Recipients of personal data; data transfer to third countries
The following information will be transmitted and processed: Information about the terminal devices used (e.g. operating system, device type, browser, screen resolution), about the origin of our users (for instance, language as well as city and country the user of the website is from and the website via which the user reached us, IP address) and the use of our websites (e.g. our Merck website which have been opened and the content accessed as well as the date and duration of the visit).
a) Adverse events or enforcement of rights:
If we become aware of potential cases of adverse reactions to one of our products, we are required by law to document and share the relevant information, including personal information with authorities worldwide and, where necessary for further assessment, to contact the reporting parties.
In order to enforce our rights or to protect our rights or the rights of third parties with the holders of such rights, consultants and authorities.
b) External service providers for data processing:
Merck will take all steps reasonably necessary to ensure that the data you provide is adequately protected according to the requirements of the data protection laws of the European Union by means of Standard Contractual Clauses approved by the EU Commission.
We store data for as long as necessary for the provision of the service requested by you. For example, when you subscribe to a newsletter we will store the associated data at least until you unsubscribe.
Data which is collected while browsing our website and which can legally be considered personal data (such as the complete IP address) is stored for a period of time of 7-14 days, unless a reasonably justified incident indicates a longer storage period (e.g. due to a hacking attack).
Data without any personal identifiable information may be stored permanently.
Data protection rights and contact
a) General rights:
You can request information about the data stored about you and have the right to receive the data provided by you in a common and machine-readable format. Furthermore, in justified cases, you may also request the deletion, correction or limitation of the processing of your data. If your personal data is transferred to a country outside the EU which does not provide appropriate protection, you can request a copy of the contract that implements the appropriate protection of personal data.
b) Right to object:
Furthermore, in justified cases you can object to the processing of personal data concerning you where we process your personal data based on our legitimate interest (this is the case if the legal basis is Art. 6 f) GDPR as indicated in the footnotes). This applies in particular to the collection of your data for statistical measurement of the web audience by ADOBE ANALYTICS.
c) Revocation of your consent:
When you have given your consent to the processing of personal data concerning you on the website, you can revoke your consent at any time with effect for the future.
d) Contact person:
To exercise these rights, please contact our data protection officer at email@example.com. In addition and in case of concerns, you can also contact the competent data protection authority.
Data protection declaration as of: February 2018