Privacy Statement for the SAP Global Certification Program

Read this Agreement carefully
before starting your exam. If you ACCEPT, click the “Accept” button and begin
the exam.


This is an Agreement between You and SAP
SE that sets forth the terms and conditions of your use and disclosure of exam
materials and the collection and use of your personal information and test

You acknowledge and agree that:

  1. The
    questions and answers (hereinafter referred to as "the Test Items") are
    considered confidential information, meaning that the information is of
    commercial value to SAP and is not generally known to competitors of SAP.
  2. The Test
    Items are the exclusive property of SAP and are protected by
    international intellectual property laws.
  3. You may not
    in any form and under no circumstances disclose the Test Items as long as
    they are considered confidential information of SAP.
  4. You may not
    remove from the testing room any exam materials whatsoever provided to
    you or any other material related to the exam, including, but not limited
    to, any notes or calculations.
  5. You may not
    copy or attempt to make copies (in physical or electronic format) of any
    exam material, including, but not limited to, any Test Items.
  6. You may not
    sell, give away or obtain from any other source than SAP Test Items.
  7. Violation of
    any of these provisions may cause SAP to take legal action to remedy, or
    prevent, such disclosure or misuse, including, but not limited to,
    immediate injunction.

SAP Certification Privacy Statement

Protecting the individual's privacy on the Internet is crucial to the future of Internet-based business and the move toward a true Internet economy. We have created this Privacy Statement to demonstrate our firm commitment to the individual`s right to data protection and privacy. This Privacy Statement outlines how we handle information that can be used to directly or indirectly identify an individual ("Personal Data").
the individual's privacy on the Internet is crucial to the future of
Internet-based business and the move toward a true Internet economy. We have
created this Privacy Statement to demonstrate our firm commitment to the
individual`s right to data protection and privacy. This Privacy Statement
outlines how we handle information that can be used to directly or indirectly
identify an individual ("Personal Data").


A. General Information

When does this Privacy Statement apply? This Privacy Statement applies where SAP (as defined below) acts as controller of any personal data in connection with its SAP Global Certification Program offerings (the "Service"). This is the case, where:

  • You use an activation code (e.g. provided by your employer) to register yourself with the Service;
  • You buy a Service subscription for yourself;
  • SAP uses Personal Data for the purposes of conducting license audits, tracks users or anonymizes Personal Data for the purposes of improving the Service notwithstanding it is acting in the provisioning of the Service otherwise as a data processor (see next paragraph).

Apart from the last bullet point above, this Privacy Statement does not apply whenever users are receiving their log-on details for the Service from someone else than SAP. In this case, SAP is not acting as a controller but as a processor.

Controller. The controller of the Service is SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf ('SAP'). The SAP Group's data protection officer can be reached at

What does SAP do with my Personal Data? SAP will process the Personal Data provided hereunder only as set out in this Privacy Statement. Further information can be found in Sections B. and C. below. Where the processing of your Personal Data is based on a statutory permission, you can find information on which Personal Data SAP is processing or using for which purposes in Section B below. Where consent for the processing of your Personal Data is required you can find further information in Section C. below.

Duration of processing of Personal Data. Where SAP is processing and using your Personal Data as permitted by law (see B. below) or under your consent (see C. below), SAP will store your Personal Data (i) only for as long as is required to fulfil the purposes set out below or (ii) until you object to SAP's use of your Personal Data (where SAP has a legitimate interest in using your Personal Data), or (iii) until you withdraw your consent (where you consented to SAP using your Personal Data). However, where SAP is required by mandatory law to retain your Personal Data longer or where your Personal Data is required for SAP to assert or defend against legal claims, SAP will retain your Personal Data until the end of the relevant retention period or until the claims in question have been settled.

Why am I required to provide Personal Data? As a general principle, your granting of any consent and your provision of any Personal Data hereunder is entirely voluntary; there are generally no detrimental effects on you if you choose not to consent or to provide Personal Data. However, where SAP requires your Personal Data in order to be able to provide you with the Services or in order to ensure export law compliance, you cannot use or take part in the Services until you have provided the required Personal Data to SAP.

Who are the recipients of my Personal Data and where will it be processed? Your Personal Data will be passed on to the following categories of third parties to process your Personal Data:
" companies within the SAP Group; and
" third party service providers.

