Terms and Conditions For SAP Cloud Services of SAP Deutschland AG & Co - KG
Terms and Conditions For SAP Cloud Services of SAP Deutschland AG & Co - KG
KG
("Cloud GTC")
Article 1 Definitions
1.1 “Affiliate” means any legal entity that is affiliated with another company within the meaning of the German Stock Corporation Act (AktG),
section 15.
1.2 “Agreement” means these General Terms and Conditions and any Order Form referencing these General Terms and Conditions, and any
other schedules, statements of work, exhibits or appendices thereto, whether attached or incorporated by reference.
1.3 “Confidential Information" means, with respect to Customer, the Customer Data, and with respect to SAP: (a) the Service, including,
without limitation, all (i) computer software (both object and source codes) and related Service documentation or specifications; (ii)
techniques, concepts, methods, processes and designs embodied in or relating to the Service; and (iii) all application program interfaces,
system infrastructure, system security and system architecture design relating to the Service; (b) SAP research and development, product
offerings, pricing and availability; and (c) any information about or concerning any third party which information was provided to SAP subject
to an applicable confidentiality obligation to such third party. In addition to the foregoing, Confidential Information of either SAP or Customer
(the party disclosing such information being the “Disclosing Party”) may also include information which the Disclosing Party protects against
unrestricted disclosure to others and which (i) if in tangible form, the Disclosing Party clearly identifies as confidential or proprietary at the
time of disclosure; and (ii) if in intangible form (including disclosure made orally or visually), the Disclosing Party identifies as confidential or
proprietary at the time of disclosure, summarizes the Confidential Information in writing, and delivers such summary within thirty (30)
calendar days of any such disclosure.
1.4 “Content” means visual, audio, numeric, graphical, text or other data or content supplied by third parties and made available by SAP for
utilization with the Service.
1.5 “Customer” means the entity or individual that has consented to this Agreement by execution of an Order Form that references these
General Terms and Conditions or by other legally binding method of acceptance of this Agreement, including, but not limited to, checking a
box on a registration page.
1.6 “Customer Data” means any content, materials, data and information provided by Customer or its Named Users to SAP in the course of
using the Service.
1.7 “Documentation” means SAP's then-current technical and functional documentation for the Service which is delivered or made available to
Customer with the Service (excluding any advertisements or other descriptions even if published by SAP).
1.8 “Named User” means Customer's and its Affiliates' employees, agents, contractors, consultants, suppliers or other individuals who are
authorized by Customer to use the Service.
1.9 “Order Form” means the written order form or other ordering documentation (including a registration Webpage or Website) entered into by
SAP and Customer containing the specific terms and conditions applicable to the Service and which references these General Terms and
Conditions.
1.10 “SAP” means the die SAP Deutschland AG & Co.KG.
1.11 “Service” means the hosted, on cloud service described in the Order Form.
1.12 “Site” means an SAP established Internet site through which the Service is made available.
1.13 "System Availability" means the average percentage of total time during which the Service is available to Customer, excluding (i) any
maintenance windows (as may be defined in a supplement to this Agreement); (ii) any emergency maintenance (as may be defined in a
supplement to this Agreement); (iii) delays due to conditions beyond the reasonable control of SAP; (iv) delays caused by equipment
provided by Customer (or its service providers); or (v) delays caused by systems outside of the Service, including, but not limited to,
Customer’s network.
