Last Updated: July 29, 2020
About the Firm and this Privacy Statement
Cleary Gottlieb Steen & Hamilton LLP (“Cleary Gottlieb,” the “Firm,” “we” or “us”) is committed to safeguarding privacy and personal data. With a few exceptions, such as when we provide data room or e-discovery services (in the context of which our role is limited to that of a data processor), Cleary Gottlieb is generally the controller of personal data provided to us.
This Privacy Statement is intended to inform clients, prospective clients and more generally all visitors to this website about how we collect, use, share, protect or otherwise process personal data. Other policies may apply to recruitment.
Cleary Gottlieb is an international law firm practicing in a number of jurisdictions around the world through affiliated legal entities and branch offices of those entities. More information about each of these entities and offices can be found here. While entities within the Firm may act as controllers (or joint controllers) regarding certain processing activities in connection with your personal data, your local office can act as your primary point of contact should you require assistance in connection with matters relating to your personal data. Alternatively, should you require additional information about the Firm’s processing of your personal data, or if you would like to exercise any of your rights (as further detailed below) you can contact us at email@example.com. We will then ensure that your request is directed to the appropriate departments internally.
When, How and What Personal Data We Collect
- In general, you are not required to provide any personal data in order to consult our website. However, you may elect to contact us by completing the form provided on the “Contact Us” page of this website, in which case we ask you to provide your name and email address, and to submit specific questions to us. You may also elect to contact us voluntarily by telephone or e-mail, in which case we will process the personal data in such communications (such as your email address and the content of the communication).
- When using the website for mere information purposes, we may also collect the personal data that your web browser transmits to our server, including your IP address, the date and time of your visit, and data relating to your operating system and web browser.
Provision of services.
- During the course of an engagement, or when consideration is being given to such an engagement, we may collect and process personal data about our clients, prospective clients, their affiliates or the relevant members of their personnel.
- Where you sign up for Firm-affiliated or Firm-sponsored events including seminars, trainings, or presentations, we may collect personal data from you (including your name and email address) as part of the sign-up process and in order to contact you with further information.
- At such events, we may take photographs, video, and/or voice recordings. You will be notified that photographs or recordings are being taken in advance.
Closed Circuit Television (“CCTV”)
- CCTV cameras may be in operation on the Firm’s premises, as indicated by signage, in common areas, entry and exit points, and server rooms.
All processing of personal data by us is necessary to fulfill the purposes for which they were collected (further explained below).
The processing of your personal data includes any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, blocking, erasure or destruction of data, and such processing will always be carried out in compliance with data protection rules.
Where you provide information about third parties you must have provided the data subjects with information about such disclosures and established a legal basis for sharing the personal data with us, to the extent required by applicable law.
Why Personal Data Is Used
We may use your personal data to:
- process your requests made online, to contact you and to provide you with the information that you have requested;
- ensure the security and successful navigation of our website and to compile statistical data on the use of our website;
- conduct pre-engagement assessments and formalities such as anti-money laundering checks, conflict checks, etc.;
- perform the tasks entrusted to us by our clients and fulfil our engagement by you;
- manage our client relationships;
- allow us to undertake internal administrative or operational processes;
- maintain a safe and secure working environment for our staff and visitors and protect the Firm’s property and premises;
- analyze the services you may be interested in (including through inquiries and statistical surveys);
- send invitations and information from Cleary Gottlieb about events, publications, and services provided by the firm;
- memorialize meetings, seminars, presentations, and training events and for future training purposes;
- publicize Firm events and activities, including on our website, as part of future event invitations, via social media, and within recruitment publications; and
- satisfy any legal, regulatory, accounting, accreditation, or reporting requirements.
We will process personal data if and to the extent applicable law provides a lawful basis for us to do so, and in particular where the processing is necessary:
- to perform the contract we have entered into with a data subject or in order to take steps at the data subjects’ request prior to entering into a contract;
- to comply with a legal obligation to which we are subject; or
- for our (or a third party’s) legitimate interests which are not overridden by the data subjects’ interests or fundamental rights and freedoms. Such legitimate interests include the provision of legal services by us, administrative or operational processes within Cleary Gottlieb, direct marketing, the safety and security of our staff, visitors, property, and premises, and promotion of the Firm and Firm events.
Additionally, we may process personal data for a specific purpose where we have obtained the data subject’s consent.
With Whom Personal Data May Be Shared
Please note that in order to process a query, deliver legal services, or to fulfill any of the purposes set out in the section above, personal data may have to be shared among different entities within the Firm around the world. Access to your personal data will therefore be available, in various offices of the Firm, to Firm employees (including our lawyers as well as our professional staff) for the purposes listed above but only on a strictly need-to-know basis. Additionally, we may need to share your personal data with third party service providers with which we work, including:
- accountants, management and tax consultants, intermediaries with public authorities;
- credit institutions;
- regulatory bodies and law enforcement agencies;
- information technology and telecommunications providers;
- local or specialist legal counsel; or
- legal counsel appointed by a counter-party in a legal matter.
