Privacy Statement – 【SAP for Me】
隐私政策 — 【SAP for Me】
Last updated: [September 2022]
更新日期:[2022年9月]
This Privacy Statement applies to the [SAP for Me Mobile App] (“SAP for Me”) published and operated by [SAP (China) Co., Ltd.] (an SAP subsidiary company formed under the laws of the People’s Republic of China, with offices at Unit 01, 47F, Wheelock Plaza, No. 1717 West Nanjing Road, Jing’An District, Shanghai, China) (“SAP”) for the People’s Republic of China (“China”) market.
本隐私政策适用于【SAP for Me Mobile App】(以下简称“【SAP for Me 】”),由【思爱普(中国)有限公司】(一家按照中华人民共和国法律成立的SAP子公司,注册地址为上海市南京西路1717号会德丰广场47楼,200040,以下简称“SAP”)面向中华人民共和国(简称“中国”)市场发布和运营。
This Privacy Statement describes how SAP processes the personal information you provide to SAP and the information that SAP collects or generates in the course of operating the [SAP for Me]. “Personal Information” refers to any information relating to an identified or identifiable natural personal, recorded electronically or in other manners, excluding anonymized information.
本隐私政策将向您说明SAP在运营【SAP for Me】的过程中,如何处理您提供给SAP以及SAP收集和产生的您的个人信息。“个人信息”指的是以电子或者其他方式记录的、与已识别或者可识别的自然人有关的各种信息,但不包括匿名化处理后的信息。
Your employer, client company, business, institution or other providing entity (“your Company”) may have subscribed to [SAP for Me Cloud Service] (“Cloud Service”) provided by [China Datacom Corporation Limited] (“Service Provider”). The [SAP for Me] is used to provide you with a channel to log in and use the [Cloud Service] and allow you to access and use the [Cloud Service] through your mobile device as long as you remain a user authorized by your Company to access the [Cloud Service]. The [SAP for Me] will not collect and process your Personal Information generated during your use of the [Cloud Service]. Regarding how your Personal Information will be collected and processed during your use of the [Cloud Service], please contact your Company for more information. The use of the [Cloud Service] will not be subject to the Privacy Statement.
您的雇主、客户公司、业务部门、机构或其他提供实体(简称“贵公司”)可能订阅了【SAP for Me Cloud Services】(简称“【云服务】”),该服务由【中数通信息有限公司】(简称“服务提供商”)提供。本【SAP for Me】是用于向您提供登录和使用【云服务】的通道,只要您是被贵公司授权访问【云服务】的用户,您就可以通过您的移动设备访问【云服务】。【SAP for Me】不会收集和处理您在使用【云服务】过程中产生的个人信息。关于您在使用【云服务】的过程中,您的个人信息如何被收集和处理,请联系贵公司获取更多信息。使用【云服务】不受本隐私政策的约束。
This Privacy Statement will help you understand the following:
本隐私政策将帮助您了解以下内容:
I. How does SAP collect and use your Personal Information?
SAP如何收集和使用您的个人信息
II. How does SAP use Cookie or other third-party similar tracking technologies?
SAP如何使用 Cookie或其他第三方追踪技术
III. Processing based on the legal bases other than “consent”
基于除“同意”以外其他合法依据的处理
IV. Why and how does SAP process your Sensitive Personal Information?
SAP为何以及如何处理您的敏感个人信息
V. How does SAP share, transfer or disclose publicly your Personal Information?
SAP如何共享、转让、公开披露您的个人信息
VI. How does SAP protect your Personal Information?
SAP如何保护您的个人信息
VII. How can you exercise your Personal Information protection rights?
您如何执行您的个人信息保护权利
VIII. Processing Personal Information of children.
儿童个人信息的处理
IX. Where is your Personal Information stored and how is it transferred cross-border?
您的个人信息储存在哪里以及如何在全球范围内转移
X. How long does SAP store your Personal Information?
SAP会保留您的个人信息多长时间
XI. How is this Privacy Statement updated?
本隐私政策如何更新
XII. How may you contact SAP?
如何联系SAP
I. How does SAP Collect and Use Your Personal Information?
SAP如何收集和使用您的个人信息
SAP for Me provides a repository as well as to act as a starting point where customers and partners may gather necessary information around their SAP portfolio, to drive decisions and actions in time. The main goal of SAP for Me is to consolidate and display associated user and company data, already accessible via the different digital properties of SAP (hereinafter referred to as "Components") (such as the SAP ONE Support Launchpad, SAP Learning Hub, and more). SAP for Me acts as the only communication channel and reference tool between SAP and users, which can simply the viewing and maintenance of data associated with customers.
