Privacy policy

Data Protection Declaration

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Guangdong SIRUI Optical Co., Ltd., The Third Industrial District, Wuguishan,
Zhongshan City, Guangdong, China, E-Mail: service@sirui.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

2) DATA COLLECTION WHEN YOU VISIT OUR WEBSITE
When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.

3) CONTACTING US
When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.

4) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time. This can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.

5) USE OF YOUR DATA FOR DIRECT ADVERTISING
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The indication of additional possible data is voluntary and is used to allow us to address you personally. We use the so-called double opt-in procedure for sending newsletters. This means that we will not send you an e-mail newsletter, unless you have expressly confirmed to us that you agree to the sending of such a newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.

6) PROCESSING OF DATA FOR THE PURPOSE OF ORDER HANDLING
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.

7) USE OF SOCIAL MEDIA
7.1 Facebook with Shariff Solution
Our website uses so-called social plugins ("plugins") of the social network Facebook operated by Facebook Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland ("Facebook").
In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plug-ins and only fully operational when using an HTML link. This type of integration ensures that no connection to servers of Facebook is established when a page of our website containing such buttons is called up. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact (if necessary after entering your login data) with the plugins contained there.
Facebook Inc., based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for the protection of your privacy, can be found in the Facebook data protection declaration at: https://www.facebook.com/policy.php
7.2 Instagram with Shariff Solution
Our website uses so-called social plugins ("plugins") of the Instagram online service operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").
In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plug-ins and only fully operational when using an HTML link. This type of integration ensures that no connection to Instagram's servers is established when you access a page on our website that contains such buttons. When you click the button, a new browser window opens and opens the Instagram page, where you can interact with the plugins (if necessary, after entering your login data).
Instagram LLC., based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
Please refer to Instagram's privacy policy for the purpose and scope of data collection and the further processing and use of data by Instagram and your rights and setting options for protecting your privacy at: https://help.instagram.com/155833707900388/
7.3 Pinterest with Shariff Solution
We use so-called social plugins ("plugins") of the social network Pinterest operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA ("Pinterest").
In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plug-ins and only fully operational when using an HTML link. This type of integration ensures that no connection to Pinterest's servers is established when a page of our website containing such buttons is accessed. When you click on the button, a new browser window opens and calls up the Pinterest page, where you can interact with the plug-ins there (if necessary after entering your login data).
Please refer to Pinterest's privacy policy for the purpose and scope of data collection and the further processing and use of the data by Pinterest and your rights and setting options for protecting your privacy at: https://policy.pinterest.com/en-gb/privacy-policy
7.4 Twitter with Shariff Solution
Our website uses so-called social plugins ("plugins") of the microblogging service Twitter operated by Twitter Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter").
In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plug-ins and only operational when using an HTML link. This type of integration ensures that no connection to Twitter's servers is established when a page of our website containing such buttons is accessed. When you click on the button, a new browser window opens and opens the Twitter page, where you can interact with the plugins (if necessary after entering your login data).
Twitter Inc., based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your relevant rights and setting options for the protection of your privacy can be found in the Twitter data protection declaration at: https://twitter.com/privacy

8) USE OF VIDEOS
Use of YouTube Videos
This website uses the YouTube embedding function for display and playback of videos offered by the provider YouTube, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google").
To this end, the extended data protection mode is used to ensure, according to provider information, that user information will only be stored once the playback function of the video is started. When the playback of embedded YouTube videos is started, the provider sets "YouTube" cookies in order to collect information about user behavior. According to indications from YouTube, the use of those cookies is intended, among other things, to record video statistics, to improve user-friendliness and to avoid improper actions. If you are logged in to Google, your information will be directly associated with your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to Art. 6 (1) point f GDPR, on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of whether the embedded video is played back, a connection to the Google network "double click" is established when visiting this website. This may trigger further data processing beyond our control.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
Further information on YouTube's privacy policy can be found in the provider's data protection declaration at: www.google.com/policies/privacy/.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

