隐私政策

This Privacy Statement was updated on March 23, 2020.

Click here for a printable version of this Privacy Statement.

关于我们

Callidus Software Inc. 与其附属公司、子公司和母公司 SAP（统称为“SAP”、“CallidusCloud”、“SAP Group”、”我们“或”我方“）共同提供云托管销售、营销、学习和客户体验解决方案。

SAP 致力于保护您的隐私以及所收集和处理的您的个人信息。

关于本政策

This is the Privacy and Cookies Policy ("Policy") for the websites operated by or on behalf of SAP and hosted at pages on the following domains: https://www.calliduscloud.com/; http://www.clicktools.com/;  https://datahug.com/; www.litmos.com; www.bridgefront.com; www.learningseat.com.au; www.litmosheroes.com; www.viewcentral.com; litmos.com.au; learningseatlms.com; learningseat.com;  www.orientdb.com; and www.orientdb.org (“CallidusCloud’s Websites”).

本政策说明了与通过本网站提供的 SAP 服务相关或是您在我们的企业活动（统称为”服务“）中提供给我们的个人信息相关的我方一般隐私政策与做法。

本政策还说明了我们如何收集您的信息，我们如何处理此信息，以及您在使用我们的网站和服务时对此信息有何控制权。

访问和使用 CallidusCloud 的网站、移动站点和/或应用程序（统称为”网站“）或使用我们的网站，即表示您确认您已阅读并了解本政策。

出于欧洲经济区数据保护法（“数据保护法”）的目的，本政策适用于 Callidus Software Inc. 及其任何各自的附属实体。

 

A. 一般信息

谁是数据控制者？

本网站和服务的数据控制者是 Callidus Software Inc., 2700 Camino Ramon #400, San Ramon, CA 94583 (“SAP”)，您可以通过 privacy@sap.com 与其数据保护官 Mathias Cellarius 联系。

SAP 收集哪些“个人数据”？

我们收集和存储信息的方式取决于您访问的网站、参与的活动以及使用的服务。您可以在不提供任何信息的情况下使用某些服务，但是当您通过本网站使用服务时，我们会自动从您那里收集一些类别的信息。

使用服务时，我们可能会收集和处理以下有关您的信息：

您直接提供的信息

• 您通过在本网站上填写表单或使用本服务所提供的信息（如您的姓名、公司名称、电子邮件地址、邮寄地址、电话号码和其他联系详情），包括您注册为本网站用户或订阅本服务时的信息、您向本网站或本服务上传或提交的信息，或是您向我们索取信息或资料时提供给我们的信息；
• 您通过本网站进行的任何交易的信息及其他详细信息，包括但不限于财务和计费信息，包括您通过本网站或使用我们服务进行交易时所提供的账号、账单名称和地址、出生年份、信用卡号、使用本服务和其他相关财务信息（“计费信息”）的公司内部员工总人数；
• 您发送给我们的通信中所包含的信息，例如为了报告问题或提交有关本网站（或其内容）或本服务的查询、疑惑或评论的通信。
• 问卷和调查。我们可能会邀请您参加问卷和调查。这些问卷和调查的总体设计方式是，无需任何个人数据就可以对其进行回答。但是，如果您在问卷或调查中输入个人数据，我们可能会使用此类个人数据来改善其产品和服务
• 您发送给我们的任何求职材料中的信息，例如，个人简历、履历或工作经历的其他详细信息；或
• 您在参加我们公司活动时提供给我们的其他信息。

我们在您使用我们的网站时可能会向您收集的信息

We may automatically collect certain information about the computer or other devices that you use to access the Site or use the Services, including mobile devices, through commonly-used information-gathering tools, such as cookies and web beacons (see our Cookies section below).

我们还可能在您访问本网站或使用我们的服务时收集以下信息：(i) 位置信息（如下文下一节所述）、您的手机或其他移动设备的唯一设备标识符和其他信息，如您的互联网协议 ("IP") 地址、浏览器类型、浏览器语言、操作系统、您访问本服务时所在的州或国家；(ii) 有关您与本服务的互动方式的信息，如引用和退出页面和 URL、平台类型、点击次数、域名、登录页、查看的页面及这些页面的顺序、在特定页面上花费的时长、使用本服务的日期和事件、错误日志以及其他类似信息。如果您不希望向我们提供位置跟踪信息，您可以禁用您设备上的 GPS 或其他位置跟踪功能；前提是您的设备允许您执行此操作。

创建匿名数据集。我们可能会将使用本网站或本服务所收集的信息进行汇总和/或去识别处理，以便他人无法以此信息来识别您。我们可以根据本隐私政策对提供的个人数据进行匿名化，以创建匿名数据集，这些数据集将用于改进 SAP 及其附属公司的产品和服务。这一政策并不限制我们对汇总和/或去识别信息的使用或披露。

第三方收集的有关您的信息

我们可能会处理从您那里或从别处获取的个人信息。我们可能会收集不是从您那里直接收集的个人信息：

• 从您的雇主那里收集到的与您的工作相关和与我们有关的信息。
• 如果您使用我们运营的任何网站。
• 从我们密切合作的第三方（包括例如，商业伙伴、技术、付款和快递服务的分包商、广告网络、分析服务提供商和搜索信息提供商）处收集的信息。当我们收到这些第三方提供的您的信息时，我们会通知您并告知您我们打算使用此信息的目的。

如果您通过第三方连接或登录访问本网站或使用本服务，则您授权 SAP 依据此政策收集、存储和使用第三方界面向 SAP 提供的任何和所有可用信息。

SAP 为什么需要您的个人数据？

We will collect and use your information as described in this Policy and as permitted by applicable laws (including, if you are located in Australia, the Privacy Act 1988 and the Australian Privacy Principles), including in circumstances where it is necessary: (i) to provide or fulfill Services requested by or for you; (ii) for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into such a contract; (iii) for compliance with a legal obligation to which we are a subject; (iv) to pursue our legitimate interests; or (v) where you have given us your express consent.

