SAP® Mobile Secure Privacy Statement Version: v20150421.1552 SAP has created this privacy statement to demonstrate our firm commitment to the individual's right to privacy. This policy outlines our personal information handling practices for this website.

What is Personal Information? Personal Information or "Personal Data" is "any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity." In short, relating to your use of the SAP Mobile Secure website (sometimes referred to as this “website”) , Personal Information is any information which identifies you as an individual, which you provide to us or which we collect while you are using our service. This can be your name and your email address, but also technical information such as your IP address or cookies we send to your computer when you use this service.

What Personal Information do we collect and why? When you register at SAP Mobile Secure, we ask you to provide us with the following information:            

Username – which must be unique across sapmobilesecure.com Password – for security purposes to protect your access First and Last Name Job Title Email Address Phone number Company Name Address City State – US only Postal Code Country

This information is used to create your personal SAP Mobile Secure account on this website and to associate you with the activities and content that you may create or participate in while using this website. It is further used to communicate with you as described further down below, and we may use your email domain to identify the organization you are coming from.

Whenever you visit the SAP Mobile Secure website, we collect your IP address. We use the IP address to track web site navigation during the session. This helps us understand how you are using the SAP Mobile Secure website so that we can incorporate these findings into product improvements. When you log into the SAP Mobile Secure website, we collect the date that you have logged in. We use this information to measure usage frequency as an indicator of this website’s value to you.

Use of cookies Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. This website uses session cookies to manage your connectivity to the website, e.g. to remember your personal preferences. This website uses the following cookies: SMSSESSID, __utma, __utmb, __utmc, __utmz, mobilesecure_login_accountname, mobilesecure_login_rememberme, mobilesecure_login_username, X-SMS-EULA-ACCEPTED, X-SMS-VisitorToken, X-SMS-CSRFToken, X-SMS-LogToken, SMSSAMLAUTHTOKEN Most web browsers allow some control of most cookies through the browser settings. Please refer to the "help" function of your browser to learn, e.g. how you can set your browser to notify you before you receive a cookie, how to delete cookies, and how to generally set your browser to not accept any cookies at all.

Use of Google Analytics This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. If you would like to optout of Google Analytics tracking, please install the appropriate plug-in for your browser from this link: http://tools.google.com/dlpage/gaoptout?hl=en.

Information from SAP We communicate with users who register with or subscribe to our services on a regular basis via email, and we may also communicate by phone to resolve customer complaints or investigate suspicious transactions. We may use your email address to confirm your opening of an account, to send you notice of payments (when you purchase services we charge for), to send you information about changes to our products and services, and to send notices and other disclosures as required by law. Generally, users cannot opt out of these communications, but they will be primarily informational in nature rather than promotional. SAP will only send you promotional communication such as newsletters or updates from us regarding new services and products with your prior consent. SAP provides you the opportunity to exercise an opt-out choice if you do not want to receive promotional communication from us any longer. The opt-out choice may be exercised by unsubscribing on the user profile page, which can be reached by clicking the Settings link after logging in.

How long do we keep Personal Information? We store any information which identifies you as a user of this website and which allows us to communicate with you, such as your name and the email address, as long as you maintain your account for SAP Mobile Secure. Information we collect during your use of this website which helps us provide a service to you is generally only stored as long as required to provide the requested service to you. However, where we use cookies (please see "Use of Cookies" above), those cookies will remain active until you delete them in your browser.

Sharing Your Personal Data As a global company, SAP may operate this website and the SAP Mobile Secure service from its own data centers and/or through business partners worldwide. Any data and information that you volunteer or that is otherwise collected during your visit to this website or during your use of the SAP Mobile Secure service in any one country may be sent electronically to a server in another country for processing. We safeguard your privacy interests around the world by ensuring that this website and the SAP Mobile Secure service adhere to our data protection principles described in this statement, regardless from where and whom they are operated. Companies in the SAP Group may use the information internationally in connection with processing your inquiries and orders, to help improve our products and services and for processing and storage. We may also share such information with business partners, service vendors, authorized thirdparty agents or contractors in order to provide a requested service or transaction, such as adding a tool or method that is developed by a third party. You will be asked to confirm or decline access to your data, information and/or records by such parties prior to adding such tools or methods to your account, however you agree we can share such information with vendors

providing application management, infrastructure and infrastructure support services solely as required to provide this website and related services to you. We only provide these third parties with the minimum amount of personal data necessary to provide the services on our behalf, and the third parties are not permitted to use your personal data except for the limited purpose of completing the requested service or transaction. We do not sell or rent your personal data to third parties for marketing purposes unless you have granted us permission to do so. We may respond to subpoenas, court orders, or legal process by disclosing your personal data and other related information, if necessary. We may also choose to establish or exercise our legal rights or defend against legal claims. Circumstances may arise where, whether for strategic or other business reasons, SAP decides to sell, buy, merge or otherwise reorganize businesses in some countries. Such a transaction may involve, in accordance with applicable law, the disclosure of personal information to prospective or actual purchasers, or the receipt of it from sellers. It is SAP's practice to seek appropriate protection for information in these types of transactions. We may collect and possibly share personal data and any other additional information available to us in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of SAP's terms of use, or as otherwise required by law.

Security of Your Personal Data SAP is committed to protecting the personal data you share with us. SAP uses a combination of industry-standard security technologies, procedures, and organizational measures to help protect your personal data from unauthorized access, use, or disclosure. SAP supports online security using secure server technology because we want your data to be safe. There are state-of-the-art security arrangements and facilities in connection with the website to prevent abuse. We bind our employees to observe your privacy and confidentiality rights.

Children's Privacy SAP does not knowingly collect Personal Data from children under the age of 13. If we learn that we have collected Personal Data on a child under the age of 13, we will delete that data from our systems.

Inquiries, Access, and Updating Your Personal Data SAP needs your help in keeping the personal data you have shared with us accurate and up to date. If you are a registered user, you may make these updates yourself by notifying the

webmaster at the email address below, or, if SAP makes the appropriate tools available as part of the service, under the Settings link after logging in. If you have any other questions about this privacy statement or if you wish to inspect the information we hold about you, please contact: Webmaster [email protected]

We may change this Privacy Statement at any time, as we reasonably deem appropriate. Upon any change in this Privacy Statement, we will post the amended agreement on the SAP Mobile Secure website with notice of the changes and may also seek your explicit consent to process certain data and information collected. If at any time you choose not to accept this Privacy Statement, including following receipt of notification of any modifications hereto, your account will be blocked and your personal data will be deleted.