9) ONLINE-MARKETING
9.1 Facebook pixels for creating custom audiences
Within our online offer, the so-called "Facebook pixel" of the social network Facebook is applied. It is operated by Facebook Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland (hereinafter "Facebook").
If a user clicks on an advertisement placed by us, which is displayed on Facebook, an addition is added to the URL of our linked page by Facebook pixels. If our page allows data to be shared with Facebook via pixels, this URL parameter is written into the user's browser via a cookie, which is set by the linked page itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able to determine visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, the Facebook pixel to display Facebook ads placed by us will be presented only to Facebook users who have shown an interest in our online offer or who demonstrate certain characteristics (e.g. interest in certain topics or products determined by means of the websites visited) which we will transmit to Facebook (so-called "custom audiences"). When using Facebook pixels, we also want to ensure that our Facebook ads match the potential interest of users and are not annoying. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were forwarded to our website after clicking on a Facebook ad ("conversion").
The collected data is anonymous and does not provide us with any information about the user’s identity. However, the data is stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve advertisements on and off Facebook.
The data processing associated with the use of the Facebook pixel is based on our predominantly legitimate interest in the evaluation, optimization and economic operation of our online offer and our advertising measures in accordance with Art. 6 (1) point f GDPR.
The information generated by Facebook is usually transferred to a Facebook server and stored there. This may also result in transmission to the servers of Facebook Inc. in the USA. Facebook Inc. based in the USA is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you want to object to the collection by Facebook pixels and the use of your data for presenting Facebook ads, you can set an opt-out cookie by clicking on the following link, which deactivates Facebook pixel tracking:
disable Facebook pixels
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on the above link again.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
9.2 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and the conversion tracking within the framework of Google Ads, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google"). We use the program of Google Ads to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine, in relation to the advertising campaigns data, how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you. We want to make our website more interesting for you and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set on a user’s browser, if he clicks on an ad delivered by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits a certain page of this website and if the cookie has not yet expired, Google and we will be able to recognize that the user clicked on the ad and was forwarded to this page. Each Google Ads customer gets a different cookie. Thus, cookies cannot be traced via the website of Google Ads customers. The information collected by the conversion cookies is used to provide aggregate conversion statistics to Google Ads customers who have opted-in for conversion tracking. Customers are informed about the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, they do not get any information enabling them to identify users personally. If you do not want to participate in the tracking program, you can refuse the use of this program by deactivating the Google Conversion Tracking cookie via your Internet browser through the user settings. In this case, you will not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 (1) point f GDPR. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list..
For more information about Google's privacy policy, please visit: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in
You can permanently deactivate cookies for advertising preferences by blocking them via a respective setting of your browser software or by downloading and installing the browser plug-in, available under the following link:
https://support.google.com/ads/answer/7395996
Please note that certain functions of this website may not be used, or may be used only to a limited extent, if you have deactivated the use of cookies.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

10) RETARGETING/REMARKETING/ REFERRAL ADVERTISING
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, which enable us to advertise our website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). To this end, Google places a cookie in the browser of your terminal device, which automatically uses a pseudonymous cookie ID on the basis of pages you visited to allow interest-based advertising. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) point f GDPR.
Any additional processing will only take place if you have agreed with Google that your Google Internet and app browsing history will be linked to your Google Account and information from your Google Account will be used for personalized ads you view on the web. If you are logged in to Google while visiting our website, Google will use your data in connection with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to create target groups. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can permanently disable the setting of cookies for advertising preferences. You may download and install the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to find out how to set cookies and to make the relevant settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or whether to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
Further information and Google's privacy policy regarding advertising can be viewed at:
http://www.google.com/policies/technologies/ads/
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

11) TOOLS AND MISCELLANEOUS
11.1 Beeclever
This website uses the cookie consent tool “GDPR Legal Cookie“, supplied by beeclever GmbH, Universitätsstraße 3, 56070 Koblenz a. Rh., Germany („beeclever“), to obtain valid user consents for cookies and cookie-based applications. By incorporating a corresponding JavaScript code, users are shown a banner when calling up a page, in which consent for certain cookies and/or cookie-based applications can be given by ticking the respective box. The tool blocks all cookies requiring consent until the individual user gives corresponding consent. This ensures that such cookies are only set on the user's terminal device if consent is given.
To enable the cookie consent tool to clearly assign page views to individual users and to individually record, log and store the consent settings made by the user for a session, certain user information (including the IP address) is collected by the cookie consent tool when calling up our website, transmitted to beeclever servers and stored there.
This data processing takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the data processing described is Art. 6 para. 1 lit. c GDPR. As the data controller for this website, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information on data use by beeclever can be found at https://beeclever.de/pages/datenschutz
11.2 Trusted Shops Trustbadge
The Trusted Shops Trustbadge is included on this website to display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after placing an order.
In this way, our legitimate interests in an optimal marketing of our offer are protected, within the meaning of Art. 6 (1) point f GDPR. The Trustbadge and the services advertised with it are a service of Trusted Shops.
When the trust badge is called up, the web server automatically stores a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume, the requesting provider (access data), and it documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.
Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

12) RIGHTS OF THE DATA SUBJECT
12.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:
- Right of access by the data subject pursuant to Art. 15 GDPR: You shall have the right to receive the following information: The personal data processed by us; the purposes of the processing; the categories of processed personal data; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling and at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject; the appropriate safeguards pursuant to Article 46 when personal data is transferred to a third country.
- Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and/or the right to have incomplete personal data completed which are stored by us.
- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR: You have the right to obtain from the controller the erasure of personal data concerning you if the conditions of Art. 17 (2) GDPR are fulfilled. However, this right will not apply for exercising the freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to obtain from the controller restriction of processing your personal data for the following reasons: As long as the accuracy of your personal data contested by you will be verified. If you oppose the erasure of your personal data because of unlawful processing and you request the restriction of their use instead. If you require the personal data for the establishment, exercise or defense of legal claims, once we no longer need those data for the purposes of the processing. If you have objected to processing on grounds relating to your personal situation pending the verification whether our legitimate grounds override your grounds.
- Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right of rectification, erasure or restriction of processing against the controller, he is obliged to communicate to each recipient to whom the personal date has been disclosed any rectification or erasure of personal data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
- Right to data portability pursuant to Art. 20 GDPR: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to require that those data be transmitted to another controller, where technically feasible.
- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw your consent for the processing of personal data at any time with effect for the future. In the event of withdrawal, we will immediately erase the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
12.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
13) DURATION OF STORAGE OF PERSONAL DATA
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed on the basis of an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.