1.14 “Work Product” means any work product or tangible results produced by or with SAP pursuant to this Agreement, including in the course of
providing support, training or configuration services to Customer. Work Product includes works created for or in cooperation with Customer,
but does not include any Customer Data, Customer Confidential Information or the Service. For clarity, some services may be performed
under a statement of work, which statement of work will be governed by the terms and conditions of this Agreement.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 1
applicable law); (b) transmit any content, data or information that is unlawful, harmful, threatening, malicious, abusive, harassing, tortious,
defamatory, vulgar, obscene, libelous, invasive of another’s privacy or right of publicity, hateful, or racially, ethnically or otherwise
objectionable; (c) infringe the intellectual property rights of any entity or person; (d) interfere with or disrupt the SAP software or SAP
systems used to host the Service, or other equipment or networks connected to the Service, or disobey any requirements, procedures,
policies or regulations of networks connected to the Service made known to Customer; (e) use the Service in the operation of a service
bureau, outsourcing or time-sharing service; (f) provide, or make available, any links, hypertext (Universal Resource Locator (URL) address)
or other similar item (other than a “bookmark” from a Web browser), to the Site or Service, or any part thereof; (g) circumvent the user
authentication or security of the Site or Service or any host, network, or account related thereto; (h) use any application programming
interface to access the Service other than those made available by SAP; (i) make any use of the Service that violates any applicable local,
state, national, international or foreign law or regulation; or (j) except for rights provided to Named Users as permitted in this Agreement,
allow any third party to use any user identification(s), code(s), password(s), procedure(s) and user keys issued to, or selected by, Customer
for access to the Service.
2.5 Some content on the Site may come from government sources, is in the public domain, and is not copyrightable.
2.6 The Site may contain links to external Web sites (including embedded widgets or other means of access) and information provided on such
external websites by SAP partners and third-party service providers. SAP shall not be responsible for the contents of any linked Web site,
or any changes or updates to such sites. Customer further agrees that SAP shall not be directly or indirectly responsible or liable for any
damage or loss caused or alleged to be caused by or in connection with Customer’s use of or reliance on any content, goods or services
available on or through any such linked Web site. Any article, information, data, code, text, software, documentation, graphics, image,
marketing material, video, photograph, message, or posting to any forum, wiki, or blog on the Site, whether publicly posted or privately
transmitted, is the sole responsibility of the person or entity providing the content.
2.7 The Service may include Content. This Content is provided “as is”, and SAP makes no warranty as to the accuracy or completeness of
such Content. Customer uses such Content at its own risk, and SAP shall have no liability to Customer or any third party based on
Customer’s use of or reliance on such Content. SAP does not however warrant the accuracy of the Content or its suitability for any
purpose or that Customer will obtain any specific results from the use of the Content.
2.8 SAP shall be entitled to monitor Customer’s compliance with the terms of this Agreement, including but not limited the number of Named
Users accessing the Service and, subject to Article 12 of this Agreement, SAP may utilize the information concerning Customer’s use of the
Service to improve SAP products and services and to provide Customer with reports on its use of the Service.
2.9 SAP may change or modify the Service at any time. SAP shall not materially diminish the Service during the term of the Order Form.
Nothing in this Article 2.9 shall require SAP to continue to provide any portion of the Service if this would result in SAP violating the rights of
any third party or any applicable law.
2.10 If Customer is granted access under this Agreement to a free (no fee) version of the Service, to the extent permitted by applicable law,
Customer agrees that (i) SAP has no obligation to provide any particular service level or support services; and (ii) SAP may cease providing
the Service at any time without notice. This Article 2.10 supersedes any conflicting term of this Agreement.
2.11 SAP may offer and Customer may choose to accept access to functionality that is not generally available and not validated and quality
assured in accordance with SAP’s standard processes (“Beta Functionality”). The purpose of such access is to allow Customer to test the
functionality with its standard business operation and to provide feedback on such testing to SAP. Beta Functionality is described as such in
the Documentation. SAP may require Customer to accept additional terms to use Beta Functionality. Any production use of the Beta
Functionality is at Customer's sole risk. SAP does not warrant the correctness and completeness of the Beta Functionality, and SAP shall
not be liable for errors or damages caused by the usage of the Beta Functionality.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 2
liability for any defect or failure of the Service caused by such third-party services, and Customer shall not be entitled to any reduction in
fees for the Service. SAP may deny access to the Service to any third party which SAP determines in its sole discretion poses a security
risk or other risk to SAP systems, data or intellectual property.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 3
purge or overwrite all data still remaining on the servers used to host the Service, including, but not limited to, Customer Data, unless and to
the extent applicable laws and regulations require further retention of such data.
