隐私条款

如果你在澳大利亚使用合作伙伴平台，这些条款对你适用。

本公司集团内部某些位于澳大利亚境外的实体可能为了提供某些功能（具体如“我们如何共享你的信息”中所述），在有限范围内远程访问你的信息。如果你想要详细了解有权接收澳大利亚个人数据的公司集团实体位于哪些国家/地区，请点击此处。

访问：你有权访问你的个人信息，包括关于我们如何使用并与谁共享这些信息的信息。如果你认为我们还掌握了你的其他个人信息，请联系我们：https://www.tiktok.com/legal/report/privacy。

更正：你有权更正不准确的个人信息。如果你认为我们掌握的个人信息不准确，请联系我们：https://www.tiktok.com/legal/report/privacy。

你的权利：如果你对我们处理信息的活动有任何问题、疑问或投诉，请联系澳大利亚信息专员办公室（电话：+61 1300 363 992，电子邮箱：enquiries@oaic.gov.au）。我们将回复告知你具体负责人姓名，以及预计回复的时间。

一旦使用合作伙伴平台，即表示你已阅读、理解并同意本《合作伙伴隐私政策》中所述的实践，因此以下附加条款适用于你对合作伙伴平台的使用。

我们处理你的信息的法律依据：根据巴西通用数据保护法（“LGPD”），只有在有法律依据的情况下，我们才被授权处理从用户那里收集的信息。在合作伙伴平台情形中使用的法律依据包括：

• 合同履行：因此，我们可以管理、运营合作伙伴平台并向你提供相关服务，以便你在我们或我们附属公司运营的网站、应用程序或服务上创建、提交和/或投放商业内容（电商、广告或赞助内容）；回应针对相关产品的业务咨询；协助支付处理；提供支持，包括执行问题排查； 并提供关于合作伙伴平台变更事项的通知和服务相关通知。
• 合法利益：因此，我们可以确保合作伙伴平台的安全，包括进行尽职调查、验证账号以及检测和防止滥用、有害活动、欺诈、垃圾邮件和其他非法活动； 发送营销通讯，包括可能有用、相关、有价值或值得关注的商品和服务相关促销和广告材料；改进和优化审核流程，以便更有效地识别违反我们政策的行为。

行使你的数据保护权利：巴西法律赋予个人对其个人数据的某些权利（可能存在法律和技术层面的限制）。我们将根据《通用数据保护法》（LGPD）和其他适用法律，对你行使以下权利的请求作出回应：

  I. 确认你的个人数据是否正在被处理；
  II. 访问你的个人数据；
  III. 更正不完整、不准确或过时的个人数据；
  IV. 个人数据的匿名化、屏蔽或删除；
  V. 个人数据向第三方的迁移；
  VI. 拒绝处理个人数据；
  VII. 向我们与之共享个人数据的公私实体请求信息；
  VIII. 在适用情况下，要求提供有关国际数据传输的更多详细信息，以及用于进行此类传输的机制（如标准合同条款）；
  IX. 要求说明是否能够拒绝同意，以及拒绝同意的后果（如适用）；
  X. 撤回你的同意（如适用）；
  XI. 在适用情况下，要求对仅基于影响你利益的个人数据自动处理所做出的决定进行分析，包括为定义你的个人、职业、消费、信用状况或你的个性特征而做出的决定。

如果你对我们处理你权利请求的方式不满意，欢迎使用“联系我们”部分中提供的详细信息与我们联系。你还有权向巴西数据保护局（“ANPD”）投诉。

数据留存：将在实现信息收集目的所需的时间内保留你的个人数据，但最长不超过法律或内部记录留存政策规定或允许的时间，或我们的记录保留政策规定的期限，以及完成内部报告和对账、应要求向你提供反馈或信息所合理必需的时间。

国际数据传输。国际数据传输对于我们提供和管理合作伙伴平台是必要的，并且可能涉及内部和外部接收方，具体目的在本合作伙伴隐私政策的“我们如何共享你的信息”部分中有所描述。请参阅此处，以获取有关接收来自巴西个人数据的服务提供商和企业集团实体所在国家的更多信息。

我们致力于确保我们处理的所有个人数据都受到保护，无论其位于何处。我们还确保在整个处理期间，国际数据传输都能安全进行，并遵守适用的数据保护法律。 因此，我们采用合法有效的机制来进行国际数据传输（例如国家数据保护局（ANPD）发布的标准合同条款，其原始葡萄牙语版本可在以下链接查阅），以及技术和行政安全措施，例如：

• 专注于隐私和个人数据保护的内部政策和程序；
• 对我们的员工进行强制性培训，并实施专注于保护隐私和信息安全的内部规则；
• 控制访问权限，基于必要性和特定角色进行限制；
• 加密技术，用于保护静态数据和传输中的数据；和
• 用于活动监测和审计目的的日志记录。

联系方式：如果对本《合作伙伴隐私政策》有任何问题、评论或疑虑，请联系我们：https://www.tiktok.com/legal/report/privacy。

数据保护官（DPO）如果你希望联系我们的数据保护官，请联系我们：https://www.tiktok.com/legal/report/DPO。

你的权利和选择。如果你是加利福尼亚州居民，你可以通过以下方式与我们联系，提交请求以了解、访问、更正或删除我们收集的关于你的信息。你也有权通过相同方式对我们就你的请求所做的任何决定提出上诉。你还可以直接设置更新你的账户信息。你的知情权范围包括：我们收集了哪些关于你的个人信息（类别和具体内容）、个人信息的来源类别、我们为了什么业务和商业目的收集、出售或共享个人信息（如适用）、我们向哪些类型的第三方披露个人信息。我们不会因你行使权利而对你采取报复行为，尽管合作伙伴平台的某些方面或其他相关服务可能不再对你开放。

联系方式：

• 网络表单：https://www.tiktok.com/legal/report/privacy
• 邮寄地址：5800 Bristol Parkway，Suite 100，Culver City，CA 90230

授权代理人。根据适用法律，你可能有权通过授权代理人提交请求。若要指定授权代理人代表你行使选择权，请提供证据，证明你已授予该代理人委托书，或证明该代理人以其他方式拥有代表你提交请求行使权利的有效书面授权。

我们将根据适用法律，并在进行适当验证后，对你的请求作出回应。我们将通过一下方式验证请求是否由你提出：要求你从与你账户关联的电子邮件地址发送请求，或提供验证账户所需的信息。

虽然我们收集和使用的部分信息可能属于敏感个人信息，但我们只会用于提供合作伙伴平台以及在适用法律规定的其他豁免范围内处理此类信息。例如，我们可能会处理你的财务信息，以便提供你向我们请求的服务，或处理你的驾照号码，以便核实你的身份。

不会出售或共享跨场景行为广告。我们不会出售或共享加利福尼亚州居民的个人信息，详见《加利福尼亚州消费者隐私法案》（"CCPA"）中的定义。

禁止跟踪。请注意，我们的服务目前不支持“禁止跟踪”请求。

如果你在加拿大使用合作伙伴平台，那么以下附加条款对你适用。

你的权利：除了适用法律规定的有限例外情况，你有权访问你的个人信息，并在信息不准确、不完整或不再最新时更新、更正或修正此类信息。在遵循适用法律的前提下，你还有权要求获知有关处理你个人信息的情况，例如我们是否掌握了你的此类信息、使用目的以及我们可能与哪些第三方共享你信息。

即使在我们征得你同意后，为特定目的收集、使用或披露你的个人信息的情况下，你也有权在任何时候撤回同意，但需遵守法律或合同限制，并进行合理通知。如果你撤回对我们收集、使用或披露你信息的同意，我们可能无法提供某些需要处理这些个人信息的产品、服务或功能。

若要行使这些权利，你可使用以下提供的联系方式与我们联系。为核实提出请求者的身份，我们可能会要求提供某些个人信息。

你的选择：我们可能会向你发送有关合作伙伴平台功能、第三方服务、促销活动、竞赛、宣传活动和事件的直接营销信息，我们认为这些你可能会对这些感兴趣。你可以随时通过点击每封电子邮件底部包含的“退订”链接，退订我们的营销邮件。请注意，即使你退订后，你可能仍会收到其他通讯，如交易和服务相关的消息、账户更新，以及其他为确保服务正常运行或维持业务关系所必需的通讯。

传输到你所在的司法管辖区以外：我们和我们的服务提供商（包括我们企业集团的成员、子公司或关联公司）可能会在加拿大境外（对于魁北克居民而言，指的是在魁北克境外）访问、存储和以其他方式处理个人信息，包括在美国、马来西亚、新加坡以及我们或我们的服务提供商所在的其他外国司法管辖区。在这种情况下，这些信息将受该特定司法管辖区的法律约束。如果你想了解我们或我们的服务提供商（包括加拿大境外的服务提供商）如何处理个人信息，请使用以下列出的联系方式与我们联系。如果适用法律或者法律程序要求或允许，我们和我们的服务提供商可能会披露你的个人信息，这可能包括我们或我们的服务提供商运营所在司法管辖区的外国法院、执法机构或其他政府当局要求的合法访问。

