We operate a TikTok company account using the technical platform and services of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter: "TikTok").
1. Controller and Data Protection Officer
The controller for the processing of your personal data described below in accordance with Art. 4 No. 7 GDPR is:
Rhenus SE & Co. KG
Rhenus-Platz 1
59439 Holzwickede
E-Mail: info[at]rhenus.com
Insofar as TikTok processes personal data when visiting the information service (e.g. your IP address and other information stored on your device, e.g. in the form of cookies), TikTok is the sole controller under data protection law (see section 4 below).
In addition, there is joint responsibility for the use of the TikTok analytics functions within the meaning of Art. 26 GDPR (see section 5 below).
You can reach our data protection officer by e-mail to dataprotection[at]rhenus.com or by post at the above address of the controller with the addition "To the data protection officer".
2. Purpose and legal basis for data processing
We operate a TikTok‑company account to provide information about our company, represent our company culture, and communicate career opportunities and open positions.
Personal data is processed for the purpose of presenting the company, providing information about the corporate culture and everyday working life, and strengthening the employer brand (employer branding). In addition, the TikTokAccount is used to provide information about career opportunities and vacancies, especially for student activities, internships and entry-level positions, as well as to communicate with interested users via the interaction functions provided by TikTok. In addition, aggregated statistics and reach data are used to analyze the effectiveness of the published content and to further develop corporate communications in a targeted manner.
The processing is carried out on the basis of Art. 6 (1) (f) GDPR, as the company has a legitimate interest in up-to-date public relations, corporate presentation and personnel recruitment. If employees are depicted in image or video formats, the processing is carried out on the basis of voluntarily given consent in accordance with Art. 6 (1) (a) GDPR. If inquiries are made via the TikTok account in connection with a possible employment relationship, the processing is also carried out on the basis of Art. 6 (1) (b) GDPR within the framework of pre-contractual measures.
3. Contact requests and visitor activity
If you comment, share or otherwise react to one of the posts on TikTok, we process personal data. This includes your TikTok user data (in particular display name, username, profile picture), the content of the comments you have made and the related metadata (in particular the date on which you posted the respective comment). If you also follow our account on TikTok, we also process this information.
If you contact us via TikTok chat to find out more about our services or To share your feedback, we process your personal data on the basis of our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR and, if applicable, Art. 6 (1) (b) GDPR, if your request is aimed at concluding a contract (e.g. on employment).
As a rule, we receive the following data from you:
- Last name, first name,
- gender;
- age, place of residence (if they are public);
- information that you provide to us in your message or comment;
- If you have reacted to our post and type of reaction, or you have shared or commented on it.
- Followers: Number of people who follow Rhenus - including growth and development over a defined time frame.
- Reach: Number of people who see a specific post. Number of interactions on a post.
- Ad performance: How many people were reached and engaged with a post or paid ad?
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no statutory retention obligations to the contrary. For personal data from messages, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
In addition, we may store the above data if and for as long as this is necessary for legal proceedings or to fulfil retention obligations.
4. Processing of personal data by TikTok
You can access our social media fan pages regularly on the Internet at any time, regardless of whether you have created a user account on the respective platform yourself or not. If you are logged into your TikTok account, TikTok can assign this to your TikTok account. In both cases, however, your data will be processed by the social network's internet platforms.
When you visit this information service, TikTok collects, among other things: Your IP address and other information that is available on your device, for example in the form of cookies. The data collected about you in this context will be processed by TikTok and, if necessary, transferred to countries outside the European Economic Area. TikTok is the sole controller of this data processing under data protection law.
TikTok describes more detailed information on data processing by TikTok in its privacy policy. There you will also find information about contact options for TikTok, how you can assert your rights against TikTok and links to, among other things, TikTok's cookie policy. The privacy policy and further information are available at the following link: https://www.tiktok.com/legal/page/eea/privacy-policy/en .