What information we collect

We may collect the following information about you:

Information You Provide

• Your profile information. You give us information when you register on the Platform, including your username, password, date of birth (where applicable), email address and/or telephone number, information you disclose in your user profile, and your photograph or profile video.
• User content. We process the content you generate on the Platform, including photographs, audios and videos you upload or create, comments, hashtags, feedback, reviews, and livestreams you make, and the associated metadata, such as when, where, and by whom the content was created (“User Content”). Even if you are not a user, information about you may appear in User Content created or published by users on the Platform. We collect User Content through pre-loading at the time of creation, import, or upload, regardless of whether you choose to save or upload that User Content, in order to recommend audio options and provide other personalized recommendations. If you apply an effect to your User Content, we may collect a version of your User Content that does not include the effect.
• Messages. We collect information you provide when you compose, send, or receive messages through the Platform’s messaging functionalities. They include messages you send or receive through our chat functionality when communicating with merchants who sell goods to you, and your use of virtual assistants when purchasing items through the Platform. That information includes the content of the message and information about the message, such as when it was sent, received, or read, and message participants. Please be aware that messages you choose to send to other users of the Platform will be accessible by those users and that we are not responsible for the manner in which those users use or share the messages.
• We may access content, including text, images, and video, found in your device’s clipboard, with your permission. For example, if you choose to initiate content sharing with a third-party platform, or choose to paste content from the clipboard into the Platform, we access this information stored in your clipboard in order to fulfill your request.
• Purchase information. When you make a purchase or payment on or through the Platform, including when you buy TikTok Coins or purchase goods through our shopping features, we collect information about the purchase or payment transaction, such as payment card information, billing, delivery, and contact information, and items you purchased.
• Your phone and social network contacts. If you choose to sync your phone contacts, we will access and collect information such as names, phone numbers, and email addresses, and match that information against existing users of the Platform. If you choose to share your social network contacts, we will collect your public profile information as well as names and profiles of your social network contacts.
• Proof of your identity or age. We sometimes ask you to provide proof of identity or age in order to use certain features, such as livestream or verified accounts, or when you apply for a Pro Account, ensure that you are old enough to use the Platform, or in other instances where verification may be required.
• Information in correspondence you send to us, including when you contact us for support or feedback.
• Information through surveys, research, promotion, contests, marketing campaigns, challenges, competitions or events conducted or sponsored by us, in which you participate.

Automatically Collected Information

• Usage Information. We collect information regarding your use of the Platform, e.g., how you engage with the Platform, including how you interact with content we show to you, the advertisements you view, videos you watch and problems encountered, browsing and search history, the content you like, the content you save to ‘My Favourites’, the users you follow and how you engage with mutual followers.
• Inferred Information. We also infer your attributes, including your interests, gender and age range for the purpose of personalising content.
• Technical Information we collect about you. We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, device IDs, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to the Platform.
• Location Information. We collect information about your approximate location, including location information based on your SIM card and/or IP address. With your permission, we may also collect precise location data (such as GPS). In addition, we collect location information (such as tourist attractions, shops, or other points of interest) if you choose to add location information to your User Content.
• Image and Audio Information. We may collect information about the videos, images and audio that are a part of your User Content, such as identifying the objects and scenery that appear, the existence and location within an image of face and body features and attributes, the nature of the audio, and the text of the words spoken in your User Content. We may collect this information to enable special video effects, for content moderation, for demographic classification, for content and ad recommendations, and for other non-personally-identifying operations.
• Cookies. We and our service providers and business partners use cookies and other similar technologies (e.g., web beacons, flash cookies, etc.) (“Cookies”) to automatically collect information, measure and analyze how you use the Platform, including which pages you view most often and how you interact with content, enhance your experience using the Platform, improve the Platform, provide you with advertising, and measure the effectiveness of advertisements and other content. We and our partners also use Cookies to promote the Platform on other platforms and websites. Cookies enable the Platform to provide certain features and functionality. Web beacons are very small images or small pieces of data embedded in images, also known as “pixel tags” or “clear GIFs,” that can recognize Cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device. To learn how to disable certain Cookies, see the “Your rights and choices” section below.

Information From Other Sources

We may receive the information described in this Privacy Policy from other sources, such as:

• If you choose to register or use the Platform using a third-party social network account details (e.g., Facebook, Twitter, Instagram, Google) or login service, you will provide us or allow to provide us with your username, public profile, and other possible information related to such account. We will likewise share certain information with your social network such as your app ID, access token and the referring URL. If you link your TikTok account to another service, we may receive information about your use of that service.
• Advertisers, measurement and other partners share information with us about you and the actions you have taken outside of the Platform, such as your activities on other websites and apps or in stores, including the products or services you purchased, online or in person. These partners also share information with us, such as mobile identifiers for advertising, hashed email addresses and phone numbers, and cookie identifiers, which we use to help match you and your actions outside of the Platform with your TikTok account. Some of our advertisers and other partners enable us to collect similar information directly from their websites or apps by integrating our TikTok Advertiser Tools (such as TikTok Pixel).
• We may obtain information about you from certain affiliated entities within our corporate group, including about your activities on their platforms.
• We may receive information about you from others, including where you are included or mentioned in User Content, direct messages, in a complaint, appeal, request or feedback submitted to us, or if your contact information is provided to us. We may collect information about you from other publicly available sources.
• We may receive information from merchants and payment and transaction fulfillment providers about you, such as payment confirmation details, and information about the delivery of products you have purchased through our shopping features.

