Deel Legal Hub

Deel Inc., a Delaware corporation with its principal offices at 425 1st San Francisco, CA 94105 United States, ("Deel", "us", "we", or "our") operates the www.deel.com website (the “Site”) and provides international payroll and related services (the "Services"), which is available through the Site.

Deel has developed a global privacy program under which we offer the same high standards of privacy protection regardless of where you are in the world. When we refer to Deel, we mean the Deel entity with which you have an agreement, if applicable.

This Privacy Policy informs you of how information about you is collected, used, and disclosed by us.

This Privacy Policy forms part of our Deel Platform Terms of Service. Unless otherwise defined in this Privacy Policy, capitalized terms used in this Privacy Policy have the same meanings as in our Terms of Service.

Scope of Application

This Privacy Policy applies to the following individuals:

• Visitors of the Site with whom Deel does not have a contractual relationship
• Clients who use our Services, including client UBOs or representatives
• Independent Contractors who use our Services
• Deel community platform users
• Suppliers who provide products or services to Deel
• Kandidat:innen
• Prospects
• Participants of webinars, conferences, trade events, surveys, etc.

By using our Site and/or our Services as well as engaging with Deel in any way, you agree to the collection and use of your information in accordance with this Privacy Policy.

Information collection

Deel collects and stores certain information about you. This information can be used on its own or in combination with other information to identify you ("Personal Information"). Below is a list of types of Personal Information that we may collect and use about you.

For the avoidance of doubt, Personal Information shall not include any personal information which is anonymised, after which the identifiable data is destroyed. Deel may also collect and use non-Personal Information to analyze the effectiveness of our Services and to improve our Services. We may collect non-Personal Information through the Services, the Site and through cookies.

Sources of Your Personal Information

We may collect personal information about you or your businesses from any of these sources:

• Directly for you when you use our Services, complete a contact form, request marketing communications, participate in surveys or contact us.
• Deel collects profile and usage data when you interact with our Site and/or Services, including, without limitation, your security details, app or your web browser settings, marketing choices and data from the devices you use to connect to our platform so we can provide you with our products or services.
• We also collect information through the use of cookies and other internet tracking software while you are using our website or mobile apps as described in detail in our Cookie Policy.
• From third parties:
• Companies, business partners or individuals that introduce you to us
• Business partners, service providers, sub-contractors, advertising networks, analytics providers, search information providers, fraud protection services, Payment Service Providers (PSPs) who help us authenticate your identity, improve the quality of our Services, promote our Services and protect our business. We may also receive Personal Information about you from providers that help prevent, detect and prosecute unlawful acts, money laundering, and fraudulent behavior.
• Social networks and other technology providers (for instance, when you click on one of our Facebook or Google adverts)
• Public information sources such as (without limitation) national company registries
• Market researchers
• Government, law enforcement agencies, authorities and regulatory bodies

Cookie Use

Please refer to our Cookie policy for more information.

Information Use

Below is a list of the ways that we may use your Personal Information together with the legal basis of processing, where applicable under data protection law.

In cases where we need to process personal data for the performance of the contract with you or as required by law and you refuse to provide your information, we may not be able to perform the contract with you and consequently, we may not be able to provide certain services to you.

Communications

We may contact you with newsletters and other marketing information that may be of interest to you. You may opt out of receiving any, or all, of these marketing communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us. Please note that we may still send you transactional or administrative messages related to the Service even after you have opted out of receiving marketing communications.

Information Sharing with Third Parties

We will only share your information with the third parties listed below for the purposes described above in the “Information Use” Section unless otherwise noted at the point of collection. We want to assure you that we do not sell or trade any personal information to third parties under any circumstances.