In its cookie policy, TikTok explains how it uses and uses cookies. TikTok uses cookies for both registered and unregistered users. The German Federal Office for Information Security (BSI) provides information on how to limit cookies on your device: https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Cyber-Sicherheitsempfehlungen/Updates-Browser-Open-Source-Software/Der-Browser/JavaScript-Cookies-Fingerprints/javascript-cookies-fingerprints_node.html.
For information on how to manage your privacy settings on TikTok or delete your account, please visit the following TikTok support pages: https://support.tiktok.com/en/account-and-privacy.
According to TikTok, it stores data for as long as it is necessary to provide the platform and for the other purposes mentioned in TikTok's privacy policy. According to TikTok, it also retains the data if it is necessary to comply with contractual and legal obligations, if TikTok has a legitimate business interest in doing so, and for the assertion or defense of legal claims.
5. TikTok Analytics Features
For our TikTok page, we receive evaluations, so-called "page insights", via TikTok's "TikTok Analytics" function, which enable us to analyze reach and interaction, but not to identify individual users. This is aggregated anonymous data (reports) that tells us how people interact with our page. Page insights may be based on personal data collected in connection with a visit or interaction on our TikTok page. They include aggregated usage statistics with, for example, the following information, see in detail here:
- Reach: Number and development of people who view a certain content, post, ad, etc.; Number and development of interactions (likes, shares, etc.) of users with a certain content, post; from this, it can be deduced, for example, which content or posts are better received than others.
- Followers: Number and development of people who follow our page over a certain period of time
TikTok compiles the statistics on the basis of usage data, to which we have no access. We use the statistical information to learn what content is well received by our users and what interests our users have. This allows us to adapt the offers and posts on our site to the needs of our users and to continuously improve our page in a way that is tailored to the target group.
We cannot assign the statistical usage data to a specific profile or user or draw other conclusions about an individual user. You can use your TikTok settings to decide in which form targeted advertising is displayed to you. Under Advertising Settings, you can adjust your advertising preferences independently in your user account.
There is joint responsibility for the processing of Page Insights data in accordance with Art. 26 GDPR between us and TikTok, as TikTok also collects personal data about user interactions with our company account. According to the requirement of Art. 26 GDPR, an agreement for joint responsibility has been concluded. The agreement can be found here: TikTok Analytics Joint Controller Addendum
The legal basis for the storage of the insights data on our part is the balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR, so that the fan page is optimized and designed to be attractive for visitors.
6. Data recipients and transfers to third countries
TikTok transmits some of the information collected to partners or group companies in unsafe third countries. TikTok bases the transfer on the EU Commission's standard contractual clauses to ensure an adequate level of data protection. TikTok undertakes to comply with the European level of data protection through the standard contractual clauses, even if the data is processed in unsafe third countries.
7. Rights of data subjects
You have the right to request information about the data stored about you (Art. 15 GDPR). In addition, you can request the correction or deletion of your data (Art. 16, 17 GDPR). You may have a right to restriction of the processing of your data as well as a right to the release of the data you have provided in a structured, commonly used and machine-readable format, provided that this does not impair the rights and freedoms of other persons (Art. 18, 20 GDPR). In addition, you also have the option of contacting a data protection supervisory authority with a complaint, Art. 77 GDPR.
If you have given us consent to the processing of your personal data, you can revoke this consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or we need your data to assert, exercise or defend legal claims
To exercise these rights, please contact the above-mentioned responsible body or data protection officer.
As part of the joint responsibility with TikTok (regarding TikTok analytics functions), you can assert your rights as a data subject in accordance with Art. 15, 16, 17, 18, 20, 21 GDPR both with TikTok and with us. Since only TikTok has direct access to user data, it is recommended to contact TikTok directly for data protection requests. In cases where TikTok is responsible for data processing (see under 4.), please contact TikTok directly to assert your rights as a data subject. For more information on the scope and processing of your personal data, please refer to TikTok's Data Policy and Terms of Service .