Privacy Statement for Roambi

This Privacy Statement for the Roambi Service (the "Service") covers this website, the Roambi mobile application and other sites that reference this Privacy Statement. The Data Controller for the Service is SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany ("SAP"), and the data protection officer is Mathias Cellarius. Some SAP entities, programs and/or sites may have their own, possibly different, privacy statements. We encourage you to read the privacy statements of each of the SAP websites or program information you visit or review.

Consent

By using the Service, you consent to the collection and use of the personal data as described here. If the conditions under which we process your personal data change, we will post the changes on this site and, if required, ask you for your consent to this changed Privacy Statement. Otherwise, we will only post the changes on this site. If you do not agree with the processing of personal data as set out herein, please do not use the Service. If your consent is required at a later point in time and you do not grant such consent, (although granting consent will be absolutely voluntarily for you), you might not be able to use the service any longer.

You further consent that SAP may process any personal data that you provide in connection with Service in the United States of America and other regions outside the European Economic Area.

Personal Data Collected

We collect the following personal data during your use of the Service:

1. Registration for a User Account

In order to access and receive certain functionality available through our online services, you may be asked to provide certain personal data about yourself. SAP may request the following information for your User Account: (i) your name, mailing address, e-mail address, telephone number, the company you work for, and your title and (ii) a username and password that will be associated with your user account ("User Account Information"). During registration, you may be required to provide personal data as detailed above. You may also be required to provide a username and password (or we may provide you with a password), which will be used to log-in to your User Account.

It is important that you protect and maintain the security of your User Account and that you immediately notify us of any unauthorized use of your User Account. If you forget your password, you may not be able to access certain features or functionality of the Service and/or our online services, including but not limited to the ability to manage your User Account. If this should happen, you may email us at SAPRoambiAdmin@sap.com to request a new password upon our verification of additional information we maintain about you. Please see 'Security' below for further details regarding our security measures and procedures.

2. Cookies and Analytics; Other Information

We also collect other information, unconnected to the registration and order data above, about you and your use of the Services that is transferred to us by your browser and/or by cookies when you access our Services. Like most standard website servers, we use log files to collect Other Information, including internet protocol (IP) addresses, browser types, internet service providers (ISPs), referring/exit pages, platform types, date/time stamps, and the number of clicks (collectively, along with information from Google Analytics as described below, "Other Information"). If you use the Service on a mobile device, Other Information may include your mobile device ID. You may also be asked to provide Other Information while using certain features or functionality available on the Services, such as your zip code and information about Service usage preferences. Other Information collected from you is used for various purposes, such as to analyze trends, improve our products and services, administer the Service and our online services, track user movement in the aggregate, customize the user experience or, if applicable, notify you of certain promotions, products or services and gather broad demographic information for aggregate use.

If you choose to reject the cookie, you can still use the Service, but you may be unable to access certain services, programs, features and functionality available on the Service.

This Service also uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on Your computer to help the website analyze how users use the Service. The information generated by the cookie about Your use of the website (including Your IP address) will be transmitted to and stored by Google on servers in the United States. SAP may use this information to evaluate Your use of the Website and to make improvements to the Website or Service. You may refuse the use of cookies by selecting the appropriate settings on Your browser. Additionally, You may use the Google Analytics Opt-Out Browser Add-on developed by Google and available at https://tools.google.com/dlpage/gaoptout?hl=en. The Add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics.

Transfer of this information to Google means that this information is sent to the United States, where it may be subject to laws on data protection which do not provide for the same protection level as the data protection laws of the EEA.

User Account Information and Other Information are referred to in this document as "personal data."

We will not share any personal data collected by our cookies except as provided herein, though you agree and acknowledge that we may share the non-personal, aggregated or anonymous information derived from Other Information (as defined above) with third parties.

Use of Personal Data

SAP requires User Account information in order to deliver the ordered good or service, including (a) in order to contact you to respond to your questions or requests or to provide you with technical support, (b) to provide you with information regarding changes to the Service which may affect your User Account, your use of the Service. SAP's use of this information is based on the permission set out in applicable data protection laws to process personal data for the purpose of performing contractual obligations with customers,

SAP also uses your personal data (i) for our internal tracking or research purposes, including product improvement (ii) to inform you of any product or promotional offers either SAP or its affiliates may have, (iii) to create aggregated collections of information from your personal data. Any such use of information is based on the consent you grant hereunder.

