a) Type of data collected by us from visits to our website [legal basis: Art. 6 (1) f) of the General Data Protection Regulation (GDPR)]:
As a general rule, we do not identify users who are only visiting our website. The browsing data we collect includes the name of your internet service provider, the website from which you accessed our website, and which Merck web pages you have viewed. We temporarily store your full IP address and the date and duration of your visit.
b) Provision of services requested by you
For some of the services provided on our website, we require you to provide data such as your name and email address. As per Art. 6 (1) b) of the GDPR, we use this data to ensure you have access to the services you have requested, such as access to our materials, responses to your queries about our products, or to send you newsletters (where you have specified that you wish to receive them). As per Art. 6 (1) f) of the GDPR, we may also use the data we have collected about you in order to tailor the content you have requested to your individual needs and provide you with information that is relevant to you.
c) Legal obligations and asserting existing rights
In some instances, we are legally obliged to process personal data. A typical example is data processing in relation to pharmacovigilance, i.e. the obligation to conduct investigations and pass on data in instances where potential side effects of medications have been identified (legal basis: Art. 6 (1) c) of the GDPR).
Where necessary, we may also use your data to assert our rights or the rights of third parties (e.g. in the event of copyright violations) [legal basis: Art. 6 (1) f) of the GDPR].
d) General statistics and website security:
We use our visitors’ browsing data to create aggregated statistics. These statistics include data compiled about a group of users, but not about individual users. We use these statistics to determine which content is of interest to our users, which helps us to improve our website and the services we offer. We also use our visitors’ browsing data to guarantee or re-establish the security of our service, as well as to identify and repair any technical defects and errors [legal basis: Art. 6 (1) f) of the GDPR].
In addition to this, we collect data about the location of the devices used to access our website for statistical purposes (information about where our visitors access our website from, etc.); you can use your browser settings to control which data you share for these purposes [legal basis: Art. 6 (1) f) of the GDPR].
e) Plug-ins for social networks:
Our website uses social network plug-ins (hereinafter referred to as “plug-ins”), such as for Facebook. Plug-ins are used to share content from our website with other users of social networks or to draw attention to certain content. When you visit our website, we use the “Shariff” solution to ensure that plug-ins are not fully integrated into our website. This ensures that, when you access a page on our website, a connection is only created with the social network provider if you click on the plug-in button. Once a connection has been established, we have no control over the type and scope of the data that is collected and processed by the provider. You will find more information about this in the provider’s data protection policy.
b) Google Analytics:
http://www.google.com/analytic… or https://www.google.de/intl/de/policies/]. This means that user and usage data from our website is sent to Google and processed on our behalf, for the purpose of compiling reports about website activity, measuring the number of visits and visitors and providing us with comparable services. As part of this process, your IP address is also transferred to Google. However, this is not stored in combination with other Google data. The IP address is also truncated (usually within the EU) and is only stored by Google in its shortened form. With regard to the storage of this data in the United States, Google’s voluntary commitment under the EU-US Privacy Shield provides adequate data protection.
You can withdraw your consent to the processing of your data for the specified purposes by installing a browser plug-in (http://tools.google.com/dlpage/gaoptout?hl=de) and activating it via the following link: Deactivate Google Analytics
In order to ensure that our content is displayed correctly and ensure an attractive graphic appearance across all browsers, we use script libraries and font libraries like Google Webfonts (https://www.google.com/webfonts/) on this website. Google Webfonts are transferred to your browser cache to avoid multiple loading. If Google Webfonts are not supported or permitted by your browser, the content will be displayed in a standard font.
The retrieval of script or font libraries automatically establishes a connection with the library operator. It is therefore possible, in theory, that your data could be collected by the operators of these libraries. However, it is currently unclear whether this happens and, if so, for what purposes.
The data protection policy for the library operator Google can be found here: https://www.google.com/policies/privacy/
Detailed instructions on how to manage your personal data in relation to Google products can be found here.
Several of our web pages contain embedded YouTube videos. The operator of the respective plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page that contains a YouTube plug-in, a connection with the YouTube servers will be established. This means that information is shared with YouTube regarding which pages you visit. If you are logged in to your YouTube account, YouTube can associate your individual browsing behaviour with you personally. To prevent this, you can log out of your YouTube account beforehand.
If you have deactivated cookies for the Google Ads program, these sorts of cookies will also be deactivated when you watch YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you need to block cookies in your browser settings.
Some articles on this website may contain embedded content from other websites (e.g. videos, images or articles). Embedded content from other websites works in the same way as if the visitor had visited that website themselves.
a) Unwanted effects and asserting existing rights:
If we become aware of cases in which one of our products appears to be causing unwanted side effects, we are legally obligated to document the relevant information, including any personal data, and to share this with all the relevant authorities worldwide. If necessary, we are also obliged to contact the reporting parties for further assessment, in order to allow us to assert and protect our rights, or those of third parties, along with the holders of these rights, advisers and authorities.
b) External data-processing service providers:
Merck takes all measures necessary to ensure adequate protection of the data you provide, in accordance with the General Data Protection Regulation, by means of standard clauses that have been approved by the European Commission.
c) Sharing data with other companies within the Merck Group
We only retain your data for as long as is necessary to provide the services requested by you. For example, if you subscribe to a newsletter, we will store the relevant data at least until you cancel your newsletter subscription.
When you visit our website, any data collected that is legally considered to be personal data (e.g. your full IP address) is only stored in accordance with Swiss data protection legislation, unless circumstances justify a longer retention period (e.g. a cyber attack).
Data that does not contain personal information may be retained indefinitely.
a) General rights:
You can request information as to which of your data is stored, and you also have the right to be sent the data provided by you in an accessible, machine-readable format. Moreover, in justified cases, you have the right to request that your data be deleted, corrected or that its processing be restricted. If your personal data is transferred to a country outside the EU that does not offer adequate protection, you can request a copy of the contract used to ensure adequate protection of your personal data.
b) Right to object:
Furthermore, in justified cases, you may withdraw your consent to the processing of your personal data, provided that your personal data is being processed by us on the basis of our legitimate interest. (This is deemed to be the case if the legal basis for the data processing is Art. 6 f of the GDPR, see footnotes). This particularly applies to the collection of your data for analysing information about the online target group via Google Analytics.
c) Withdrawal of your consent:
If you have provided consent to the processing of your personal data on our website, you can withdraw this consent at any time with immediate effect.
Should you wish to exercise these rights, please contact us at:
Merck (Schweiz) AG, Chamerstrasse 174, 6300 Zug, Switzerland
Data protection declaration, last updated: 23/05/2018