1. Who We Are

The data controller is Tekhnolohiia Betonu LLC (“Technology of Concrete”, hereinafter “Company”, “we”, “us”), a ready‑mix concrete manufacturer.

This policy applies to our website, virtual assistant (chatbot), and TikTok business account @tehnologia_betonu.

2. Data We Collect

2.1. Data you provide

• Contact data: name (if provided), phone number.
• Order details: delivery address/coordinates, order parameters (concrete grade, volume, date/time, transport type, site access conditions).
• Messages in the virtual assistant (text/audio/images, if you provide them).

2.2. Technical data

• Anonymous website/chat usage analytics (device type, approximate geolocation, timestamps, pages viewed).
• Cookies and similar identifiers (see Section 9).

2.3. TikTok data (limited)

• open_id, display_name, avatar_url — upon administrator authorization via TikTok Login Kit.
• Aggregated statistics of our own published videos: view count, likes, comments, average watch time.

We do NOT collect personal data of other TikTok users, their content, messages, follower/following lists, or geolocation data.

3. Purpose and Legal Basis for Processing

We process data for the following purposes:

• Providing consultations and generating preliminary cost estimates for concrete and delivery. Legal basis: performance of a contract.
• Contacting you to clarify details and transfer data to a manager for order confirmation. Legal basis: consent.
• Service improvement, inquiry analytics, abuse prevention. Legal basis: legitimate interests.
• TikTok content publishing — automated upload of video content to our business account via TikTok Content Posting API (scope: video.publish). Legal basis: legitimate interests.
• Video analytics — collecting performance statistics of our own published videos (scope: video.list). Legal basis: legitimate interests.
• Legal obligations under Ukrainian legislation.

We use TikTok data exclusively for managing content of our own business account.

4. TikTok Integration

The Company uses the TikTok platform API to manage content for business account @tehnologia_betonu.

4.1. TikTok tools used

• TikTok Content Posting API — for publishing video content to the Company’s account.
• TikTok Video List API — for retrieving statistics of our published videos.
• TikTok Login Kit — for administrator account authorization.

4.2. API Scopes

4.3. TikTok data processed

We collect:

• open_id, display_name, avatar_url — upon administrator authorization via TikTok Login Kit.
• Aggregated statistics of our own videos: view count, likes, comments, average watch time.

We do NOT collect:

• Personal data of other TikTok users.
• Content, messages, or comments of users.
• Follower or following lists.
• Geolocation or financial data.

4.4. TikTok data retention

• OAuth tokens — stored encrypted; automatically refreshed or deleted upon access revocation.
• Aggregated analytics — retained for 12 months for trend analysis, then deleted.

4.5. Revoking TikTok access

You can revoke our application’s authorization at any time:

1. Open the TikTok app.
2. Go to: Profile → Settings and privacy → Security → Manage app permissions.
3. Find our application and tap “Remove”.

After revocation, we will delete your OAuth tokens within 24 hours.

For more information about data processing by TikTok, please refer to TikTok’s Privacy Policy.

5. Third-Party Data Sharing

We do not sell your personal data. Access may be granted to:

• Authorized Company employees (sales, support, IT).
• IT service providers (hosting, analytics, chat processing) — exclusively under data processing agreements.
• TikTok — within the scope of authorized API access (content publishing and analytics of our own videos). See Section 4.
• Google — anonymized analytics data via Google Analytics 4.
• Government authorities — as required by law.

6. Data Retention

We retain data only as long as necessary for the purposes defined in this Policy and to comply with legal requirements. Typical periods:

• Customer inquiries and order history — up to 24 months.
• Technical logs — up to 12 months.
• TikTok OAuth tokens — until access is revoked.
• TikTok aggregated analytics — 12 months.

7. Data Security

We implement organizational and technical security measures (access controls, encrypted communication channels via HTTPS/TLS, backups, monitoring, two‑factor authentication for administrators) to prevent unauthorized access, modification, or loss of data.

8. Your Rights

In accordance with the Law of Ukraine “On Personal Data Protection” and the GDPR (for EU/EEA residents), you have the right to:

• obtain access to your data and receive a copy;
• request rectification or erasure;
• restrict or object to processing;
• withdraw consent (this does not affect the lawfulness of prior processing);
• lodge a complaint with the relevant data protection authority;
• revoke TikTok application access (see Section 4.5).

To exercise your rights, contact us at +380 67 243 85 51 or email info@tehbeton.com.ua. We will respond within 30 calendar days.

9. Cookies

We may use cookies and similar technologies (pixels, local storage) for website operation, traffic analytics, and preference storage. You can manage cookies in your browser settings. Disabling certain cookies may affect website and chat functionality.

10. Use of AI Services

Our virtual assistant may use natural language processing (AI) services. These services process your messages exclusively to generate responses or preliminary cost calculations. Data transmission occurs via secure channels under data processing agreements.

We do not share commercial or personal data with third parties for sales or independent marketing purposes.

11. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected and how it is used.
• Right to request deletion of personal information.
• Right to opt‑out of the sale of personal information. We do not sell personal information.
• Right to non‑discrimination for exercising your privacy rights.

12. Changes to This Policy

We may periodically update this Privacy Policy. The new version takes effect upon publication on this page.

13. Contact Us

For privacy‑related questions:

Ukrainian version: tehbeton.com.ua/polityka-konfidenciinosti/