1. Data Protection Requirements
In context with the Merck eCommerce platform, Merck KGaA will apply the legal requirements for data protection, in particular the German Bundesdatenschutzgesetz (BDSG), to ensure sufficient protection and security of personal data. Personal data are any information relating to an identified or identifiable individual. The Merck eCommerce platform will in particular store the following personal data. Customer specific data such as: Email Address, Password, Title, First Name, Last Name, Company, Telephone, Mobile, Fax, VAT Exemption, Agreement to Conditions of Sale, Shipping Address, Billing Address, Street, City, Postal Code, Country, Preferred Language, Status, Invoice Address, Customer Summary. And order specific data such as: Order Summary, Product IDs, Currency, Item Total, Total, Extra Costs, Additional Surcharges, Duties, Shipping Costs.
2. Collection, Storage, Processing, Transfer and Use of Data Required for Providing Service to You
Merck KGaA operates the Merck eCommerce platform which is intended to provide a continuously optimized and convenient online platform that enables customers to inform themselves about Merck products and to place orders electronically which will then be executed by Merck and its subsidiaries. Also, Merck utilizes its regional and local subsidiaries to ensure the prompt execution of orders.
For that purpose, you confirm that Merck KGaA is authorized to collect, store, process, transfer and use the following personal data that is stored about you when you register with the Merck eCommerce platform and order items from our eCommerce platform: Email Address, Password, Title, First Name, Last Name, Company, Telephone, Mobile, Fax, VAT Exemption, Agreement to Conditions of Sale, Shipping Address, Billing Address, Street, City, Postal Code, Country, Preferred Language, Status, Invoice Address, Customer Summary and Order Summary, Product IDs, Currency, Item Total, Total, Extra Costs, Additional Surcharges, Duties, Shipping Costs. In particular, you agree to the transfer of personal data to Merck subsidiaries and contracted IT providers that are involved by Merck KGaA in context with executing your orders and requests initiated through the Merck Millipore eCommerce platform. This includes also Merck subsidiaries in third countries, as defined in the European Data Protection Directive 95/46/EC, where Merck ensures an adequate level of data protection. If you agree to this consent, this will be documented by Merck KGaA.
If you do not accept this consent, you will not be able to place orders with the Merck eCommerce platform because we would in this case not be able to process your data and in consequence cannot provide the requested service to you.
3. Collection, Storage, Processing, Transfer and Use of Data Required to Improve Our Services to You
In addition to the data described in the previous section, the Merck KGaA collects anonymous data about the use of the Merck eCommerce platform for recognizing returning visitors and for improving usability based on anonymous behavioral visitor profiles. For that purpose, the Merck eCommerce platform uses “cookies”, which are text files stored on your computer. These cookies are intended for recognizing visitors and for supporting user convenience, e.g. password remember functionality.
In that context, the Merck eCommerce platform uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”) and Adobe Analytics, a web analytics service provided by Adobe, Inc. You can find information on Google Analytics, Adobe Analytics and a list of cookies utilized by the Merck eCommerce platform in our privacy statement on the following website here. During the registration and login process the email address entered in the respective form field is transformed into a non-readable hash key based on a consistent encryption logic. The hash key serves for recognizing returning visitors and for improving usability based on anonymous behavioral visitor profiles. It is based on the secure hash algorithm SHA-1 producing 160 bit (20 byte) hash keys in line with the Secure Hash Standard (SHS) norm. The encryption logic is one-directional, so that it is not possible to decrypt keys again. This logic prevents that any personal or readable email information is captured or stored.
4. Newsletter
If you register to our optional newsletter, Merck KGaA will use your Email address for providing you with that newsletter until you unsubscribe. You can unsubscribe from receiving the newsletter with the help of the corresponding link that is included directly in the newsletter or by contacting us.
Contact address to unsubscribe from the newsletter:
Merck KGaA5. Other Use of Data and Disclosure
Merck KGaA will not use and transfer personal data to additional other third parties without your prior agreement. However, Merck KGaA can be obliged by authorities to hand out personal data on statutory obligation.
6. Deletion and Correction of Data
You can cancel the agreement for the storage and processing of your personal data at any time. In this case, we also will have to cancel your registration and use of the Merck eCommerce platform. Personal data that are required for the execution of a contract that was agreed with you before the receipt of the cancellation will be deleted after completion of that contract. In case of legal obligation, your data will be stored solely for this purpose. The data will then be deleted automatically after the completion of the contract and after the legally required data retention period. Also, you can ask Merck KGaA for the correction of inaccuracies in the information related to yourself.
Contact address to cancel the declaration of consent:
Merck KGaA7. Information About Stored Information
At any time and free of charge, you can request access to the data that is stored about you by Merck KGaA. Insight into the data will be provided in written form. A corresponding request can be addressed to the contact address listed in section 6 of this consent.
8. General Data Privacy Contact
Please use the following contact information in case of general data privacy related questions concerning the Merck Group:
Data Privacy Officer of the Merck KGaA