7.5 Articles 6 (other than 6.2), 8, 9, 10, 11 and 12 shall survive the expiration or termination of this Agreement.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 4
Article 11 Confidentiality
11.1 Confidential Information shall not be used or reproduced in any form except as required to accomplish the intent of this Agreement. Any
reproduction of any Confidential Information of the other party shall remain the property of the Disclosing Party and shall contain any and all
confidential or proprietary notices or legends which appear on the original. With respect to the Confidential Information of the other, each
party (a) shall take all Reasonable Steps (defined below) to keep all Confidential Information strictly confidential; and (b) shall not disclose
any Confidential Information of the other to any person other than individuals whose access is necessary to enable it to exercise its rights
and/or perform its obligations hereunder and who are under obligations of confidentiality substantially similar to those set forth herein. As
used herein “Reasonable Steps” means those steps the receiving party takes to protect its own similar proprietary and confidential
information, which shall not be less than a reasonable standard of care. Confidential Information of either party disclosed prior to execution
of this Agreement shall be subject to the protections afforded hereunder.
11.2 The above restrictions on the use or disclosure of the Confidential Information shall not apply to any Confidential Information that: (a) is
independently developed by the receiving party without reference to the Disclosing Party’s Confidential Information, or is lawfully received
free of restriction from a third party having the right to furnish such Confidential Information; (b) has become generally available to the public
without breach of this Agreement by the receiving party; (c) at the time of disclosure, was known to the receiving party free of restriction; or
(d) the Disclosing Party agrees in writing is free of such restrictions.
11.3 Customer shall not disclose the terms and conditions of this Agreement or the pricing contained herein to any third party. Neither party shall
use the name of the other party in publicity, advertising, or similar activity, without the prior written consent of the other, except that
Customer agrees that SAP may use Customer's name in customer listings or, at times mutually agreeable to the parties, as part of SAP's
marketing efforts (including without limitation reference calls and stories, press testimonials, site visits, SAPPHIRE participation). SAP will
make reasonable efforts to avoid having the reference activities unreasonably interfere with Customer’s business.
11.4 Customer may provide, or SAP may solicit, input regarding the Service, including, without limitation, comments or suggestions regarding the
possible creation, modification, correction, improvement or enhancement of the Service or any other SAP site, service or product, or input as
to whether Customer believes SAP’s development direction is consistent with Customer’s business and IT needs, the technology
marketplace in general, and the like (collectively “Feedback”). Customer acknowledges and agrees that any information disclosed by SAP
during discussions related to Feedback shall be considered SAP Confidential Information and shall be protected from disclosure in
accordance with the terms of this Agreement. In order for SAP to utilize such Feedback, Customer hereby grants to SAP a non-exclusive,
perpetual, irrevocable, worldwide, royalty-free license, with the right to sublicense to SAP’s licensees and customers, under Customer’s
relevant intellectual property rights, to use, publish, and disclose such Feedback in any manner SAP chooses and to display, perform, copy,
make, have made, use, sell, and otherwise dispose of SAP’s and its sublicensee’s products or services embodying Feedback in any manner
and via any media SAP chooses, without reference to the source. SAP shall be entitled to use Feedback for any purpose without restriction
or remuneration of any kind with respect to Customer and/or Customer’s representatives. Customer acknowledges that the information
related to the Service disclosed by SAP under this Agreement is only intended as possible strategies, developments, and functionalities of
the Service and is not intended to be binding upon SAP to any particular course of business, product strategy, and/or development.
Article 13 Miscellaneous
13.1 The product description in the documentation conclusively defines the functional qualities of the SAP Software delivered by SAP. SAP does
not owe any duty with regard to any further quality. In particular, Customer can imply no such duty from any other published SAP description
or advertisement for the SAP Software except to the extent SAP has expressly confirmed that other quality in writing. Guarantees are
effective only if expressly confirmed in writing by SAP’s management.
