TikTok privacy policy

1. General

Thank you for visiting the TikTok page of STRABAG SE. In this document, we will show you which of your personal data we process when you visit our page on the TikTok platform. 

2. Information on the controllers and data protection contact person

The Controller for the appearance of STRABAG SE on the TikTok platform is: 
STRABAG SE 
Donau-City-Str. 9 
1220 Vienna 
Austria 
Phone: +43 1 22422-1012 
E-mail: data-protection-group@strabag.com 
Website: www.strabag.com 

If you have any questions about the processing of personal data or about data protection in general, you can contact Group Privacy at data-protection-group@strabag.com. 

Due to processing operations for which TikTok is also responsible as the platform provider, the controller and  
 
TikTok Technology Limited (hereinafter “TikTok”), The Sorting Office, Ropemaker Place, Dublin 2, Dublin, D02 HD23, Ireland 
are considered joint controllers within the meaning of Art. 26 GDPR. 

3. Processing of your personal data

STRABAG SE processes personal data only to the extent permitted by law. The following is further information: 
 
a. Processing by STRABAG SE 
When you visit the TikTok page of STRABAG SE, STRABAG SE as the operator of the TikTok page, processes the following personal data about you: 
- Your actions on and interactions with our page 
(including, but not limited to, your direct messages, requests, reactions, posts, comments, and likes or shares of our posts). The type of personal data depends on the content you share. 
- Your publicly visible profile data (e.g. your name and profile picture). Again, the type of personal data we process depends largely on what content you share and how you have set the visibility of your profile. In general, we recommend that you do not share sensitive or confidential data on social media. 
 
STRABAG SE processes your personal data in the context of operating its TikTok page for the purpose of: 
- employer branding 
- marketing 
- enhancing brand image 
- knowledge transfer on the topics of everyday construction site life, sustainability, innovation 
- exchange with our community 
 
The legal basis for the data processing, with reference to our above-mentioned legitimate interests, is Art. 6 para. 1 lit. f) GDPR as well as Art. 6 para. 1 lit. b of the GDPR for cases in which it is necessary to react to your messages [--> Recruiting]. STRABAG SE reserves the right to check whether comments or other interactions on its TikTok page violate applicable law or the corresponding community guidelines and, if necessary, delete infringing comments. In the event of an accumulation of infringing comments, STRABAG SE may process the affected usernames for the purpose of internal coordination. This processing is based on the legitimate interest of STRABAG SE (Art. 6 para. 1 lit. f GDPR) in providing a reputable online presence and complying with legal requirements. 
 
TikTok provides anonymized usage statistics (analytics services) based on the actions and interactions of followers (e.g., likes, shares, comments, etc., number of followers, frequency and duration of page views by section, reach of a post, and statistics on followers by age, language, origin, or interests). 
 
These statistics help STRABAG SE to stay in touch with followers and fans, to understand the use and reach of its posts, to evaluate content and identify usage preferences, and to design the TikTok page to be as relevant as possible to its target audience. STRABAG SE has no influence over the creation and processing of these usage statistics and the underlying data. The creation and processing of these statistics is the responsibility of the TikTok platform administrator and STRABAG SE has no insight into the personal data of individual followers or users (see also point II in section B). The usage statistics are always anonymized. This data processing is carried out on the basis of the aforementioned legitimate interests (Art. 6 para. 1 lit. f GDPR). 
 
STRABAG SE also uses the anonymized usage statistics to place interest-based advertising or promote posts on the social media platforms used by STRABAG SE. The delivery of interest-based advertising and the promotion of posts on the social media platforms used by STRABAG SE is based on an analysis of the user's previous usage behavior by the respective social media platform, and STRABAG SE cannot view the personal data of individual users, combine this personal data with other personal data processed by STRABAG SE and cannot identify the users to whom interest-based advertising is delivered (for more information, see point II in section B). This data processing is carried out on the basis of the aforementioned legitimate interests (Article 6(1)(f) GDPR). Should STRABAG SE, in exceptional cases, carry out an extended comparison with the customer lists that we upload to the respective social media platform in the context of interest-based advertising, this will only be done on the basis of your consent (Article 6 (1) (a) GDPR).  
 
STRABAG SE processes your personal data only for as long as necessary for the purposes stated above. If you object to the processing for the purposes of our legitimate interests (Art. 6 (1) (f) GDPR), STRABAG SE will delete your personal data unless further processing is permitted under the relevant legal provisions. Likewise, STRABAG SE will delete personal data if it is obliged to do so for other legal reasons. In accordance with these general principles, STRABAG SE generally deletes personal data as soon as the legal basis no longer applies, when it is no longer required for the stated purposes or when the stated purposes no longer apply and there is no other legal basis (e.g. commercial and tax law retention periods), or otherwise when the other legal basis no longer applies. 
 