联系方式：如果你对我们的信息处理做法有任何疑问或担忧，对我们的服务提供商（包括位于你所在司法管辖区以外的服务提供商）如何处理个人信息有疑问，或者你希望行使你的隐私权利，你可以通过https://www.tiktok.com/legal/report/Privacy-Office-Canada 联系我们的隐私办公室。

如果你位于 EEA、英国或瑞士，则适用以下附加条款。

我们只会在有“法律依据”的情况下使用你的信息。我们会根据使用信息的原因（即处理信息的“目的”）采用不同的法律依据。这些法律依据包括合同必要性、合法利益（我们的、你的或其他方的）、同意、遵守法律义务、维护公共利益以及保护切身利益。

在此，我们将为你解释处理信息时所依据的法律基础。本节还将说明我们使用信息的原因、处理这些信息的方式、涉及的信息类别以及相关权利（始终包括访问信息的权利）。如果你想深入了解如何行使任何权利，请查看下文“你的权利”部分。

我们会使用你提供的信息、自动收集的信息以及其他来源的信息，这些信息是履行你在注册、访问或使用合作伙伴平台时签订的合同（即我们的条款）所必需的。这意味着我们将出于以下目的使用你的信息：

• 为你提供合作伙伴平台。我们使用你的信息来提供和运营合作伙伴平台，以便你能够创建和管理广告活动、开设和管理店铺、就你的产品与用户互动，以及与 TikTok 技术集成。我们还会使用你的信息为你提供个性化和定制化的功能、内容，并就我们提供的服务和合作伙伴平台为你提供建议。
• 管理平台。我们使用你的信息来管理合作伙伴平台，例如就服务相关事宜与你沟通，为你提供更新和支持，响应和处理你的咨询，调查和解决索赔、投诉或纠纷（包括当你向我们告知问题或要求获取你的信息副本时）。
• 支持产品的购买和交付。我们使用你的信息来处理订单，例如协助处理付款、促进产品交付，并就你的产品与你沟通。这包括与买家、支付服务提供商和交易履行提供商共享你的信息。
• 执行我们的条款、指南或政策。我们使用你的信息来执行我们的条款、指南和政策。如果我们确定你违反了我们的条款或指南，这可能包括删除内容（包括通过自动方式）或暂停、封禁你的账户。

你的权利：当我们基于履行与你签订的合同而使用你的信息时，你有权将提供给我们的信息进行迁移。

我们会在实现合法利益的必要情况下使用你的信息（无论这些利益属于我们、你还是第三方），前提是这些利益不会有损你的利益或基本权利和自由。我们使用所收集的信息来实现以下目的：

提供测量和分析服务。

• 我们帮助合作伙伴平台用户度量 TikTok 平台上面向消费者展示的广告、购物清单和其他内容的效果及传播情况。
• 依据的合法利益：让合作伙伴平台用户能够查看和了解其广告或内容的表现情况，以及哪些受众查看过广告或内容，或与之进行过互动，这样他们就可以做出明智的决策（例如他们可能想要开展何种类型的广告活动、想要触达的受众类型以及用户最喜欢的内容类型）。这有助于确保我们向用户展示的广告和其他内容具有相关性和趣味性，并保持平台对所有用户免费。
• 使用的信息：你提供的信息、自动收集的信息以及来自其他来源的信息。

提供鼓舞人心的卖家内容。

• 我们会与所有卖家和创作者分享 TikTok Shop 成功卖家的业务内容，以及有关该内容的某些绩效数据和见解，目的是为他们在平台上发布内容提供灵感。
• 使用的信息：你提供的信息和自动收集的信息。

确保我们社区的安全和福祉。

• 我们使用你的信息来确保社区的安全和福祉，包括通过审查商业内容（以及在适用法律允许的情况下，审查消息和相关元数据），以检查内容是否违反我们的条款、指南和其他政策。如果我们有合理理由相信，为了保护我们、我们的用户、版权所有者的权利、财产和安全，以及为了发现、调查、预防或处理误导性活动、版权侵权或其他非法活动，有必要这样做，我们也可能会访问、保存并与执法机构、公共当局和版权所有者共享我们收集的信息中描述的信息。
• 依据的合法利益：为了维护我们社区的安全，审查内容是否遵守我们的准则，识别对合作伙伴平台的滥用行为，保护我们、我们的用户、版权所有者的权利、财产和安全，检测、调查、预防或处理误导性活动、版权侵权或其他非法活动，并改进和优化我们的审查流程，以识别违反我们政策的商业内容。
• 使用的信息：你提供的信息、自动收集的信息以及来自其他来源的信息。

确保合作伙伴平台的安全与稳定。

• 我们使用你的信息来确保合作伙伴平台的稳定性和安全性，包括分析用户活动、进行 A/B 测试、验证账户、开展用户调查，以及识别和应对技术或安全问题（如技术漏洞、垃圾账户，并防止滥用、有害活动、欺诈、垃圾信息和其他非法活动）。
• 依据的合法利益：确保合作伙伴平台的持续稳定和安全，并确保其持续可用和正常运行。
• 使用的信息：你提供的信息、自动收集的信息以及来自其他来源的信息。

审查、改进、推广和发展合作伙伴平台。

• 我们利用所掌握的信息来了解人们如何使用合作伙伴平台，并开发和改进该平台，包括训练、开发和改进机器学习模型和算法等技术。我们还利用这些信息来更好地理解和推广合作伙伴平台。例如，我们会查看与我们虚拟助手功能的聊天记录，以及卖家和买家之间的聊天记录，以改进支持此类功能的技术，并为你提供更有用的服务。
• 依据的合法利益：以明智的方式改进、推广和发展合作伙伴平台。
• 使用的信息：你提供的信息、自动收集的信息以及来自其他来源的信息。

促进本集团内各实体遵守其法律义务。

• 在必要时，我们可能会与集团内的实体共享你的信息，以便它们履行法律义务。这包括当它们有义务遵守有效法律要求的情况，例如监管机构、执法机构或法院的命令或披露要求。
• 依据的合法利益：使我们企业集团内的实体能够履行其法律义务。
• 使用的信息：你提供的信息、自动收集的信息以及来自其他来源的信息。

营销传播。

• 我们可能会通过电子邮件、电话、SMS、应用内或推送通知与你联系，告知我们认为你或你的公司可能感兴趣的促销活动、竞赛、产品或服务。在法律要求的情况下，我们将获得你的同意后再与你联系。
• 依据的合法利益：推广合作伙伴平台及其产品和服务，或你提供的可能有用、相关、有价值或以其他方式引起兴趣的第三方产品和服务。
• 使用的信息：你提供的信息、自动收集的信息以及来自其他来源的信息。

你的权利：每当我们基于合法利益的必要理由使用你的信息时，你可以反对并要求限制此类使用。

我们请求你同意我们出于特定目的访问或使用你的信息，这些目的将在我们首次依据同意收集信息时向你披露。你始终可以通过设备权限、应用内设置或账户设置撤销你的同意。

你的权利：每当我们基于你的同意使用你的信息时，你可以随时撤回同意。但是，撤回同意不会影响在此之前，我们基于同意处理你信息的合法性。

你还有权迁移已提供给我们且我们基于你的同意而使用的信息。

在履行法律义务（包括我们根据欧盟法律承担的税务申报义务）所必需的情况下，我们可能会使用你的信息。这包括我们有义务与你沟通、采取措施确保用户安全，或遵守监管机构、执法机构或法院的有效法律要求（如命令或披露请求）等情况。

• 如果你是 TikTok Shop 的卖家，这包括我们有义务执行以下操作的情况：
• 收集某些个人资料信息，以验证这些信息是否可靠和完整，然后才允许你在 TikTok Shop 上提供产品和服务；和
• 在 TikTok Shop 上展示某些个人资料信息，以便所有用户都能公开查看。

你对你的信息拥有多项权利和选择权。其中一些权利普遍适用，而另一些权利仅在特定情况下适用。根据具体情形，这些权利可能会受到一定限制。TikTok Ireland 将负责在法律规定的相关期限内处理你的请求。如有必要解决你的请求，TikTok Ireland 将与 TikTok UK 进行沟通。

访问你的信息。你可以免费要求我们确认处理了哪些关于你的信息，提供有关处理情况的信息，并获取你的信息副本。

删除你的信息。你可以删除或要求我们删除部分或全部你的信息。

纠正你的信息。如果你的信息不准确，你可以更改或要求我们更改或纠正该信息。

迁移你的信息。在我们以合同必要性或同意作为法律依据的情况下，你有权进行数据迁移操作。这意味着你有权以结构化、常用且机器可读的格式接收你的信息，并将其与第三方共享。

反对处理你的信息。你还有权反对在某些情况下处理你的信息。当我们正在执行维护公共利益、追求我们或第三方的合法利益，或者在某些情况下为促进科学或历史研究而处理你的数据时，这项权利适用。在提交反对请求时，请提供所有相关信息，包括你反对的处理活动、你反对的原因、处理活动如何影响你，以及你认为有助于我们审查请求的任何其他信息。如果我们没有令人信服的合法理由继续进行处理，或者不需要该处理来进行法律主张，我们将停止特定的处理。