13.2 It is the intent of the parties that in case any one or more of the provisions contained in this Agreement shall be held to be invalid or
unenforceable in any respect, such invalidity or unenforceability shall not affect the other provisions of this Agreement, and this Agreement
shall be construed as if such invalid or unenforceable provision had never been contained herein.
13.3 If either party should waive any breach of any provision of this Agreement, it shall not thereby be deemed to have waived any preceding or
succeeding breach of the same or any other provision hereof.
13.4 The Order Form may be signed in two counterparts, each of which shall be deemed an original and which shall together constitute one
Order Form.
13.5 The Service, Documentation and other SAP materials are subject to the export control laws of various countries, including without limitation
the laws of the United States and Germany. Customer agrees that it will not submit the Service, Documentation or other SAP materials to
any government agency for licensing consideration or other regulatory approval without the prior written consent of SAP, and will not export
the Service, Documentation and SAP materials to countries, persons or entities prohibited by such laws. Customer shall also be
responsible for complying with all applicable governmental regulations of the country where Customer is registered, and any foreign
countries with respect to the use of the Service, Documentation or other SAP materials by Customer and its Named Users.
13.6 German law applies exclusively to all claims in contract, in tort or otherwise, and the UN sales laws convention is excluded. If Customer is a
merchant within the meaning of the German Commercial Code (HGB), section 1, or a public-law juristic person or special fund, the sole
place of jurisdiction for all differences arising out of or in connection with the Software Agreement shall be Karlsruhe.
13.7 The conclusion of contract, any subsequent amendment or addition and contractually relevant declarations as well as declarations directly
influencing a legal relationship, especially without being limited to termination notices, reminders or notices to set time limits, require written
form. The foregoing provision also applies to any waiver of the written-form requirement. Where in this section 11.5 or elsewhere in these
Cloud GTC written form is required, that requirement can also be met by facsimile transmission, exchange of letters. Except in that respect,
however, the provisions in the German Civil Code (BGB), sections 127 (2) and (3) do not apply.
13.8 Dates and timelines shall be non-binding unless expressly agreed by the parties. Any delay or nonperformance of any provision of this
Agreement (other than for the payment of amounts due hereunder) caused by conditions beyond the reasonable control of the performing
party shall not constitute a breach of this Agreement, and the time for performance of such provision, if any, shall be deemed to be extended
for a period equal to the duration of the conditions preventing performance.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 5
13.9 This Agreement may be modified only by a writing signed by both parties. This Agreement shall prevail over any additional, conflicting, or
inconsistent terms and conditions which may appear on any purchase order or other document furnished by Customer to SAP. This
Agreement shall prevail over any additional, conflicting or inconsistent terms and conditions which may appear in any clickwrap or
browsewrap end user agreement included in the Service (except for end user agreements governing third party products or services).
13.10 Customer may not, without SAP’s prior written consent, assign, delegate, pledge or otherwise transfer this Agreement, or any of its rights or
obligations under this Agreement, or any SAP materials or SAP Confidential Information, to any party, whether voluntarily or by operation of
law, including by way of sale of assets, merger or consolidation. SAP may assign this Agreement to any of its Affiliates. SAP may also
deploy self-employed persons or other companies to perform the Service. SAP is liable for faults committed by another in performance of a
contractual duty of SAP on SAP’s behalf (Erfüllungsgehilfe) to the same extent as SAP is liable for its own such faults.
13.11 The following order of precedence shall be applied in the event of conflict or inconsistency between provisions of the components of this
Agreement: (i) the Order Form; (ii) the schedules, exhibits and appendices included with or referenced by the Order Form; (iii) and these
General Terms and Conditions.
13.12 Customer understands and agrees that the Service may include communications such as service announcements and administrative
messages from SAP or SAP’s partners. Customer will not be able to opt out of receiving these service announcements and administrative
messages while using the Site and/or the Service unless Customer sends SAP a specific written notice requesting the that Customer’s
details be eliminated from the Site and any mailing list.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 6
EXHIBIT 1
SUPPORT TERMS
1. SUPPORT OFFERINGS
1.1 SAP’s Cloud Support organization offers two levels of Customer support for the Service. Premium Support is included in the subscription
fees for the Service and, for an additional cost, Customer can purchase Platinum Support.
