PRIME VizApp
Privacy Notice
Purpose
Within this application, we process your personal information in order to provide you with an account so that you can use the PRIME VizApp (“App”).
Further, your personal information might be transferred to subcontractors inside and outside your home country for the purposes described above. All information will be kept confidential and will be handled in accordance with applicable data protection and data transfer regulations.
Please read the Privacy Notice below for more information on how we process personal information within the App.
Privacy Notice
When you provide your personal information to attend event of or do business with a company/entity of Merz Aesthetics, we know that you trust us to take care of your personal information. Trust is an important Merz Aesthetics value, and we aim to earn your trust not just by providing safe, effective pharmaceutical and medical devices, but also by responsibly managing your personal information. This Privacy Notice (“Notice”) explains who is responsible for processing and caring for your personal information at Merz Aesthetics as well as details relating to when, where and how we use, protect, store, delete and sometimes transfer your personal information. If you log into the App, the Merz Aesthetics company/entity processes the personal information may provide you with an account so you can access the App.
We process your personal information only to the extent necessary to set up an account for you and to provide you with relevant access to the App.
Who is Responsible for the Processing?
The Merz Aesthetics company/entity with whom you are engaging is generally responsible for the data processing in the context of the App.
Merz North America Inc., or the local Merz Aesthetics company/entity you are doing business with or attending the event, as well as Merz Aesthetics GmbH, may process your personal information together as “joint controllers” within the meaning of Art. 26 of the General Data Protection Regulation (“GDPR”) or other such applicable regulation.
What Categories of Personal Information Do We Use and Where Do They Come From?
To provide you with access to the App, we process your personal information such as your name, email address, contact information and authentication information.
For What Purposes and on What Legal Basis is Personal Information Processed?
We process your personal information in adherence with the legal provisions applicable to the respective Merz Aesthetics company/entity. For Merz North America, Inc. this includes current state legislation such as the California Consumer Privacy Act (“CCPA”), California Privacy Rights Act (“CPRA”), Colorado Privacy Act (“CPA”), and Virginia Consumer Data Protection Act (“VCDPA”). For Merz Aesthetics GmbH, this includes, among others, the EU GDPR and the German Federal Data Protection Act (“BDSG”). For Merz Asia Pacific Pte Ltd, this includes the Singapore Personal Data Protection Act 2012 (“PDPA”) and other subsidiary legislation thereunder. For Merz Aesthetics companies/entities incorporated in other locations, this includes the legal provisions applicable at the jurisdiction where the respective Merz Aesthetics company/entity is located.
We have taken reasonable technical and organizational security measures to prevent unlawful processing of your personal information and to prevent unauthorised access, collection, use, disclosure, copying, modification or disposal, or similar risks.
Who Are the Recipients of Personal Information?
Within the Merz Aesthetics group of companies, only those persons who need your personal information in order to fulfil the purposes described will receive your personal information. The processing is carried out by employees who have been entrusted with this task and are obliged to maintain confidentiality so that your interests are adequately safeguarded during data processing.
In order to fulfil our obligations, we only work with service providers who are equally bound to confidentiality and who will provide your personal information with a standard of protection comparable to the protection afforded under applicable data protection laws and regulations; and where we have data processing agreements in place for such service providers to consider local, regional, or global regulations.
How Long is Your Data Stored?
We will delete your personal information as soon as it is no longer necessary for the purposes mentioned above and/or for legal or business purposes.
Otherwise, we will retain your personal information for as long as we are legally obliged to do so. Such proof and retention obligations arise, among other things, according to local tax law and, if applicable, from other local legal requirements.
Sharing Your Personal Information
Merz Aesthetics relies on the support of specialized technical service providers for the technical processing of personal information. In certain cases, Merz Aesthetics works with companies and other entities that have special expertise in specific areas or subject knowledge (e.g., tax auditors, lawyers, app developer/provider and consulting firms etc). These service providers are carefully selected and are legally and contractually committed to ensuring a high level of data protection. If we share your personal information with third-party service providers, we do not authorize them to use or disclose it for any purpose other than the intended purpose.
Data Transfer
Merz Aesthetics may transfer personal information from countries with similar or greater data protection measures in place as your country of residence. Merz Aesthetics may also share your information within our family of companies and/or third-party organization with which we partner for a variety of purposes, such as, to provide you with the latest information about our products and services and offer you our latest promotions. This may involve the transfer of personal information to other locations outside your home country to other Merz Aesthetics companies/entities or to third-party organizations with which we partner in different locations around the world. By using this website, you understand your information may be transferred to the United States or to other countries where Merz Aesthetics conducts business or where the third-party organizations with which we partner located. Merz Aesthetics makes every effort to adhere to international data transfer laws and place adequate measures to protect such personal information. Where we transfer your personal data, we ensure that your data is transferred in accordance with the legal provisions applicable at the location where the respective Merz Aesthetics company/entity that you engage is located, to the extent permitted by applicable law.
What Data Subject Rights Can You Assert?
If you wish to assert the following data subject rights, the local Merz Aesthetics company/entity at your location will serve as the central point of contact for data subjects. This will not limit your right to assert your data subject rights against the other Merz Aesthetics companies/entities involved in the process. It also does not affect your rights in accordance with the applicable local laws. You are entitled to the following data subject rights:
- You may opt out of sharing of personal information, including data that is shared with a third party.
- You may opt out of the processing of personal information for the purposes of targeted advertising or cross-context behavioural advertising.
- You may have a right to limit the use of sensitive personal information.
- You may request information about which personal information relating to you is being processed.
- You may request the rectification or correction of inaccurate personal information concerning you and, where applicable, the completion of incomplete personal information.
- You have a right to request the erasure or deletion under certain conditions.
- You have a right to restrict the processing under certain conditions.
- You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal information concerning you carried out on the basis of basic processing rights provided by applicable data protection regulations. Merz Aesthetics will then no longer process your personal information, unless Merz Aesthetics can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
You may withdraw your consent to the processing of personal information at any time vis-à-vis the controller. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Your withdrawal of consent may result in certain functions of the App being limited.
To Whom Do You Address Your Questions or Complaints About Data Protection?
You can reach the respective person in charge of data protection related questions of the local Merz Aesthetics company/entity at your location with whom you are engaged at the following email addresses:
Contact Details of Privacy Officer(s) in Asia Pacific
| Location | Email Address |
|---|---|
| Australia and New Zealand | |
| Mainland China, Hong Kong and Taiwan Region | |
| Indonesia | |
| South Korea | |
| Singapore | |
| Thailand | |
| All other APAC locations not listed herein |
References
For residents in Australia, please note that there are some exceptions to your right to gain access to your information as provided under the Australian Privacy Principles Guidelines, including but not limited to: providing access would have an unreasonable impact upon the privacy of other individuals; or the request for access is frivolous or vexatious; or the information relates to existing or anticipated legal proceedings between you and us, and the information would not be accessible by the process of discovery in those proceedings; or providing access would be unlawful. If you do not receive a response to your request in a reasonable time frame or are otherwise unhappy with our handling of your request, you may lodge a complaint with The Office of the Australian Information Commissioner. Details of how to make a complaint can be found at www.oaic.gov.au.
For residents in New Zealand, please note that under the Privacy Act 1993, if you are not satisfied with our response to any privacy-related concern you may have, you can contact the Privacy Commissioner. Details of how to make a complaint can be found at www.privacy.org.nz.