限制对你信息的处理。在以下情况下，你有权要求限制对你信息的处理：(a)你对信息的准确性提出质疑；(b)信息被非法处理，但你反对删除该信息；(c)你需要保留该信息以提起或辩护法律诉求；或(d)你已对处理提出异议，且正在等待该异议请求的结果。

若要行使上述任何权利，请通过我们的网络表单与我们联系。在我们能够响应行使上述一项或多项权利的请求之前，可能会要求你验证身份或账户信息，或提供额外信息，以便我们了解你的请求。

如果你对我们处理你任何权利请求的方式不满意，欢迎“联系我们”。你还有权向爱尔兰数据保护委员会（TikTok Ireland的主要监管机构）或你当地的监管机构投诉。

当我们将你的信息转移到 EEA、英国或瑞士境外时，我们会通过以下方式确保数据获得充分的保护：

• 充分性认定。这些是欧盟委员会依据《通用数据保护条例》（GDPR）第 45 条作出的认定（或依据其他法律作出的等效认定），即认定某个国家提供了充分的数据保护水平。我们会按照我们收集的信息中所述，将你的信息传输至一些获得充分性认定的国家，例如此处所列的国家；或
• 标准合同条款。欧盟委员会已批准了《通用数据保护条例》（GDPR）第 46 条规定的合同条款，该条款允许EEA 境内的公司将数据传输到境外。这些条款（以及英国和瑞士的等效批准条款）被称为标准合同条款。我们依靠标准合同条款将我们收集的信息中所述的信息传输给我们企业集团内的某些实体（如此处所述）以及没有充分性认定的国家的第三方。如需获取这些充分性认定或标准合同条款的副本，请通过以下“联系我们”部分提供的详细信息与我们联系。

你可以通过我们的网络表单就本合作伙伴隐私政策与我们联系。你可以在此联系 TikTok 数据保护职员。

你也可以通过以下邮政地址与我们联系。

• 对于欧洲经济区和瑞士用户：TikTok Technology Limited, The Sorting Office, Ropemaker Place Dublin 2, Dublin, D02 HD23, Ireland.
• 对于英国用户：TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom.

如果你在印度使用我们的服务，合作伙伴平台由 Bytedance (India) Technology Private Limited 提供和管理。TikTok是我们提供和推广服务的品牌。在印度使用这些服务时，请相应地将本政策中的“TikTok”、“我们”或“我们的”理解为Bytedance (India) Technology Private Limited。

如果你在印度尼西亚使用我们的服务，则适用以下附加条款。若以下附加条款与本政策正文条款有任何冲突，应以以下条款为准。

数据控制者。通过 TikTok 平台在印度尼西亚提供的电商服务以“Shop”的形式运营。本合作伙伴隐私政策中提及的“TikTok”、“我们”或“我们的”，在适当情况下，应理解为指 PT Tokopedia 和 TikTok Pte Ltd，它们是为了提供点啊上服务负责你个人数据的数据控制者。

年龄、父母及监护人同意。一旦访问和/或使用电子商务服务，即表示你声明你已年满 21 岁，或已婚，或不在监护之下。如果你未满 21 岁且未婚，或在监护之下：

• 你必须获得父母或法定监护人的同意；和
• 你的父母或法定监护人负责：(i) 你访问和使用电商服务相关的所有行为；(ii) 确保你遵守本政策；和（iii）确保你参与电商服务的任何行为，在任何情况下都不会导致违反与儿童保护相关的适用法律法规。

如果你没有获得父母或法定监护人的同意，且你的父母或监护人不愿意以他们的名义开户，你必须停止使用电商服务。

你的选择。你可以撤回对我们向第三方披露你个人数据的同意。应你的要求，我们将停止向第三方展示、发布、传输、传播和/或开放访问你的个人数据。请注意，撤回对披露和/或收集你个人数据的同意后，我们可能无法满足你的请求，你可能无法使用某些合作伙伴平台的功能。

你可以要求我们（i）披露所收集的个人数据历史记录； 和/或(ii)删除并处置我们在服务器上收集的你的个人数据。请注意，要求我们删除并处置你的个人数据后，你可能无法使用某些合作伙伴平台的功能。

若要行使你的任何权利，请通过 https://www.tiktok.com/legal/report/privacy 与我们联系。

通知。若发生任何个人数据泄露事件，我们将根据适用法律通知你，并向你提供有关该个人数据泄露事件的信息。

数据保留。我们会在为你提供服务所需的时间内保留你的信息。如果为你提供服务不需要你的信息，我们仅会在有合理商业目的的情况下保留此类数据。但是，在某些情况下，我们可能会根据法律义务，或在为提起、行使或抗辩法律主张有必要时，保留这些数据五（5）年（或根据需要保留更长时间）。

在你终止使用我们的合作伙伴平台且五年（5 年）保留期届满后，我们将以汇总和匿名的格式存储你的信息。非个人身份信息可能会被无限期保留以供分析。

如果你在日本使用我们的服务，则适用以下附加条款。若以下附加条款与本政策正文的规定有任何冲突，应以以下条款为准。

数据控制者。如果你在日本使用电商服务，负责处理你个人数据的数据控制者是 Bytedance KK.，其地址为Shibuya Hikarie, 2-21-1 Shibuya, Shibuya-ku, Tokyo, 150-8510, Japan。不过，与TikTok Shop 平台运营相关的某些活动可能由TikTok Pte. Ltd. 执行，该公司将成为处理这些活动的数据控制者。例如，TikTok Pte. Ltd. 可能将出于负责 TikTok 应用内 TikTok Shop 平台的开发和改进的目的成为数据控制者。在本合作伙伴隐私政策中，当我们提及“TikTok”、“我们”或“我们的”时，指的是 TikTok Pte. Ltd. 和 ByteDance KK。

共享和收集关于你信息的要求：

• TikTok 将对员工进行必要且适当的监督，例如对处理你信息的员工进行教育或培训。若发生数据泄露事件，或 TikTok 认定我们或我们的服务提供商可能发生此类事件，TikTok 将及时向你报告相关事实，进行调查并汇报，同时采取措施防止再次发生此类情况。
• 在将你的信息处理工作外包或分包时，TikTok 将与受委托处理你全部或部分信息的外包商/分包商签订合同，要求其承担与本条款规定相同水平的数据保护义务，并将进行适当监督，对该外包商/分包商履行合同的情况负责。
• 如果 TikTok 将你创建的信息或受众迁移到位于日本境外的第三方或 TikTok 关联公司，TikTok 将通过书面合同或具有法律约束力的规则，要求这些第三方和 TikTok 关联公司承担与我们在《TikTok商业产品（数据）条款》下相同水平的数据保护义务，但适用法律、法规和适用行业指南另有允许的情况除外。
• TikTok 负责确保你信息的准确性，或对其进行删除，以及依据适用法律法规对任何权利主张作出回应的权限。TikTok 将提供有关你信息处理情况的披露，并且 TikTok 将负责回应数据主体权利的行使以及用户的投诉。

如果你在马来西亚使用我们的服务，则适用以下附加条款。若以下附加条款与本政策主体条款发生冲突，应以以下条款为准。

数据控制者。如果你在马来西亚使用电商服务，负责处理你的个人数据（包括为提供电子商务服务之目的）的数据控制者是 TikTok Shop (Malaysia) Sdn Bhd。然而，与 TikTok Shop 平台运营相关的某些活动可能由 TikTok Pte. Ltd. 执行，该公司将成为处理这些活动的数据控制者。例如，TikTok Pte. Ltd. 可能出于负责 TikTok 应用程序内 TikTok Shop 平台的开发和改进的目的成为数据控制者。在本合作伙伴隐私政策中，当我们提及“TikTok”、“我们”或“我们的”时，我们指的是 TikTok Pte. Ltd. 和 TikTok Shop (Malaysia) Sdn Bhd。

如果你在拉丁美洲（不包括巴西）使用我们的服务，则适用以下附加条款。如果以下附加条款与本政策正文的规定有任何冲突，应以以下条款为准。

数据控制者：如果你在拉丁美洲使用电商服务，负责处理你个人数据的数据控制者是 TikTok Pte，其注册地址为 1 Raffles Quay, #26-10, South Tower, Singapore 048583。

同意：通过注册或使用平台服务，你明确同意按照本隐私政策所述目的处理你的个人数据。除本隐私政策中包含的目的外，你还明确同意 TikTok 可以为营销活动、促销、广告和/或创建个性化内容以及与授权目的相符的其他用途处理你的数据。

我们如何共享你的个人数据： TikTok 可能会根据本隐私政策中所述的目的，与第三方（如商业合作伙伴、关联公司以及与我们有法律或商业关系的其他第三方）共享你的个人数据。当你提供个人数据并使用合作伙伴平台，即表示你同意上述数据传输。你可以随时撤销同意并行使你的权利，具体如下所述。

你的权利：你对个人数据享有以下权利：访问、更正、删除和反对。你还可以撤回你的同意，并限制对个人数据的使用和披露。行使你的权利应符合数据保护法； 你可以通过https://www.tiktok.com/legal/report/privacy发送你的请求，请求至少包括以下内容：

