HanaHaus Privacy Statement
The HanaHaus Privacy Statement (this “Privacy Statement”) applies to: (1) the use of this website, www.hanahaus.com (the “Website”) and the reservation system, (2) use of the wireless internet access (“Wi-Fi”) made available at HanaHaus locations subject to the WiFi Terms and (3) any other subpages which reference this Privacy Statement (collectively, the “Services”). This Website and the WiFi are maintained by SAP Labs, LLC, 3410 Hillview Ave, Palo Alto, California, 94304. Some SAP entities, programs and/or sites may have their own, possibly different, privacy statements. We encourage you to read the privacy statements of each of the SAP websites or program information you visit or review. This Privacy Statement does not apply to websites and services that are owned and operated by third parties.
If we decide to make material changes to this Privacy Statement, we will post the changes on this site so that you will always know what information we collect, and how we use it.
Personal Data Collected and Purposes
SAP collects certain information which can directly or indirectly identify you (“Personal Data”) to deliver the Services, to understand your needs and interests and to help SAP deliver a consistent and personalized experience. We will use such information only as described in this Privacy Statement and/or in the way we specify at the time of collection. We will not subsequently change the way your personal data is used without your consent, as required by applicable law.
Data we process to provide you the Service.
SAP requires your first name, last name, phone number and email address to deliver the Service to you, including allowing you to create personal profile areas, make reservations, view protected content, provide customer feedback and receive support (including communicating with you via email). Additionally, if you are using the Wi-Fi, we require your device name and ID in order to ensure Wi-Fi connectivity.
If we choose to implement log-ins through third party services, such as Facebook or Twitter, those services will pass us your email information in order to continue with the authorization.
Data we process to create a better experience and improve our product.
From time to time, we may ask you for other information about yourself (such as the industry you work in).
In addition, we collect certain information automatically when you use our Services. This information may include the type of device, your operating system, your browser type, your domain name, your internet protocol (IP) address, your device identifier (or UDID), the date and time that you accessed the Services, the website which brought you to our Website, the web pages you request while using our Services, the date and time of those requests, and the subject of any ads you click or scroll over. To collect this information, we may use cookies, web beacons and similar technologies, including Google Analytics (see “Sharing Your Personal Data” below). Depending on how your e-mail application is set up, information about you may be transmitted automatically when you send e-mail to us.
We use this information to:
Help diagnose and resolve problems with our Service
Transfer your Personal Data within SAP’s group of undertakings to the extent necessary for internal administrative purposes;
Prevent or prosecute criminal activities such as fraud, if required.
Analyze your individual usage patterns, interests and preferences in order to improve our products and make suggestions (manually or with use of machine learning techniques) that help you get the most value from our Service. For example, we may use your industry or job function information in order to understand what kind of additional features or events our users might like.
To Respond to Legal Requests, Defend Legal Claims or Conduct Investigations. We may respond to subpoenas, court orders, or legal process by disclosing your personal data and other related information, if necessary. We also may choose to establish or exercise our legal rights or defend against legal claims. We may collect and possibly share personal data and any other additional information available to us in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of SAP's terms of use, or as otherwise required by law.
Create aggregated and anonymized data sets in order to understand Service usage, adoption, and virality, which will then be used to improve the Service. This aggregated and anonymized data may also be used to improve SAP’s and its affiliates’ other products and services.
Invite you to participate in additional questionnaires and surveys. These questionnaires and surveys will be generally designed in a way that they can be answered without any Personal Data. If you nonetheless enter Personal Data in a questionnaire or survey, SAP may use such Personal Data to improve its products and services.
In case of a Change of Control. Circumstances may arise where, whether for strategic or other business reasons, SAP decides to sell, buy, merge or otherwise reorganize businesses in some countries. Such a transaction may involve, in accordance with applicable law, the disclosure of personal information to prospective or actual purchasers, or the receipt of it from sellers. It is SAP's practice to seek appropriate protection for information in these types of transactions.
For the purpose of understanding and serving our community better, we may, in the future, collect publicly available information such as Google search results or Crunchbase profile information, and we retain that information as long as your profile is active. You can at any time obtain a copy of the information that we have about you by contacting hanahaus@sap.com
Data we process based on your consent.
In the following cases SAP will only use your Personal Data as further detailed below after you have granted your prior consent.
News about the Service. SAP may use your name, email, job title and basic information about your employer (name, address, and industry), your individual usage patterns, interests and preferences, as well as an interaction profile based on prior interactions with SAP (prior purchases, participation in webinars, seminars, or events or the use of (web) services - further details on this topic can be found in the displayed on the relevant SAP website) (together “Tailored Personal Data”) in order to communicate with you about the latest Service announcements, software updates, software upgrades, special offers, events and other information about the Service.
Withdrawing Consent
For processing based on consent, you may at any time withdraw a consent granted hereunder. If you withdraw your consent, SAP will not process Personal Data subject to this consent any longer unless legally required to do so. In case SAP is required to retain your Personal Data for legal reasons your Personal Data will be restricted from further processing and only retained for the term required by law. However, any withdrawal has no effect on past processing of personal data by SAP up to the point in time of your withdrawal. Furthermore, if your use of an SAP offering requires your prior consent, SAP will not be (any longer) able to provide the relevant service (or services, if you revoke the consent for SAP to use your profile under the SAP Cloud Platform Identity Authentication Service for multiple SAP offerings), offer or event to you after your revocation. Please direct any such request for withdrawal to hanahaus@sap.com.
Duration of Storage.
