About the Firm and This Privacy Statement
Cleary Gottlieb Steen & Hamilton LLP (“Cleary Gottlieb,” the “Firm,” “we” or “us”) is committed to safeguarding privacy and personal data. With a few exceptions, such as when we provide data room or e-discovery services (in the context of which our role is limited to that of a data processor), Cleary Gottlieb is generally the controller of personal data provided to us.
This Privacy Statement is intended to inform clients, prospective clients and more generally all visitors to this website about how we collect, use, share, protect or otherwise process personal data. Other policies may apply to recruitment and would be notified separately.
Cleary Gottlieb Steen & Hamilton LLP is an international law firm practicing in a number of jurisdictions around the world through affiliated legal entities and branch offices of those entities. More information about each of these entities and offices can be found here. While offices and entities within the Firm may jointly control certain processing activities in connection with your personal data, your local office can act as your primary point of contact should you require assistance in connection with matters relating to your personal data. Alternatively, should you require additional information about the Firm’s processing of your personal data, or if you would like to exercise any of your rights (as further detailed below) you can contact us at email@example.com. We will then ensure that your request is directed to the appropriate departments internally.
When, How and What Personal Data We Collect
- In general, you are not required to provide any personal information in order to consult our website. However, you may elect to contact us by completing the form provided on the “Contact Us” page of this website, in which case we ask you to provide your name and email address, and to submit specific questions to us. You may also elect to contact us voluntarily by telephone or email ,in which case we will process the personal data in such communications (such as your email address and the content of the communication).
- When using the website for mere information purposes, we may also collect the personal data that your web browser transmits to our server, including your IP address, the date and time of your visit, and data relating to your operating system and web browser. We use this data to ensure the security and successful navigation of our website, and to compile statistical data on the use of our website.
Provision of services.
a) During the course of an engagement, or when consideration is being given to such an engagement, we may collect and process personal data about our clients, prospective clients, their affiliates or the relevant members of their personnel.
All personal data processed by us is necessary to fulfill the purposes for which they were collected (further explained below).
The processing of your personal data includes any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, blocking, erasure or destruction of data, and such processing will always be carried out in compliance with data protection rules.
Where you provide information about third parties you must have provided the data subjects with information about such disclosures and established a legal basis for sharing the personal data with us, to the extent required by applicable law.
Why Personal Data Is Used
We will use your personal data to process your request, to contact you and to provide you with the information that you voluntarily have requested.
We may also use personal data:
- to conduct pre-engagement assessments and formalities such as anti-money laundering checks, conflict checks, etc.;
- to perform the tasks entrusted to us by our clients;
- for client relationship management purposes;
- for internal administrative or operational processes;
- to analyze the services you may be interested in (including through inquiries and statistical surveys);to send invitations and information from Cleary Gottlieb about events, publications, and services provided by the firm; and
- to satisfy any legal, regulatory, accounting or reporting requirements.
We will process personal data if and to the extent applicable law provides a lawful basis for us to do so and in particular where the processing is necessary:
a) to perform the contract we have entered into with a data subject or in order to take steps at the data subjects’ request prior to entering into a contract;
b) to comply with a legal obligation to which we are subject; or
c) for our (or a third party’s) legitimate interest which is not overridden by the data subjects’ interests or fundamental rights and freedoms. Such legitimate interests will be the provision of legal services by us, administrative or operational processes within Cleary Gottlieb, and direct marketing.
Additionally, we may process personal data for a specific purpose where we have obtained the data subjects’ consent.
With Whom Personal Data May Be Shared
Please note that in order to process a query, deliver legal services, or to fulfill any of the purposes set out in the section above, we may be required to share personal data with other offices of Cleary Gottlieb around the world. Access to your personal data will therefore be available, in all our offices, to firm employees (including our lawyers as well as our professional staff) for the purposes listed above. Additionally, we may need to share your personal data with service providers with which we work. Such third party service providers may include:
- accountants, management and tax consultants;
- credit institutions;
- information technology and telecommunications providers;
- local or specialist legal counsel; or
- legal counsel appointed by a counter-party in a legal matter.