数据主体的姓名和地址，或其他向其通知请求回应的方式；

证明数据主体身份或（如适用）法律代表身份的文件；

对数据主体寻求行使上述任何权利所涉及的个人数据的清晰、准确描述；

任何有助于定位个人数据的其他物品或文件。

如果你在尼日利亚使用合作伙伴平台，则适用以下附加条款：

处理的法律依据。我们遵守尼日利亚法律规定的个人数据处理相关原则。我们收集和使用个人数据，以提供本合作伙伴隐私政策中所述的合作伙伴平台。通过注册和/或使用合作伙伴平台，你同意按照本合作伙伴隐私政策处理和使用你的个人数据。我们处理你个人数据的依据是，必须履行你正在订立或已经订立的合同。在某些情况下，我们可能需要出于合同履行并非必要的其他目的处理数据。在这种情况下，处理可能基于（i）我们的合法利益； (ii) 遵守我们的法律义务；(iii) 你可能已向我们提供同意；(iv) 为履行符合公共利益的任务；和/或 (v) 保护重大利益。

国际数据传输。国际数据传输对我们提供服务而言是必要的。如果你位于尼日利亚，我们会依据合同履行情况，或在必要时依据适用的数据保护法律法规对国际数据迁移的其他法律依据进行迁移。

你的权利。除了有关数据隐私的法律法规承认你作为数据主体的权利和自由，你还有权：在同意我们处理数据法律依据的情况下，随时撤回你的同意； 反对处理你的个人数据；在特定情况下请求限制处理；以及数据可移植性。

投诉与救济。你可以提出投诉、行使你的权利或寻求任何救济，或通过https://www.tiktok.com/legal/report/privacy联系我们的数据保护人员/隐私团队。在我们能够响应上述一项或多项权利的请求之前，你可能需要验证你的身份或账户详细信息。你还有权通过电子邮件info@ndpc.gov.ng或通过其网站https://ndpc.gov.ng/提供的投诉平台向尼日利亚数据保护委员会提出投诉。

如果你在菲律宾使用我们的服务，根据菲律宾国家隐私委员会（“NPC”）发布的有关数据隐私的相关法律、规则、条例和公告，以下附加条款将适用。

数据控制者。如果你在菲律宾使用电商服务，负责处理你个人数据（包括为提供电商服务之目的）的数据控制者是 ByteDance Philippines Inc。不过，与TikTok Shop 平台运营相关的某些活动可能由 TikTok Pte. Ltd. 执行，该公司将成为这些处理活动的数据控制者。例如，TikTok Pte. Ltd. 可能出于负责 TikTok 应用内 TikTok Shop 平台的开发和改进的目的成为数据控制者。在本合作伙伴隐私政策中，当我们提及“TikTok”、“我们”或“我们的”时，指的是 TikTok Pte. Ltd. 和 ByteDance Philippines Inc。

你的权利。除了有关数据隐私的法律法规承认你作为数据主体的权利和自由，你还有权获得信息、提出异议、访问、更正、删除或阻止、向 NPC 投诉、要求赔偿以及进行数据可移植性操作。在我们能够响应上述一项或多项权利的请求之前，可能会要求你验证你的身份或账户详细信息。

如果你在韩国使用我们的服务，则适用以下附加条款。若以下附加条款与本政策正文的规定有任何冲突，应以以下条款为准。

• 数据保留。我们会销毁那些已达成收集目的（经你同意），或使用期限已过（经你同意的或本合作伙伴隐私政策中规定的）的个人数据； 但是，在适用的情况下，我们将继续在以下法律规定的期限内存储你的个人数据，包括但不限于：
  • 电商消费者保护法；
  • 你取消订单、购买商品的付款以及我们提供商品/服务的记录：5年；
  • 消费者投诉或纠纷处理记录：3年；
  • 广告和标签记录：6个月；
  • 《通信秘密保护法》；
  • 你访问我们网站的记录：3个月。
• 销毁个人数据。我们会使用相关部门无法恢复的方式销毁你的个人数据。
• 数据权利。你有权访问我们持有的关于你的个人数据，有权更正任何关于你的不准确个人数据，有权请求删除关于你的个人数据，以及有权请求暂停处理你的个人数据。你可以通过联系我们来行使你的权利，联系方式为https://www.tiktok.com/legal/report/privacy。
• 数据安全。我们努力保护合作伙伴平台和用户，防止我们所掌握的信息被未经授权的访问、更改、披露或破坏。为此，我们采取了技术、管理和物理保障措施，包括制定数据保护内部政策、基于“需要知道”原则限制对个人数据的访问，以及控制对处理个人数据的设施的访问。
• 个人数据的委托和/或境外转移。我们会将你的数据委托给我们的关联公司、云存储提供商、IT 服务提供商和数据中心，其中部分位于境外，适用情况下需获得你的同意或向你进行通知。接收和处理你数据的实体会按照国内外法规使用和存储个人数据，并采取一切可用的物理和技术措施保护个人数据。如果有迁移对于向你提供服务并非必要，你可以通过联系我们https://www.tiktok.com/legal/report/privacy选择退出该迁移。
• 第三方提供和/或个人数据的海外迁移。我们仅在获得你的明确同意后，才会将你的个人数据提供给海外第三方，除非《个人信息保护法》规定的其他法律依据适用。请点击此处查看如果你作为全球卖家使用 TikTok Shop 服务，可能会提供给海外的个人数据列表。你可以通过退订 TikTok Shop 来选择不进行海外迁移。请注意，如果你不同意海外迁移，可能无法使用 TikTok Shop 服务。该列表还列出了对于在 TikTok Shop 进行海外销售的全球卖家，在获得或未获得同意的情况下会处理的个人数据。
• 直接对个人数据离岸收集。我们会直接从新加坡收集你的个人信息。
• 《个人信息保护法》规定的当地代表。有关韩国隐私问题的咨询，请发送至我们《个人信息保护法》规定的当地代表。联系方式如下。ByteDance LLC
  代表：Jaehoon Jung
  地址：3F, The Pinnacle Gangnam, 343 Hakdong-ro, Gangnam-gu, Seoul, 06060, Republic of Korea
  电话：+82 2 909 8817
  邮箱：privacykr@tiktok.com
• 《信息通信网络利用促进及信息保护等相关法》规定的本地代表联系方式如下。
  Bae, Kim and Lee LLC
  代表：Soon-Ik Kwon
  地址：Tower B, Centropolis, 26 Ujeongguk-ro, Jongno-gu, Seoul, 03161, Republic of Korea
  电话：+82-2-3404-0108
  邮箱：privacytiktok@bkl.co.kr

如果你在泰国使用我们的服务，则适用以下附加条款。若以下附加条款与本政策正文的规定有任何冲突，应以以下条款为准。

数据控制者。如果你在泰国使用电商服务，负责处理你个人数据的数据控制者是 TikTok Shop (Thailand) Ltd.，其地址为No. 1 Park Silom Building, 9th-10th Floors, Convent Road, Silom Sub-district, Bangrak District, Bangkok。然而，与 TikTok Shop 平台运营相关的某些活动可能由 TikTok Pte. Ltd. 执行，该公司将成为这些处理活动的数据控制者。例如，TikTok Pte. Ltd.可能出于负责 TikTok 应用程序内 TikTok Shop 平台的开发和改进的目的成为数据控制者。在本合作伙伴隐私政策中，当我们提及“TikTok”、“我们”或“我们的”时，指的是 TikTok Pte. Ltd. 和 TikTok Shop (Thailand) Ltd.。

处理法律义务。在某些情况下，如果为了遵守适用法律，或必须订立或履行我们与你之间的合同，我们可能会要求你提供个人数据。如果你不提供所需的个人数据，我们可能无法处理你的请求或向你提供服务。

你的权利。根据适用的泰国个人数据保护法，你有权撤回对收集、使用和披露你个人数据的同意，有权访问你的数据，有权以由自动工具或设备读取或使用的格式接收你的个人数据，或将其迁移给另一个数据控制者，有权反对收集、使用或披露你的个人数据，有权要求删除或对个人数据去标识化，有权要求暂停使用你的个人数据，有权限制使用你的个人数据，有权更正、更新或补充你的个人数据，并且如果存在违反适用的泰国数据保护法的情况，有权向个人数据保护委员会投诉。

如果你在土耳其使用我们的服务，除上述《合作伙伴隐私政策》的内容外，还适用以下附加条款。如果以下附加条款与本《合作伙伴隐私政策》正文的规定有任何冲突，应以以下条款为准。

数据控制者代表。如果你在土耳其，可通过电子邮件或信件联系我们在土耳其的数据控制者代表，以处理与你个人数据处理相关的问题和投诉。
ESİN ATTORNEY PARTNERSHIP
邮箱：tiktok@esin.av.tr
地址：AKAT MAHALLESİ GÜL SOKAK NO: 2/1 34335 BEŞİKTAŞ/İSTANBUL, TÜRKİYE

处理你个人数据的法律依据。我们依据《第6698号个人数据保护法》第5条处理你的个人数据，以下为法律依据：

• 处理过程由法律明确规定或指定；
• 处理你的个人数据具有必要性，前提是与我们之间合同的订立或履行直接相关；
• 处理是我们能够履行法律义务的必要条件；
• 相关数据由你自行向公众公开；
• 处理对于确立、行使或保护权利具有必要性；
• 处理是为了维护我们的合法利益，前提是不侵犯你的基本权利和自由；
• 你的明确同意（请注意，我们仅在处理行为需要你的同意时才依据此法律依据，如果我们依据上述其他法律依据之一，则不依据此法律依据）