SAP for Me提供资源库功能,并充当客户和合作伙伴收集关于SAP产品组合必要信息的起点,以便您及时制定决策和采取行动。SAP for Me的主要目标是整合和显示已经可以访问SAP不同数字系统(以下称为“组件”)(例如“SAP ONE Support Launchpad”、“SAP Learning Hub”等)的相关用户数据及公司数据。SAP for Me作为用户和SAP之间唯一的沟通渠道和参考工具,可以简化客户相关数据的查看和维护。
The [SAP for Me] may collect and process your Personal Information for the following purposes:
【SAP for Me】会出于以下目的,收集和处理您的个人信息:
a. Provide on the functions and features of SAP for Me similar to the Cloud Service. SAP for Me connects to the Cloud Service. SAP provides SAP for Me so that you can access the Cloud Service from your mobile device as long as you remain a user authorized by your Company to access the Cloud Service. The categories of the Personal Information about you collected or derived within the Cloud Service depends, in part, on the Cloud Service to which your Company has subscribed and the manner in which your Company has configured the Cloud Service. Should you have any questions about how your Personal Information is processed by the Cloud Service, please contact your Company.
在SAP for Me 中提供与云服务类似的功能和特性。SAP for Me 与云服务互联。只要您是贵公司授权访问云服务的用户,您就能通过 SAP 提供的这款SAP for Me 在移动设备上访问云服务。在云服务中收集或获取的个人信息的类别,部分取决于贵公司租用了哪些云服务和如何配置云服务。如对云服务如何处理您的个人信息有任何疑问,请联系贵公司。
b. Login Authentication. SAP for Me may collect and process your personal information in the context of your work activities, including your first and last name, your (work) email address and (work) phone number, SAP user ID. SAP for Me will match your personal information collected above with the personal information you provide in other SAP components for authentication, so that you can log in to SAP for Me and enjoy the services provided by SAP for Me. If you do not provide this information, SAP For Me cannot authenticate you. Without authentication, you will not be able to access the services of SAP For Me.
1. 登陆验证。SAP for Me可能会在您的工作活动范围内收集和处理您的个人信息,包括您的名字和姓氏、您的(工作)电子邮件地址和(工作)电话号码、SAP用户ID。SAP for Me会将收集的上述您的个人信息与您在SAP其他组件中提供的个人信息进行匹配,以进行身份验证,以便您可以登录SAP for Me并享受SAP for Me提供的服务。如果您不提供此类信息,SAP For Me 就无法对您进行身份验证。不经过验证,您将无法访问SAP For Me的服务。
c. 判定用户类型。SAP For Me可能会在您的工作活动范围内收集和处理您的个人信息,包括您的名字和姓氏、您的(工作)电子邮件地址和(工作)电话号码、SAP用户ID。将使用您的个人信息判定您是哪种类型的用户(客户用户、合作伙伴用户和公共用户),以便为您提供基于用户类型的不同服务。
Determine the user type. SAP For Me may collect and process your personal information in the context of your work activities, including your first and last name, your (work) email address and (work) phone number, SAP user ID. Your personal information will be used to determine what type of user you are (customer user, partner user and public user) in order to provide you with different services based on the type of user.
d. Data analyses. SAP For Me may collect information about your device, memory, network, and geographic location for statistical analysis within SAP. SAP may create analyses utilizing, in part, information derived from your Personal Information and your use of SAP for Me as explained herein. Analyses will anonymize such information. Analyses may be used for the following purposes: (i) product improvement (in particular, product features and functionality, workflows and user interfaces) and development of new products and services, (ii) improving resource allocation and support, (iii) internal demand planning, (iv) training and developing machine learning algorithms, (v) improving product performance, (vi) verification of security and data integrity, (vii) identification of industry trends, development indices and anonymous benchmarking.
数据分析。SAP For Me可能收集您的设备、内存、网络、地理位置相关信息,以用于SAP内部数据统计分析。SAP 在某种程度上可以利用您的个人信息以及所述的您使用SAP for Me所产生的信息创建分析报告。该分析报告将采用匿名的方式进行。分析报告可用于以下目的: (i) 产品改进(尤其是产品的功能特征,工作流程以及用户界面)及新产品服务的开发,(ii)资源分配及支持的优化,(iii)制定内部需求计划,(iv)培训开发机器学习算法,(v) 改善产品性能,(vi) 验证安全性及数据完整性,(vii) 识别行业趋势和发展成果、指标及匿名对标。
For more detailed description of the types of Personal Information to be collected by SAP, the manner of processing, frequency or timing of collection as well as the impact of refusing to process this type of Personal Information on you, please refer to Appendix I – I. List of Personal Information Collection.
有关更详细的SAP收集的您的个人信息的类型、处理方式、收集频率及时间点,以及拒绝处理该等个人信息对您的影响,请参考附件1 – 个人信息收集清单。
II. How does SAP use Cookie or other third-party tracking technologies?
SAP如何使用 Cookie或其他第三方追踪技术?