In regard to the publication of data on the TikTok platform (www.tiktok.com), it should be noted that, due to the very rapid dissemination of information and data as well as its free availability on the internet, it would not be possible to completely delete the data. 
As part of the provision of the TikTok page, STRABAG SE works with a content agency that supports the creation of content and the provision and optimization of the TikTok page. Since this service provider processes personal data on behalf of STRABAG SE, the company has concluded a data processing agreement with them and agreed on appropriate guarantees for the protection of personal data. STRABAG SE selects service providers with great care; they process personal data exclusively for the performance of their tasks, are contractually bound by the instructions of STRABAG SE, implement appropriate technical and organizational measures for the protection of personal data and are regularly monitored by STRABAG SE. 
The service provider and data processor used by STRABAG SE is: 
 
Virral GmbH 
Im Zollhafen 12 
50678 Cologne 
 
b. Processing by TikTok 
The administrator of the TikTok platform is solely responsible for the processing of personal data on the platform itself. The administrator processes personal data about you when you visit the TikTok page of STRABAG SE, usually regardless of whether you have a user account on TikTok or are logged in there, and also typically uses cookies and other storage and (in some cases cross-device) tracking technologies. For more information about the processing of your personal data by the administrator, please refer to the data protection information: 
 
 
https://www.tiktok.com/legal/privacy-policy-eea?lang=de&selection=true 
 
TikTok also provides STRABAG SE with anonymized usage statistics (so-called Page Insight data) of the TikTok page based on the actions and interactions of followers (for more information, see point I in section B). STRABAG SE has no influence on and is not involved in the creation and processing of these usage statistics or the underlying data. These statistics are created and processed under the sole responsibility of the TikTok platform administrator, and STRABAG SE cannot see the personal data of individual followers or users. The statistics are anonymized. It is possible that TikTok also compiles its own personalized usage statistics, for example for its own market research, advertising or other business purposes, in the course of which they may also process personal data outside the European Union, over which STRABAG SE also has no influence. For more information about the processing of your personal data by the TikTok platform administrator in the context of creating and processing usage statistics, please refer to the usage statistics information on the following website: 
https://www.tiktok.com/creators/creator-portal/tiktok-content-strategy/understanding-your-analytics/ 
 
For more information about how your personal data is processed by the TikTok platform administrator for the purposes of interest-based advertising and how you can change your profile settings and advertising preferences, please visit the following website: 
 
https://support.tiktok.com/en/account-and-privacy/personalized-ads-and-data 

4.Transfer of personal data to third countries

TikTok also transfers your personal data to recipients based outside the EU/EEA. We have no influence over this. 

5. Rights of data subjects

If you wish to exercise your rights or file a complaint in connection with the processing of personal data, you are welcome to contact the Group Data Protection department of STRABAG SE. The contact details can be found in Section 1 of this data protection notice. 
According to the General Data Protection Regulation, you have the following rights: 
a) If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 GDPR).
b) If incorrect personal data is processed, you have the right to correct it (Art. 16 GDPR).
c) If the legal requirements are met, you can request the deletion or restriction of the processing (Art. 17, 18 GDPR).
d) If you have consented to the data processing or the data processing is based on a contract and the processing is carried out using automated procedures, you may have the right to data portability (Art. 20 GDPR).e) If you have given us consent to process your personal data, you have the right to revoke this consent at any time with effect for the future. The lawfulness of the processing of your personal data until the revocation remains unaffected (Art. 7 para. 3 DS-GVO).
f) You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 1 lit. f GDPR. If you file an objection, STRABAG SE will no longer process your personal data unless STRABAG SE can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 para. 1 GDPR).
If STRABAG SE processes your personal data on the legal basis of “legitimate interest” for direct marketing purposes, you have the right to object to such processing at any time. 
g) In addition, you have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates applicable law.

6. Contact persons for the exercise of your rights

The contact persons for exercising your rights vis-à-vis STRABAG SE and further information can be found on the following website: www.strabag.com 
 
The point of contact for the exercise of your rights in relation to TikTok is the TikTok platform administrator, who alone is able to directly provide the necessary information or functionality of the respective platform and to take appropriate measures without delay. The points of contact for the exercise of your rights vis-à-vis the TikTok platform administrator, as well as further information, can be found in TikTok's privacy policy: 
 
https://www.tiktok.com/legal/privacy-policy-eea?lang=de 
 
If support from STRABAG SE is possible or necessary, STRABAG SE will of course support you by forwarding your request to TikTok so that you can exercise your rights vis-à-vis TikTok.