As part of a global group of companies operating internationally, SAP has affiliates (the "SAP Group")
and third-party service providers outside of the European Economic Area (the "EEA") and will transfer
your Personal Data to countries outside of the EEA. If these transfers are to a country for which the
EU Commission has not issued an adequacy decision, SAP uses the EU standard contractual clauses to
contractually require that your Personal Data receives a level of data protection consistent with the EEA.
You can obtain a copy (redacted to remove commercial or irrelevant) of such standard contractual clauses by
sending a request to You can also obtain more information from the European Commission on the
international dimension of data protection here: European Commission.

Data subjects' rights. You can request from SAP at any time information about which Personal Data SAP processes about you and the correction or deletion of such Personal Data. Please note, however, that SAP can or will delete your Personal Data only if there is no statutory obligation or prevailing right of SAP to retain it. Kindly note further that if you request that SAP deletes your Personal Data and this Personal Data is required to provide you with access to the Service, you will not be able to continue to use the Service or verify your status as being certified.

If SAP uses your Personal Data based on your consent or to perform a contract with you, you may further request from SAP a copy of the Personal Data that you have provided to SAP. In this case, please contact the email address below and specify the information or processing activities to which your request relates, the format in which you would like this information, and whether the Personal Data is to be sent to you or another recipient. SAP will carefully consider your request and discuss with you how it can best fulfill it.

Furthermore, you can request from SAP that SAP restricts your Personal Data from any further processing in any of the following events: (i) you state that the Personal Data SAP has about you is incorrect, (but only for as long as SAP requires to check the accuracy of the relevant Personal Data), (ii) there is no legal basis for SAP processing your Personal Data and you demand that SAP restricts your Personal Data from further processing, (iii) SAP no longer requires your Personal Data but you claim that you require SAP to retain such data in order to claim or exercise legal rights or to defend against third party claims or (iv) in case you object to the processing of your Personal Data by SAP (based on SAP's legitimate interest as further set out in B. below) for as long as it is required to review as to whether SAP has a prevailing interest or legal obligation in processing your Personal Data.

Please direct any such request to

Right to lodge a complaint. If you believe that SAP is not processing your Personal Data in accordance with the requirements set out herein or applicable EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country in which you live or with the data protection authority of the country or state in which SAP has its registered seat.

Links to other websites. This website may contain links to foreign (meaning non-SAP Group companies) websites. SAP is not responsible for the privacy practices or the content of websites outside the SAP Group of companies. Therefore, we recommend that you carefully read the privacy statements of such foreign sites.


B. Where SAP uses My Personal Data based on the Law

In the following cases, SAP is permitted to process your Personal Data under
the applicable data protection law.

Providing the requested goods or services. If you register for the Service using an activation code or if you purchase a Service subscription for yourself, SAP will use your Personal Data that you enter into the registration form (i.e. your name, (email) address, SAP user ID (if applicable), company name, certification code, certification exam results, date of the exam, certification attempts, and your then created username and password) only to provide you with access to the Service and rendering the service of the certification and for the purposes for the certification. This may also include taking the necessary steps prior to entering into the contract, investigating suspicious transactions, responding to your related inquiries, and providing you with shipping and billing information and to process or provide customer feedback and support. This may also include conversation data that you may trigger via the chat functionalities on or SAP Live Chat, contact forms, emails, or telephone. SAP will use your Personal Data to (i) contact you after completion of a certification via email or other communication methods in order to inform you about the results, or to send you exam reminders, or (ii) to follow up with you when you contact SAP about the Service, (e.g. when you claim digital badges). SAP may use your data to validate if the service is used in accordance with the license terms.

SAP may use your name, email and postal address, telephone number, company name, your job title, role, certification status and SAP user ID (if applicable) to prove your status as SAP certified specialist, at least for the duration of your certification validity and up to a maximum of five (5) years. This information may be passed on to your employer you are assigned to at the at the time of inquiry or an affiliated entity or an authorized representative designated by your employer.,

For the purposes set out in this section (Providing the requested goods or services) SAP processes Personal Data to fulfill contractual obligations pursuant to Article 6 (1) lit. b GDPR.