How we use your information

As explained below, we use your information to improve, support and administer the Platform, to allow you to use its functionalities, and to fulfill and enforce our Terms of Service. We may also use your information to, among other things, personalise content you see on the Platform, promote the Platform, and customize your ad experience. We generally use the information we collect in the following ways:

• To fulfill requests for products, services, Platform functionality, support and information for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes and to solicit your feedback.
• To provide our shopping features and facilitate the purchase and delivery of products, goods and services, including sharing your information with merchants, payment and transaction fulfillment providers, and other service providers in order to process your orders.
• To personalise the content you see when you use the Platform. For example, we may provide you with services based on the country settings you have chosen or show you content that is similar to content that you have liked or interacted with.
• To send promotional materials, including by instant messaging or email, from us or on behalf of our affiliates and trusted third parties.
• To improve and develop our Platform and conduct product development.
• To measure and understand the effectiveness of the advertisements and other content we serve to you and others, and to deliver advertising, including targeted advertising, to you on the Platform.
• To support the social functions of the Platform, including to permit you and others to connect with each other (for example, through our Find Friends function) and to share whether you are active on the Platform (and other information which you choose to share) with your friends, to provide our messaging service if you choose to use this function, to suggest accounts to you and others, and for you and others to share, download, and otherwise interact with User Content posted through the Platform.
• To enable you to participate in the virtual items program.
• To allow you to participate in interactive features of the Platform, such as enabling your content to be used in other users’ videos.
• To use User Content as part of our advertising and marketing campaigns to promote the Platform, to invite you to participate in an event, and to promote popular topics, hashtags and campaigns on the Platform.
• To understand how you use the Platform, including across your devices.
• To infer additional information about you, such as your age range, gender, and interests.
• To help us detect and combat abuse, harmful activity, fraud, spam, and illegal activity on the Platform.
• To ensure content is presented in the most effective manner for you and your device.
• To promote the safety, security of the Platform, including by scanning, analyzing, and reviewing User Content, messages and associated metadata for violations of our Terms of Service, Community Guidelines, or other conditions and policies.
• To facilitate research conducted by independent researchers that meets certain criteria.
• To verify your identity or age.
• To communicate with you, including to notify you about changes in our services.
• To announce you as a winner of our contests or promotions if permitted by the promotion rule, and to send you any applicable prizes.
• To enforce our Terms of Service, Community Guidelines, and other conditions and policies.
• Consistent with your permissions, to provide you with location-based services, such as advertising and other personalized content.
• To train and improve our technology, such as our machine learning models and algorithms.
• To facilitate and fulfill sales, promotion, and purchases of goods and services and to provide user support.

How we share your information

We share your information with the following parties:

Business Partners

If you choose to register to use the Platform using your social network account details (e.g., Facebook, Twitter, Instagram, Google), you will provide us or allow your social network to provide us with your phone number, email address, username and public profile. We will likewise share certain information with the relevant social network such as your app ID, access token and the referring URL. If you choose to allow a third-party service to access your account, we will share certain information about you with the third party. Depending on the permissions you grant, the third party may be able to obtain your account information and other information you choose to provide.

Where you opt to share content on social media platforms, the video, username and accompanying text will be shared on that platform or, in the case of sharing via instant messaging platforms such as Whatsapp, a link to the content will be shared.

Service Providers

We provide information and content to service providers who support our business, such as cloud service providers and providers of content moderation services to ensure that the Platform is a safe and enjoyable place and service providers that assist us in marketing the Platform.

• Payment processors and transaction fulfillment providers: If you choose to buy Coins or conduct other payment related transactions, we will share data with the relevant payment provider to facilitate this transaction. For Coin transactions, we share a transaction ID to enable us to identify you and credit your account with the correct value in coins once you have made the payment.
• Analytics providers: We use analytics providers to help us in the optimisation and improvement of the Platform. Our third-party analytics providers also help us serve targeted advertisements.

Advertisers, Advertising Networks and Measurement Partners

We share information with advertisers and third-party measurement companies to show how many and which users of the Platform have viewed or clicked on an advertisement.

If you use the TikTok Lite version of TikTok, we share information with advertising networks to display personalised advertisements to you on the TikTok Lite app and elsewhere online. We are not responsible for the privacy practices of these third parties, and the information practices of these third parties are not covered by this Privacy Policy.

Independent Researchers

We share your information with independent researchers to facilitate research that meets certain criteria.

Our Corporate Group

We may also share your information with other members, subsidiaries, or affiliates of our corporate group, including to provide the Platform, to improve and optimise the Platform, to prevent illegal use and to support users.

For Legal Reasons

We will share your information with law enforcement agencies, public authorities or other organisations if legally required to do so, or if such use is reasonably necessary to:

• comply with legal obligation, process or request;
• enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
• detect, prevent or otherwise address security, fraud or technical issues; or
• protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).

Public Profiles

Please note that if your profile is public, your content will be visible to anyone on the Platform and may also be accessed or shared by your friends and followers as well as third parties such as search engines, content aggregators and news sites. You can change who can see a video each time you upload a video. Alternatively, you can change your profile to default private by changing your settings to 'Private Account' in “Manage my account” settings.

Sale, Merger or Other Business Transactions

We may also disclose your information to third parties:

• in the event that we sell or buy any business or assets (whether a result of liquidation, bankruptcy or otherwise), in which case we will disclose your data to the prospective seller or buyer of such business or assets; or
• if we sell, buy, merge, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, user information may be among the transferred assets.

