On SAP Ariba Strategic Sourcing Suite's Privacy Page you can request and collect all the privacy and GDPR related information that SAP Ariba Strategic Sourcing Suite is providing.
The privacy policy by is a legal document or statement that discloses how SAP Ariba Strategic Sourcing Suite gathers, uses, discloses, and manges their customers' data.
The basis for SAP America, Inc sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.
Subprocessors are companies that provide a service for SAP America, Inc and who has or potentially will get access to personal data of their customers.