• Our clients to whom you provide your services
• Trusted third-party agents, partners, suppliers, and service providers who assist us in providing the Services to you and are only permitted to use your information according to the purposes specified in their agreement with us. These third parties include website hosts, data hosts, cloud software providers, IT providers, identification verification providers, customer support providers, payment processors, financial institutions, financial advisors, legal advisors, auditors, and insurance companies. These partners are required under law and contract to keep your Personal Information confidential
• Government or public agencies, law enforcement authorities, regulators or any other entity having appropriate legal authority for receipt of you Personal Information, if required or permitted by law or legal process or if we believe that such action is necessary to comply with the law, to protect the security or integrity of our business, our Site and/or Services and to protect the safety of the users of our Services or the public
• We may disclose your Personal Information to a third party who acquires any part of our business, whether such acquisition is by way of merger, consolidation, divestiture, spin-off, or purchase of all or a substantial portion of our assets
• We may share de-identified Personal Information with academic institutions to perform research, under controls that are designed to protect your privacy—including requiring such institutions to operate under confidentiality agreements and mandating that published findings contain only de-identified and aggregated data
• From time to time, we may share reports with the public that contain anonymized, aggregate, de-identified information and statistics, and
• We may share Personal Information with our current and future Deel affiliates. Our affiliates may use your Personal Information in a manner consistent with this Privacy Policy
• We may share Personal Information with third-party advertising partners such as social networks to perform marketing activities and to deliver targeted advertisements based on your interests
• When you provide your consent to us to share your information

Retention of Your Personal Information

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, consistent with applicable law. This retention period allows us to comply with our legal obligations, resolve disputes, enforce our agreements and study customer data as part of our own research. We will not retain your data for longer than is necessary to fulfill the purpose for which it is being processed.

To determine the appropriate retention period, we take into consideration the amount, nature, and sensitivity of the personal data, as well as the purposes for which we process it. We also assess whether we can achieve those purposes through other means. For the data retention period related to the Services provided to you, please refer to the Data Processing Addendum.

Sicherheit

The security of your Personal Information is important to us. We implement suitable measures to safeguard the information you entrust to us, preventing its loss, misuse, unauthorized access or disclosure, alteration, and destruction, addressing threats from both external and internal sources. Furthermore, we restrict access to your personal data to individuals such as employees, agents, contractors, and other third parties, but only those who require such access for legitimate business purposes. These authorized individuals will process your personal data solely based on our explicit instructions and are bound by a confidentiality obligation.

If you have selected a password or other login credentials that grant access to the Deel platform, it is your responsibility to take all reasonable measures to maintain the confidentiality of this information. You should not share your password or login credentials with any other individual.

Please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal Information we have collected from you. Therefore, you are also a key stakeholder in making sure that your Personal Information is protected. If you become aware of any breach of security or privacy, please contact us immediately at dpo@deel.com.

International Transfer

Information collected while you use the Site and/or Service, including your Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we will transfer the information, including your Personal Information, to the United States and process it there. In order to provide adequate protection for the data transfer, we have in place contractual arrangements with our subsidiaries, affiliates and business partners in respect of such transfers. By utilizing our Sites and/or services, you authorize the international transfer of your data, to the United States, where we are based, and to other locations where we and/or our service providers operate. Note that the Deel Platform is maintained and owned by Deel Inc., a United States entity, however Deel stores all Deel Platform data in Ireland (EU) only.

Third-party advertising, links and content

Our Site may contain links to other sites that are not operated by us. We allow third parties, including advertising networks, and other advertising service providers, to collect information about your online activities through cookies, pixels, local storage, and other technologies. These third parties may use this information to display advertisements on our Sites and elsewhere online tailored to your interests, preferences, and characteristics. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. We strongly advise you to review the Privacy Policy of every site you visit.

Some third parties collect information about users of our Sites to provide interest-based advertising on our Sites and elsewhere, including across browsers and devices. These third parties may use the information they collect on our Sites to make predictions about your interests in order to provide you with ads (from us and other companies) across the internet.

For example. we use Meta's Custom Audience programme. This programme allows us, among other things, to display personalised advertisements and offers on the Meta platform.This is only if you choose to receive personalised advertisements and offers on the social media platforms, such as Meta. We only provide identifiers to Meta so that Meta can check whether you have an account on one of Meta's platforms. Meta, in turn, only provides us with aggregated data about the effectiveness of an advertising campaign. This is data that cannot be traced directly back to you. This way, we try to make every effort to keep your personal data secure and confidential. Please check Meta's privacy policy for more information about how your data is used.