We may also communicate your personal data for the purposes described above and according to your general instructions, to your other advisors, your counter-parties and their legal representatives and, generally, all those individuals to whom transmission is required for one of the purposes described above.
In addition, we may share your personal data with persons or entities outside of Cleary Gottlieb for the purposes of obtaining feedback or references in relation to client services provided to you. For example, we may share your corporate contact details with legal directories for the purpose of obtaining a reference in relation to client services provided to you. Where appropriate, we will confirm with you that you are willing to be contacted for this purpose.
Consequences of Failure to Provide Your Personal Data
Your provision of personal data to us (including personal data of third parties) is voluntary. However, any refusal on your part to provide any such data could prevent us, depending upon the circumstances, from providing certain services to you.
How Long Personal Data Is Retained
We will retain your personal data for as long as necessary to fulfill the purposes for which they were collected and processed in compliance with this Privacy Statement. To determine the retention period for personal data, we will take into consideration the purposes for which they were collected, as well as the nature and sensitivity of the information and the applicable legal requirements. We conduct periodic reviews of the data we retain and will safely delete data to the extent they are no longer required to be retained by us.
CCTV images will be retained long enough for any incident to come to light (e.g., for a theft to be noticed) and for such incident to be investigated, after which CCTV images will be securely erased.
During the retention of your personal data, we take technical and organizational security measures against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. Additional information about our security measures are available on request.
Whether Personal Data Is Transferred Abroad
The Firm operates on a worldwide integrated basis and we may need to transfer personal data to other offices in the Firm. This may include the transfer of personal data from a location within the European Economic Area (the “EEA”) to outside the EEA. For a complete list of the Firm’s offices, please see the Firm’s website in the “Locations” section.
Transfers to locations outside of the EEA are governed by contractual arrangements which incorporate the European Commission’s standard contractual clauses. You can request a copy of these clauses by contacting us at the following e-mail address: firstname.lastname@example.org.
What Rights You Have
- Access: you may contact us at any time to request access to your personal data, and we will confirm to you whether we are processing your personal data and for what purposes, as well as provide details of the categories of personal data concerned, the recipients of the personal data, the retention periods (where possible) and your rights.
- Rectification: if any of your personal data that we hold appears to be inaccurate or incomplete, you may ask us to correct or complete them at any time.
- Erasure: you may ask us to have your personal data erased if it is no longer necessary for us to keep them in connection with the purposes for which they were collected or if the processing/storing of such personal data is otherwise unlawful. However, we must keep track of certain information necessary in order to comply with legal obligations, and/or to handle any claims or litigation.
- Restriction: you may ask us to limit the way in which we process your personal data (i.e., require us to continue to store your personal data but not to process them without your consent), for example where you think the personal data we hold are inaccurate, for a period enabling us to verify the accuracy of personal data, or where you have objected to our processing.
- Objection: you may object to our processing of your personal data on grounds relating to your specific situation, where we are processing your personal data to pursue our legitimate interests.
- Portability: you may ask us to send you your personal data in an electronic, structured, commonly-used and machine-readable format and have your personal data transmitted directly from us to another data controller, where technically feasible without hindrance where the processing is carried out by automated means and is based on your consent or is necessary for the performance of a contract to which you are party.
Withdrawal of your consent: you may withdraw your consent at any time, where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn. You also have the right to contact us at any time if you wish to complain about our processing of your personal data and you may lodge a complaint at any time with a supervisory authority.
Furthermore, you have the right to have us remove you from our distribution lists at any time.
When contacting us in connection with any of your rights (describe above), you will need to provide sufficient identifying information, before your request can be processed. This information may include your name, address, birth date or other means of identification as appropriate in each case. We may limit or deny access to personal data where permitted by law.
Automated Individual Decision-Making, Including Profiling
Your personal data are not subject to any decisional process based solely on automated processing, including profiling.
Changes to the Privacy Statement
Any changes we make to this Privacy Statement in the future will be posted on this page. Please check back periodically to see any updates or changes to our Privacy Statement.
How to Contact Us
If you have any question in relation to this Privacy Statement or the processing of your personal data, please address all correspondence to:
Contact: Cleary Gottlieb Steen & Hamilton LLP
You may also contact the Firm’s local Data Protection Officer where one has been appointed by any one of our offices. Please contact your local office for more information.
If you currently receive marketing information from us which you would prefer not to receive in the future please email us at: email@example.com.