(1) To facilitate your access to SAP for Me, SAP will store a small data file call Cookie on your mobile device. The Cookie usually contains an identifier and some numbers and characters. By using the Cookie, SAP for Me can temporarily store your Personal Information such as your log in information. SAP will not use the Cookie for purposes other than those stated in this Privacy Statement. You may, based on your preferences, manage or delete the Cookie. Please refer to AboutCookies.org for more information. You may remove any or all the cookies stored on your mobile device at any time.
为便于您访问SAP for Me,SAP 会在您的移动设备上存储名为 Cookie 的小数据文件。Cookie 通常包含标识符以及一些号码和字符。借助于 Cookie,SAP for Me能够临时存储您的个人信息(如登录信息)。SAP 不会将 Cookie 用于本隐私政策所述目的之外的任何用途。您可根据自己的偏好管理或删除 Cookie。有关详情,请参见 AboutCookies.org。您随时可以清除在您的移动设备上保存的任何或所有 Cookie。
(2) Third-party codes or SDKs
SAP Cloud Platform SDK
SAP For Me may collect information about your device, memory, network, and geographic location through the SAP Cloud Platform SDK for statistical analysis of SAP's internal data. The purpose of use mainly includes: (i) improving the product design and use process (especially the functional features, workflow and user interface of the product) and the development of new products and services, (ii) creating an analysis report, which will be conducted in an anonymous manner. , to improve product performance. Before collecting such information, SAP For Me will obtain your consent again through a pop-up window, and the SDK will collect and use such information only after obtaining your express consent. When you log out of SAP For Me, the SDK will no longer collect such information unless your consent is obtained again. SAP will not use the above information for any purpose other than those described in this Privacy Policy. For details, please refer to: IOS side reference link, Android side reference link. .
SAP For Me可能通过SAP Cloud Platform SDK收集您的设备、内存、网络、地理位置相关信息,以用于SAP内部数据统计分析。使用目的主要包括:(i)改善产品设计使用流程(尤其是产品的功能特征,工作流程以及用户界面)及新产品服务的开发,(ii)创建分析报告,该分析报告将采用匿名的方式进行,以用于改善产品使用性能。在收集此类信息前,SAP For Me将会通过弹窗形式再次获得您的同意,仅在获得您明示同意后,SDK方收集、使用此类信息。当您登出SAP For Me后,SDK将不再收集此类信息,除非再次获得您的同意。SAP 不会将上述信息用于本隐私政策所述目的之外的任何用途。有关详情,请参见: IOS端参考链接IOS side reference link,安卓端参考链接Android side reference link.
第三方代码或SDKs
To provide and optimize products and services, SAP may use third-party software development kits (“SDKs”) in the [SAP for Me]. The SDKs may collect your Personal Information when helping SAP provide comprehensive services to you. SAP will take necessary measures to control the collection and use of your Personal Information by such SDKs to effectively protect your Personal Information. Please refer to Append II. List of SDKs for the identities of third parties, the types of SDKs, the types of Personal Information to be collected by SDKs, the purposes and manners of processing as well as the links to the third parties’ privacy policies, etc.
为了提供及优化产品和服务,SAP可能在【SAP for Me】中使用第三方软件开发工具包(“SDKs”)。SDKs在帮助SAP为您提供全面服务时收集您的个人信息。SAP将采取必要措施控制此类SDK收集和使用您的个人信息,以有效保护您的个人信息。有关第三方的身份、SDKs的类型、SDKs收集的个人信息的类型、处理的目的和方式以及第三方隐私政策的链接等,请参阅附件2 - SDK列表。
III. Processing based on the legal bases other than “consent”
基于除“同意”以外其他合法依据的处理
SAP is allowed by applicable laws to process your Personal Information based on several legal bases. You acknowledge that SAP could process your Personal Information based on one of the following legal bases without the need to obtain consent from you:
根据适用的法律,SAP可以基于几种合法依据处理您的个人信息。您承认SAP可以基于以下合法依据处理您的个人信息而无需获得您的同意:
the processing is necessary for entering into or performing a contract to which you are a party;
处理是为了签订或履行您作为一方的合同所必须;
compliance with legal duties and obligations to which SAP is subject;
为履行SAP的法定职责或者法定义务所必需;
in response to public health incidents or to protect the vital interests of natural persons;
为应对突发公共卫生事件,或者紧急情况下为保护自然人的生命健康和财产安全所必需;
for news reporting and media supervision for purpose of protecting public interest and within a reasonable scope;
为公共利益实施新闻报道、舆论监督等行为,在合理的范围内处理个人信息;
the processing within a reasonable scope of Personal Information publicized by you to otherwise lawfully made public;or
在合理的范围内处理您自行公开或者其他已经合法公开的个人信息;或者
other situations provided by applicable laws and regulations.
