Your data should have a clear purpose.

Responsible party: Deborah Born, operating sapperment from South Africa under the Protection of Personal Information Act 4 of 2013 (POPIA). Contact: [email protected] — postal address in the legal information. Complaints may be lodged with the Information Regulator (South Africa).

Version: 8 October 2026.

Mailing lists

Purpose and legal basis

sapperment offers four email topics: SAP TM Hub — updates in your inbox, Executive Clarity — the Monday morning read, The Talent Brief and Technology, Data & AI. Subscribing is based on your explicit consent, given through a double opt-in: after you enter your address, you receive a single confirmation email — covering every topic you chose — and the subscription starts only when you click the link inside it. Without that click, nothing is sent.

Data collected

• your email address;
• the list you chose, the page the sign-up came from, and the consent and privacy-notice versions in force;
• timestamps of sign-up, confirmation and any unsubscribe (the consent trail);
• for The Talent Brief only, an optional self-declared role (SAP professional, recruiter, employer or partner) if you choose one — used solely to send you more relevant content and for anonymous audience segmentation;
• technical anti-spam signals needed to protect the form.

No name is required (the optional Talent Brief role is the only descriptive field, and only if you pick one), the role is never sold or used to build a profile, and the mailing-list records store no IP address, browser user agent or tracking profile.

Sending and storage

Subscriptions are stored in a restricted Cloudflare D1 database. Confirmation and list emails are dispatched through the transactional email provider Resend, acting as a processor, from the sending domain news.sapperment.com. Addresses are never sold, shared with advertisers or used for any purpose beyond the list you chose.

Retention and unsubscribing

Sign-ups that are never confirmed are deleted after 30 days. Every list email contains a one-click unsubscribe link; unsubscribing takes effect immediately, and a minimal opt-out record is kept as evidence of your choice. You can also unsubscribe or ask for deletion at any time via [email protected].

Talent Network intake

Purpose and legal basis

When you join the Talent Network, sapperment processes the information you submit to evaluate your SAP expertise, understand your availability and contact you about potentially relevant professional opportunities. The processing is based on your explicit consent. You can refuse the optional marketing consent and still submit your Talent Network profile.

Data collected

• name, email and location;
• optional LinkedIn profile;
• SAP domain, experience level, work preferences and availability;
• languages and the professional summary you provide;
• the consent version, privacy-notice version and consent timestamp;
• technical anti-spam signals needed to protect the form.

Do not submit identity documents, bank information, health information, ethnicity, political views, religious beliefs, union membership or other sensitive personal data through the form.

Retention

Talent Network submissions are kept for up to 12 months from submission unless you renew your profile, a longer period is required for a specific agreed engagement, or you ask for earlier deletion. Expired records are deleted through the retention process.

Recipients and storage

Talent data is stored in a restricted Cloudflare D1 database and is available only to authorised sapperment administrators who need it for the stated purpose. The site may use Cloudflare Turnstile to protect the form from automated abuse. sapperment does not sell Talent Network data or disclose it to advertisers.

Optional updates

The separate, unchecked updates box permits occasional Talent Network and relevant SAP-opportunity emails. It is not required to join the network and can be withdrawn independently.

Optional anonymous publication

Joining the Talent Network does not publish anything. Appearing in the public directory requires a separate, explicit consent, given on the publication form and recorded with its own consent version. Profiles submitted before that form existed are never published retroactively.

What is published when you give that consent: a reference number of the form TN-2026-0000, a headline role, your selected skills with proficiency, experience expressed as a band (under 2 years, 2–5, 6–10, over 10), project counts as a band, deployment, edition, transport mode, up to three industries, project phases, hands-on flags, certification status, when a skill was last used as a band, availability, work preferences, languages and a country-level location.

What is never published: your name, email address, LinkedIn profile, city or precise location, exact years of experience, exact project counts, system versions and any evidence you provide. These remain matching data and are shared only if you accept an introduction.

Human review. A person reviews every profile before publication and generalises anything that could identify you — for example a combination of skills, industry and location so narrow that it matches only one person.

Introduction requests. An employer can send a request against a reference number. The request is forwarded to you from the Talent Network address; the employer receives no information about you and is not told whether the profile is active or whether you read the request. Your identity is revealed only if you reply to them yourself. Introduction requests are stored for 90 days and then deleted.

Withdrawal. Email [email protected] to remove a published profile. The reference number is retired and never reissued to anyone else.

Anonymous analytics

Analytics is off by default. If you select “Allow anonymous analytics,” sapperment may load Cloudflare Web Analytics and record a small set of first-party events such as a page view, a labelled call-to-action click or successful form submission.

The first-party event record contains only the event name, page path, same-site referrer path, an approved short label, consent version and timestamps. It does not store your name, email, profile text, IP address, browser user agent or a persistent visitor identifier.