“Admin Training Course” means Administrator training offered through the SAP Academy.
“Administration Units (“AUs”)” means pre-purchased units that a Customer who has purchased Platinum Support for SAP
SuccessFactors Services may redeem for certain support services related to the SAP SuccessFactors Services. AUs may be used for key
administrative tasks such as, by way of example, User and permission management, document and workflow management, analytics and
reporting set-up and management and content management. For the avoidance of doubt, AUs shall not be available for, nor apply to, any
SAP Cloud Services.
“Annual Support Review” means the annual review conducted by the Platinum Support Account Manager which may include the review of
Customer’s adoption of the Service, best practices, issues and mitigation plans, as applicable.
“Application Administrator” means the Primary Customer Contact who is required to take the Admin Training Course prior to Customer’s
production use of the Service.
“Basic Form Configuration” means copies of existing form templates, text changes, and basic workflow modifications.
“Case Management System” means the global web-based system or tool available to Customer for reporting and logging cases or issues
with SAP’s support team at any time (including outside of the Cloud Support Hours of Operation, as defined below), which system or tool is
accessible by SAP, its Affiliates and authorized Subprocessors.
“Customer Community Site” means the complimentary, web-based, peer-to-peer community where customers can search for product or
support information and collaborate with other SAP customers at http://community.successfactors.com for SAP SuccessFactors Services
and at https://www.sme.sap.com for SAP Cloud Services (or any subsequent site(s) of which SAP informs Customer).
“Customer Outreach” means any communications from SAP, including, but not limited to, newsletters, informational notices, known issues
alerts and blog posts.
“Knowledge Base” means the searchable articles and videos contained within the Case Management System.
“Live Session” means a training or webinar conducted with a person that is not recorded.
“Live Review” means a remote review with a person via phone or web conference.
“Local Time Zone” means Customer’s local time zone, depending on where Customer is headquartered or, for Platinum Support
customers, where the Assigned Support Account Manager is located.
“Platinum Support Technical Resolution Team” means the SAP support team that is specialized by Service product and which is
focused on technical issue resolution for Platinum Support accounts.
“Product Bundle” means a Service Product Bundle, if any, subscribed to by Customer and set forth in an Order Form.
“Release Notes” means the generally available documented summaries, webinars and videos provided by SAP to inform and instruct
customers on new product release changes.
“SAP On-Demand Service” shall mean any Service set forth in an applicable Order Form that is not an SAP SuccessFactors Service.
“SAP SuccessFactors Service” shall mean the Service for SuccessFactors Business Execution Software Solutions or other
SuccessFactors Service identified in the applicable Order Form.
“Welcome and Transition” means any email notification, Live Session, videos and/or direct phone calls provided by SAP to customers to
introduce them to the SAP Cloud Support organization.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 7
The table below describes the services included in the Premium Support and Platinum Support levels.
2. CONTACTING SUPPORT
Customer will have one (1) back-up Customer Contact for each primary Customer Contact. At least one of Customer’s primary and back-up Customer
Contacts shall be an Application Administrator. Application Administrators should have taken SAP’s Admin Training Course.
If the primary Customer Contacts are known as of the Effective Date, they can be specified in the applicable Order Form. Otherwise, Customer shall
identify its Customer Contacts (primary and back-up) through the applicable Cloud Support Customer Portal (“Customer Portal”) set forth below.
Updates to the Customer Contacts should be made through the applicable Customer Portal.
During the Service configuration and up until “Go-Live”, Customer’s primary point of contact shall be SAP Cloud Consulting Services, or a SAP
implementation partner, as applicable. After “Go-Live” of the Service, Customer’s primary point of contact shall be SAP’s Cloud Support organization.
