{"component": "clause", "props": {"groups": [{"snippet": "SAP uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. \u2022 Customer (including its Controllers) has access only to its own data. \u2022 If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.", "snippet_links": [{"key": "technical-capabilities", "type": "clause", "offset": [13, 35]}, {"key": "for-example", "type": "definition", "offset": [62, 73]}, {"key": "separate-system", "type": "definition", "offset": [94, 109]}, {"key": "data-separation", "type": "clause", "offset": [133, 148]}, {"key": "personal-data", "type": "definition", "offset": [155, 168]}, {"key": "multiple-customers", "type": "clause", "offset": [186, 204]}, {"key": "access-only", "type": "definition", "offset": [249, 260]}, {"key": "to-handle", "type": "definition", "offset": [309, 318]}, {"key": "support-incident", "type": "definition", "offset": [321, 337]}, {"key": "from-customer", "type": "clause", "offset": [338, 351]}, {"key": "the-data", "type": "clause", "offset": [353, 361]}, {"key": "other-messages", "type": "definition", "offset": [474, 488]}, {"key": "support-systems", "type": "definition", "offset": [523, 538]}], "samples": [{"hash": "5scs28ehptK", "uri": "/contracts/5scs28ehptK#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.5306529999, "published": true}, {"hash": "kfbWLu92lcn", "uri": "/contracts/kfbWLu92lcn#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.4950675964, "published": true}, {"hash": "jXHgk7cPWaG", "uri": "/contracts/jXHgk7cPWaG#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.4950675964, "published": true}], "size": 31, "hash": "fbd2964086268101f9b2ff90d34ef2fb", "id": 1}, {"snippet": "Personal Data collected for different purposes can be processed separately.", "snippet_links": [{"key": "data-collected", "type": "clause", "offset": [9, 23]}], "samples": [{"hash": "8H6yka0ZUAL", "uri": "/contracts/8H6yka0ZUAL#data-separation-control", "label": "Personal Data Processing Agreement", "score": 30.7633285522, "published": true}, {"hash": "aXtGWx6BMb3", "uri": "/contracts/aXtGWx6BMb3#data-separation-control", "label": "Personal Data Processing Agreement", "score": 30.5306529999, "published": true}, {"hash": "bRcMNNEuTqu", "uri": "/contracts/bRcMNNEuTqu#data-separation-control", "label": "Personal Data Processing Agreement", "score": 30.4950675964, "published": true}], "size": 18, "hash": "f46f626333ea5f9a5d4fd9d20aa64712", "id": 2}, {"snippet": "Measures:", "snippet_links": [], "samples": [{"hash": "Xl1jNZTaEC", "uri": "/contracts/Xl1jNZTaEC#data-separation-control", "label": "Order Form", "score": 32.2249832153, "published": true}, {"hash": "kEDBpgOHYp8", "uri": "/contracts/kEDBpgOHYp8#data-separation-control", "label": "General Terms and Conditions for Cloud Services", "score": 31.873840332, "published": true}, {"hash": "38jBGhxwWEw", "uri": "/contracts/38jBGhxwWEw#data-separation-control", "label": "Professional Services", "score": 27.2258720398, "published": true}], "size": 11, "hash": "4323c1d93476b186868846ddd877042c", "id": 3}, {"snippet": "The following measures are implemented to control that Personal Data collected for different purposes can be processed separately:\na) Multi-tenant environment: The Platform is a virtualized, multi-tenant environment. Security management processes and security controls designed to isolate each customer from other customers are implemented. Systems are designed to prevent customers from accessing physical hosts or instances not assigned to them by filtering through the virtualization software.", "snippet_links": [{"key": "to-control", "type": "definition", "offset": [39, 49]}, {"key": "data-collected", "type": "clause", "offset": [64, 78]}, {"key": "the-platform", "type": "clause", "offset": [160, 172]}, {"key": "management-processes", "type": "clause", "offset": [226, 246]}, {"key": "security-controls", "type": "clause", "offset": [251, 268]}, {"key": "other-customers", "type": "definition", "offset": [308, 323]}], "samples": [{"hash": "8d23VioVS6Y", "uri": "/contracts/8d23VioVS6Y#data-separation-control", "label": "Data Processing Agreement", "score": 23.8432579041, "published": true}, {"hash": "2fnhrjGmzeU", "uri": "/contracts/2fnhrjGmzeU#data-separation-control", "label": "Data Processing Agreement", "score": 23.8432579041, "published": true}], "size": 7, "hash": "0603a78fe8f5bd69b547dec031c1470c", "id": 4}, {"snippet": "\ub370\uc774\ud130 \ubd84\ub9ac \uc81c\uc5b4. \u2022 SAP uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. SAP \ub294 \uc5ec\ub7ec \uace0\uac1d\uc5d0\uc11c \ube44\ub86f\ub41c \uac1c\uc778 \uc815\ubcf4\ub97c \ubd84\ub9ac\ud558\uae30 \uc704\ud574 \ubc30\ud3ec\ub41c \uc18c\ud504\ud2b8\uc6e8\uc5b4(\uc608: \ub2e4\uc911 \ud14c\ub10c\uc2dc \ub610\ub294 \ubcc4\ub3c4 \uc2dc\uc2a4\ud15c \ud658\uacbd)\uc758 \uae30\uc220\uc801 \ub2a5\ub825\uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4. \u2022 Customer (including its Controllers) has access only to its own data. \uace0\uac1d(\uace0\uac1d\uc758 \ucee8\ud2b8\ub864\ub7ec \ud3ec\ud568)\uc740 \uc790\uc2e0\uc758 \uc815\ubcf4\uc5d0\ub9cc \uc561\uc138\uc2a4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \u2022 If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems. \uace0\uac1d \uc815\ubcf4\uac00 \uace0\uac1d\uc73c\ub85c\ubd80\ud130\uc758 \uc9c0\uc6d0 \uc778\uc2a4\ud134\uc2a4\ub97c \ucc98\ub9ac\ud574\uc57c \ud558\ub294 \uacbd\uc6b0, \uc815\ubcf4\ub294 \ud574\ub2f9 \ud2b9\uc815 \uba54\uc2dc\uc9c0\uc5d0 \ud560\ub2f9\ub418\uc5b4 \ud574\ub2f9 \uba54\uc2dc\uc9c0\ub97c \ucc98\ub9ac\ud558\uae30 \uc704\ud574\uc11c\ub9cc \uc0ac\uc6a9\ub418\uba70 \ub2e4\ub978 \uba54\uc2dc\uc9c0\ub97c \ucc98\ub9ac\ud558\uae30 \uc704\ud574 \uc561\uc138\uc2a4\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc774 \uc815\ubcf4\ub294 \uc804\uc6a9 \uc9c0\uc6d0 \uc2dc\uc2a4\ud15c\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4.", "snippet_links": [{"key": "technical-capabilities", "type": "clause", "offset": [26, 48]}, {"key": "for-example", "type": "definition", "offset": [75, 86]}, {"key": "separate-system", "type": "definition", "offset": [107, 122]}, {"key": "data-separation", "type": "clause", "offset": [146, 161]}, {"key": "personal-data", "type": "definition", "offset": [168, 181]}, {"key": "multiple-customers", "type": "clause", "offset": [199, 217]}, {"key": "access-only", "type": "definition", "offset": [345, 356]}, {"key": "to-handle", "type": "definition", "offset": [444, 453]}, {"key": "support-incident", "type": "definition", "offset": [456, 472]}, {"key": "from-customer", "type": "clause", "offset": [473, 486]}, {"key": "the-data", "type": "clause", "offset": [488, 496]}, {"key": "other-messages", "type": "definition", "offset": [609, 623]}, {"key": "support-systems", "type": "definition", "offset": [658, 673]}], "samples": [{"hash": "evLhXbzwYni", "uri": "/contracts/evLhXbzwYni#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.4950675964, "published": true}, {"hash": "aUFhzsQoAXE", "uri": "/contracts/aUFhzsQoAXE#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.4622192383, "published": true}, {"hash": "2HoJhyd9Fdc", "uri": "/contracts/2HoJhyd9Fdc#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.3390369415, "published": true}], "size": 3, "hash": "a8f4ef30816750ad7a0a75110e7c45c4", "id": 5}, {"snippet": "Kendali Pemisahan Data. \u2022 SAP uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers./ SAP menggunakan kemampuan-kemampuan teknis dari perangkat lunak yang ditempatkan (misalnya, lanskap sistem terpisah atau kepemilikan majemuk) untuk mencapai pemisahan data antara Data Pribadi yang berasal dari berbagai pelanggan. \u2022 Customer (including its Controllers) has access only to its own data./ Pelanggan (termasuk Pengendalinya) memiliki akses hanya ke datanya sendiri. \u2022 If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems./ Jika Data Pribadi diperlukan untuk menangani insiden dukungan dari Pelanggan, data ditetapkan untuk pesan tertentu tersebut dan digunakan hanya untuk memproses pesan tersebut, Data Pribadi tidak diakses untuk memproses pesan lain mana pun. Data ini disimpan dalam sistem dukungan khusus.", "snippet_links": [{"key": "technical-capabilities", "type": "clause", "offset": [39, 61]}, {"key": "for-example", "type": "definition", "offset": [88, 99]}, {"key": "separate-system", "type": "definition", "offset": [120, 135]}, {"key": "data-separation", "type": "clause", "offset": [159, 174]}, {"key": "personal-data", "type": "definition", "offset": [181, 194]}, {"key": "data-pribadi", "type": "definition", "offset": [412, 424]}, {"key": "access-only", "type": "definition", "offset": [506, 517]}, {"key": "to-handle", "type": "definition", "offset": [643, 652]}, {"key": "support-incident", "type": "definition", "offset": [655, 671]}, {"key": "from-customer", "type": "clause", "offset": [672, 685]}, {"key": "the-data", "type": "clause", "offset": [687, 695]}, {"key": "other-messages", "type": "definition", "offset": [808, 822]}, {"key": "dedicated-support", "type": "clause", "offset": [847, 864]}], "samples": [{"hash": "bAfFwCXTPny", "uri": "/contracts/bAfFwCXTPny#data-separation-control", "label": "Personal Data Processing Agreement", "score": 30.4950675964, "published": true}, {"hash": "9NJ7jW2g30F", "uri": "/contracts/9NJ7jW2g30F#data-separation-control", "label": "Personal Data Processing Agreement", "score": 30.4622192383, "published": true}, {"hash": "9XqbiVi6mlG", "uri": "/contracts/9XqbiVi6mlG#data-separation-control", "label": "Personal Data Processing Agreement", "score": 30.3390369415, "published": true}], "size": 3, "hash": "7549ad4a5410ba8714a6b4444d9f8219", "id": 6}, {"snippet": "Personal Data collected for different purposes can be processed separately. RELISH takes the following measures:\n8.1. RELISH uses the technical capabilities of the deployed software (for example: multi- tenancy, or partition keys) to achieve data separation among Personal Data originating from multiple customers.\n8.2. Customer (including its Controllers) has access only to its own data.\n8.3. If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.", "snippet_links": [{"key": "data-collected", "type": "clause", "offset": [9, 23]}, {"key": "technical-capabilities", "type": "clause", "offset": [134, 156]}, {"key": "for-example", "type": "definition", "offset": [183, 194]}, {"key": "data-separation", "type": "clause", "offset": [242, 257]}, {"key": "multiple-customers", "type": "clause", "offset": [295, 313]}, {"key": "access-only", "type": "definition", "offset": [361, 372]}, {"key": "to-handle", "type": "definition", "offset": [424, 433]}, {"key": "support-incident", "type": "definition", "offset": [436, 452]}, {"key": "from-customer", "type": "clause", "offset": [453, 466]}, {"key": "the-data", "type": "clause", "offset": [468, 476]}, {"key": "other-messages", "type": "definition", "offset": [589, 603]}, {"key": "support-systems", "type": "definition", "offset": [638, 653]}], "samples": [{"hash": "6gQUSB2qesu", "uri": "/contracts/6gQUSB2qesu#data-separation-control", "label": "General Terms and Conditions for Cloud Service", "score": 35.5938987732, "published": true}, {"hash": "ip5hLkQsrXg", "uri": "/contracts/ip5hLkQsrXg#data-separation-control", "label": "Data Processing Agreement", "score": 31.3948001862, "published": true}], "size": 2, "hash": "ceeab22752fb9be80337a07a3638e332", "id": 7}, {"snippet": "SAP uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. // SAP \u306f\u3001\u914d\u5099\u3055\u308c\u305f\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u2730\u6280\u8853\u7684\u6a5f\u80fd\uff08\u305f\u3068\u3048\u3070\u3001\u30de\u30eb\u30c1\u30c6\u30ca\u30f3\u30c8\u3084\u5206\u96e2\u30b7\u30b9\u30c6\u30e0\u30e9\u30f3\u30c9\u30b9\u30b1\u30fc\u30d7\uff09\u3092\u4f7f\u7528\u3057\u3066\u3001\u8907\u6570\u2730\u9867\u5ba2\u306b\u7531\u6765\u3059\u308b\u300c\u500b\u4eba\u30c7\u30fc\u30bf\u300d\u9593\u2730\u30c7\u30fc\u30bf\u5206\u96e2\u3092\u5b9f\u73fe\u3059\u308b\u3002 \u2022 Customer (including its Controllers) has access only to its own data. // \u9867\u5ba2\uff08\u305d\u2730\u300c\u7ba1\u7406\u8005\u300d\u3092\u542b\u3080\uff09\u306f\u3001\u81ea\u8eab\u2730\u30c7\u30fc\u30bf\u2730\u307f\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3002 \u2022 If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems. // \u300c\u500b\u4eba\u30c7\u30fc\u30bf\u300d\u304c\u3001\u9867\u5ba2\u304b\u3089\u2730\u30b5\u30dd\u30fc\u30c8\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u3092\u51e6\u7406\u3059\u308b\u305f\u3081\u306b\u5fc5\u8981\u306a\u5834\u5408\u306f\u3001\u5f53\u8a72\u30c7\u30fc\u30bf\u306f\u305d\u2730\u7279\u5b9a\u2730\u30e1\u30c3\u30bb\u30fc\u30b8\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u3001\u5f53\u8a72\u30e1\u30c3\u30bb\u30fc\u30b8\u2730\u51e6\u7406\u2730\u305f\u3081\u306b\u2730\u307f\u4f7f\u7528\u3055\u308c\u308b\u3002\u305d\u2730\u4ed6\u2730\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u51e6\u7406\u3059\u308b\u305f\u3081\u306b\u3053\u2730\u30c7\u30fc\u30bf\u3078\u2730\u30a2\u30af\u30bb\u30b9\u304c\u884c\u308f\u308c\u308b\u3053\u3068\u306f\u306a\u3044\u3002\u3053\u2730\u30c7\u30fc\u30bf\u306f\u3001\u5c02\u7528\u2730\u30b5\u30dd\u30fc\u30c8\u30b7\u30b9\u30c6\u30e0\u306b\u4fdd\u5b58\u3055\u308c\u308b\u3002", "snippet_links": [{"key": "technical-capabilities", "type": "clause", "offset": [13, 35]}, {"key": "for-example", "type": "definition", "offset": [62, 73]}, {"key": "separate-system", "type": "definition", "offset": [94, 109]}, {"key": "data-separation", "type": "clause", "offset": [133, 148]}, {"key": "personal-data", "type": "definition", "offset": [155, 168]}, {"key": "multiple-customers", "type": "clause", "offset": [186, 204]}, {"key": "access-only", "type": "definition", "offset": [340, 351]}, {"key": "to-handle", "type": "definition", "offset": [442, 451]}, {"key": "support-incident", "type": "definition", "offset": [454, 470]}, {"key": "from-customer", "type": "clause", "offset": [471, 484]}, {"key": "the-data", "type": "clause", "offset": [486, 494]}, {"key": "other-messages", "type": "definition", "offset": [607, 621]}, {"key": "support-systems", "type": "definition", "offset": [656, 671]}], "samples": [{"hash": "a6H6hcr51Ep", "uri": "/contracts/a6H6hcr51Ep#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.4950675964, "published": true}, {"hash": "jIQEKPRWeBl", "uri": "/contracts/jIQEKPRWeBl#data-separation-control", "label": "Personal Data Processing Agreement", "score": 29.4622192383, "published": true}], "size": 2, "hash": "4f6d86fbf829ec2fc447374d96174fc0", "id": 8}, {"snippet": "RELISH uses the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. \u2022 Customer (including its Controllers) has access only to its own data. \u2022 If Personal Data is required to handle a support incident from Customer, the data is assigned to that particular message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems.", "snippet_links": [{"key": "technical-capabilities", "type": "clause", "offset": [16, 38]}, {"key": "for-example", "type": "definition", "offset": [65, 76]}, {"key": "separate-system", "type": "definition", "offset": [97, 112]}, {"key": "data-separation", "type": "clause", "offset": [136, 151]}, {"key": "personal-data", "type": "definition", "offset": [158, 171]}, {"key": "multiple-customers", "type": "clause", "offset": [189, 207]}, {"key": "access-only", "type": "definition", "offset": [252, 263]}, {"key": "to-handle", "type": "definition", "offset": [312, 321]}, {"key": "support-incident", "type": "definition", "offset": [324, 340]}, {"key": "from-customer", "type": "clause", "offset": [341, 354]}, {"key": "the-data", "type": "clause", "offset": [356, 364]}, {"key": "other-messages", "type": "definition", "offset": [477, 491]}, {"key": "support-systems", "type": "definition", "offset": [526, 541]}], "samples": [{"hash": "137eHpaeRtQ", "uri": "/contracts/137eHpaeRtQ#data-separation-control", "label": "Personal Data Processing Agreement", "score": 24.7563304901, "published": true}, {"hash": "bSUQwEdelco", "uri": "/contracts/bSUQwEdelco#data-separation-control", "label": "Personal Data Processing Agreement", "score": 24.6605072021, "published": true}], "size": 2, "hash": "e428a608b9a085ed1083b5936718a09e", "id": 9}, {"snippet": "Personal data collected for different purposes can be processed separately. Measures:\na. When applicable, SISW uses the technical capabilities of the deployed software (for example: multi-tenancy or separate system landscapes) to achieve data separation between personal data of Customer and that of any other customer.\nb. SISW maintains dedicated instances (with logical or physical separation) for each customer.\nc. Customer (including its Affiliates) has access only to its own customer instance(s).", "snippet_links": [{"key": "data-collected", "type": "clause", "offset": [9, 23]}, {"key": "when-applicable", "type": "clause", "offset": [89, 104]}, {"key": "technical-capabilities", "type": "clause", "offset": [120, 142]}, {"key": "for-example", "type": "definition", "offset": [169, 180]}, {"key": "separate-system", "type": "definition", "offset": [199, 214]}, {"key": "data-separation", "type": "clause", "offset": [238, 253]}, {"key": "of-customer", "type": "clause", "offset": [276, 287]}, {"key": "other-customer", "type": "definition", "offset": [304, 318]}, {"key": "physical-separation", "type": "definition", "offset": [375, 394]}, {"key": "access-only", "type": "definition", "offset": [458, 469]}], "samples": [{"hash": "brJvn6RdkEe", "uri": "/contracts/brJvn6RdkEe#data-separation-control", "label": "Data Processing Agreement", "score": 22.3018474579, "published": true}, {"hash": "2C8lfqrFNLs", "uri": "/contracts/2C8lfqrFNLs#data-separation-control", "label": "Data Processing Agreement", "score": 22.283367157, "published": true}], "size": 2, "hash": "b29ecf187c48c02c89554235ce977f07", "id": 10}], "next_curs": "CmASWmoVc35sYXdpbnNpZGVyY29udHJhY3RzcjwLEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IiBkYXRhLXNlcGFyYXRpb24tY29udHJvbCMwMDAwMDAwYQyiAQJlbhgAIAA=", "clause": {"title": "Data Separation Control", "children": [], "size": 93, "parents": [["technical-and-organizational-measures", "TECHNICAL AND ORGANIZATIONAL MEASURES"], ["definitions", "Definitions"], ["data-integrity-control", "Data Integrity Control"], ["miscellaneous", "Miscellaneous"], ["documentation-records-of-processing", "DOCUMENTATION; RECORDS OF PROCESSING"]], "id": "data-separation-control", "related": [["job-control", "Job Control", "Job Control"], ["project-management-plan", "Project Management Plan", "Project Management Plan"], ["first-source-hiring-program", "First Source Hiring Program", "First Source Hiring Program"], ["incentive-savings-and-retirement-plans", "Incentive, Savings and Retirement Plans", "Incentive, Savings and Retirement Plans"], ["post-termination-cooperation", "Post-Termination Cooperation", "Post-Termination Cooperation"]], "related_snippets": [], "updated": "2025-07-10T04:27:38+00:00", "also_ask": ["What minimum technical and organizational measures must be specified to ensure effective data separation?", "How can parties negotiate audit rights to verify compliance with data separation obligations?", "What are the most common legal pitfalls or ambiguities in data separation clauses?", "How do data separation requirements differ across key jurisdictions (e.g., EU vs. US)?", "What evidence is typically required in court to prove a breach of data separation control?"], "drafting_tip": "Specify data segregation methods to prevent unauthorized access, define responsibilities for data handling to ensure accountability, and require regular audits to verify compliance.", "explanation": "The Data Separation Control clause establishes requirements to ensure that data belonging to different parties or purposes is kept logically or physically separate within a system. In practice, this may involve implementing technical measures such as access controls, partitioned databases, or encryption to prevent unauthorized access or mixing of data sets. The core function of this clause is to protect the confidentiality and integrity of data by preventing accidental or intentional commingling, thereby reducing the risk of data breaches and ensuring compliance with privacy regulations."}, "json": true, "cursor": ""}}