法律、行政法规规定的其他情形。
IV. How Does SAP provide your Personal Information to third parties and disclose publicly your Personal Information?
SAP如何向第三方提供您的个人信息以及公开披露您的个人信息
(1) Providing your Personal Information to third parties
向第三方提供您的个人信息
Your Personal Information will be passed on to the following categories of third parties to process you Personal Information:
您的个人信息将会被提供给以下第三方处理:
Companies within the SAP Group;
SAP集团内的公司;
Third party service providers, for example, [for the fulfillment and provisioning of services from SAP]。
第三方服务提供方,【例如,为了履行和提供SAP的服务】
SAP may engage service providers (“Entrusted Parties”) to process your Personal Information on behalf of SAP. These Entrusted Parties are obligated to keep your Personal Information confidential and may only use your Personal Information for the purposes described in this Privacy Statement. SAP will require the Entrusted Parties to strictly abide by our measures and requirements on Personal Information and privacy protection, including but not limited to processing Personal Information according to the relevant agreement between the Entrusted Party and SAP.
SAP可能会聘请服务提供商(“受托方”)代表SAP处理您的个人信息。这些受托方有义务对您的个人信息保密,并且只能将您的个人信息用于本隐私政策中所述的目的。SAP将要求受托方严格遵守SAP关于个人信息和隐私保护的措施和要求,包括但不限于根据受托方与SAP之间的相关协议处理个人信息。
(2) Merger and acquisition
合并和收购
In the event of a merger and acquisition, division, dissolution or declaration of bankruptcy scenario, involving the transfer of Personal Information, SAP will require the new company or organization holding your Personal Information to observe this Privacy Statement, otherwise SAP will require such company or organization to seek your consent again.
在发生涉及个人信息转让的合并、收购、分立、解散或破产清算等情形时,SAP会要求新的持有您个人信息的公司或组织继续受本隐私政策的约束,否则SAP将要求该公司或组织重新向您征求授权同意。
(3) Public disclosure
公开披露
SAP will not disclose your Personal Information publicly except:
SAP不会公开披露您的个人信息,但以下情况除外:
1. Having obtained your explicit consent.
获得您的明示同意。
2. Law-based disclosure: if required by applicable law, legal process, legal orders or in accordance with mandatory requirements of a competent authority, SAP may disclose your Personal Information accordingly.
基于法律的披露:在法律、法律程序、诉讼或政府主管部门强制性要求的情况下,SAP可能会公开披露您的个人信息。
V. How does SAP Protect Your Personal Information?
SAP如何保护您的个人信息
(1) SAP has employed security measures complying with industry standards to protect the Personal Information SAP collects via the [SAP for Me], to prevent such Personal Information from unauthorized access, public disclosure, use, modifications, damage or loss. SAP will adopt reasonable measures to protect your Personal Information. For example, SAP use a trusted protection mechanism to protect such Personal Information from attacks and we deploy an access control mechanism to ensure only authorized persons can access such Personal Information.
SAP已使用符合业界标准的安全防护措施来保护SAP通过【SAP for Me】收集的个人信息,防止此类个人信息遭到未经授权访问、公开披露、使用、修改、损坏或丢失。SAP会采取一切合理的措施来保护您的个人信息。例如,SAP会使用受信赖的保护机制防止此类个人信息遭到恶意攻击;SAP会部署访问控制机制,确保只有授权人员才可访问此类个人信息。
(2) SAP may adopt reasonable measures to ensure irrelevant Personal Information is not collected. SAP only keep your Personal Information within the minimum period required for fulfilling the purposes stated in this Privacy Statement, unless an extension is required or permitted by applicable law.
SAP会采取一切合理的措施,确保未收集无关的个人信息。SAP只会在达成本隐私政策所述目的所需的最短期限内保留您的个人信息,除非根据适用法律的需要或允许延长保存期。
(3) SAP has put in place measures to protect your Personal Information from loss, misuse and unauthorized access. SAP will keep your Personal Information secure using reasonable security measures as appropriate, for example, encryption (e.g., SSL) and anonymization. SAP use the protection mechanisms offered by the mobile operating system inside the application's sandbox environment. Your Personal Information is also protected by application-level encryption based on 256-bit Advanced Encryption Standard (AES) or better method. Further, SAP may make available to your Company certain optional security measures for managing the [SAP for Me] which your Company can deploy at its end, for example, single-sign-on, multi-factor authentication and other mobile device management security features. SAP will continue to improve the technical measures to protect your Personal Information collected by the [SAP for Me]. SAP has achieved and maintains C5, ISO22301, ISO27001, ISO27017, ISO27018, SOC1/2 and similar other international technical standards.