Notwithstanding the foregoing, Customer shall be free to contact SAP’s Cloud Support organization at any time after the Effective Date for support
services or to initiate AU services for SAP SuccessFactors Services.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 8
3. RESPONSE LEVELS. SAP will respond to submitted support cases as follows:
P2 High: The production system is operational but experiencing a major functional Initial Response: within two hours of
loss that impedes transactions from being completed. The development/test case being submitted
system is not accessible or operational. Ongoing Communication: Once
every six hours.
P3 Medium: The production system is experiencing a minor functional loss that Initial Response: within four
does not significantly impede transactions from being completed. Also includes business hours of case being
configurations or change requests that have high business impact. submitted
Ongoing Communication: Once
every three business days for non-
defect and two weeks for product
defect.
P4 Low: Change or configuration requests and minor problems. Inquiries about Initial Response: within one
product usage and application capabilities. business day of case being
submitted
Ongoing Communication: Once
every week for non-defect and three
weeks for product defect.
4. CUSTOMER RESPONSIBILITIES.
Customer shall cooperate with SAP and provide relevant information to enable SAP to reproduce, troubleshoot and resolve the experienced error such
as, by way of an example, instance name, username, form name and screenshot.
Support cases shall be filed and documented through the applicable Customer Portal to allow for proper tracking and compliance with the above-
mentioned response level commitments.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 9
EXHIBIT 2
This Annex for Commissioned Processing of Personal Data stipulates the rights and obligations of Customer and SAP in connection with personal data
processed by SAP on behalf of Customer and its Affiliates for the Named Users under the Agreement. This Annex shall be an integral part of the
Agreement. Any capitalized terms referenced herein shall have the meaning given to them in the Agreement.
1. Customer Obligations
1.1 Customer hereby acknowledges that the use of Service represents a commissioned processing of personal data of Named Users.
1.2 Customer acknowledges that only Customer and its respective Affiliates (each a data controller) shall be responsible for the permissibility of
the processing of personal data as well as for safeguarding the rights of the data subjects.
1.3 Customer shall ensure that its Affiliates, where legally required, shall give their commissions to Customer in writing, by facsimile or via e-mail
to authorize SAP and its Affiliates to process personal data as contemplated under the Agreement.
1.4 Customer shall ensure that its Named Users make available the personal data for processing to SAP and the results of the processing shall
be transferred back by SAP to Customer by using a defined transfer procedure or in accordance with the functionality implemented in the
Service.
1.5 Customer shall inform SAP without delay, if Named Users detect errors or irregularities in the processing of personal data.
1.6 Customer shall ensure that its Affiliates authorize Customer to authorize SAP as its subcontractor for the processing of personal data. SAP
shall only adhere to the obligations set out in this Annex when processing personal data of Named Users.
1.7 Customer ensures that no legal requirements of Customer prevent SAP from fulfilling its contractual obligations under this Agreement in
compliance with applicable law. This includes, but is not limited to, ensuring that all concerned individuals have previously declared consent
to a possible processing of personal data.
2. SAP Obligations
2.1 SAP shall process the personal data and other operating data of Named Users exclusively in accordance with the data controller’s
instructions as provided to SAP by Customer, which may include (without limitation) the correction, erasure and/or the blocking of such data
if and to the extent the functionality of the Service does not allow the Customer or Named User to do so. The personal data shall not be used
by SAP for any other purpose except to provide the Service contemplated under the Agreement. SAP shall not preserve such personal data
longer than instructed by Customer. The statutory preservation periods remain unaffected.
2.2 For processing personal data SAP shall only use personnel which demonstrably committed themselves to observe data secrecy and secrecy
of telecommunications pursuant to the applicable data protection laws. SAP may discharge this obligation by utilizing one standard template
for all its customers.