你的权利。根据《数据保护法》第11条，你对你的个人数据享有以下权利：

• 了解我们是否处理你个人数据的权利；
• 如果我们处理你的个人数据，你有权要求提供有关此类处理的信息；
• 了解处理目的以及是否用于该目的的权利；
• 有权知晓我们向哪些国内外第三方迁移你的个人数据；
• 有权要求更正不完整或不准确的个人数据；
• 在《数据保护法》第7条规定的条件下，请求删除或销毁你个人数据的权利；
• 有权要求我们按照你的请求，在上述两项范围内，将你个人数据的更正、删除和/或销毁情况通知我们进行迁移的第三方；
• 有权反对仅通过自动化手段处理你的个人数据进行分析，而得出的关于你的负面后果；和
• 因个人数据被非法处理而遭受损害时，有权要求赔偿。

你可以通过以下方式行使上述权利：https://www.tiktok.com/legal/report/privacy。

你的申请将根据请求性质尽快得到解决，最迟在三十天内免费处理。但是，如果你的请求给本公司带来额外费用，则可能会收取超出土耳其个人数据保护委员会资费标准的费用。

修订内容。本政策的以下章节不适用于土耳其的个人：

语言。本政策有英文和土耳其文版本。如果英文和土耳其文版本之间存在任何不一致或不同解释，以土耳其文文本为准。

如果你在阿拉伯联合酋长国（“UAE”）使用合作伙伴平台，则适用以下附加条款。如果主要合作伙伴隐私政策与附加条款之间发生任何冲突，以下条款将优先适用：

我们如何共享你的个人数据

除本政策正文外，如果你在阿联酋使用合作伙伴平台，则表示你同意本合作伙伴隐私政策的条款，并同意我们按照本合作伙伴隐私政策正文的规定共享你的个人数据。

适用法律和争议解决

如果你使用阿联酋合作伙伴平台，本合作伙伴隐私政策将受阿联酋法律管辖并依其解释。若双方就本合作伙伴隐私政策产生争议：

• 如果争议涉及的索赔金额在迪拜国际金融中心小额索赔法庭规定的限额内，则任何一方均应将该争议提交给上诉法庭；和
• 对于所有其他争议，各方应按照迪拜国际金融中心-伦敦国际仲裁院仲裁中心的调解规则，通过调解解决该争议，该规则通过引用本条款而纳入本协议。如果争议在调解开始后 30 天内，或各方书面同意的延长期限内未能通过调解解决，则该争议应按照迪拜国际金融中心-伦敦国际仲裁院仲裁中心的仲裁规则进行仲裁，并最终由其解决，该规则通过引用本条款而纳入本协议。调解和仲裁使用的语言应为英语。根据本条款启动的任何仲裁，仲裁员人数应为一名，仲裁应在迪拜进行。

投诉

如果你希望对我们处理你信息的方式提出投诉，请首先通过 https://www.tiktok.com/legal/report/privacy 与我们联系，我们将尽快处理你的请求。这并不影响你在认为我们侵犯了数据保护法（如适用）的情况下，向你居住或工作所在国家的数据保护监管机构提起申诉的权利。

If you are using the Partner Platform in Australia, these terms shall apply.

Certain entities in our corporate group located outside of Australia, are given limited remote access to your information so that they can provide certain functions, as described in the section on How We Share Your Information. Please see here for further information on the countries in which our corporate group entities which receive personal data from Australia are located.

Access: You have the right to access your personal information including information on how we use it and who we share it with. If you believe we hold any other personal information about you, please contact us at https://www.tiktok.com/legal/report/privacy.

Correction: You have the right to correct your personal information where it is inaccurate. If you believe we hold any inaccurate personal information about you, please contact us at https://www.tiktok.com/legal/report/privacy.

Your rights: If you have any questions, concerns or complaints in relation to our handling of your Information, you may contact the Office of the Australian Information Commissioner (Telephone +61 1300 363 992 or email enquiries@oaic.gov.au). We will respond to let you know who will be handling your matter and when you can expect a further response.

By using the Partner Platform, you acknowledge that you have read, understood, and agreed with the practices described in this Partner Privacy Policy, so the following additional terms apply to your use of the Partner Platform.

Our legal bases for processing your Information: According to the Brazilian General Data Protection Law (“LGPD”), we are only authorized to process information collected from users when there is a legal basis. Examples of legal bases used in the context of the Partner Platform are given below:

• Execution of a contract: to enable us to administer, operate, and provide the Partner Platform to you so that you can create, submit and/or place Business Content (e-commerce, advertising, or sponsored) on websites, applications or services operated by us or our affiliates; to respond to business inquiries related to our products; to facilitate payment processing; to provide support, including to perform troubleshooting; and to notify you about changes to the Partner Platform and service-related notifications.
• Legitimate interest: to keep the Partner Platform safe and secure, including conducting due diligence, verifying accounts, and detecting and preventing abuse, harmful activity, fraud, spam, and other illegal activities; to send marketing communications, including promotional and advertising materials that may be useful, relevant, valuable or otherwise of interest relating to products and services offered; and to improve and optimize our review process, for the purpose of identifying violations of our policies.

Exercise of Your Data Protection Rights: Brazilian law grants certain rights to individuals with respect to their personal data (legal and technical limitations may apply). We will respond to your requests to exercise your rights below in accordance with the LGPD and other applicable laws:

I. confirmation as to whether your personal data is being processed;
II. access to your personal data;
III. correction of incomplete, inaccurate or outdated personal data;
IV. anonymization, blocking or deletion of personal data;
V. portability of personal data to third parties;
VI. object to the processing of personal data;
VII. request information from public and private entities with which we share personal data;
VIII. request additional details, where applicable, regarding international data transfers, and the mechanisms (such as the Standard Contractual Clauses) used to carry out such transfers;
IX. request information on the possibility of refusing to provide personal data and the respective consequences (where applicable);
X. withdrawal of your consent (where applicable); and
XI. request an analysis, where applicable, of decisions made exclusively based on the automated processing of personal data that affect your interests, including decisions made to define your personal, professional, consumer or credit profile, or aspects of your personality.

We encourage you to contact us using the details set forth in the “Contact Us” section, if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the Brazilian Data Protection Authority (“ANPD”).

Retention of Data: We will retain your personal data for as long as it is necessary to serve the purpose(s) for which such information was collected, for no longer than is required or permitted by law, or our records retention policy, reasonably necessary for internal reporting and reconciliation purposes, or to provide you with feedback or information you might request.

International Transfers. International data transfers are necessary for us to provide and administer the Partner Platform and may involve both internal and external recipients for the purposes described in the “How We Share Your Information” section of this Partner Privacy Policy. Please see here for further information on the countries in which our service provider and corporate group entities which receive personal data from Brazil are located.

We are committed to ensuring that all personal data we process is protected, regardless of its location. We also ensure that international data transfers are carried out securely and in compliance with applicable data protection laws throughout the entire processing period. Accordingly, we adopt legally valid mechanisms for carrying out international data transfers (such as the Standard Contractual Clauses issued by the ANPD, which are available for consultation in their original Portuguese version at the following link), as well as technical and administrative security measures, such as:

• Internal policies and procedures focused on privacy and the protection of personal data;
• Mandatory training of our employees and implementation of internal rules focused on privacy and information security;
• Access controls, with restrictions based on necessity and specific roles;
• Encryption to protect data both at rest and in transit; and
• Log records for activity monitoring and auditing purposes.

Contact: In case of questions, comments, or concerns about this Partner Privacy Policy, please contact us at: https://www.tiktok.com/legal/report/privacy.

Data Protection Officer (DPO). If you wish to contact our Data Protection Officer, please contact us at: https://www.tiktok.com/legal/report/DPO.

Your Rights and Choices. If you are a California resident, you may submit a request to know, access, correct or delete the information we have collected about you by contacting us using the contact details below. You may also have the right to appeal any decision we have made about your request through these same methods. You can also update your account information directly through your settings. Your right to know includes the categories and specific pieces of personal information we have collected about you, the categories of sources for that personal information, the business or commercial purposes for collecting, selling or sharing personal information (where applicable), and the categories of third parties to whom we disclose personal information. We will not retaliate against you for exercising your rights, although some aspects of the Partner Platform or other related services may no longer be available to you.

Contact Details:

• Webform: https://www.tiktok.com/legal/report/privacy
• Mailing Address: 5800 Bristol Parkway, Suite 100, Culver City, CA 90230

Authorized Agent. You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise choices on your behalf, please provide evidence that you have given such agent power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.

We will respond to your request consistent with applicable law and subject to proper verification. We will verify your request by asking you to send it from the email address associated with your account or to provide information necessary to verify your account.

While some of the information that we collect and use may constitute sensitive personal information, we only process such information in order to provide the Partner Platform and within other exemptions under applicable law. For example, we may process your financial information in order to provide you the services you request from us or your driver’s license number in order to verify your identity.