Merchants, Payment and Transaction Fulfillment Providers, and Other Service Providers

When you make a purchase through our shopping features, we share the information related to the transaction with the merchant, payment and transaction fulfillment providers, and other service providers. For example, we will share the order items, contact details and delivery information so your order can be processed. These entities may use the information shared in accordance with their privacy policies.

Where we store your information

Your information may be stored on servers located outside the country where you live, such as in Singapore, Malaysia or the United States. We maintain major servers around the world to bring you our services globally and continuously.

Your rights and choices

You have rights and choices when it comes to your information. You may be afforded certain rights under applicable laws, which may include the right to access, delete, update, or rectify your data, to be informed of the processing of your data, to file complaints with authorities, and potentially other rights. You may submit a request to exercise your rights under applicable laws at https://www.tiktok.com/legal/report/privacy. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. Please also see the Supplemental Terms below on whether a local representative or local contact is available for your country.

You can access and edit most of your profile information by signing into TikTok. You can delete the User Content you uploaded. We also provide a number of tools in Settings that allow you to control, among others, who can view your videos, send you messages, or post comments to your videos. Should you choose to do so, you may delete your entire account in Settings.

You may be able to refuse or disable Cookies by adjusting your device browser settings. Because each browser is different, please consult the instructions provided by your browser. Please note that you may need to take additional steps to refuse or disable certain types of Cookies. For example, due to differences in how browsers and mobile apps function, you may need to take different steps to opt out of Cookies used for targeted advertising in a browser and to opt out of targeted advertising for a mobile application, which you may control through your device settings or mobile app permissions. In addition, your opt-out selection is specific to the particular browser or device that you are using when you opt out, so you may need to opt-out separately for each of browser or device. If you choose to refuse, disable, or delete Cookies, some of the functionality of the Platform may no longer be available to you.

The security of your information

We take steps to ensure that your information is treated securely and in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will use reasonable measures to protect your personal data, for example, by encryption, we cannot guarantee the security of your information transmitted via the Platform; any transmission is at your own risk.

We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk of varying likelihood and severity for the rights and freedoms of you and other users. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.

We will, from time to time, include links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to these websites.

How long we keep your information

We retain information for as long as necessary to provide the Platform and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Platform, and enhancing its safety, security and stability), and for the exercise or defence of legal claims.

The retention periods are different depending on different criteria, such as the type of information and the purposes for which we use the information. For example, when we process your information such as your profile information to provide you with the Platform, we keep this information for as long as you have an account. If you violate our Terms of Service, Community Guidelines, or other conditions or policies, we may remove your profile and User Content from public view immediately, but may keep other information about you to process the violation.

Information relating to children and teens

TikTok is not directed at children under the age of 13. In certain cases this age may be higher due to local regulatory requirements, please see your local supplemental terms for more information. If you believe that there is a user who is below this minimum age, please contact us at https://www.tiktok.com/legal/report/privacy.

If you are a parent or guardian, our Guardian's Guide contains information and resources to help you understand the Platform and the tools and controls you can use.

Privacy Policy update

We may update this Privacy Policy from time to time. When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at the top of this policy and posting the new Privacy Policy or providing any other notice required by applicable law. Your continued access to or use of the Platform after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Platform.

Contact

If you have questions, comments, complaints or requests regarding this Privacy Policy, please contact us at: https://www.tiktok.com/legal/report/privacy

Please also see the supplemental terms below on whether a local representative or local contact is available for your country.

We will endeavour to deal with your request as soon as possible. This is without prejudice to your right to make a complaint with a relevant data protection authority, where applicable.

Supplemental Terms – Jurisdiction-Specific

In the event of a conflict between the provisions of the Supplemental Terms – Jurisdiction-Specific that are relevant to your jurisdiction from which you access or use the services, and the rest of policy, the relevant jurisdictions’ Supplemental Terms – Jurisdiction-Specific will supersede and control.

Argentina

If you are using our services in Argentina, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this Policy, the following terms shall prevail.

Your rights and options

According to Law No. 25,326, Regulatory Decree No. 1558/2001 and the provisions and/or binding resolutions issued by the Agency for Access to Public Information ("AAIP"), you have the following rights with respect to your personal data: access, rectification and deletion regarding data protection. You can exercise your rights by sending your request to https://www.tiktok.com/legal/report/privacy free of charge.

We encourage you to contact us if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the AAIP. You can contact AAIP through the site: https://www.argentina.gob.ar/aaip/datospersonales/derechos.

Australia

If you are using the Platform in Australia, the following additional terms shall apply.

Certain entities in our corporate group, located outside of Australia, are given limited remote access to your information so that they can provide certain functions, as described in the section on "How we share your information". Please see here for further information on the countries in which our corporate group entities which receive personal information from Australia are located.

Brazil

If you are using the Platform in Brazil, the following additional terms apply. If any conflict arises between the main Privacy Policy and the additional terms, the following terms shall prevail:

Exercise of data protection rights. Brazilian law provides certain rights to individuals with regard to their personal data. Thus, we seek to ensure transparency and access controls in order to allow users to benefit from the mentioned rights.

