Privacy policy for our TikTok presence.

1. General information

Social media has become an integral part of the internet and modern communication. We also use the social network and video portal TikTok, operated by the Chinese company Beijing Bytedance Technology Ltd. The controller for users in the EU/EEA and Switzerland is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland jointly with TikTok Information Technologies UK Limited, One London Wall 6th floor, London, EC2Y 5EB, United Kingdom (hereinafter “TikTok”)

We would like to point out that your use of the TikTok social media service and its features is under your own responsibility. When you visit our TikTok page, TikTok collects personal data about you as a visitor, including through the use of cookies. We have no control over the processing and use of your data, as TikTok alone determines the processing. It is not possible for us to trace to what extent, where and for what duration the data are stored, to what extent the data are linked and analysed and to whom the data are transferred. We also have no insight into or control over retention periods, i.e. whether and to what extent TikTok complies with retention periods. Information about what data TikTok processes and how it is used can be found in TikTok's Privacy Policy . For more information on the use of cookies, please see HERE and TikTok's Cookie Policy .

The information TikTok collects in this way may be used to provide you with personalised content or advertising. You can find information on this and the available settings on the following TikTok support page: https://support.TikTok.com/ You can limit the processing of your data in the general settings of your TikTok account as well as here .

If you are under the age of 18, please follow the link below to change your privacy settings: https://support.TikTok.com/de/account-and-privacy/account-privacy-settings/privacy-and-safety-settings-for-users-under-age-18

2. Scope of data collection and storage.

Data processing by TikTok

We would like to point out that TikTok is responsible for collecting personal data from you when you visit our TikTok page.

This includes technical data such as device and network connection data when you access the platform. This is log file data such as device model, operating system, browser information, IP address and system language, and location information (e.g. country, state or city) based on your technical details (e.g. SIM card and IP address), but also data about your use of the TikTok platform (e.g. content viewed, duration and frequency of your use of the platform, how you interact with other users, your search history, preferences). The information is used by TikTok for purposes including advertising (analysis, creation of personalised ads), user profiling and market research.

TikTok uses different tracking technologies: TikTok uses cookies, pixels and local storage, among other things, to store information on your computer to record and analyse your interactions with our TikTok channel and to recognise you later. For more detailed information about what information TikTok collects, for what purposes and on what legal basis, please see TikTok's Privacy Policy .

You have the option to restrict TikTok's processing of your data in the privacy settings of your TikTok account and via the security settings.

How we process your data

We operate our TikTok page for the purpose of informing and communicating with you as a user and prospective user of our service. We process your personal data when you communicate with us via our TikTok channel, use the functions provided for that purpose (e.g. messages, comments, posts) or access the content we provide (e.g. videos). If you contact us in this way, we will process your immediately visible personal data (typically: username, profile picture, message content including any photos contained therein, date and time of the interaction) in order to respond to your contact or provide you with the content you requested. Beyond that, we do not process any other personal data from your use of the service.

The operation of the TikTok profile, including the processing of the personal data of the users, takes place on the basis of Article 6 (1)(f) GDPR to implement our legitimate interests in providing information and interaction via TikTok for and with you as our user. If your message is directed towards the conclusion of a contract or concerns the implementation of an existing contractual relationship, the legal basis for the processing is also Article 6 (1)(b) GDPR. Further legal bases for data processing may be derived in individual cases from Article 6 (1)(a) GDPR (consent) or Article 6 (1)(c) GDPR (legal obligation).

3. TikTok Insights

We use the analysis functions of TikTok Insights on our TikTok page. This will provide us with anonymised statistics provided by TikTok that will give us statistical information about visitors to our TikTok Page and their interactions with our TikTok Page and its content. The statistics contain the following information:

  • Number of: view videos, view profiles, likes, comments, shares, and subscribers.
  • Information on: Popular videos, total views of all videos, total likes of all videos, total comments, total shares, total play time, average play time, number of videos watched in full, total reach and reach by region.
  • Information about demographic characteristics (gender, region) and statistics about the usage activity of people who follow our TikTok page (times when people are particularly active; videos that are popular with people who follow our TikTok page).

We use these statistics to continuously improve our TikTok page and our posts and to better respond to the interests of our users. We cannot identify specific users from the statistics or link them to the data of our subscribers. The legal basis is Article 6 (1)(f) GDPR, our legitimate interest corresponds to the purposes mentioned.

