隐私政策

Privacy Statement – 【SAP Concur Mobile】
隐私政策 — 【SAP Concur Mobile】
Last updated: [January 2023]
更新日期：[2023年1月]
Note: The 【SAP Concur Mobile】is not a stand-alone application, but an interface to provide you an access to log into the backend Cloud Service through your mobile device as long as you remain a user authorized by your Company to access the backend Cloud Service. Thus, SAP as data controller will normally only collect your Personal Information (e.g., username ID and related password information) for user authentication purposes in the Mobile App to enable your access to the backend Cloud Service through your mobile device. This Privacy Statement will neither cover the personal information collected or processed by the backend Cloud Service nor cover the personal information processed by SAP as data processor on behalf of data controller.
注意：【SAP Concur Mobile】不是一独立的移动应用软件而是一仅提供界面功能的软件以便您通过您的移动设备有入口登录其后端的云服务（只要您始终是您公司授权可登录后端云服务的客户）。所以，SAP通常仅收集您的个人信息(比如用户名ID或密码等) 用于在本软件的用户认证以便您从本应用连通后端云服务。本隐私政策既不涵盖您后端云服务所收集或处理的个人信息也不涵盖SAP作为数据处理方为数据控制方所处理的个人信息。

This Privacy Statement applies to the [SAP Concur Mobile] (“SAP Concur Mobile”) published and operated by [SAP (China) Co., Ltd.] (an SAP subsidiary company formed under the laws of the People’s Republic of China, with offices at Unit 01, 47F, Wheelock Plaza, No. 1717 West Nanjing Road, Jing’An District, Shanghai, China) (“SAP”) for the People’s Republic of China (“China”) market.
本隐私政策适用于【SAP Concur Mobile】（以下简称“【SAP Concur Mobile 】”），由【思爱普(中国)有限公司】（一家按照中华人民共和国法律成立的SAP子公司，注册地址为上海市南京西路1717号会德丰广场47楼，200040，以下简称“SAP”）面向中华人民共和国（简称“中国”）市场发布和运营。
This Privacy Statement describes how SAP processes the personal information you provide to SAP and the information that SAP collects or generates in the course of operating the [SAP Concur Mobile]. “Personal Information” refers to any information relating to an identified or identifiable natural personal, recorded electronically or in other manners, excluding anonymized information.
本隐私政策将向您说明SAP在运营【SAP Concur Mobile】的过程中，如何处理您提供给SAP以及SAP收集和产生的您的个人信息。“个人信息”指的是以电子或者其他方式记录的、与已识别或者可识别的自然人有关的各种信息，但不包括匿名化处理后的信息。
Your employer, client company, business, institution or other providing entity (“your Company”) may have subscribed to [SAP Concur Cloud Service] (“Cloud Service”) provided by [China Datacom Corporation Limited] (“Service Provider”). The [SAP Concur Mobile] is used to provide you with a channel to log in and use the [Cloud Service] and allow you to access and use the [Cloud Service] through your mobile device as long as you remain a user authorized by your Company to access the [Cloud Service]. The [SAP Concur Mobile] will not collect and process your Personal Information generated during your use of the [Cloud Service]. Regarding how your Personal Information will be collected and processed during your use of the [Cloud Service], please contact your Company for more information. The use of the [Cloud Service] will not be subject to the Privacy Statement.
您的雇主、客户公司、业务部门、机构或其他提供实体（简称“贵公司”）可能订阅了【SAP Concur Cloud Service】（简称“【云服务】”），该服务由【中数通信息有限公司】（简称“服务提供商”）提供。本【SAP Concur Mobile】是用于向您提供登录和使用【云服务】的通道，只要您是被贵公司授权访问【云服务】的用户，您就可以通过您的移动设备访问【云服务】。【SAP Concur Mobile】不会收集和处理您在使用【云服务】过程中产生的个人信息。关于您在使用【云服务】的过程中，您的个人信息如何被收集和处理，请联系贵公司获取更多信息。使用【云服务】不受本隐私政策的约束。
This Privacy Statement will help you understand the following:
本隐私政策将帮助您了解以下内容：
• How does SAP collect and process your Personal Information?
• SAP如何收集和处理您的个人信息
• How does SAP use Cookie or other third-party similar tracking technologies?
• SAP如何使用 Cookie或其他第三方追踪技术
• Processing based on the legal bases other than “consent”
• 基于除“同意”以外其他合法依据的处理
• Why and how does SAP process your Sensitive Personal Information?
• SAP为何以及如何处理您的敏感个人信息
• How does SAP share, transfer or disclose publicly your Personal Information?
• SAP如何共享、转让、公开披露您的个人信息
• How does SAP protect your Personal Information?
• SAP如何保护您的个人信息
• How can you exercise your Personal Information protection rights?
• 您如何执行您的个人信息保护权利
• Processing Personal Information of children.
• 儿童个人信息的处理
• Where is your Personal Information stored and how is it transferred cross-border?
• 您的个人信息储存在哪里以及如何在全球范围内转移
• How long does SAP store your Personal Information?
• SAP会保留您的个人信息多长时间
• How is this Privacy Statement updated?
• 本隐私政策如何更新
• How may you contact SAP?
• 如何联系SAP

