This website is operated by Merck (Pty) Ltd South Africa („Merck“, “us” or “we”). Further details can be found in the imprint.
With this data protection declaration we explain to you which personal data is processed for which purposes.
- Which data do we process and for which purpose?
a) What kind of data do we collect when you browse our website?
Generally, we do not identify users who only browse our website. The browsing data we collect include the name of your internet service provider, the website from which you access our website, the Merck website which you looked at, temporarily your full IP address, and the date and duration of your visit.
b) Providing you with services you requested:
For some services on this website, we ask for information from you, like your name or an email address. We use your data to provide you access to services that you requested such as giving you access to our materials, answering questions about our products, or sending you newsletters based on your selections. In order to provide you with relevant information, we can individualise the content you requested based on the information we collected about you.
c) Legal obligations and legal enforcement:
In some cases we are under a legal obligation to process personal data. A typical example is the processing within the scope of the so-called pharmacovigilance, i.e. the obligation to investigate and share data when potential side effects of drugs become known. Where required, we can also use your data to enforce our, or third party, rights (such as copyright infringements).
d) General statistics, website security:
We use browsing data of our users for creating aggregated statistics (so that statistics do not show data about a single user but only about the collected data of a number of users), to learn what is of interest to users in order to improve our websites and offering. We also use the browsing data for maintaining or restoring the security of our offer, or to detect and correct technical defects and errors.
We also collect data about the location of the devices accessing our website for statistical purposes (statistics from where visitors access our website, etc.); you can control the authorisation for this using the browser settings.
- Cookies and Tracking
b) Google Analytics:
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”) to store “analytical cookies” on your device. This means that information about users and the use of our website is transmitted to Google and processed on our behalf for the purpose of compiling reports on website activity, measuring website visits and visitors, and providing similar services for us. This includes the transmission of your IP address, but it will not be merged with other Google data. In addition, it is shortened (usually within the European Union) and saved by Google only in an abridged form. For storage in the United States, Google’s self-certification according to the Privacy Shield provides an appropriate level of data protection.
c) Adobe Analytics:
This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (“Adobe”) to store “analytical cookies” on your device. This means that information about users and the use of our website is transmitted to Adobe and processed by us on our behalf for the purpose of compiling reports on website activity, measuring website visits and visitors and providing similar services to us. This includes the transmission of your IP address, but will not be merged with other Adobe data. In addition, it is pseudonymized prior to the geolocalization and replaced by a generic IP address before storage.
You can object to the processing of your data for statistical purposes by using the following link (“Use of Adobe Marketing Cloud by our business customers” section): http://www.adobe.com/de/privacy/opt-out.html.
d) Right to object:
Furthermore, in justified cases you can object to the processing of personal data concerning you where we process your personal data based on our legitimate interest (this is the case if the legal basis is Art. 6 f) GDPR as indicated in the footnotes). This applies in particular to the collection of your data for statistical measurement of the web audience by Adobe Analytics.
3. Recipients of personal data; data transfer to third countries
a) Adverse events or enforcement of rights:
If we become aware of potential cases of adverse reactions to one of our products, we are required by law to document and share the relevant information, including personal information with authorities worldwide and, where necessary for further assessment, to contact the reporting parties.
In order to enforce our rights or to protect our rights or the rights of third parties with the holders of such rights, consultants and authorities.
b) External service providers for data processing:
- Data Retention
We store data for as long as necessary for the provision of the service requested by you. For example, when you subscribe to a newsletter, we will store the associated data at least until you unsubscribe.
Data which is collected while browsing our website and which can legally be considered personal data (such as the complete IP address) is stored for a period of time of 30 (thirty) days, unless a reasonably justified incident indicates a longer storage period (e.g. due to a hacking attack).
Data without any personal identifiable information may be stored permanently.
- Data protection rights and contact
a) General rights:
You can request information about the data stored about you and have the right to receive the data provided by you in a common and machine-readable format. Furthermore, in justified cases, you may also request the deletion, correction or limitation of the processing of your data. If your personal data is transferred to a country outside the EU which does not provide appropriate protection, you can request a copy of the contract that implements the appropriate protection of personal data.
b) Right to object:
Furthermore, in justified cases, you can object to the processing of personal data concerning you where we process your personal data based on our legitimate interest. This applies in particular to the collection of your data for statistical measurement of the web audience by Google Analytics or Adobe Analytics.
c) Revocation of your consent:
When you have given your consent to the processing of personal data concerning you on the website, you can revoke your consent at any time with effect for the future.
d) Contact person:
To exercise these rights, please contact our data protection officer of the South African entity, Elsa Moroney (email@example.com).
Data protection declaration as of: 10 July 2020
1. Legal basis: Art. 6 (1) f) GDPR.