1. Scope and subject matter
This agreement covers Sopra Steria AS («Sopra Steria»). It explains how and why we collect and use information about our users. It also details how we protect the personal data we collect.
We respect your right to privacy. All our collection and use of personal data are compliant with the European General Data Protection Regulation (GDPR). By using this website and our application form, you accept that Sopra Steria can use the personal
data you provide as described in this agreement.
Personal Data means any information relating to an identified or identifiable person. For example name, address, telephone number or e-mail address.
Processing Personal Data means any use of personal data. For example, collection, registering, structuring, storage, dissemination or making available, and erasure or destruction. Processing can happen by automation or manually.
The treatment officer is the designation of the person responsible for the processing of personal data, which determines the purpose of the treatment and the aids to be used. Sopra Steria is the person responsible for the personal data processed in connection with the use of our services.
Data Processor is the person who processes personal information on behalf of the treatment officer. Sales Force, Questback, and Apsis are Sopra Steria's data servers. They develop, operate and maintain our customer database, invitations and surveys system. A separate data processor agreement between Sopra Steria and the individual data processor regulates what information the data processor has access to and how the data should be processed.
3. What personal information are we collecting?
3.1 Personal information you provide
We collect personal information you provide in forms or data fields on our websites, for example, to sign up for events, or respond to our requests, including name, company, email address, and phone number. The treatment basis is the consent of the individual
unless otherwise specified.
We store information about you when you send us an email directly or fill out a contact form in connection with a request. Requests you send directly via email or contact form are not encrypted. Therefore, we encourage you not to send any confidential
or sensitive information via email.
If you perform specific activities on our website, you must provide personal data. We store the information in our database to process your request and provide services such as newsletters, invitations to events and surveys to you, and to improve and
further develop our services as well as to prevent fraud.
3.2 Information collected through the use of the service
When using our services, we record information about your activity. The data obtained is as follows:
(i) Net statistics
Sopra Steria collects anonymous information about visitors to the site. The purpose of this is to develop statistics that we use to improve and further develop information services on the site. Examples of what the statistics provide are how many people
visit different pages, when the people visit the site, how long the visit lasts, which browsers people use, which websites the users come from and the web browser that led you to Sopra Steria's website.
We process the information in an anonymous and aggregated form. Unidentified or anonymous information means that we cannot trace the data we collect back to the individual user. We also process IP addresses at an aggregated level. Meaning that all data
is merged into a group and not processed individually.
We use the analytics tool Google Analytics on our site. The tool is installed on a separate server with an external provider and collect personal information that we use for our customer analysis, statistics, and surveys. We do not provide information
from this tool to other actors. Read more about the vendors processing of personal information here: https://cloud.google.com/terms/data-processing-terms
(ii) Information about position
We calculate a geographical location from the IP address using our services.
(iii) Technical information about your device and internet connection
We record information about your device and the connection to our website, including browser, operating system, and IP address. We use this information in anonymous and aggregated form. We use the information to customise the display of our services
to the device you are using as well as analysis to understand market trends and to limit abuse of the service.
We store information about which keywords the users use. The purpose of the storage is to make search better for you. The search usage pattern is only stored in the aggregated form in a separate database. Only the keyword is saved, and this cannot
be linked to other information, such as your IP address.
4. What is the information used for?
The information collected will not be used later for purposes incompatible with the purposes stated below unless you consent to it.
4.1 Implement the agreement
Your personal information is processed to provide requested services, for example to process your application to Scale up. We also process this information to improve and further develop associated services. The development happens through customisations
of services according to the users' intended wishes and to inform you about new uses.
4.2 Improve user experience
The collected information is used to monitor whether users with a particular browser or device are having trouble loading the website, specific pages, specific services, and customising the format of the browser or device used to improve our services.
We generally use the information processed for this purpose in an aggregated and unidentified form.
4.3 Marketing and recommendations
If you have previously chosen to obtain information about Sopra Steria's products and services, including newsletters and invitations to participate in surveys or events, we also process personal information for these purposes.
4.4 Understand market trends
The personal information collected is analysed to understand market trends and to try to predict future behaviour. The purpose of this is, among other things, to develop statistics that we use to improve and further develop our sites and improve our
services. Such analyses can be made by Sopra Steria itself or by Sopra Steria making an extract of information that another company analyses.
If we provide personal data to other companies for such analytical purposes, this will be governed by proprietary data processor agreements with specifications that constricts the use of this information for other purposes, makes sure it is deleted
after use, and so forth.
4.5 Limit abuse of service
We use information related to users activities and technical data to limit various types of abuse of the service. Misuse includes fraud, spam, attempts to log on someone else's user accounts, abuse directed at individuals, and other actions that are
prohibited by Norwegian law.