我们出于以下目的收集和使用您的信息： 

• 提供您所请求的服务。例如，如果您填写了”与我联系“的网页表单，我们就会使用提供的信息与您联系，了解您对服务的兴趣。此数据处理是提供或完成您所请求的服务或为您提供的服务的必要条件。
• 策划和主办活动。例如，企业活动、主机在线论坛以及活动参加者可能参与并填充与本服务相关的在线个人资料的社交网络。此数据处理是提供或完成您所请求的服务或为您提供的服务的必要条件。
• 出于营销的目的。例如，我们可能会使用您的信息进一步讨论您对本服务的兴趣并向您发送有关 SAP 和我们的集团公司以及我们的合作伙伴的信息，如促销、活动、产品或服务的相关信息。我们只会在法律要求或符合我们的合法利益且这些利益不会凌驾于您反对下述通信的权利时，在事先征得您同意的情况下向您发送我们的产品、服务和活动的营销通信和更新信息。您可以随时撤回您的同意。
• In order to keep you up-to-date/request feedback. Within an existing business relationship between you and us, we may inform you, where permitted in accordance with local laws, about its products or services (including webinars, seminars or events) which are similar or relate to such products and services you have already purchased or used from us. Furthermore, where you have attended a webinar, seminar or event of SAP or purchased products or services from us, we may contact you for feedback regarding the improvement of the relevant webinar, seminar, event, product or service.You can object to further marketing at any time by checking and updating your contact details within your account, or/and selecting the “unsubscribe” link located on the bottom of SAP’s marketing emails. Additionally, you may send a request to privacy@sap.com.You have the right to contact us at any time to object to the further processing of your information for the purposes of direct marketing to you, including any profiling related to such marketing.
• 出于财务和付款的目的。例如，在适用的情况下，核查财务能力资格并向您收取付款。此数据处理是提供或完成您所请求的服务或为您提供的服务的必要条件。
• 出于运营和改进 SAP 网站以及改善您的客户体验的目的。例如，我们可能会出于改善在线客户体验的目的而收集和分析您对我们网站的使用情况的数据并对其进行处理。收集的数据可包括您的设备数据，如唯一的设备标识符、您的手机或其他移动设备的信息、浏览器类型、浏览器语言、操作系统以及您访问本服务时所在的州或国家。收集的数据还可以包括与您和本服务的互动方式相关的信息，如引用和退出页面和 URL、平台类型、点击次数以及域名。这些数据能够使我们了解我们的客户及其与我们网站的互动情况、改进我们的网站，从而更好地为客户服务。我们可能会使用第三方分析服务提供商和技术，包括 Cookie 和类似工具来协助收集此类信息。出于分析和改善运营目的之数据处理是合法的商业利益。
• 出于安全的目的。例如，我们可以使用您的数据保护 SAP 及其第三方免受安全漏洞的影响和防止欺诈及违反 SAP 适用协议的行为。出于安全目的之数据处理是合法的商业利益。
• 出于托管的目的。例如，如果您是我们的客户，我们可能会收集和托管您的数据以便向您提供服务。如果您的雇主是我们的客户，我们可能会依据为他们提供的服务来处理您的数据。但是，除非我们与客户之间订立的服务协议中另有规定，或法律另有要求，否则我们不会审查、共享、分发或引用任何此类数据。出于托管我方服务目的之数据处理是合法的商业利益。
• 出于使用基于位置的信息、广告和功能定制服务的目的。例如，如果您的移动设备上的位置跟踪显示您在 SAP 公司活动的附近区域，我们可能会联系您，告知您参与我们附近的活动。如果您通过移动设备访问本服务且您不希望向我们提供位置跟踪信息，您可以禁用您设备上的 GPS 或其他位置跟踪功能，前提是您的设备允许您执行此操作。此数据处理是提供或完成您所请求的服务或为您提供的服务的必要条件，可由您禁用。如果您通过移动设备访问本服务且您不希望向我们提供位置跟踪信息，您可以禁用您设备上的 GPS 或其他位置跟踪功能，前提是您的设备允许您执行此操作。
• 保护 SAP 和他人。例如，我们可能会披露您的信息以：(i) 遵守法律义务；(ii) 执行您与我们订立的任何协议；(iii) 对任何内容侵犯了第三方利益的申诉作出回应；(iv) 回应您对客户服务的请求；和/或 (v) 在必要的情况下出于我们或接收披露数据的第三方所追求的合法利益的目的，除非这些利益被数据主体的基本权利和自由的利益所凌驾。我们还可能在紧急情况下向执法机构披露信息，且披露此类信息符合法律允许或要求的紧急披露类型。这是为遵守法律义务而进行的数据处理。
• 业务转让。例如，我们保留将您的所有信息披露和转让给与我们业务的所有或部分合并、收购或销售相关，或与任何此类交易相关的尽职调查相关的继任（或潜在的继任）公司的权利。出于该目的之数据处理是合法的商业利益。

