Revised 2026 sap.com Privacy Statement for Global/United States website

April 2026 sap.com Privacy Statement in the English language for Global use. Revised to include Nigeria-specific provisions. Download the Document

Effective Date: April 29, 2026Welcome!Protecting the individual's privacy is crucial to the future of business. We have created this privacy statement todemonstrate our firm commitment to the individual’s right to data protection and privacy. It outlines how wehandle information that can directly or indirectly identify an individual (“personal data”).Respecting your time and with the goal of providing you with the quickest possible access to the relevantpassages of the privacy statement, we offer you the following summary:SummaryThe privacy statement aims to explain what personal data is processed by SAP, who uses your personaldata, for what purpose, for how long, and explains what rights you have in this context.Who collects and processes your personal data? SAP does, in the form of the respective legal entity, beingeither SAP SE in Walldorf, Germany or any other member of the global SAP Group. The sap.com PrivacyStatement describes in detail which processing activities of which SAP Group members apply.SAP is processing information including personal data about the users of sap.com using cookies or similartechnologies for the purposes set out in the Cookie Statement. You will find further information and have theoption to exercise your preferences by clicking on the Cookie Preferences link in the footer of this page.What personal data does SAP collect?SAP may collect various types of personal data about you when conducting its business, including: personal contact data, personal data related to your or your employer’s business relationship with SAP, personal data SAP must collect due to legal- and compliance-related purposes, personal usage, registration, and participation data which SAP may generate through your use of its web andonline offerings, special categories of personal data, application-related personal data, personal data which SAP may receive from third parties, personal data SAP requires to ensure your or your employer’s satisfaction with our products, services, andofferings.For what purpose(s) does SAP collect personal data?SAP processes your personal data to: pursue its business relationships with you, your employer, or your employer’s customers, including ensuringyour satisfaction with and keeping you up to date on the latest news about our products and services, develop and offer you its software products, cloud, and other services, protect the quality and safety of its premises, facilities, products, or services, secure and, if necessary, defend its protected legal assets against unlawful attacks, assert our rights ordefend SAP against legal claims, ensure compliance with statutory laws and regulations applicable to SAP, operate SAP’s internet pages, web offerings, or other online events including analyzing the behavior of theusers, enabling you to create a user profile, benefit from an identity service and to promote and continuouslyimprove your user experience, search you as a potential talent for SAP,
© 2026 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 19 transfer it to recipients like other members of the SAP Group, third-party service providers, SAP partners andothers.If you want to learn more about each of these purposes for which SAP may collect, transfer, and use yourpersonal data, including for how long your data is being retained and specific to the General Data ProtectionRegulation (GDPR), the legal ground on which SAP is pursuing them, please refer to the full privacy statementbelow.What are your data protection rights?You have the right to request from SAP access to, correction of, and/or the return or the deletion of your personaldata. You may request from SAP to restrict the access to your personal data or to exclude it from furtherprocessing. You may revoke a once given consent or object to processing activities which SAP may intend topursue in a given case. When you believe that SAP was processing your personal data not in accordance with thisprivacy statement or under breach of applicable data protection laws, you have the right to lodge a complaintwith a relevant supervisory authority. The sap.com Privacy Statement describes each of these rights in detail,including how you can reach us to exercise any of these rights against SAP and how to identify, if necessary, therelevant data protection authority.In the final section below, SAP addresses several country-specific aspects that must be explained in a privacystatement under relevant country laws. The country-specific requirements include but are not limited to thosefrom the EU and EEA, Australia, Brazil, Canada, Colombia, the Kingdom of Saudi Arabia, India, Indonesia, Malaysia,Mexico, New Zealand, the Philippines, Singapore, South Africa, South Korea, Thailand, and the United States ofAmerica.SAP Privacy Statement(for details on each section, expand/contract the text by using the “+/-” icons)+ Who is the responsible SAP Group memberThis privacy statement applies to the collection and processing of personal data: during the central operation of this website and other globally operated SAP business activities byo SAP SE, Dietmar-Hopp-Allee 16, Walldorf 69190, Germany if you are in a member state of the EUor the EWR or in any of the countries of Andorra, Faroe Islands, Guernsey, Isle of Man, Jersey,Switzerland, or the United Kingdom or byo SAP America Inc., 3809 West Chester Pike, Suite 200, Newtown Square, PA 19073, USA if youare in any other country, or byo a specific SAP Group member as may be stated in the Additional Country and RegionalSpecific Provisions at the end of this privacy statement. in the context of a pre-contractual or contractual business relationship with you or your employer by alocal SAP Group member. in the context of a registration form when a specific SAP Group member is directly collecting personaldata for the purpose of registering to a service or event and is therefore presented as the relevantcontroller on this registration page or website by referencing to this privacy statement.SAP SE, SAP America, Inc., and each relevant SAP Group member are, depending on the given case, hereinafterreferred to as “SAP”.This privacy statement does not apply to SAP internet-pages or web-services which present their own privacystatement.
