The following information about data processing on our page on www.tiktok.com or in the TikTok-App („TikTok-Page“) explains the data processing by
- us, FC Bayern München AG, Säbener Straße 51-57, D-81547 München, Deutschland („FC Bayern München“ or „We“), as operator of this TikTok-Page, and
- TikTok Technology Limited (Ireland), 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom (collectively referred to as „TikTok“) as operator of the TikTok-Plattform („TikTok-Platform“).
We and TikTok are each responsible for certain parts of the processing of your data when you use the TikTok-Platform. The main focus of the data processing lies with TikTok. Below we explain how this works and what rights you have:
I. Processing of personal data on the FC Bayern München TikTok-Page
The type and extent of the collection of personal data when visiting an TikTok-Page depends heavily on the behavior of the user and can be influenced in part by the user, i.e. you. If you would like to learn more about FC Bayern München, please also visit our website on www.fcbayern.com. We inform you about data processing in connection with the FC Bayern München-Website in our Privacy Policy for the FC Bayern München-Website, available at https://fcbayern.com/de/datenschutz.
1. Joint processing of statistical analyses by FC Bayern München and TikTok
When you use our TikTok-Page , TikTok collects - to our knowledge - the following personal data ("Usage Data"):
We use statistical evaluations of the use of our TikTok-Page, which are provided to us in an anonymized form within the scope of the TikTok Pro Account. The evaluations include the following data in particular:
- Number of followers and growth of followership
- Number of video views (total and per photo/video)
- Total play time and average play time of our videos
- Number of views of our TikTok-Page
- Number of videos posted
- Number of likes of our videos (total and per photo/video)
- Number of comments on our photos and videos (total and per photo/video)
- Number of times a photo or video was shared (total and per photo/video)
- Average playback time of a video
- Number of users (in percent) who watch a video to the end
- Percentage of how users became aware of our content (e.g. via “For You” or as a follower)
- Information about where our users come from
- Information about what times followers are most active on our TikTok-Page
We do not receive this usage data directly, but only from TikTok in aggregated form via the TikTok business tool "Analytics" (https://www.tiktok.com/creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics/) ("Analytics Data"). We cannot assign Analytics Data to your person.
Without our TikTok-Page, TikTok could not collect the usage data. For the processing of the usage data, we and TikTok are therefore so-called "joint controllers". This means that TikTok and we process this data with the common purpose of learning about the usage behavior of the users of our TikTok-Page. TikTok, as the operator of the TikTok platform, collects the detailed usage data from you in this regard; we only receive the aggregated Analytics data from TikTok. Therefore, only TikTok makes the decisions about the processing of the usage data in connection with the Analytics business tool. In the event of such joint responsibility, the EU General Data Protection Regulation requires that we enter into a specific contract with TikTok. You can access this contract here: https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms?. The contract contains further details and explanations about our joint responsibility with TikTok in the context of the Business Tool Analytics (there under "Insight Reporting")
Art. 6 para. 1 lit. f GDPR (balancing of interests) is the legal basis for our involvement in the processing of usage data. Our interest here is the administration and improvement of the TikTok-Page. We do not require any further legal basis for the processing of Analytics data, as this is not personal data.
II. Processing of personal data by FC Bayern München
1. likes, posts and messages
When you actively use our TikTok-Page, we process the following personal data ("Action Data"):
- Your TikTok username and profile picture,
- Your active click interactions with our posts ("likes", "shares", etc.), and
- Your comments, posts, direct messages, and other content that you provide to us on the TikTok-Page.
We process this action data to provide you and other users of the TikTok-Page and our other media offerings (such as our website and app, "Other Media Offerings"), your content on our TikTok-Page, the TikTok-Page itself, and the FC Bayern TikTok experience, and to respond to your requests, if any. We do not profile you or mix the Action Data with any other data we have about you - unless you specifically request it.
We process the Action Data based on our legitimate interests in providing relevant content to our users and followers on TikTok and enabling you to use our TikTok-Page and its functionalities (Art. 6 para. 1 lit. f GDPR). We respond to your comments or posts on the TikTok-Page to answer your inquiry (Art. 6 para. 1 lit. b GDPR).
In cases where your campaign data or content is used on other media offerings, the legal basis for the processing is Art. 6 para. lit. 1 f GDPR (balancing of interests). Our interest here is to inform our fans and the users of our media offers.
2. Other uses of our TikTok-Page
In individual cases, your consent may be required for the processing of your personal data (here also action data) (Art. 6 para. 1 lit. a GDPR). This is the case, for example, if we want to share a post from you on other media offers (details can be found in our website privacy policy: https://fcbayern.com/de/datenschutz) and people are depicted in the post - yourself or others. You give your consent by posting with an appropriate hashtag. You can revoke your consent at any time with effect for the future by sending us a message. The legality of the data processing carried out by us before revocation remains unaffected. In other cases, we will explain further details about this data processing in connection with obtaining your consent.