SAP已采取适当措施来防止您的个人信息遭丢失、滥用或未经授权的访问。SAP将适当采用加密技术(例如 SSL)、匿名技术等合理的安全防护措施来确保您个人信息的安全。SAP不仅在应用程序的运行环境中应用了移动端操作系统提供的保护机制,同时您的个人信息还将受到基于256位高级加密标准(AES)或更好方法的应用程序级加密保护。 此外,SAP可能会向贵公司提供一些可自行选择部署的安全防护措施来帮助管理【SAP for Me】,例如单点登录、多重身份验证以及其他移动设备管理安全功能。SAP将不断优化技术措施,保护【SAP for Me】收集的个人信息。SAP 已达到并持续符合 C5、ISO22301、ISO27001、ISO27017、ISO27018、SOC1/2 及其他类似国际技术标准的要求。
In the event of a Personal Information security breach, SAP will notify you as required by the applicable laws and regulations. SAP will cooperate with your Company to notify the affected users and handle the event. Personal Information security breaches by the [Cloud Service] are not subject to this Privacy Statement. Personal information security breaches caused by the [Cloud Service] will be handled according to the privacy statement of the [Cloud Service].
如果出现个人信息安全漏洞,SAP会根据适用法律法规的要求告知您。SAP将协助您的公司告知受影响的用户并处理该安全事件。由【云服务】导致的个人信息安全事件不受本隐私政策的约束。【云服务】造成的个人信息安全事件将根据【云服务】自己的隐私政策处理。
VI. How can you exercise your Right to protect Personal Information?
您如何行使您的个人信息保护权利
In accordance with applicable laws and regulations, you are guaranteed certain rights to your Personal Information.
按照适用的法律法规,SAP保障您对自己的个人信息行使特定权利。
With respect to the Personal Information under our control, you may contact SAP at https://support.sap.com/en/contact-us.html should you have any questions or concerns regarding such Personal Information. To the extent SAP has retained such information with an identifier that can be connected to you, you have the following rights.
对于由SAP控制的个人信息,如有任何问题或疑虑,请通过 https://support.sap.com/en/contact-us.html 联系SAP。如果SAP保存的信息中包含与您关联的标识符,您可以行使以下权利:
(1) Accessing or requesting a copy of your Personal Information
访问您的个人信息并获取副本
You have the right to access or request a copy of your Personal Information under our control, except for the exceptions specified in applicable laws and regulations. If you wish to exercise the right to access or request a copy of your Personal Information, you may contact SAP at https://support.sap.com/en/contact-us.html.
您有权访问由SAP控制的您的个人信息并获取副本,但适用法律法规规定的例外情况除外。如果您想行使个人信息访问权或获取副本,请通过 https://support.sap.com/en/contact-us.html 联系SAP。
If it does not incur a significant cost or cause other significant difficulties for us, upon your written request, SAP can also provide you with a copy of your Personal Information under our control (if any) that is generated during your use of the [SAP for Me]. If you wish to access such Personal Information, please contact us at https://support.sap.com/en/contact-us.html.
在不会产生较高成本或造成其他较大困难的情况下,应您的书面请求,SAP可以提供您在使用【SAP FOR ME】期间所产生的、由SAP控制的您的个人信息(如有)的副本。如果您想访问此类个人信息,请通过 https://support.sap.com/en/contact-us.html 联系SAP。
(2) Correcting your Personal Information
更正您的个人信息
As the types of Personal Information that SAP (as a personal information handler) collects is very limited, if you discover errors in your Personal Information under SAP’s control, you have the right to require SAP to make the correction. You may request a correction by contacting SAP at https://support.sap.com/en/contact-us.html.
由于SAP作为个人信息处理者收集的个人信息类别非常有限,您不太可能需要更正由SAP控制的您的个人信息。但是,如果您发现SAP控制的您的个人信息有错误,您有权要求SAP做出更正。您可以通过 https://support.sap.com/en/contact-us.html 联系SAP来要求更正。
(3) Deleting your Personal Information
删除您的个人信息
In the following cases, you may send a request to https://support.sap.com/en/contact-us.html to delete your Personal Information under SAP’s control:
在以下情形,您可以通过 https://support.sap.com/en/contact-us.html 向SAP提出删除由SAP控制的您的个人信息的请求:
1. If SAP’s behavior in processing your Personal Information violates applicable laws or regulations;
如果SAP处理您个人信息的行为违反了适用法律法规;
3. If SAP’s behavior in processing your Personal Information violates our agreement with you;
如果SAP处理您个人信息的行为违反了与您的约定;
4. If you desist from the use of the [SAP for Me], or you cancel the account;
如果您不再使用【SAP for Me】,或您注销了帐号;
5. If SAP desists from providing the [SAP for Me] to you, or the retention period has expired.
如果SAP不再为您提供【SAP FOR ME】。
If you request for deletion, while the retention period provided by any law or administrative rules has not expired, or it is difficult to realize the deletion of Personal Information technically, SAP will cease the processing of Personal Information except for storing and taking necessary security protection measures for such information.
如果您请求删除,而任何法律或行政法规规定的保留期尚未到期,或者在技术上很难实现个人信息的删除,SAP将停止除储存之外的对您个人信息的任何处理,并采取必要的安全保护措施。
If SAP agrees to your deletion request, SAP will also inform the entities which has obtained such Personal Information from SAP to delete such Personal Information without delay, unless otherwise specified in laws and regulations, or these entities have obtained your separate authorization.
如果SAP同意了您的删除信息请求,SAP也会通知从SAP这里获取了此类个人信息的实体,要求其立即删除,除非法律法规另有规定,或这些实体已单独获得您的授权。
(4) Right to Stop or Restrict
请求停止或限制处理
You can request from SAP to stop or restrict your Personal Information from further processing in certain circumstances.
在特定的情况下,您可以请求SAP停止或限制对您的个人信息进行进一步处理。
(5) Right to Object
拒绝权
You can request not to be subject to a decision based solely on automated processing.
您可以拒绝仅基于自动决策处理您的个人信息。
(6) Right to Withdraw Consent
撤回同意的权利
Wherever SAP is processing your Personal Information based on your consent, you may at any time withdraw your consent. In case of withdrawal, SAP will not process Personal Information subject to this consent any longer unless legally required to do so. In case SAP is required to retain your Personal Information for legal reasons your Personal Information will be restricted from further processing and only retained for the term allowed by law. However, any withdrawal has no effect on past processing of Personal Information by SAP up to the point in time of your withdrawal.
若SAP是基于您的同意处理您的个人信息,您可以随时撤回您的同意。在撤回的情况下,除非法律要求,否则SAP将不再处理您的个人信息。如果SAP因法律原因需要保留您的个人信息,您的个人信息将被限制进一步处理,并且仅保留法律允许的期限。然而,任何撤回都不会影响SAP在您撤回之前对您的个人信息的处理。
(7) Canceling your Account
注销您的帐号
You can log out of SAP for Me at any time. Upon logging out of SAP for Me, SAP for Me will not store any of your Personal Information on your mobile device. Your Company controls the Cloud Service. Should you have any questions about how to cancel your account on the Cloud Service, please contact your Company.
您随时可以登出SAP for Me。登出后,SAP for Me将不会在您的移动设备中存储任何您的个人信息。由于云服务由贵公司控制,因此,如果您对如何注销云服务帐号有任何疑问,请联系贵公司。
(8) Right to Lodge a Complaint
投诉权
If you take the view that SAP is not processing your Personal Information in accordance with the requirements in this Privacy Statement or under applicable data protection laws, you can at any time, to the extent required by applicable law, lodge a complaint with competent data protection authority.
如果您认为SAP没有按照本隐私政策或适用数据保护法律的要求处理您的个人信息,您可以在适用法律要求的范围内,随时向数据保护主管机构提出投诉。
(9) Responding to Your Above Requests
响应您的上述请求
Please submit your request in writing. To ensure security, SAP may need to verify your identity before processing your request. SAP will reply to your request within 15 working days after verification of your identity. If you have any concerns, you may contact SAP at https://support.sap.com/en/contact-us.html.
请以书面形式提出请求。为保障安全,SAP可能会先要求您验证自己的身份,然后再处理您的请求。SAP将在您完成身份验证后的 15 个工作日内做出答复。如有任何疑虑,请通过 https://support.sap.com/en/contact-us.html 联系SAP。
Generally, SAP will not charge fees to process any reasonable request. But if you submit the same request frequently or your request exceeds a reasonable extent, SAP may charge a fee based on our processing costs as SAP may reasonably determine. Where the requests are repeated without good reasons, or require too many technical measures (e.g. a new system is needed or current practice will be changed fundamentally), or put others’ legitimate rights and interests at risk or are very impractical (e.g. require a backup of the Personal Information stored in the tape), SAP reserves the right reject such requests.
对于合理的请求,SAP一般不收取费用。但对多次重复、超出合理限度的请求,SAP将根据处理成本酌情合理地收取一定费用。对于那些无端重复、需要过多技术手段(例如,需要开发新系统或从根本上改变现行惯例)、给他人合法权益带来风险或者非常不切实际(例如,要求用磁带备份存储个人信息)的请求,SAP有权予以拒绝。
In the following cases, in accordance with applicable laws and regulations, SAP is unable to accommodate your request:
在下列情况下,按照适用法律法规要求,我们将无法响应您的请求:
1. Directly related to national security and national defense security;
与国家安全、国防安全直接相关的;
2. Directly related to public security, public health, and major public interests;
与公共安全、公共卫生、重大公共利益直接相关的;
3. Directly related to criminal investigation, prosecution, trial, and enforcement of judgments;
与犯罪侦查、起诉、审判和判决执行等直接相关的;
4. There is sufficient evidence indicating that you have subjective malicious intentions or abuse your rights;
有充分证据表明您存在主观恶意或滥用权利的;
5. Responding to your request will cause serious damage to the legitimate rights and interests of the data subject or other individuals or organizations;
响应您的请求将导致数据当事人或其他个人、组织的合法权益受到严重损害的;
6. Involving trade secrets.
涉及商业秘密的。
VII. Processing Personal Information of Children
儿童个人信息的处理
The [SAP for Me] and any related websites, products and services are intended for adults. We consider anyone less than 14 years old a child. You represent and warrant that you are an adult and not a child and you will not transmit Personal Information of any child through the [SAP for Me] without the explicit consent of the child’s parents or guardians. If SAP discover that SAP has collected Personal Information of children without verifiable consent of their parents or guardians, SAP will find ways to delete such data as soon as possible.
