How we collect, use, store, and protect personal data when you visit saprisenegotiations.com, contact our team, subscribe to the RISE Negotiation Brief, or download gated white papers. This notice meets our obligations under the EU General Data Protection Regulation, the UK General Data Protection Regulation, and the California Consumer Privacy Act.
This policy is effective as of May 2026. We may update it from time to time. Material changes will be noted at the top of this page with a revised effective date.
SAP RISE Negotiations is an independent advisory practice focused on RISE with SAP contract negotiation, seven year TCO modelling, and post signature optimisation. We are the data controller for personal information collected through this site. Our offices operate in New York, London, and Stockholm.
For any privacy enquiry, write to privacy@saprisenegotiations.com or use the contact form on this site.
We collect only the personal data needed to operate our practice and respond to your enquiries. The categories below are exhaustive.
We process personal data on three lawful bases under GDPR Article 6.
Form submissions are processed through Formspree, our form processor, and are stored in encrypted systems. Email communication is encrypted in transit and at rest. We do not sell, rent, or trade personal data. We do not share data with SAP SE, with hyperscaler vendors, or with any third party other than the processors named in section 6.
We retain personal data only for as long as needed for the purpose for which it was collected. Contact enquiries are retained for 24 months. Newsletter subscriber records are retained until you unsubscribe. Client engagement records are retained for seven years to meet professional record keeping obligations.
If you are in the European Economic Area, the United Kingdom, or California, you have the following rights regarding your personal data.
To exercise any right, email privacy@saprisenegotiations.com. We will respond within 30 days.
We engage a small set of processors. Each is bound by a data processing agreement that meets GDPR Article 28 requirements.
Some processors are located in the United States. Where personal data is transferred outside the United Kingdom or European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office.
This site is directed at enterprise buyers. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have collected such data, contact us and we will delete it.
Under the California Consumer Privacy Act, California residents have additional rights, including the right to know what categories of personal data we collect, the right to delete personal data, and the right to opt out of the sale of personal data. We do not sell personal data. To exercise any CCPA right, contact privacy@saprisenegotiations.com.
For any privacy question, write to privacy@saprisenegotiations.com or use the contact form. Postal correspondence can be addressed to our offices in New York, London, or Stockholm. We will respond within 30 days.