No Sales or Sharing for Cross-Context Behavioral Advertising. We do not sell or share personal information about California residents as defined by the California Consumer Privacy Act (“CCPA”).

Do Not Track. Please note that our Services do not currently support “Do Not Track” requests.

If you are using the Partner Platform in Canada, the following additional terms apply.

Your Rights: Subject to limited exceptions under applicable law, you have the right to access your personal information and to update, correct or rectify such information if it is inaccurate, incomplete or no longer up to date. You also have the right to request information about the processing of your personal information, such as whether we hold such information about you, the purposes for which it is used, and the third parties with whom we may share your information, subject to applicable law.

Where we rely on your consent to collect, use or disclose your personal information for a particular purpose, you also have the right to withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw your consent to our collection, use or disclosure of your information, we may not be able to provide certain products, services or features that require us to process your personal information.

To exercise these rights, you may contact us using the contact information set out below. We may require certain personal information for the purpose of verifying the identity of the individual making the request.

Your Choices: We may send you direct marketing messages about Partner Platform features, third party services, promotions, contests, campaigns and events that we think may be of interest to you. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link included at the bottom of each email we send. Please note that even after you unsubscribe, you may still receive other communications, such as transaction and service-related messages, account updates or other communications necessary for the proper functioning of our services or to maintain a business relationship with you.

Transfer Outside Your Jurisdiction: We and our service providers (including members, subsidiaries, or affiliates of our corporate group) may access, store and otherwise process personal information outside of Canada (and, for residents of Quebec, outside of Quebec), including in the United States, Malaysia, Singapore, and other foreign jurisdictions where we or our service providers are located, in which case it will be subject to the laws of that particular jurisdiction. For information about how we or our service providers (including service providers outside Canada) process personal information, please contact us using the contact information set out below. We and our service providers may disclose your personal information if we are required or permitted by applicable law or legal process, which may include lawful access by foreign courts, law enforcement or other government authorities in the jurisdictions in which we or our service providers operate.

Contact: If you have any questions or concerns about our information handling practices, inquiries about how our service providers (including our service providers located outside of your jurisdiction) treat your personal information, or if you would like to exercise your privacy rights, you can contact our Privacy Office at https://www.tiktok.com/legal/report/Privacy-Office-Canada.

If you are located in the EEA, UK or Switzerland, the following additional terms apply.

Our Legal Bases and How We Process Your Information

We may only use your information when we have a “legal basis” to do so. We use different legal bases depending on why we use your information (in other words, the “purpose” of our processing). These legal bases are contractual necessity, legitimate interests (ours, yours or those of another party), consent, compliance with a legal obligation, performing a task in the public interest, and protection of vital interests.
Here we explain the legal bases we rely on when we process your information. This section also describes why we use your information, how this information is processed, the categories of information involved, and the associated rights (which always includes the right to access your information). For more information on how to exercise any of your rights, please check out the “Your Rights” section below.

Contractual Necessity

We use Information You Provide, Automatically Collected Information, and Information from Other Sources where it is necessary to perform the contract you enter into (our Terms) when you register for, access, or use the Partner Platform. This means we use your information to:

• Provide you with the Partner Platform. We use your information to provide and operate the Partner Platform so that you can create and manage your advertising campaigns, open and manage your store(s), interact with Users with respect to your products, and integrate with TikTok technology. We also use your information to provide you with personalized and customized features, content, and advice about the services we offer and the Partner Platform.
• Administer the Platform. We use your information to enable us to administer the Partner Platform such as to communicate with you on service related matters, provide you with updates and support, and respond to and process your queries, investigate and resolve claims, complaints or disputes (including when you tell us about a problem, or ask for a copy of your information).
• Support the purchase and delivery of products. We use your information to handle orders, such as assist with processing payments, facilitate the delivery of products, and communicate with you about your products. This includes sharing your information with buyers, payment service providers, and transaction fulfillment providers.
• Enforce our Terms, Guidelines, or policies. We use your information to enforce our Terms, Guidelines, and policies. This may include removing content (including through automated means) or suspending or banning your account if we determine that you are violating our Terms or Guidelines.

Your Rights: Whenever we use your information on the basis that it is necessary for the contract we have with you, you have the right to port information you have provided to us.

Legitimate Interests

We use your information where this is necessary to achieve legitimate interests - whether belonging to us, you, or a third party - provided these interests are not outweighed by your interests or fundamental rights and freedoms. We use the information we collect to:

Provide measurement and analytics services.

• We help Partner Platform users measure the effectiveness and distribution of ads, shopping listings, and other content viewed on consumer-facing TikTok services.
• Legitimate Interest relied upon: To enable Partner Platform users to view and understand how their ads or content performed and the audience that viewed or interacted with their ads or content. This is so that they can make informed decisions (such as what kinds of campaigns they may want to run, the type of audience they want to reach and the types of content that users enjoy the most). This helps keep the advertising and other content we show users relevant and entertaining, and keeps the Platform free for all users.
• Information used: Information You Provide, Automatically Collected Information, and Information from Other Sources.

Provide inspirational seller content.

• We share successful TikTok Shop sellers' Business Content, as well as certain performance data and insights about that content, with all sellers and creators for the purposes of inspiring them when they publish their own content on the Platform.
• Information used: Information You Provide and Automatically Collected Information.

Ensure the safety and well-being of our community.

• We use your information to ensure the safety and well-being of our community, including by reviewing Business Content (and if permitted under applicable law, Messages and associated metadata) for breaches of our Terms, Guidelines, and other policies. We may also access, preserve, and share the information described in Information We Collect with law enforcement agencies, public authorities, and copyright holders if we have good faith belief that it is necessary to protect the rights, property, and safety of us, our users, copyright holders and to detect, investigate, prevent, or address misleading activity, copyright infringement, or other illegal activity.
• Legitimate Interest relied upon: To keep our community safe, review compliance with our Guidelines, identify misuse of the Partner Platform, protect the rights, property, and safety of us, our users, copyright holders, detect, investigate, prevent, or address misleading activity, copyright infringement, or other illegal activity, and to improve and optimize our review process, for the purpose of identifying Business Content violating our policies.
• Information used: Information You Provide, Automatically Collected Information, and Information from Other Sources.

Ensure the security and stability of the Partner Platform.

• We use your information to ensure the stability and security of the Partner Platform, including analyzing user activity and performing A/B testing, verifying accounts, conducting user surveys, by identifying and combating technical or security issues (such as technical bugs, spam accounts, and preventing abuse, harmful activity, fraud, spam and other illegal activity).
• Legitimate Interest relied upon: To ensure the ongoing stability and security of the Partner Platform and to ensure it is continuously available and functioning.
• Information used: Information You Provide, Automatically Collected Information, and Information from Other Sources.

Review, improve, promote and develop the Partner Platform.

• We use the information we have to understand how people are using the Partner Platform and to develop and improve the Partner Platform, including to train, develop, and improve technology such as machine learning models and algorithms. We also use this information to better understand and promote the Partner Platform. For example, we review chats with our virtual assistant functionality as well as chats between sellers and buyers to improve technologies supporting such functions and to provide you with a more helpful service.
• Legitimate Interest relied upon: To improve, promote, and develop the Partner Platform in an informed way.
• Information used: Information You Provide, Automatically Collected Information, and Information from Other Sources.

Facilitate the compliance of the entities within our corporate group with their legal obligations.

• We may share your information with entities within our corporate group where it is necessary for them to comply with their legal obligations. This includes situations where they have obligations to comply with a valid legal request such as an order or disclosure request from regulators, law enforcement agencies or courts.
• Legitimate Interest relied upon: To enable entities within our corporate group to meet their legal obligations.
• Information used: Information You Provide, Automatically Collected Information, and Information from Other Sources.

Marketing communications.

• We may contact you by email, telephone, SMS, in-app or push notification about promotions, contests, products or services that we think will interest you or your company. We will obtain your consent to contact you where required by law.
• Legitimate Interest relied upon: To promote the Partner Platform and its products and services or third party products and services you offer that may be useful, relevant, valuable or otherwise of interest.
• Information used: Information You Provide, Automatically Collected Information, and Information from Other Sources.

Your Rights: Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.

Consent

We ask for your consent to access or use your information for specific purposes, which will be disclosed to you at the time we first collect your information pursuant to your consent. You’ll always be able to revoke your consent through your device permissions, or through your in-app or account settings.

Your rights: Whenever we use your information based on your consent, you can withdraw your consent at any time. However, your withdrawal of consent will not affect the lawfulness of processing your information based on your consent prior to your withdrawal of consent.

You also have the right to port information you have provided to us that we use based on your consent.

Compliance with a Legal Obligation

We may use your information where it is necessary to comply with a legal obligation (including our tax reporting obligations under EU law). This includes situations where we have obligations to communicate with you, take measures to ensure the safety of our users, or comply with a valid legal request such as an order or disclosure request from regulators, law enforcement agencies or courts.

Where you are a seller on TikTok Shop, this includes situations where we have obligations to:

• collect certain Profile Information to verify that such information is reliable and complete before we can allow you to offer products and services on TikTok Shop; and
• display certain Profile Information on TikTok Shop, in order to make it publicly visible to all users.

