Last Updated: [January 1, 2020]
Welcome to TopBuzz Inhouse (the “Platform”). The Platform is provided or controlled by Bytedance Inc. (“we” or “us”). We are controller of your personal data in the sense of Art. 4 (7) of the General Data Protection Regulation (“GDPR”) and other data protection or data privacy laws in the Member State of the European Union and other Guidelines with a data protection nature regarding the Platform and as such, we are committed to protecting and respecting your privacy.
To provide our services to you, we offer you a website and a free app that you can download onto your mobile phone. This policy sets out the basis on which any Personal Data from you will be processed, collected, used, and disclosed by us when you access or use our website, applications, products and content (collectively, the “Services”).
Please read the following carefully to understand our views and practices regarding your Personal Data and how we will treat it. Capitalized terms that are not defined in this policy have the meaning given to them in the Terms of Service.
We collect and process Personal Data either directly from you (e.g. when you provide certain information to us) or indirectly (e.g. through our Platform’s technology).
“Personal Data” means any information relating to an identified or identifiable natural person(“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Information you give us as a registered user. If you register an account with us to use the Platform, you must provide us with certain Personal Data, including your unique account name, your e-mail address and, if provided, your telephone number, your photograph, and your payment information (where required for the purpose of payment). You may also be able to register using your user credentials to certain social media sites, such as Twitter, Facebook or Google+.
Information we collect about you when you use the Services.You may use the public facing portion of the Services without registering an account. When you visit the Platform without registration we automatically collect information which will contain Personal Data, including your IP address (not using GPS data) and your language selection.
When you use our Services – whether registered or not – we automatically collect your IP address (not using GPS data) or other unique device identifiers, Cookies (as defined below), browsing records, mobile carrier, time zone and locale setting, mobile or device model, operating system and platform as well as information regarding your use of the Platform, e.g. the comments you make on our Platform (only when you are registered) or any other user-generated content and video content that you broadcast on our Platform.
Furthermore, we collect behavioural information, for example profiles and your presumed interests, alongside marketing information such as opt-ins and communication preferences. We also collect information about linking your contact or subscriber information with your activity across our Platform or by linking your activity on our Platform across all your devices using your email or social media log-in details.
Information we collect when you use the Service over the App. When you use our Service over the App on your mobile device and you are not registered to our services the Personal Data that we process consists of your IP address (not using GPS-data) and your language selection within the app. If you have registered for our service we collect your account name, e-mail address, telephone number, photographs (if provided), mobile phone model and the mobile phone system version.
Further, when you use the Platform on a mobile device, we process information about your location, including location information based on IP address or mobile device location settings, and if activated on your mobile device, by use of a Global Positioning System (GPS). If you do not wish to share your GPS location with us, you can switch off GPS functionality on your mobile device.
Information you choose to share from your social networks. If you choose to link the Platform to your social network or public forum account (such as Facebook or WeChat), you may provide us or allow your social network to provide us with information from your social network or public forum accounts. This data may include your use of the Platform on such public forums and/or social networks. For further information as to how and for what purpose the social network provider processes your Personal Data, please see their privacy policies.
Information from third parties. We may receive information if you use any of the other websites we operate or other Services we provide. We may also receive information, for instance, GAID, from third party SDKs, and from other sources, including business directories and other commercially or publicly available sources.
“Do not track” signals are preferences that users can set on their web browser to limit how their activity is tracked across third-party websites or online services. The Platform does not respond to “do not track” signals in your web browser.
We will use your Personal Data for the following purposes:
Personal Data that we collect from your visit on our website without your registration is processed for system administration (e.g. to improve our Website and services to you), for statistical or security proposes (e.g. to guarantee the website’s stability and security) of our website as well as to solicit your feedback. The processing of this Personal Data is necessary for the purposes of our legitimate interests pursuant to Art. 6 (1) lit. f GDPR.
In particular, we will process your Personal Data to be responsive to you and to ensure the proper functioning of our products and organization, Art. 6 (1) lit. f GDPR. As it is in our legitimate interests, we may use your Personal Data to:
• improve the Platform and to ensure content from the Platform is presented in the most effective manner for you and your device;
• administer the Platform and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• allow you to participate in interactive features of the Platform, when you choose to do so;
• personalize the content you receive and provide you with tailored content that may be of interest to you (in regard to personalized advertising, you can also choose whether to allow personalized ads anytime by setting your preference);
• keep the Platform safe and secure;
• develop our Platform and conduct product development;
• measure and understand the effectiveness of the advertising we serve to you and others;
• to understand how you use the Platform, including across your devices;
• to infer additional information about you, such as your age, gender, and interests;
• make suggestions and recommendations to you and other users of the Platform about goods or services that may interest you or them; or
• provide you – or permit selected service providers and business partners to provide you – with information about goods or services we feel may interest you. Where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this.
It is in our legitimate interests to promote the Platform and to use information that you give to us, such as user-generated content and video content that you may choose to broadcast on our Platform, as part of our advertising and marketing campaigns to promote the Platform in accordance with Art. 6 (1) lit. f GDPR.
If you choose to share your location with us, we will also use your data to provide you with location-based services, such as advertising and other personalized content.
When you register as user of our services, we obtain personal data to create your user account, which is necessary to provide you with you the Services according to Art. 6 (1) lit. b) of the GDPR.
We may further use your Personal Data from your registration in accordance with Art. 6 (1) lit. b GDPR to:
• notify you about changes to our Services;
• provide you with user support;
• enforce our terms, conditions and policies; or
• communicate with you.
TopBuzz Inhouse may download additional resources from the installed app to improve the in-app experience.
We are committed to maintaining your trust, and while we do not sell personal data to third parties, we want you to understand when and with whom we may share the personal data we collect for business purposes (in or outside your country).
We share the personal data we collect listed above with service providers and business partners to help us perform business operations and for business purposes, including research, payment processing and transaction fulfillment, database maintenance, administering contests and special offers, technology services, deliveries, email deployment, advertising, analytics, measurement, data storage and hosting, disaster recovery, search engine optimization, marketing, and data processing.
We may share your information with any member or affiliate of our group, which includes our subsidiaries, our ultimate holding company and its subsidiaries, and companies that we control, are controlled or under common control, and our service providers and strategic business partners, and their respective subsidiaries, in each case in or outside your country, for the purposes set out above (“How We Use Your Personal Data”). For the purposes of developing and maintaining the product, we share your personal data with our group company Bytedance Inc.
We may share your information with law enforcement agencies, public or tax authorities or other organizations if legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:
• comply with a legal obligation, process or request (including tax and related reporting requirements);
• enforce ourTerms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
• detect, prevent or otherwise address security, fraud or technical issues; or
• protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).
We may also disclose your information to third parties:
• in the event that we sell or buy any business or assets, in which case we may disclose your data to the prospective seller or buyer of such business or assets; or
• if we sell, buy, merge, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, user information may be among the transferred assets.
We may also share information for other purposes pursuant to your consent or with your further direction.
The Personal Data that we collect from you will be transferred to, and stored at, a destination outside of your country and the European Economic Area (“EEA”), specifically, to third party servers in the United States and Singapore. We transfer your Personal Data to the servers of our host provider Amazon Web Services, Inc in the United States of America.
It may also be processed by staff operating outside your country or the EEA who work for us, for one of our suppliers or one of our business partners. Please refer below to “The Security of Your Personal Data” for the security of your Personal Data in connection with the storage.
The transfer of your Personal Data to our host provider Amazon Web Services, Inc. is conducted under an adequate level of data protection as compared to the GDPR because Amazon.com, Inc. has certizied itself under the EU-US-Privacy Shield.
We may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to these websites.
We will retain your information for so long as we are required to retain such information under applicable laws.
We delete your browser behaviour information after 90 days. We installed a periodic review for the deletion of your browsing information and designated someone who is responsible for the review and deletion.
After you have terminated your use of our services, we may store your information in an aggregated and anonymised format. Notwithstanding the foregoing, we may also retain any personal information as reasonably necessary to comply with our legal obligations, allow us to resolve and litigate disputes, and to enforce our agreements.
