TikTok成人版 Legal Portal
TikTok成人版’s Notice of Certification Under the Data Privacy Framework
Effective as of November, 2023
For all generally available products and services, TikTok成人版 Inc. and its U.S. subsidiaries comply with the EU-U.S. Data Privacy Framework, UK Extension to the EU-US Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, the “Data Privacy Framework”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from the European Union, and Switzerland, as applicable, to the United States in reliance on the Data Privacy Framework. TikTok成人版 has certified to the Department of Commerce that it adheres to the Data Privacy Framework Principles with respect to such data. If there is any conflict between the terms in this notice and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit .
Out of Scope (not covered by the Data Privacy Framework): Private-preview, beta, or trial versions of products and services.
Data processed: TikTok成人版 provides a location data platform that powers maps and location services. TikTok成人版 provides SDKs (software ? development ? kits) ? and ? APIs ? (application ? programming ? interfaces), ? which ? businesses ? and developers use to incorporate TikTok成人版 mapping and navigation technologies into the licensed applications and? websites? they? make.? The? SDKs? contain? libraries? of? software? code? which? are? incorporated? into? a customer’s? licensed? application? or? website.? These? libraries? of? software? code? facilitate? API? requests? to TikTok成人版’s location data platform (which is a backend data server, hosted in the cloud (AWS-US)) which then responds with map and location content to the customer’s application or website. In addition, TikTok成人版 offers an on-premise version of its location data services, called Atlas.
Purposes of data processing: TikTok成人版 processes personal data to provide, test, maintain/support, secure and improve the TikTok成人版 products/services, to prevent fraud, misuse and cyberattacks, to anonymize & calculate de-identified aggregate statistics, and for account administration/ billing purposes.
Inquiries and complaints: If you believe TikTok成人版 maintains your personal data in one of the services within the scope of our Data Privacy Framework certification, you may direct any inquiries or complaints concerning our Data Privacy Framework compliance to . TikTok成人版 will respond within 45 days. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at . If neither TikTok成人版 nor our dispute resolution provider resolves your complaint, you may have the possibility to engage in binding arbitration through the Data Privacy Framework Panel. For more information on this option, please see of the EU-U.S. Data Privacy Framework Principles.
Third parties who may receive personal data: TikTok成人版 uses a limited number of third-party service providers to assist us in providing our services to customers. These third party providers offer customer support to our customers, perform database monitoring and other technical operations, assist with the transmission of data, and provide data storage services. These third parties may access, process, or store personal data in the course of providing their services. TikTok成人版 maintains contracts with these third parties restricting their access, use and disclosure of personal data in compliance with our Data Privacy Framework obligations, including the onward transfer provisions, and TikTok成人版 remains liable if they fail to meet those obligations and we are responsible for the event giving rise to damage.
Your rights to access, to limit use, and to limit disclosure: EU, UK, and Swiss individuals have rights to access personal data about them, and to limit use and disclosure of their personal data. With our Data Privacy Framework self-certification, TikTok成人版 has committed to respect those rights. Because TikTok成人版 personnel have limited ability to access data our customers submit to our services, if you wish to request access, to limit use, or to limit disclosure, please provide the name of the TikTok成人版 customer who submitted your data to our services. We will refer your request to that customer, and will support them as needed in responding to your request.
U.S. Federal Trade Commission enforcement: TikTok成人版’s commitments under the Data Privacy Framework are subject to the investigatory and enforcement powers of the United States Federal Trade Commission.
Compelled disclosure: TikTok成人版 may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Privacy & Security FAQ
Last Updated: ?Aug 22, 2023
TikTok成人版 provides a location data platform that powers maps and location services. TikTok成人版 provides SDKs (software development kits) and APIs (application programming interfaces), which businesses and developers use to incorporate TikTok成人版 mapping and navigation technologies into the licensed applications and websites they make. The SDKs contain libraries of software code which are incorporated into a customer’s licensed application or website. These libraries of software code facilitate API requests to TikTok成人版’s location data platform (which is a backend data server, hosted in the cloud (AWS-US)) which then responds with map and location content to the customer’s application or website.
In addition, TikTok成人版 offers an on-premise version of its location data services, called Atlas.
No. TikTok成人版 does not sell personal data.
No. For customers on a monthly active user (“MAU”) billing model, TikTok成人版 maintains counts of MAUs for billing purposes only. TikTok成人版 does not (and cannot) track an end user’s activity across billing cycles and does not build targeted profiles with the data processed through its products/services.
