PRIVACY STATEMENT FOR SAP ALUMNI RELATIONS DIGITAL Fast Track BADGE
OFFERING PROGRAM
Protecting the individual’s privacy is crucial to the future of business. We have created this Privacy Statement to demonstrate our firm commitment to the individual`s right to data protection and privacy. This Privacy Statement outlines how we handle information that can be used to directly or indirectly identify an individual.
A. General information
Who is the Data Controller?
Data controller of the SAP Alumni Relations Digital Fast Track Badge offering program is SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany (“SAP”) and its data protection officer can be reached at privacy@sap.com.
What Personal Data does SAP collect?
If you register for the SAP Alumni Relations Digital Fast Track Badge offering program, SAP will collect the information you provide to SAP, which consists of your first name, last name and e-mail address (“Personal Data”).
Why does SAP need your Personal Data?
SAP requires your Personal Data to provide you with your SAP Digital Fast Track Badge. Although providing Personal Data is voluntary, without your Personal Data, SAP cannot provide you with access to the ordered Alumni Badge.
How long does SAP store my Personal Data?
SAP will only store your Personal Data for as long as it is required
- to make the SAP Digital Fast Track Badge available to you;
- to allow you to participate in the SAP Alumni Relations Digital Fast Track Badge offering program
- until the SAP Alumni Relations Digital Fast Track Badge offering program has ended.
SAP will also retain your Personal Data for additional periods if it is required by mandatory law to do so, or where your Personal Data is required for SAP to assert or defend against legal claims. In such case, SAP will retain your Personal Data until the end of the relevant retention period or until the claims in question have been settled.
Who are the recipients of my Personal Data and where will it be processed?
Your Personal Data will be passed on to the following categories of third parties to process your Personal Data:
- Companies within the SAP Group;
- third-party service providers to be able to prepare the SAP Digital Fast Track Badge and offer it to you.
As part of a global group of companies operating internationally, SAP has affiliates (the “SAP Group”) and third-party service providers outside of the European Economic Area (the “EEA”) and will transfer your Personal Data to countries outside of the EEA. If these transfers are to a country for which the EU Commission has not issued an adequacy decision, SAP uses the EU standard contractual clauses to contractually require that your Personal Data receives a level of data protection consistent with the EEA. You can obtain a copy (redacted to remove commercial or irrelevant) of such standard contractual clauses by sending a request to privacy@sap.com. You can also obtain more information from the European Commission on the international dimension of data protection here: European Commission.
What are your data protection rights?
You can request from SAP: access at any time to information about which Personal Data SAP processes about you and the correction or deletion of such Personal Data.
If SAP uses your Personal Data to perform a contract with you, you can further request from SAP a copy of the Personal Data that you have provided to SAP. In this case, please contact the email address below and specify the information or processing activities to which your request relates, the format in which you would like to receive this information, and whether the Personal Data should be sent to you or another recipient. SAP will carefully consider your request and discuss with you how it can best fulfill it.
Furthermore, you can request from SAP that SAP restricts your Personal Data from any further processing in any of the following events: (i) you state that the Personal Data SAP has about you is incorrect, subject to the time SAP requires to check the accuracy of the relevant Personal Data, (ii) there is no legal basis for SAP processing your Personal Data and you demand that SAP restricts your Personal Data from further processing, (iii) SAP no longer requires your Personal Data but you state that you require SAP to retain such data in order to claim or exercise legal rights or to defend against third party claims, or (iv) in case you object to the processing of your Personal Data by SAP based on SAP’s legitimate interest, subject to the time required for SAP to determine whether it has a prevailing interest or legal obligation in processing your Personal Data .
Please note, however, that SAP can or will delete your Personal Data only if there is no statutory obligation or prevailing right of SAP to retain it. Kindly note further that if you request that SAP deletes your Personal Data, you will not be able to continue to use the SAP Alumni Relations offering program (including Fast Track program).
How can you exercise your data protection rights?
Please direct any requests to exercise your rights to privacy@sap.com.
How will SAP verify requests to exercise data protection rights?