3. Storage duration for processing by FC Bayern München
We process your Action Data for the described purposes only as long as this is necessary, i.e. generally as long as we operate our TikTok-Page or as long as your active action on our TikTok-Page is online or until we have conclusively answered your Direct Message. Beyond that, we only store your personal data to fulfill any legal retention obligations.
4. Data recipients in case of processing by FC Bayern München
a. Processor. We may transfer your Action Data in connection with the purposes described here to external service providers, such as IT and service providers or advertising agencies. We have carefully selected these service providers and concluded data processing agreements with them.
b. Other controllers. In individual cases, we pass on your Action Data to other controllers who process the personal data for their own purposes, insofar as this is necessary for the execution of the contract or the provision of services, e.g. in the context of raffles. These other controllers may use the data thus transmitted exclusively for the purpose for which we transmitted it. The transmission of your Action Data for these purposes is carried out for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR) or due to our legitimate interest (Art. 6 para. 1 lit. f GDPR) to design our operation efficiently.
c. Other recipients. We will only transfer your action data to other recipients in individual cases if and to the extent this is required or permitted by law or in order to enforce legal claims or to investigate or prevent suspected or actual illegal activities. In these cases, we will inform you separately about the respective transfer, if and to the extent this is legally required.
d. Other Instagram-users. In addition, potentially anyone can see your publications on the TikTok platform, as it is a public platform.
III. Data processing by TikTok
When you visit our TikTok-Page, TikTok also collects and processes your personal data, including your Action Data. We have no influence on what data TikTok processes, to what extent and how, or whether and how TikTok passes this data on to third parties, in particular to countries outside the European Union. It is your responsibility to familiarize yourself with this and decide whether you agree with it.
TikTok's processing of your personal data, including the respective legal bases, is governed by TikTok's privacy information available at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE, including the shared responsibility agreement described above (https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms?).
Please note in particular the following:
1. Data transfer to the USA and other third countries
In order to provide the TikTok-Page on the TikTok Platform, Your Personal Data will be processed by TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited and transferred to TikTok "Corporate Group" companies in the United States, Canada, Israel, Japan, South Korea, Brazil, China, Malaysia, the Philippines and Singapore (as set forth at https://www.tiktok.com/legal/page/eea/transferee-countries/en). Unless the aforementioned countries have adequacy decisions for data transfers, TikTok uses EU standard contractual clauses for the transfers.
2. Data collection via cookies and app interfaces
If you visit our TikTok-Page through a browser or through the TikTok-App, TikTok may use cookies and similar technologies, such as Pixel, Web Beacons and local storage (LocalStorage) or app interfaces to optimize our TikTok-Page and the TikTok-Platform and provide faster and safer access, to collect data on user behavior on the TikTok-Platform for analytical purposes, and to serve you advertisements on partner platforms (e.g., Google).
In addition, advertisers or other partners of TikTok may set cookies or similar technologies on your device. We have no control over this data processing.
What cookies and similar technologies TikTok uses and what information TikTok obtains through cookies and other tools, how they are used, how long they are stored by TikTok and with which third party partners they are shared, TikTok describes here: https://www.tiktok.com/legal/page/global/tiktok-website-cookies-policy/en.
IV. Your data protection rights
1. At FC Bayern München
You have the following legal rights with respect to the Action Data in relation to FC Bayern München AG, provided that the respective requirements are met. You can find more information about your rights and the relevant requirements on the website of the EU Commission at https://commission.europa.eu/law/law-topic/data-protection/reform/rights-citizens_en.
a. Right of information
As a data subject, you have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to obtain information about this personal data as well as further information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.
b. Right of rectification and completion
As a data subject, you have the right to request the rectification of your inaccurate personal data without undue delay. Considering the purposes of the processing, you have the right to request the completion of incomplete personal data..
c. Right of deletion („Right to be forgotten“)
As a data subject, you may have the right to have your personal data deleted. This is the case, for example, if your personal data is no longer necessary for the original purposes, you have revoke your declaration of consent under data protection law or the personal data was processed unlawfully.
d. Right to restrict processing
As a data subject, you have the right to restrict processing in the cases prescribed by law.
e. Right of data portability
As a data subject, in the cases prescribed by law you have the right to receive personal data concerning you you in a structured, common and machine-readable format.
f. Right to object
As a data subject, you have the right to object the processing of certain personal data concerning you at any time on grounds relating to your particular situation.
In the event of direct marketing, you as the data subject have the right to object at any time to processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
g. Right to revoke your data protection consent
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out until the revocation is not affected by this.
h. Right to complain to a data protection authority
You have the right to lodge a formal complaint to a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. Competent supervisory authority for the FC Bayern München AG is the Bavarian Data Protection Authority (https://www.lda.bayern.de/de/kontakt.html).
If you have any further questions that are not answered by this Privacy Policy, please feel free to send us an e-mail to the following address: datenschutz@fcbayern.com. You can contact the data protection officer of FC Bayern München also at datenschutz@fcbayern.com.
2. At TikTok
Information about data processing and your privacy rights can be found in the privacy policy on TikTok https://www.tiktok.com/legal/page/eea/privacy-policy/en.
Version 8.2023