SAP will only store your Personal Data for the following periods as applicable:
for Personal Data required to deliver the Service, for as long as it is required to allow you to participate in the Service;
where SAP’s use of your Personal Data is based on SAP’s legitimate business interest as further stated herein, either until you delete your account or until you object to such use by SAP at the email address provided below; and
where the processing of your Personal Data is based on your consent either until your you delete your account or until you revoke your consent granted hereunder;
plus, in each case and where applicable, any additional periods under applicable laws during which SAP has to retain your Personal Data.
Please direct any such objections to hanahaus@sap.com. Kindly note that in this case the use of certain services or offerings may either be limited or not possible any longer. In case there is a contradicting statutory obligation for SAP to retain your Personal Data, SAP will block it against further processing and then delete the relevant Personal Data when the requirement to retain it has ceased.
Sharing Your Personal Data
We do not sell your personal data to third parties for marketing purposes.
Recipients of Data
SAP will not send your personal data outside the SAP Group except to the recipients listed below, unless we are otherwise required to do so by applicable laws.
The following categories of recipients may receive personal data:
Service Providers, who help SAP provide the Service as described above
We send reservations information to Stripe in order to facilitate Stripe’s processing of your payments;
We provide information to Comcast. Comcast may use your information for various purposes, including for marketing purposes, in connection with its Privacy Statement currently available at: http://www.comcast.com/Corporate/Customers/Policies/CustomerPrivacy.html.
Use of Google Analytics. The Website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You can see more information about how Google uses your data and opt-out options by visiting www.google.com/policies/privacy/partners/.
Other SAP Group Companies
Country-Specific Disclosures
European Economic Area.
For persons in the European Economic Area, the following additional paragraphs apply:
Legal Bases for Processing
Personal data listed in the section “Data we process to provide you the Service” is processed in order to perform our contractual obligations to you (i.e., to provide you the service).
Personal data processed under “Data we process to create a better experience” is processed on the basis of SAP’s legitimate interest.
“Data we process based on your consent” is processed based on your voluntary consent, and you may withdraw consent based on the instructions in that paragraph.
Transmission of Personal Data to a non-EEA Country
As part of a global group of companies, SAP has affiliates and third-party service providers within as well as outside of the European Economic Area (the “EEA”). As a consequence, for individual users, whenever SAP is using or otherwise processing your Personal Data for the purposes set out in this Privacy Statement, SAP may transfer your Personal Data to countries outside of the EEA including to such countries in which a statutory level of data protection applies that is not comparable to the level of data protection within the EEA. Whenever such transfer occurs, it is based on the Standard Contractual Clauses (according to EU Commission Decision 87/2010/EC or any future replacement) in order to contractually provide that your Personal Data is subject to a level of data protection that applies within the EEA. You may obtain a redacted copy (from which commercial information and information that is not relevant has been removed) of such Standard Contractual Clauses by sending a request to privacy@sap.com. For enterprise users, the transfer of data is governed by the agreement your organization has with SAP.
European Data Protection Rights
For individual users, you can request from SAP at any time information about which Personal Data SAP processes about you and the correction or deletion of such Personal Data. Please note, however, that SAP can or will delete your Personal Data only if there is no statutory obligation or prevailing right of SAP to retain it. Kindly note further that if you request that SAP deletes your Personal Data, you will not be able to continue to use any SAP service that requires SAP’s use of your Personal Data.
If SAP uses your Personal Data based on your consent or to perform a contract with you, you may further request from SAP a copy of the Personal Data that you have provided to SAP. In this case, please contact the email address below and specify the information or processing activities to which your request relates, the format in which you would like this information, and whether the Personal Data is to be sent to you or another recipient. SAP will carefully consider your request and discuss with you how it can best fulfill it.
Furthermore, you can request from SAP that SAP restricts your Personal Data from any further processing in any of the following events: (i) you state that the Personal Data SAP has about you is incorrect, (but only for as long as SAP requires to check the accuracy of the relevant Personal Data), (ii) there is no legal basis for SAP processing your Personal Data and you demand that SAP restricts your Personal Data from further processing, [or] (iii) SAP no longer requires your Personal Data but you claim that you require SAP to retain such data in order to claim or exercise legal rights or to defend against third party claims or (iv) in case you object to the processing of your Personal Data by SAP (based on SAP’s legitimate interest as further set out above) for as long as it is required to review as to whether SAP has a prevailing interest or legal obligation in processing your Personal Data.
If you take the view that SAP is not processing Personal Data in accordance with the requirements set out herein or applicable EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country where you live or with the data protection authority of the country or state where SAP has its registered seat.
This Service is not directed to users of an age of below 16 years. If you are younger than 16, you may not register with and use this Service.
For enterprise users, if you wish to exercise your European data protection rights, you will need to contact your organization.
United States.
For users in the United States of America, the following additional provisions apply:
California Do Not Track Disclosure
We use cookies to deliver personalized content, to save you having to re-enter your password repeatedly, to keep track of your shopping cart, and to tailor our information offerings to how you and others use the site. Cookies are identifiers that can be sent from a site via your browser to be placed on your computer's hard drive. Thereafter when you visit a site, a message is sent back to the web server by the browser accessing the site. Your browser may allow you to set a “Do not track” preference, which tells sites you visit that you do not want these messages to be submitted. Our site does not honor “Do not track” requests, but you may elect not to accept cookies by changing the designated settings on your web browser. However, not utilizing cookies may prevent you from using certain functions and features of our site. This site does not allow third parties to gather information about you over time and across sites.
US Children's Privacy
We do not intend for our websites or online services to be used by anyone under the age of 13. If you are a parent or guardian and believe we may have collected information about a child, please contact us as described in this Privacy Statement.
Updated: June 17, 2021