This Web site (“Web site”) is operated by Merrill Communications LLC (“Merrill” or “Merrill Corporation”). The terms “Merrill,” “we,” “us,” “our” and “ours” when used in this privacy notice (“Privacy Notice”) includes subsidiaries, divisions, branches, affiliates or companies under the control of Merrill. The terms “you,” “your” and “yours” when used in this Privacy Notice means any user of this Web site.
IMPORTANT: BY SUBMITTING PERSONAL DATA TO US AND/OR BY USING OUR WEB SITE, YOU GIVE YOUR CONSENT THAT ALL PERSONAL DATA THAT YOU SUBMIT MAY BE PROCESSED BY US IN THE MANNER AND FOR THE PURPOSES DESCRIBED BELOW.
Scope of Privacy Notice
You may visit our public Web site without providing any information about yourself. This Privacy Notice describes our current policies and practices with regard to personal data collected by us from you directly and/or through the Web site or Online Services (as defined below). The term “personal data” refers to personally identifiable information about you. This Privacy Notice applies only to operation of Web sites that directly link to this notice when you click on the Privacy Notice link.
We provide online services and service facilitation tools such as: Merrill DatasiteOne, Merrill DataSite®, Merrill Bridge™ and Merrill Connect® (“Online Services”)*. These Online Services are part of a business relationship. If you have been invited to an Online Service, your profile has been provided to us by a Merrill client. By accepting the invitation to the Online Service, you are agreeing to the use of your contact details in accordance with this Privacy Notice. If you request access to an Online Service, you are agreeing to the use of your contact details in accordance with this Privacy Notice. We may contact you regarding updates, modifications and additional service offerings. Your access to these Online Services will be retained and used for support, transition and maintenance, as well as to comply with reporting, audit and data retention requirements.
Notification of changes to this Notice
Merrill is continually improving our methods of communication and adding new functionality and features to this Web site and to our existing services. Because of these ongoing changes, changes in the law and the changing nature of technology, our data practices may change. We encourage you to check this page frequently and anytime you submit personal information via the Web site.
Collection, Use and Disclosure of your personal data
Merrill as a Data Processor
Some of Merrill’s services require Merrill to process data that you have uploaded, stored and shared via Merrill’s clients. Merrill does not review or analyze the content of the data. However, it may contain personal data which Merrill processes pursuant to its clients’ instructions.
Merrill may also process personal data relating to your use of Online Services as an invited user. Such data will be used to operate Online Services, and provide analytics and reporting information to Merrill’s clients and may be disclosed as required by law.
Merrill does not control such data; rather it handles this type of data as a data processor only. Merrill processes such data as governed by written agreements in place with its clients and to the extent necessary to comply with applicable laws. As a result, Merrill’s clients are responsible for individual notification of purpose and for obtaining appropriate consent when they collect personal data. Personal data that is transferred to Merrill by its clients to be processed shall be deemed to have been collected with appropriate notification. Merrill assumes no responsibility for obtaining or validating that appropriate consent has been obtained with respect to data provided by its client(s).
Merrill as a Data Controller
When you use our products and services or request information, we request personal data about you such as your name, employer’s address, e-mail address, and telephone number. We may also ask for demographic information to enable us to provide you with a personalized service. The information you provide is either manually or electronically stored in our databases. We may share your personal data under these limited circumstances:
- In order to provide you with the requested information on products or services, your personal data may be shared with other companies within our group of companies and third parties who act for us for further processing in accordance with the purposes for which the data was originally collected or for purposes to which you have consented. For example, sometimes a third party may have access to your personal data in order to support our information technology, to supplement, update, or correct the data or provide additional publicly available data, or to handle mailings on our behalf. Merrill requires that all third-party processors process your personal data with the same level of protection and in a manner consistent with the uses agreed upon in this Notice.
- We will keep your contact details on our database and we may use your personal data for marketing purposes and market research. If you do not wish to receive e-mails or post from us for these purposes, please let us know by following the “unsubscribe” procedure described herein.
- We may use your personal data to administer this Web site and help us improve our services.
- We may share your personal data with other companies within our group of companies who may contact you about their products or services that may interest you.
- We may disclose the information in our databases and server logs to comply with a legal requirement, for the administration of justice, for the purposes of national security only to the extent that is strictly necessary and proportionate, to interact with anti-fraud databases, to protect your vital interests, to protect the security or integrity of our databases or this Web site, to take precautions against legal liability, or in the event of our sale, merger, reorganization, dissolution or similar event.
- If you submit your resume or CV, we will use the information to process your inquiry and to monitor recruitment statistics. Personal information about unsuccessful candidates will be held for 12 months before being destroyed or deleted.
- In the event of a corporate sale, merger, reorganization, dissolution or similar event, your personal data may be part of an asset transfer or sale.
