Cookie and Privacy Policy

1. Scope and subject matter

This agreement covers Sopra Steria AS («Sopra Steria»). It explains how and why we collect and use information about our users. It also details how we protect the personal data we collect.

We respect your right to privacy. All our collection and use of personal data are compliant with the European General Data Protection Regulation (GDPR). By using this website and our application form, you accept that Sopra Steria can use the personal data you provide as described in this agreement.

2. Definitions

Personal Data means any information relating to an identified or identifiable person. For example name, address, telephone number or e-mail address.

Processing Personal Data means any use of personal data. For example, collection, registering, structuring, storage, dissemination or making available, and erasure or destruction. Processing can happen by automation or manually.

The treatment officer is the designation of the person responsible for the processing of personal data, which determines the purpose of the treatment and the aids to be used. Sopra Steria is the person responsible for the personal data processed in connection with the use of our services.

Data Processor is the person who processes personal information on behalf of the treatment officer. Sales Force, Questback, and Apsis are Sopra Steria's data servers. They develop, operate and maintain our customer database, invitations and surveys system. A separate data processor agreement between Sopra Steria and the individual data processor regulates what information the data processor has access to and how the data should be processed.

3. What personal information are we collecting?

3.1 Personal information you provide

We collect personal information you provide in forms or data fields on our websites, for example, to sign up for events, or respond to our requests, including name, company, email address, and phone number. The treatment basis is the consent of the individual unless otherwise specified.

We store information about you when you send us an email directly or fill out a contact form in connection with a request. Requests you send directly via email or contact form are not encrypted. Therefore, we encourage you not to send any confidential or sensitive information via email.

If you perform specific activities on our website, you must provide personal data. We store the information in our database to process your request and provide services such as newsletters, invitations to events and surveys to you, and to improve and further develop our services as well as to prevent fraud.

3.2 Information collected through the use of the service

When using our services, we record information about your activity. The data obtained is as follows:

(i) Net statistics

Sopra Steria collects anonymous information about visitors to the site. The purpose of this is to develop statistics that we use to improve and further develop information services on the site. Examples of what the statistics provide are how many people visit different pages, when the people visit the site, how long the visit lasts, which browsers people use, which websites the users come from and the web browser that led you to Sopra Steria's website.

We process the information in an anonymous and aggregated form. Unidentified or anonymous information means that we cannot trace the data we collect back to the individual user. We also process IP addresses at an aggregated level. Meaning that all data is merged into a group and not processed individually.

We use the analytics tool Piano on our site. The tool is installed on a separate server with an external provider and collect personal information that we use for our customer analysis, statistics, and surveys. We do not provide information from this tool to other actors.

(ii) Information about position

We calculate a geographical location from the IP address using our services.

(iii) Technical information about your device and internet connection

We record information about your device and the connection to our website, including browser, operating system, and IP address. We use this information in anonymous and aggregated form. We use the information to customise the display of our services to the device you are using as well as analysis to understand market trends and to limit abuse of the service.

(iv) Search

We store information about which keywords the users use. The purpose of the storage is to make search better for you. The search usage pattern is only stored in the aggregated form in a separate database. Only the keyword is saved, and this cannot be linked to other information, such as your IP address.

4. What is the information used for?

The information collected will not be used later for purposes incompatible with the purposes stated below unless you consent to it.

4.1 Implement the agreement

Your personal information is processed to provide requested services, for example to process your application to Scale up. We also process this information to improve and further develop associated services. The development happens through customisations of services according to the users' intended wishes and to inform you about new uses.

4.2 Improve user experience

The collected information is used to monitor whether users with a particular browser or device are having trouble loading the website, specific pages, specific services, and customising the format of the browser or device used to improve our services. We generally use the information processed for this purpose in an aggregated and unidentified form.

4.3 Marketing and recommendations

If you have previously chosen to obtain information about Sopra Steria's products and services, including newsletters and invitations to participate in surveys or events, we also process personal information for these purposes.

4.4 Understand market trends

The personal information collected is analysed to understand market trends and to try to predict future behaviour. The purpose of this is, among other things, to develop statistics that we use to improve and further develop our sites and improve our services. Such analyses can be made by Sopra Steria itself or by Sopra Steria making an extract of information that another company analyses.