【SAP for Me】及任何相关的网站、产品和服务主要面向成年人。SAP将所有未满 14 周岁的人视为儿童。您声明并保证您不是儿童,您是一个成年人,您不会在未经儿童父母或监护人明示同意的情况下通过【SAP for Me】传输任何儿童的个人信息。如果SAP发现自己在未获得可验证的儿童父母或监护人同意的情况下收集了儿童的个人信息,SAP则会设法尽快删除相关数据。
VIII. Where is Your Personal Information Stored and How is it Transferred Cross-Border?
您的个人信息储存在哪里以及如何在全球范围内转移
Your Personal Information will be stored within China (for the purpose of this Privacy Statement only, China refers to the mainland of China and does not include Hong Kong SAR, Macau SAR and Taiwan region). However, as SAP may provide products or services via servers and resources located worldwide, your Personal Information may be transferred to jurisdictions outside China. Such jurisdictions may have different data protection laws or have no such laws. However, for your Personal Information under our control, SAP will ensure such Personal Information will have no less protection than under the laws protecting Personal Information in China.
您的个人信息将会被储存在中国境内(仅为本隐私政策之目的,中国仅指中国大陆,不包含香港特别行政区、澳门特别行政区和台湾地区)。然而,鉴于SAP可能通过遍布全球的服务器和资源提供产品或服务,您的个人信息可能会转移至中国之外的辖区。此类辖区可能设有不同的数据保护法,甚至未设立相关法律。但是,对于由我们控制的您的个人信息,SAP会确保此类个人信息获得不少于中国境内的个人信息保护法所提供的保护。
IX. How Is This Privacy Statement Updated?
本隐私政策如何更新
Our Privacy Statement may be updated from time to time. Without your explicit consent, SAP will not diminish the rights you are entitled to under this Privacy Statement. The [SAP for Me] will alert you through a pop-up notice or other prominent method of any update and obtain your explicit consent to the new version of the Privacy Statement.
SAP可能会不时更新本隐私政策。未经您明示同意,SAP不会削减您按照本隐私政策所应享有的权利。【SAP FOR ME】将通过弹出通知或其他有效方式提醒您相关内容的更新,并征求您对新版隐私政策的明示同意。
IX. General Information Regarding the Components Displayed in the App
由SAP for Me所显示组件的一般信息
SAP for Me acts as a consolidation platform to enhance the user experience of SAP's customers. The personal information displayed in SAP for Me is a real time image of the underlaying database of the respective Component. The user needs to register her-/him-/themself first at the page of the respective Component, otherwise the data cannot be displayed in SAP for Me. SAP for Me does only display the data from the respective Component and is not capable of executing any alteration of the personal information like blocking, rectification, or permanent deletion, which needs to be triggered via the respective Component.
SAP for Me充当可增强SAP客户用户体验的整合平台。在SAP for Me中所显示的个人信息是相关组件底层数据库的实时镜像。用户需先在相关组件的页面注册,然后才能在SAP for Me中显示所需数据。SAP for Me能显示在相关组件中的个人信息,且不能执行需通过相关组件触发的对个人信息的屏蔽、纠正或永久删除等更改。
SAP for Me is displaying the following categories of personal information, which is directly pulled from the data bases of the different Components: First Name, Last Name, E-mail address, phone number, SAP User ID. The App does not aim at showing sensitive personal data.
SAP for Me能显示直接从不同组件的数据库中所提取的个人信息,这些信息包括:名字、姓氏、电子邮件地址、电话号码、SAP用户ID。SAP for Me并不会显示任何个人敏感信息。
In the App, it is made transparent which Component is hosting and processing the personal information of the user.
