Imprint/Privacy Statement

We take your data privacy and the protection of your personal data seriously and our data privacy principles provide fundamental guidance to all our businesses worldwide. We comply with applicable national regulations and our understanding of data privacy is based on the European General Data Protection Regulation (GDPR), amended by local regulations in case they are stricter.

1. General information

This section is about the controller of your personal data, how you may contact this controller and which rights you have as a data subject in this context. A controller is a company responsible for the handling of personal data.

1.1. Controller

The data controller means the company (legal person) who determines the purposes and means of the processing of your personal data. For the overarching processing activities described in this data privacy notice, Merck KGaA, Darmstadt, Germany is data controller. In addition, any affiliate of Merck KGaA, Darmstadt, Germany that processes personal data might become a controller or joint controller of such data. This includes, without limitations, any legal entity of the Merck KGaA, Darmstadt, Germany group you enter into an agreement with.

Merck KGaA
Frankfurter Strasse 250
64293 Darmstadt, Germany

Phone: +49 6151 72-0
Telefax: +49 6151 72-2000

1.2 Data Protection Officer

We have appointed a Group Data Privacy Officer. You can contact this person and the team at any time:

Group Data Privacy Officer
Merck KGaA
Frankfurter Strasse 250
64293 Darmstadt, Germany

+49 6151 72-0
privacy@emdgroup.com

You are also welcome to exercise your data protection rights by submitting your request directly in our Data Privacy Portal.

2. The processing activities in detail

This section explains the different data processing activities in which we process your personal data.

2.1 Processing of your personal data in other contexts

We process your personal data in various situations we are describing in this section, including any of your on and offline interactions with us regarding the products and services we offer and the business we do.

We usually process your personal data for contractual purposes and to communicate with you for commercial reasons when you or we purchase a good or service from the other one. For this purpose, we only process such data which is needed to fulfill the contract itself and with all additional obligations we are subject to, like tax payments.

In addition, we might use some of your personal data, based on our legitimate interest, to develop and offer our products and services, learn more about your interests, do marketing under local market rules, and continuously improve our offerings.

Please refer to the below explanations and/or individual data privacy notices which we provide in the context of our business communication with you to learn more about the corresponding processing of your personal data in this context.

2.1.1 Marketing Communications

We process your personal data within the scope of our public relations and marketing processes. This includes in particular the issuance of newsletters, press kits, and registrations for press distribution lists, press contacts and press representatives.

2.1.1.1 Newsletters

This processing activity may include the following data categories:

  • Your contact information (e.g., name, title, form of address, private address, gender, telephone numbers, email address);
  • Details on your profession (e.g., job title, position, personnel number, place of work, branch office, department).

If you would like to subscribe to any of our available newsletters, you may enter your email address in our registration form and click the “Send” button. You will then receive an email from us to your email address. You may complete the registration by verifying your email address by using the answer function in your email program.

This processing activity includes the following data categories: The information you provided to subscribe, such as your title, name, email address and personal/professional interests.

The processing is based on your consent you provided to us in the course of the subscription process. Your personal data will be deleted when you withdraw your consent, e.g., by filling the form on our website to unsubscribe.

2.1.1.2 Other Processing for Marketing; Profiling

Other processing in this regard is based on our legitimate business interests. We have a legitimate interest in informing our clients of news, events, etc. to gain new leads and establish and maintain a long-term business relationship.

We aim to present you information that could be of interest to you and to communicate seamlessly over various channels (phone, email, SMS, mail, social media messages) without sending redundant information. Our communication with you is based on the information we collect about you and are permitted to use. For example, we use the combination of your email address and your browsing data so we can provide you with information about a product you look up on one of our websites. Based on the information we collect, we may internally indicate that you are interested in certain categories of information.

We also use profiling procedures to optimize and personalize our customer relationship management and our advertising measures. To optimize and personalize our advertising measures, we create customer profiles and assign customers to specific customer segments on the basis of these customer profiles. On the basis of this segmentation, we can manage the type, content and frequency of specific advertising measures for specific target groups. For profiling purposes and based on our legitimate interest, we use data that we receive from you as part of our business relationship. This includes personal data, like your purchasing behavior and browsing behavior. Profiling may also be related to usage data that we create by measuring and evaluating the customer’s interaction with electronic advertising, and in particular by measuring and evaluating the opening and click rate in email newsletters.

