Consent Form for Personal Information Collection

[Attention] If you tick the Consent Form for Personal Information Collection (hereinafter referred to as the “Consent Form”), you are deemed to consent to all conditions and terms of this Consent Form. If you do not agree to accept any conditions and terms hereof, please do not click.

At present, this Consent Form is not available to minors under the age of 18. If we find that we have collected any information of minors without prior consent of their verifiable parents or legal guardian, we will delete such information, cancel their membership, and terminate providing all services or rights.

Sigma-Aldrich (Shanghai) Trading Co., Ltd. ("Merck", "we", or "us") values your privacy and security, and will protect your personal information in accordance with relevant laws and regulations, this Consent Form and/or related agreements. For the purposes of this Consent Form, the personal information processor is Sigma-Aldrich (Shanghai) Trading Co., Ltd., located on the 17th floor, No. 3, Lane 227, Dongyu Road, Pudong New District, Shanghai, China.

Please read this Consent Form carefully before using the products or services we provide.

I. Sigma-Aldrich E-commerce Website (E-commerce Website)

You will become a registered user of the E-commerce Website and be entitled to exclusive services and rights for registered users by ticking this Consent Form and/or related agreement and clicking the corresponding button.

II. Collection and Use of Personal Information

1. In order to enjoy the abovementioned services and benefits, we will collect your personal information as follows:

• Name
• Email
• Mobile no.
• Company name, address, and postal code
• Country
• All the fields you fill in and submit in the registration: contact details, address details (registration address, delivery address, recipient, bill information, and invoicing address), and compliance information
• Your browsing history and click behavior on the E-commerce Website
• Your order history and behavior on the E-commerce Website

2. We will collect and use your personal information only for the following purposes:

• to complete your order(s)
• to provide complete logistics and freight services
• to provide you with information regarding relevant product and events
• to verify the registration details of your participation in our off-line activities
• to manage the customer relationship, especially our response(s) to your request(s)

When we intend to use your personal information for other purposes left unspecified in the preceding paragraphs, or use such information collected based on the specified purposes for other purposes, we will seek your prior consent.

3. In addition, according to the law, we do not need your consent to collect and use your personal information under the following circumstances:

• where it is necessary for the performance of statutory duties or statutory obligations;
• where it is necessary for the response to a public health emergency or for the protection of the life, health and property safety of a natural person in an emergency;
• where such acts as news reporting and supervision by public opinions are carried out for the public interest, and the handling of personal information is within a reasonable scope;
• where it is necessary to handle the personal information disclosed by the individual concerned or other personal information that has been legally disclosed within a reasonable scope in accordance with the provisions of this Law;
• where it is necessary for the signing and performance of the contract required by you; and
• other circumstances stipulated by laws and regulations.

III. Provision and Sharing of your Personal Information

1. In order to better provide you with services and rights, with your consent, we will provide and share your personal information with third parties (including suppliers entrusted by us):

• To provide you with relevant products or services, we may share your personal information with Merck Chemicals (Shanghai) Co., Ltd. within the scope of the type, processing purpose and processing method disclosed in this Consent Form. Merck Chemicals (Shanghai) Co., Ltd. will process your personal information according to this Consent Form, and will seek your consent again if the processing purpose is changed.
• We may engage one or more service providers to provide services, including managing the E-commerce Website and analyzing part of your information. While providing these services, these service providers will access and process your personal information. We will enter into agreements with these service providers to require them to comply with applicable laws and regulations related to your personal information.
• We may share your information with the affiliated enterprises of Merck Group for legitimate business purposes, including Merck KGaA at Frankfurter Strasse 250, 64293 Darmstadt (tel: +49 6151 72-0).
• We may disclose your personal information, if required by law, administration, judiciary, or a similar authority, or when we consider it necessary to disclose the same in accordance with the law.

2. Except for the above personal information processing purposes, we will not transfer, sell or exchange your personal information to third parties other than Merck and its affiliates. However, in the event of a merger, acquisition, asset transfer or similar transaction involving the transfer of personal information, we will inform you of the name and contact information of the new recipient of personal information, and require the new company or organization holding your personal information to continue to be bound by this policy; Otherwise, we will ask the company or organization to re-solicit authorization or consent from you.

3. We and our service providers will take appropriate safeguards, and technical and organizational measures to prevent any alteration of, loss of, or unauthorized access to, your information. At the same time, we have entered into data processing agreements with third parties who share and process your personal information to ensure that third parties take necessary and the same level of data protection measures as we do to ensure the security of your personal information.

If you wish to learn more about how we collect, process, share, and store your personal information, you can click here to view our complete privacy policy (https://www.sigmaaldrich.cn/CN/zh/privacy-policy). In case of any inconsistency between the privacy policy and this Consent Form, this Consent Form shall prevail. You can also contact us to check the specific name and contact information of the recipient who independently processes your personal information according to the contact information published in Article 8 "Contact Us" below.

