or similar identifier.
  • Contact Data such as address, email address, telephone numbers, social media contact.
  • Employment Data such as title, company name, department name.
  • Technical Data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
  • Profile Data such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
  • Usage Data such as information about how you use our website, products and services.
  • Sales and Customer Relationship Data such as a role in the company, access rights, offering details and activity.
  • Marketing and Communications Data such as your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not generally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. In the limited cases where we do process such data, we do this in accordance with the applicable legislation. If you choose to provide us with unsolicited sensitive personal data through our websites, you are consenting to the processing of that personal data to the extent necessary and to the extent permitted by applicable legislation. 

Collection of personal data

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your personal data by filling out forms or by corresponding with us by post, phone, email, or otherwise.

Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our Cookie Notice for further details.

Third parties or publicly available sources. We may collect personal data about you from various third parties and public sources as set out below:

  • Technical Data from analytics providers, advertising networks and search information providers.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Purpose and legal basis of processing

We will only use your personal data for specific purposes that have an appropriate legal basis. The details are presented in the table below. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one purpose depending on your actions, your interactions with us, and our relationship with the company where you are emploed.

Purpose/Activity Lawful basis for processing
To manage our relationship with you, including
  • managing and answering to your requests submitted on the website
  • Asking you to leave a review or take a survey
  • Communicating with you

 

  1. Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website, including
  • troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data, implementing appropriate security measures
  1. Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
Marketing and marketing analytics, including
  • Delivering relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
  • Using data analytics to improve our website, products/services, marketing, customer relationships and experiences
  • Making suggestions and recommendations to you about goods or services that may be of interest to you
  1. Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
  2. You have given consent to the processing of your personal information for one or more specific purposes.
Administrative reasons and legal compliance
  • complying with legal obligations
1. Necessary for our legitimate interests (for the purposes of satisfying any legal, accounting, or reporting requirements)

 

DIRECT MARKETING COMMUNCATIONS. 

You may receive direct marketing communications from time to time from us. These may be the result of your actions where you subscribed to newsletters or provided your consent for direct marketing or communication purposes.  

We will present you with information about how you can update or withdraw your consent by changing your communication preferences or unsubscribing in the communications you receive, and at the time when you provided your consent. 

If the company where you are employed is a customer of Tieto, you may receive direct communications from time to time from us. This may occur because of your connection with the customer relationship and where your contact details were collected in the context of a sale of products or services. In such cases, you have the right to object to the use of your contact details for direct marketing purposes, and we will provide you with details on how you can register your objection. The objection does not stop you from receiving service messages that are related to the customer relationship and deliveries of products and services following the service agreement between your company and Tieto

 

COOKIES

When you visit our Website, we may place and access cookies on your device to achieve the purposes described above.  For more information about the cookies we may use, please see our separate Cookie notice.

USE OF LINKEDIN

Tieto is present on LinkedIn and thus you may interact with us, or we may interact with you. We have described these circumstances on the Joint controllership arrangement page.