SAP Privacy Statement
Protecting the individual's privacy on the Internet is crucial to the future of Internet-based business and the move towards a true Internet economy. We have created this Privacy Statement to demonstrate our firm commitment to the individual's right to privacy. This Privacy Statement outlines our handling practices with regard to such information that can be used to directly or indirectly identify an individual (“Personal Data”).
This Privacy Statement applies to www.sap.com and any other website which references this Privacy Statement. The data controller in the case of www.sap.com is SAP America Inc., 3999 West Chester Pike, Newtown Square, PA 19073, USA. The data controller in the case of other websites that reference or otherwise use this Privacy Statement is the SAP group entity set out in the relevant legal disclosure or, if a legal disclosure is not required in accordance with local laws, the copyright of such website. This will be in particular SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany with a view to the corporate website of the SAP group (www.sap.com/corporate-de/about.html and www.sap.com/corporate-en/about.html), product-specific websites, SCN and the SAP Store. SAP America Inc., SAP SE and any relevant SAP group entity are hereafter individually referred to as “SAP”
Some SAP group entities, offerings, programs and/or websites may have their own, possibly different, privacy statements. We therefore encourage you to read the privacy statements of each of the SAP websites, offerings or programs you visit or review.
I. Global Privacy Fundamentals
Our privacy practices set out herein reflect current global principles and standards on handling Personal Data. These principles include notice of data use, choice of data use, data access, data integrity, security, onward transfer, and enforcement/oversight. We abide by the privacy laws in the countries where we do business.
By using this website, you consent to the collection and use of your Personal Data as described herein. If you do not agree with the terms set out herein, please do not use this website.
If we decide to make changes to this Privacy Statement, we will post the changes on this website so that you will always know what Personal Data we collect, and how we use it. We therefore encourage you to periodically look for updates to this Privacy Statement.
As may be required by applicable law, we may also seek your explicit consent to process certain Personal Data collected on this website or volunteered by you. Kindly note that any consent will be entirely voluntarily. In case you do not grant the requested consent to the processing of your Personal Data or (in accordance with Subsection 10 (Data Retention) below) later inform SAP that you do not want SAP to further process your Personal Data, however, the (further) use of certain offerings or services of SAP may be either not possible or limited in scope.
III. Collection and Processing of Your Personal Data
To serve you better and understand your needs and interests, SAP collects, exports, and uses Personal Data with adequate notice (as set out herein) and, where legally required, consent, along with required filings with data protection authorities, when applicable.
We may further collect and process any Personal Data that you volunteer to us, e.g. when you register for events or other offerings of SAP, subscribe to newsletters, participate in online surveys, discussion groups, forums or SAP’s chat service, or when you make purchases or otherwise submit your contact details to SAP. In case you provide SAP with your IDs of social media, SAP may retrieve publicly available information about you.
1. Use and Purpose of Collected Personal Data
The information SAP collects to understand your needs and interests helps SAP deliver a consistent and personalized experience. We will use such information only as described in this Privacy Statement and/or in the way we specify at the time of collection. We will not subsequently change the way your Personal Data is used without your consent, as required by applicable law. We will exclusively use your Personal Data for the following purposes:
- To process your orders and deliver the products, services and information that you have ordered;
- To keep you up to date on the latest product announcements, software updates, software upgrades, security patches, system enhancements, special offers, and other information regarding SAP’s software and services. This may occasionally include information from other technology companies or business partners about products and services that can add value to your SAP products. Such communication may be provided not only by SAP, but by any other company of the SAP group of companies, including, for the avoidance of doubt all Ariba, SuccessFactors, Hybris, Sybase, Business Objects, Fieldglass, Concur, Multiposting and SeeWhy subgroup companies. In this regard, you expressly acknowledge that your contact details may be shared by SAP with such other companies of the SAP group. Furthermore, you acknowledge that any information required to track your choices regarding receiving marketing materials (i.e. depending on the country where the relevant SAP group company operates whether you have granted an explicit consent into receiving and/or opted-out of receiving marketing materials) may be stored and exchanged between any of the above mentioned companies;
- To tailor information about our products and services to your individual interests. For example, during a visit to our website, it allows us to provide you with specific information on products and services that may be of interest;