We may participate in similar programmes offered by other third parties to display relevant information and personalised advertisements via other channels. These may for example include programmes offered by other social media platforms, such as LinkedIn, X, TikTok, but also search engine platforms, such as Google. Please check the privacy policies of these third parties for more information.

We process this information only with your consent or when it aligns with our legitimate interest in tailoring our marketing communications to better reflect your preferences and interests. Our goal is to provide you with a personalized and engaging customer experience. You have the right to object to the use of your personal data for direct marketing purposes, including targeted advertising, at any time by following the steps in the "Your Rights" section. Also, to opt out of interest-based advertising across browsers and devices from companies that participate in the Digital Advertising Alliance or Network Advertising Initiative opt-out programs, please visit their respective websites.

Children's Privacy

We do not knowingly collect Personal Information from children under the age of 18. Our Site and Services are not addressed to minors. If you are a parent or guardian and you learn that your children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under the age of 18 without verifiable parental consent, we will take steps to remove that information from our servers.

Your rights

Under applicable privacy regulation, you may have some or all of the following rights in respect of your Personal Information:

• to obtain a copy of your Personal Information together with information about how your Personal Information is processed;
• to rectify inaccurate Personal Information;
• to erase your Personal Information in limited circumstances where it is no longer necessary in relation to the purposes for which it was collected or processed;
• to restrict processing of your Personal Information
• to object to the processing of your Personal Information where we're relying on a legitimate interest;
• to object to decisions that are based solely on automated processing or profiling;
• to obtain a portable copy of your Personal Information, or to have a copy transferred to a third party controller; or
• to withdraw your consent, at any time, where you may have provided it for the collection, processing and transfer of your Personal Information for a specific purpose;

In addition to the above, you have the right to lodge a complaint with a supervisory authority for data protection.

To exercise these rights you may contact us either by emailing dpo@deel.com or addressing it to the Head of Data Privacy Manager Service, Bouaziz & Partners, 45 Quai de la Seine, 75019, Paris, France.

We may ask you for additional data to confirm your identity and for security purposes, before disclosing the information requested to you. If you would like to submit a request on behalf of another individual, you may do so by providing proof of authorization by the individual to submit such a request on their behalf. We reserve the right to charge a fee where permitted by law. We may also decline to process requests that jeopardize the privacy of others, are excessive, or would cause us to take any action that is not permissible under applicable laws. Additionally, as permitted by applicable laws, we may need to retain certain Personal Information for a limited period of time for record-keeping, accounting and fraud prevention purposes. Please note also that you may be able to exercise some of these rights without our intervention. For example, if you are a registered Deel platform user, you can access and update your personal data.

Changes To This Privacy Policy

This Privacy Policy is effective as of the “LAST REVISED” date specified at the top of this Privacy Policy and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

Questions or Concerns Regarding the Privacy Policy

If you have questions or concerns regarding privacy using our Service, please contact us at: dpo@deel.com.

Region-Specific Privacy Terms

Deel is a global company and as such, our approach to privacy compliance is a global one. No matter where you are located, whether in the United States, the European Economic Area (EEA), the United Kingdom (UK), Latin America, or the Asia-Pacific region, we remain committed to abiding by all applicable data protection laws. Below you'll find region-specific privacy terms that might apply to you in addition to the general terms of this Privacy Policy, depending on the country where you're based.

United States

This section applies to the processing of Personal Information about US residents using our Site and/or Services and addresses the specific requirements under the California Consumer Privacy Act 2018 (CCPA), Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act.

California

Categories, Sources and Recipients of Personal Information

You can find the types of Personal Information we have collected about you in the past 12 months in the section "Information Collection" of our privacy policy, You may also learn about the sources of your Personal Information i.e where we get your information from in the section "Sources of your Personal Information" of our privacy policy.