Merrill retains personal data only as long as necessary to fulfill the stated purposes or as legally required and thereafter securely destroys such information.
When personal data is no longer necessary or relevant for the stated purpose or to fulfill a legal or business requirement, it shall be securely destroyed. Merrill will either physically or electronically erase the personal data.
We will take every sensible precaution to protect the information we collect from you including physical, technical and organizational procedures to safeguard and secure the information from loss, misuse, unauthorized access or disclosure. Access to this information is protected both online and off-line.
Anonymous data collected through this Web site
In addition to the information we collect as described above, we use technology to collect anonymous information about the use of our Web site. For example, our Web server automatically logs which pages of our Web site our visitors view, their IP addresses and which Web browsers our visitors use. This technology does not identify you personally; it enables us to compile statistics about our visitors and their use of our Web site. Our Web site contains hyperlinks to other pages on our Web site. We may use technology to track how often these links are used and which pages on our Web site our visitors choose to view.
In order to collect the anonymous data described herein, we may use temporary “cookies” that remain in the cookies file of your browser until the browser is closed. Cookies by themselves cannot be used to discover the identity of the user. A cookie is a small piece of information which is sent to your browser and stored on your computer’s hard drive. Cookies do not damage your computer. You can set your browser to notify you when you receive a cookie. This enables you to decide if you want to accept it or not.
Data quality, access and corrections
If Merrill collects data outside the delivery of Online Services to its client in accordance with a written agreement in place with the client, Merrill will make reasonable efforts to keep personal data accurate, complete and up-to-date as is necessary to fulfill the purposes for which the information is to be used. Unless Merrill is permitted or required by law to prohibit access, upon receipt of your written request and by providing enough information to permit us to identify your contact data, we will disclose to you the personal data we acquired and hold about you, for which we may make a small charge. Upon request, we will correct, amend or delete any personal data that is inaccurate and notify any third-party recipients of the necessary changes. You may update any information you have given to us by contacting us at the address given below. Requests to delete personal data are subject to any applicable legal and ethical reporting or document retention obligations imposed on us.
In delivering the Online Services, Merrill relies on its clients to supply Merrill with accurate, complete and up-to-date information. Merrill makes reasonable efforts to maintain the integrity of the data within its Online Services as necessary to fulfill the stated purpose for which the information is used. If a request for personal data is submitted to Merrill by an individual, Merrill, in its role as a Processor (as described above), will direct the individual to the client for access.
Links to other Web sites
This Web site may contain hyperlinks to Web sites that are not operated by us. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of these third-party Web sites or any association with their operators. We do not control these Web sites and are not responsible for their operation, data or privacy practices. We urge you to review any privacy notice posted on any site you visit before using the site or providing any personal data about yourself.
Merrill has data servers located in the U.S., Germany, and UK. If you are visiting this Web site from a country other than the country in which our servers are located, the various communications may result in the transfer of information across international boundaries. If you are accessing an Online Service, the content data will be stored in accordance with the terms and conditions outlined in an agreement. However, your access information (e.g. user id and password), may be stored in the server located in the U.S. (see Merrill’s Continued Adherence to Privacy Shield Framework Principles below). Any personal data will be protected in accordance with this Privacy Notice as well as with adequate protections in place in compliance with applicable laws and standards. By visiting this Web site and communicating electronically with us, you consent to the processing and transfer of your data as set out in this Privacy Notice.
Continued Adherence to Privacy Shield Framework
Merrill maintains compliance with the EU-U.S. Privacy Shield Framework Principles and the Swiss-U.S. Privacy Shield Framework Principles regarding the collection, use and retention of personal information as well as the notice, choice, onward transfer, security, data integrity, access and enforcement requirements from European Union member countries and Switzerland. If there is any conflict between the terms in this Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. For a listing of U.S. organizations that have self-certified to the Department of Commerce and declared their commitment to adhere to the Principles, visit https://www.privacyshield.gov/list.
By adopting the Privacy Shield Framework Principles, Merrill understands that it is subject to the investigatory and enforcement powers of the Federal Trade Commission and may be liable, under U.S. law, in cases of onward transfer of data to third parties outside the permitted uses agreed upon in this Notice.
We will regularly review how we are meeting privacy objectives. If you have questions, requests or complaints about our privacy practices, you may contact us by e-mailing firstname.lastname@example.org. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, we agree to participate in the dispute resolution procedures established by Judicial Arbitration and Mediation Services (JAMS). If necessary, you may submit a complaint, free of charge to JAMS at https://www.jamsadr.com/about/submit-a-case. Under certain conditions, you may invoke binding arbitration.
Contact us; mail unsubscribe
If you no longer wish to receive electronic mail, please click the “unsubscribe” link located at the bottom of the e-mail, or, by writing to us at: Merrill Corporation, One Merrill Circle, St. Paul, MN 55108, Attn: Opt-Out List Master.