I. HOW DOES SAP COLLECT AND USE YOUR PERSONAL INFORMATION?
SAP如何收集和使用您的个人信息
The [SAP Concur Mobile] may collect and process your Personal Information for the following purposes:
【SAP Concur Mobile】会出于以下目的，收集和处理您的个人信息：
1. Your (work) Email Addresses and SAP Concur User ID
您的（工作）电子邮件地址和SAP Concur用户ID
SAP Concur Mobile will match your Personal Information (work email and/or SAP Concur user ID) with the existing personal information provided by you in the SAP Concur web version, for the authentication purpose, so that you can log into SAP Concur Mobile and enjoy the services provided through SAP Concur Mobile.
SAP Concur Mobile 会将您的个人信息（工作电子邮件和/或SAP Concur用户ID）与您在SAP Concur web版本中提供的现有个人信息进行匹配，以进行身份验证，以便您可以登录SAP Concur Mobile 并享受通过SAP Concur Mobile 提供的服务。
Providing your personal information (work email and/or SAP Concur user ID) is a voluntary action; it is also necessary to be able to use the SAP Concur Mobile App. SAP Concur will use your Personal Information for personalized display based on what type of user you are (customer user, partner user and public user) to provide you with our services.
提供您的个人信息（工作电子邮件和/或SAP Concur用户ID）属于自愿行为；这同时也是使用SAP Concur的移动应用的必要条件。 SAP Concur将根据您是哪种类型的用户（客户用户，合作伙伴用户和公共用户）使用您的个人信息进行个性化显示，以向您提供SAP的服务。
2. SAP Concur Mobile will automatically collect the following related information and store them as service log information:
SAP Concur Mobile 会自动收集以下相关信息并存储为服务日志信息：
1) Device Information
To ensure the safety of the operating environment or provide you the necessary services, SAP will collect the name of your equipment.
1) 设备信息
为确保操作环境的安全或提供服务所需，SAP会收集有关您使用的设备的名称。
2) IP Address
To ensure the safety of the operating environment or the performance of SAP Concur Mobile or for trouble shooting, SAP will collect information about the IP Address of your device by APM tool (New Relic).New Relic does not retain the user’s IP address after the attributes have been mapped. The IP address value is cached in memory for up to six hours before being discarded.
2) IP地址
为确保操作环境的安全或软件性能的维护或排除软件故障，SAP会通过APM工具收集有关您设备的IP地址信息（”New Relic”）。
New Relic将用户设备的IP特征映射以后并不会保存该设备的IP地址，而是将IP地址缓存在内存中至6小时然后彻底清除。
3) Service Log Information
To ensure the safety of the operating environment or to provide you the necessary services, such as trouble shooting, SAP will use APM tool (new relic) to collect and store the information you searched for and viewed, your service failure information and your referral URLs information for less than 1 year.
3) 服务日志信息
为确保操作环境的安全或提供服务所需，比如排除软件故障，SAP会通过APM工具收集并保存您在一年以内使用SAP服务时搜索、查看的信息、服务故障信息、引荐网址信息。
4) Camera Information
To ensure the safety of the operating environment or to provide you the necessary services, SAP will collect the camara information and ask your consent in a separate notification.
4) 相机信息
为确保操作环境的安全或提供服务所需，SAP将收集相机信息并在单独的通知里取得您的同意。
5) Android_ID
As the app is initialized and before user’s consent to the privacy policy，Google services are getting initialized as well and it does generate ANDROID_ID implicitly. However, neither Google or our SAP Concur mobile application is not collecting this data at all throughout the application.
5) 安卓 ID
当本软件初始化时，但在用户同意隐私政策之前, 谷歌服务也同时初始化并间接产生安卓ID。但是谷歌和本移动软件在运行期间并不收集安卓ID。
6) Self-starting behaviors
Once you logout, the mobile app never closes itself and takes you to the login page instead so the user can re-login if he needs be. There are few features that need to listen to some self-start actions/event and they are used to perform application-specific initializations. However, in all cases we ask for user consent before collecting any Personal Information data.
6) 自启动行为
一旦你退出本软件，本移动软件并不会自动关闭而是将你转至登录网页以便你有需要时可以再次登录。本软件有一些功能需要聆听自启动行为或事件以便用来实现和软件相关的初始化。然而，在所有此类情况下，SAP在收集个人信息之前都会征求您的同意。
For more detailed description of the types of Personal Information to be collected by SAP, the manner of processing, frequency or timing of collection as well as the impact of refusing to process this type of Personal Information on you, please refer to Appendix I – I. List of Personal Information Collection.
有关SAP收集的您的其他个人信息的类型、处理方式、收集频率及时间点，以及拒绝处理该等个人信息对您的影响，请参考附件1 – 个人信息收集清单。
II. HOW DOES SAP USE COOKIE OR OTHER THIRD-PARTY TRACKING TECHNOLOGIES?
SAP如何使用 COOKIE或其他第三方追踪技术？
1. SAP Concur Mobile doesn’t use cookies, web beacons, pixel tags or similar tools with tracking and/or analytics functionalities.
SAP Concur Mobile 不使用Cookie、网络信标、像素标签等具有跟踪和/或分析功能的工具。
2. SDKs
To provide and optimize products and services, SAP may use software development kits (“SDKs”) in the [SAP Concur Mobile]. The SDKs may collect your Personal Information when helping SAP provide comprehensive services to you. SAP will take necessary measures to control the collection and use of your Personal Information by such SDKs to effectively protect your Personal Information. Please refer to Append II. List of SDKs for the identities of SDK providers, the types of SDKs, the types of Personal Information to be collected by SDKs, the purposes and manners of processing as well as the links to SDK provider’s privacy policies, etc.
为了提供及优化产品和服务，SAP可能在【SAP Concur Mobile】中使用软件开发工具包（“SDKs”）。SDKs在帮助SAP为您提供全面服务时收集您的个人信息。SAP将采取必要措施控制此类SDK收集和使用您的个人信息，以有效保护您的个人信息。有关SDK提供方的身份、SDKs的类型、SDKs收集的个人信息的类型、处理的目的和方式以及SDK提供方隐私政策的链接等，请参阅附件2 - SDK列表。
III. PROCESSING BASED ON THE LEGAL BASES OTHER THAN “CONSENT”
基于除“同意”以外其他合法依据的处理
SAP is allowed by applicable laws to process your Personal Information based on several legal bases. You acknowledge that SAP could process your Personal Information based on one of the following legal bases without the need to obtain consent from you:
根据适用的法律，SAP可以基于几种合法依据处理您的个人信息。您承认SAP可以基于以下合法依据处理您的个人信息而无需获得您的同意：
• the processing is necessary for entering into or performing a contract to which you are a party；
• 处理是为了签订或履行您作为一方的合同所必须；
• compliance with legal duties and obligations to which SAP is subject;
• 为履行SAP的法定职责或者法定义务所必需；
• in response to public health incidents or to protect the vital interests of natural persons;
• 为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需；
• for news reporting and media supervision for purpose of protecting public interest and within a reasonable scope;
• 为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理个人信息；
• the processing within a reasonable scope of Personal Information publicized by you to otherwise lawfully made public；or
• 在合理的范围内处理您自行公开或者其他已经合法公开的个人信息；或者
• other situations provided by applicable laws and regulations.
法律、行政法规规定的其他情形。
IV. HOW DOES SAP PROVIDE YOUR PERSONAL INFORMATION TO THIRD PARTIES AND DISCLOSE PUBLICLY YOUR PERSONAL INFORMATION?
SAP如何向第三方提供您的个人信息以及公开披露您的个人信息
(1) Providing your Personal Information to third parties
向第三方提供您的个人信息
Your Personal Information will be passed on to the following categories of third parties to process you Personal Information:
您的个人信息将会被提供给以下第三方处理：
• Companies within the SAP Group;
• SAP集团内的公司；
• Third party service providers, for example, [for the fulfillment and provisioning of services from SAP]。
• 第三方服务提供方，【例如，为了履行和提供SAP的服务】
SAP may engage service providers (“Entrusted Parties”) to process your Personal Information on behalf of SAP. These Entrusted Parties are obligated to keep your Personal Information confidential and may only use your Personal Information for the purposes described in this Privacy Statement. SAP will require the Entrusted Parties to strictly abide by our measures and requirements on Personal Information and privacy protection, including but not limited to processing Personal Information according to the relevant agreement between the Entrusted Party and SAP.
