2025 sap.com Privacy Statement

The English version PDF for the Hong Kong country site Download the Document

Effective Date: January 1, 2025Welcome!Protecting the individual's privacy is crucial to the future of business. We have created this privacystatement to demonstrate our firm commitment to the individual’s right to data protection and privacy.It outlines how we handle information that can directly or indirectly identify an individual (“personaldata”).Respecting your time and with the goal of providing you with the quickest possible access to therelevant passages of the privacy statement, we offer you the following summary:SummaryThe privacy statement aims to explain what personal data is processed by SAP, who uses yourpersonal data, for what purpose, for how long, and explains what rights you have in this context.Who collects and processes your personal data? SAP does, in the form of the respective legalentity, being either SAP SE in Walldorf, Germany or any another member of the global group of SAPcompanies. The sap.com Privacy Statement describes in detail which processing activities of whichSAP Group members apply.SAP is processing information including personal data about the users of sap.com using cookies orsimilar technologies for the purposes set out in the Cookie Statement. You will find further informationand have the option to exercise your preferences by clicking on the Cookie Preferences link in thefooter of this page.What personal data does SAP collect?SAP may collect various types of personal data about you when conducting its business, including: personal contact data, personal data related to your or your employer’s business relationship with SAP, personal data SAP must collect due to legal- and compliance-related purposes, personal usage, registration, and participation data which SAP may generate through your use of itsweb and online offerings, special categories of personal data, application-related personal data, personal data which SAP may receive from third parties, personal data SAP requires to ensure your or your employer’s satisfaction with our products,services, and offerings.For what purpose(s) does SAP collect personal data?SAP processes your personal data to: pursue its business relationships with you, your employer, or your employer’s customers, includingensuring your satisfaction with and keeping you up to date on the latest news about our productsand services, develop and offer you its software products, cloud, and other services, protect the quality and safety of its premises, facilities, products, or services, secure and, if necessary, defend its protected legal assets against unlawful attacks, assert ourrights or defend SAP against legal claims, ensure compliance with statutory laws and regulations applicable to SAP,
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 16 operate SAP’s Internet pages, web offerings, or other online events including analyzing thebehavior of the users, enabling you to create a user profile, benefit from an identity service and topromote and continuously improve your user experience, search you as a potential talent for SAP, transfer it to recipients like other members of the SAP Group, third-party service providers, SAPpartners and others.If you want to learn more about each of these purposes for which SAP may collect, transfer, and useyour personal data, including for how long your data is being retained and specific to the GeneralData Protection Regulation (GDPR), the legal ground on which SAP is pursuing them, please refer tothe full privacy statement below.What are your data protection rights? You have the right to request from SAP access to, correctionof, and/or the return or the deletion of your personal data. You may request from SAP to restrict theaccess to your personal data or to exclude it from further processing. You may revoke a once givenconsent or object to processing activities which SAP may intend to pursue in a given case. When youbelieve that SAP was processing your personal data not in accordance with this privacy statement orunder breach of applicable data protection laws, you have the right to lodge a complaint with arelevant supervisory authority. The sap.com Privacy Statement describes each of these rights in detail,including how you can reach us to exercise any of these rights against SAP and how to identify, ifnecessary, the relevant data protection authority.In the final section below, SAP addresses several country-specific aspects that must be explained ina privacy statement under relevant country laws. The country-specific requirements include but arenot limited to those from the EU and EEA, Australia, Brazil, Canada, Colombia, Saudi Arabia, Malaysia,New Zealand, the Philippines, Singapore, South Africa, South Korea, Thailand, and the United States ofAmerica.SAP Privacy Statement(for details on each section, expand/contract the text by using the “+/-” icons)+ Who is the responsible SAP Group memberThis privacy statement applies to the collection and processing of personal data: during the central operation of this website and other globally operated SAP business activities byo SAP SE, Dietmar-Hopp-Allee 16, Walldorf 69190, Germany if you are in a member state ofthe EU or the EWR or in any of the countries of Andorra, Faroe Islands, Guernsey, Isle ofMan, Jersey, Switzerland, or the United Kingdom or byo SAP America Inc., 3809 West Chester Pike, Suite 200, Newtown Square, PA 19073, USA ifyou are in any other country, or byo a specific SAP Group member as may be stated in the Additional Country and RegionalSpecific Provisions at the end of this privacy statement. in the context of a pre-contractual or contractual business relationship with you or your employerby a local SAP Group member. in the context of a registration form when a specific SAP Group member is directly collectingpersonal data for the purpose of registering to a service or event and is therefore presented as therelevant controller on this registration page or website by referencing to this privacy statement.SAP SE, SAP America, Inc., and each relevant SAP Group member are, depending on the given case,hereinafter referred to as “SAP.”
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 3 / 16This privacy statement does not apply to SAP internet-pages or web-services which present their ownprivacy statement.+ For what purposes does SAP process your Personal Data and based on what legalbasis?Depending on the applicable law there must be a justification for processing of personal data, which issometimes referred to as legal basis. Here are details on both the purpose of processing and the legalbasis for doing so.SAP’s compliance with statutory obligations SAP processes your personal data for the purpose of ensuring an adequate level of technical andorganizational security of SAP's products, services, online events, facilities, and premises. For this,SAP will take the measures necessary to verify or maintain the quality and safety of a product orservice which is owned, manufactured by or for, or controlled by SAP. This may comprise the use ofpersonal data for sufficient identification and authorization of designated users, internal qualitycontrol through auditing, analysis, and research, debugging to identify and repair errors that impairexisting or intended functionality, account and network security, replication for loss prevention,detecting security incidents, protection against malicious, deceptive, fraudulent, or illegal activity,and prosecuting those responsible for such kind of activity. We may further process your name,likeness, and other contact or compliance related data when you visit a local SAP affiliate or lab inthe context of access management and video surveillance to protect the security and safety of ourlocations and assets. SAP may process personal data to create anonymized data sets which maythen be used to safeguard and protect SAP systems including data, equipment, facilities, andnetworks. SAP processes Personal Data (name, surname, country, IP address) to the extent necessary to fulfilsanctions and embargo requirements under European Economic Area (“EEA”) laws to which SAP issubject, and laws and regulations extraterritorial to the EEA (based on SAP’s legitimate interest). If necessary, SAP uses personal data to prevent or prosecute criminal activities such as any form ofcybercrime, the illegal use of our products and services or fraud, to assert our rights or defend SAPagainst legal claims. To comply with data protection and unfair competition law related requirements. Depending onthe country in which the relevant SAP Group member operates, and whether you have expresslyconsented to or opted out of receiving commercial information, SAP may process personal datanecessary to accommodate your data protection and privacy choices for the receipt of suchinformation and, when necessary to ensure compliance, exchange such information with the othermembers of the SAP Group.When ensuring compliance, SAP processes your personal data if and to the extent necessary to fulfilllegal requirements under European Union or EU Member State law to which SAP is subject, and lawsand regulations extraterritorial to the EU (legitimate interest to comply with extraterritorial laws andregulations).SAP’s operation of Web ServicesSAP processes personal data for the purpose of operating, providing to you and administering youruse of SAP’s internet pages, web offerings, or other online events. This may include, without limitation:
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 4 / 16 To provide web services and functions, create and administer your online account, update, secure,troubleshoot the service, provide support, improve, and develop the web services and/or answerand fulfill your requests or instructions. To process information that relates to your visit to our web offerings to improve your userexperience, identify your individual demand and to personalize the way we provide you with theinformation you are looking for. For this purpose, we collect information regardless of whether youregister with a user profile or not. To share basic participant information (your name, company, and email address) with otherparticipants of the same event, seminar, or webinar to promote the interaction between theparticipants and to stimulate the communication and the exchange of ideas. To manage and ensure the security of our web services and prevent and detect security threats,fraud or other criminal or malicious activities and as reasonably necessary to enforce the webservices terms, to establish or preserve a legal claim or defense, to prevent fraud or other illegalactivities, including attacks on our information technology systems. To register and create a user profile to use certain web offerings linked to SAP’s websites, includingforums, blogs, and networks (e.g., the SAP Community). The user profiles serve to personalize theinteractions between the users (for example, by way of messaging or follow functionality) and toallow SAP to foster the collaboration and quality of communication through such offerings. Theprofile settings of the relevant web offering allow you to determine which information you want toshare. Through the user profile you can share personal information about you with other users,such as your name, photo, social media accounts, postal or email address, telephone number,personal interests, skills, and basic information about your company. To create a user profile, which may be specific to a single web offering of SAP, or it may also allowyou to access other web offerings of SAP or of other members of the SAP Group. It is your choicewhether to use any of these additional web offerings. If you do, SAP will make your personal dataavailable to such other web offerings to provide you with initial access. Kindly note that withoutyour consent for SAP to create such user