Common use of Data Separation Control Clause in Contracts

Data Separation Control. Personal Data collected for different purposes can be processed separately. Measures: • SAP uses appropriate technical controls to achieve Customer Data separation at all times. • Customer (including its approved Controllers) will have access only to their own Data based on secure authentication and authorization. • If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.

Data Separation Control. Personal Data collected for different purposes can be processed separately. Measures: • SAP uses appropriate the technical controls capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve Customer data separation among Personal Data separation at all timesoriginating from multiple customers. • Customer Customers (including its approved Controllerstheir Affiliates) will have access only to their own Data based on secure authentication and authorizationdata. • If Personal Data is required to handle a support incident from Customera specific customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.