SAP可能会聘请服务提供商（“受托方”）代表SAP处理您的个人信息。这些受托方有义务对您的个人信息保密，并且只能将您的个人信息用于本隐私政策中所述的目的。SAP将要求受托方严格遵守SAP关于个人信息和隐私保护的措施和要求，包括但不限于根据受托方与SAP之间的相关协议处理个人信息。
(2) Merger and acquisition
合并和收购
In the event of a merger and acquisition, division, dissolution or declaration of bankruptcy scenario, involving the transfer of Personal Information, SAP will require the new company or organization holding your Personal Information to observe this Privacy Statement, otherwise SAP will require such company or organization to seek your consent again.
在发生涉及个人信息转让的合并、收购、分立、解散或破产清算等情形时，SAP会要求新的持有您个人信息的公司或组织继续受本隐私政策的约束，否则SAP将要求该公司或组织重新向您征求授权同意。
(3) Public disclosure
公开披露
SAP will not disclose your Personal Information publicly except:
SAP不会公开披露您的个人信息，但以下情况除外：
1. Having obtained your explicit consent.
获得您的明示同意。
2. Law-based disclosure: if required by applicable law, legal process, legal orders or in accordance with mandatory requirements of a competent authority, SAP may disclose your Personal Information accordingly.
基于法律的披露：在法律、法律程序、诉讼或政府主管部门强制性要求的情况下，SAP可能会公开披露您的个人信息。
V. HOW DOES SAP PROTECT YOUR PERSONAL INFORMATION?
SAP如何保护您的个人信息
1. SAP has employed security measures complying with industry standards to protect the Personal Information SAP collects via the [SAP Concur Mobile], to prevent such Personal Information from unauthorized access, public disclosure, use, modifications, damage or loss. SAP will adopt reasonable measures to protect your Personal Information. For example, SAP use a trusted protection mechanism to protect such Personal Information from attacks and we deploy an access control mechanism to ensure only authorized persons can access such Personal Information.
SAP已使用符合业界标准的安全防护措施来保护SAP通过【SAP Concur Mobile】收集的个人信息，防止此类个人信息遭到未经授权访问、公开披露、使用、修改、损坏或丢失。SAP会采取一切合理的措施来保护您的个人信息。例如，SAP会使用受信赖的保护机制防止此类个人信息遭到恶意攻击；SAP会部署访问控制机制，确保只有授权人员才可访问此类个人信息。
2. SAP may adopt reasonable measures to ensure irrelevant Personal Information is not collected. SAP only keep your Personal Information within the minimum period required for fulfilling the purposes stated in this Privacy Statement, unless an extension is required or permitted by applicable law.
SAP会采取一切合理的措施，确保未收集无关的个人信息。SAP只会在达成本隐私政策所述目的所需的最短期限内保留您的个人信息，除非根据适用法律的需要或允许延长保存期。
3. SAP has put in place measures to protect your Personal Information from loss, misuse and unauthorized access. SAP will keep your Personal Information secure using reasonable security measures as appropriate, for example, encryption (e.g., SSL) and anonymization. SAP use the protection mechanisms offered by the mobile operating system inside the application's sandbox environment. Your Personal Information is also protected by application-level encryption based on 256-bit Advanced Encryption Standard (AES) or better method. Further, SAP may make available to your Company certain optional security measures for managing the [SAP Concur Mobile] which your Company can deploy at its end, for example, single-sign-on, multi-factor authentication and other mobile device management security features. SAP will continue to improve the technical measures to protect your Personal Information collected by the [SAP Concur Mobile].
SAP已采取适当措施来防止您的个人信息遭丢失、滥用或未经授权的访问。SAP将适当采用加密技术（例如 SSL）、匿名技术等合理的安全防护措施来确保您个人信息的安全。SAP不仅在应用程序的运行环境中应用了移动端操作系统提供的保护机制，同时您的个人信息还将受到基于256位高级加密标准（AES）或更好方法的应用程序级加密保护。此外，SAP可能会向贵公司提供一些可自行选择部署的安全防护措施来帮助管理【SAP Concur Mobile】，例如单点登录、多重身份验证以及其他移动设备管理安全功能。
In the event of a Personal Information security breach, SAP will notify you as required by the applicable laws and regulations. SAP will cooperate with your Company to notify the affected users and handle the event. Personal Information security breaches by the [Cloud Service] are not subject to this Privacy Statement. Personal information security breaches caused by the [Cloud Service] will be handled according to the privacy statement of the [Cloud Service].
如果出现个人信息安全漏洞，SAP会根据适用法律法规的要求告知您。SAP将协助您的公司告知受影响的用户并处理该安全事件。由【云服务】导致的个人信息安全事件不受本隐私政策的约束。【云服务】造成的个人信息安全事件将根据【云服务】自己的隐私政策处理。
VI. HOW CAN YOU EXERCISE YOUR RIGHT TO PROTECT PERSONAL INFORMATION?
您如何行使您的个人信息保护权利
In accordance with applicable laws and regulations, you are guaranteed certain rights to your Personal Information.
按照适用的法律法规，SAP保障您对自己的个人信息行使特定权利。
With respect to the Personal Information under our control, you may contact SAP at https://support.sap.com/en/contact-us.html should you have any questions or concerns regarding such Personal Information. To the extent SAP has retained such information with an identifier that can be connected to you, you have the following rights.
对于由SAP控制的个人信息，如有任何问题或疑虑，请通过 https://support.sap.com/en/contact-us.html 联系SAP。如果SAP保存的信息中包含与您关联的标识符，您可以行使以下权利：
(1) Accessing or requesting a copy of your Personal Information
访问您的个人信息并获取副本
You have the right to access or request a copy of your Personal Information under our control, except for the exceptions specified in applicable laws and regulations. If you wish to exercise the right to access or request a copy of your Personal Information, you may contact SAP at https://support.sap.com/en/contact-us.html.
您有权访问由SAP控制的您的个人信息并获取副本，但适用法律法规规定的例外情况除外。如果您想行使个人信息访问权或获取副本，请通过 https://support.sap.com/en/contact-us.html 联系SAP。
If it does not incur a significant cost or cause other significant difficulties for us, upon your written request, SAP can also provide you with a copy of your Personal Information under our control (if any) that is generated during your use of the [SAP Concur Mobile]. If you wish to access such Personal Information, please contact us at https://support.sap.com/en/contact-us.html.
在不会产生较高成本或造成其他较大困难的情况下，应您的书面请求，SAP可以提供您在使用【SAP CONCUR MOBILE】期间所产生的、由SAP控制的您的个人信息（如有）的副本。如果您想访问此类个人信息，请通过 https://support.sap.com/en/contact-us.html 联系SAP。
(2) Correcting your Personal Information
更正您的个人信息
As the types of Personal Information that SAP (as a personal information handler) collects is very limited, if you discover errors in your Personal Information under SAP’s control, you have the right to require SAP to make the correction. You may request a correction by contacting SAP at https://support.sap.com/en/contact-us.html.
由于SAP作为个人信息处理者收集的个人信息类别非常有限，您不太可能需要更正由SAP控制的您的个人信息。但是，如果您发现SAP控制的您的个人信息有错误，您有权要求SAP做出更正。您可以通过 https://support.sap.com/en/contact-us.html 联系SAP来要求更正。
(3) Deleting your Personal Information
删除您的个人信息
In the following cases, you may send a request to https://support.sap.com/en/contact-us.html to delete your Personal Information under SAP’s control:
在以下情形，您可以通过 https://support.sap.com/en/contact-us.html 向SAP提出删除由SAP控制的您的个人信息的请求：
1. If SAP’s behavior in processing your Personal Information violates applicable laws or regulations;
如果SAP处理您个人信息的行为违反了适用法律法规；
3. If SAP’s behavior in processing your Personal Information violates our agreement with you;
如果SAP处理您个人信息的行为违反了与您的约定；
4. If you desist from the use of the [SAP Concur Mobile], or you cancel the account;
如果您不再使用【SAP Concur Mobile】，或您注销了帐号；
5. If SAP desists from providing the [SAP Concur Mobile] to you, or the retention period has expired.
如果SAP不再为您提供【SAP CONCUR MOBILE】。
If you request for deletion, while the retention period provided by any law or administrative rules has not expired, or it is difficult to realize the deletion of Personal Information technically, SAP will cease the processing of Personal Information except for storing and taking necessary security protection measures for such information.