Your Rights 

You have rights and choices when it comes to your information. Some of these rights apply generally, while others will only apply in certain circumstances. Depending on the scenario, these rights may be subject to some limitations. TikTok Ireland will be responsible for responding to your request within the relevant periods provided by law. If necessary to resolve your request, TikTok Ireland will liaise with TikTok UK.

Access your information. You can ask us, free of charge, to confirm what information we process about you, to provide certain information about the processing, and for a copy of your information.

Delete your information. You can delete or ask us to delete some or all of your information.

Rectify your information. You can change or ask us to change or correct your information where that information is not accurate.

Port your information. You have the right to data portability in circumstances where we rely on contractual necessity or consent as our legal basis. This means that you have the right to receive your information in a structured, commonly used, and machine-readable format and to share it with a third party.

Object to the processing of your information. You also have the right to object to the processing of your information in certain circumstances. This right applies when we are performing a task in the public interest, pursuing our legitimate interests or those of a third party, or when your data is processed for the purpose of facilitating scientific or historical research in certain circumstances. In submitting an objection request, please provide all relevant information, including the processing activity you are objecting to, why you want to object and how the processing activity affects you, and any additional information that you think will help us review your request. We will stop the particular processing if we don't have compelling legitimate grounds to continue that processing or don’t need it for legal claims.

Restrict the processing of your information. You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defense of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.

To exercise any of the above rights, please contact us through our webform. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details or provide additional information so that we can understand your request.

We encourage you to “Contact us” if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the Irish Data Protection Commission (TikTok Ireland’s lead supervisory authority) or with your local supervisory authority.

Our Global Operations and Data Transfers

When we transfer your information outside of the EEA, the UK, or Switzerland, we ensure it benefits from an adequate level of data protection by relying on:

• Adequacy decisions. These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country offers an adequate level of data protection. We transfer your information as described in Information We Collect to some countries with adequacy decisions, such as the countries listed here; or
• Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 of the GDPR, which allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in Information We Collect to certain entities in our corporate group (as described here) and third parties in countries without an adequacy decision. For a copy of these adequacy decisions or standard contractual clauses, please contact us via the details provided in the “Contact us” section below.

Contact Us

You can contact us about this Partner Privacy Policy through our webform. You can reach TikTok's Data Protection Officer here.

You can also contact us at the following postal address.

• For users in the European Economic Area and Switzerland: TikTok Technology Limited, The Sorting Office, Ropemaker Place Dublin 2, Dublin, D02 HD23, Ireland.
• For users in the United Kingdom: TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom.

If you are using our services in India, the Partner Platform is provided and controlled by Bytedance (India) Technology Private Limited. TikTok is our brand for providing and promoting the services. When using these services from India, please accordingly read “TikTok”, “we” or “us” in this policy to refer to Bytedance (India) Technology India Private Limited.

If you are using our services in Indonesia, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Data Controller. The E-Commerce Services provided through the TikTok platform in Indonesia operates as “Shop.” References in this Partner Privacy Policy to “TikTok”, “we” or “us” shall, where appropriate, be taken to refer to PT Tokopedia and TikTok Pte Ltd which are the data controllers responsible for your personal data, including for the purpose of providing E-Commerce Services.

Age, Parental and Guardian Consent. By accessing and/or using the E-Commerce Services, you represent that you are at least 21 years of age or married or not under guardianship. If you are below 21 years old and you are not married, or under guardianship:

• you must obtain approval from your parent(s) or legal guardian(s); and
• your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the E-Commerce Services; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the e-commerce services will not, in any event, result in any violation of applicable laws and regulations relating to child protections.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or guardian(s) is not willing to open the account under their name, you must cease accessing the E-Commerce Services.

Your Choices. You may withdraw your consent to our disclosure of personal data to third parties. Upon your request, we will cease to display, publish, transmit, disseminate, and/or open the access to your personal data to third parties. Please note that by withdrawing your consent to the disclosure and/or collection of your personal data, we may not be able to fulfill your requests and you may not be able to use some Partner Platform features and functionality.

You may request that we (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some Partner Platform features and functionality.

To exercise any of your rights, contact us at https://www.tiktok.com/legal/report/privacy.

Notification. In the event of any breach of personal data, we will in accordance with applicable law, notify you and provide you with information regarding such breach of personal data.

Data retention. We retain your information for as long as it is necessary to provide you with the service. Where we do not need your information in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose in keeping such data. However, there are occasions where we are likely to keep this data for five (5) years (or longer if required) in accordance with our legal obligations or where it is necessary for the establishment, exercise or defense of legal claims.

After you have terminated your use of our Partner Platform and a five (5) year retention period has lapsed, we store your information in an aggregated and anonymized format. Non-personally identifiable information may be retained indefinitely for analytics.

If you are using our services in Japan, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Data Controller. If you are using the E-Commerce Services in Japan, the data controller responsible for the processing of your personal data is Bytedance KK., whose address is at Shibuya Hikarie, 2-21-1 Shibuya, Shibuya-ku, Tokyo, 150-8510, Japan. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and ByteDance KK.

Requirements for sharing and collecting your information:

• TikTok will conduct necessary and appropriate supervision of our employees, such as educating or training employees processing your information. Where a data breach has occurred or where TikTok has determined that it is likely that such a breach has occurred by us or our service providers, TikTok will report the relevant facts to you promptly, investigate and report thereon, and implement recurrence prevention measures.
• When outsourcing or subcontracting the processing of your information, TikTok will enter into a contract imposing the same level of data protection obligations as set forth in the terms with the outsourcee/subcontractor who has been retained by us for the processing of all or part of your information, and shall perform appropriate supervision and be responsible for the performance of the contract by the outsourcee/subcontractor.
• If TikTok transfers your information or audiences you create to third parties or TikTok affiliates that are located outside Japan, TikTok will impose on such third parties and TikTok affiliates the same level of data protection obligations as our obligations under TikTok Business Products (Data) Terms by way of a written contract or legally binding rules, except as otherwise permitted under the applicable laws, regulations, and applicable industry guidelines.
• TikTok is responsible for the accuracy, or deletion of any, of your information, as well as the authority to respond to any claims of rights under applicable laws and regulations. TikTok will provide disclosure regarding the processing of your information,, and TikTok will be responsible for responding to the exercise of data subject rights and complaints from users.

If you are using our services in Malaysia, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller. If you are using the E-Commerce Services in Malaysia, the data controller responsible for the processing of your personal data including for the purpose of providing E-Commerce Services is TikTok Shop (Malaysia) Sdn Bhd. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and TikTok Shop (Malaysia) Sdn Bhd.

If you are using our services in Latin America (excluding Brazil), the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Data Controller: If you are using the E-Commerce Services in Latin America, the data controller responsible for the processing of your personal data is TikTok Pte, with its registered address at 1 Raffles Quay, #26-10, South Tower, Singapore 048583.

Consent: By registering or using the Platform services, you provide your express consent to the processing of your personal data for the purposes indicated in this Privacy Policy. In addition to the purposes included in this Privacy Policy, you provide your express consent so that TikTok can process your data for marketing activities, promotions, advertisements and/or creation of personalized content, as well as other uses compatible with the authorized purposes.

How we share your personal data: TikTok may share your personal data with third-parties, such as commercial partners, affiliates, and other third parties which have a legal or business relationship with us, for the purposes described in this Privacy Policy. By providing your personal data and using the Partner Platform you agree to the mentioned transfers. You can always revoke your consent and exercise your rights, as stated below.

Your Rights: You have the following rights with respect to your personal data: access, rectification, cancellation and objection. You may also withdraw your consent and limit the use and disclosure of your personal data. The exercise of your rights should be in accordance with the data protection law; you may send your request through https://www.tiktok.com/legal/report/privacy , including at least the following:

The data subject's name and address, or other means to notify him/her of the response to his/her request;

Documents establishing the identity or, where appropriate, legal representation of the data subject;

A clear and precise description of the personal data with regard to which the data subject seeks to exercise any of the abovementioned rights;

Any other item or document that facilitates locating the personal data.

If you are using the Partner Platform in Nigeria, the following additional terms apply:

Legal bases for processing. We abide by the relevant principles for the processing of personal data as stipulated under Nigerian law. We collect and use personal data to offer the Partner Platform as described in this Partner Privacy Policy. By signing up to and/or using the Partner Platform, you agree to the processing and use of your personal data in accordance with this Partner Privacy Policy. We process your personal data on the basis that the processing is necessary for the performance of a contract which you are entering or have entered. In some circumstances, we may have to process data for other purposes that are not necessary for the performance of the contract. In such cases, the processing may be based upon (i) our legitimate interests; (ii) compliance with our legal obligations; (iii) consent you may have provided to us; (iv) for the performance of a task in public interest; and/or (v) to protect vital interests.

International Transfers. International data transfers are necessary for us to provide our services. If you are located in Nigeria, we rely on the performance of contract or where necessary, any other legal bases for international data transfer under the applicable data protection laws and regulations.

Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, in addition to the rights listed above, you shall have the right to: withdraw your consent at any time where the legal basis of our processing is consent; object to the processing of your personal data; request the restriction of processing in specific circumstances; and data portability.