We have also shared your Personal Information to the third parties identified in the section " Information Sharing with Third Parties" for business purposes as identified in the section "Information Use" of our privacy policy in the past 12 months. The categories of data that we have shared with third parties are the following:

• Contact
• Identification
• Financial
• Transactional
• Contractual
• Locational
• Usage
• Technical
• Communications
• Professional
• Deel Community platform content

Sale of Personal Information We do not offer an opt-out from the sale of Personal Information because we do not sell Personal Information as defined by the CCPA (and have not done so in the last 12 months). We also do not sell any Personal Information of consumers under the age of 16.

Sensitive Personal Information The categories of Personal Information used by Deel as described in the section "Information Collection" of our privacy policy include "Sensitive Personal Information" as defined under the California Privacy Rights Act. Deel does not use or disclose sensitive Personal Information for any purpose other than to provide you with our Services, as permitted by the California Privacy Rights Act.

Your CCPA rights California residents have the following rights:

• the right to know how their information is used
• the right to delete their information
• the right to correct their information
• the right to opt-out from sale (if applicable)
• the right to limit the use or disclosure of sensitive information, and
• the right not to be discriminated against because they exercise any of their rights under the California Consumer Privacy Act in violation of Cal. Civ. Code §1798.125.

You can submit your requests by following the steps outlined in the section "Your Rights" in our privacy policy.

Colorado, Connecticut, Utah, Virginia

The Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act and the Utah Consumer Privacy Act, provide consumers with specific rights regarding their Personal Information. If you are a resident of one of these states, this section describes your rights under these laws.

The categories of Personal Information we process, our purposes for processing your Personal Information, the categories of Personal Information that we share with third parties, and the categories of third parties with whom we share it are detailed above in our Privacy Policy.

Your Virginia, Colorado, Connecticut and Utah Rights

You can submit your requests by following the steps outlined in the section "Your Rights" in our Privacy Policy.

Your Right to Appeal

If we decline to take action regarding a request that you have submitted, we will inform you of our reason for declining to take action and provide instructions for how to appeal the decision. In the event that we do not respond to a request that you make pursuant to one of the privacy rights set forth in this section, you have the right to appeal our refusal to take action within a reasonable period of time after you receive our decision. Within 60 days (45 for residents of Colorado) of our receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact your state attorney general’s office to submit a complaint.

Illinois, Texas The Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq., and the Business and Commerce Code of Texas on the Capture or Use of Biometric Identifiers, Tex.Bus.& Comm.Code § 503.001, regulates the collection, storage, use, and retention of “biometric identifiers'' and “biometric information”. To automatically verify your identity and prevent fraud, we use the identity verification provider Veriff who collects certain biometric identifiers and biometric information, namely face scan information (face geometry information and information based on that).

For Illinois residents, we will permanently destroy their biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within 3 years of the individual’s last interaction, whichever occurs first.

For Texas residents, we will permanently destroy their biometric identifiers the later of (1) one year after the purpose for collecting the identifier expires, or (2) one year after any recordkeeping obligations imposed by law in connection with the collection of the biometric identifier expires.

Prior to the automated verification process through our provider, you will be presented with a consent screen for the collection, storage, retention, use, and disclosure of your biometric data.

EEA/UK/Switzerland

This section applies to residents of the EEA, Switzerland and the UK, using our Site and/or Services and addresses the specific requirements under the General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Data Protection Act (FADP).

Legal Basis

If you are a resident in the EEA, UK and Switzerland, we collect and process information about you only where we have a legal basis for doing so under applicable laws. For information about the legal bases we rely on when processing your Personal Information under GDPR, please refer to the section "Information Use" of our Privacy Policy.

Data Transfers

When transferring data from the European Union, the European Economic Area, the UK, and Switzerland, Deel relies upon the Standard Contractual Clauses as included in our Data Processing Addendum. Deel also complies with the EU-U.S. Data Privacy Framework (the “EU-U.S. DPS”), the UK Extension to the EU-U.S. DPF (the “UK Extension”), and the Swiss-U.S. Data Privacy Framework (the “Swiss-U.S. DPS”), as set forth by the U.S. Department of Commerce.

