Common use of Data Separation Control Clause in Contracts

Data Separation Control. SAP uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. • Customer (including its Controllers) has access only to its own data. • If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.

Data Separation Control. Personal Data collected for different purposes can be processed separately. Measures: • SAP uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. • Customer Customers (including its Controllerstheir Affiliates) has have access only to its their own data. • If Personal Data is required to handle a support incident from Customera specific customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.