IV. Storage and Protection of Personal Information

1. Storage of information

• In general, personal information collected and generated by us within the People’s Republic of China will be stored in the People’s Republic of China. However, since we provide products and services by using the resources and servers all over the world, you hereby authorize and consent that your personal information may be transferred to or accessed by Germany (“Jurisdiction”), including Merck KGaA (+49 6151 72-0) located in Frankfurter Strasse 250, 64293 Darmstadt and its affiliates,  where you enjoy products or services. Such Jurisdiction may have different data protection law. Under such circumstance, we will ensure that personal information shall be protected at the same level as within the People’s Republic of China. And we have taken appropriate security, technical and organizational measures to protect the security of your personal information in accordance with relevant laws.
• We will store information for a necessary period as required by law, or for a necessary period at your request for providing the services, or for a period as per your consent. When we no longer need your personal information, we will delete it from our systems and records and/or take steps to anonymize it so that you cannot be identified (unless we need to retain your information to comply with applicable legal or regulatory obligations).

2. Protection of information

• The security of your personal information is very important to us. We will be in strict compliance with the relevant laws and regulations, and take reasonable and feasible measures as widely accepted in the industry to protect your personal information.
• We have taken reasonable and feasible security measures to protect your personal information from unauthorized access, use, modification, damage, or loss. We, inter alia, provide encryption for data transmission; establish an access control mechanism to ensure that only authorized personnel can access personal information; and provide regular training courses as to security and privacy protection to enhance employees’ awareness of the importance of personal information protection.
• In consideration that the internet environment is not 100% secure, we will safeguard the security of your personal information on a best-efforts basis. In case of personal information security incidents, we will, in accordance with the requirements of laws and regulations, timely inform you of the basic conditions and possible impact of the security incidents, our countermeasures taken or to be taken, the suggestions for you to prevent and reduce the risks on your own, and the remedial measures for you. We will timely update you of the relevant incident by email and other means. Where it is impossible to inform you on a case-by-case basis, we will release an announcement in a reasonable and effective way. At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with the requirements of regulatory authorities.

V. Aggregation and Consolidation of Personal Information

Where you are also a user of our other business platforms, in order to provide you with more optimized contents, we will aggregate and consolidate your different information obtained from different business platforms, analyze your behavior on different platforms for providing you with more comprehensive and professional services.

1. Involved business platform and personal information, including:

2. Usage and purpose of personal information:

• Based on the analysis of your behavior, judgements will be arrived at as to the relevant contents that you (may be) are interested in or (may) need.
• You will accordingly be provided with more accurate contents, such as WeChat posts, marketing SMS, and marketing emails related to products, promotions, and exhibitions.

VI. Inquiry, Rectification, Deletion, Cancellation, Suggestion, and Complaint

1. If you wish to inquire about and rectify your personal information or account number, you may send an email to webadmincn@merckgroup.com.
2. If you wish to cancel your account, you may send an email to webadmincn@merckgroup.com. We will cancel your account within 15 working days upon receiving and verifying your application.
3. If you have any suggestions or complaints about our services, you may send an email to ordercn@merckgroup.com, or call the purchasing/customer service hotline at 800-819-3336. We will reply to you as soon as possible within 15 working days upon receiving your suggestions or advice and verifying your user identity.

VII. Policy Update

1. This Consent Form may be updated according to the latest functions of the E-commerce Website and relevant requirements of laws and regulations. We will not reduce your due rights as contained in this Consent Form without your explicit consent. We will post any changes to this Consent Form on this webpage.
2. Where any changes significantly reduce or alter your rights under this Consent Form, we will notify you with a more prominent notice or by other means before the Consent Form takes effect.
3. Significant changes as referred to in this Consent Form include but are not limited to:

• any drastic change to our service model, including the purpose of processing personal information, the type of processed personal information, and the use of personal information;
• significant changes to our ownership structure and organizational structure, including changes arising from business restructuring, bankruptcy, merger and acquisitions;
• changes to major targets who share, transfer, or publicly disclose personal information;
• significant changes to the rights and means of your participation in the processing of personal information;
• changes to our responsible department for handling personal information security, contact detail, and complaint channel; and
• any high risk as indicated in the data privacy impact assessment report.

VIII. Contact Us

If you have any requests or concerns about our processing of your personal information, or if you have any questions, complaints or comments about this Consent Form, you may contact us at any time via chinaprivacy@merckgroup.com.

IX. Governing Law and Interpretation

The effectiveness, performance, interpretation, and dispute settlement of this Consent Form shall be governed by the laws of the People’s Republic of China.

X. Miscellaneous

This Consent Form is the latest version and is effective as of January 2023. We reserve the right to amend the Consent Form at any time with effect for the future, in particular to adapt it to a further development of the website or the implementation of new technologies, and any modifications will only take effect upon the posting of the updated Consent Form.

January 2023