Complaints and Remedies. You may raise complaints, exercise your rights or seek any remedies or reach our Data Protection Officer/Privacy Team at https://www.tiktok.com/legal/report/privacy. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details. You also have the right to lodge a complaint with the Nigeria Data Protection Commission via email at info@ndpc.gov.ng or through platforms available for complaints via its website at https://ndpc.gov.ng/.

If you are using our services in the Philippines, the following additional terms shall apply pursuant to the relevant laws, rules and regulations and issuances by the Philippines National Privacy Commission (“NPC”) on data privacy.

Data Controller. If you are using E-Commerce Services in the Philippines, the data controller responsible for the processing of your personal data including for the purpose of providing E-Commerce Services is ByteDance Philippines Inc. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and ByteDance Philippines Inc.

Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, you shall have the right to information, object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages and data portability. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

If you are using our services in South Korea, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

• Data retention. We destroy personal data whose purpose of collection as consented to by you have been achieved, or whose periods of and use to which you consented to or which were provided in this Partner Privacy Policy have expired; provided, however, we will continue to store your personal data for the following statutorily-prescribed periods, where applicable, including, but not limited to:
• Act on Consumer Protection in Electronic Commerce;
• Records on your cancellation of an order, your payment on a purchased item, and our supply of a good/service: 5 years;
• Records on the handling of consumer complaints or disputes: 3 years;
• Records on advertisements and labels: 6 months;
• Protection of Communications Secrets Act;
• Records on your visits to our website: 3 months.
• Destruction of Personal Data. We destroy your personal data in a manner that renders it unrestorable by the relevant department.
• Data Rights. You have the right to access personal data we hold about you, to rectify any personal data held about you that is inaccurate, to request the deletion of personal data held about you, and the right to request the suspension of the processing of your personal data. You can exercise your rights by contacting us at https://www.tiktok.com/legal/report/privacy.
• Data Security. We work hard to protect the Partner Platform and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. To this end, we have in place technical, managerial and physical safeguards, including internal policy for data protection, limiting the access to personal data on a need-to-know basis and controlling access to the facilities where personal data is processed.
• Entrustment and/or Overseas Transfer of Personal Data. We entrust your data to our affiliates, cloud storage providers, IT service providers, and data centers, some of whom are located abroad, subject to your consents or notifications to you, if applicable. The entities receiving and processing your data are committed to using and storing personal data in compliance with domestic and international regulations and to taking all available physical and technical measures to protect personal data. You may opt-out of such transfer so long as the transfer is not necessary to provide you with the Service, by contacting us at https://www.tiktok.com/legal/report/privacy.
• Third Party Provision and/or Overseas Transfer of Personal Data. We only provide your personal data to third parties overseas when we have obtained your explicit consent, unless another legal basis under the Personal Information Protection Act applies. Please see here for a list of personal data that may be provided overseas if you are using TikTok Shop Services as a global seller. You may opt out of this overseas transfer by unsubscribing from TikTok Shop. Please note that if you do not consent to the overseas transfer, you may be unable to use TikTok Shop services. The list has also set out the personal data that is processed with or without your consent as a global seller selling in TikTok Shop overseas.
• Direct Offshore Collection of Personal Data. We collect your personal information directly from Singapore.
• Local Representative Pursuant to the Personal Information Protection Act. Please send your inquiries concerning privacy issues in South Korea to our local representative pursuant to the Personal Information Protection Act. Contact details are as follows.

ByteDance LLC
Representative: Jaehoon Jung
Address: 3F, The Pinnacle Gangnam, 343 Hakdong-ro, Gangnam-gu, Seoul, 06060, Republic of Korea
Tel: +82 2 909 8817
Email: privacykr@tiktok.com

• Local Representative under the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. Contact details are as follows.

Bae, Kim and Lee LLC
Representative: Soon-Ik Kwon
Address: Tower B, Centropolis, 26 Ujeongguk-ro, Jongno-gu, Seoul, 03161,
Republic of Korea
Phone: +82-2-3404-0108
Email: privacytiktok@bkl.co.kr

If you are using our services in Thailand, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller. If you are using the E-Commerce Services in Thailand, the data controller responsible for the processing of your personal data is TikTok Shop (Thailand) Ltd., whose address is at No. 1 Park Silom Building, 9th-10th Floors, Convent Road, Silom Sub-district, Bangrak District, Bangkok. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and TikTok Shop (Thailand) Ltd.

Processing for Legal Obligations. In certain circumstances, we may require you to provide personal data where this is necessary for us to comply with applicable law, or to enter into or perform a contract between us and you. If you do not provide the required personal data, we may not be able to proceed with your request or provide our services to you.

Your Rights. Subject to applicable Thai personal data protection law, you have the right to withdraw consent for the collection, use and disclosure of your personal data, right to access your data, right to receive your personal data including in a format which can generally be read or used by an automatic tool or device or have this transmitted to another data controller, right to object to the collection, use or disclosure of your personal data, right to request that your personal data is deleted or de-identified, right to request the suspension of the use of your personal data, right to restrict the use of your personal data, right to correct, update, or complete your personal data, and right to lodge a complaint to the Personal Data Protection Committee if there has been non-compliance with applicable Thai data protection laws.

If you are using our services in Türkiye, the following additional terms apply along with the contents of the foregoing Partner Privacy Policy. In the event of any conflict between the following additional terms and the provisions of the main body of this Partner Privacy Policy, the following terms shall prevail.

Data Controller Representative. You may contact our data controller representative in Türkiye by email or mail to handle questions and complaints in connection with the processing of your personal data if you are in Turkiye.

ESİN ATTORNEY PARTNERSHIP

tiktok@esin.av.tr

AKAT MAHALLESİ GÜL SOKAK NO: 2/1 34335 BEŞİKTAŞ/İSTANBUL, TÜRKİYE

Legal bases for the processing your personal data. We rely on the following legal bases while processing your personal data in accordance with Article 5 of the Law No. 6698 on Protection of Personal Data:

• processing is explicitly laid down or dictated by laws;
• processing of your personal data is necessary provided that it is directly related to the conclusion or fulfilment of the contract between us;
• processing is mandatory for us to be able to comply with our legal obligations;
• the relevant data is made available to the public by yourself;
• Processing is mandatory for the establishment, exercise or protection of a right;
• processing is mandatory for our legitimate interests, provided that it does not violate your fundamental rights and freedoms;
• Your explicit consent (Please note that we rely on this legal basis only when we require your consent for the processing and we do not rely on this legal basis if and when we rely on one of the other legal grounds above)

Your rights. According to Article 11 of the Data Protection Law, you have the following rights with respect to your personal data:

The right to learn whether we process your personal data;

• The right to request information with regard to such processing, if we process your personal data;
• The right to learn the purposes of the processing and whether they are used for such purpose or not;
• The right to know the third parties within or outside the country, to whom we transfer your personal data;
• The right to request correction of incomplete or inaccurate personal data;
• The right to request deletion or destruction of your personal data under the conditions set forth in Article 7 of the Data Protection Law;
• The right to request that we notify the third parties, to whom we transferred your personal data, about the correction, deletion and/or destruction of your personal data per your request within the scope of the foregoing two items;
• The right to object to the negative results about you that are due to the analysis of your personal data processed solely by automated means; and
• The right to claim indemnification for damages incurred due to illegal processing of your personal data.

You may exercise your rights listed above by contact us at: https://www.tiktok.com/legal/report/privacy.

The requests found in your application will be resolved as soon as possible according to the nature of your request and within thirty days at the latest free of charge. However, if your request incurs additional cost to our company, then you may be charged over the tariff fee determined by the Turkish Personal Data Protection Board.

Amendments. The following sections of the Policy do not apply to individuals in Türkiye:

Language. This policy is available in English and Turkish. If there is any inconsistency or different interpretation between the English and Turkish versions, the Turkish text shall prevail.

If you are using the Partner Platform in the United Arab Emirates (“UAE”), the following additional terms apply. If any conflict arises between the main Partner Privacy Policy and the additional terms, the following terms shall prevail:

How we share your personal data

In addition to the main text of this policy, by using the Partner Platform in the UAE you agree to the terms of this Partner Privacy Policy and consent to our sharing of your personal data in line with the main text of this Partner Privacy Policy.

Governing law and dispute resolution

By using the Partner Platform in the UAE, this Partner Privacy Policy will be governed by and interpreted in accordance with the laws of the UAE. In the event of a dispute arising between the parties in connection with this Partner Privacy Policy:

• Where the dispute relates to a claim for a sum within the limits specified by the DIFC Small Claims Tribunal from time to time, then the dispute shall be referred by either party to the said Tribunal; and
• For all other disputes, the parties shall seek settlement of that dispute by mediation in accordance with the Mediation Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause. If the dispute is not settled by mediation within 30 days of the commencement of the mediation, or such further period as the parties shall agree in writing, the dispute shall be referred to and finally resolved by arbitration under the Arbitration Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause. The language to be used in the mediation and in the arbitration shall be English. In any arbitration commenced pursuant to this clause, the number of arbitrators shall be one and the arbitration shall be conducted in Dubai.

Complaints

In the event that you wish to make a complaint about how we process your Information, please contact us in the first instance at https://www.tiktok.com/legal/report/privacy and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the country in which you live or work where you think we have infringed data protection laws(where applicable).