© 2026 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 3 / 19+ For what purposes does SAP process your Personal Data and based on what legalbasis?Depending on the applicable law there must be a justification for processing of personal data, which issometimes referred to as legal basis. Here are details on both the purpose of processing and the legal basis fordoing so.SAP’s compliance with statutory obligations SAP processes your personal data for the purpose of ensuring an adequate level of technical andorganizational security of SAP's products, services, online events, facilities, and premises. For this, SAP willtake the measures necessary to verify or maintain the quality and safety of a product or service which isowned, manufactured by or for, or controlled by SAP. This may comprise the use of personal data forsufficient identification and authorization of designated users, internal quality control through auditing,analysis, and research, debugging to identify and repair errors that impair existing or intended functionality,account and network security, replication for loss prevention, detecting security incidents, protection againstmalicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for such kind of activity.We may further process your name, likeness, and other contact or compliance related data when you visit alocal SAP affiliate or lab in the context of access management and video surveillance to protect the securityand safety of our locations and assets. SAP may process personal data to create anonymized data setswhich may then be used to safeguard and protect SAP systems including data, equipment, facilities andnetworks. SAP processes Personal Data (name, surname, country, IP address) to the extent necessary to fulfil sanctionsand embargo requirements under European Economic Area (“EEA”) laws to which SAP is subject, and lawsand regulations extraterritorial to the EEA (based on SAP’s legitimate interest). If necessary, SAP uses personal data to prevent or prosecute criminal activities such as any form ofcybercrime, the illegal use of our products and services or fraud, to assert our rights or defend SAP againstlegal claims. To comply with data protection and unfair competition law related requirements. Depending on the countryin which the relevant SAP Group member operates, and whether you have expressly consented to or optedout of receiving commercial information, SAP may process personal data necessary to accommodate yourdata protection and privacy choices for the receipt of such information and, when necessary to ensurecompliance, exchange such information with the other members of the SAP Group.When ensuring compliance, SAP processes your personal data if and to the extent necessary to fulfill legalrequirements under European Union or EU Member State law to which SAP is subject, and laws and regulationsextraterritorial to the EU (legitimate interest to comply with extraterritorial laws and regulations).SAP’s Web ServicesSAP processes personal data for the purpose of operating, providing to you and administering your use of SAP’sinternet pages, web offerings, or other online events. This may include, without limitation: To provide web services and functions, create and administer your online account, update, secure,troubleshoot the service, provide support, improve, and develop the web services and/or answer and fulfillyour requests or instructions. To process information that relates to your visit to our web offerings to improve your user experience,identify your individual demand and to personalize the way we provide you with the information you arelooking for. For this purpose, we collect information regardless of whether you register with a user profile ornot.
© 2026 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 4 / 19 To share basic participant information (your name, company, and email address) with other participants ofthe same event, seminar, or webinar to promote the interaction between the participants and to stimulate thecommunication and the exchange of ideas. To manage and ensure the security of our web services and prevent and detect security threats, fraud orother criminal or malicious activities and as reasonably necessary to enforce the web services terms, toestablish or preserve a legal claim or defense, to prevent fraud or other illegal activities, including attacks onour information technology systems. To register and create a user profile to use certain web offerings linked to SAP’s websites, including forums,blogs, and networks (e.g., the SAP Community). The user profiles serve to personalize the interactionsbetween the users (for example, by way of messaging or follow functionality) and to allow SAP to foster thecollaboration and quality of communication through such offerings. The profile settings of the relevant weboffering allow you to determine which information you want to share. Through the user profile you can sharepersonal information about you with other users, such as your name, photo, social media accounts, postal oremail address, telephone number, personal interests, skills, and basic information about your company. To create a user profile, which may be specific to a single web offering of SAP or it may also allow you toaccess other web offerings of SAP or of other members of the SAP Group. It is your choice whether to useany of these additional web offerings. If you do, SAP will make your personal data available to such otherweb offerings to provide you with initial access. Kindly note that without your consent for SAP to create suchuser profiles, SAP will not be able to offer such services to you where your consent is a statutory requirementso that SAP can provide these services to you.When operating SAP’s web services, SAP processes your personal data if and to the extent, SAP obtained your consent, if required by law, to process your personal data for this purpose, necessary to fulfill (pre-) contractual obligations with you, necessary to fulfill legal requirements applicable to SAP, necessary to pursue SAP’s legitimate interest to efficiently perform or manage SAP’s web services andbusiness operation and assert or defend itself against legal claims.We believe that SAP’s interest in pursuing these business purposes is legitimate and thereby not outweighed byyour personal rights and