如果您请求删除，而任何法律或行政法规规定的保留期尚未到期，或者在技术上很难实现个人信息的删除，SAP将停止除储存之外的对您个人信息的任何处理，并采取必要的安全保护措施。If SAP agrees to your deletion request, SAP will also inform the entities which has obtained such Personal Information from SAP to delete such Personal Information without delay, unless otherwise specified in laws and regulations, or these entities have obtained your separate authorization.
如果SAP同意了您的删除信息请求，SAP也会通知从SAP这里获取了此类个人信息的实体，要求其立即删除，除非法律法规另有规定，或这些实体已单独获得您的授权。
(4) Right to Stop or Restrict
请求停止或限制处理
You can request from SAP to stop or restrict your Personal Information from further processing in certain circumstances.
在特定的情况下，您可以请求SAP停止或限制对您的个人信息进行进一步处理。
(5) Right to Object
拒绝权
You can request not to be subject to a decision based solely on automated processing.
您可以拒绝仅基于自动决策处理您的个人信息。
(6) Right to Withdraw Consent
撤回同意的权利
Wherever SAP is processing your Personal Information based on your consent, you may at any time withdraw your consent. In case of withdrawal, SAP will not process Personal Information subject to this consent any longer unless legally required to do so. In case SAP is required to retain your Personal Information for legal reasons your Personal Information will be restricted from further processing and only retained for the term allowed by law. However, any withdrawal has no effect on past processing of Personal Information by SAP up to the point in time of your withdrawal.
若SAP是基于您的同意处理您的个人信息，您可以随时撤回您的同意。在撤回的情况下，除非法律要求，否则SAP将不再处理您的个人信息。如果SAP因法律原因需要保留您的个人信息，您的个人信息将被限制进一步处理，并且仅保留法律允许的期限。然而，任何撤回都不会影响SAP在您撤回之前对您的个人信息的处理。
(7) Canceling your Account
注销您的帐号
You can log out of SAP Concur Mobile at any time. Upon logging out of SAP Concur Mobile, SAP Concur Mobile will not store any of your Personal Information on your mobile device. Your Company controls the Cloud Service. Should you have any questions about how to cancel your account on the Cloud Service, please contact your Company.
您随时可以登出SAP Concur Mobile。登出后，SAP Concur Mobile将不会在您的移动设备中存储任何您的个人信息。由于云服务由贵公司控制，因此，如果您对如何注销云服务帐号有任何疑问，请联系贵公司。
(8) Right to Lodge a Complaint
投诉权
If you take the view that SAP is not processing your Personal Information in accordance with the requirements in this Privacy Statement or under applicable data protection laws, you can at any time, to the extent required by applicable law, lodge a complaint with competent data protection authority.
如果您认为SAP没有按照本隐私政策或适用数据保护法律的要求处理您的个人信息，您可以在适用法律要求的范围内，随时向数据保护主管机构提出投诉。
(9) Responding to Your Above Requests
响应您的上述请求
Please submit your request in writing. To ensure security, SAP may need to verify your identity before processing your request. SAP will reply to your request within 15 working days after verification of your identity. If you have any concerns, you may contact SAP at https://support.sap.com/en/contact-us.html.
请以书面形式提出请求。为保障安全，SAP可能会先要求您验证自己的身份，然后再处理您的请求。SAP将在您完成身份验证后的 15 个工作日内做出答复。如有任何疑虑，请通过 https://support.sap.com/en/contact-us.html 联系SAP。
Generally, SAP will not charge fees to process any reasonable request. But if you submit the same request frequently or your request exceeds a reasonable extent, SAP may charge a fee based on our processing costs as SAP may reasonably determine. Where the requests are repeated without good reasons, or require too many technical measures (e.g. a new system is needed or current practice will be changed fundamentally), or put others’ legitimate rights and interests at risk or are very impractical (e.g. require a backup of the Personal Information stored in the tape), SAP reserves the right reject such requests.
对于合理的请求，SAP一般不收取费用。但对多次重复、超出合理限度的请求，SAP将根据处理成本酌情合理地收取一定费用。对于那些无端重复、需要过多技术手段（例如，需要开发新系统或从根本上改变现行惯例）、给他人合法权益带来风险或者非常不切实际（例如，要求用磁带备份存储个人信息）的请求，SAP有权予以拒绝。
In the following cases, in accordance with applicable laws and regulations, SAP is unable to accommodate your request:
在下列情况下，按照适用法律法规要求，我们将无法响应您的请求：
1. Directly related to national security and national defense security;
与国家安全、国防安全直接相关的；
2. Directly related to public security, public health, and major public interests;
与公共安全、公共卫生、重大公共利益直接相关的；
3. Directly related to criminal investigation, prosecution, trial, and enforcement of judgments;
与犯罪侦查、起诉、审判和判决执行等直接相关的；
4. There is sufficient evidence indicating that you have subjective malicious intentions or abuse your rights;
有充分证据表明您存在主观恶意或滥用权利的；
5. Responding to your request will cause serious damage to the legitimate rights and interests of the data subject or other individuals or organizations;
响应您的请求将导致数据当事人或其他个人、组织的合法权益受到严重损害的；
6. Involving trade secrets.
涉及商业秘密的。
VII. PROCESSING PERSONAL INFORMATION OF CHILDREN
儿童个人信息的处理
The [SAP Concur Mobile] and any related websites, products and services are intended for adults. We consider anyone less than 14 years old a child. You represent and warrant that you are an adult and not a child and you will not transmit Personal Information of any child through the [SAP Concur Mobile] without the explicit consent of the child’s parents or guardians. If SAP discover that SAP has collected Personal Information of children without verifiable consent of their parents or guardians, SAP will find ways to delete such data as soon as possible.
【SAP Concur Mobile】及任何相关的网站、产品和服务主要面向成年人。SAP将所有未满 14 周岁的人视为儿童。您声明并保证您不是儿童，您是一个成年人，您不会在未经儿童父母或监护人明示同意的情况下通过【SAP Concur Mobile】传输任何儿童的个人信息。如果SAP发现自己在未获得可验证的儿童父母或监护人同意的情况下收集了儿童的个人信息，SAP则会设法尽快删除相关数据。
VIII. WHERE IS YOUR PERSONAL INFORMATION STORED AND HOW IS IT TRANSFERRED CROSS-BORDER?
您的个人信息储存在哪里以及如何在全球范围内转移
Your Personal Information will be stored within China (for the purpose of this Privacy Statement only, China refers to the mainland of China and does not include Hong Kong SAR, Macau SAR and Taiwan region). However, as SAP may provide products or services via servers and resources located worldwide, your Personal Information may be transferred to jurisdictions outside China. Such jurisdictions may have different data protection laws or have no such laws. However, for your Personal Information under our control, SAP will ensure such Personal Information will have no less protection than under the laws protecting Personal Information in China.
您的个人信息将会被储存在中国境内（仅为本隐私政策之目的，中国仅指中国大陆，不包含香港特别行政区、澳门特别行政区和台湾地区）。然而，鉴于SAP可能通过遍布全球的服务器和资源提供产品或服务，您的个人信息可能会转移至中国之外的辖区。此类辖区可能设有不同的数据保护法，甚至未设立相关法律。但是，对于由我们控制的您的个人信息，SAP会确保此类个人信息获得不少于中国境内的个人信息保护法所提供的保护。
IX. HOW IS THIS PRIVACY STATEMENT UPDATED?
本隐私政策如何更新
Our Privacy Statement may be updated from time to time. If the updates to the Privacy Statement may essentially impact the rights you are entitled to under this Privacy Statement, the 【SAP Concur Mobile】will alert you of these updates through a pop-up notice or other prominent methods and obtain your explicit consent to these updates to the Privacy Statement. Without your explicit consent, SAP will not diminish the rights you are entitled to under this Privacy Statement.
SAP可能会不时更新本隐私政策。如果本隐私政策的更新有可能实质性影响您在本隐私政策下所应享有的权利，【SAP Concur Mobile】将通过弹出通知或其他有效方式提醒您相关内容的更新，并征求您对隐私政策更新的明示同意。未经您明示同意，SAP不会削减您按照本隐私政策所应享有的权利。
X. HOW MAY YOU CONTACT SAP?
如何联系SAP
If you have any question, comment or suggestion relating to this Privacy Statement, you can contact SAP at https://support.sap.com/en/contact-us.html. Generally, SAP will strive to reply within 15 working days.
如您对本隐私政策有任何疑问、意见或建议，请通过以下地址与SAP联系：https://support.sap.com/en/contact-us.html。一般情况下，SAP将在 15 个工作日内回复。