- To provide the ability to create by way of the SAP Cloud ID Service a single user profile which one individual can use within the whole SAP group of companies (including all SAP companies as well as all Ariba, SuccessFactors, Hybris, Sybase, Business Objects, Fieldglass, Concur, Multiposting and SeeWhy companies) to access web offerings and services. Therefore, you acknowledge that such Personal Data required for the creation of your user profile may be shared within and used by the whole SAP group of companies for this purpose. Such service may also allow you to share information about you (including Personal Data) with other registered users of the same service. You can use the functionality of the relevant service to determine which information you want to share;
- Beyond the SAP Cloud ID Service profile described in the bullet point above to provide the ability to create other user profiles and access to other service specific personal profile areas (e.g. in connection with SAP’s own partner programs, forums and communities). Since such profiles may allow you to access services of different members of the SAP group of companies (including all SAP companies as well as all Ariba, SuccessFactors, Hybris, Sybase, Business Objects, Fieldglass, Concur, Multiposting and SeeWhy companies) you acknowledge that such Personal Data required for the creation of your user profile may be shared within and used by the whole SAP group of companies for this purpose. Such service may also allow you to share information about you (including Personal Data) with other registered users of the same service. You can use the functionality of the relevant service to determine which information you want to share;
- To provide a personalized user experience and view protected content.
- To conduct online "Click to Chat" and "Click to Call" sessions;
- In order to ensure and control the quality of the information and experience you have during chat sessions with SAP by educating our personnel to effectively answer your questions;
- To provide the ability to contact you in order to respond to your inquiries, and provide you with shipping and billing information, and to provide customer feedback and support;
- To provide contests, sweepstakes or other marketing or promotional activities on the www.sap.com or other SAP websites. Personal Data may be collected to administer those programs;
- To conduct questionnaires and surveys in order to provide better products and services to our customers and end users. Your completion of any questionnaires is voluntary;
- To support recruitment inquiries;
- To prepare anonymized data regarding the use of SAP’s websites and offerings. SAP will use such anonymized data only for the improvement of such websites and offerings;
- To meet contractual obligations; and
- To comply with applicable regulatory requirements, in particular resulting from export laws. SAP and its products, technologies and services are subject to the export laws of various countries, including without limitation, to those of the European Union and its member states, and the United States of America. You acknowledge that, pursuant to the applicable export laws, trade sanctions and embargoes issued by these countries, SAP is required to take measures to prevent entities, organizations and parties listed in government issued sanctioned party lists from accessing certain products, technologies and services through SAP’s websites or other delivery channels controlled by SAP. You therefore acknowledge and agree that SAP may (i) automatically check any user registration data and other information you provide about your identity against applicable sanctioned party lists; (ii) regularly repeat such checks whenever a sanctioned party list is updated or when you update your information; (iii) block your access to SAP’s services and systems in case of a potential match; and (iv) in case of a potential match contact you in order to confirm your identity.
2. E-mail Addresses
If you choose to give us your e-mail address, we will communicate with you via e-mail. We do not share your e-mail address with others outside the SAP group of companies unless this is required for the business relationship between you and SAP or if you register for third party services. You can choose not to receive any more e-mails at any time (in accordance with Subsection 9. (Choice/Opt-Out) below). However, such choice will not affect the sending of emails that are strictly required to perform the business relationship between you and SAP.
Depending on how your e-mail application is set up, information about you may be transmitted automatically when you send e-mail to SAP.
If you choose to register for third-party services, we may need to send some information from your registration with SAP to the service provider, possibly including your e-mail address.
3. Shopping or Event Registration
Our site includes order forms that you fill out to request information, products, and services. These forms may in addition to the information described above collect your financial information, such as your banking details or credit card numbers. SAP promises to use any financial information that you submit solely for billing and payment purposes for that special transaction. This may include the transfer of your data to third parties involved in executing the transaction, such as banks, credit card companies, payment facilitators and other financial and credit control institutions.
4. IP Addresses
We use IP addresses to help diagnose problems, to establish the country from which a user is using our websites and services in order to provide appropriate legal statements, to administer our website, and to gather demographic information as further stated in the below Subsection 5 (Automated Tools).