SAP 从哪些类型的第三方获取个人数据？

在大多数情况下，SAP 会从您那里收集个人数据。如果适用的国家法律允许，SAP 可能还会从第三方获取个人数据。SAP 将根据本隐私声明以及向 SAP 提供该等个人数据的第三方施加的任何附加限制或适用的国家法律处理该等个人数据。这些第三方来源包括：

• SAP 和/或 SAP Group 与您的雇主的业务往来
• 您指示与 SAP 共享您个人数据的第三方

SAP 将存储我的个人数据多长时间？

SAP 只会在仍有必要的情况下出于与最初收集的相同目的保留您的信息，且最多保留至八 (8) 年后或是地方法律允许或应我们的业务运作要求的其他期限。

我们可能需要保留某些个人信息，即使客户帐户已关闭或删除，以执行我们的条款，防止欺诈，确认、发布或解决合法诉求和/或保存适当记录。我们还可能保存您的任何反对接收我们更新的记录，以确保我们能够继续尊重您的愿望且不会进一步联系您。例如，如果您要求停止接收我们发送的电子邮件，我们将会保留您的电子邮件地址用于电子邮件“禁止名单”中，以确保应您要求您不会收到进一步的电子邮件。

任何保留的信息都将继续受制于本政策的条款。如果您要求从我们的数据库中删除您的姓名，由于技术和法律限制，我们可能无法完全删除您的所有信息。

SAP will also retain your Personal Data for additional periods if applicable laws require it.

谁是您个人数据的接收者，该数据将在哪里进行处理？

您的个人数据将传递给以下类别的第三方，以处理您的个人数据：

• SAP Group 内部的公司
• 间接代理商，例如：提供咨询服务和其他附加相关服务的第三方服务商
• 其他服务提供商，例如：为了提供网站或发送新闻通讯
• 国家机关和机构，例如：根据入境要求或警方活动和调查
• 协助我们通过我们的网站提供服务的代理商、合作伙伴或承包商。我们的代理商、合作伙伴或承包商所提供的协助可能与我们的营销活动有关，例如：更新营销列表、数据分析、广告、市场调查、参加竞赛或抽奖，以及接收和发送通信。我们的代理商、合作伙伴或承包商还可能提供事务性协助，包括：处理交易、完成信息请求、计费、销售执行和履行订单。提供的其他支持服务还可能包括：数据存储、传输、分析和处理、法律服务、提供 IT 以及不时应要求完成的其他任务。我们的代理商、合作伙伴或承包商只会在依据本政策履行其职能的必要范围内使用您的信息，并且受到禁止他们将您的信息用于任何其他目的之合约限制。
• SAP 可能会不时与其他公司合作，共同提供产品或服务。如果您向 SAP 购买了联合推出的产品或服务或明确表示对此类产品或服务感兴趣，SAP 可能会与我们合作促销的合作伙伴共享所收集的与您的购买或兴趣意向相关的信息。如果您不希望以此方式共享您的信息，可发送电子邮件至 privacy@sap.com。但是，我们无法控制我们的商业伙伴对我们收集并与之共享关于您的信息的使用情况，他们对此信息的使用将依据他们自己的隐私政策。
• 为了保护 SAP 和他人：我们可能会披露您的信息以：(i) 遵守法律程序；(ii) 执行您与我们订立的任何协议；(iii) 对任何内容侵犯了第三方利益的申诉作出回应；(iv) 回应您对客户服务的请求；和/或 (v) 在必要的情况下出于我们或接收披露数据的第三方所追求的合法利益的目的，除非这些利益被数据主体的基本权利和自由的利益所凌驾。我们还可能在紧急情况下向执法机构披露信息，且披露此类信息符合法律允许或要求的紧急披露类型。
• 加州不可跟踪披露。我们致力于为您提供有关与第三方共享的服务所收集的信息的有意义选择，因此我们提供了本政策中列出的选择退出选项。但是，我们不承认或响应浏览器发起的不跟踪 (“DNT”) 信号，部分原因是行业组织、技术公司或监管机构没有采用 DNT 的通用行业标准，也没有一致的解释用户意图的标准。我们重视隐私和有意义的选择，并将努力继续监测这些领域的发展。

As part of a global group of companies operating internationally, SAP has affiliates (the “SAP Group”) and third-party service providers outside of the European Economic Area (the “EEA”) and will transfer your Personal Data to countries outside of the EEA. If these transfers are to a country for which the EU Commission has not issued an adequacy decision, SAP uses the EU standard contractual clauses to contractually require that your Personal Data receives a level of data protection consistent with the EEA. You can obtain a copy (redacted to remove commercial or irrelevant) of such standard contractual clauses by sending a request to privacy@sap.com. You can also obtain more information from the European Commission on the international dimension of data protection here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_fr