2.1.2 Business Contacts

If Merck KGaA, Darmstadt, Germany has received your contact details from business events, for example as part of a business appointment (e.g., by exchanging business cards) or as part of an assignment, we use your contact and business details to maintain our business contacts. For this purpose, we usually transfer your contact details to our CRM (Customer Relationship Management).

This processing activity may include the following data categories:

  • Your contact information (e.g., name, title, form of address, private address, gender, telephone numbers, email address);
  • Details on your profession (e.g., job title, position, personnel number, place of work, branch office, department, qualifications)

This data processing is based for our legitimate business interests. Merck KGaA, Darmstadt, Germany has a legitimate economic interest in maintaining contacts beyond the initial contact and in using them to establish and develop a business relationship and to remain in contact with the parties concerned. Such business contacts could also be easily processed in our e-mail communication with you and then kept in typical business software, either centrally or on the electronic devices of our employees.

2.2 Privacy notice for this website

This section explains the different data processing activities in which Merck KGaA, Darmstadt, Germany processes your personal data for the operation of the services provided on this website (“Websites”).

2.2.1 Operation of our Websites

We process your personal data for the purpose of the operation of our Websites. You can access our Websites without directly providing personal information. However, whenever you access our Websites, you automatically transfer personal data to our servers for technical reasons.

This processing activity may include the following data categories:

  • IP address of the requesting device;
  • Date and time of your visit;
  • Name and URL of the retrieved file;
  • Transferred data volume;
  • Access status (file transferred, file not found, etc.);
  • Identification data of the browser and operating system used;
  • Name of the provider of user’s internet access; and
  • Website from which access is made and the Websites you are accessing.

This data processing is based on our legitimate business interests. We process these data for the purpose of presenting our Websites and to ensure its technical stability and security (e.g., to prevent hacker attacks). 

2.2.2 Cookies

Cookies improve the user experience on our Websites because they allow, e.g., the system to recognize returning visitors. The term “cookies” in this Privacy Notice refers to cookies and similar technologies. Cookies are small, usually randomly coded text files that are sent to your device and stored there. These cookies allow your browser to track certain information that may be retrieved and used by internet servers at a later stage. Merck KGaA, Darmstadt, Germany uses cookies and similar technologies on its Websites for several reasons, for example:

  • Websites load faster;
  • Websites may be browsed faster;
  • Your settings, such as language and time zone, may be saved;
  • Security on websites is improved since your identity may be verified; and
  • Your log-in to secured websites is facilitated.

We include the following three categories of cookies on our Websites:

2.2.2.1 Necessary Cookies

These cookies are necessary to safeguard the functionalities of our Websites, the services provided thereon and for the website to operate. Cookies are set in response to your actions and depend on your specific service requests (e.g., setting your privacy preferences, filling out forms, or logging in). More specifically, we set the following cookies:

  • __stripe_mid: This cookie is used for payment processing and to provide fraud prevention. This cookie is active for 1 year.
  • __stripe_sid:  We use Stripe for payment processing and to provide fraud prevention. This cookie is deleted within 30 minutes.
  • _gat_UA-*: We use Google Analytics for website statistics and to provide technical monitoring. This cookie is deleted after your session.
  • cmplz_elementor_banner_id: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_statistics: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_policy_id: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_saved_services: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_consented_services: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.cmplz_marketing:
  • cmplz_preferences: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_functional: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_id: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_saved_categories: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_user_data: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • cmplz_banner-status: We use Complianz for cookie consent management and to store cookie consent preferences. This cookie is active for 365 days.
  • AKA_A2: This cookie provides an Advanced Acceleration feature, which enables DNS Prefetch and HTTP2 push. It expires after 1 hour or upon the withdrawal of your consent.
  • incap_ses_: This cookie is used for visitor recognition. It expires when you close your browser or upon the withdrawal of your consent.
  • *_mixpanel: We use Mixpanel for website statistics. Purpose pending investigation.
  • jetDasboardData: We use this cookie to save user preferences. This cookie is active for 3 months.
  • Loglevel: We use Loglevel to collect data on user interaction with video-content. This cookie is persistently active.
  • akamai_clientId: Sets a unique ID for the visitor which allows the website to determine if the user has interacted with the website’s video player. This cookie is deleted after each session.
  • mm-country: This cookie stores geotargeting information. This cookie is deleted after your session.

