Source: https://liquid.emd.design/privacy/
Timestamp: 2019-04-24 12:44:47+00:00

Document:
What kind of data is collected and how is it used?
Is other personal data collected and processed?
Will my data be transferred to third parties, e. g. authorities?
Do I have a right to information and rectification of my stored data? What other rights do I have with regard to my stored data?
Can I withdraw my consent to the use of my data?
Who is my contact person if I have questions about data protection?
How long is this data privacy declaration valid?
Thank you for your interest in the Liquid Design System website of Merck KGaA, Darmstadt, Germany. We take data protection and privacy issues very seriously and comply with the applicable national and European data protection regulations. Therefore, we would like to inform you with this declaration about data protection measures and which data we may store and how we use this data.
2. What kind of data is collected and how is it used?
This data is collected, processed and used for the purpose of enabling the use of the website (connection setup), system security and technical administration of the network infrastructure. A comparison with other databases or a transfer to third parties, also in excerpts, does not take place. The legal basis for processing is Art. 6 para. 1 b GDPR.
The legal basis for processing is Art. 6 para. 1 f GDPR, whereby Merck KGaA, Darmstadt, Germany’s authorization arises from the fact that, on the one hand, Merck KGaA, Darmstadt, Germany has an interest in evaluating the website data for purposes of website optimization and, on the other hand, a concerned person can reasonably foresee at the time when the personal data is collected and in view of the circumstances under which it is carried out (in particular the above-mentioned measures) that it will possibly be processed for this purpose.
3. Which cookies are used?
_ga Web Storage persistent IP-Address, usage behavior Used to distinguish users.
_gat Web Storage persistent IP-Address, usage behavior Used to throttle request rate.
_gid Web Storage persistent IP-Address, usage behavior Used to throttle request rate against Google Analytics.
cbc_country_code Web Storage persistent Country code Store user’s locale.
cbc_country_name Web Storage persistent Country code Store user’s locale.
cookie_notice_accepted Web Storage persistent Yes/No If the user accepted the cookie disclaimer.
incap_ses_[session] Web Storage persistent IP-Address Load-Balancing-Cookies of Incapsala, DNS-based firewall.
visid_incap_[session] Web Storage persistent IP-Address Load-Balancing-Cookies of Incapsala, DNS-based firewall.
wordpress_test_cookie Web Storage persistent Yes/No Test if cookies can be saved.
We do not use social media plugins on this website.
5. Is other personal data collected and processed?
We collect and process your personal data only if you request certain services and we need your data for this purpose or if you have voluntarily given us your express consent. The legal basis for processing is Art. 6 Para. 1 b GDPR and Art. 6 Para. 1 a GDPR.
You can do this, for example, by completing a registration form or sending us an email, ordering products or services, submitting inquiries to us, requesting materials or registering. Unless otherwise required by law, we will only use your personal data for the purposes for which you have given your consent.
For special services such as newsletters, sweepstakes, etc. the respective special data protection provisions apply.
6. Will my data be transferred to third parties, e. g. authorities?
In certain cases, we are required by law to transfer data to a requesting public authority.Upon submission of a court order, we are obliged pursuant to § 101 of the German Copyright Act to provide owners of copyright and ancillary copyrights with information about customers who are alleged to have offered copyright-protected works on internet file-sharing sites. In these cases, our information contains the user ID of an IP address allocated at the time requested and, if known, the name and address of the customer.
In other respects, personal data will only be transferred to state institutions and public authorities within the framework of mandatory national legal provisions or if disclosure is necessary in the event of attacks on the network infrastructure for legal or criminal prosecution. The legal basis for processing is Art. 6 Para. 1 c GDPR or § 24 Para. 2 No. 1 German Federal Data Protection Act.
When service providers get access to our customers’ personal data, this usually takes place in the course of so-called order processing of personal data. This is expressly provided for by law. In this case, Merck KGaA, Darmstadt, Germany remains responsible for the protection of your data – in addition, the processor may also be responsible. The service provider works strictly in accordance with our instructions, which we ensure by means of strict contractual regulations, technical and organizational measures and supplementary controls. Merck KGaA, Darmstadt, Germany works with service suppliers as processors. These are Merck KGaA, Darmstadt, Germany Group companies and service providers for IT services (e. g. for technical-administrative tasks and for usage analysis), telecommunications, consulting and advisory services as well as sales and marketing.The data protection regulations for instruction-bound order processing of personal data are complied with.
Merck KGaA, Darmstadt, Germany may transfer your personal data to Merck KGaA, Darmstadt, Germany Group companies in order to carry out a business relationship with you or for the purposes of legitimate interests.If data are transferred abroad, they are based within the EU or the EEA or in a country which, according to the decision of the EU Commission, has an appropriate level of data protection. In the case of data transfers to Merck KGaA, Darmstadt, Germany Group companies domiciled in other countries, Merck KGaA, Darmstadt, Germany ensures by way of guarantees that the data-importing Merck KGaA, Darmstadt, Germany Group company has been obligated to an appropriate level of data protection.
Beyond this, we do not transfer data to third parties unless you have given your express consent, the transfer is obviously necessary for the provision of an offer or service requested by you or this is provided for by law. We also do not intend to transfer your data beyond this to a third country or international organization.
7. How long will my data be stored?
We store data for as long as it is legally necessary or necessary for the provision of the service requested by you, or as long as it has been agreed upon in a declaration of consent.
8. Do I have a right to information and rectification of my stored data? What other rights do I have with regard to my stored data?
You may at any time and free of charge request information about the scope, origin and recipients of the stored data as well as the purpose of the storage; in addition, you have the right to rectification, erasure or restriction of the processing of your data in accordance with data protection regulations, a right to object to the processing as well as a right to data portability. Please note that there is a right of appeal to a supervisory authority.
9. Can I withdraw my consent to the use of my data?
10. Who is my contact person if I have questions about data protection?
11. How long is this data privacy declaration valid?
This data privacy declaration is up-to-date and dates from May 30, 2018. We reserve the right to amend the data privacy declaration at any time with effect for the future, in particular to adapt it to a further development of the website or the implementation of new technologies.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 101
 Art. 6
 § 24