您有哪些数据保护权？

您可以向 SAP 请求：随时访问有关 SAP 处理您的哪些个人数据以及此类个人数据的更正或删除的信息。但是请注意，SAP 只有在没有法定义务或普遍权利将其保留的情况下，才能或将删除您的个人数据。请进一步注意，如果您要求 SAP 删除您的个人数据，您将不能继续使用任何需要 SAP 使用您的个人数据的 SAP 服务。

如果 SAP 基于您的同意使用您的个人数据或与您签订合同，则您可以进一步向 SAP 索取您提供给 SAP 的个人数据的副本。在此情况下，请联系 privacy@sap.com 并指定与您的请求相关的信息或处理活动、您希望接收此信息的格式以及是否应将个人数据发送给您或其他收件人。SAP 会仔细考虑您的要求，并与您讨论如何才能最好地满足您的要求。

此外，您可以要求 SAP 在以下任何活动中限制进一步处理您的个人资料：(i) 您声明 SAP 提供的有关您的个人数据不正确，具体取决于 SAP 检查相关个人数据准确性所需的时间，(ii) SAP 处理您的个人数据没有法律依据，且您要求 SAP 限制进一步处理您的个人数据，(iii) SAP 不再需要您的个人数据，但您声明，您要求 SAP 保留此类数据，以便申索或行使法律权利，或抗辩第三方申索，或 (iv) 如果您反对 SAP 基于其合法利益（如下所述）处理您的个人数据，则需要根据 SAP 确定其在处理您的个人数据方面是否具有普遍利益或法律义务所需的时间而定。

对于加利福尼亚州境内的个人，您有权：

• 要求 SAP 向您提供 SAP 收集、使用、披露或出售（如适用）的您的个人数据访问权限；
• 要求 SAP 删除有关您的个人数据；
• 选择退出个人数据的销售（如适用）；
• 以非歧视性待遇行使您的任何数据保护权
• 如果 SAP 要求访问您的个人数据，则在可能的情况下，以易于使用的格式将此类信息以可传输的方式携带，使您可以无障碍地将该信息传输给其他收件人。

但是请注意，SAP 只有在没有法定义务或普遍权利将其保留的情况下，才能或将删除您的个人数据。请进一步注意，如果您要求 SAP 删除您的个人数据，您将不能继续使用任何需要 SAP 使用您的个人数据的 SAP 服务。

您如何行使您的数据保护权？

Please direct any requests to exercise your rights to privacy@sap.com or, if you are located in the State of California, you can also call toll-free using the numbers provided at https://www.sap.com/about/legal/impressum.html. You can also designate another person to submit requests to exercise your data protection rights to SAP. You can give authorization to such person by granting them a limited power of attorney to exercise your data protection rights on your behalf.

SAP 将如何验证行使数据保护权的请求？

SAP 将采取措施，确保在处理您希望行使的数据保护权之前，以合理的确定性程度验证您的身份。在可行的情况下，SAP 将在提交行使您权利的请求时，将您提供的个人数据与 SAP 已持有的信息进行匹配。这可能包括将您提交请求时提供的两个或多个数据点与我们已持有的两个或多个数据点进行匹配。

根据《加州消费者隐私法》(“CCPA”) 规定的验证流程，SAP 将要求对删除请求或被视为敏感或有价值的个人数据进行更严格的验证流程，尽量减少未经授权访问或删除您的个人数据可能对您造成的伤害。如果 SAP 必须向您请求除 SAP 已持有的信息之外的其他信息，则 SAP 仅将其用于验证身份的目的以便您可以行使数据保护权，或用于安全和防欺诈目的。

SAP 将拒绝处理明显无根据、过度、欺诈或当地法律未要求的请求。

如果您认为 SAP 未按照本隐私声明中的要求或适用的 EEA 数据保护法律来处理您的个人数据，则您可以随时向您所在的 EEA 国家/地区的数据保护机构或 SAP 注册所在地的国家或州的数据保护机构投诉。

B. 基于法定许可进行处理

SAP 为什么需要使用我的个人数据？SAP 使用个人数据有何法律依据？

为履行合同义务而进行处理

SAP requires your Personal Data to deliver goods or services you order under a contract SAP has with you, to establish a contract for goods or services between you and SAP, and to send you invoices for ordered goods or services. SAP processes Personal Data to fulfill contractual obligations pursuant to Article 6(1), Subparagraph 1(b) GDPR.  Additionally, SAP requires your Personal Data to provide you, at your request, with access to SAP events or SAP materials such as whitepapers.

为确保合规而进行处理

SAP 及其产品、技术和服务受各国/地区出口法律的约束，包括但不限于欧盟及其成员国和美利坚合众国的出口法律。您确认，按照适用的出口法律、贸易制裁以及这些国家/地区发布的禁运令，SAP 需要采取措施防止在政府发布的受制裁方名单上的实体、组织、当事方访问某些产品、技术，以及通过 SAP 网站或 SAP 控制的其他交付渠道提供的服务。这可能包括：(i) 根据适用的受制裁方名单自动检查此处所述的任何用户注册数据和用户提供的有关其身份的其他信息；(ii) 每当受制裁方名单更新或用户更新其信息时定期重复检查；(iii) 在可能匹配的情况下阻止对 SAP 服务和系统的访问；以及 (iv) 在可能匹配的情况下联系用户以确认其身份。对您的个人数据的任何此类使用均基于处理个人数据的许可，以遵守法定义务（GDPR 第 6 条第 1 款 c 项）和 SAP 的合法利益（GDPR 第 6 条第 1 款 f 项）。