The processing is based on our legitimate business interest to be able to provide our basic webservices in a secure and useful manner. Our website cannot function without these cookies, and they can only be disabled by changing your browser preferences. Please note, if you object to the use of these necessary cookies, our Services might not be available to you.

2.2.2.2 Functional Cookies

These cookies enable the provision of advanced functionalities and are used for personalization. The cookies are set in response to your actions and depend on your specific service requests (e.g., pop-up notification choices). More specifically, we set the following cookies:

  • Elementor: We use Elementor for content creation and to store performed actions on the website. This cookie is persistently active.
  • _ga: We use Google Analytics for website statistics and to store and count pageviews. This cookie is deleted within 2 years.
  • _gid: We use Google Analytics for website statistics and to store and count pageviews. This cookie is deleted within 1 day.
  • wistia-video-progress-*: We use Wistia for video display and to store if the user has seen embedded content. This cookie is persistently active.
  • wistia: We use wistia for video display and to save whether the user has seen embedded content. This cookie is persistently active.

The processing is based on your consent you provided to us. You either grant your consent by accepting all cookies in our cookie banner or by activating the cookie type(s) you have selected. Your consent is voluntary, and you may withdraw it at any time with effect for the future. You can withdraw your consent by reopening our cookie banner and deactivating the cookie type. If you do not grant your consent or withdraw it, this will not result in any disadvantages for you. However, without your consent, the functions explained above might not be available to you.

2.2.2.3 Targeting Cookies

These cookies may be set to analyze your interests and show you relevant ads on other websites. These cookies work by uniquely identifying your browser and device. By integrating these cookies, we aim to learn more about your interests and your behavior on our Websites in order to place our advertising in a targeted manner. More specifically, we set the following cookies:

  • Google Fonts API: We use Google Fonts for display of webfonts and to read user IP address. This cookie expires immediately.
  • rc::c: We use Google reCAPTCHA for spam prevention and to read and filter requests from bots. This cookie is deleted after each session.
  • rc::b: We use Google reCAPTCHA for spam prevention and to read and filter requests from bots. This cookie is deleted after each session.
  • rc::a: We use Google reCAPTCHA for spam prevention and to read and filter requests from bots. This cookie is persistently active.
  • Google Maps API: We use Google Maps for maps display and to read user IP address. This cookie expires immediately.

The processing is based on your consent you provided. You either grant your consent by accepting all cookies in our cookie banner or by activating the cookie type(s) you have selected. Your consent is voluntary, and you may withdraw it at any time with effect for the future. You can withdraw your consent by reopening our cookie banner and deactivating the cookie type. If you do not grant your consent or withdraw it, this will not result in any disadvantages for you. However, without your consent, the functions explained above might not be available to you.

Please note that the use of Google Analytics has been extended by the plug-in “AnonymizeIP”, to ensure an anonymized collection of your IP address, so that we cannot relate your data to your person. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

2.2.2.4 Consent

When you visit our website for the first time, we will show you a pop-up with an explanation about cookies. As soon as you click on “Save preferences”, you consent to us using the categories of cookies and plug-ins you selected in the pop-up, as described in this Cookie Policy. You can disable the use of cookies via your browser, but please note that our website may no longer work properly.

2.2.2.4.1 Manage your consent settings

2.2.2.5 Management and Deletion of Cookies

You can manage your decision on the use of cookies by reopening our cookie banner or by changing your browser preferences. Some computer browsers automatically accept all cookies. In this case, you may not see the cookie banner which allows you to manage your cookies individually. However, you can change your browser settings to block all cookies. You may also be able to configure your browser settings so that only certain types of cookies are blocked or so that you are notified as soon as a new cookie is to be stored on your computer. In this case, you can accept or reject cookies individually. If this function is available to you, you will find more detailed explanations in the help function of your browser. There you will also find information on how to delete all or certain cookies for which you have given us your consent. For more information on managing and deleting cookies for popular browsers, please see the following links: Google ChromeMozilla FirefoxMicrosoft Internet ExplorerMicrosoft EdgeApple Safari.