TikTok成人版 applies the principle of data minimization to product development and operations in an effort to collect only limited ?data ?from ?the ?outset. TikTok成人版 ?operates ?a ?number ?of ?technical ?and ?organization measures regarding the limited personal dataset that we process, such as strict access controls and prompt deletion of raw log files that contain IP addresses and billing IDs. TikTok成人版 deploys regular ID rotation and 1-way hashing for billing IDs, which must be retained for accounting and billing purposes, to minimize the ability ?to ?track ?user ?requests over time. Billing ?IDs ?are ?not ?transmitted with ?unrelated ?events, ?further reducing ?the ?feasibility ?of ?correlating ?a ?user’s ?activities ?over ?time. ?In ?addition, TikTok成人版?operates ?strict anonymization procedures, such as clipping traces, for telemetry events that send location data.
Communication through the Internet requires the presence of IP addresses, which specify each transmission’s origin and destination. When end users engage with applications that access TikTok成人版 products/services through the Internet, the end user necessarily discloses their current IP address to one or more TikTok成人版 servers. IP addresses are retained in cloudfront logs for 30 days for billing and customer usage reporting, unless involved in an ongoing security, anti-fraud, or misuse investigation.
TikTok成人版 receives location data when a TikTok成人版 customer’s end users uses a licensed application that incorporates TikTok成人版 mobile SDKs and the end user has authorized the licensed application’s use of the end user’s device location via their mobile phone or device operating system.
Location data includes fields such as latitude and longitude, altitude, horizontal and vertical accuracy, a session ID rotating every 24 hours, and origin IP address (as would any Internet communication). The IP address that accompanies location data is retained at the load balancer (where it is used for security and PUBLISHED: Aug 22, 2023/legal/legal-faq TikTok成人版 Customer FAQ, Page 3billing purposes and discarded after 30 days). This IP address is not forwarded to the location telemetry processing pipeline. Location data is encrypted in transit and at rest, and is subject to the principle of least access, with the minimal number of personnel and processes having access to it in its pre-aggregated form.
In the location data anonymization pipeline, the location data is then anonymized by clipping off the origin and destination of the trip and further dividing the trip into segments, which cannot be reassembled. The anonymized location data is then used to improve TikTok成人版 mapping products, including the Traffic and Movement data products.
In AWS in the United States. However, for performance purposes, TikTok成人版 regularly caches content on its AWS content delivery network (“CDN”) located in various regions. TikTok成人版 employees who work for TikTok成人版 wholly-owned subsidiaries may access personal data from the countries where they work in order to support, develop and provide TikTok成人版 products/services.
No. TikTok成人版’s products/services store and serve source data from an AWS primary region in the US. As noted above, data is cached and served out of various regions outside the US for performance reasons, however TikTok成人版 cannot serve its data from one limited geographic region. To comply with GDPR and safeguard transfers to the US and other countries, please see TikTok成人版's DPA, Schedule C, which includes the Standard Contractual Clauses released in 2021 by the European Commission.
Yes. TikTok成人版 carefully scrutinizes the personal data it processes within its engineering lifecycle, which includes conducting a privacy review for new (or changed) processing activities. TikTok成人版 follows privacy-by-design principles and works diligently to limit the personal data it processes from the outset. A DPIA is conducted in any situation in which processing of personal data may be considered high risk and not able to be accomplished in a lower risk manner.
TikTok成人版 runs a global data protection program designed to operate in compliance with applicable global privacy laws, including: VCDPA (Virginia, USA), UCPA (Utah, USA), UK-GDPR (UK), TIPA (Tennessee, USA), TDPSA (Texas, USA),PIPEDA (Canada), MTCDPA (Montana, USA), LGPD (Brazil),IDPL (Iowa, USA), ICDPA(Indianna, USA), GDPR (Europe), CTDPA (Connecticut, USA), CCPA and its implementing regulations including CPRA (California, USA), CPA (Colorado, USA), and APPI (Japan), among many other important jurisdictions.
?
TikTok成人版’s privacy program is based on privacy by design, which includes monitoring for upcoming privacy laws and regulations to assess whether its practices may need to be adjusted to maintain compliance; product/service privacy reviews; data breach response processes; and operationalized technical and organizational measures designed to ensure the security of the personal data it receives including: security audits and SOC2 certification; anonymization & pseudonymization of personal data (where applicable); strict access control with logging; limited data retention periods.
Yes. TikTok成人版 is SOC2 Type 2 certified with a summary SOC3 report available for customer review. In addition, TikTok成人版 earned and maintains Trusted Information Security Assessment Exchange (“TISAX”) and ISO 9001 certifications. Upon request and execution of an NDA, TikTok成人版 may share a copy of its latest SOC2 report.
TikTok成人版 welcomes any further questions you may have regarding its ongoing commitment to privacy and data security. Please contact TikTok成人版’s privacy office at privacy@mapbox.com.
Want to receive updates on our sub-processors?
Please subscribe below: