Thank you for visiting our website and for your interest in our company. We take data privacy of your personal data entrusted to us seriously and want you to feel safe and comfortable when visiting our website and using our services. SAP Fioneer develops software and platforms that enable banks, insurance companies and other organisations to operate, change and grow in a cost-effective, scalable, and fast way.
The following entity is responsible for collecting and processing and as well for the website pursuant to Art. 4 No. 7 of the General Data Protection Regulation (hereinafter referred to as “we”, “us” or “our”):
SAP Fioneer GmbH
Robert-Bosch-Str. 35
69190 Walldorf
Germany
Please note that depending on which SAP Fioneer Affiliate you enter into a contract with for the provision of services, the respective subsidiaries may also be data controllers for the processing of your personal data in relation to these services.
Statutory Authorization to represent:
Dirk Kruse, Robert Müller, Patrick Schmid
If you have any further questions regarding the processing of your personal data, you can contact our data protection officer.
Data Protection Officer: Lutz Bartsch
Contact/e-mail: [email protected]
Landesbeauftragter für den Datenschutz und Informationsfreiheit Baden-Württemberg
Lautenschlagerstrasse 20
70173 Stuttgart
Germany
These Privacy Terms are intended to explain the processing of your personal data that we collect and process when, for example, you register on our website or visit our website (www.sapfioneer.com) or related subpages or contact us to use the products or services offered by SAP Fioneer.
It is also intended to enable you to make informed decisions about the processing of your data when you use our website, services, and support, when it comes to our marketing activities/customer analyses, or when we engage third parties to provide a service in connection with these services. It sets out your rights in relation to the processing of your personal data and informs you about the types of personal data we process about you.
As SAP Fioneer is based in Germany, it is regulated by the European data protection legislation, the General Data Protection Regulation (GDPR).
SAP Fioneer has established a Privacy Policy, which is applicable to the parent company and all group entities worldwide. These Privacy Policy define the GDPR as minimum standard applicable for the entire SAP Fioneer corporate group. “Personal data” are, according to Art. 4 No. 1 GDPR, any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. There are circumstances in which the responsibility for processing such personal data lies with the data controller (us).
We only process personal data in accordance with the applicable data protection requirements, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). According to Art. 13 and Art. 14 GDPR, we have to inform you about the processing of your personal data. The following discloses the extent to which we process your personal data and the rights to which you are entitled.
Please also note that these Privacy Terms might apply to the extent that your personal data has been disclosed to us, only. Third parties may apply to their own privacy terms for the processing of your personal data; you may check this accordingly before providing your personal data.
In the context of our business activities (including through the provision of this website), we collect and process your personal data in order to identify and/or contact you, to assign your message/request to an existing contract, to deliver our Support Services and to give feedback to you regarding your request to do marketing activities and/or customer analysis in the context of performing our services or in the context of any other business relationship. In accordance with the context of business activities and your possible consent the purpose in collecting and processing your personal data is to assist us with the following:
We are authorised to collect and process the following types and categories of personal data:
Legal entities as such are not data subjects under GDPR. However, personal data may also be provided to us in the context of business initiation, purchase requisitions and orders (e.g., personal data relating to the employees of the respective legal entity).
If you are such a natural person, we collect and process the following personal data:
In the context of participation in virtual events, such as webinars, workshops, round tables or conferences, we collect and process the following personal data:
In some cases, we analyse your contact data together with other personal data that we have e.g., collected about you from your activities on our website, such as which subpages and services you have viewed on our website, in the context of purchase requisitions and orders, using our web contact-form, etc.
In particular, we collect and process:
While using our Service and Support system via web login we collect and process your personal data entered in the ticket you created.
In particular, we collect and process:
Your application is processed via third party workable and the following privacy terms will apply.
We collect and process personal data that you voluntarily provide to us during your use of the website and/or use of the provision of our services and customer support to enable us to provide the services for you. Our website uses various user interfaces to enable you to request information about our services, including electronic enquiry forms. Contact details can be requested, together with details of other personal data relevant to your service enquiry. This data will be used to respond to your enquiry.
Basically, we can be reached by mail, e-mail, contact form, telephone or via social networks for your requests.
Your personal data such as first name, last name, work email address and country are required to send your request to us via the web contact form. Otherwise, the provision of your personal data is voluntary.
If you do not provide your personal data, we may not be able to process or respond to your enquiries, or requests. If you do not provide us with your work email address in the web contact form or provide it incorrectly, we will not be able to reply to you. Insofar as your identification should be necessary, e.g., to answer you or call you back, we collect your contact data.
We are authorized to use your data for the following purposes:
The IP address is a string of numbers that uniquely assigns your computer system for the time of calling up our website. The IP address is used to receive and send data packets and enables a user to retrieve a website.
The temporary storage of the IP address on our server is necessary to transmit the page content to your computer system after calling up this website, so that the user can perceive the content.
The storage in log files takes place to ensure the functionality of the website and to be able to detect any transmission errors that may occur. In addition, this data is used by us to optimize the website and to ensure the security of its information technology systems.
Your personal data will be disclosed to our data processing department and to our contractors contracted to host and provide IT resources for the operation of the website.
The processing is carried out based on our legitimate interests as a data controller according to Art. 6 para 1 lit. f GDPR. We have a legitimate interest in processing the above personal data for the above purposes to ensure that its product and service information is available online.
The processing of personal data to provide the website and to create the log file is necessary for the operation of the website. Therefore, you cannot object to this type of processing.
Cookies are small text files, pixel are small graphic files, that are stored on your computer (together hereinafter “Cookies”). Cookies make it possible, for example, to identify you as a specific customer and to store both your personal preferences when using our website and technical information. The main benefit for you is that you do not have to enter specific information stored in the Cookies every time you visit our website. Cookies do not necessarily reveal personal information. If, however, you enter personal information on our website, this may be associated with the data stored in the cookies. For more see below.
You can change the selection of optional cookies and preferences any time via our cookie banner, here: Change Cookie Preferences
Your personal data will be processed in the context of business initiation, purchase requisitions and order for the preparation of requested offers and for the execution of orders.
The legal basis for this is Art. 6 para. 1 lit. c GDPR. We may also send you information material about our services and products. The legal basis for this is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. You can object to this mailing at any time. We will then no longer use your address data for these purposes. If you wish to exercise your data subject rights to object, withdraw your consent or unsubscribe from marketing and promotional emails or newsletters (please see chapter X.), please send an email to: [email protected].
We collect and process your personal data for the purpose of managing and organizing the event. We also process your personal data for the purpose of customer analysis marketing activities, invitations to webinars and conferences. Following the event the participants will receive an email including the link to the recording of the event to replay that subsequently.
The processing of your data is based on your consent in relation of a virtual event, Art. 6 para 1 lit. a GDPR. If you wish to exercise your data subject rights to object or withdraw your consent (please see chapter X.), please send an email to: [email protected].
In some cases, we analyze your contact data together with other personal data that we have e.g., collected about you from your activities on our website, such as which subpages and services you have viewed on our website, using our web contact-forms for registration to a webinar or a conference, becoming a partner or collaborate with us, and any further information when choosing to get in touch with us and in the context of purchase requisitions and orders.
To the extent permitted by law and with your consent (Art. 6 para 1 lit a GDPR.), we use cookies, log files and other technologies to collect personal data from the hardware and software you use to access the website or from your mobile phone. If you wish to exercise your data subject rights to object, withdraw your consent or unsubscribe from marketing and promotional emails or newsletters (please see chapter X.), please send an email to: [email protected].
While using our Service and Support system via web login we collect and process your personal data entered in the ticket you created. We use your personal data you provide in the ticket to us for contacting you in the context of the ticket processing and to improve our products and services.
The processing of your data is based on your consent in relation of the provision of the Support Services, Art. 6 para 1 lit. a DSGVO. If you wish to exercise your data subject rights to object or withdraw your consent (please see chapter X.), please send an email to: [email protected].
Your application is processed via third party workable and the following privacy terms will apply.
We use your personal data for the following purposes in relation to the administration of our business and legal compliance: to fulfil our legal obligations, to exercise our rights, to protect the rights of third parties; and in connection with a business transaction such as a merger, reorganization, or sale.
If we use your personal data in connection with a business transfer to exercise our rights or to protect the rights of third parties, it is in our legitimate interest or in the legitimate interest of a third party to do so, see Art. 6 para 1 lit. f GDPR. For all other purposes described in this section, we are legally obliged to use your personal data to comply with the legal obligations imposed on us, see Art. 6 para 1 lit. c GDPR. If you wish to exercise your data subject rights, please send an email to: [email protected].
Insofar as we have obtained consent from you for the processing operations of personal data, Art. 6 para 1 lit. a GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which you are a party, Art. 6 para1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures at your request.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which we are, Art. 6 para 1 lit. c GDPR serves as the legal basis.
If vital interests of you or another natural person make processing of personal data necessary, Art. 6 para 1 lit. d GDPR Art. 6 serves as the legal basis.
If the processing is necessary to protect a legitimate interest of the controller or a third party and the interests, fundamental rights and freedoms of the user do not override the first-mentioned interest, Art. 6 para 1 lit. f GDPR serves as the legal basis for the processing.
SAP Fioneer is a globally operating software company. Any data collected by us or provided to us by you potentially could be transferred and processed by any SAP Fioneer entity.
As a rule, your personal data will be processed by us. Your personal data which we have received via electronic means of communication will only pass to third parties to the extent that this is necessary in individual cases to process your request. We may use the third parties process personal data on our behalf and on our instructions. We act with reasonable care and prepare contractual documentation in relation to all subcontractors to ensure that they process such personal data appropriately and in accordance with our legal and regulatory requirements.
In doing so, we will comply with our legal and regulatory requirements in relation to personal data, including but not limited to implementing appropriate safeguards. In addition, we are authorized to transfer personal data to third parties as governments or regulatory authorities, regulators/tax authorities/corporate registries based on legal requirements.
We utilize third parties providing infrastructure and similar general services to us, please click here to get more information on these third parties. And, we also utilize third parties providing subject area specific service; please click here to get more information on these third parties.
All third party lists may be subject to regular updates.
In some cases, it may be necessary to transfer personal data to third countries, e.g., to a supplier in a third country. Or we use services on our website that are hosted in third countries or through which data is processed in third countries. If you are located within the European Economic Area (EEA) or safe countries, please note that we may transfer personal data to countries outside the EEA or safe countries if this is necessary for the provision of the services. If we transfer data to third countries, we will only do so if suitable guarantees within the meaning of Art. 46 para 1, para 2 GDPR from the relevant recipients, such as the conclusion of EU standard contractual clauses. Where we transfer personal data to other SAP Fioneer affiliates in third countries: All SAP Fioneer affiliates have signed an internal data processing agreement based on the EU standard contractual clauses, including a legal basis for the transfer of personal data and the implementation of appropriate safeguards to ensure an adequate level of protection for the personal data in accordance with Art. 6 GDPR in conjunction with Art. 46 para 1, 2 of the GDPR.
Your personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. Storage may take place beyond this if this is stipulated by regulations, laws, or other regulations according to which we are obliged to store the personal data (retention obligations for example under contract law, commercial law, or tax law).
In the case of the collection of data for the provision of the website, deletion of your personal data takes place when the respective session has ended. The user’s IP address must remain stored for the duration of the session to enable the use of the website. If your data is stored in the log file, the data collected therein will be stored indefinitely.
We are committed to keeping the personal data provided to us secure and we have implemented appropriate information security policies, rules, and technical and organizational measures to protect the personal data for which we are responsible from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. All of our partners, employees, consultants, workers and data processors (i.e., those who process your personal data on our behalf for the purposes set out above) with access to and responsibility for processing personal data are required to maintain the confidentiality of that personal data.
You have the following rights in relation to your personal data collected and processed by us:
You have the right to request information about your personal data collected and processed by us (Art. 15 GDPR). In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details. Upon your request, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (together with certain other details). If you require additional copies, we may have to charge a fee.
You have a right to rectification under the conditions of Art. 16 GDPR. In particular, this means that you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.
You have the right to request, pursuant to Art. 17 GDPR, the erasure of your personal data collected and processed by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
You have a right to restriction of processing under the conditions of Art. 18 GDPR. This means that you have the right to demand that we restrict processing if one of the conditions listed in Art. 18 para 1 GDPR is met.
Under certain circumstances, you have the right to receive the personal data you have provided to us (in a structured, commonly used, and machine-readable format) and to reuse it elsewhere or ask us to transmit it to a third party of your choice (Art. 20 GDPR).
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para 1 lit. e or f GDPR (Article 21 para 1 GDPR). In this case, we will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user, or the processing serves the purpose of asserting, exercising, or defending legal claims. To exercise the right to object, it is sufficient to send an e-mail to (please find the respective e-mail addresses above under the according purpose section IV.
You can revoke to any consent given to us at any time with effect for the future in accordance with Art. 7 para 3 GDPR. The processing of personal data to provide the website and to create the log file is necessary for the operation of the website. Therefore, you cannot object to this type of processing. To exercise the right to revoke, it is sufficient to send an e-mail to (please find the respective e-mail addresses above under the respective responsible). Furthermore you can revoke your consent to the cookie processing any time by changing the selection of optional cookies and preferences our cookie banner, here: Change Cookie Preferences
You may complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the headquarters of us for this purpose.
Any time you may unsubscribe from marketing and promotional emails, newsletters from us at any time by following the unsubscribe instructions contained in any such email. You can also contact us any time to unsubscribe from marketing emails from us by emailing us (please find the respective e-mail addresses above under the respective responsible).
The Website contains links to other websites whose handling of personal data may differ from ours. Visitors to these websites should carefully read the respective privacy notices of the other websites, as SAP Fioneer has no control over data that is transmitted to or collected by such third parties.
We are entitled to amend these Privacy Terms from time to time. To ensure that you are always aware of our use of your personal data, we will occasionally update these Privacy Terms to reflect changes to our use of your personal data. In addition, we may make changes that are necessary to comply with changes in applicable law or regulatory requirements. We therefore recommend that you read these Privacy Terms regularly so that you are always informed about our use of your personal data.