APPENDIX I: LIST OF PERSONAL INFORMATION COLLECTION
附件1：个人信息收集表
Services/Functions
服务/功能
(Basic Function/Additional Function) Manner of collection
收集方式 Frequency or timing of collection
收集频率及时点 Type of Processed Personal Information
处理的个人信息类型 Impact of refusing to process this type of Personal Information on individuals
拒绝处理个人信息对个人的影响
Pre-Authorization (Android_ID)
用户授权前间接产生安卓 ID As the app is initialized and before user’s consent to the privacy policy, Google services are getting initialized as well and it does generate ANDROID_ID implicitly. However, neither Google or our SAP Concur mobile application is not collecting this data at all throughout the application.
当本软件初始化时但在用户同意隐私政策之前，谷歌服务也同时初始化并间接产生安卓ID。但是谷歌和本移动软件在软件运行期间并不收集安卓ID。 App initialization, pre-authorization
软件初始化且用户授权之前 None. Google and our SAP Concur mobile application are not collecting this data at all throughout the application.
没有。谷歌及本移动软件在运行期间并不收集安卓ID Google SDK needs Android ID to perform its initializations. Google and our SAP Concur mobile application are not collecting Android ID throughout the application.
Google SDK 需要Android ID 以实现初始化。谷歌及本软件在其运行期间并不收集安卓ID。
Self-starting behaviors
自启动行为 Once you logout, the mobile app never closes itself and takes you to the login page instead so the user can re-login if he needs. There are few features that need to listen to some self-start actions/event and they are used to perform application-specific initializations. However, in all cases we ask for user consent before collecting any Personal Information.