We will respond and/or fulfill your requests for the exercise of your rights below, according to the applicable law and when applicable, to the Brazilian General Data Protection Law - LGPD:

I. confirmation of whether your data are being processed;

II. access to your data;

III. correction of incomplete, inaccurate or outdated data;

IV. anonymization, blocking or erasure of data;

V. portability of personal data to a third party;

VI. object to the processing of personal data;

VII. information of public and private entities with which we shared data;

VIII. information about the possibility to refuse providing personal data and the respective consequences, when applicable;

IX. withdrawal of your consent.

X. request a review of decisions made solely based on automated processing of personal data affecting your interests, including decisions made to define your personal, professional, consumer or credit profile, or aspects of your personality.

We encourage you to contact us if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD).

Verifying your identity: For your safety and to allow us to make sure that we do not disclose any of your personal data to unauthorized third parties, in order to verify your identity and guarantee the adequate exercise of your rights, we may request specific information and/or documents from you before we can properly respond to a request received concerning your data. All data and documents received from you in the process of responding to your requests will be used for the strict purposes of analyzing your request, authenticating your identity, and finally responding to your request.

Limitations to your rights: In certain situations, we may have legitimate reasons not to comply with some of your requests. For instance, we may choose not to disclose certain information to you when a disclosure could adversely impact our business whenever there is a risk of violation to our trade secrets or intellectual property rights. In addition, we may refrain from complying with a request for erasure when the maintenance of your data is required for complying with legal or regulatory obligations or when such maintenance is required to protect our rights and interests in case a dispute arises. Whenever this is the case and we are unable to comply with a request you make, we will let you know the reasons why we cannot fulfill your request.

Contact: In case of doubt about your privacy, your rights or how to exercise them, please contact us through the form "Contact". If you have any questions about the processing of your personal data, we would like to clarify them.

DPO: If you wish to reach the TikTok’s Data Protection Officer, contact us at: https://www.tiktok.com/legal/report/DPO

Access Logs. We keep your application access logs, under confidentiality, in a controlled and safe environment for at least 6 months, in order to comply with legal obligations.

Language. The Policy may have been prepared in the English language and in the Portuguese language. If you are a user located in Brazil, you shall refer to the Portuguese version, which shall prevail.

International Transfers. International data transfers are necessary for us to provide our services. If you are located in Brazil, we will always rely on one of the international data transfer mechanisms under applicable data protection laws and regulations.

Canada

If you are using the Platform in Canada, the following additional terms apply.

Your Rights. Subject to limited exceptions under applicable law, you have the right to access, update, rectify and correct inaccuracies in your personal information in our custody and control and to withdraw your consent to our collection, use and disclosure of your personal information. To exercise these rights, you may contact us using the contact information set out below. We may require certain personal information for the purpose of verifying the identity of the individual making the request.

Your Choices. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link included at the bottom of each email we send. You can also adjust your preferences regarding certain types of personalized advertising by using the Ads tools in Settings.

Transfer Outside Your Jurisdiction. We and our service providers (including members, subsidiaries, or affiliates of our corporate group) may access, store and otherwise process personal information outside of Canada (and, for residents of Quebec, outside of Quebec), including in the United States, Malaysia, Singapore, and other foreign jurisdictions where we or our service providers are located. For information about the manner in which we or our service providers (including service providers outside Canada) process personal data, please contact us using the contact information set out below.

Contact. If you are a resident of Canada, you can contact our Privacy Office at https://www.tiktok.com/legal/report/Privacy-Office-Canada

Egypt

If you are using our services in Egypt, the following additional terms apply.

• You declare that you are over the age of 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged TikTok's Privacy Policy and Terms of Use and agree to the use by your child of the Platform and registration for an account.

India

If you are using our services in India, the Platform is provided and controlled by ByteDance (India) Technology Private Limited. TikTok is our brand for providing and promoting the services. When using these services from India, please accordingly read “TikTok”, “we” or “us” in this policy to refer to Bytedance (India) Technology India Private Limited.

Indonesia

If you are using our services in Indonesia, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Age, Parental and Guardian Consent. By accessing and/or using this Platform, you represent that you are at least 21 years of age or married or not under guardianship. If you are below 21 years old and you are not married, or under guardianship:

• you must obtain approval from your parent(s) or legal guardian(s); and
• your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the Platform; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the Platform will not, in any event, result in any violation of applicable laws and regulations relating to child protections.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or guardian(s) is not willing to open the account under their name, you must cease accessing the Platform.

Your Choices. You may withdraw your consent to TikTok's disclosure of personal data to third parties. Upon your request, we will cease to display, publish, transmit, disseminate, and/or open the access to your personal data to third parties. Please note that by withdrawing your consent to the disclosure and/or collection of your personal data, we may not be able to fulfill your requests and you may not be able to use some of TikTok features and functionality.

You may request TikTok to (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some of TikTok’s features and functionality.

To exercise any of your rights, contact us at: https://www.tiktok.com/legal/report/privacy.

Notification. In the event of any breach of personal data, we will notify you and provide you with information regarding such breach of personal data.

Data retention. We retain your information for as long as it is necessary to provide you with the service. Where we do not need your information in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose in keeping such data. However, there are occasions where we are likely to keep this data for five (5) years (or longer if required) in accordance with our legal obligations or where it is necessary for the establishment, exercise or defence of legal claims.

After you have terminated your use of our Platform and the five (5) years retention period has lapsed, we store your information in an aggregated and anonymised format. Non-personally identifiable information may be retained indefinitely for analytics.

Israel

If you are using our services in Israel, the following additional terms apply.