Deel has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Deel has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Deel is responsible for the processing of personal data it receives, under each DPF, and subsequently transfers to a third party acting as an agent on its behalf. Deel complies with the DPF Principles for all onward transfers of personal data we receive from the European Union, the UK and Switzerland in reliance on the EU-U.S. DPF Principles, the UK Extension and/or the Swiss-U.S. DPF Principles, including the onward transfer liability provisions. In particular, where we have received your personal information in the United States in reliance upon the EU-U.S. DPF Principles, the UK Extension and/or the Swiss-U.S. DPF Principles and we subsequently transfer that information to a third party acting as an agent, and such third party agent processes your personal information in a manner inconsistent with those Principles, we will remain responsible unless we can prove we are not responsible for the event giving rise to the damage.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Deel commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Deel at dpo@deel.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Deel commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

With respect to personal data processed pursuant to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), Deel is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Deel may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Under certain conditions that are fully described on the Data Privacy Framework website at, https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

Joint controllership for targeted advertisement We maintain online presence within social networks and process information in this context in order to communicate with active social media users or to offer information about us.

information on processing methods, procedures and services used:

Meta For users in the European Economic Area and Switzerland, Facebook is operated by Meta Platforms Ireland Limited (formerly Facebook Ireland Ltd.), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta Platforms”). For information on how Meta Platforms processes your personal data, please see Meta's privacy policy here.

Meta Pixel We use the Meta Pixel, a meta business tool of Meta Platforms Ireland Limited (Meta Platforms Ireland Ltd./EU) on our website. The meta pixel is a JavaScript code snippet that allows us to track the activity of visitors to our website. The information collected via the meta pixel is used for targeting our ads and improving ad delivery on meta products such as the social media platforms Facebook and Instagram, for personalizing features and content, and for improving and securing the Meta products. For this purpose, the information collected on our website by the meta pixel is transmitted to Meta Platforms Ireland Ltd. This collection and transmission of this information is carried out by us and Meta Platforms Ireland Ltd. as joint controller. We have concluded a joint controller agreement with Meta Platforms Ireland Ltd. that sets forth the distribution of data protection responsibilities between us and Meta Platforms Ireland Ltd. In this agreement, we and Meta Platforms Ireland Ltd. have agreed, among other things,

• that we are responsible for providing you with all information pursuant to Art. 13, 14 GDPR regarding the joint processing of personal data;
• that Meta Platforms Ireland Ltd. is responsible for enabling the rights of data subjects under Art. 15 to 20 GDPR with respect to personal data stored by Meta Platforms Ireland Ltd. after the joint processing.

You can access the agreement concluded between us and Meta Platforms Ireland Ltd. here.

This processing serves the legitimate interests we have in optimizing ad delivery on Meta products to align with our users’ needs, Art 6 (1)(f) GDPR.

Page Insights In addition, we and Meta Platforms are joint controllers for so-called Page-Insights data which are generated whenever you visit our Facebook Fan Page. With the help of these Page-Insights data, Meta Platforms analyses the behaviour on our Facebook Fan Page and provides these data to us in an anonymized form. Using page-insights data, we can analyse the audience, page views, the time spent on (video) posts and interactions (likes, comments, sharing of posts), as well as by certain criteria, for example, by age, gender and location (as specified by the users in their respective Facebook profiles) in an anonymised form. For these analyses, we can make use of certain settings or corresponding filters, selecting specific time periods, posts or demographic groups (e.g., by age and gender).

We have concluded a special agreement with Meta Platforms, which you can access here. The addendum regulates in particular the security measures Meta Platforms must observe and in which Meta Platforms has agreed to fulfill the rights of the persons concerned (i.e. users can send information access or deletion requests directly to Facebook). You may find here more information about the essence of the joint controller addendum

This processing serves the legitimate interests we have in optimizing and curating our Meta fan page to align with our users’ needs, Art 6 (1)(f) GDPR.

LinkedIn For users in the European Economic Area and Switzerland, LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn Ireland“). For information on how LinkedIn Ireland processes your personal data, please see LinkedIn’s privacy policy here. There, you can also find information on your settings options for your LinkedIn account.

We and LinkedIn Ireland are joint controllers for the Page Insights data, which are generated whenever you visit our LinkedIn page. For this purpose, we have entered into a joint controller addendum with LinkedIn Ireland, which you can find here. In this addendum, LinkedIn Ireland agrees to assume primary responsibility under the GDPR for the processing of Page Insights data and to comply with all applicable obligations under the GDPR with respect to its processing of Page Insights data.

In the context of Page Insights, we receive anonymous information and analytics from LinkedIn Ireland about the use of our company page and interactions with our posts (e.g., clicks on customized buttons in our posts). We use this information to analyse and optimise the effectiveness of our LinkedIn activities. For this purpose, LinkedIn Ireland processes in particular data that you have provided to LinkedIn Ireland via the information in your profile. This includes, for example, information on job functions, country, industry, professional seniority, company size and employment status. In addition, LinkedIn Ireland will process information about whether you are a follower of our LinkedIn company page. We can filter this information according to the above demographic criteria.

This processing serves the legitimate interests we have in optimizing and curating our LinkedIn page to align with our users‘ needs, Art 6 (1)(f) GDPR.

TikTok For users in the European Economic Area, Switzerland and the UK, TikTok is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irleand and TikTok Information Technologies UK Limited, 4 Lindsey Street, Barbican, London, EC1A 9HP, UK as joint controllers (jointly “TikTok”). You can find TikTok’s privacy policy here.

We are jointly responsible with TikTok for processing personal data in connection with TikTok Analytics. When you view, engage or otherwise interact with content made available under other TikTok Accounts (through likes, comments, sharing of videos), TikTok uses some of this information to provide aggregated and anonymous reporting to us - TikTok Account holders - to help us understand the types of content that our visitors view, engage and otherwise interact with under our TikTok Account. We have concluded a special agreement with TikTok which you can find here, which regulates the relationship between the parties.

Your GDPR rights

If you are a resident of EEA, UK and Switzerland, you have the rights set forth in the “Your Rights” section of our Privacy Policy.

China

Your PIPL rights

If you are a resident of the People’s Republic of China ("PRC"), you have, in addition to the rights set forth in the “Your Rights” section of our Privacy Policy, the right to access, correct, and delete the Personal Information of the deceased close relative of yours under the Personal Information Protection Law ("PIPL").

Legal Basis

If you are a resident of the Republic of China, we collect and process information about you only where we have legal bases for doing so under applicable laws. For information about the legal bases we rely on when processing your Personal Information under PIPL, please refer to the section "Information Use" of our Privacy Policy.

Transfer of information outside of China

Deel will transfer your personal information to the United States as mentioned in the "International Transfer" section of our Privacy Policy. Deel may also transfer your Personal Information to third parties located outside of the territory of China if this is necessary to fulfill our purposes as outlined in the "Information Use" section. Before we transfer your Personal Information outside the territory of China, we will make sure that all requirements under the laws and regulations of China on cross-border transfer of Personal Information are met and will require overseas recipients to protect your Personal Information at the levels not lower than those required by applicable laws and regulations of China.

Brasilien

This section applies to individuals who are located in Brazil, according to the "Lei Geral de Proteção de Dados" (LGPD).

Legal Basis

If you are a resident of Brazil, we collect and process information about you only where we have legal bases for doing so under applicable laws. For information about the legal bases we rely on when processing your Personal Information under LGPD, please refer to the section "Information Use" of our Privacy Policy.

Your Brazilian privacy rights

We assure you that you will never be discriminated against by exercising your rights. If you are a resident of Brazil, you have, in addition to the rights set forth in the “Your Rights” section of our Privacy Policy, the right to anonymization, and to access information from public and private entities with whom we have shared your Personal Information.

Other regions

If you reside in a location outside of the EEA, the UK, Switzerland, the United States, China, or Brazil, please be aware that we prioritize your privacy. Certain regions have distinct privacy requirements that necessitate specific provisions in our Privacy Notice. We are committed to staying compliant with applicable data protection laws and will update this Privacy Policy as necessary to incorporate any required provisions.