基于 SAP 合法利益进行处理

SAP 可以基于其合法利益使用您的个人数据（GDPR 第 6 条第 1 款 f 项），具体如下：

• Fraud and Legal Claims. If required, SAP will use your Personal Data for the purposes of preventing or prosecuting criminal activities such as fraud and to assert or defend against legal claims.
• Questionnaires and survey. SAP could invite you to participate in questionnaires and surveys. These questionnaires and surveys will be generally designed in a way that they can be answered without any data that can be used to identify you. If you nonetheless enter such data in a questionnaire or survey, SAP will use this personal data to improve its products and services.
• Contract Performance. If you purchase or intend to purchase goods or services from SAP on behalf of a corporate customer or otherwise be the nominated contact person for the business relationship between a corporate customer (a “Customer Contact”) and SAP, SAP will use your Personal Data for this purpose. This includes, for the avoidance of doubt, such steps which are required for establishing the relevant business relationship. In case that an existing Customer Contact informs SAP that you are his replacement, SAP will, from the point in time of such notification, consider you to be the relevant Customer Contact for the respective customer until you object as further set out below.
• 创建匿名数据集。SAP 将根据本隐私政策对提供的个人数据进行匿名化，以创建匿名数据集，这些数据集将用于改进本公司及其附属公司的产品和服务。
• Personalized Newsletter. If you opt-in to receive marketing communications such as newsletters from SAP, SAP will collect and store details of how you interact with the newsletters to help create, develop, operate, deliver and improve our newsletter communications with you. This information is aggregated and used to help SAP provide more useful information and to understand what is of most interest.
• Recordings for quality improvement purposes. In case of telephone calls or chat sessions, SAP will record such calls (after informing you accordingly during that call and before the recording starts) or chat sessions in order to improve the quality of SAP’s services.
• To keep you up-to-date or request feedback. Within an existing business relationship between you and SAP, SAP might inform you, where permitted in accordance with local laws, about its products or services (including webinars, seminars or events) which are similar or relate to such products and services you have already purchased or used from SAP. Furthermore, where you have attended a webinar, seminar or event of SAP or purchased products or services from SAP, SAP might contact you for feedback regarding the improvement of the relevant webinar, seminar, event, product or service.

You can at any time object to SAP’s use of your Personal Data as set forth in this section by sending an email to privacy@sap.com. In this case, SAP will carefully review your objection and cease further use of the relevant information, subject to SAP’s compelling legitimate grounds for continued use of the information, which override your interest in objecting, or if SAP requires the information for the establishment, exercise or defense of legal claims.

根据适用的国家法律进行处理

如果适用的国家法律允许 SAP 这样做，则 SAP 会将有关您的信息用于商业目的，其中部分是个人数据

• 策划和主办活动
• 举办网络论坛或网络研讨会
• 用于营销目的，例如使您了解 SAP 最新产品和服务以及活动预告
• 与您联系以进一步讨论您对 SAP 服务和产品的兴趣
• 帮助 SAP 创建、开发、运营、交付和改进 SAP 服务、产品、内容和广告，并改进、升级或增强由 SAP 拥有、制造、为 SAP 而制造或由 SAP 控制的服务或设备
• 为您提供更多个性化信息
• 预防损失
• 出于帐户和网络安全目的
• 用于内部目的，例如审计、分析和研究，以改进 SAP 的产品或服务
• 验证您的身份并确定适当的服务
• 主张或抗辩法律申索
• 检测安全事件，防范恶意、欺骗、欺诈或非法活动，并起诉应对该活动负责的人员
• 进行调试以识别和修复损害现有预期功能的错误
• 短期、暂时的使用，前提是个人信息未披露给第三方，也未用于建立您的个人资料，或以其他方式改变您在当前互动之外的个人体验，包括但不限于，广告的上下文定制显示为同一互动的一部分
• 开展内部研究以进行技术开发和示范。
• 对 SAP 拥有、制造、为 SAP 而制造或由 SAP 控制的服务或设备的质量或安全开展验证或维护活动

加州消费者 ：根据 CCPA 的披露要求，SAP 无需提供退出通知，因为它现在不会且将来也不会出售您的个人数据。

 

C. 基于同意进行处理

在以下情况下，如果您事先同意对您的个人数据进行特定的拟议处理，则 SAP 将处理您的个人数据（GDPR 第 6 条第 1 款 a 项）。

Children. The Site and Services are not directed to users below the age of 16 years, or equivalent minimum age in the relevant jurisdiction. If you are younger than 16, you cannot register with and use the Site or Services.

U.S. Children’s Privacy. SAP does not knowingly collect the Personal Data of children under the age of 13. If you are a parent or guardian and believe SAP collected information about a child, please contact SAP as described in this Privacy Statement. SAP will take steps to delete the information as soon as possible. Given that the Site and Services are not directed to users under 16 years of age and in accordance with the disclosure requirements of the CCPA, SAP does not sell the Personal Data of any minors under 16 years of age.