• You declare that you are over the age of 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged TikTok's Privacy Policy and Terms of Use and agree to the use by your child of the Platform and registration for an account.

Japan

If you are using our services in Japan, please refer to our Japanese language Privacy Policy for further information on our compliance with the Telecommunications Business Act.

Mexico

If you are using our services in Mexico, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

How we use your personal data.

Almost all purposes of processing stated in this section of the main Privacy Policy are necessary purposes. However, the following are secondary purposes:

• Provide you with personalized advertising.

The above purposes are not necessary for us to provide the Platform but allows us to provide you with a better experience. We offer you the possibility to take decisions regarding how we use and disclose your personal data. You can always limit the secondary purposes of personalised advertising by using the tools in Settings that allow you to limit certain functions.

We use both human and automated means to process your data.

How we share your personal data.

We may share your personal data to a third party for purposes other than processing on behalf of us. We will obtain your consent for such sharing as required by applicable laws.

By providing us with your personal data and using our Platform you agree to the transfers that require your consent. You can always revoke your consent and exercise your rights, as stated below.

Your Rights.

You have the following rights with respect to your personal data: access, rectification, cancellation, opposition, consent withdrawal, limitation to the use and disclosure of your data. You can exercise your rights by sending your request to https://www.tiktok.com/legal/report/privacy. To know more about the applicable requirements and procedure to exercise your rights, contact us to the mentioned email address. If you are under 18 years, you may exercise your rights through a parent or guardian. Your rights requests will be resolved as soon as possible according to the nature of your request.

Information relating to children.

You may review our parental consent section in the Terms of Service.

Philippines

If you are using our services in the Philippines, the following additional terms shall apply pursuant to the relevant laws, rules and regulations and issuances by the Philippines National Privacy Commission (“NPC”) on data privacy.

Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, you shall have the right to information, object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages and data portability. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Russia

What are legal grounds for data processing. When we process your personal data, we rely on the grounds of your consent, performance of a contract, our legitimate interest and obligations to process personal data, or when we are so required by law.

By signing up and using the Platform, you consent to the processing of personal data in accordance with this Privacy Policy.

Where we store your personal data. Your personal data may be transferred from Russia to Singapore and stored in that location, outside of the country where you live.

Public profiles. We rely on your consent to public distribution of personal data, when your account settings are 'Public Profile'. You can change your profile to private by changing your settings to 'Private Account' in “Manage my account” settings.

South Africa

If you are using our services in South Africa, the following additional terms apply.

You declare that you are over the age of 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged TikTok's Privacy Policy and Terms of Use and agree to the use by your child of the Platform and registration for an account.

South Korea

If you are using our services in South Korea, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

• How we share your personal data. In addition to the main text of this policy, in the event we use information such as user-generated content and video content on our Platform as part of our advertising and marketing campaigns to promote the Platform, your personal data contained in such information may be disclosed to the recipients of such advertising or marketing content.
• Customized Ads. We may from time to time provide customized ads on our Platform to provide you our Platform for free.
• Data retention. We destroy personal data whose purpose of collection as consented to by you have been achieved, or whose periods of and use to which you consented to or which were provided in this privacy policy have expired; provided, however, we will continue to store your personal data for the following statutorily-prescribed periods, where applicable, including, but not limited to:Act on Consumer Protection in Electronic Commerce. Records on your cancellation of an order, your payment on a purchased item, and our supply of a good/service: 5 years; Records on the handling of consumer complaints or disputes: 3 years; Records on advertisements and labels: 6 months.Protection of Communications Secrets Act. Records on your visits to our website: 3 months
• Destruction of Personal data. We destroy your personal data in a manner that renders it unrestorable by the relevant department.
• Data rights. You have the right to access personal data we hold about you, to rectify any personal data held about you that is inaccurate, to request the deletion of personal data held about you, and the right to request the suspension of the processing of your personal data. You can exercise your rights by contacting us at https://www.tiktok.com/legal/report/privacy.
• Data Security. We work hard to protect TikTok and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. To this end, we have in place technical, managerial and physical safeguards, including internal policy for data protection, limiting the access to personal data on a need-to-know basis and controlling access to the facilities where personal data is processed.
• Information Relating to Children. TikTok is not directed at children under the age of 14.
• Entrustment and/or Overseas Transfer of Personal Data. We entrust your data to our affiliates, cloud storage providers, IT service providers, and data centers, some of whom are located abroad (See the Korean language Privacy Policy), subject to your consents or notifications to you, if applicable. The entities receiving and processing your data are committed to using and storing personal data in compliance with domestic and international regulations and to taking all available physical and technical measures to protect personal data. You may opt-out of such transfer so long as the transfer is not necessary to provide you with the Service, by contacting us here.
• Local representative pursuant to the Personal Information Protection Act. Please send your inquiries concerning privacy issues in South Korea to our local representative pursuant to the Personal Information Protection Act. Contact details are as follows.

Bae, Kim and Lee LLC

Representative: Yangho Oh

Address: Tower B, Centropolis, 26 Ujeongguk-ro

Jongno-gu, Seoul 03161, Korea

Phone: +82-2-3404-0108

Email: privacytiktok@bkl.co.kr

• Local representative pursuant to the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc..