Cloudflare Web Analytics is configured as a cookie-free performance and traffic service. Your analytics choice is stored locally in your browser so the site can remember it. You can change or withdraw that choice at any time using Analytics preferences in this notice or the footer. Withdrawing consent stops future optional analytics; it does not reverse measurements already sent while consent was active.

The Circle (Fellows)

Purpose and legal basis

The Circle is an invitation-only area of sapperment for its Fellows. We process the data below to invite you, to let you sign in and to keep the area secure. For Fellows, the legal basis is the performance of the arrangement you accept when you enter The Circle; for the single invitation email, it is our legitimate interest in an invitation that a Fellow who knows you has asked us to send. The Fellow confirms that they know you and that you expect it. If you ignore an invitation, no further email follows.

Data collected

• your name and email address, and who invited you;
• your status (invited, active, or left) and the dates of invitation, acceptance, last visit and any exit;
• for each signed-in browser: a session record with a shortened, one-way hash of the IP address and a shortened browser description, so you and we can recognise and end sessions;
• a security log of invitations, sign-ins and sign-outs. Sign-in requests for addresses that do not belong to a Fellow are logged with the IP hash only, never the address typed;
• the names and email addresses of people you invite, visible to you and to the platform administrators.

Cookie

Signing in sets one strictly necessary cookie (__Host-sp_circle). It holds a random session key, is not readable by scripts and is used for nothing but keeping you signed in. It stays until you sign out or for at most 400 days, renewed while you use The Circle. Sign-in links and session keys are stored only in hashed form. No consent banner is needed for a cookie that is strictly necessary for a service you asked for, and it is never used for analytics or advertising.

Sending, storage and retention

Data is stored in the same restricted Cloudflare D1 database as the mailing lists. Invitations and sign-in links are sent through Resend, acting as a processor, from [email protected]. Unused links expire (invitations after 7 days, sign-in links after 15 minutes) and are deleted. Invitations that are never accepted are deleted after 90 days. When a Fellow leaves or access is withdrawn, their sessions end immediately and their record and log entries are deleted after 12 months. To leave The Circle or ask for deletion, write to [email protected].

SAP TM Hub members

Purpose and legal basis

Anyone can join the SAP TM Hub as a member, free of charge, to see the detail behind the key terms of the SAP TM glossary. We process the data below to create and confirm your membership, to let you sign in, to keep the glossary from being copied in bulk and to keep the service secure. The legal basis is the performance of the membership you ask for when you join; for the depth-request log, it is also our legitimate interest in protecting the glossary from systematic extraction.

Data collected

• your name, email address and the role you chose, and the date you accepted this notice;
• your status (pending until you confirm the link, then active) and the dates of joining, confirmation and last visit;
• for each signed-in browser: a session record with a shortened, one-way hash of the IP address and a shortened browser description;
• a log of which glossary entries you opened in the members' detail view, with time and IP hash, used only to enforce the reading limits and to detect bulk copying;
• a security log of join and sign-in requests. Requests for addresses that do not belong to a member are logged with the IP hash only, never the address typed.

Cookie

Signing in sets one strictly necessary cookie (__Host-sp_tmhub). It holds a random session key, is not readable by scripts and is used for nothing but keeping you signed in. It stays until you sign out or for at most 180 days, renewed while you use the SAP TM Hub. Links and session keys are stored only in hashed form. The cookie is never used for analytics or advertising.

Sending, storage and retention

Data is stored in the same restricted Cloudflare D1 database as the mailing lists. Confirmation and sign-in links are sent through Resend, acting as a processor, from [email protected]. Confirmation links expire after 48 hours, sign-in links after 15 minutes. The log of opened glossary entries is deleted after 90 days. Joining does not subscribe you to any newsletter. You can delete your account yourself at any time on your account page, which deletes your record, your sessions and your logs at once; or write to [email protected].

Site delivery and security

Cloudflare hosts and protects sapperment. As part of delivering and securing the site, Cloudflare may process technical request information under its role as infrastructure provider. Essential delivery and security processing is separate from the optional analytics choice.

Search and Ask sapperment

The site search runs entirely in your browser: the index is served as static files from this site and the terms you type are never transmitted anywhere.

Ask sapperment sends your question to this site, where it is processed transiently on Cloudflare’s AI infrastructure (Cloudflare acting as processor, as above) to find matching published pages and compose an answer from them. Questions are not stored, not logged by sapperment and not used to train any model; no account is needed and no cookie is set.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and you may withdraw consent at any time without affecting processing that occurred before withdrawal.

For Talent Network withdrawal or a data request, email [email protected] from the address used for the submission and state what you want us to do. You may also complain to the competent data-protection supervisory authority.

External services and links

sapperment links to external services such as LinkedIn, Medium, YouTube and publishers. Their own privacy terms apply when you follow those links. No external newsletter or marketing subscription is created merely by submitting the Talent Network form.

Changes to this notice

Material changes will receive a new version date. When a change affects the purpose of consent-based processing, sapperment will request fresh consent rather than silently extending the old permission.