Kluazula TikTok

Information on the processing of personal data in connection with visiting or using the functionality of the profile “Magnicity Warsaw” on the TikTok portal

Personal data controller
Contacting the Administrator
Purposes and basis of processing
Data sources
Data categories
Recipients of data
Processing outside the EEA
Data retention period
Your entitlements
The right to file a complaint
Voluntariness of providing data
Profiling

1. personal data controller

a) within the framework of visiting or interacting by users of the TikTok platform with the profile of Magnicity Warsaw, is Magnicity Warsaw spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, 59 Złota Street, 00-120 Warsaw, registered in the register of entrepreneurs, kept by the District Court for the Capital City of Warsaw in Warsaw, XII Economic Department of the National Court Register, under KRS number: 0001043051, NIP: 5252961210, REGON: 525637863 (“Administrator”), (b) with respect to processing of statistical data regarding users’ activity on the profile, interaction with its content, as well as data collected when displaying embedded TikTok content (including but not limited to. IP addresses, device identifiers, language settings, browser type, location data) and in connection with the use of functions provided by TikTok, such as publishing content (videos, photos, LIVE broadcasts), commenting, liking, sharing, watching, sending private messages, using the Duet and Stitch features or other interactions with the Administrator’s content, the data controller is jointly the Administrator and TikTok Technology Limited, based in Ireland, and TikTok Information Technologies UK Limited, based in the United Kingdom (collectively, “TikTok”), acting as joint controllers. (c) TikTok’s data processing rules and information on co-management, including the division of responsibilities for the exercise of data subjects’ rights, are available in TikTok’s privacy policy at: https://www.tiktok.com/legal/page/eea/privacy-policy.

2 Contacting the Administrator

The Administrator can be contacted by mail at the registered office address given above, as well as by email at info@highllnewarsaw.org.

3. purposes and basis of processing

Personal data processed in connection with visiting or interacting by users of the TikTok platform with the “Mag Warsaw” profile will be processed for the purpose of: (a) profile administration and management, including:

Supervision of published content (videos, LIVE broadcasts, comments) to ensure order and security of users, prevent fraud and ensure the security of the ICT environment,
to respond to comments, private messages and other user interactions for proper communication,
Analysis of profile user activity, including data on the number of interactions (likes, comments, shares, tags, followers) for analytical and statistical purposes, enabling better tailoring of content and communication strategy,
conduct marketing and promotion of products and services of the Administrator and its group companies, including identification of users interested in a particular topic and activities to increase the number of observers and active members of the profile community,

on the basis of the Administrator’s legitimate interest, which is the marketing of its own products and services and those of the Administrator’s group companies, ensuring the continuity of business communications and taking care of the brand image of the Administrator and the Administrator’s group companies (Article 6(1)(f) RODO); b) conducting communication through the tools of the TikTok platform (private messages, comments, tags) – on the basis of the Administrator’s legitimate interest (Article 6(1)(f) of the RODO) consisting in maintaining contact with people interested in the Administrator’s business and taking care of the quality of cooperation with clients and other entities; (c) to establish, assert or defend against claims on the basis of the Administrator’s legitimate interest in securing information for the purpose of proving certain facts, establishing, asserting and defending against claims (Article 6(1)(f) RODO). d) in the scope of co-administration with TikTok – processing of data for statistical and analytical purposes concerning the use of the profile, interaction with the content and display of embedded TikTok content on other websites, as well as the use of cookies and similar technologies for marketing or analytical purposes – on the basis of the user’s consent (Article 6(1)(a) RODO) obtained by TikTok or the Administrator.

4 Data sources

a) The source of personal data related to the operation of the profile “Mag Warsaw” on the TikTok platform is primarily information obtained directly from you as a user of TikTok – in particular, data provided in the course of visiting the profile and interacting with its content (e.g., likes, comments, private messages, tags, participation in LIVE broadcasts, use of the Duet or Stitch function). (b) In addition, as part of co-administration, TikTok Technology Limited and TikTok Information Technologies UK Limited provide the Administrator with aggregate statistics created from events recorded by TikTok’s servers when users view the profile or interact with its content. (c) If you display embedded content from TikTok on other websites, TikTok may obtain data from your device (e.g., IP address, device ID, language settings, browser type, location data) in accordance with its own privacy policy.

5 [Data categories].