2.2.3 Google Maps

We process your personal data to display maps, a service provided by Google LLC.

This processing activity may include the following data categories which will be transmitted to Google LLC in the United States of America:

  • The technical data as described in Section 3;
  • Your location;
  • The content you access (e.g., places); and
  • The frequency of these accesses.

The processing is based on our (and your) legitimate business interest to guide you to our premises and facilitate your route planning.

The use of the service is not possible without your data, and these are automatically provided when you open a sub-page on which Google Maps is integrated. We process no further personal data than those specified in Section 3. Information on data processing by Google can be found in Google’s privacy policy under the following link: https://policies.google.com/privacy?hl=en.

We do not conduct automated decision-making or profiling in this context.

2.2.4    Social Media Plugins

We use social media plugins from various social networks (e. g. Facebook). With the help of these plugins, you can share content or recommend products. The plugins are deactivated by default and therefore do not send data to other websites. By clicking on the symbol of such social network on EMDGroup.com and the confirmation by a second click on “OK” on the site following, you can activate plugins and thus provide your consent to the processing of your personal data in this context (so-called 2-click solution).

If these plugins are activated, your browser establishes a direct connection with the servers of the respective social media network as soon as you access the operator’s website. The content of the respective plugin is transmitted directly from the social media network to your browser and embedded into the website.

By embedding the plugins, the social media network receives the information that you have visited the respective page of the operator. If you are logged in to the social media network, it can allocate the visit to your account. When you interact with the plugins, the corresponding information is transferred directly from your browser to the social media network and stored there.

Even if you are not logged in to social media networks, websites with active social media plugins can still send data to these networks. With an active plugin, a cookie with an identifier is placed each time the website is accessed. Since your browser sends this cookie every time you connect to a network server without being asked, the network could basically use it to create a profile of the websites visited by the user associated with the ID. And it would then also be possible to assign this identifier to a person again later – for example when logging on later to the social network.

For the purpose and scope of data collection and the further processing and use of the data by social media networks, as well as your rights and options for the protection of your privacy, and in particular your right to revoke your consent, please refer to the data protection notices of the respective networks.

  • Facebook (provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA): You can view Facebook’s privacy policy here:
    https://www.facebook.com/about/privacy/your-info#public-info
  • Twitter (provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA): You can view Twitter’s privacy policy here:
    https://twitter.com/privacy
  • LinkedIn (provided by LinkedIn Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA): You can view LinkedIn’s privacy policy here:
    https://www.linkedin.com/legal/privacy-policy
  • YouTube (provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA): You can view Google’s privacy policy here:
    https://www.google.de/intl/de/policies/privacy/Instagram (provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA): You can view Instagram’s privacy policy here:
    https://help.instagram.com/155833707900388
 
2.2.5 Dream Board, Opportunity Board and Media board

We use widgets from Walls.io., which, among other things, allow our social media updates to be displayed directly on the website.

When these plugins are used, the IP address and cookie information are transmitted to Walls.io for logging in log files. Walls.io is operated by “Die Socialisten” Social Software Development GmbH in Vienna, Austria. IP address and cookie information are sent to walls.io servers in Germany and logged there for technical reasons. This logging is purely a technical necessity to enable the functionality of the social media plugin or widget. This data will not be passed on to third parties. If you do not accept or delete the cookies, the functions of the social media plugin will not be available to you.

We have no influence on the data collection and its further use by the social networks.

This data processing is based on our legitimate business interests.

3 Data retention

Unless otherwise stated in this Privacy Notice, your personal data are regularly deleted as soon as they are no longer necessary to fulfil the purpose of the processing, or the processing is otherwise inadmissible. This is usually the case if the data is no longer necessary to meet our business interests or for the provision of the services requested by you, no statutory data retention obligations apply, or you withdrew your consent.