Sharing Your Personal Data

SAP will not send your personal data outside the SAP Group except as provided in this privacy Statement, unless we are otherwise required to do so by applicable laws.

When processing your order, SAP may transfer User Account Information and Other Information to SAP Group Companies in the United States and therefore outside of the European Economic Area where a level of data protection applies that is not comparable to the data protection laws of the European Economic Area. Such transfer is based on the Standard Contractual Clauses. You may obtain a redacted copy (in order to remove commercial and not relevant information) of such Standard Contractual Clauses by sending a request to privacy@sap.com

We may share your personal data with third parties solely in one or more of the following ways:

1. Third Party Service Providers
We may contract with third party companies to perform services on our behalf. These services may include, but are not limited to, order fulfillment, package delivery, marketing assistance, postal and e-mail delivery, hosting services, customer service, data analysis, and credit processing. The third parties we contract with for the provision of these services will be permitted to obtain only such personal data as they require to deliver the services. Further, such third parties are required to maintain the confidentiality of the information disclosed to them consistent with this Privacy Statement, and are prohibited from using personal data disclosed for any purpose other than as required for their provision of the applicable services.
2. Safety, Security and Compliance with Law
We may disclose any information, including personal data, we deem necessary, in our sole discretion, to comply with any applicable law, regulation, legal process or governmental request, to enforce our rights or to protect the safety and security of our Services or other users. We may also exchange information, including personal data, with other companies and organizations for credit fraud protection and risk reduction.

Information Storage

SAP will only store personal data for as long as it is required for the performance of an agreement between you and SAP (if required for the performance of the Service) or until you revoke your consent granted hereunder (if based on consent).

Security

SAP is committed to protecting the Personal Data you share with us. SAP uses a combination of industry-standard security technologies, procedures, and organizational measures to help protect your personal data from unauthorized access, use or disclosure.

We bind our employees and data processors to observe your privacy and confidentiality rights.

California DNT Disclosure

A Do Not Track (DNT) signal is a signal sent from some web browsers which sends a signal to a website visited about a user's DNT preference. This Service does not currently track users' personal data over time across websites and therefore it does not currently respond to DNT signals.

The Services does not allow third parties to gather information about you over time and across websites.

Links to Other Sites

This site may contain links to other sites. SAP is not responsible for the privacy practices or the content of other websites outside the SAP Group of companies.

Inquiries, Access and Updating Your Personal Data

SAP needs your help in keeping the personal data you have shared with us accurate and up-to-date.

If you are a registered user of the Service, you may make these updates to your information in your profile.

You can request from SAP at any time information about which personal data SAP has about you and the correction or deletion of such personal data (whereby SAP can only delete your personal data if there is no statutory contracting obligation to retain it). Furthermore, you can request from SAP that SAP restricts your personal data from any further processing in any of the following events: (i) you state that the personal data SAP has about you is incorrect, however, only for as long as SAP requires to check the accuracy of the relevant personal data, (ii) there is no legal basis for SAP processing your personal data and you demand that SAP blocks your personal data from further processing, (iii) SAP no longer require your personal data but you claim that you require such data in order to claim or exercise legal rights or to defend against third party claims or (iv) in case you object against the processing of your personal data by SAP for as long as it is required to review as to whether SAP has a prevailing interest in processing your personal data. Please direct any such request to SAPRoambiAdmin@sap.com.

You may withdraw your consent for SAP to process your personal data as stated herein at any time. Once you assert this right, SAP will not process your personal data any longer unless legally required to do so. However, any withdrawal has no effect on past processing of personal data by SAP up to the point in time of your withdrawal.

If you take the view that SAP is not processing personal data in accordance with the requirements set out herein or applicable EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country where you live or with the data protection authority of the country or state where SAP has its registered seat.

Please note that you cannot use the Service any longer if you delete certain of your personal data, because the Service requires such data to function.

Updated as of: March 15, 2017