一旦你退出本软件，本移动软件并不会自动关闭而是将你转至登录网页以便你有需要时可以再次登录。本软件有一些功能需要聆听自启动行为或事件以便用来实现和软件相关的初始化。然而，在所有此类情况下，SAP在收集个人信息之前都会征求用户的同意。 When logging out
当你退出软件时 No Personal Information is collected during app initialization without user consent
没有用户同意，在软件初始化期间我们不会收集个人信息。 Without the self-start behaviors of the app, some application-specific intializations cannot be performed. In all cases we ask for user consent before collecting any Personal Information.
若无这些软件的自启动行为，本软件的一些初始化将无法进行。在所有此类情况下，SAP在收集个人信息之前都会征求用户的同意。
Authentication
身份验证
SAP user’s profile data is stored encrypted on device at time of login. After login we only store the username un-encrypted to display in the app. After log out all encrypted personal info is wiped. If not logged in, no personal info is stored.

SAP用户的身份数据在用户登录时以加密方式存储在用户手机里。在用户登录后，我们只存储未加密的用户名。一旦用户退出软件，所有加密的个人信息都自动清除。如果用户不登录软件，没有用户的个人信息将被储存。
At authentication

在用户验证自身身份以便登录软件时 User‘s profile data is stored encrypted on device at time of login.