We may also use IP addresses or other information, as further explained in Subsection 5 (Automated Tools) below you have shared on this website or at any earlier occasion or a campaign code, to determine which pages on our sites you visit and which topics may be of interest to you so we can provide you with information about relevant products and services.
SAP may also collect IP addresses (and other technical information such as browser type) during a Click-to-Chat or Click-to-Call session that you initiate. This information is collected when you connect to SAP so that we may identify your session, deliver content based on the technical capabilities of your browser, and for quality control purposes. Your IP address will not be used to identify you unless you provide your prior consent.
SAP will only gather information related to your visit to the SAP site. We do not track or collect Personal Data from your visits to companies or entities outside the SAP Group of companies beyond the information stated above in the Subsection III. (Collection and Processing of Your Personal Data).
5. Automated Tools
In addition to the information you provide, SAP may also collect information during your visit to a SAP website through Automated Tools, which include Web beacons, cookies, embedded Web links, and other commonly used information-gathering tools. These tools collect certain standard information that your browser sends to our website such as your browser type and language, access times, and the address of the website from which you arrived at an SAP website. Using these tools, SAP is also able to confirm receipt of e-mails that the recipient consented to receive, and can track other information such as pages visited on the relevant SAP site and whether or not the recipient registers for an event offered by SAP and certain other aggregate data that is not related to a particular individual.
Unless another means to make your choice is listed below, you may refuse the use of Automated Tools like cookies (i) if the relevant website supports TRUSTe Consent Manager by clicking on the respective link in the footer of the website or, (ii) if TRUSTe Consent Manager is not available, by selecting the appropriate settings in your browser. Kindly note that in the latter case the settings in your browser regarding cookies are limited to the particular browser installed on a particular device and that, as a consequence, if you visit SAP’s websites with different browsers or different devices, you have to disable the tracking cookies in the browsers of all relevant devices. However kindly further note that if you do this you may not be able to use the full functionality of the relevant site.
SAP is in particular currently using the following Automated Tools for the purposes set out below.
a. Adobe Analytics
Some websites which refer to this Privacy Statement use Adobe Analytics. Adobe Analytics uses IP addresses to establish the approximate region where a user is coming from. Therefore, Adobe Analytics collects the full IP address of users in a first step and then anonymizes it in a second step. Only the anonymized IP address is used to determine the approximate location from where a user is accessing a certain website.
Furthermore, if you are a registered user and logged on, SAP uses Adobe Analytics to track your user ID together with how you use the relevant website.
In addition to an opt-out by way of the TRUSTe Consent Manager (where available) you can opt-out of the use of Adobe Analytics by using this link: http://sap.d1.sc.omtrdc.net/optout.html?optout=1&confirm_change=1
b. Adobe Target
Some websites which refer to this Privacy Statement use Adobe Target. Adobe Target assigns a user ID to each user who does not opt-out of the tracking as described below and then creates a user profile based on this user ID by adding information about the user’s (i) browser and other device specific information, (ii) information about usage behavior and (iii) location data. Location data is collected by way of analyzing the user’s anonymized IP address: Adobe Target collects the full IP address of users in a first step and then anonymizes it in a second step. Only the anonymized IP address is used to determine the approximate location from where a user is accessing a certain website.
This information is used to display targeted content on the SAP group websites using Adobe Target.
In addition to an opt-out by way of the TRUSTe Consent Manager (where available) you can opt-out of the use of Adobe Analytics by using this link: http://sap.d1.sc.omtrdc.net/optout.html?optout=1&confirm_change=1
c. Google Analytics
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
d. SAP Web Analytics
Some websites which refer to this Privacy Statement use SAP Web Analytics (“SWA”). SWA helps to analyze how users use the relevant site. The information generated (including a part of your IP address and a browser-ID) will be transmitted to and stored by SAP. SAP will use this information only for the purpose of evaluating your use of the website and compiling reports on website activity for website operators – and finally, to improve SAP’s websites.
Each website which uses SWA contains a separate statement regarding such use and provides for an option of the user to opt-out of the tracking by SWA either directly in the relevant statement or by way of the TRUSTe Consent Manager which can be reached over a link on the relevant page (where available).
e. Usage tracking for marketing purposes
SAP websites may collect the way you are accessing and using such websites by other means in order to prepare usage profiles that are used to determine which content is the most appropriate to be displayed while you visit a certain website.
