Florian, the second level cache takes the tenant id into account (except for the SessionFactory operations like evictEntity but that's not relevant here).
You can look at CacheKey.