在SAP for Me中,相关组件所托管和处理的用户个人信息是对用户透明的。
Therefore, the privacy statements of the respective Components apply and can be accessed through the following links:
因此,各相关组件适用各自的隐私政策,用户可通过以下链接访问:
• SAP ONE Support Launchpad (Capability area: My support incidents; Open incidents; My Profile):
sap.com/about/legal/privacy
•SAP ONE Support Launchpad(功能区域:我的支持事件;未解决的事件;我的个人资料): www.SAP.com/about/legal/privacy.html
• SAP LearningHub (Capability area: Learning Status in my company; My Learnings):
learninghub.sap.com/about/legal/privacy
SAP Learning Hub(功能区域:我在公司的学习状态;我的学习): learninghub.SAP.com/about/legal/privacy
• SAP Training Shop (Capability area: Learning Status in my company):
training.sap.com/about/legal/privacy
SAP Training Shop(功能区域:我在公司的学习状态):
training.SAP.com/about/legal/privacy
•SAP Help Portal (Capability area: Learning Journey):
help.sap.com/viewer/privacy
SAP Help Portal(功能区域:学习之旅):
help.SAP.com/viewer/privacy
• Credential Manager(Capability area: My Certificates):
sap.com/about/legal/privacy
Credential Manager(功能区域:我的证书):
www.SAP.com/about/legal/privacy.html
•SAP PartnerEdge Portal (Capability Area: My Sap Partnership):
partneredge.sap.com/en/public/privacy-policy
SAP PartnerEdge Portal(功能区域:我的SAP合作伙伴):
https://partneredge.sap.com/en/public/privacy-policy.html
The following information can be extracted from the privacy statements of the Components:
您可以从相关组件的隐私政策中提取以下信息:
• Which information do SAP collect about you?
SAP收集有关您的哪些信息?
• Why is the provision of personal data required?
为什么需要提供个人信息?
• What is the legal basis for the processing of personal data?
处理个人信息的法律依据是什么?
• How long does SAP store my personal data?
SAP将我的个人信息存储多长时间?
• Who are the recipients of my personal data and where will it be processed?
谁是我的个人信息的接收者,并将在哪里处理?
• What are my rights?
我有什么权利?
• Right to lodge a complaint
提出投诉的权利
IX. How may you contact SAP?
如何联系SAP
If you have any question, comment or suggestion relating to this Privacy Statement, you can contact SAP at https://support.sap.com/en/contact-us.html. Generally, SAP will strive to reply within 15 working days.
如您对本隐私政策有任何疑问、意见或建议,请通过以下地址与SAP联系:https://support.sap.com/en/contact-us.html。一般情况下,SAP将在 15 个工作日内回复。
Appendix I: List of Personal Information Collection
附件1: 个人信息收集表
Services/Functions
服务/功能
(Basic Function/Additional Function) Manner of collection
收集方式 Frequency or timing of collection
收集频率及时点 Type of Shared Personal Information
分享的个人信息类型 Impact of refusing to process this type of Personal Information on individuals
拒绝处理个人信息对个人的影响
Authentication
验证
Directly provided by user
用户直接提供 After one “agreed” to the Privacy Statements and EULA and start onboarding process
在用户对隐私政策及用户许可合同同意之后并开始首次使用此软件时 user ID, password
用户ID 和密码 Without sign in, some function could not be used
若不用验证信息登录软件,用户将不能使用其它功能
Data analyses
数据分析 Collected within services by SDK
通过SDK所提供服务进行搜集 If user choose “agreed” to enable Usage Data Analyses
当用户同意软件可进行数据分析之时 unique device identifier (Android ID / iPhone device ID), device OS, user interaction in the app
唯一设备识别信息,设备OS, 用户在软件里的互动信息 User can use the app normally. The app will not collect any user information for data analyses
以方便于用户可正常使用软件。本软件并不会随意收集任何个人信息以进行数据分析
Crash Log
崩溃日志 Collected within services by SDK
通过SDK所提供服务进行搜集 If user choose “agreed” to provide crash logs to help SAP improve the product’s performance
当用户同意提供崩溃日志之时以便于SAP提高产品表现 Device OS name, device Android version, language, screen size
设备OS姓名,设备安卓版本,语言,屏幕大小 No effect on any function of the app
并不影响本软件其他功能的使用
BaiduPush Initialization
百度推送初始化
Directly fetched ANDROID_ID from system After one “agreed” to the Privacy Statements and EULA
在用户对隐私政策及用户许可合同同意之后 ANDROID_ID
安卓设备的ID Can not initialize SAP BTP SDK for Android and BaiduPush (for Chinese users)
针对中国用户,若无此功能,本软件将针对百度推送和安卓设备不能进行SAP BTP SDK初始化
Appendix II – List of SDKs
SDK 清单
Name of SDK
SDK名称 Name of third party
第三方名称 Description of scenario
场景描述 Link to third party’s privacy statement
第三方隐私政策链接 Type of Personal Information to be collected
收集的个人信息类型
SAP BTP SDK for Android SAP BTP SDK for Android 用户登陆验证,收集使用偏好,崩溃数据 https://www.sap.com/corporate/en/legal/privacy.html ANDROID_ID, user ID, password, crash report, device info
SAP BTP SDK for iOS SAP BTP SDK for iOS 用户登陆验证,收集使用偏好,崩溃数据 https://www.sap.com/corporate/en/legal/privacy.html User ID, password, crash report, device info
Qualtrics IOS SDK qualtrics-digital-ios-sdk Collect user feedback of the app
收集用户反馈 https://www.qualtrics.com/terms-of-service/
Qualtrics Android SDK qualtrics-digital-android-sdk Collect user feedback of the app
收集用户反馈 https://www.qualtrics.com/terms-of-service/