1.

Name:

The Partner whose details are specified in the relevant Agreement, and/or its Account with TikTok Pangle, as applicable.

Address:

As above

Contact person’s name, position and contact details:

As above

Activities relevant to the data transferred under these Clauses:

The receipt/provision of the service specified in the Agreement in order to serve Advertisements onto Partner's digital property.

Role (controller/processor):

Controller

1.

Name:

The TikTok Pangle entity whose details are specified in the relevant Agreement.

Address:

As above

Contact person’s name, position and contact details:

Attn: Legal Department

Contact: pangle_support@tiktok.com

Activities relevant to the data transferred under these Clauses:

The provision/receipt of the service specified in the Agreement in order to serve advertisements onto Partner's digital property.

Role (controller/processor):

Controller

Categories of data subjects whose personal data is transferred:

Data Subjects who visit, view or interact with: (i) Partner's Property (or Properties) and/or (ii) Advertisements served onto Partner's Inventory.

Categories of personal data transferred:

The categories of Personal Data transferred include:

(i) Device-specific identifiers, such as mobile advertising identifiers (such as the “Google Advertising ID” on Android or “ID for Advertisers” on iOS devices and similar); 

(ii) Device and network information, such as IP address, device model and price, operating system (i.e. iOS or Android) and version, internet service provider, mobile country code, mobile network code, mobile carrier, language settings, time zone, connection type (such as cellular or WIFI), connection speed (such as 4G or 5G), screen resolution, the time the device was last updated and started (where applicable), as well as diagnostic performance information, including crash reports and performance logs;

(iii) Data Subject’s expressed privacy choices, such as consent records and opt-out flags;

User activities on the publisher apps and websites, including information about the publisher app or website that has integrated TikTok Pangle and users' interactions with any advertisements delivered by or through TikTok Pangle  (e.g. information about the advertisements served, viewed, or clicked on, such as the type of advertisement, where and when the advertisement was served), as well as any preferences the user may have expressed in respect of that advertisement.

Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures:

None.

The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis):

Continuous for the duration of the Agreement.

Nature of the processing:

The nature of the processing is the provision or receipt of the Service (as applicable) specified in the Agreement in order to serve advertisements onto Partner's digital property.

Purpose(s) of the data transfer and further processing:

The purpose of the transfer and further processing is to serve Advertisements onto Partner's digital property and as otherwise specified in the Agreement.

The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period:

Personal Data will be retained for as long as is necessary for the provision of Service, and otherwise as permitted by the Agreement and the Applicable Data Protection Laws (as applicable).

For transfers to (sub-) processors, also specify subject matter, nature and duration of the processing:

Not applicable.  The transfer pursuant to these Standard Contractual Clauses is made on a Controller-to-Controller basis.

Identify the competent supervisory authority/ies

For transfers made under the EU SCCs, the competent supervisory authority will be determined in accordance with Clause 13 of the EU SCCs.

For transfers made under the UK SCCs, the competent supervisory authority will be the United Kingdom Information Commissioner's Office.

For transfers made under the LGPD, the Autoridade Nacional de Proteção de Dados (the Brazillian National Data Protection Authority).