In this case, SAP is capturing your usage behavior (websites visited, point in time a website has been visited, activity on a website/clicks made on (objects of) a website, browser type, operating or computing system used, referring website from which you have accessed a SAP website, the location from where you access a website) together with a unique identifier (like your IP address or a cookie ID) that allows SAP to establish that there is a certain person active on its websites but no information like your name that can be used to directly identify you. SAP will use the collected information only in order to display appropriate and relevant content on its websites.
You may opt-out of this tracking (i) if the relevant website supports TRUSTe Consent Manager by clicking on the respective link in the footer of the website or, (ii) if TRUSTe Consent Manager is not available, by selecting the appropriate settings in your browser. Kindly note that in the latter case the settings in your browser are limited to the particular browser installed on a particular device and that, as a consequence, if you visit SAP’s websites with different browsers or different devices, you have to make the respective adjustments in the browsers of all relevant devices. However kindly further note that depending on the settings made in your browser(s) you may not be able to use the full functionality of the relevant site.
f. Embedded Web Links
Emails from SAP often use links designed to lead you to a relevant area on the Web, after redirection through SAP's servers. The redirection system allows SAP to change the destination URL of these links, if necessary, and to determine the effectiveness of our marketing initiatives.
In emails, such links may also allow SAP to determine if you have clicked on a link in the email, and the information about this interaction may be connected to your personal identity. If you do not want SAP to collect information about the links you clicked, you can simply choose not to click on the links in an e-mail that SAP sends you.
6. Sharing Your Personal Data
As a member of a global group of companies, SAP operates a number of websites around the world. Any data and information that you volunteer or that is otherwise collected on one of our sites in any one country may be sent electronically to a server for one of these sites in another country. Such servers or other types of data processing facilities may be located within or outside the European Economic Area or third countries that are regarded by the EU Commission as featuring an adequate level of data protection. However, we safeguard your privacy interests around the world by ensuring that this SAP website adheres to our data protection principles described in this statement. All companies of the SAP group (including, for the avoidance of doubt, all SAP companies as well as all Ariba, SuccessFactors, Hybris, Sybase, Business Objects, Fieldglass, Concur, Multiposting and SeeWhy companies) may use the information internationally in connection with processing your inquiries and orders, in order to provide services to you, to help improve our products and services to keep you up to date about the latest IT product announcements, software updates, software upgrades, security patches, system enhancements, special offers, for processing and storage and for all other purposes set out in the section “Use and Purpose of Collected Personal Data” above. This includes that all companies of the SAP group may provide you with marketing materials if (depending on the country in which the relevant SAP group company operates) you have granted your prior consent and/or unless you have opted out of receiving marketing materials.
We may also share such information with business partners, service vendors, authorized third-party agents or contractors (such as Google, Inc. or Adobe Systems Inc.) in order to provide a requested service or transaction, including processing orders, processing credit card transactions, hosting websites, hosting event and seminar registration and providing customer support, providing you with information on products and services that may be of interest to you or in order to analyze the user behavior on our webpages (e.g. in case of Adobe Analytics or Google Analytics).
We only provide these third parties with the minimum amount of Personal Data necessary to provide the services on our behalf, and the third parties are (where legally required) bound by appropriate order data processing agreements and/or comprehensive confidentiality undertakings and therefore not permitted to use your Personal Data except for the limited purpose of completing the requested service or transaction.
We do not sell or rent your Personal Data to third parties for marketing purposes unless you have granted us permission to do so.
We may respond to subpoenas, court orders, or legal process by disclosing your Personal Data and other related information, if necessary. We also may choose to establish or exercise our legal rights or defend against legal claims.
Circumstances may arise where, whether for strategic or other business reasons, SAP decides to sell, buy, merge or otherwise reorganize businesses in some countries. Such a transaction may involve, in accordance with applicable law, the disclosure of Personal Data to prospective or actual purchasers, or the receipt of it from sellers. It is SAP's practice to seek appropriate protection for information in these types of transactions.