b. Compliance with export laws. SAP and its products, technologies, and services are subject to the export laws, trade sanctions, and embargoes ("Export Laws") of various countries including, without limitation, those of Germany, the European Union ("EU") and its member states, and of the United States of America. Therefore, you acknowledge that, pursuant to the applicable Export Laws issued by these countries, SAP is required to
aa. take measures to prevent persons, entities and organizations, and parties listed on government-issued sanctioned party lists from accessing certain products, technologies, and services through SAP's websites or other delivery channels controlled by SAP. This may include (i) automated checks of any user registration data as set out herein and other information a user provides about his or her identity against applicable sanctioned-party lists; (ii) regular repetition of such checks whenever a sanctioned-party list is updated or when a user updates his or her information; (iii) blocking of access to SAP's services and systems in case of a potential match; and (iv) contacting a user to confirm his or her identity in case of a potential match; and
bb. ensure that no individuals from embargoed countries access its services. Therefore, when an existing user logs into a website, app or cloud service of an entity of the SAP Group from an embargoed country, the user's registration data and IP address may be used by SAP to block the user's access and to log access attempts from embargoed countries.
Any such usage of registration data and IP addresses by SAP is necessary for SAP's compliance with applicable EU Export Laws (Article 6 para. 1 (c) GDPR) and SAP's legitimate interest to comply with non-EU Export Laws (Article 6 para. 1 (f) GDPR).

SAP's legitimate interest. Each of the use cases below constitutes a legitimate interest of SAP (Article 6 para. 1 lit. f GDPR) to process or use your Personal Data. If you do not agree with this approach, you may object against SAP's processing or use of your Personal Data as set out below.

Questionnaires and surveys. SAP may invite you to participate in questionnaires and surveys. These questionnaires and surveys will be generally designed in a way that they can be answered without any Personal Data. If you nonetheless enter Personal Data in a questionnaire or survey, SAP may use such Personal Data to improve its products and services.

Creation of anonymized data sets. SAP may anonymize Personal Data provided under this Privacy Statement in order to create anonymized data sets and reports which will then be used to improve the content quality and methodology of certification offerings. These anonymous data sets and information may be provided to your employer for reporting purposes.

Recording of chats for quality improvement. In case of chat sessions, SAP may record such chat sessions in order to improve the quality of SAP's services.

In order to keep you up-to-date / request feedback within an existing business relationship between you and SAP, SAP may inform you, where permitted in accordance with local laws, about its products or services (including webinars, seminars or events) which are similar or relate to such products and services you have already purchased or used from SAP. Furthermore, SAP may contact you for feedback regarding the improvement of the certification service.

Right to object. You may object to SAP using Personal Data for the above purposes at any time by objecting at If you do so, SAP will cease using your Personal Data for the above purposes (that is to say, under a legitimate interest set out above) and remove it from its systems unless SAP is permitted to use such Personal Data for another purpose set out in this Privacy Statement or SAP determines and demonstrates a compelling legitimate interest to continue processing your Personal Data.


C.  Where SAP uses My Personal Data based on My Consent

In the following cases SAP will only process your Personal Data as further detailed below after you have granted your prior consent (Article 6 para. 1 a GDPR) into the relevant processing operations.

News about SAP's Products and Services. Subject to a respective provision and your consent, SAP may use your name, email and postal address, telephone number, job title and basic information about your employer (name, address, and industry) as well as an interaction profile based on prior interactions with SAP (prior purchases, participation in webinars, seminars, or events or the use of (web) services) in order to keep you up to date on the latest product announcements, software updates, software upgrades, special offers, and other information about SAP's software and services (including marketing-related newsletters) as well as events of SAP and in order to display relevant content on SAP's websites. In connection with these marketing-related activities, SAP may provide a hashed user ID to third party operated social networks or other web offerings (such as Twitter, LinkedIn, Facebook, Instagram or Google) where this information is then matched against the social networks' data or the web offerings' own data bases in order to display to you more relevant information.

Forwarding your Personal Data to other SAP companies. SAP may transfer your Personal Data to other entities in the SAP Group. The current list of SAP Group entities can be found here. In such cases, these entities will then use the Personal Data for the same purposes and under the same conditions as outlined in this Section C. above.

Revocation of a consent granted hereunder. You may at any time withdraw a consent granted hereunder by unsubscribing at In case of withdrawal, SAP will not process Personal Data subject to this consent any longer unless legally required to do so. In case SAP is required to retain your Personal Data for legal reasons your Personal Data will be restricted from further processing and only retained for the term required by law. However, any withdrawal has no effect on past processing of personal data by SAP up to the point in time of your withdrawal. Furthermore, if your use of an SAP offering requires your prior consent, SAP will not be (any longer) able to provide the relevant service offer or event to you after your revocation.

Revised and posted as of August 17, 2020