4. Advertising Lead Forms

We use the TikTok Ads lead forms to offer potential purchasers the opportunity to contact us directly and voluntarily via a contact form displayed there. You can register for our events and webinars using the TikTok Ads lead forms.
We use a double opt-in process for registrations via the TikTok Ads lead form. This means that after you have provided us with your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm your registration. If you do not confirm this within 24 hours, your registration will be automatically deleted from the database. Upon confirmation, you will receive personal access to the event or webinar. Furthermore, we store your IP addresses and the times of registration and confirmation each time you register and confirm. The purpose of the procedure is to be able to prove your registration as part of our accountability obligations and, if necessary, to clarify any possible misuse of your personal data. Due to the fulfilment of accountability, we have a legitimate interest in accordance with Article 6 (1)(f) GDPR in processing the data of the double opt-in procedure.
When you contact us via a TikTok Ads lead form, the data you provide (title, first name, last name, company, street, house number, postcode, city, country, email and phone number) will only be processed by us to respond to your questions and requests and to enable you to participate in our events and features as requested. This also constitutes our legitimate interest in processing as defined by Article 6(1)(f) GDPR. Processing of the data for further purposes is not intended.
Personal data that must be provided is marked as mandatory in the respective registration form; any additional information is voluntary.

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you. You can object to the described processing of your personal data communicated via TikTok Ads lead form at any time with effect for the future. To do this, send us an e-mail at Datenschutzbeauftragter@rational-online.com and express your wish to withdraw with future effect.

In principle, we only store your personal data until the respective purpose for which the data was collected has been achieved. We delete personal data when the purpose of the data processing has been achieved and there are no other legal reasons for not deleting the data, such as the existence of statutory retention periods. These can arise, for example, from the German Commercial Code (Handelsgesetzbuch - HGB) or the German Fiscal Code (Abgabenordnung - AO) and can last from 6 to 10 years. If you have given us consent for a processing operation, the data related to the granting of consent will be stored until revoked or at the longest for the duration of the processing operation and after its termination within the scope of the limitation period.

We do not carry out automated decision-making, including profiling, as defined by Article 22 GDPR does not apply to the data collected by us through our TikTok page.

5. Disclosure and use of personal data.

TikTok is operated by the Chinese company Beijing Bytedance. The controller for users in the EU/EEA is TikTok Technology Limited, Dublin/Ireland together with TikTok Information Technologies UK Limited, London/United Kingdom. When you use our TikTok site, it is possible that your personal data may be transferred to and processed by other companies within the TikTok group of companies around the world.

Recipients or categories of recipients

TikTok processes personal data within its own group entities in connection with the provision of the platform within and outside the EU/EEA. According to TikTok, the data processed on the video platform is stored in data centres in the USA, Malaysia and Singapore, or made available via remote access to global group companies.

According to TikTok, these data transfers are based on adequacy decisions pursuant to Article 45 GDPR (for third countries for which the European Commission considers there to be an adequate level of data protection, e.g. for data transfers to groups of companies based in Canada, the UK, Israel, Japan and South Korea). For data transfers to countries for which there is no adequacy decision, TikTok applies the EU standard contractual clauses in accordance with Article 46 (2) GDPR.

For data transfers from us to TikTok, we have contractually secured data transfers to third countries through TikTok's Jurisdiction Specific Terms - there is no adequacy decision pursuant to Article 45 GDPR from the EU Commission - by agreeing standard contractual clauses pursuant to Article 46 (2) GDPR.

6. Your rights.

Provided that the conditions specified in the law are met, you have the following rights:

  • Right of access Article 15 GDPR
  • Right to rectification Article 16 GDPR
  • Right to erasure Article 17 GDPR
  • Right to restriction of processing Article 18 GDPR
  • Right to object Article 21 GDPR
  • Right to data portability Article 20 GDPR
  • Right to lodge a complaint with a supervisory authority Article 77 GDPR
  • Right to withdraw consent with effect for the future Article 7(3) GDPR

You have the right, pursuant to Article 21 GDPR, to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

If personal data is processed for direct marketing purposes, you also have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.

7. Contact details of the controller and data protection officer.

The data controller within the meaning of the GDPR is

RATIONAL Aktiengesellschaft
Siegfried-Meister-Straße 1
86899 Landsberg am Lech
E-mail: info@rational-online.com
https://www.rational-online.com

as joint controller with the respective country entity, which can be seen here in the list of recipients ,

to the extent that only we process the information you provide to us via TikTok.

Where the information you provide to us through TikTok is also processed by TikTok, then

TikTok Technology Limited,
10 Earlsfort Terrace,
Dublin, D02 T380, Ireland

together with
TikTok Information Technologies UK Limited
One London Wall 6th floor,
London, EC2Y 5EB, United Kingdom
shall be joint controllers responsible for processing.

Provisions within the meaning of a joint controller agreement pursuant to Article 26 (2) GDPR are covered by the contractually agreed Jurisdiction Specific Terms of TikTok.

If you have any further questions about privacy, please contact us. You can contact our data protection officer at

RATIONAL Aktiengesellschaft Data Protection Officer
Siegfried-Meister-Straße 1
86899 Landsberg am Lech

Or by e-mail at privacy@rational-online.com

8. More information

You can find further information on the safe use of social networks on the website of the Federal Office for Information Security at https://www.bsi-fuer-buerger.DE/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html