Privacy

Business relations and external stakeholders notice

Navigation

Explore our notices

Scope of this notice

This privacy notice aims to give you information on how Tieto collects and processes your personal data and informs you about privacy rights.

  1. your personal information is used for the management of our relationship with our customer, or
  2. your personal information is used for the management of our relationship with our vendor or partner, or
  3. your personal information is used for the execution of our sales opportunity, or
  4. your personal information is used in the connection of our offering delivery for our own business purposes, or
  5. you are acting in a position where there is another legitimate business purpose for the processing of your data (external stakeholder). This can be the case, for example when you are working for press and media and your personal information is used for our external communication purposes.

Personal data categories

We collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data such as first name, last name, username or similar identifier.
  • Contact Data such as an address, email address and telephone numbers.
  • Employment Data such as job title, company name, department name, role classification.
  • Profile Data such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
  • Usage Data such as information about how you use our website, products and services.
  • Marketing and Communications Data such as your preferences in receiving marketing from us and our third parties and your communication preferences.
  • Sales and Customer Relationship Data such as a role in the company, access rights, offering details and activity.
  • Project management and Continuous services related Data such as allocations, hour bookings and role.
  • Customer feedback Data such as customer responses to relationship and delivery experience surveys.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not generally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. In the limited cases where we do process such data, we do this in accordance with the applicable legislation.

Collection of personal data

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your personal information by filling in forms or by corresponding with us by post, phone, email or otherwise. This information will be then included in our Customer Relationship Management (CRM) or Vendor/Partner management databases by our professionals based on their interactions with you.

Submitted to us by the company we have connection with. Your personal information can be submitted to us directly by the company we are connected to for the purposes of facilitating the relationship with us.

Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

  • Identity, Contact, and Employment Data from third parties (including data brokers or aggregators) or from publicly available sources (e.g. published articles, press releases, your public posts on social media sites if relevant for business purpose).

Purpose and legal basis of processing

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on your actions, your interactions with us, and our relationship with the company where you are employed.  Purpose/Activity Lawful basis for processing including the basis of legitimate interest
Sales and Customer relationship management, including:

  • implementing, developing and maintaining the business relationship with our customer

  • managing delivery
  • providing customer support
  • managing invoicing, reporting and contracts
 1. Necessary for our legitimate interests (for managing our customer relationship and fulfilling our contractual obligations with our customers, and for the purposes of satisfying any legal, accounting, or reporting requirements)
   
External communication purposes, including
  • Managing media contacts
  • Communicating relevant content externally
 1. Necessary for our legitimate interests (for the purposes of managing media relations and complying with our obligation of transparency as a publicly-traded company)

Customer Feedback Management purposes, including:

  • Sending targeted email, asking you to take a survey,
  • Analyzing your responses to identify improvement actions,
  • Communicating back to you, benefits of such actions, for your organization,
  • Providing customer support to Tieto users regarding Customer Feedback Man-agement process and tools landscape.

 

 1. Necessary for our legitimate interests (for the purposes of managing customer relationship and to be able to improve customer satisfaction)
Vendor and partner relationship management
  • implementing, developing and maintaining the business relationship
  • receiving customer support
  • managing invoicing, reporting and contracts
 1. Necessary for our legitimate interests (for the purposes of managing the business relationship)
Project management and continuous service delivery 1. Necessary for our legitimate interests (for the purposes of product and services deliveries)
Administrative reasons and legal compliance
  • complying with legal obligations
 1. Necessary for our legitimate interests (for the purposes of satisfying any legal, accounting, or reporting requirements)

DIRECT MARKETING COMMUNICATIONS 

You may from time to time receive direct marketing communications from us, if you have subscribed to our newsletters, or in similar manner provided your consent to us for direct marketing or communication purposes.  

We will present you with information about how you can update or withdraw your consent by changing your communication preferences or unsubscribing in the communications you receive, and at the time when you provided your consent. 

If the company where you are employed is a customer of Tieto, you may receive direct communications us. This may occur because of your connection with the customer relationship and where your contact details were collected in the context of a sale of products or services. In such cases, you have the right to object to the use of your contact details for direct marketing purposes, and we will provide you with details on how you can register your objection. The objection does not stop you from receiving service messages that are related to the customer relationship and deliveries of products and services following the service agreement between your company and Tieto.

USE OF LINKEDIN

Tieto is present on LinkedIn and thus you may interact with us, or we may interact with you. We have described these circumstances on the Joint controllership arrangement page.