SAP Global Physical Security 

Video surveillance cameras (also known as closed-circuit televisions, or CCTV) are directed at viewing and/or recording the images of individuals to ensure an adequate level of security for and at a company´s premises in preventing and/or investigating break-ins, destruction, or other malicious activities. 

 

The video surveillance cameras are installed at:

• various entry and exit points of the SAP buildings/offices;

• security relevant areas in the SAP buildings/offices;

The following buildings are in scope of this Privacy Statement:

• Singapore (SIN05- Mapletree Business City) 30 Pasir Panjang Road.

• Singapore (SIN9) 51 Serangoon North Avenue 4, Singapore, 555858, Singapore.

 

All locations where your personal data may be captured are clearly marked by warning signs.

 

 

Who do We mean when We say SAP in this Privacy Statement?

 

The data controller for video surveillance is identified as the appropriate legal entity for respective SAP Singapore locations.

 

This will include one of the following legal entities:

• SAP Asia Pte. Ltd., 30 Pasir Panjang Road, #03-32, Singapore 117440.

• Ariba International Singapore Pte. Ltd., 30 Pasir Panjang Road, #03-32, Singapore 117440.

• Concur Technologies (Singapore) Pte. Ltd., 30 Pasir Panjang Road, #03-32, Singapore 117440.

• Emarsys Pte. Ltd., 30 Pasir Panjang Road, #03-32, Singapore 117440.

You can reach the data protection officer any time at privacy@sap.com.

 

 

For what purposes does SAP process your Personal Data?

 

SAP processes your personal data in order to ensure an adequate level of security for and at SAP´s premises.

 

This process allows SAP to provide you with access to SAP facilities and to ensure the security and safety of all SAP employees, suppliers, visitors, and assets across all global SAP

locations. This allows SAP to comply with statutory obligations, including identification verification prior to or during access to any SAP-owned or leased facility.

 

Although providing personal data is voluntary, without your personal data, SAP cannot provide you with access to SAP-owned or leased facilities.

 

 

What categories of Personal Data does SAP process?

 

If you move about SAP´s campus or access SAP´s premises, we collect your images via video surveillance cameras, consisting of a recording of your activities except sound or voice (your "personal data").

How long does SAP store your Personal Data?

 

SAP will store your Personal Data for a period of maximum 90 days. If the video surveillance recording is required for the investigation of an incident it can be kept for as long as necessary to conclude the investigation.

 

SAP may retain your Personal Data for additional periods if necessary for compliance with legal obligations to process your Personal Data or if the Personal Data is needed by SAP to assert or defend itself against legal claims. SAP will retain your Personal Data until the end of the relevant retention period or until the claims in question have been settled.

 

 

Who are the recipients of your Personal Data and where will it be processed?

 

Your Personal Data will be passed on to the following categories of third parties to process your Personal Data:

• companies within the SAP Group;

• third party service providers, including contracted security agencies that are contracted to provide security services at SAP, and

• legal or local law enforcement agencies, as the result of any corporate criminal or other security investigations.

As part of a global group of companies operating internationally, SAP has affiliates (the “SAP Group”) and third-party service providers outside of Singapore and may transfer your Personal Data to countries outside of Singapore. SAP uses the EU standard contractual clauses to contractually require that your Personal Data receives a level of data protection consistent with the laws of Singapore. You can obtain a copy (redacted to remove commercial or irrelevant) of such standard contractual clauses by sending a request to privacy[@]sap.com.

 

 

What are your data protection rights?

 

 

Right to access and correct

You can request from SAP at any time access to information about which Personal Data SAP processes about you and, if necessary, information about the ways in which such personal data has been or may have been used or disclosed by SAP within a year before the date of the request, and/ or the correction of such Personal Data.

 

Right to obtain a copy of Personal Data                                                             

You can further request from SAP a copy of the Personal Data you provided to SAP. In this case, please contact SAP-Physical-Sec-Privacy@sap.com and specify the information or processing activities to which your request relates, the format in which you would like to receive the Personal Data. SAP will carefully consider your request and discuss with you how it can best be fulfilled.

 

Right to lodge a complaint

If you take the view that SAP is not processing your Personal Data in accordance with the requirements in this Privacy Statement or under applicable data protection laws, you can at any time, to the extent required by applicable law, lodge a complaint with the data protection authority of the country or state where SAP has its registered seat.

 

 

How can you exercise your data protection rights?

 

Please direct any written inquiries, requests to exercise your rights or complaints to our Data Protection Officer:

Subject: Data Protection Officer

Email: privacy[@]sap.com
Address: Mapletree Business City, 30 Pasir Panjang Rd, Singapore 117440

Contact: +65 6664 6868

 

 

 

 

How will SAP verify requests to exercise data protection rights? 

 

SAP will take steps to ensure it verifies your identity to a reasonable degree of certainty before it will process the data protection right you want to exercise.  When feasible, SAP will match Personal Data provided by you in submitting a request to exercise your rights with information already maintained by SAP. This could include matching two or more data points you provide when you submit a request with two or more data points that are already maintained by SAP.

 

SAP will decline to process requests that are manifestly unfounded, excessive, fraudulent, or are not otherwise required by local law.

 

 

Why does SAP need to use your personal data and on what legal basis is SAP using it?

 

SAP can use your personal data based on its legitimate interest exception as follows: 

• to control access to SAP´s campus and premises; 

• to ensure adequate security for and at SAP´s campus and premises;  

• to ensure the safety of SAP employees and visitors on SAP´s campus and premises;  

• to prevent, deter, and if necessary, investigate unauthorized physical access, including unauthorized access to secure premises and protected rooms, IT infrastructure, or operational information; 

• to prevent sabotage, theft and material damage.  

You can reach out to Us by sending an email at SAP-Physical-Sec-Privacy@sap.com.

 

In addition, SAP can use your personal data based on a legal obligation to support the rightful and valid requests of law enforcement agencies for support in an investigation.