营销

SAP 需要您的个人数据来通知您 SAP 的最新产品、服务优惠和活动。任何此类信息的使用均基于您根据本协议授予的同意。

News about SAP’s Products and Services. SAP will use your name, email and postal address, telephone number, job title and basic information about your employer (name, address, and industry) as well as an interaction profile based on prior interactions with SAP (prior purchases, participation in webinars, seminars or events or the use of (web) services in order to keep you up to date on the latest product announcements, software updates, software upgrades, special offers, and other information about SAP’s software and services (including marketing-related newsletters) as well as events of SAP and in order to display relevant content on SAP’s websites. In connection with these marketing-related activities, SAP will provide a hashed user ID to third party operated social networks or other web offerings (such as Twitter, LinkedIn, Facebook, Instagram or Google) where this information is then matched against the social networks’ data or the web offerings’ own databases in order to display to you more relevant information.

Forwarding your Personal Data within the SAP Group. SAP will transfer your Personal Data to other affiliated companies within the SAP Group of undertakings for the purpose to inform you about their latest products, service offers and events in the same way SAP does under this Privacy Statement. In such cases, the SAP Group will use the Personal Data for the same purposes and under the same conditions as set forth in this Privacy Statement.

将您的个人数据转发给其他第三方 。SAP 会将您的个人数据转移给合作伙伴，以便此类合作伙伴将 SAP 或合作伙伴的最新产品、服务优惠和活动通知您。任何此类信息的使用均基于您授予的同意。

社交媒体功能

SAP 在我们网站的各个部分和应用中提供社交网络功能。我们让您有机会在我们在线产品的社交网络中共享和推荐您的内容。如果您访问我们的网站并使用推荐功能，我们会将 URL 传递给您选择的社交网络，该社交网络将根据其自身的隐私声明使用您的个人数据。我们建议您仔细阅读各个社交网络的隐私声明。

个人资料

SAP 为您提供了使用服务的选项，包括查看教程或参加培训，这些服务需要您注册并允许您创建用户资料。用户个人资料提供了显示有关您的个人信息的选项，包括但不限于您的姓名、照片、地址、电子邮件、电话号码、个人兴趣、技能等。我们处理个人资料数据以个性化与其他用户的互动，从而促进通过此类服务进行交流和协作的质量。个人资料数据还可以与 SAP Group 中的其他网络产品和服务共享，包括 Ariba、Concur、Hybris 等（SAP 云盘 ID）。关于您的任何此类信息的提供，以及与其他服务共享信息的决定，均取决于您的自由意志并基于您的同意。

SAP 活动

Event profiling. If you register for an event, seminar, or webinar of SAP, SAP shares basic registration information (your name, company, and email address) with other participants of the same event, seminar, or webinar for the purpose of communication and the exchange of ideas.

Tracking during an event. SAP requires your Personal Data, including any occasion where you allowed that your event badge was scanned, to evaluate behavioral aspects by means of tracking during SAP events. SAP might process tracking data in the context of SAP events for purposes of tracking attendance, determine the attendees’ interests in certain topics and identify drivers for the attendees’ satisfaction and dissatisfaction to optimize planning and investments for future events. Any such use of information is based on the consent you grant.

SAP does not share data about event attendees with business partners unless: (i) you specifically opt in to such sharing via an event registration form; or (ii) you attend an SAP event and have your attendee badge scanned by a business partner. If you do not want your information to be shared, you may email privacy@sap.com. If you choose to share your information with business partners in the manners described above, your information will be subject to the business partners’ respective privacy policies.

Processing Special Categories of Personal Data. When you register for or request access to an event or seminar, SAP asks whether you require any accommodations because of your health or dietary restrictions. Any such use of information is based on the consent you grant. Kindly note that if you do not provide SAP with information regarding what accommodations you require, SAP will not be able to accommodate for it.

Photograph before or during the event. You will be asked to provide SAP with your current photograph via e-mail or SAP could ask to take a picture of you when you arrive at the event. By sending SAP your photograph or allowing a photo of you to be taken, you acknowledge that SAP will use your picture for the purposes described in this Privacy Statement.

撤回同意

您可以随时撤回您对 SAP 处理本隐私声明中所述的个人数据的同意。主张此项权利后，除非法律要求，否则 SAP 将不再处理您的个人数据。但是，您的任何撤回均不影响 SAP 在您撤回同意之前所进行的过往处理。请将任何此类请求发送至 privacy@sap.com。

 

D. SAP 如何使用 Cookie？

Our Site uses cookies and/or other similar technologies to enhance & customize your user experience. Cookies are small text files placed on your device that enable us to remember your device, and which can be used to manage a range of features and content as well as storing searches and presenting personalized content.

我们使用此信息来确保我们的网站和服务的正常运行和安全，并优化我们的网站或服务。

我们如何收集 Cookie 和其他技术 

This section describes our practices with respect to how we use cookies. By using our Services with your browser set to accept cookies, you are consenting to our use of cookies in the manner described herein.

We may collect data about your use of the Services through the use of cookies, Internet server logs, tracking pixels (also called web beacons) and similar technologies. A cookie is a small text file that is placed on your computer or mobile device when you visit a website, that enables us to recognize your computer/device, store your preferences and settings, enhance your user experience by delivering content specific to your interests, perform searches and analytics, and assist with security administrative functions. An Internet server log is a file where website activity is stored. Server logs are used to track usage and provide security. A tracking pixel, which is also referred to as a web beacon or a clear GIF, is an electronic tag with a unique identifier that is embedded on webpages, in online advertisements and/or email. These pixels are designed to provide usage information, such as advertising impressions or clicks, measure popularity of the Services and associated advertising, and access user cookies.