SAP用户的身份数据在用户登录时以加密方式存储在用户手机里。

SAP Concur Mobile will match your Personal Information (work email and/or SAP Concur user ID) with the existing personal information provided by you in the SAP Concur web version, for the authentication purpose.

SAP Concur Mobile将对输入移动软件的个人信息（工作邮件和/或SAP Concur 用户名ID）和后端云服务的个人信息进行对比一实现用户身份认证目的。
User cannot authenticate or use the app.

若不使用用户名，用户无法验证身份及使用软件其他功能。

Software Installation List

软件安装列表 None installed; any calls needed to software are made by secure API.
没有软件安装列表；
针对软件的调用都使用安全的API

As per request.

根据请求而使用 No personal information is shared.

未收集个人信息 App will not function.

若未使用，本软件无法正常运转。
IMEI Information

IMEI 信息 IMEI is not collected or stored

IMEI 信息未被收集或存储。
N/A

不适用 N/A

不适用 N/A

不适用
Address Book

通讯录 If the user chooses to use the Attendees feature, there is the option for user to share from their Address Book if they choose to give consent when prompted by OS.

若用户选择使用“参加者”的功能，当用户选择弹窗跳出的”同意”时，用户可以选择分享自己的通讯录。 As per request.

根据请求而使用 User can choose to share names of contacts in their Address Book if they choose to and give consent.

如果用户选择给出“同意”，用户可以选择分享自己通讯录里的联系人姓名 User cannot import from Address Book and can manually enter Attendees names, if they choose to use the feature.