For more information about how long we store cookies for, please see above.

Your IP address, which is collected while browsing our Websites, is stored for a period of time of 7 days unless a reasonably justified incident indicates a longer storage period (e.g., due to a hacking attack).

Under certain circumstances, your data must also be kept longer, e.g., if a so-called Legal Hold or Litigation Hold (i.e., a ban on deleting data for the duration of the procedure) is ordered in connection with official or legal proceedings. Data without any personal identifiable information may be stored permanently.

4 Recepients of personal data

We might transfer your personal data to third parties, such as our service providers, financial institutions to process payments, lawyers and auditors, etc. to the extent required to meet our business objectives and fulfill our Services. For this purpose, we enter into adequate data protection agreements with these parties to the extent legally required and in this context safeguard that these recipients agree on technical and organizational measures to protect your personal data adequately.

We might also transfer personal data to other Merck KGaA, Darmstadt, Germany Group companies.

5 Data transfer to third countries

Should such a data transfer involve the transferal of your personal data to countries outside of the EU/EEA, that do not have an adequate level of data protection compared to the EU, we safeguard such level of data protection by entering into standard contractual clauses with any such recipients if no adequacy decision justifies such transfer. This ensures that your data protection rights are protected. You may download a copy of these standard contractual clauses at the following URL: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

6 Automated decision-making

We generally do not use automated decision-making (including profiling) within the meaning of Article 22 GDPR. If we make use of automated decision-making or profiling, you will be informed through a separate data privacy notice.

7 Obligation to provide personal data

In general, you are neither contractually nor statutorily obliged to provide your personal data for the above purposes, however your decision to not provide your data may reduce features and functionalities, the impossibility to use our information and services offered in this context, the denial of access to our services and/or exclusion from our business activities to the extent the processing of your personal data is key in these contexts.

The information required for registration on our Website or for contacting us is marked as mandatory in the corresponding area (e.g., a contact form) of the Website; if you do not provide this mandatory information, we cannot enable you to use the respective functionality.

8 Your data protection rights

You have or might have the following data protection rights:

  • Right of access: You have the right to obtain information on the processing of your personal data and to receive a copy these data.
  • Right to rectification: You have the right to request that we correct or complete your inadequate, incomplete or inaccurate personal data.
  • Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data.
  • Right to restriction of processing: Under certain requirements, you may request us to restrict the processing of your personal data.
  • Right to data portability: You might have the right to receive your personal data in a structured, common and machine-readable format and request that these data are transferred to another data controller, if applicable under the specific circumstances.
  • Right to object: You might have the right to object to the processing of your personal data by us, in particular if the processing of your personal data is based on (i) the necessity of the performance of a task in the public interest, or (ii) legitimate interests. We will then stop the processing of your personal data unless we remain legally authorized to do so.
  • Right to lodge a complaint with a supervisory authority: You might have the right to lodge a complaint with a supervisory authority against the processing of your personal data if you believe that the processing of your personal data violates data protection regulations.
8.1 Exercise your data protection rights

You may exercise your data protection rights by submitting a request in our Data Privacy Portal. We take our responsibility for the protection of your rights very seriously. Our privacy experts will examine your request and answer it as soon as possible. 

8.2 Withdrawal of consent

In case you granted us your consent to process your personal data, you may withdraw this consent with effect for the future, depending on the specifications of the respective processing activity. We will then stop the processing of your personal data, unless we have a legal permission to do so. Please note that your withdrawal has effect for future processing operations only and does not make data processing operations, which we executed before such withdrawal, unlawful.

To withdraw your consent, you may send an email to info@future-insight.org. If you withdraw your consent, you may no longer be able to use the services affected by the withdrawal. Apart from that, you will not suffer any further disadvantages.

If you do not specify your withdrawal to a specific processing operation, we will assume that you withdraw your consent regarding all processing of your personal data that is based on your consent.

This Data Privacy Statement is up-to-date and dates from June 2022. We reserve the right to amend the data privacy declaration at any time with effect for the future, in particular to adapt it to a further development of the website or the implementation of new technologies.