SAP will take steps to ensure that it verifies your identity to a reasonable degree of certainty before it will process the data protection right you want to exercise. When feasible, SAP will match Personal Data provided by you in submitting a request to exercise your rights with information already maintained by SAP. This could include matching two or more data points you provide when you submit a request with two or more data points that are already maintained by SAP.
SAP will decline to process requests that are manifestly unfounded, excessive, fraudulent, or are not otherwise required by local law.
Right to lodge a complaint. If you take the view that SAP is not processing your Personal Data in accordance with the requirements in this Privacy Statement or under applicable data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country where you live or with the data protection authority of the country or state where SAP has its registered seat.
Can I use SAP’s services if I am a minor?
Children. In general, this SAP Alumni Relations Digital Alumni Badge offering program is not directed to users below the age of 16 years, or equivalent minimum age in the relevant jurisdiction. If you are younger than 16 or the equivalent minimum age in the relevant jurisdiction, you cannot register with and use this SAP Alumni Relations Digital Fast Track Badge offering program.
B. Processing based on a statutory permission
Why does SAP need to use my Personal Data and on what legal basis is SAP using it?
SAP requires your Personal Data to provide you, at your request, with access to the SAP Alumni Relations offering program. SAP processes Personal Data prior to entering into a contract with you pursuant to Article 6 (1) lit. b GDPR or the equivalent article under other national laws, when applicable.
C. Additional Country-Specific Provisions
Colombia-Specific Provisions apply to citizens of the Republic of Colombia.
Russian-Specific Provisions apply to citizens of the Russian Federation.
Where SAP is subject to certain privacy requirements in the Philippines, the following also applies:
For individuals within the Philippines, you may also exercise your rights as follows:
You can call or write to SAP to submit a request at:
E-Mail: alumni.relations@sap.com
Phone: +632-8705-2500
Address: SAP Philippines, Inc.
Attn: Data Protection Officer
27F Nac Tower, Taguig City 1632, Philippines
The following two provisions apply to citizens of the Philippines:
- You may claim compensation as finally awarded by the National Privacy Commission or the courts if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data, considering any violation of your rights and freedoms.
- If you are the subject of a privacy violation or personal data breach or are otherwise personally affected by a violation of the Data Privacy Act, you may file a complaint with the National Privacy Commission.
- Your Transmissibility Rights. Your lawful heirs and assigns may invoke your rights at any time after your death or when you are incapacitated or incapable of exercising your rights
Where SAP is subject to certain privacy requirements in the United States, the following also applies:
U.S. Children’s Privacy. SAP does not knowingly collect the Personal Data of children under the age of 13. If you are a parent or guardian and believe SAP collected information about a child, please contact SAP as described in this Privacy Statement. SAP will take steps to delete the information as soon as possible. Given that SAP Alumni Relations Digital Fast Track Badge is not directed to users under 16 years of age and in accordance with the disclosure requirements of the CCPA, SAP does not sell the Personal Data of any minors under 16 years of age.
Where SAP is subject to certain privacy requirements in the United States in the State of California, the following also applies:
You have the right:
- to request from SAP access to your Personal Data that SAP collects, uses, or discloses about you;
- to request that SAP delete Personal Data about you;
- to non-discriminatory treatment for exercise of any of your data protection rights; and
- in case of request from SAP for access to your Personal Data, for such information to be portable, if possible, in a readily usable format that allows you to transmit this information to another recipient without hindrance.
In accordance with the disclosure requirements under the California Consumer Privacy Act (“CCPA”), SAP does not and will not sell your Personal Data. In accordance with the verification process set forth in the CCPA, SAP will require a more stringent verification process for deletion requests, or for Personal Data that is considered sensitive or valuable, to minimize the harm that might be posed to you by unauthorized access or deletion of your Personal Data. If SAP must request additional information from you outside of information that is already maintained by SAP, SAP will only use it to verify your identity so you can exercise your data protection rights, or for security and fraud-prevention purposes.
In addition to contacting SAP at alumni.relations@sap.com, you may also exercise your rights as follows: You can call toll-free to submit a request using the numbers provided here. You can also designate an authorized agent to submit requests to exercise.