SAP Cloud Platform Trial Privacy Statement

A. General information

Who is the data controller?

The data controller for SAP Cloud Platform Trial is SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany (SAP), and its data protection officer can be reached at privacy@sap.com.

What Personal Data does SAP collect?

If you register for SAP Cloud Platform Trial, SAP collects your name, email address, telephone number and IP address (“Personal Data”).

SAP Cloud Platform Trial uses SAP Web Analytics to analyze how users use this site. The information generated anonymously will be transmitted to and stored by SAP on its servers. We will use this information only for the purpose of evaluating website usage and compiling reports on website activity for website operators - and finally, to improve the site.

Why does SAP need my Personal Data?

SAP requires your Personal Data to:

  • provide you with access to SAP Cloud Platform Trial;
  • comply with statutory obligations, including checks required by applicable export laws.

Although providing Personal Data is voluntary, without your Personal Data, SAP cannot provide you with access to SAP Cloud Platform Trial.

How long will SAP store my Personal Data?

SAP will only store your Personal Data for as long as it is required to make SAP Cloud Platform Trial available to you and for SAP to comply with its statutory obligations resulting from applicable export laws. SAP will also retain your Personal Data for additional periods if applicable laws require it.

Who are the recipients of your Personal Data and where will it be processed?

Your Personal Data will be passed on to the following categories of third parties to process your Personal Data:

  • companies within the SAP Group
  • other service providers, e.g. infrastructure providers

As part of a global group of companies operating internationally, SAP has affiliates (the “SAP Group”) and third-party service providers outside of the European Economic Area (the “EEA”) and will transfer your Personal Data to countries outside of the EEA. If these transfers are to a country for which the EU Commission has not issued an adequacy decision, SAP uses the EU standard contractual clauses to contractually require that your Personal Data receives a level of data protection consistent with the EEA. You can obtain a copy (redacted to remove commercial or irrelevant) of such standard contractual clauses by sending a request to privacy@sap.com. You can also obtain more information from the European Commission on the international dimension of data protection here.

What are your data protection rights?

You can request from SAP: access at any time to information about which Personal Data SAP processes about you and the correction or deletion of such Personal Data. Please note, however, that SAP can or will delete your Personal Data only if there is no statutory obligation or prevailing right of SAP to retain it. Kindly note further that if you request that SAP deletes your Personal Data, you will not be able to continue to use any SAP service that requires SAP’s use of your Personal Data.

Furthermore, you can request from SAP that SAP restricts your Personal Data from any further processing in any of the following events:

  • you state that the Personal Data SAP has about you is incorrect, subject to the time SAP requires to check the accuracy of the relevant Personal Data,
  • there is no legal basis for SAP processing your Personal Data and you demand that SAP restricts your Personal Data from further processing,
  • SAP no longer requires your Personal Data, but you state that you require SAP to retain such data in order to claim or exercise legal rights or to defend against third party claims.

Please note, however, that SAP can or will delete your Personal Data only if there is no statutory obligation or prevailing right of SAP to retain it. Kindly note further that if you request that SAP deletes your Personal Data, you will not be able to continue to use any SAP service that requires SAP’s use of your Personal Data.

How can you exercise your data protection rights?

Please direct any requests to exercise your rights to privacy@sap.com. You can also designate another person to submit requests to exercise your data protection rights to SAP. You can give authorization to such person by granting them a limited power of attorney to exercise your data protection rights on your behalf.

How will SAP verify requests to exercise data protection rights?

SAP will take steps to ensure that it verifies your identity to a reasonable degree of certainty before it will process the data protection right you want to exercise. When feasible, SAP will match Personal Data provided by you in submitting a request to exercise your rights with information already maintained by SAP. This could include matching two or more data points you provide when you submit a request with two or more data points that are already maintained by us.

SAP will decline to process requests that are manifestly unfounded, excessive, fraudulent, or are not otherwise required by local law.

If you take the view that SAP is not processing your Personal Data in accordance with the requirements in this Privacy Statement or under applicable EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country where you live or with the data protection authority of the country or state where SAP has its registered seat.

