The legal basis for
processing is Art. 6 para. 1 f GDPR, whereby Merck's authorization arises from
the fact that, on the one hand, Merck KGaA, Darmstadt, Germany has an interest in evaluating the website
data for purposes of website optimization and, on the other hand, a concerned
person can reasonably foresee at the time when the personal data is collected
and in view of the circumstances under which it is carried out (in particular
the above-mentioned measures) that it will possibly be processed for this
4. Social media plugins
We use social media
plugins from various social networks (e. g. Facebook). With the help of these
plugins you can share content or recommend products. The plugins are
deactivated by default and therefore do not send data to other websites. By
clicking on the button "Activate Social Media" you can activate all
plugins (so-called 2-click solution). The plugins can of course be deactivated
again with one click.
If these plugins are activated,
your browser establishes a direct connection with the servers of the respective
social media network as soon as you access the operator's website. The content
of the respective plugin is transmitted directly from the social media network
to your browser and embedded into the website.
By embedding the
plugins, the social media network receives the information that you have
visited the respective page of the operator. If you are logged in to the social
media network, it can allocate the visit to your account. When you interact
with the plugins, the corresponding information is transferred directly from
your browser to the social media network and stored there.
For the purpose and
scope of data collection and the further processing and use of the data by
social media networks, as well as your rights and options for the protection of
your privacy, please refer to the data protection notices of the respective
If you do not want
social media networks to collect information about you through the operator's
website, you must log out or disable the social media plugins before you visit
Even if you are not
logged in to social media networks, websites with active social media plugins
can still send data to these networks. With an active plugin, a cookie with an
identifier is placed each time the website is accessed. Since your browser
sends this cookie every time you connect to a network server without being
asked, the network could basically use it to create a profile of the websites
visited by the user associated with the ID. And it would then also be possible
to assign this identifier to a person again at a later time - for example when
logging on later to the social network.
The operator uses the
• Facebook (provided by Facebook
Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA) You can view Facebook’s
• Google+ My Business (provided by
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA) You can
• Twitter (provided by Twitter Inc.,
795 Folsom St., Suite 600, San Francisco, CA 94107, USA) You van view Twitter’s
• Instagram (provided by Instagram
Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) You can view Intagram’s
5. Is other personal data collected and
We collect and process
your personal data only if you request certain services and we need your data
for this purpose or if you have voluntarily given us your express consent. The
legal basis for processing is Art. 6 Para. 1 b GDPR and Art. 6 Para. 1 a GDPR.
You can do this, for
example, by completing a registration form or sending us an email, ordering
products or services, submitting inquiries to us, requesting materials or
registering. Unless otherwise required by law, we will only use your personal
data for the purposes for which you have given your consent.
For special services
such as newsletters, sweepstakes, etc. the respective special data protection
6. Will my data be transferred to third
parties, e. g. authorities?
At Merck KGaA, Darmstadt, Germany those bodies
within Merck KGaA, Darmstadt, Germany receive your data that are required to fulfill our contractual and
legal obligations. Some data must be disclosed under strict contractual and
• Due to legal obligation:
In certain cases, we
are required by law to transfer data to a requesting public authority.
Upon submission of a
court order, we are obliged pursuant to § 101 of the German Copyright Act to
provide owners of copyright and ancillary copyrights with information about
customers who are alleged to have offered copyright-protected works on internet
file-sharing sites. In these cases, our information contains the user ID of an
IP address allocated at the time requested and, if known, the name and address
of the customer.
In other respects,
personal data will only be transferred to state institutions and public
authorities within the framework of mandatory national legal provisions or if
disclosure is necessary in the event of attacks on the network infrastructure
for legal or criminal prosecution. The legal basis for processing is Art. 6
Para. 1 c GDPR or § 24 Para. 2 No. 1 German Federal Data Protection Act.
• To external service providers for
When service providers
get access to our customers' personal data, this usually takes place in the
course of so-called order processing of personal data. This is expressly
provided for by law. In this case, Merck KGaA, Darmstadt, Germany remains responsible for the protection
of your data – in addition, the processor may also be responsible. The service
provider works strictly in accordance with our instructions, which we ensure by
means of strict contractual regulations, technical and organizational measures
and supplementary controls.
Merck KGaA, Darmstadt, Germany works with
service suppliers as processors. These are Merck KGaA, Darmstadt, Germany companies and service
providers for IT services (e. g. for technical-administrative tasks and for
usage analysis), telecommunications, consulting and advisory services as well
as sales and marketing.
The data protection
regulations for instruction-bound order processing of personal data are
• To Merck KGaA, Darmstadt, Germany companies:
Merck KGaA, Darmstadt, Germany may transfer
your personal data to Merck KGaA, Darmstadt, Germany companies in order to carry out a business
relationship with you or for the purposes of legitimate interests.
If data are
transferred abroad, they are based within the EU or the EEA or in a country
which, according to the decision of the EU Commission, has an appropriate level
of data protection. In the case of data transfers to Merck KGaA, Darmstadt, Germany companies
domiciled in other countries, Merck KGaA, Darmstadt, Germany ensures by way of guarantees that the
data-importing Merck KGaA, Darmstadt, Germany company has been obligated to an appropriate level
of data protection.
Beyond this, we do not
transfer data to third parties unless you have given your express consent, the
transfer is obviously necessary for the provision of an offer or service
requested by you or this is provided for by law. We also do not intend to
transfer your data beyond this to a third country or international
7. How long will my data be stored?
We store data for as
long as it is legally necessary or necessary for the provision of the service
requested by you, or as long as it has been agreed upon in a declaration of
8. Do I have a right to information and
rectification of my stored data? What other rights do I have with regard to my
You may at any time
and free of charge request information about the scope, origin and recipients
of the stored data as well as the purpose of the storage; in addition, you have
the right to rectification, erasure or restriction of the processing of your
data in accordance with data protection regulations, a right to object to the
processing as well as a right to data portability. Please note that there is a
right of appeal to a supervisory authority.
9. Can I withdraw my consent to the use
of my data?
You have the right to
withdraw your consent to the use of your data at any time. Just send an email
to firstname.lastname@example.org or send a letter to the following address:
Frankfurter Str. 250
The data processing
performed on the basis of your consent is legal until the time of withdrawal.
10. Who is my contact person if I have
questions about data protection?
If you have any
questions or comments, please feel free to contact the Group Data Protection
Officer of Merck KGaA, Darmstadt, Germany at any time:
Merck KGaA, Darmstadt, Germany
Group Data Protection
Frankfurter Strasse 250
11. How long is this data privacy
This data privacy
declaration is up-to-date and dates from 25.05.2018. We reserve the right to
amend the data privacy declaration at any time with effect for the future, in
particular to adapt it to a further development of the website or the
implementation of new technologies.