我们使用什么类型的 Cookie？

第三方 Cookie
We use third parties to assist us in advertising, tracking aggregated and/or de-identified site usage statistics, and providing content-sharing services to support the Services. These third parties may also use cookies and similar technologies to collect similar information about your use of the Services. For instance, the cookies may reflect de-identified data linked to or derived from data you voluntarily have submitted to us, e.g., a hashed version of your email address, which we may share with service providers, solely in non-human readable form. We do not control these third-party technologies, and their use is governed by those parties’ privacy policies.

我们还允许其他第三方（例如，广告网络和广告服务器）在本服务上为您提供量身定制的广告，并在您用于访问本网站或使用本服务的计算机、移动电话或其他设备上使用其自身的 Cookie 或其他跟踪技术。

会话和持久化 Cookie
We use both session cookies and persistent cookies. A session cookie is used to identify a particular visit to our site. These cookies expire after a short time, or when you close your web browser after using our Services. We use these cookies to identify you during a single browsing session. A persistent cookie will remain on your devices for a set period of time specified in the cookie. We use these cookies where we need to identify you over a longer period of time. For example, we would use a persistent cookie if you asked that we keep you signed in. Another type of cookies is Flash cookies, which are stored with your Adobe Flash Player files and help in the viewing of content that uses the Adobe Flash player.

我们使用这些 Cookie 和其他技术的依据是它们对于履行与您订立的合同十分必要，或是因为使用这些技术符合我们的合法利益（我们已考虑到这些利益不会被您的权利所凌驾），并且在某些情况下，应法律要求，您已同意我们使用这些技术

Why does SAP use cookies and similar technologies? SAP uses cookies and similar technologies for the following purposes:

• Authentication and Security: To log you into the Services; to protect your security; and to help us detect and fight spam, abuse, and other activities that violate SAP’s Website Terms and Conditions. For example, these technologies help authenticate your access to the Services and prevent unauthorized parties from accessing your account. They also let us show you appropriate content through the Services.
• Preferences: To remember information about your browser and your preferences; and to remember your settings and other choices you have made.
• Analytics and Research: To help us better understand how people use our Services, we work with a number of analytics partners, including Google Analytics; and to help us improve and understand how people use the Services. For example, cookies help us test different versions of our Services to see which particular features or content users prefer. We may include web beacons in e-mail messages or newsletters to determine whether the message has been opened and for other analytics. We might also optimize and improve your experience using the Services by using cookies to see how you interact with the Services, such as when and how often you use them and what links you click on. To find out more about how Google uses data when you visit a website that uses Google Analytics, please visit https://www.google.com/policies/privacy/partners/.
• Personalized Content: To customize the Services with more relevant content.
• Advertising: To provide you with more relevant advertising. As explained below, third parties whose products or services are accessible or advertised via the Services may use cookies to collect information about your activities on the Services, other sites, and/or the ads you have clicked on. This information may be used by them to serve ads that they believe are most likely to be of interest to you and measure the effectiveness of their ads. Targeting and advertising cookies on the Services may include Google and other advertising networks and services we use from time to time.For more information about targeting and advertising cookies and how you can opt out, you can visit http://youronlinechoices.eu  or www.allaboutcookies.org/manage-cookies/index.html. Please note that to the extent advertising technology is integrated into the Services, you may still receive advertisements even if you opt out of tailored advertising. In that case, the ads will not be tailored to your interests.

Where are cookies and similar technologies used? We use these technologies on the Services, including our Site. We do not release the information collected from our own cookies to any third parties, other than to our service providers who assist us in providing the Services and only in accordance with this Policy.

What are my privacy options? You have a number of options to control or limit how we and our partners use cookies. Most browsers automatically accept cookies, but you can modify your browser setting to limit or decline cookies by visiting your browser’s help page. The browser manufacturers, not SAP, control these settings. You can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information (e.g., Internet Explorer; Google Chrome; Mozilla Firefox; or Apple Safari). You can also manage the use of Flash technologies, including Flash cookies, with the Flash management tools available at Adobe’s website. If you choose to decline cookies, please note that you may not be able to sign in, customize, or use some features of the Services. For general information about cookies and how to disable them, please visit www.allaboutcookies.org.

We neither have access to, nor does this Policy govern, the use of cookies or other tracking technologies that may be placed on your computer, mobile phone, or other device you use to access the Services by non-affiliated, third-party ad technology, ad servers, ad networks or any other non-affiliated third parties. Those parties that use these technologies may offer you a way to opt out of ad targeting as described below.

You may receive tailored advertising on your computer or mobile device through a web browser. If you are interested in more information about tailored browser advertising and how you can generally control cookies, you may visit the Network Advertising Initiative’s Consumer Opt-Out Link: http://optout.networkadvertising.org/, the Digital Advertising Alliance’s Consumer Opt-Out Link: http://optout.aboutads.info/, or the European Interactive Digital Advertising Alliance, “Your Online Choices”: http://www.youronlinechoices.eu/ page to opt out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for Display Advertising or customize Google Display Network ads, you can visit the Google Ads Settings: https://www.google.com/settings/ads page. Please note that, to the extent advertising technology is integrated into the Services, you may still receive advertisements even if you opt out of tailored advertising. In that case, the ads will just not be tailored to your interests. Also, we do not control any of the above opt-out links and are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.

