At Merck KGaA, Darmstadt, Germany, those bodies within Merck KGaA, Darmstadt, Germany, receive your data that are
required to fulfill our contractual and legal obligations. Some data must be disclosed under strict contractual and legal requirements:
In certain cases, we are required by law to transfer data to a requesting public authority.
Upon submission of a court order, we are obliged pursuant to § 101 of the German Copyright Act to provide owners of copyright and ancillary copyrights with information about customers who are alleged to have offered copyright-protected works on internet file-sharing sites. In these cases, our information contains the user ID of an IP address allocated at the time requested and, if known, the name and address of the customer.
In other respects, personal data will only be transferred to state institutions and public authorities within the framework of mandatory national legal provisions or if disclosure is necessary in the event of attacks on the network infrastructure for legal or criminal prosecution. The legal basis for processing is Art. 6 Para. 1 c GDPR or § 24 Para. 2 No. 1 German Federal Data Protection Act.
- To external service providers for data processing:
When service providers get access to our customers' personal data, this usually takes place in the course of so-called order processing of personal data. This is expressly provided for by law. In this case, Merck KGaA, Darmstadt, Germany, remains responsible for the protection of your data – in addition, the processor may also be responsible. The service provider works strictly in accordance with our instructions, which we ensure by means of strict contractual regulations, technical and organizational measures and supplementary controls.
Merck KGaA, Darmstadt, Germany, works with service suppliers as processors. These are subsidiary companies of Merck KGaA, Darmstadt, Germany and service providers for IT services (e. g. for technical-administrative tasks and for usage analysis), telecommunications, consulting and advisory services as well as sales and marketing.
The data protection regulations for instruction-bound order processing of personal data are complied with.
- To subsidiary companies of Merck KGaA, Darmstadt, Germany:
Merck KGaA, Darmstadt, Grmany, may transfer your personal data to the subsidiary companies of Merck KGaA, Darmstadt, Germany in order to carry out a business relationship with you or for the purposes of legitimate interests.
If data are transferred abroad, they are based within the EU or the EEA or in a country which, according to the decision of the EU Commission, has an appropriate level of data protection. In the case of data transfers to subsidiary companies of Merck KGaA, Darmstadt, Germany domiciled in other countries, Merck KGaA, Darmstadt Germany, ensures by way of guarantees that the data-importing subsidiary company of Merck KGaA, Darmstadt, Germany has been obligated to an appropriate level of data protection.
Beyond this, we do not transfer data to third parties unless you have given your express consent, the transfer is obviously necessary for the provision of an offer or service requested by you or this is provided for by law. We also do not intend to transfer your data beyond this to a third country or international organization.