Privacy policy for TikTok

1 General information and scope of application

This data protection information applies to the processing of personal data in the context of accessing and using the profiles of Sebapharma GmbH & Co. KG (hereinafter "Sebapharma") on www.tiktok.com and sister sites (hereinafter "TikTok channel").

The TikTok channel is made available to Sebapharma by TikTok Technology Limited (hereinafter "TikTok Ireland") and Sebapharma operates it with a corresponding user account. The TikTok channel gives Sebapharma the opportunity to present itself to TikTok users and to get in touch with them.

2 Responsible party

Sebapharma (hereinafter also referred to as the operator) is responsible for the processing of your personal data in the context of the use of the TikTok channel.

In addition, TikTok Ireland together with TikTok Information Technologies UK Limited (hereinafter "TikTok UK" and for both together "TikTok") processes personal data for its own purposes each time the TIkTok services are used. Sebapharma has no influence on this data processing and TikTok acts as the sole controller. Sebapharma is jointly responsible with TikTok for the processing of so-called Insights data.

2.1.1 You can reach Sebapharma at:

Sebapharma GmbH & Co. KG
Represented by the general partner Sebapharma Verwaltungs GmbH,
which in turn is represented by the managing directors Thomas Maurer and Dr Daniel Rothoeft
Binger Str. 80
56154 Boppard
Telephone: +49 (0) 6742 - 9000
Fax: +49 (0) 6742 - 9001 76
E-mail: info@sebamed.de

2.1.2 The contact details of TikTok Ireland are:

TikTok Technology Limited
10 Earlsfort Terrace
Dublin, D02 T380
Ireland
E-mail: dach@tiktok.com

2.1.3 The contact details of TikTok UK are:

TikTok Information Technologies UK Limited
One London Wall
London, EC2Y 5EB
United Kingdom

3 Data protection officer

You can contact our data protection officer at datenschutz@sebamed.de and on +49 7071 5654038.

TikTok has also appointed a data protection officer. You can contact him here.

4 Details on data processing

4.1 Interaction with the TikTok channel

If you are logged into your personal TikTok account, you can interact with the operator of the TikTok channel (e.g. like or comment on a post). The associated data is processed by the operator (e.g. your username and profile picture).

The operator uses this data to optimize the content offered and its presentation and to adapt it to the respective user interests. This data processing takes place in accordance with Art. 6 Para. 1 f) GDPR (legitimate interest). The legitimate interest arises from the purpose of optimizing our TikTok channel and the content published there.

4.2 General use of TikTok

When you use TikTok's services, TikTok processes your personal data. This includes data such as your IP address, location data, time zone settings, advertising IDs, app and browser versions and data about your device (system, network type, device ID, screen resolution, operating system, audio settings and connected audio devices). The TikTok profiles and channels you have accessed, likes, messages and other usage data are also processed. If you are logged in with your own TikTok account, this data will be assigned to your account.

Further information on the processing of your data via TikTok can be found in TikTok's privacy policy.

4.3 Insights data

Insights data is also processed when the TikTok channel is accessed and used. This data provides information about how many users have accessed the TikTok channel or posts at what time. The data is provided to Sebapharma in aggregated form as statistics. It is not possible for Sebapharma to identify you personally or assign you to your account.

Further information on Insights data can be found here.

Please note that Insights data may also be collected from you, even if you do not have your own TikTok account.

The permissibility of this processing is based on Art. 6 para. 1 f) GDPR (legitimate interest). By evaluating the anonymized Insights data, Sebapharma aims to optimize the content of the channel and thus attract more users. The Insights data contributes to this.

4.4 Communication via the fan page functions

It is possible to contact the operator via the TikTok channel using direct messages, the Like function, or comments. As part of this contact, the name that is stored as the username in your profile is displayed.

The permissibility of this processing is based on Art. 6 para. 1 f) GDPR (legitimate interest). Communication with users is particularly important to Sebapharma in order to answer questions, respond to criticism, build a relationship, and exchange information. This is the only way the operator can improve its services and respond to customer needs. Communication via social media is an important component in reaching younger customers in particular. Comments are stored on the channel for an unlimited period of time and can be viewed by other users. The same applies to the use of the Like function and direct messages.

4.5 Competitions and product tests

The operator regularly organizes competitions and product tests via its TikTok channel. As a rule, participation requires posting a comment under the relevant competition or contacting Sebapharma using your own account. Once the winners have been determined, they will be contacted by Sebapharma by direct message for the purpose of distributing the prize. Various data (e.g. title, first name, surname, street, postcode, city) required for the implementation of the competition or product test will be requested.

The permissibility of this processing is based on Art. 6 para. 1 f) GDPR (legitimate interest). The operator organizes competitions to publicize its products and attract new customers. The provision of your data is required for participation. If you do not provide your data, you will not be able to take part in the competition or product test.

5. Recipient

The data collected when you access and use the TikTok channel and the information you provide when contacting us will be transmitted to TikTok and stored there. Your data may also be viewed by Sebapharma employees who are involved in maintaining the TikTok channel and who respond to your messages.

Some of your personal data collected by TikTok is transferred to TikTok servers in so-called third countries outside the European Union, where no comparable level of data protection can be guaranteed and stored there. The transfer of data to such a third country, such as the USA or China, is permitted under the conditions of Art. 46 GDPR and on the basis of the standard contractual clauses effectively included in the contractual relationship with TikTok. These have been approved by the European Commission and guarantee adequate protection of your personal data. Further information can be found here.

6 Storage period

The data collected when accessing and using the TikTok channel is not stored by Sebapharma on its own systems. The data is stored by TikTok in accordance with its own data protection regulations. Further information on this can be found directly at TikTok: https://www.tiktok.com/legal/privacy-policy-eea?lang=de.

If you take part in one of the competitions or product tests organized by Sebapharma, your data will be deleted after the end of the competition or product test together with the communication that has taken place in TikTok. The comments under the competition on the TikTok channel will not be deleted.

Sebapharma will not store the data relating to your other interactions with the TikTok channel.

7 Rights of data subjects

You have the following rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

If your personal data is processed on the basis of Art. 6 para. 1 f) GDPR, you have the right to object if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising (Art. 21 GDPR). If you object to direct advertising, we will no longer send you any advertising messages.

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Contact details for the supervisory agency:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz

Postfach 30 40
55020 Mainz
Telefon: +49 (0) 6131 8920-0
E-Mail: poststelle@datenschutz.rlp.de