PRIVACY POLICY

FOR TIKTOK FAN PAGES

1. TIKTOK

As the operator of the TikTok profile “(ortovox)”, we, ORTOVOX Sportartikel GmbH, together with the operator of the social network TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland), are the responsible authority within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR). When users visit our TikTok profile, personal data is processed by the responsible authority. In the following passages, we provide information about what kind of data is involved, how we process it and what rights you have in this regard.

You can find TikTok’s privacy policy at: https://www.tiktok.com/legal/page/eea/new-privacy-policy/en

Here you can find more information about the individual data protection settings: https://support.tiktok.com/de/account-and-privacy/account-privacy-settings. As the responsible authority for this page, we have made agreements with TikTok which, among other things, specify the conditions for using the TikTok page. The authoritative terms are the joint controller terms, which TikTok provides under the following link: https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

On the one hand, the processing of information will, among other things, enable Facebook to improve its ad system, which it distributes via its network. On the other hand, it will enable us, as operators of the Instagram page, to obtain statistics generated by Facebook based on visits to our Instagram page. This allows us to direct our marketing accordingly. For example, this allows us to obtain knowledge of the profiles of visitors who like our Instagram page or who use the page's applications, which enables us to provide them with more relevant content and develop functions that could be of greater interest to them.

In order for us to better understand how we can use our Instagram page to better achieve our goals, the collected information is also used to generate and provide us with geographical and demographical analyses. We can use this information to place our interest-based advertising selectively without receiving direct knowledge of the user’s identity. Insofar as visitors use Facebook on multiple devices, collection and analysis can also be carried out across devices if the respective visitor is registered and logged in with their own user profile.

The generated visitor statistics are passed on to us in anonymized form only. We have no access to the underlying data.

a. Type of personal data, scope and purpose

Your personal data can be collected using cookies on our TikTok page regardless of whether or not you have a TikTok account. Cookies are data packets that assign a certain identifier to a user’s computers, smartphones and other devices. They are regularly saved to the user’s device when they visit a Tik Tok page, including this one. The information saved in the cookie is received, recorded and processed by TikTok, in particular when the user visits TikTok services, services provided by other members of the company group, and services that are provided by other companies that use the TikTok services. Furthermore, other agencies such as TikTok partners or even third parties can use cookies on TikTok services to provide services to companies that are advertising on TikTok. More detailed information on TikTok’s use of cookies can be found in the TikTok privacy policy.

b. Legal basis for data processing

The collection of your data using cookies as part of your use of the social media channel is neither legally nor contractually required. Neither is it necessary for conclusion of a contract. Therefore, you are under no obligation to transmit your data to TikTok. However, not transmitting your data (e.g. by disabling cookies) will result in us being unable to provide our social media channel to you, or only being able to provide it to a limited extent.

The legal basis for the use of technically necessary cookies for the connected storage of information on your device and the subsequent retrieval of this information is § 25(2)(2) TTDSG (German Telecommunications Telemedia Data Protection Act). The basis for the subsequent processing of your data is our legitimate interest in the optimized presentation of our company in accordance with Article 6(1)(f) GDPR. We operate this TikTok page to present ourselves to, and communicate with, TikTok users and other interested parties visiting this TikTok page. If you disable strictly necessary cookies, it is possible that we will be unable to fully display our TikTok profile.

TikTok requires your consent to place cookies that are not technically necessary. If, on the basis of a notice provided by TikTok (“cookie banner”), you have consented to the use of cookies that are not technically necessary, the legal basis for the connected storage of information on your device and the subsequent retrieval of this information is § 25(1)(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw this consent at any time by deactivating the cookies in your browser settings or in the “COOKIE SETTINGS”. The basis for the subsequent processing of your data is your explicit consent in accordance with Article 6(1)(a) GDPR. You can also withdraw this consent at any time by deactivating the cookies in your browser settings or in the cookie consent manager.

The data retention period is set to [please set]. Any cookies placed have a duration of [please set].
 

2 Data Transfer

As part of the use of our social media services, personal data could be transmitted to countries outside of the EU/EEA, in particular to the USA. To guarantee adequate protection of your personal data in the case of transmission of personal data to third countries, we have concluded “EU-US standard contractual clauses” with the abovenamed supplier. The Court of Justice of the European Union regards the USA as a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without the appropriate guarantees, there is a risk in particular that your data could be processed by US authorities for control and monitoring purposes, possibly also without a means of redress. Moreover, whenever possible, we are in contact with the service provider to ensure the protection of your personal data with additional measures where necessary.

3. Nature of joint control

Joint control means, in particular, that access requests and the assertion of other data subject rights can be claimed both from the respective provider and from us. However, it makes most sense to claim these directly from the provider. This is because social network providers alone have immediate access to the required information, and can also immediately take any action deemed necessary and provide information. Should you require our support, however, we can be contacted at any time.

More information about our contact data and the rights of affected parties can be found in the privacy policy above.

Version: Juni 2023