您的权利：

本节详细介绍了与您的个人信息相关的权利。

您可以要求我们：

• 提供我们所持有的您的所有个人信息，包括在适用的情况下，提供我们在上一个日历年将个人信息披露给哪些第三方的名单（如有）以用于其直接营销，以及披露给这些第三方的个人信息类型。我们会应要求向您提供此信息的副本。如果是明显毫无根据或过分的请求（例如，重复请求），我们会考虑到应要求提供信息或采取行动的行政费用，保留收取合理费用的权利。您可以通过以下方式行使您访问个人信息的权利：
  • By emailing us at privacy@sap.com; or
  • 按照下面的地址给我们写信。

请注意，我们可能需要向您索取进一步的信息，以便在应要求提供信息之前确认您的身份。

• 在适当情况下更正或清除您的个人信息。请注意，您可以通过登录（如适用）本服务可能更新此类信息的相关部分来查看和更新某些用户个人资料信息；
• 在我们调查您的疑惑时，限制处理您的个人信息；
• 当我们依据您的同意处理信息时，您有权以常用的电子格式接收您的信息，或要求我们将该格式的数据转移给其他供应商，前提是您的请求与您提供给我们的数据直接相关且技术上允许（数据可移植性）；
• 反对进一步处理您的个人数据，包括有权反对营销；
• 要求将您提供的个人数据转移给第三方；
• 您可以通过退出网站的方式，随时选择退出允许我们进一步访问您的位置数据。您还可以通过卸载适用应用的方式停止所有信息收集。您可以使用移动设备上可用的标准卸载程序；和
• 在处理以同意为前提时随时撤回您的同意。您也可以随时更改您的营销偏好；

If you remain unhappy with a response you receive you can also refer the matter to your data protection supervisory authority (see http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm)  or, if you are located in Australia, to the Office of the Australian Information Commissioner.

本政策的更改

SAP 保留不时更改本政策的权利。请定期查看本页面了解变更内容。如果我们对本政策作出任何重大变更，我们将会通过本网站或向您发送通知的方式在变更生效前通知您。任何此类重大变更只适用于修订后的政策生效后所收集的个人信息。

联系我们

有其他隐私问题或需要更多信息？本节介绍了我们的联系方式。

If you have any questions, comments, or concerns regarding this Policy or SAP’s privacy practices, they may be submitted via email to privacy@sap.com, or in writing by addressing your inquiries to:

Callidus Software Inc.
2700 Camino Ramon, # 400
San Ramon, CA 94583
Attn: Legal

 

PRIVACY SHIELD

将信息传输到美国：隐私护盾

CallidusCloud has self-certified under the EU-U.S. Privacy Shield framework set forth by the U.S. Department of Commerce and the European Union regarding the collection, use, and retention of personal information transferred from the European Union to the United States. For more information on the EU–U.S. Privacy Shield, please visit the U.S. Department of Commerce’s Privacy Shield website at please visit https://www.privacyshield.gov/

 

遵守隐私护盾框架

CallidusCloud has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. We comply with the EU-U.S Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States, respectively.

If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield Framework, and to view our certification, please visit https://www.privacyshield.gov/.

对后续转移的问责制

我们有责任依据“隐私护盾框架”处理和继续负责处理我们收到的个人信息，并在随后将信息转移到代表自己的第三方代理。我们在将个人信息从欧盟转移时，所有后续转移均遵守“隐私护盾原则”，包括责任条款的后续转移。

对于根据“隐私护盾框架”接收或转让的个人信息，我们将服从美国联邦贸易委员会的监管执行权力。在某些情况下，我们可能会被要求公开个人信息，以回应公共当局的合法要求，包括满足国家安全或执法要求。

访问的权利

您有合法权利索取我们所持有的您的个人信息。我们会应要求向您提供此信息的副本。您还有权更正、修改或删除不准确的个人信息，或是违反数据保护法和“隐私护盾原则”进行处理的个人信息。

“隐私护盾”查询与投诉机制的解决方案

In compliance with the Privacy Shield Principles, we commit to resolve complaints about our collection or use of your personal information. If you have any inquiries or complaints regarding our Privacy Shield policy you should first contact us at SAP.CX.Legal-Privacy@sap.com.

We have further committed to refer unresolved Privacy Shield complaints to JAMS. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield to file a complaint . The services of JAMS are provided at no cost to you. As further explained in the Privacy Shield Principles, a binding arbitration option may also be made available to you in order to address residual complaints not resolved by any other means.

执法

我们受制于美国联邦贸易委员会的调查和执法权力。我们可能会被要求与公共当局和执法机构共享您的个人信息，包括披露欧盟个人信息，以回应合法要求，包括满足国家安全或执法要求。

Entities Covered

The following dissolved or canceled Callidus Software Inc. subsidiaries are also subject to Privacy Shield adherence: BridgeFront LLC; ClickTools, Inc.; Litmos LLC; and RevSym, Inc. SAP continues to apply the Privacy Shield principles to any personal information received by such covered entities while participating in the Privacy Shield.