If we provide personal data to other companies for such analytical purposes, this will be governed by proprietary data processor agreements with specifications that constricts the use of this information for other purposes, makes sure it is deleted after use, and so forth.

4.5 Limit abuse of service

We use information related to users activities and technical data to limit various types of abuse of the service. Misuse includes fraud, spam, attempts to log on someone else's user accounts, abuse directed at individuals, and other actions that are prohibited by Norwegian law.

5. Is it voluntary to disclose personal information?

It is always voluntary for those who visit the website to provide personal information. You can limit the amount and type of personal information Sopra Steria registers at any time, by not filling in any forms or data fields on our website. We note that this may cause some of our online services not to work, do not work optimally, or affect your user experience.

Regarding the possibility of not accepting the use of cookies on Sopra Steria's website, see the section "Use of Cookies" below.

6. Who can access my personal information?

Those who can access your personal information are a limited number of Sopra Steria employees and third parties whom Sopra Steria has commissioned to perform specific services, such as our subcontractors and data processors.

7. Sharing information with third parties

We may disclose information about you and your use of the service to other companies in our group, including our partners, in connection with events and for the same purposes they were collected for initially. As far as possible, the information will be disclosed in anonymised form, but for some purposes, it may be necessary for the recipient to get information that makes it possible to identify you.

If you have requested a service carried out by another company (e.g. participation in a joint event) that may require access to your personal information, we will ask for your consent. We require our partners to treat your personal information confidentially and only use the information to perform services for Sopra Steria.

We can also provide a data processor that processes personal information on behalf of Sopra Steria access to your personal information. Our data processors are subject to confidentiality and may not use the information for other purposes than performing the service for us.

7.1 Combining personal information with third party information

Sopra Steria cannot combine personal information you have provided directly with us with information obtained from third parties.

8. Security of personal data

We have procedures and measures at different levels to prevent unauthorised persons from accessing your personal information, prevent personal information from being lost, corrupted or damaged, and to ensure that all processing of the information is in accordance with applicable law. These measures include, among other things, regular risk assessments, technical systems and physical procedures to safeguard information security and routines to verify inspection and rectification requests.

9. Rights

9.1 Right of access

Anyone who requests it has the right to obtain basic information about the processing of personal data in a company according to  the registered person has the right to request that inaccurate or incomplete information Sopra Steria process is corrected, deleted or supplemented. Requests from the registrant must be answered free of charge and no later than 30 days.

9.2 Delete personal data

Personal data will not be stored longer than is necessary to fulfil the purpose of the processing unless required by law to keep them longer.

You may at any time request us to delete information relating to you as a user, unless the information is required to provide a service you still wish to have access to or if Sopra Steria is required by law to keep the information.

You may, at any time, recall your consent for the processing of personal information.

10. Use of cookies

10.1 Consent to use cookies

If you do not want to accept our use of cookies, you can withdraw your consent by changing the settings in your browser. We note that this may cause our website not to work optimally and that your user experience may be affected.

10.2 Sopra Steria's use of cookies

Sopra Steria's websites use cookies that are necessary for the website to function correctly and essential to enable you to navigate the website and make use of our services. We also use cookies that are not necessary, but that makes it easier for you to use Sopra Steria's website.

To develop and improve Sopra Steria's website, we use Piano Analytics. These are services for web analytics. The Services Use Cookies to measure traffic on our website, to collect statistics and to conduct analyses to improve our service.

When using Sopra Steria's web pages, the following information is collected from you as a user:

• Your IP address, browser, and operating system
• Location of visitors
• Time of visit
• Which pages on soprasteriascaleup.com you have visited through the registered IP address and the duration of the visit
• Possibly which link you came from when visiting soprasteriascaleup.com
• What was clicked during the visit and any downloaded files

The information will be sent from your browser to Piano analytics server.

10.3 Details of the cookies used

See Norwegian site to see the cookies that are used on the site:
Personvernerklæring | Sopra Steria

11. Change of Privacy Statement

Sopra Steria reserves the right to change this privacy statement to reflect changes to laws, regulations and technical progress, and ensure that it conforms to good business practice.

If you have questions relating to our privacy statement, the handling of personal information, or about changing or deleting the personal information you have given us, please contact us by phone 22 57 56 00 or e-mail personvernombud@soprasteria.com.