Privacy Notice for OfficeGO!

Information collected through our App

In Short: We collect information regarding your mobile device, push notifications, and home site attribute when you use our App.

If you use our App, we also collect the following information:

We collect your email, ISID, home site attribute, and login. We do not collect any personal data stored on the device (e.g. photos, contact list, etc.) and do not collect your real-time location. [We may use your employee home site location to help deliver location specific features. But, we do not store any device or location data.]

We also gather performance and analytical information on an aggregate level of how app users utilize the app and features of the app.

Push Notifications. We may request to send you push notifications regarding your account or certain features of the app. If you wish to opt-out from receiving these types of communications, you may turn them off in your device's settings.

The information is primarily needed to maintain the security and operation of our app, for troubleshooting and for our internal analytics and reporting purposes.

In Short: We process your information for purposes based on legitimate business interests. We use personal information collected via our app for a variety of business purposes described below.

We use the information we collect or receive:

To support Merck’s overall purpose of safely returning employees to work, by providing an easy-to-use reservation service for employees to search, review details, and secure for themselves available work spaces in company buildings to prevent overcrowding and follow social distancing guidelines.

To facilitate account creation and logon process. In order to access resources in the app, a Merck account login is required. We use your login information to allow access to proprietary information and app content.

To ensure health and safety of our workers, we compare reservation and check-in data with badge data at an aggregate level to avoid overcrowding. We collect and record your self-assessment data. We may use your information to notify you of an adverse event. Only select internal users can access this information on a need-to-know basis.

To request feedback. We may use your information to request feedback and to contact you about your use of the app.

To manage user accounts. We may use your information for the purposes of managing our account and keeping it in working order.

To protect our services. We may use your information as part of our efforts to keep our app safe and secure.

To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements or in connection with our contract.

To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

To deliver and facilitate delivery of services to the user. We may use your information to provide you with the requested services through the app.

To send you marketing and promotional communications. This may vary based on your site. We may send notifications and communications through the app. You can choose to opt out through the app settings and within the app.

To allow for space reservation at the office. We may use your login information to prevent overcapacity at the site and maintain social distancing.

We will only share information for internal business purposes as described above and approved vendors such as Modo Labs on an as needed basis to manage the app. We do not share or sell your personal information for any other purpose.

Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

In Short: We do not use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar technologies to store application settings and preferences.

In Short: We may transfer, store, and process your information in countries other than your own.

If you are accessing our App from outside the US, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by business partners only to manage the app internally.

In Short: We keep your information for 365 days to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for 365 days for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).

The data will be stored in Splunk Cloud AWS, and the records cannot be retained for more than one year.

Once the record reaches one year the vendor discards it and no further archival is performed.

To view the policy in scope for Information Security Logging & Monitoring, as well as the standard and operational procedures for aspects like data onboarding in the platform, please contact Global Support.

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our App is at your own risk. You should only access the app within a secure environment.

In Short: We do not knowingly collect data from or market to children under 18 years of age. The app is for the exclusive use of Merck employees or specified partners only.

We do not knowingly solicit data from or market to children under 18 years of age. By using the App, you represent that you are at least 18 and are a Merck employee or approved business partner. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

In Short: You may review or terminate your app at any time.

If you are resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the App, you have the right to request removal of unwanted data that you publicly post on the App. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the App, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

If you have questions or comments about this notice, you may contact Global Support.