profiles, SAP will not be able to offer such services to youwhere your consent is a statutory requirement so that SAP can provide these services to you.When operating SAP’s web services, SAP processes your personal data if and to the extent, SAP obtained your consent, if required by law, to process your personal data for this purpose, necessary to fulfill (pre-) contractual obligations with you, necessary to fulfill legal requirements applicable to SAP, necessary to pursue SAP’s legitimate interest to efficiently perform or manage SAP’s web servicesand business operation and assert or defend itself against legal claims.We believe that SAP’s interest in pursuing these business purposes is legitimate and thereby notoutweighed by your personal rights and interest to refrain processing for such purpose. In any of thesecases, we duly factor into our balancing test: the business purpose reasonably pursued by SAP in thegiven case, the categories, amount and sensitivity of personal data that is necessarily being processed,the level of protection of your personal data which is ensured by means of our general data protectionpolicies, guidelines, and processes, and the rights you have in relation to the processing activity.SAP’s pursuit of business relationshipsSAP processes personal data to pursue its business relationships with customers, partners, and otherusers to fulfill pre-contractual and contractual business relations. This may include satisfying requests,processing orders, delivering an ordered product or service, or engaging in any other relevant action toestablish, fulfill and maintain our business relationships, including: Products and services:
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 5 / 16This may include any of SAP’s on-premise and cloud software products, Web Services, apps,online-forums, webinars and events, non-marketing related newsletters, white papers, tutorials,trainings, as well as other offerings like contests or sweepstakes. When you purchase or intend topurchase products or services from SAP on behalf of a corporate customer or are otherwiseassociated as contact person for the business relationship between SAP and a corporate customeror partner (“Customer Contact”), SAP will use your personal data for this purpose. Morespecifically, SAP may use your personal data to confirm your opening of an account, manage thecontract execution, send you disclosures as may be required by law, notice of payments, and otherinformation about our products and services. SAP may respond to related inquiries, provide youwith necessary support and process your feedback. In the context of your or your employers use ofour products or services, SAP may communicate with you by post, email, live chat, contact forms,phone or any other medium to resolve your, a user’s, or a customer’s question or complaint or toinvestigate suspicious transactions. In case of telephone calls or chat sessions, SAP may recordsuch calls or chat sessions to improve the quality of SAP’s services after informing you accordinglyduring that call and, subject to applicable law, receiving your prior consent before the recordingbegins. Development of products and services:Within an existing business relationship between you or your employer and SAP, SAP may processyour personal data for internal research, technological demonstration, and development, and tohelp SAP create, develop, operate, deliver, improve, upgrade, or enhance SAP products andservices. SAP may process personal data to create anonymized data sets which may then be usedto improve SAP’s products and services. Customer Satisfaction:Within an existing business relationship between you or your employer and SAP, SAP processesyour personal data to help us understand how satisfied you are with the functionality and quality ofour products and services, to provide you with relevant information on our latest productannouncements, software updates or upgrades, events, special offers, and other information aboutSAP’s software and services that is relevant and useful to you. To keep you up to date:Within an existing business relationship between you or your employer and SAP, SAP processesyour personal data to inform you about SAP events, products or services which are similar or relateto products and services you or your employer have already purchased or used. SAP will informyou by postal mail, email, phone or other electronic means about such news if SAP has collectedsuch information in the context of the business relationship or has obtained this information from apublicly available source as far as it is allowed by law or you have consented. You are entitled toobject to SAP’s use for this purpose at any time by selecting the opt-out option at the bottom ofeach marketing-related communication. Request feedback, questionnaires, and surveys:To the extent allowed by applicable law, SAP may contact you for feedback regarding theimprovement of the relevant material, product, or service. SAP may also invite you to participate inquestionnaires and surveys. These will generally be designed so you can participate without havingto provide information that identifies you as a participant. If you nonetheless provide your personaldata, SAP will use it for the purpose stated in the questionnaire or survey or to improve its productsand services. To get in touch with you:To establish new business relationships between SAP and you or your employer, SAP processesyour personal data to inform you about SAP events, products or services that have a substantive ormaterial connection to your role or function in your organization. We may also contact you todiscuss further your interest in SAP’s products or services. SAP will contact you by postal mail,