2.3 SAP shall implement all technical and organizational measures to comply with the requirements pursuant to the applicable data protection
laws. SAP undertakes to Customer that it has taken and will, on a continuing basis, take appropriate technical and organizational measures
to keep personal data secure and protect it against unauthorized or unlawful processing and accidental loss, destruction or damage. In
particular, SAP shall take and regularly check the following protection measures:
Physical access control: SAP shall install an access control system.
Access control: SAP shall control and log access to data processing systems.
Access limitation control: SAP shall define, implement and monitor a concept for user rights, rules for passwords and login procedures to
remotely or physically access the Service by its personnel, as required to operate, maintain, support or secure the Service.
Transmission control: SAP shall ensure personal data transmission in encrypted form or by a secure alternative procedure.
Transmissions must be logged and guidelines for personal data transmissions must be laid down in writing.
Input control: SAP shall implement a detailed logging system for input, modification and deletion or blocking of personal data to the
greatest extent supported by the Service.
Job control: SAP shall define in writing and establish control mechanisms to ensure that data are processed strictly in accordance with
the instructions of the data controller as provided to SAP by Customer and as contemplated in the Agreement.
Availability control. SAP shall run a state of the art backup system and define a restore operation procedure to protect personal data
from accidental destruction or loss.
Data separation: SAP shall ensure by technical means and defined organisational procedures that personal data collected for different
purposes (e.g. different customers) can be processed separately. Technical means can be separated computer systems or demonstrably
logical separation in a multi-tenant architecture. Access by one SAP customer to the data of any other SAP customer must be prevented.
Since SAP provides the Service to all customers uniformly via a hosted, web-based application, all appropriate and then current
technical and organizational measures apply to SAP’s entire customer base hosted out of the same data center and subscribed to the same
Service. Customer understands and agrees that the technical and organizational measures are subject to technical progress and
development. In that regard, SAP is specifically allowed to implement adequate alternative measures as long as the security level of the
measures is maintained. In the event of any significant changes SAP shall provide a notification together with any necessary documentation
related thereto to Customer by email or publication on the Site or alternative site easily accessible by Customer. 2.4 If the security
measures implemented by SAP do not meet the legal requirements, SAP shall notify Customer without delay.
2.5 SAP shall notify Customer if SAP considers an instruction given by Customer on behalf of the data controller to be in violation of data
protection laws. SAP shall not be obliged to perform a comprehensive legal examination.
2.6 SAP shall inform Customer immediately in case of serious disruptions of the operating process, suspected data protection violations or other
irregularities in connection with the processing of Named Users’ data.
2.7 At Customer’s written request and at Customer’s expense SAP shall reasonably support Customer in dealing with requests from individual
data subjects and/or a supervisory authority with respect to the processing of personal data controlled by Customer. SAP shall notify
Customer about inspections and measures of a supervisory or other competent authority.
2.8 Upon expiry or termination of the Agreement, SAP shall in accordance with the terms of the Agreement (or any other relevant contractual
provision) and Customer’s instructions, either (i) return to Customer all Customer Data and all copies or reproductions thereof (except for
backup media that is used for multiple SAP customers and regularly overwritten); or (ii) erase and/or destroy such personal data and media
on production systems and confirm the erasure and/or destruction to Customer in writing.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 10
2.9 The compelling provisions of the applicable data protection laws and regulations shall additionally apply and if and to the extent in conflict
with the terms of this Annex they shall prevail.
3. Subcontractors
SAP is authorized to engage subcontractors for the processing of personal data (each a “Subprocessor”) as long as SAP remains
responsible for any acts or omissions of its Subprocessors in the same manner as for its own acts and omissions. SAP shall pass on to
Subprocessors SAP's obligation as data processor vis-à-vis Customer as set out in this document and obligate Subprocessors to obey all
relevant data protection rules. SAP will inform Customer upon its request by email or through the Site or otherwise about the name, address
and role of each Subprocessor concerned. SAP shall ensure that each Subprocessor adheres to an adequate level of data protection by law
or contract with SAP not materially less protective than the obligations applicable to SAP under the Agreement.
SAP Cloud Services General Terms and Conditions enDACH 8.2012 Page 11