7. Security of Your Personal Data
SAP is committed to protecting the Personal Data you share with us. SAP uses a combination of industry-standard security technologies, procedures, and organizational measures to help protect your Personal Data from unauthorized access, use or disclosure. SAP supports online security using secure server technology because we want your data to be safe. There are state-of-the-art security arrangements and facilities on SAP sites to prevent abuse.
We bind our employees and data processors to observe your privacy and confidentiality rights.
8. Links to Other Sites
This website may contain links to foreign (i.e. non SAP group of companies) sites. SAP is not responsible for the privacy practices or the content of other websites outside the SAP Group of companies. Therefore, we recommend that you carefully read the privacy statements of such foreign sites.
We communicate with users who subscribe to our services on a regular basis via email, and we may also communicate by phone to resolve customer complaints or investigate suspicious transactions. We may use your email address to confirm your opening of an account, to send you notice of payments, to send you information about changes to our products and services, and to send notices and other disclosures as required by law. Generally, users cannot opt out of these communications, which are not marketing related but merely required for the relevant business relationship.
With regard to marketing related types of communication (i.e. emails and phone calls), SAP will (i) where legally required only provide you with such information after you have granted your opt-in and (ii) provide you the opportunity to exercise an opt-out choice if you do not want to receive further marketing related types of communication from us. The opt-out choice may be exercised, depending on the respective SAP group web offering:
a. SAP SE, local SAP affiliates, Hybris and Ariba: http://www.sap.com/profile/unsubscribe.epx
b. SuccessFactors: if you receive marketing or similar e-mail messages from us and wish to opt out of receiving such messages, you may simply follow the opt-out procedure specified in such e-mail. In addition, if you have registered on our site, you may opt out of receiving any future marketing or similar messages by emailing your request to unsubscribe here: email@example.com. Users of SuccessFactors Recruiting Marketing (RMK) may elect not to receive future communications. If you are a registered User, please open the email you received from RMK and click on the unsubscribe link. If you prefer to have your account removed permanently, please email your request to firstname.lastname@example.org.
10. Data Retention
SAP will not retain your Personal Data longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations. In particular, and if no such contradicting statutory obligation exists, SAP will delete your Personal Data once you inform SAP that you do not want SAP to further process your Personal Data. Please direct any such request to webmaster@SAP.com. Kindly note that in this case the use of certain services or offerings may either be limited or not possible any longer. In case there is a contradicting statutory obligation for SAP to retain your Personal Data, SAP will block it against further processing and then delete the relevant Personal Data when the requirement to retain it has ceased.
11. Inquiries, Access and Updating Your Personal Data
SAP needs your help in keeping the Personal Data you have shared with us accurate and up to date. If you are a registered user, you may make these updates yourself online via www.sap.com/profile. You may also make these updates or other changes by sending an email to webmaster@SAP.com.
If you have any other questions about this Privacy Statement or if you wish to inspect the Personal Data we hold about you, please contact: Webmaster: email@example.com
12. US-Specific Provisions
To the extent that SAP is subject to US privacy requirements, the below applies in addition:
a. Do Not Track
Cookies are identifiers that can be sent from a site via your browser to be placed on your computer's hard drive. Thereafter when you visit a site, a message is sent back to the web server by the browser accessing the site. Your browser may allow you to set a “Do not track” preference. Our site does not honor “Do not track” requests, but you may elect not to accept cookies by changing the designated settings on your web browser or, where available by way of the TRUSTe Consent Manager if the relevant website contains a link to it. However, not utilizing cookies may prevent you from using certain functions and features of our site. This site does not allow third parties to gather information about you over time and across sites.
b. Requirements to Protect Children's Privacy
We do not intend for our websites or online services to be used by anyone under the age of 13. If you are a parent or guardian and believe we may have collected information about a child, please contact us as described in this Privacy Statement.
13. Russia-Specific Provisions:
The below applies to users residing in the Russian Federation:
The services hereunder are not intended for use by the citizens of the Russian Federation, who reside in Russia. If you are a Russian citizen residing in Russia, you are hereby notified, that any Personal Data that you input into the services will be solely at your own risk and responsibility, you explicitly agree that SAP may accumulate your Personal Data and will process this data in the US and in other countries and that you will not hold SAP accountable for any potential non-observance of the Russian Federation legislation.
Revised and posted as of July 25, 2016