Thank you for your interest in the website of Merck Site Management GmbH, hereinafter refer to as “Merck”. We take the topic of data protection and confidentiality very seriously and comply with valid national and European data protection regulations. Therefore we would like to familiarize you with the data protection measures and inform you of the data that we may store and how we use that data.
What data is collected and how is it used?
Data collected by this website
Every time a user accesses the website, for technical reasons, the user’s Web browser automatically transmits the following data to the Merck web server:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the accessed file
- Amount of data transmitted
- Access status (file transferred, file not found, etc.)
- Identification data of the browser and operating system used
- Name of the provider of the user’s Internet access
- Web page from which the access is made
- Name and URL of the accessed file
These data are collected, processed and used for the purpose of enabling the use of the website (connection establishment), system security and technical administration of the network infrastructure. A comparison with other databases or a transfer to third parties, even in excerpts, does not take place. The legal basis of processing is section 6 (1a) of the EU GDPR (General DataProtection Regulation). The data collected as part of the voluntary entries under “Contacts & Service” will be used and processed exclusively for the purposes of processing the inquiry and for carrying out the services you may have requested via it.
Use of Google Analytics
Thiswebsite uses Google Analytics, a web analytics service provided by Google, Inc.(“Google”). Google Analytics uses “cookies”, which are text files placed onyour computer, to help the website analyze how users use the site. Theinformation generated by the cookie about your use of the website will betransmitted to and stored by Google on servers in the United States. In theevent that IP anonymization is activated on this website, your IP address will,however, be previously coded by Google within member states of the EuropeanUnion or in other contracting states to the Agreement on the European EconomicArea. Only in exceptional cases will the full IP address be transmitted to aGoogle server in the United States and shortened there. On behalf of theoperator of this website, Google will use this information for the purpose ofevaluating your use of the website, compiling reports on website activity andproviding other services relating to website activity and Internet usage to thewebsite operator. The IP address transmitted by your browser as part of GoogleAnalytics is not combined with other Google data. You may refuse the use ofcookies by selecting the appropriate settings on your browser; however, pleasenote that if you do this you may not be able to use the full functionality ofthis website. You can also prevent the collection of data generated by thecookie and related to your use of the website (including your IP address) toGoogle and the processing of this data by Google by downloading and installingthe browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de
The legal basis for the processing is Art. 6 (1) f GDPR, whereby authorization for Merck results from the fact that, on the one hand, there is an interest on the part of Merck in evaluating the website data for purposes of page optimization and, on the other hand, a data subject can reasonably foresee at the time of collection of the personal data and in view of the circumstances in which it takes place (in particular the measures mentioned above) that processing may possibly take place for this purpose.
What cookies are used?
Are other personal data collected and processed?
We only collect and process your personal data if you make use of specific services and we therefore require your data or if you have voluntarily given us your express consent. Section 6 (1b) GDPR and section 6 (1a) GDPR serve as the legal basis for processing. You may do so, for instance, as part of a registration procedure, by completing a form or by sending an e-mail, ordering products or services, sending us inquires or requesting materials or registering yourself.Unless we are subject to other legal commitments, we only use your personal data for the purposes for which you have given your consent. For special services such as newsletters, competitions, etc., the respective special data protection provisions apply.
Will my data be given to third parties, e.g. to government authorities?
Within Merck, data is provided to those departments that require it in order to fulfill our contractual and legal obligations. Some data must be forwarded in line with strict contractual and statutory rules:
Owing to statutory obligations
In certain cases, we are legally obligated to forward data to an inquiring government office. Upon presentation of a court order, we are obligated pursuant to Section 101 of the German Copyright Act to provide owners of copyrights and ancillary copyrights with information about customers who are alleged to have offered copyrighted works on Internet file-sharing networks. In these cases, our information contains the user ID of an IP address assigned at the time of the request and, if known, the name and address of the customer. Otherwise, personal data is only transferred to state institutions and authorities within the framework of mandatory national legal provisions or if the transfer is necessary for legal or criminal prosecution in the event of attacks on the network infrastructure.
The legal basis for processing is section 6 (1 c) GDPR or section (2) no. 1 German Federal DataProtection Act.
To external service providers for data processing purposes:
If a service provider receives the personal data of our customers, this is normally within the scope of contract data processing. This is explicitly provided for under German law. In this case, Merck also remains responsible for the protection of your data – possibly in addition to the contract processor..The service provider works exclusively in accordance with our instructions, which we ensure through strict contractual provisions, technical and organizational measures and supplementary controls. Merck uses service providers as processors. These are Merck Group companies as well as service providers in the categories of IT services (e.g., for technical-administrative tasks and for usage analysis), telecommunications, consulting and advisory services, and sales and marketing. The data protection requirements for commissioned processing of personal data in accordance with instructions are complied with.
To Merck Group companies
Merck may transfer your personal data to Merck Group companies in order to carry out a business relationship that may exist with you or to protect legitimate interests. If data is transferred abroad, these companies are based within the EU or the EEA or in a country that has an adequate level of data protection in accordance with a decision by the EU Commission. In the case of data transfers to Merck Group companies based in other countries, Merck will ensure by way of guarantees that the Merck Group company importing the data has been committed to an adequate level of data protection.
Otherwise, your personal data will only be shared by us with third parties if that is recognizably required in order to provide a service you have requested or if you have given your consent. We also do not intend to transfer your data beyond this to a third country or an international organization.
How long is my data stored?
We store data as required by law or for the period of time that is required to provide a service you have requested or as stipulated by a corresponding statement of consent.
Do I have the right to obtain information about my stored data? What other rights do I have with regard to my stored data?
You can request information about the scope, origin and recipients of the stored data as well as the purpose of storage at any time and free of charge; in addition, you have the right to correct, delete or restrict the processing of your data, the right to object to processing and the right to data portability in accordance with the provisions of data protection law. They also have the right to lodge a complaint with a data protection supervisory authority.
Can I revoke any consent I may have given for the use of my data?
You are entitled to review and correct any of your personal data we have stored, and you may revoke your consent to the use of your data at any time. All you need to do is send an e-mail or write to the following address:
Merck Site Management GmbH,
Mainzer Strasse 41
Data processing based on your consent is lawful until the time of revocation.
Who do I contact if I have any questions about data privacy?
If you have any questions or suggestions, please feel free to contact the Group PrivacyOfficer of Merck KGaA:
Group Data Privacy Officer
Frankfurter Strasse 250, 64293 Darmstadtdatenschutz@merckgroup.com
How long is this data privacy statement valid?
This data privacy statement is up-to-date and was issued on October 1, 2021. We reserve the right to amend the data privacy statements at any time and with validity for the future. This applies in particular to adaptations to the further development of the website or implementation of new technologies.