Declaration of Consent for the Storage and Use of Data

1. Data Protection Requirements

In context with the MilliporeSigma eCommerce platform, Merck KGaA, Darmstadt, Germany will apply the legal requirements for data protection, in particular the German Bundesdatenschutzgesetz (BDSG), to ensure sufficient protection and security of personal data. Personal data are any information relating to an identified or identifiable individual. The MilliporeSigma eCommerce platform will in particular store the following personal data. Customer specific data such as: Email Address, Password, Title, First Name, Last Name, Company, Telephone, Mobile, Fax, VAT Exemption, Agreement to Conditions of Sale, Shipping Address, Billing Address, Street, City, Postal Code, Country, Preferred Language, Status, Invoice Address, Customer Summary. And order specific data such as: Order Summary, Product IDs, Currency, Item Total, Total, Extra Costs, Additional Surcharges, Duties, Shipping Costs.

2. Collection, Storage, Processing, Transfer and Use of Data Required for Providing Service to You

Merck KGaA, Darmstadt, Germany operates the MilliporeSigma eCommerce platform which is intended to provide a continuously optimized and convenient online platform that enables customers to inform themselves about Merck KGaA, Darmstadt, Germany products and to place orders electronically which will then be executed by Merck KGaA, Darmstadt, Germany and its subsidiaries. Also, Merck KGaA, Darmstadt, Germany utilizes its regional and local subsidiaries to ensure the prompt execution of orders.

For that purpose, you confirm that Merck KGaA, Darmstadt, Germany is authorized to collect, store, process, transfer and use the following personal data that is stored about you when you register with the MilliporeSigma eCommerce platform and order items from our eCommerce platform: Email Address, Password, Title, First Name, Last Name, Company, Telephone, Mobile, Fax, VAT Exemption, Agreement to Conditions of Sale, Shipping Address, Billing Address, Street, City, Postal Code, Country, Preferred Language, Status, Invoice Address, Customer Summary and Order Summary, Product IDs, Currency, Item Total, Total, Extra Costs, Additional Surcharges, Duties, Shipping Costs. In particular, you agree to the transfer of personal data to Merck KGaA, Darmstadt, Germany subsidiaries and contracted IT providers that are involved by Merck KGaA, Darmstadt, Germany in context with executing your orders and requests initiated through the EMD Millipore eCommerce platform. This includes also Merck KGaA, Darmstadt, Germany subsidiaries in third countries, as defined in the European Data Protection Directive 95/46/EC, where Merck KGaA, Darmstadt, Germany ensures an adequate level of data protection. If you agree to this consent, this will be documented by Merck KGaA, Darmstadt, Germany.

If you do not accept this consent, you will not be able to place orders with the MilliporeSigma eCommerce platform because we would in this case not be able to process your data and in consequence cannot provide the requested service to you.

3. Collection, Storage, Processing, Transfer and Use of Data Required to Improve Our Services to You

In addition to the data described in the previous section, the Merck KGaA, Darmstadt, Germany collects anonymous data about the use of the MilliporeSigma eCommerce platform for recognizing returning visitors and for improving usability based on anonymous behavioral visitor profiles. For that purpose, the MilliporeSigma eCommerce platform uses “cookies”, which are text files stored on your computer. These cookies are intended for recognizing visitors and for supporting user convenience, e.g. password remember functionality.

In that context, the MilliporeSigma eCommerce platform uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”) and Adobe Analytics, a web analytics service provided by Adobe, Inc. You can find information on Google Analytics, Adobe Analytics and a list of cookies utilized by the MilliporeSigma eCommerce platform in our privacy statement on the following website here. During the registration and login process the email address entered in the respective form field is transformed into a non-readable hash key based on a consistent encryption logic. The hash key serves for recognizing returning visitors and for improving usability based on anonymous behavioral visitor profiles. It is based on the secure hash algorithm SHA-1 producing 160 bit (20 byte) hash keys in line with the Secure Hash Standard (SHS) norm. The encryption logic is one-directional, so that it is not possible to decrypt keys again. This logic prevents that any personal or readable email information is captured or stored.

4. Newsletter

If you register to our optional newsletter, Merck KGaA, Darmstadt, Germany will use your Email address for providing you with that newsletter until you unsubscribe. You can unsubscribe from receiving the newsletter with the help of the corresponding link that is included directly in the newsletter or by contacting us.

Contact address to unsubscribe from the newsletter:

Merck KGaA, Darmstadt, Germany
Frankfurter Strasse 250
64293 – Darmstadt
Germany

5. Other Use of Data and Disclosure

Merck KGaA, Darmstadt, Germany will not use and transfer personal data to additional other third parties without your prior agreement. However, Merck KGaA, Darmstadt, Germany can be obliged by authorities to hand out personal data on statutory obligation.

6. Deletion and Correction of Data

You can cancel the agreement for the storage and processing of your personal data at any time. In this case, we also will have to cancel your registration and use of the MilliporeSigma eCommerce platform. Personal data that are required for the execution of a contract that was agreed with you before the receipt of the cancellation will be deleted after completion of that contract. In case of legal obligation, your data will be stored solely for this purpose. The data will then be deleted automatically after the completion of the contract and after the legally required data retention period. Also, you can ask Merck KGaA, Darmstadt, Germany for the correction of inaccuracies in the information related to yourself.

Contact address to cancel the declaration of consent:

Merck KGaA Darmstadt Germany
MM eCommerce
Frankfurter Strasse 250
64293 – Darmstadt
Germany
Email: privacy@emdgroup.com

7. Information About Stored Information

At any time and free of charge, you can request access to the data that is stored about you by Merck KGaA, Darmstadt, Germany. Insight into the data will be provided in written form. A corresponding request can be addressed to the contact address listed in section 6 of this consent.

8. General Data Privacy Contact

Please use the following contact information in case of general data privacy related questions concerning the Merck Group:

Data Privacy Officer of Merck KGaA, Darmstadt, Germany
Norbert Moeren
Frankfurter Strasse 250
64293 Darmstadt
Germany
Phone: +49 6151 72-0
E-Mail: privacy@emdgroup.com