Privacy notes

Scope of this Privacy notice

The purpose of this privacy notice is to provide you with information regarding how Tietoevry Tech Services collects and process your personal data, as well as to inform you about your privacy rights and the legal protections in place when you:

• visit our websites (regardless of where you visit is from), or
• During your visit to our website, when you may engage in various activities such as filling in forms, subscribing to our newsletters and whitepapers, requesting marketing materials, requesting contact for other reasons, participating in competitions, promotions or surveys, or providing feedback or comments on our content.

What data we collect about you?

Personal data, also referred to as personal information, means any information that can identify an individual. This definition excludes anonymous data, where the identity has been removed.

We collect, use, store, and transfer various categories of personal data about you, which we have classified as follows:

• Identity Data such as first name, last name, username or similar identifier.
• Contact Data such as address, email address, telephone numbers, social media contact.
• Employment Data such as title, company name, department name.
• Technical Data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Profile Data such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data such as information about how you use our website, products and services.
• Marketing and Communications Data such as your preferences in receiving marketing from us and our third parties and your communication preferences.

Additionally, we collect, utilize, and share Aggregated Data, such as statistical or demographic information, for various purposes. Although Aggregated Data may be derived from personal data, it is not considered personal data under the law as it does not directly or indirectly disclose your identity.

An instance of this would be when we consolidate your Usage Data in order to determine the proportion of users who utilize a particular website feature. However, if we merge or link Aggregated Data with your personal information in a way that directly or indirectly identifies you, we regard the merged data as personal data and handle it in accordance with the terms stated in this privacy notice.

As a general practice, we do not typically collect any special categories of personal data concerning you, which includes details about your racial or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, or genetic and biometric data. Furthermore, we do not process any information pertaining to

criminal convictions and offenses. In the rare cases when we do process such data, we ensure compliance with the applicable legislation.

Should you opt to voluntarily share unsolicited sensitive personal data via our websites, you are giving your consent for the processing of that personal information as required and as allowed by applicable laws.

How is your personal information collected?

We employ various approaches to collect data from you or about you, such as:

Direct interactions: You may provide us with your personal data through various means, including filling out forms or engaging in correspondence via mail, telephone, email, or any other channels of communication.

Automated technologies or interactions. Through automated technologies or interactions, when you engage with our website, we may automatically gather Technical Data regarding your hardware, browsing activities, and behavioral patterns. This personal data is obtained through the utilization of cookies, server logs, and comparable technologies. Additionally, if you visit other websites that utilize our cookies, we may also receive Technical Data pertaining to you. For more information, kindly refer to our Cookie Notice.

We might obtain personal data about you from different third parties and public sources, as explained below:

• Analytics providers, advertising networks, and search information providers may provide us with Technical Data.

IF YOU DECLINE TO PROVIDE YOUR PERSONAL INFORMATION

In situations where it is mandatory by law or required under a contractual agreement with you, and you are unable, fail or decline to provide the requested personal data, we may be unable to fulfill the contract we have or are attempting to establish with you (for instance, providing goods or services). In such circumstances, we may be obligated to cancel a product or service you have with us. Rest assured, we will notify you in advance if this becomes necessary.

For what purposes is your personal infromation processed?

We will only utilize your personal information in accordance with the relevant legal requirements. Below, we have outlined a comprehensive list in a tabular format, detailing the various purposes for which we intend to use your personal data, along with the corresponding legal bases we rely on to carry out such processing. When applicable, we have also identified our legitimate interests.

Please note that we may process your personal data based on more than one legal ground, depending on the specific purpose for which your data is being used. If you require further information regarding the specific legal grounds we rely on, especially in cases where multiple grounds are mentioned in the table below, please reach out to us at privacy.techservices@tietoevry.com.

MARKETING COMMUNICATION AND CHOICE TO OPT OUT

Our mission is to offer you options regarding specific uses of your personal data, particularly in relation to marketing and advertising. You have the freedom to request the cessation of marketing messages from us or third parties whenever you wish. This can be done by adjusting your marketing preferences through checking or unchecking the relevant boxes, following the opt-out links provided in any marketing message, or contacting us directly at privacy.techservices@tietoevry.com. In such instances, we will retain minimal personal data solely for the purpose of recording your opt-out decision and ensuring that you are not contacted again. It is important to note that opting out of marketing messages does not apply to personal data provided to us as a result of purchasing a product/service, registering for a warranty, having a product/service experience, or engaging in other transactions.

OFFERS OF PROMOTION FROM US

By analyzing your personal information, we aim to understand your preferences and interests, allowing us to determine relevant products, services, and offers that may appeal to you (referred to as marketing). You will receive marketing communications from us if you have provided consent for such communication or if you (or the company you represent) have obtained goods or services from us and have not chosen to opt out of receiving marketing materials.

MARKETING BY EXTERNAL PARTIES

Before sharing your personal data with any company external to the TietoEVRY group of companies for marketing intentions, we will request your explicit opt-in consent.

PERSONALIZED EMAILS

We send promotional emails that typically include technologies (such as web beacons, cookies, or similar) which enable us to track your interaction with the message, including whether you open, read, or delete it, as well as the links you click. When you click a link in a marketing email, even without being registered or signed in to our site, we utilize a cookie to record the pages you view and the content you download from our websites. To enhance your experience with TietoEVRY and carry out the tasks described in our privacy notice, we may combine data gathered from publicly available sources with information obtained from various email, website, and personal interactions with you.

TRACKING TECHNOLOGY - COOKIES

During your visit to our Website, we may utilize cookies that encompass information (such as a distinct cookie ID) serving to monitor your interactions with our Website. This allows our systems to identify your browser, inform us about the timing, frequency, and specific pages visited, as well as the number of visitors. Furthermore, it enables us to recognize a returning visitor as a unique user. For detailed insights into the cookies we use, kindly refer to our dedicated Cookie notice.