interest to refrain processing for such purpose. In any of these cases, we duly factor intoour balancing test: the business purpose reasonably pursued by SAP in the given case, the categories, amountand sensitivity of personal data that is necessarily being processed, the level of protection of your personal datawhich is ensured by means of our general data protection policies, guidelines, and processes, and the rights youhave in relation to the processing activity.SAP’s business relationshipsSAP processes personal data to pursue its business relationships with customers, partners, and other users tofulfill pre-contractual and contractual business relations. This may include satisfying requests, processing orders,delivering an ordered product or service, or engaging in any other relevant action to establish, fulfill and maintainour business relationships, including: Products and services:This may include any of SAP’s on-premise and cloud software products, web services, apps, online-forums,webinars and events, non-marketing related newsletters, white papers, tutorials, trainings, as well as otherofferings like contests or sweepstakes. When you purchase or intend to purchase products or services fromSAP on behalf of a corporate customer or are otherwise associated as contact person for the businessrelationship between SAP and a corporate customer or partner (“Customer Contact”), SAP will use yourpersonal data for this purpose. More specifically, SAP may use your personal data to confirm your opening ofan account, manage the contract execution, send you disclosures as may be required by law, notice ofpayments, and other information about our products and services. SAP may respond to related inquiries,provide you with necessary support and process your feedback. In the context of your or your employersuse of our products or services, SAP may communicate with you by post, email, live chat, contact forms,phone or any other medium to resolve your, a user’s, or a customer’s question or complaint or to investigate
© 2026 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 5 / 19suspicious transactions. In case of telephone calls or chat sessions, SAP may record such calls or chatsessions to improve the quality of SAP’s services after informing you accordingly during that call and, subjectto applicable law, receiving your prior consent before the recording begins. Customer Satisfaction:Within an existing business relationship between you or your employer and SAP, SAP processes yourpersonal data to help us understand how satisfied you are with the functionality and quality of our productsand services, to provide you with relevant information on our latest product announcements, softwareupdates or upgrades, events, special offers, and other information about SAP’s software and services that isrelevant and useful to you. To keep you up to date:Within an existing business relationship between you or your employer and SAP, SAP processes yourpersonal data to inform you about SAP events, products or services which are similar or relate to productsand services you or your employer have already purchased or used. SAP will inform you by postal mail,email, phone or other electronic means about such news if SAP has collected such information in the contextof the business relationship or has obtained this information from a publicly available source as far as it isallowed by law, or you have consented. You are entitled to object to SAP’s use for this purpose at any timeby selecting the opt-out option at the bottom of each marketing-related communication. Feedback requests and surveys:To the extent allowed by applicable law, SAP may contact you for feedback regarding the improvement ofthe relevant material, product, or service. SAP may also invite you to participate in questionnaires andsurveys. These will generally be designed so you can participate without having to provide information thatidentifies you as a participant. If you nonetheless provide your personal data, SAP will use it for the purposestated in the questionnaire or survey or to improve its products and services. To get in touch with you:To establish new business relationships between SAP and you or your employer, SAP processes yourpersonal data to inform you about SAP events, products or services that have a substantive or materialconnection to your role or function in your organization. We may also contact you to discuss further yourinterest in SAP’s products or services. SAP will contact you by postal mail, email, phone or other electronicmeans if you have either consented to such use, or if SAP has obtained your personal data from a publiclyavailable source as allowed by law or to address you for further consent. You are entitled to object to SAP’suse for this purpose at any time by selecting the opt-out option at the bottom of each marketing-relatedcommunication. Personalized Content:SAP processes information about your interactions with SAP across its various business areas and itsofferings (your or your employers prior and current use of SAP products or services, your participation in anduse of SAP’s web offerings, events, white papers, free trials or newsletters) to provide you with the requestedproducts and services and to improve our personal communications with you. This data may also be used toefficiently operate SAP’s business, which also includes: the automation and aggregation of data to supportvarious analytic and statistical efforts, performance and predictive analytics and exploratory data science tosupport your customer journey and to fulfill such requests. To the extent permitted by law, SAP may combineand use such information in an aggregated manner to help us understand your interests and businessdemands, develop our business insight and marketing strategies, and to create, develop, deliver, andimprove our personalized communications with you. It may also be used by SAP to display relevant contenton SAP owned or third-party websites. Advertising IDs:Provided your consent or to the extent permitted by applicable law, SAP may create a hashed user ID toprovide to third-party operated social networks or other web offerings (such as X, LinkedIn, Facebook,Instagram or Google). This information is then matched against the third-party’s own user database to displayto you more relevant SAP content.