The Platform is not directed at children under the age of 16. Users under the relevant age are not allowed to use the Platform or register an account on the Platform without the consent of their parent of guardian. If we become aware that Personal Data has been collected from a person under such age in the relevant jurisdiction and parental or guardian consent has not been provided, we will delete this information and terminate the person’s account. If you believe that we may have Personal Data about or collected from a child under the specified age in the relevant jurisdiction without the consent of their parent or guardian, please contact us at email@example.com
You may have the right to access your Personal Data that we hold about you and to correct, update, amend, suppress, delete or otherwise modify any Personal Data where it is inaccurate, or has been processed in violation of the applicable data protection regulations, unless we have to keep the Personal Data for legitimate business or legal purposes. Prior to the fulfilment of your request concerning your Personal Data, we may ask you to verify your identity before we can act upon your request. You may object to the use or processing of your Personal Data or withdraw consent to use your Personal Data at any time.
You may have the following rights:
• The right to require free of charge (i) information whether your Personal Data is retained and (ii) access to and/or (iii) duplicates of the Personal Data retained. However, if the request affects the rights and freedoms of others or is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee (taking into account the administrative costs of providing the information or communication or taking the action requested) or refuse to act on the request;
• The right to request proper rectification, removal or restriction of your Personal Data;
• Where processing of your Personal Data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the Personal Data concerning you in a structured, commonly used and machine-readable format or to have your Personal Data transmitted directly to another company, where technically feasible (data portability);
• Where the processing of your Personal Data is based on your consent, the right to withdraw your consent at any time without impact to data processing activities that have taken place before such withdrawal or to any other existing legal justification of the processing activity in question;
• The right not to be subject to any automatic individual decisions which produces legal effects on you or similarly significantly affects you; and
• The right to take legal actions in relation to any breach of your rights regarding the processing of the Personal Data, as well as to lodge complaints before the competent data protection regulators.
As far as we process your Personal Information on the basis of our legitimate interests (Art. 6(1) lit. f) GDPR), you may object to processing (Art. 21(1) GDPR) at any time. You may find a detailed description of our processing activities and the legal basis in the section before. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and decide whether to adjust the processing accordingly.
Please note that the processing of your personal data may involve direct marketing activities as described above. If you do not want to have your activity on TopBuzz’s Services processed for direct marketing activities, you can object to any data processing free of charge at any time via e-mail (Art. 21(2) GDPR) (for the other Contact Details see above).
Please send an e-mail to us if you would like to exercise any of your rights (firstname.lastname@example.org.).We will respond to your request consistent with applicable law.
We will use commercially reasonable efforts to generally notify all users of any material changes to this Policy, such as through a notice on our Platform, however, you should look at this Policy regularly to check for such changes. We will also update the “Last Updated” date at the top of this Policy, which reflects the effective date of such Policy. Your continued access to or use of the Services after the date of the updated Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must stop accessing or using the Services.
Questions, comments and requests regarding this Policy are welcomed and should be addressed to:
Address: Rue Robert Caumont, 33049 Bordeaux Cedex, France.
Email address: email@example.com.
Supplemental Terms –Jurisdiction-Specific
Sharing for Direct Marketing Purposes (Shine the Light). If you are a California resident, once a calendar year, you may be entitled to obtain information about personal information that we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information, as well as the names and addresses of those businesses with which we
shared customer information for the immediately prior calendar year. To request a notice, please submit your request to firstname.lastname@example.org.
Content Removal for Users Under 18. Users of the Platform who are California residents and are under 18 years of age may request and obtain removal of User Content they posted by emailing us at email@example.com. All requests must be labeled “California Removal Request” on the email subject line. All requests must provide a description of the User Content you want removed and information reasonably sufficient to permit us to locate that User Content. We do not accept California Removal Requests via postal mail, telephone, or facsimile. We are not responsible for notices that are not labeled or sent properly, and we may not be able to respond if you do not provide adequate information. Please note that your request does not ensure complete or comprehensive removal of the material. For example, materials that you have posted may be republished or reposted by another user or third party.