Privacy Policy
CONTENTS
A. Data Protection
B. Responsibility for the processing of your personal data
C. General information and types of data processing
a. Scope and purpose of the data processing
i. Usage data in the registration portal
ii. Registration data
iii. Photos and videos
iv. Cookies
v. Newsletter
b. Passing on personal data to (other) third parties
D. Duration of the retention of your data
E. Rights in relation to data processing
F. Contact data
A. Data Protection
Merz attaches great importance to the protection of personal data. In the following Privacy Policy, we inform you about who is responsible for processing your data. You will moreover be provided with general information on the processing of your data by Merz, in particular information on the transmission of your data, the duration for which your data are stored, and your rights in connection with the processing of your data.
Merz Aesthetics GmbH (“Merz”) processes your data in accordance with the data protection provisions set forth in the (EU) 2016/679 (General Data Protection Regulation - “GDPR”) and the German Federal Data Protection Act (Bundesdatenschutzgesetz - “BDSG”).
B. Responsibility for the processing of your personal data
The data controller that is responsible for the processing of your personal data within the meaning of Art. 4 par. 7 GDPR is Merz Aesthetics GmbH, Eckenheimer Landstraße 100, 60318 Frankfurt am Main.
C. General information and types of the data processings
a. Scope and purpose of data processing
Data processing in the context of the Innovation Forum 2024 includes all sub-areas and categories of personal data listed below.
i. Usage data in the registration portal
When using the registration portal, various data about the accessing system is stored. This includes the type of browser used, the browser version, the operating system used, the website from which the Merz website is accessed, the sub-pages of the Merz website accessed, the date and time of access, the Internet protocol address (IP address), the internet service provider and any data comparable to this data. Merz uses this data to make the website accessible, to detect and rectify any technical problems that may occur and to prevent and, if necessary, to prosecute any misuse of Merz's services. In addition, Merz uses this data in an anonymous form, i.e. without the possibility of identifying the user, for statistical purposes and to improve the websites. The legal basis for the processing of personal usage data is Art. 6 par. 1 s. 1 lit. f GDPR.
ii. Registration data for participation in the Innovation Forum 2024
In order to participate in the Innovation Forum 2024, you will be asked to set up a profile and provide Merz with certain information (name data, contact data, business information, professional experience). The legal basis for processing the data described above is Art. 6 par. 1 s. 1 lit. b GDPR.
iii. Photos and videos
In connection with the Innovation Forum 2024, participants may be identifiable in photos and videos. Photos and videos are taken on the basis of Merz's legitimate interest in partially documenting the Innovation Forum 2024 (Art. 6 par. 1 s. 1 lit. f GDPR). The use of the photos and videos for publication in internal and external forums (e.g. Merz intranet, sharing platform for participants) as well as for posts in Social Media channels of Merz (Facebook/Instagram, LinkedIn, YouTube) is based on your voluntary consent during the registration process or afterwards (Art. 6 para. 1 p. 1 lit. a GDPR).
With regard to the processing of personal data on Merz's Social Media channels, reference is made to Merz's information on Social Media activities, which is available at www.merz-aesthetics.info or from Merz's Data Protection Officer.
iv. Cookies
Cookies are used within the scope of using the Merz registration portal. Cookies are small text files that are stored on the user's data carrier and exchange certain settings and data with the Merz system via the browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. For reasons of user-friendliness, cookies enable Merz to use a so-called single sign-on concept for authentication and to control access to the various password-protected areas of Merz's websites. Users can then move through the entire password-protected area of the Web site without having to log in again for each area. In addition, cookies are used to collect information about how users use Merz's websites, how they navigate through the site, and which areas of the site and products they are interested in. In this way, Merz can improve its websites and the online experience of users. The information stored in the cookies is not used to identify the user and is not merged with other personal data stored about the user.
The legal basis for the processing of personal data using essential cookies (technically required in order to use the website) is Art. 6 par. 1 s. 1 lit. f GDPR. For other cookies, your voluntary consent will be requested in the registration portal (Art. 6 par. 1 s. 1 lit. a GDPR). The following overview shows all used types of cookies on the website.
By changing the settings of the Internet browser, users can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for Merz websites, it may no longer be possible to use all functions of the websites to their full extent.
Analytics cookies
These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. With your help, we can see which of our pages are the most popular or least popular, how users move around our website, if they receive error messages, etc. This information is primarily used to improve our website. For clarification, web analytics are included in this cookie category. These cookies do not store information that directly identifies an individual, but are based on a unique identification of your browser and Internet device (including other technical data such as your IP address, operating system, Internet provider, website from which you are visiting us, etc.). Unless you accept these cookies, we cannot analyze when users have visited our website.
Cookies for marketing purposes
We do not set any marketing cookies.
v. Newsletter
With the following information, we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only with the voluntary of the recipients (Art. 6 par. 1 s. 1 lit. a GDPR). If the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users.
Double-Opt-In and logging: The registration for our newsletter takes place in a so-called double-opt-in procedure. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored with the service provider are also logged.
Service provider: The newsletter is sent by rapidmail GmbH, Wentzingerstraße 21, Freiburg, Germany (hereinafter referred to as "shipping service provider"). You can view the privacy policy of the shipping service provider here: https://www.rapidmail.de/datenschutz.
Furthermore, according to its own information, the dispatch service provider may use this data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletters or for statistical purposes to determine which countries the recipients come from. However, the service provider does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.
We use pixel tracking technologies to analyze user behavior on our website and enhance our offerings. By clicking 'I agree,' you consent to the use of these technologies. A tracking pixel is a miniature graphic that is embedded in e-mails in HTML format. Merz can use the embedded tracking pixel to recognize whether and when the newsletter was opened by the recipient and which links contained in the newsletter were accessed by the recipient. Data collected via tracking pixels contained in the newsletters are stored and processed anonymously for statistical purposes, aiming to optimize newsletter dispatch and better tailor the content of future newsletters to the interests of the recipients.
The use of the service provider, performance of the statistical surveys and analyses as well as logging of the registration process, are carried out on the basis of your voluntary consent (Art. 6 par. 1 s. 1 lit. a GDPR).
You can revoke your consent at any time. You will find a link to cancel the newsletter at the end of each newsletter. If you have cancelled the newsletter receipt, your personal data processed for its sending will be immediately deleted.
b. Passing on personal data to (other) third parties/ Third country data transfers
Merz relies on the support of specialized technical service providers for the technical processing of personal data. These service providers are carefully selected and are legally and contractually committed to ensuring a high level of data protection. The legal basis for our partnerships with these service providers is Art. 28 GDPR. In connection with the provision of the registration portal, MATT CIRCUS GmbH, Köln, Germany acts as processor on behalf of Merz. The registration portal is hosted on servers of wix.com.
For the administration of the Innovation Forum and to enable your participation, it may also be necessary for us to exchange your personal data with other Merz subsidiaries (also outside the EU/EEA). This is particularly the case if your direct Merz contact is not employed by Merz Aesthetics GmbH.
Merz will only transmit personal data if this is necessary for the fulfillment of a contract or a legal obligation, if prior express voluntary consent has been given, or if another legal reason exists. If and to the extent that personal data is transferred by Merz to third countries outside the EU/EEA, this will always be done in accordance with the requirements of Art. 44 et seq. GDPR on the basis of an adequacy decision of the EU Commission or subject to appropriate safeguards.
D. Duration of the retention of your data
The personal data will be completely deleted no later than 2 months after the end of the Innovation Forum 2024 or as soon as they no longer need to be processed to fulfill the aforementioned purposes. Contract relevant data are generally stored for 10 years.
E. Rights in relation to data processing
The data subject has the right of access to the personal data processed by Merz and, provided that the relevant legal requirements are met, the right to rectification, erasure or restriction of processing, as well as the right to receive and/or transmit the personal data provided in a structured, common and machine-readable format or to have it transmitted to another controller (cf. Art. 15 - 20 GDPR).
In the event that Merz processes personal data on the basis of a legitimate interest (Art. 6 par. 1 s. 1 lit. f GDPR), the data subject also has the right to object to the processing, provided that the requirements of Art. 21 GDPR are met.
In addition, the data subject has the right to revoke his or her consent at any time, if necessary. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation and is not associated with any disadvantages for the data subject. Furthermore, the data subject has the right to lodge a complaint with a data protection supervisory authority responsible for the data controller.
F. Contact data
If you have any questions about how Merz processes personal data or about exercising your rights, you can contact Merz at any time. Please send all inquiries to: datenschutz-aesthetics@merz.de. The contact details of Merz's Data Protection Officer are:
Postal address:
Merz Aesthetics GmbH
z.Hd. Data Protection Officer
Eckenheimer Landstraße 100
60318 Frankfurt (Main), Germany
E-Mail:
