At Merck & Co., Inc. (Kenilworth, NJ, USA), which is known as MSD outside of the U.S. and Canada, offers online resources that provide health, medical, and product-related information and services, as well as corporate and financial news, employment and other information related to our business. In addition, some of our online resources enable qualified professionals to place orders for our pharmaceutical, vaccine and animal health products, to apply for grants, or to contribute to research studies.
We have received TRUSTe’s Privacy Seal signifying that this privacy statement and our practices have been reviewed for compliance with the TRUSTe certification standards. The specific web sites covered by TRUSTe’s certification link to this policy, and in some cases, an approved version of this policy that adheres to the same values and standards described in this policy. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact TRUSTe online or via postal mail or fax. TRUSTe’s Dispute Resolution process is only available in English.
Our privacy program and practices comply with the APEC Cross-Border Privacy Rules system and the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks for transfers of personal information from the European Economic Area and Switzerland to the United States. This policy is consistent with our Global Cross Border Privacy Rules Policy. Please read this policy carefully. Should you have any questions about this policy or our data collection, use and disclosure practices, please contact us.
The term "personal information" as used throughout this policy, applies to any data relating to an identified or identifiable individual, including data that identifies an individual or that could be used to identify, locate, track or contact an individual.
How do we collect personal information online?
We collect personal information online through web sites and other online resources. We also offer online resources in collaboration with other online service providers, from which we may receive personal information about users of such resources. These online collaborations are governed by agreements that require personal information to be protected appropriately. Individuals may access many parts of our web sites and online resources without disclosing any personal information. There are three methods that we use to collect personal information online:
We may use other companies to deliver e-mail communications on our behalf or to place our advertisements on other web sites. We do not control the tracking technologies used by these other companies. For more information about how you can control tracking by third parties, please see Our Cookie Privacy Commitment.
Why do we collect, use and disclose personal information?
Social Media: Online social media resources are interactive tools that typically enable you to collaborate and share information with others. Some examples of social media resources include social networks, discussion boards, bulletin boards, blogs, wikis, and referral functions to share web site content and tools with a friend or colleague. We may collect personal information from you to enable you to use online social media resources we may offer from time to time. We may also enable you to use these social media resources to post or share personal information with others. You should consider carefully what information about yourself you choose to share with others when you use social media resources. We provide additional notice and choices about how personal information is collected, used and disclosed on our web sites and other online resources that offer or utilize social media.
Some of our web sites use sign-in services such as Facebook Connect or an Open ID provider. These services will authenticate your identity and provide the option for you to share certain personal information with us such as your name and email address to pre-populate registration and other sign-up forms. Services like Facebook Connect give you the option to post information to your Facebook profile page about your activities on our sites that use this service so that you can share your activities with others in your network.
Mobile Computing: Some of our web sites and online resources are designed specifically for use on mobile computing devices. Some mobile versions of our web sites may require that you log in with your user account for that web site. Information about your use of the mobile version of the web site will be associated with your user account. Some of our web sites and online resources enable you to download an application (app), widget or other tool that you can use on your mobile or other computing device. Some of these apps may store information on your mobile or other device. These apps may transmit personal information to us, or others working for us, to enable you to access your user account or to enable us to track how these tools are used, such as how often they are used and which features are preferred. Some of these apps may enable you to e-mail reports and other information from the app. We may use personal or non-identifiable information transmitted to us to enhance these apps, to develop new tools, for quality improvement and as otherwise described in this Policy or in other notices we provide.
If you are using an older version of one of our apps, the app may have functionality for evaluation of how it is used by enabling data about your use of the app on your device, such as which features you used the most, to be transmitted to Flurry, an analytics service provider. If you do not want Flurry to track your use of the app on your device, you can opt-out.
Do we consolidate personal information?
Consistent with the purposes identified and standards set within this policy and other applicable privacy notices that have been provided, in some cases we consolidate and use personal information that individuals share with us through various services and channels, such as the telephone, surveys, web sites and other online resources and communications, in order to enhance the quality of services that we offer.
What choices do you have about how we collect, use and disclose personal information about you?
You have four categories of choices. These include:
Limitations and options regarding uses and disclosures for other purposes: Some of our online resources may request your permission to use and disclose personal information about you in order to add you to our contact lists, to enable you to list yourself in a directory or a social media resource, and to identify and offer additional services and promotions that we believe you might find interesting. You can limit the use of personal information about you by checking or un-checking options provided at the time that you enter that information or that we may offer to you in the future. Additionally, you may change your communications preferences (such as to opt-out of communications you requested previously) by contacting us at the address most relevant to you.
If you would like to opt-out of tracking for advertising purposes, you may do so by following the options provided by:
For more information on how to disable tracking for certain web browsers and mobile devices, visit http://allaboutdnt.com/.
Email communications: You may choose to receive optional email and other communications from us by signing up for or subscribing to these communications on our web sites and other online resources. If you do not wish to receive optional email communications, you may opt-out by visiting the web site or other online resources where you subscribed, where available, and update your email communication selections, or you may follow the unsubscribe or opt-out instructions in the email communications you receive from us. You also may opt-out by contacting us at the address that is most relevant to you. If you do not wish for us to confirm whether you have read certain email communications we have sent to you, you may opt out of email communications tracking by opting out of receiving those email communications altogether using one of the approaches described above. In some cases we will not be able to turn off email tracking and still send the communication to you.
If you choose to tell a friend about one of our web sites or online resources by using our email referral features, we will provide contextual information about how those features use personal information. In general, our email referral features do not store the names or email addresses of individuals to whom you send links to our web sites or online resources.
Who will have access to personal information about you?
Personal information about you will be accessible to Merck & Co., Inc. (Kenilworth, NJ, USA), including its subsidiaries, divisions and groups worldwide, and to individuals and organizations that use personal information solely for and at the direction of us. Uses and disclosures of personal information by external individuals and organizations acting on our behalf are governed by agreements that require personal information to be protected appropriately. Personal information about you only will be used and disclosed by us and individuals and organizations working on our behalf, in a manner consistent with this policy, other applicable privacy notices, and as explicitly permitted or required by applicable laws, rules and regulations.
Do we share personal information with third parties?
In general, we do not sell or share personal information about you except as described in this policy and other applicable privacy notices, however, circumstances may arise where we may, for business reasons, decide to reorganize or divest our business through sale, merger or acquisition. In these circumstances, personal information may be shared with actual or prospective purchasers. We will obtain written assurances that personal information will be protected appropriately in these circumstances. Consistent with our Global Cross Border Privacy Rules Policy,we reserve the right to disclose personal information about you, including your e-mail address, for reporting to government authorities, to parties in relevant legal proceedings as authorized by the presiding court or tribunal and otherwise to the extent required or explicitly authorized by applicable law. Except as provided in this policy or our Global Cross Border Privacy Rules Policy, personal information about you will not otherwise be shared without your permission.
How do we secure personal information?
We will take reasonable steps to protect personal information, according to its sensitivity, as it is collected and transmitted between your computer or device and our online resources and servers, as well as to protect personal information in our possession from unauthorized access, disclosure, alteration or destruction. It is your personal responsibility to secure your own copies of your passwords and related access codes for our online resources.
How do we protect the privacy of children?
In general, our web sites and online resources are not directed at children and most of the online services that we offer are designed for individuals who are 18 years of age or older. Where requests for information about a medication are permitted by law, individuals requesting information about a medication that is indicated for use in children must be 18 years of age or older.
We do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian that has knowledge that we have collected information from your child, please contact the Privacy Office to request removal.
From time to time, some of our web sites and other online resources may provide optional features for children. When we do offer those features, we will take appropriate steps to ensure that verifiable parental consent is obtained prior to any collection, use or disclosure of personal information from children.
How may I access and correct personal information about me?
To gain access to personal information about you collected online, and to keep it accurate, complete and current, or to request deletion, you may contact us at the address most relevant to you. In some cases, where we are required to retain information by law or regulation, or to continue to manage a service you have requested, or to ensure that we honor your preferences, or for other necessary business purposes, we may not be able to delete certain personal information about you. Where offered, you also may update personal information about you online by modifying information that you previously have entered into forms or data fields on our web sites. Where permitted by law or our Cross Border Privacy Rules Policy, your ability to access and correct personal information will be limited where access and correction would: inhibit our ability to comply with a legal or ethical obligation, inhibit our ability to investigate, make or defend legal claims, result in disclosure of personal information about a third party, result in breach of a contract or disclosure of trade secrets or other proprietary business information belonging to us or a third party.
How long do we retain personal information?
We generally retain personal information for as long as reasonably needed for the specific business purpose or purposes for which it was collected and the duration of your use of our web sites, apps and other relevant online tools. In some cases, we may be required to retain information for a longer period of time based on laws or regulations that apply to our business, such as applicable rules on statute of limitations or for other necessary business purposes. Where possible, we aim to anonymize the information or remove unnecessary identifiers from records that we may need to keep for periods beyond the original retention period.
What is our contact address for privacy questions?
Should you have questions about this policy or our information collection, use and disclosure practices, you may contact us via email to the Global Privacy Office or at the address most relevant to you. You may access this list of addresses online at http://www.msd.com/contact/contacts.html. When you contact us, please note the name of the web site or other online resource you used or to which you provided personal information, as well as the nature of any information that you provided. We will use reasonable efforts to respond promptly within 20 business days or less to requests, questions or concerns you may have regarding access to personal information about you collected online or our use of personal information about you.
We may contact you for follow up information and may share your inquiry with other individuals within our company or working for us that are responsible for functions related to the subject of your inquiry. Except where required by law or our Global Cross Border Privacy Rules Policy we cannot ensure a response to questions or comments regarding topics unrelated to this policy or our privacy practices.
How will you know whether we have updated this policy?
We may update this policy periodically. We reserve the right to modify, add or remove portions of this privacy statement at its discretion. If we decide to change this policy, we will post those changes at this site so you always will know what information we gather, how we might use that information, and whether we will disclose it to anyone. If the changes we make to the policy are material, we also may post a notice on the web page www.msd.com/privacy prior to the effective date of the change, or, in some cases, may provide notice of the changes by e-mail. This policy was last updated on 30 April 2018.