We may also communicate your personal data for the purposes described above and according to your general instructions, to your other advisors, your counter-parties and their legal representatives and, generally, all those individuals to whom transmission is required for the purpose of our engagement by you.
We will not share personal data with any other third party, except as required to do so by law.
Consequences of Failure to Provide Your Personal Data
Your provision of personal data to us (including personal data of third parties) is voluntary. However, any refusal on your part to provide any such data could prevent us, depending upon the circumstances, from providing certain services to you.
How Long Personal Data Is Retained
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected and processed in compliance with this Privacy Statement. To determine the retention period for personal data, we will take into consideration the purposes for which they were collected, as well as the nature and sensitivity of the information and the applicable legal requirements.
Where we have based our processing of your personal data on your consent, you have the right at any time, with withdraw your consent. You also have the right to contact us to remove you from our distribution lists at any time, by email to firstname.lastname@example.org.
During the retention of your personal data, we take technical and organizational security measures against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Whether Personal Data Is Transferred Abroad
The Firm operates on a worldwide integrated basis and we may need to transfer personal data to other offices in the Firm. This may include the transfer of personal data from a location within the European Economic Area (the “EEA”) to outside the EEA. For a complete list of the Firm’s offices, please see the Firm’s website in the “Locations” section.
Where such a transfer occurs, internal contractual agreements between the offices continue to protect personal data, where the level of protection for Personal Data in countries outside the EEA may otherwise be less than that offered within the EEA. For any further information about these safeguards, please address your request to email@example.com.
What Rights You Have
- Access: you may contact us at any time to request access to your personal data, and we will confirm to you whether we are processing your personal data and for what purposes, as well as provide details of the categories of personal data concerned, the recipients of the personal data, the retention periods (where possible) and your rights.
- Rectification: if any of your personal data that we hold appears to be inaccurate or incomplete, you may ask us to correct or complete it at any time.
- Erasure: you may ask us to have your personal data erased if it is no longer necessary for us to keep it in connection with the purposes for which it was collected. However, we must keep track of certain information necessary in order to comply with legal obligations, and/or to handle any claims or litigation.
- Restriction: you may ask us to limit the way in which we process your personal data (i.e., require us to continue to store your personal data but not to process it without your consent), for example where you think the personal data we hold is inaccurate, for a period enabling us to verify the accuracy of personal data, or where you have objected to our processing.
- Objection: you may object to our processing of your personal data on grounds relating to your specific situation, where we are processing your personal data to pursue our legitimate interests.
- Portability: you may ask us to send you your personal data in an electronic, structured, commonly-used and machine-readable format and have your personal data transmitted directly from us to another data controller, where technically feasible without hindrance where the processing is carried out by automated means and is based on your consent or is necessary for the performance of a contract to which you are party.
- Withdrawal of your consent: you may withdraw your consent at any time, where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.
You also have the right to contact us at any time if you wish to complain about our processing of your personal data and you may lodge a complaint at any time with a supervisory authority.
When contacting us in connection with any of your rights (describe above), you will need to provide sufficient identifying information, such as name, address, and birth date before your request can be processed. We may limit or deny access to personal data where permitted by law.
Automated Individual Decision-Making, Including Profiling
Your personal data are not subject to any decisional process based solely on automated processing, including profiling.
Changes to the Privacy Statement
Any changes we make to this Privacy Statement in the future will be posted on this page. Please check back periodically to see any updates or changes to our Privacy Statement.
How to Contact Us
If you have any question in relation to this Privacy Statement or the processing of your personal data, please address all correspondence to:
- Contact: Cleary Gottlieb Steen & Hamilton LLP
- Email: firstname.lastname@example.org
If you currently receive marketing information from us which you would prefer not to receive in the future please email us at: email@example.com.
Date of statement: May 16, 2019