若无此功能，用户不能输出其通讯录里的联系人信息，将必须选择手工加入联系人姓名的功能以便手工加入联系人姓名。
SMS

短信息 None are collected
未收集 N/A
不适用 N/A
不适用 N/A
不适用
Receipt Capture Camera Information: The user may want to capture an image of their receipt by taking a picture of it with their device. Prior to doing so for the first time, we prompt the user for consent to their device camera and device.
照相机信息：用户可能想痛过手机拍照功能拍摄单据图片。在用户第一次拍照之前，我们会让用户给予同意以便本软件可以使用用户设备的摄像机和相册。 Each time the user wants to capture an image of their receipt via usage of their device camera.
当用户每次想通过手机相机功能上传单据图片时 Receipt data shown in the image.
图片所显示的单据信息 Without using their camera, user cannot capture their receipt which is typically a requirement for expense reimbursement.
若不使用相机，用户不能上传单据图片，而单据是报销花费所必需的。
Receipt Upload
单据上传
Camera Information: The user may want to upload an image of their receipt by taking a picture of it with their device. Prior to doing so for the first time, we prompt the user for consent to their device camera and photo album
照相机信息：用户可能想痛过手机拍照功能上传单据图片。在用户第一次拍照之前，我们会让用户给予同意以便本软件可以使用用户设备的摄像机和相册。 Each time the user wants to upload an image of their receipt via usage of their device camera.
当用户每次想通过手机相机功能上传单据图片时 Receipt data shown in the image.
图片所显示的单据信息 Without using their camera, user cannot upload their receipt which is typically a requirement for expense reimbursement.
若不使用相机，用户不能上传单据图片，而单据是报销花费所必需的。
Device Information
设备信息
To ensure the safety of the operating environment or provide you the necessary services, SAP will collect the name of your equipment.
为确保操作环境的安全或提供服务所需，SAP会收集有关您使用的设备的名称。 Once user view home screen we collect device name
当用户查阅手机屏幕时，本软件收集手机设备名称。 Device name
手机设备名称 User app may not properly functioned and cannot be troubleshoot without these information
若无此信息，用户软件可能不能正常运行并不能排除故障。

APPENDIX II – LIST OF SDKS
附件II - SDK 清单

Name of SDK
SDK名称 Name of third party
第三方名称 Description of scenario
场景描述 Link to third party’s privacy statement
第三方隐私政策链接 Type of Personal Information to be collected
收集的个人信息类型
com.google.android.gms (Android_ID) Google
谷歌 As the app is initialized, Google services are getting initialized as well and it does generate ANDROID_ID implicitly. However, our mobile application is not collecting this data at all throughout the application.
当本软件初始化时，谷歌服务也同时初始化并间接产生安卓ID。但是本移动软件在运行期间并不收集安卓ID。 https://policies.google.com/privacy Google SDK needs Android ID to perform its initializations. Our mobile application is not collecting Android ID at all throughout the application.
Google SDK 需要Android ID 以实现初始化。本软件在其运行期间并不收集安卓ID。

New Relic

New Relic To ensure the safety of the operating environment or the performance of SAP Concur Mobile or for trouble shooting, SAP will collect information about the IP Address of your device by APM tool (new relic)
为确保操作环境的安全或软件性能的维护或排除软件故障，SAP会通过APM工具收集有关您设备的IP地址信息（”New Relic”）。

IP address only get accessed when app is crashed and we need to report on new relic.
当软件崩溃，我们需要汇报给New Relic时，本软件会收集手机设备的IP地址。

To ensure the safety of the operating environment or to provide you the necessary services, such as trouble shooting, SAP will use APM tool (new relic) to collect and store the information you searched for and viewed, your service failure information and your referral URLs information for less than 1 year.
为确保操作环境的安全或提供服务所需，比如排除软件故障，SAP会通过APM工具收集并保存您在一年以内使用SAP服务时搜索、查看的信息、服务故障信息、引荐网址信息。

Service logs only get accessed when app is crashed and we need to report on new relic.
当软件崩溃，我们需要汇报给New Relic时，本软件会收集手机设备的服务日志信息。 https://newrelic.com/termsandconditions/services-notices
IP Address;
Service Log Information （Service logs: Error Type
服务日错误信息）

Appentive Appentive We use Apptentive SDK to collect review about SAP Concur Mobile.
我们使用Appentive SDK搜集用户对SAP Concur Mobile的评论。
Only when SAP Concur Mobile is running in foreground, Apptentive will ask for review. End user is free to give review or discard it. Without user consent we do not collect any review.
只有当SAP Concur Mobile软件在前台运行时，Appentive将请求用户给予评论。终端用户可以自由选择给与评论或拒绝评论。没有用户的许可，我们不会收集任何评论。
When end user submits his expense report for the first time, we will ask for his review, or when end user approves a report, we will ask for his review. Every time when we upgrade SAP Concur Mobile once in a month, we will also ask for his review through Apptentive SDK.
当终端用户第一次提交他的花费报告时或用户批准一份报告时，卫门将请求他的评论。每个月我们将升级SAP Concur Mobile, 我们将通过Appentive SDK询问他的同意。 https://learn.apptentive.com/knowledge-base/google-play-store-privacy-information/ Review of end users
用户评论