At Graz University of Technology (TU Graz), protecting your data is a top priority. All of our procedures and processes are compliant with the applicable data protection regulations. With this Privacy Policy, we provide you with detailed information on how we process your personal data when using the social media platform TikTok, including the type, purpose and legal basis for the processing of personal data, among other things. Your personal data is processed exclusively on the basis of the legal provisions on data protection and data security, in particular the Austrian Data Protection Act (DSG), the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG 2021).
The data controller for processing your personal data is Graz University of Technology, Rechbauerstraße 12, 8010 Graz.
3. Categories of Persons and Data
If you appear on the TikTok channel of TU Graz, the following personal data may be processed:
Photo and video recordings, naming of the user profile (if available), academic title, first name, last name, position, organisation, degree programme, occupation, official means of contact such as e-mail, telephone number, address, website.
Additionally Mr./Mrs./Ms., origin, age, gender (if specified and relevant to the content).
4. Purpose and Legal Basis
The Austrian Universities Act 2002 assigns TU Graz the task of supporting national and international collaboration in research, teaching and art and to inform the public about how the university fulfils its tasks. In pursuit of fulfilling this task, personal data is processed for the purpose of public relations and documentation of on the basis of Art 6 (1) (e) GDPR in conjunction with § 3 (7) and (11) UG as well as your express consent to the processing of personal data after clarification of the risks (Art 49 (1) (a) GDPR). We would like to expressly confirm that you will not suffer any disadvantages if you do not consent to the processing of your personal data.
5. High-Risk Third Country (People's Republic of China)
The app TikTok is a social media platform on which short videos or video snippets can be created and distributed. TikTok is operated by the Chinese group ByteDance and is therefore subject to access by Chinese authorities. In the course of using TikTok, personal data may be transferred to China (third country – no adequacy decision). Chinese companies are required to disclose data to Chinese authorities under the Chinese Mulit-Level Protection Scheme 2.0. The authorities are guaranteed unrestricted access to servers from Chinese companies. Therefore, the compliance of these services with European data protection requirements cannot be guaranteed. The transfer of this data to a third country for a specific purpose is carried out under the exemption described in Art 49 (1) lit a GDPR once you have provided us with your explicit consent after being informed of the risks involved. You have the right to withdraw your consent at any time.
We would like to point out that TU Graz has no influence on the further processing of your personal data by TikTok.
In general, all content is stored permanently by TikTok, TU Graz has no influence on the method or duration of storage of content on TikTok. If consent is withdrawn and thus a request for deletion is made, TU Graz will delete the respective content within a reasonable period of time (4 weeks at the most). Only those data will be saved that are needed to document your consent and your withdrawal of consent. From the moment at which you withdraw your consent, these data will be stored for three years.
Furthermore, TU Graz does not collect any personal data for the operation of the TikTok account.
7. Rights of Data Subjects
You have the right to information, correction, portability, restriction of processing, objection and erasure of data. In addition, you have the right to withdraw your consent to data processing. Keep in mind, however, that a withdrawal of consent does not affect the legality of the data processing carried out until withdrawal. Furthermore, exercising these rights cannot lead to the dissolution of contractual or legal obligations.
If you have any questions or concerns on matters of data protection or if you wish to exercise these rights, please contact datenschutznoSpam@tugraz.at. All other information on data protection can be found at datenschutz.tugraz.at.
Furthermore, you also have a right of appeal to the Austrian Data Protection Authority.
8. Data Protection Officer
The Data Protection Officer of TU Graz is x-tention Informationstechnologie GmbH, Römerstraße 80A, 4600 Wels, Austria.
9. Additional information on TikTok
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; privacy policy.