Bae, Kim and Lee LLC

Representative: Yangho Oh

Address: Tower B, Centropolis, 26 Ujeongguk-ro

Jongno-gu, Seoul 03161, Korea

Phone: +82-2-3404-0108

Email: tiktok.kr.itnetwork@bkl.co.kr

Türkiye

If you are using our services in Turkiye, the following additional terms apply along with the contents of the foregoing Policy. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller Representative. You may contact our data controller representative in Turkiye by email or mail to handle questions and complaints in connection with the processing of your personal data if you are in Turkiye.

ESİN ATTORNEY PARTNERSHIP

tiktok@esin.av.tr*

AKAT MAHALLESİ GÜL SOKAK NO: 2/1 34335 BEŞİKTAŞ/İSTANBUL, TÜRKİYE

*This e-mail address is only a communication channel for your requests and/or complaints relating to the processing of your personal information within the scope of this Privacy Policy and the Law on Protection of Personal Data No. 6698.

If you want to reach out to us for account management issues such as failure to access to your account, password issues, impersonations or if you want to report content, a comment(s), a message(s), a LIVE video(s) or any other feature in TikTok, you can always contact us via https://support.tiktok.com/en/safety-hc/report-a-problem.

Methods of collection, processing purposes of, and legal bases for, processing your personal data. Please refer to our Privacy Policy (in Turkish) and its Addendum, for detailed information about personal data categories we process, our processing purposes and related legal bases for processing.

Your rights. According to Article 11 of the Data Protection Law, you have the following rights with respect to your personal data:

• the right to learn whether we process your personal data,
• the right to request information with regard to such processing, if we process your personal data,
• the right to learn the purposes of the processing and whether they are used for such purpose or not;
• the right to know the third parties within or outside the country, to whom we transfer your personal data,
• the right to request correction of incomplete or inaccurate personal data,
• the right to request deletion or destruction of your personal data under the conditions set forth in Article 7 of the Data Protection Law,
• the right to request that we notify the third parties, to whom we transferred your personal data, about the correction, deletion and/or destruction of your personal data per your request within the scope of the foregoing two items,
• the right to object to the negative results about you that are due to the analysis of your personal data processed solely by automated means,
• the right to claim indemnification for damages incurred due to illegal processing of your personal data.

You may exercise your rights listed above by contacting us at: https://www.tiktok.com/legal/report/privacy.

The requests found in your application will be resolved as soon as possible according to the nature of your request and within thirty days at the latest free of charge. However, if your request incurs additional cost to our company, then you may be charged over the tariff fee determined by the Turkish Personal Data Protection Board.

Cookies. Please refer to our Turkish Privacy Policy for further information on our use of cookies on our website.

Amendments. The following sections of the Policy do not apply to individuals in Turkiye:

The following sentence at the end of the second paragraph of the introduction section: If you do not agree with this policy, please do not use this Platform.

Language. This policy is available in English and Turkish. If there is any inconsistency or different interpretation between the English and Turkish versions, the Turkish text shall prevail.

United Arab Emirates

If you are using the Platform in the United Arab Emirates (“UAE”), the following additional terms apply. If any conflict arises between the main Privacy Policy and the additional terms, the following terms shall prevail:

How we share your personal data

In addition to the main text of this policy, by using the Platform in the UAE you agree to the terms of this Privacy Policy and consent to our sharing of your personal data in line with the main text of this Privacy Policy.

Governing law and dispute resolution

By using our Platform in the UAE, this Privacy Policy will be governed by and interpreted in accordance with the laws of the UAE. In the event of a dispute arising between the parties in connection with this Privacy Policy:

• where the dispute relates to a claim for a sum within the limits specified by the DIFC Small Claims Tribunal from time to time, then the dispute shall be referred by either party to the said Tribunal; and
• for all other disputes, the parties shall seek settlement of that dispute by mediation in accordance with the Mediation Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause. If the dispute is not settled by mediation within 30 days of the commencement of the mediation, or such further period as the parties shall agree in writing, the dispute shall be referred to and finally resolved by arbitration under the Arbitration Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause. The language to be used in the mediation and in the arbitration, shall be English. In any arbitration commenced pursuant to this clause the number of arbitrators shall be one and the arbitration shall be conducted in Dubai.

Vietnam

If you are using our services in Vietnam, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Methods of processing your personal data. We may process your personal data by manual or automated methods.

Data subject's rights and obligations. Subject to certain exceptions, you have statutory rights and obligations under applicable laws. In particular, you have the following statutory rights:

• Right to know;
• Right to consent and withdraw consent;
• Right to access;
• Right to delete data;
• Right to restrict data processing;
• Right to be provided with data;
• Right to object data processing;
• Right to complain, denounce or initiate lawsuits;
• Right to claim for damages; and
• Right to self-protection.

You may exercise these rights by contacting us through the details in the Contact section, and we will respond to your requests regardless of the location in which your data is stored.

You have the following statutory obligations:

• Protect your own personal data;
• Request other relevant organizations and individuals to protect your personal data;
• Respect and protect personal data of others;
• Provide complete and accurate personal data upon giving consent to the processing of your personal data; and
• Other obligations under applicable laws.

Age, Parental and Guardian Consent. If you are below 16 years old or under guardianship:

• you must obtain approval from your parent(s) or legal guardian(s); and
• your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the Platform; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the Platform will not, in any event, result in any violation of applicable laws and regulations relating to child protections.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or legal guardian(s) is not willing to open the account under their name, you must cease accessing the Platform if you are not at least 16 years of age.