5. Is it voluntary to disclose personal information?
It is always voluntary for those who visit the website to provide personal information. You can limit the amount and type of personal information Sopra Steria registers at any time, by not filling in any forms or data fields on our website. We note
that this may cause some of our online services not to work, do not work optimally, or affect your user experience.
6. Who can access my personal information?
Those who can access your personal information are a limited number of Sopra Steria employees and third parties whom Sopra Steria has commissioned to perform specific services, such as our subcontractors and data processors.
7. Sharing information with third parties
We may disclose information about you and your use of the service to other companies in our group, including our partners, in connection with events and for the same purposes they were collected for initially. As far as possible, the information will be disclosed in anonymised form, but for some purposes, it may be necessary for the recipient to get information that makes it possible to identify you.
If you have requested a service carried out by another company (e.g. participation in a joint event) that may require access to your personal information, we will ask for your consent. We require our partners to treat your personal information confidentially
and only use the information to perform services for Sopra Steria.
If there is a suspicion that there has been an offence in connection with the use of Sopra Steria's services, the information may, upon request, be handed over to public authorities. We will also be able to provide information to others if necessary to prevent fraud.
We can also provide a data processor that processes personal information on behalf of Sopra Steria access to your personal information. Our data processors are subject to confidentiality and may not use the information for other purposes than performing the service for us.
7.1 Combining personal information with third party information
Sopra Steria cannot combine personal information you have provided directly with us with information obtained from third parties.
8. Security of personal data
We have procedures and measures at different levels to prevent unauthorised persons from accessing your personal information, prevent personal information from being lost, corrupted or damaged, and to ensure that all processing of the information is in accordance with applicable law. These measures include, among other things, regular risk assessments, technical systems and physical procedures to safeguard information security and routines to verify inspection and rectification requests.
9.1 Right of access
Anyone who requests it has the right to obtain basic information about the processing of personal data in a company according to
the registered person has the right to request that inaccurate or incomplete information Sopra Steria process is corrected, deleted or supplemented. Requests from the registrant must be answered free of charge and no later than 30 days.
9.2 Delete personal data
Personal data will not be stored longer than is necessary to fulfil the purpose of the processing unless required by law to keep them longer.
You may at any time request us to delete information relating to you as a user, unless the information is required to provide a service you still wish to have access to or if Sopra Steria is required by law to keep the information.
You may, at any time, recall your consent for the processing of personal information.
you to use Sopra Steria's website.
When using Sopra Steria's web pages, the following information is collected from you as a user:
- Your IP address, browser, and operating system
- Location of visitors
- Time of visit
- Which pages on soprasteriascaleup.com you have visited through the registered IP address and the duration of the visit
- Possibly which link you came from when visiting soprasteriascaleup.com
- What was clicked during the visit and any downloaded files
The information will be sent from your browser to Googles server.
10.3 Details of the cookies used
The following cookies are used on the site:
|COOKIE NAME||EXPIRATION TIME||DESCRIPTION|
|__utmt||10 minutes||Used to throttle request rate.|
|__utmb||30 mins from set/update|
|__utmc||End of browser session||Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the__utmbcookie to determine whether the user was in a new session/visit.|
|__utmz||6 months from set/update|
|__utmv||2 years from set/update||Used to store visitor-level custom variable data. This cookie is created when a developer uses the_setCustomVarmethod with a visitor level custom variable. This cookie was also used for the deprecated_setVarmethod. The cookie is updated
every time data is sent to Google Analytics.|
11. Change of Privacy Statement
Sopra Steria reserves the right to change this privacy statement to reflect changes to laws, regulations and technical progress, and ensure that it conforms to good business practice.
If Sopra Steria changes its privacy practices, an updated version of this Privacy Statement will reflect these changes, and we will inform you of such changes by updating the date of entry into force at the top of this Privacy Statement.
12. Contact information
If you have questions relating to our privacy statement, the handling of personal information, or about changing or deleting the personal information you have given us, please contact us by phone 22 57 56 00 or e-mail firstname.lastname@example.org.
You can also send a letter to the following mailing address:
Postboks 1172 Sentrum 0107 OSLO, Norway.
If you would like to delete, change or correct your personal information and do so by contacting us through email, we ask you to use the subject field "Request Deletion" or "Request / Change / Correction Request" depending on your inquiry. Please also
provide us with the e-mail address you used for registration, if you registered using an e-mail address. We will do our best to process your inquiry as soon as possible.
Any complaints about the processing of personal data by Sopra Steria can be addressed to email@example.com.