B. Why does SAP process your Personal Data to provide you with access to SAP Cloud Platform Trial?

SAP provides you with access to SAP Cloud Platform Trial since you have registered with this cloud service and consented to its Terms of Use. You may terminate your access to SAP Cloud Platform Trial at any time by means of the “delete trial accounts” functionality within SAP Cloud Platform Trial Cockpit.

C. Why does SAP process your Personal Data to comply with statutory obligations?

SAP and its products, technologies, and services are subject to the export laws of various countries including, without limitation, those of the European Union and its member states, and of the United States of America. You acknowledge that, pursuant to the applicable export laws, trade sanctions, and embargoes issued by these countries, SAP is required to take measures to prevent entities, organizations, and parties listed on government-issued sanctioned-party lists from accessing certain products, technologies, and services through SAP’s websites or other delivery channels controlled by SAP. This could include

  • automated checks of any user registration data as set out herein and other information a user provides about his or her identity against applicable sanctioned-party lists;
  • regular repetition of such checks whenever a sanctioned-party list is updated or when a user updates his or her information;
  • blocking of access to SAP’s services and systems in case of a potential match; and
  • contacting a user to confirm his or her identity in case of a potential match.

Any such use of your Personal Data is based on the permission to process Personal Data in order to comply with statutory obligations (Article 6 para. 1 lit. c GDPR) and SAP’s legitimate interest (Article 6 para. 1 lit. f GDPR).

D. How does SAP use Cookies?

What are cookies?

Cookies are small files placed on your device (computer, tablet or smartphone). When you access a website, a cookie is placed on your device and it will send information to the party that placed the cookie.

What cookies does SAP Cloud Platform Trial use?

SAP Cloud Platform Trial takes use of so-called required cookies only. Required Cookies are required to enable core site functionality. These cookies allow SAP to provide you a secure log-in and remember you during your log-in session.

If you subscribe to supplementary services on SAP Cloud Platform Trial that use further cookies, these services will inform you about their usage of cookies in their respective privacy information.

E. Children

This cloud service is not directed to users below the age of 16 years, or equivalent minimum age in the relevant jurisdiction. If you are younger than 16, you cannot register with and use this cloud service.

F. U.S.-Specific Provisions

Where SAP is subject to U.S. privacy requirements, the following also applies:

Requirements to Protect Children's Privacy. SAP does not knowingly collect the Personal Data of children under the age of 13. If you are a parent or guardian and believe SAP collected information about a child, please contact SAP at privacy@sap.com. SAP will take steps to delete the information as soon as possible. Given that SAP Cloud Platform Trial is not directed to users under 16 years of age and in accordance with the disclosure requirements of the CCPA, SAP does not sell the Personal Data of any minors under 16 years of age.

For individuals within the State of California, you have the right:

  • to request from SAP access to your Personal Data that SAP collects, uses, discloses, or sells (if applicable) about you;
  • to request that SAP delete Personal Data about you;
  • to opt-out of the sale of Personal Data, if applicable;
  • to non-discriminatory treatment for exercise of any of your data protection rights
  • in case of request from SAP for access to your Personal Data, for such information to be portable, if possible, in a readily usable format that allows you to transmit this information to another recipient without hindrance.

Please note, however, that SAP can or will delete your Personal Data only if there is no statutory obligation or prevailing right of SAP to retain it. Kindly note further that if you request that SAP deletes your Personal Data, you will not be able to continue to use any SAP service that requires SAP’s use of your Personal Data.

In accordance with the verification process set forth in the California Consumer Privacy Act (“CCPA”), SAP will require a more stringent verification process for deletion requests, or for Personal Data that is considered sensitive or valuable, to minimize the harm that might be posed to you by unauthorized access or deletion of your Personal Data. If SAP must request additional information from you outside of information that is already maintained by SAP, SAP will only use it for the purposes of verifying your identity so you can exercise your data protection rights, or for security and fraud-prevention purposes.

In accordance with the disclosure requirements under the CCPA, SAP is exempt from providing a notice to opt-out because it does not and will not sell your Personal Data.

Please direct any requests to exercise your rights to privacy@sap.com, or, if you are located in the State of California, you can also call toll-free using the numbers provided at https://www.sap.com/about/legal/impressum.html.

G. Japan-specific Provisions

To the extent that SAP is subject to privacy requirements of Japan, the privacy policy for Japan applies in addition.