Privacy Policy
CONTENTS
A. Data Protection
B. Responsibility for the processing of your personal data
C. General information and types of data processing
a. Scope and purpose of the data processing
i. Usage data in the registration portal
ii. Registration data
iii. Cookies
iv. Newsletter
b. Passing on personal data to (other) third parties
D. Duration of the retention of your data
E. Rights in relation to data processing
F. Contact data
A. Data Protection
Merz attaches great importance to the protection of personal data. In the following Privacy Policy, we inform you about who is responsible for processing your data. Any further information will be provided according to the specific capacity in which you contact us, that is to say, according to whether you contact us as a visitor to our website, a WebCast participant, a customer of our products, a health care practitioner, a prospective customer, or a competition participant. You will moreover be provided with general information on the processing of your data by Merz, in particular information on the transmission of your data, the duration for which your data are stored, and your rights in connection with the processing of your data.
Merz Aesthetics GmbH (“Merz”) processes your data in accordance with the data protection provisions set forth in the German Federal Data Protection Act (Bundesdatenschutzgesetz–BDSG), specifically in the version applicable as of 25 May 2018, and in Regulation (EU) 2016/679 (General Data Protection Regulation–GDPR).
B. Responsibility for the processing of your personal data
The data controller that is responsible for the processing of your personal data within the meaning of Art. 4 (7) GDPR is Merz Aesthetics GmbH, Eckenheimer Landstraße 100, 60318 Frankfurt am Main.
C. Privacy policy for participants in the Innovation Forum 2022 by Merz Aesthetics
Thank you for your interest in our Innovation Forum 2022 by Merz Aesthetics. The protection of your personal data is also important to us
in the registration process for our Innovation Forum 2022 by Merz Aesthetics. In the following paragraphs we specify the data processing which you may provide us with in connection with your participation.
a. Scope and purpose of data processing
The personal data processed by Merz includes all data required for the registration for our Innovation Forum 2022 and which is visible in the form. The legal basis for the processing of the data is Art. 6 (1) S. 1 lit. b DS-GVO.
i. Usage data in the registration portal
When using the registration portal, various data about the accessing system is stored. This includes the type of browser used, the browser version, the operating system used, the website from which the Merz website is accessed, the sub-pages of the Merz website accessed, the date and time of access, the Internet protocol address (IP address), the Internet service provider and any data comparable to this data. Merz uses this data to make the website accessible, to detect and rectify any technical problems that may occur and to prevent and, if necessary, to prosecute any misuse of Merz's services. In addition, Merz uses this data in an anonymous form, i.e. without the possibility of identifying the user, for statistical purposes and to improve the websites. The legal basis for the processing of personal usage data is Art. 6 (1) S. 1 lit. f DS-GVO.
ii. Registration data for participation in the Innovation Forum 2022
In order to participate in the Innovation Forum 2022, you will be asked to set up a profile and provide Merz with certain information (title, last name, first name, e-mail address, contact address details). The legal basis for processing the data described above is Art. 6 (1) S. 1 lit. b DS-GVO.
iii. Cookies
Cookies are used within the scope of using the Merz registration portal. Cookies are small text files that are stored on the user's data carrier and exchange certain settings and data with the Merz system via the browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. For reasons of user-friendliness, cookies enable Merz to use a so-called single sign-on concept for authentication and to control access to the various password-protected areas of Merz's websites. Users can then move through the entire password-protected area of the Web site without having to log in again for each area. In addition, cookies are used to collect information about how users use Merz's websites, how they navigate through the site, and which areas of the site and products they are interested in. In this way, Merz can improve its websites and the online experience of users. The information stored in the cookies is not used to identify the user and is not merged with other personal data stored about the user. The legal basis for the processing of personal data using cookies is Art. 6 (1) S. 1 lit. f DS-GVO.
By changing the settings of the Internet browser, users can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for Merz websites, it may no longer be possible to use all functions of the websites to their full extent.
Analysis cookies
These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. With your help, we can see which of our pages are the most popular or least popular, how users move around our website, if they receive error messages, etc. This information is primarily used to improve our website. For clarification, web analytics are included in this cookie category. These cookies do not store information that directly identifies an individual, but are based on a unique identification of your browser and Internet device (including other technical data such as your IP address, operating system, Internet provider, website from which you are visiting us, etc.). Unless you accept these cookies, we cannot analyze when users have visited our website.
Cookies for marketing purposes
These cookies are used to generate advertising messages that are more relevant to you and customized to your interests. They also perform other functions, for example, they prevent the same ads from being displayed over and over again and ensure that ads are displayed correctly. In some cases, they also select advertisements that match your interests. These cookies remember that you have visited the websites. This information can also be shared with other companies. In addition, cookies for targeting and advertising may be linked to website functionalities provided by other companies. For more information, please see our privacy information.
iv. Newsletter
With the following information, we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. If the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users.
Double-Opt-In and logging: The registration for our newsletter takes place in a so-called double-opt-in procedure. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored with the service provider are also logged.
Service provider: The newsletter is sent by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter referred to as "shipping service provider"). You can view the privacy policy of the shipping service provider here: https://www.cleverreach.com/de/datenschutz/.
Furthermore, according to its own information, the dispatch service provider may use this data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletters or for statistical purposes to determine which countries the recipients come from. However, the service provider does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.
The subscribed newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in e-mails in HTML format. Merz can use the embedded tracking pixel to recognize whether and when the newsletter was opened by the recipient and which links contained in the newsletter were called up by the recipient. Data collected via tracking pixels contained in the newsletters are stored and processed anonymously for statistical purposes in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the recipients.
The use of the service provider, performance of the statistical surveys and analyses as well as logging of the registration process, are carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves our business interests as well as meets the expectations of the users.
Cancellation/revocation - You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. If the users have cancelled the newsletter receipt, the users' personal data processed for its sending will be deleted.
b. Passing on personal data to (other) third parties
Merz relies on the support of specialized technical service providers for the technical processing of personal data. These service providers are carefully selected and are legally and contractually committed to ensuring a high level of data protection. The legal basis for our partnerships with these service providers is Art. 28 GDPR. In connection with the provision of the registration portal, MATT CIRCUS GmbH acts as service provider on behalf of Merz. The registration portal is hosted on servers of wix.com.
D. Duration of the retention of your data
Unless otherwise stated in this Privacy Policy, personal data will be erased by Merz if it is no longer needed for the purposes for which it was processed and if the retention periods prescribed by law have expired. Contractually relevant data are usually erased ten years after the termination of the respective contract with Merz.
E. Rights in relation to data processing
If you would like detailed information on the personal data that has been stored by Merz about you, you can contact Merz. You may also request to receive information about any data that you have provided to Merz in accordance with applicable law in a structured, commonly used, and machine-readable format, or you may also request Merz to submit such information to a third party. If you discover that personal information that has been stored about you is incorrect or incomplete, you may request that such data be immediately corrected or completed at any time. If the requirements stipulated in Art. 17 and 18 GDPR are met, you may also request the erasure of your personal data or that processing of it be restricted. You also have the right to lodge a complaint with the relevant supervisory authority for data protection issues.
Insofar as the processing of your personal data is based on legitimate interests as per Art. 6 (1) Sentence 1 (f) GDPR, you are invariably entitled to object to such processing based on reasons arising from your particular situation. This entitlement also applies to any profiling that is conducted on the basis of the above provision. Merz will then no longer process the personal data unless Merz can prove compelling legitimate grounds for data processing that override your interests, rights and freedoms, or the data processing is for the purpose of establishing, exercising or defending legal claims. If personal data is processed for the purposes of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to any profiling insofar as it is associated with such direct advertising.