The extent of personal data processed depends on how the user interacts with the “Mag Warsaw” profile on the TikTok platform and with content published by the Administrator. In particular, the Administrator may process the following categories of data:

Identification and profile data – including information publicly visible on your TikTok account, such as your account name (which may include your first and last name), profile photo, profile description, list of followers and observers, content published by you (videos, photos, LIVE broadcasts), markings in other users’ content, and relationships.
Profile activity and interaction data – information about actions taken in relation to the Administrator’s profile, including watching or stopping watching, likes, reactions, comments, shares, tags, participation in LIVE broadcasts, use of the Duet or Stitch function, clicks on links in the profile description or content, video plays (including playback time and frequency).
Data provided as part of communication – the content of private messages sent to the Administrator and any personal data voluntarily provided in such correspondence (e.g., contact information, information on inquiries, feedback).
Statistical, analytical and technical data – aggregate statistics about impressions, interactions, audience demographics, effectiveness of published content, as well as data about the device, browser, network connection, identifiers assigned by TikTok or the user’s device, and information about platform features used.
Data from embedded TikTok content displayed outside the platform – such as IP address, device ID, language and region settings, browser and operating system type, location data, and information about interactions with the embedded material, processed in accordance with TikTok’s privacy policy.

6 [Data recipients].

Your personal information may be disclosed to the following categories of recipients:

The TikTok platform and its affiliates – including ByteDance group companies operating in the EEA, the UK and outside the EEA, which process user data in accordance with their own privacy policies, in particular to provide services, ensure security, personalize content and advertising, and conduct analytics.
The Administrator’s service providers and subcontractors – in particular, entities providing IT services, hosting, handling electronic communications, Internet marketing, online advertising, analytics, as well as advertising agencies, media houses, PR agencies and entities conducting opinion or market research. These entities process data on the basis of an entrustment agreement and only to the extent indicated by the Administrator.
Business partners of the Administrator – including entities participating in joint promotional actions, contests or events organized or co-organized with the Administrator, to whom data may be disclosed in connection with the implementation of such cooperation.
Public authorities and other authorized entities – if the obligation to disclose data arises from the law or it is necessary to establish, assert or defend claims.
Other users and recipients of content within the TikTok platform – all information of a public nature, published in comments, in content or through interaction with the Administrator’s profile, may be visible to other users of the platform and visitors to the profile, including outside the EEA.

7 [Processing outside the EEA].

As a general rule, the Administrator does not transfer your personal data to a third country (i.e. a country outside the European Economic Area). If such a transfer of your personal data were to take place – the Administrator will do so on the basis of standard safeguard clauses (based on Article 46(2)(c) of the RODO) or provide another mechanism that is lawful and legalizes such a transfer and provides adequate guarantees for the protection of personal data in accordance with the applicable legal provisions in this regard. In connection with the use of the TikTok portal, your personal data may be transferred to third countries by TikTok Technology Limited and other TikTok group companies. The Administrator has no control over how TikTok processes this data and transfers it outside the EEA. For details on TikTok’s data transfer policies, see TikTok’s privacy policy, available at https://www.tiktok.com/legal/page/eea/transferee-countries/pl.

8 [Data retention period].

Personal data processed as part of the Administrator’s profile on the TikTok portal will be processed for the period during which the profile is maintained or for the time you remain an active user of the profile (e.g., until you stop observing the profile), unless you have previously raised an effective objection to such processing. After the expiration of this period, the data will be processed for the duration of the legal limitation period, unless an effective objection is raised beforehand. The controller does not affect the period of processing of personal data by TikTok as a separate controller – the period is determined by the rules of data processing set out in the rules and privacy policy of TikTok.

9 [Your powers].

You have the right to request from the Administrator access to your personal data, rectification, erasure, restriction of processing and data portability. You have the right to object to the processing of your personal data, whereby the right to object will not be exercised if there are valid legitimate grounds for processing that override your interests, rights and freedoms. If the processing is carried out on the basis of consent, you have the right to withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal of consent.

10 [Right to file a complaint].

If you consider that the processing of your personal data violates the provisions of the RODO, you have the right to lodge a complaint to the supervisory authority competent for the protection of personal data, which in Poland is the President of the Office for Personal Data Protection (https://uodo.gov.pl).

11 [Voluntariness of providing data].

Provision of personal data is voluntary, but necessary to use certain functions of the Administrator’s profile on the TikTok portal (e.g. participation in contests or LIVE broadcasts, sending private messages). Failure to provide data may prevent full use of these functions.

12 [Profiling].

The Administrator does not make decisions by automated means or apply data profiling within the meaning of Article 22 RODO in the processing of users’ personal data. The analysis of statistical data is only of an aggregate, anonymous nature and serves to optimize the content published on the profile, and not to make decisions towards a specific user.