Privacy and Cookies
Last Updated: January 2020
This privacy notice explains how we may collect, use and disclose information about you and describes the rights you may have in respect of your own personal information. Please read this carefully before submitting any further personal information to this site.
1. Who we are
2. Information we collect from you
We collect information from you when you register for membership, when you sign up to our Alumni groups and when you register for any events. We also collect whatever additional personal information you enter on the Site, which is dependent on your activities and what you decide to include in your profile.
3. Information we collect from Third Parties
It is important for us that the information we include on our Site is accurate and as such, if we become aware (through a legitimate method, such as an update you have notified us of or made on another professional website, or via publicly available social media platforms) of changes to your current business and contact information we will supplement and update this information on your Site profile on your behalf. Changes to current business information will be highlighted on our website for all other members to see in an “Alums on the Move” data feed.
If you feel that any of this information is incorrect or you wish to have it removed, contact firstname.lastname@example.org.
4. The type of personal information we collect includes:
Latham collects about you, and in the past 12 months, has collected about users of the Site, when submitted by such users, the following categories of personal information:
- identifiers, including: name, postal and email addresses, current business and contact information, details about family; Professional or employment information, including your work history, job positions, career highlights, life achievements, employer(s) information;
- characteristics of protected classifications provided for specific purposes (e.g. disability and dietary preferences for event management purposes);
- biometric information: photo;
- other personal information: information about areas of interest and events invited to and whether or not the user has responded or attended.
Fields are usually marked as mandatory or optional and most are optional unless the activity requires the personal information. As a member of the Alumni Network you may choose to submit comments and share your personal information which may be accessible to other members of the Alumni Network. Note that this information may be accessible to other members of the Alumni Network so do not submit any comments that you do not want others to see.
5. How We Use Your Information
Administration of the Alumni Network
We will use information that you submit through the Site for the administration of the Alumni Network to:
- keep in contact with you
- facilitate contact between members of the Alumni Network
- plan events for Alumni
- invite you to networking and other events
- share information and publications that may be of interest to you
- contact you for research purposes
Marketing and Business Development
We may use your personal details to send you information by email or post, or using social media or social networking sites, about our services, developments in law and practice, brochures, press releases, invitations to seminars and talks. You can select the Affinity Groups you are interested in when you sign up on our Site by clicking on “Manage your Profile” where you may also update your preferences or opt out of receiving marketing communications at any time.
You can register to attend an event through the Site. If you attend an event that is run by or in association with us, we will collect contact details as part of event registration. This information may include dietary requirements and details of any health issues or disabilities. We collect this information to help us to make appropriate arrangements for the event.
Where an event is run in association with a partner organisation or hosted at an external venue, we may need to share your personal details with the partner, event organiser or venue. This will be made clear to you before you sign up for the event. Only Only the minimum information will be shared as necessary for the purposes of running the event.
If the event is run in association with a partner organisation, they will be responsible for informing you about any marketing they may wish to undertake and obtaining your consent where necessary.
More details on how we use your information
The table in Appendix 1 provides more detail about the purposes, the information we may collect, the source of the information and the legal authority relied upon by us.
6. Your Rights – Managing Your Personal Information
You have a number of choices in terms of how you manage and restrict the visibility or use of your personal information to the Alumni Network. One important element of the Alumni Network is to let members know what is going on, so various groups within Latham may occasionally ask for emails to be sent such as those promoting particular events or internal vacancies. Most of the emails will have an “opt out” link or similar directions. If you do not wish to receive emails from that sender again, follow the opt-out directions. If you are unable to see an “opt-out” opportunity in an email that you did not wish to receive again, please contact us and we will use reasonable efforts to promptly discontinue the email. In all cases where particular e-mails are regulated by law, we will comply with those laws. We will process opt-out requests relating to emails in a reasonable time, subject to applicable law.
In certain circumstances, subject to certain exceptions and applicable law, you may have the following rights in relation to your personal information:
- the right to know (i) the categories of personal information Latham collects; (ii) the purpose for its collection; (iii) the categories of sources from which Latham collects such personal information; and (iv) the categories of third parties to whom Latham discloses such personal information. Please see Appendix 1 for more information;
- to access the personal information held by us about you;
- to have your personal information corrected, for example if it is incomplete or incorrect;
- to opt out of receiving marketing communications at any time;
- the right to request that your personal information is deleted;
- the right to restrict or object to the processing of your personal information;
- in certain circumstances and subject to applicable law, the right to receive a copy of the personal information which you have provided to the firm, in a structured, commonly used and machine-readable format (known as “data portability”);
- where you have provided personal information voluntarily, or otherwise consented to its use, the right to withdraw your consent;
- the right not to be discriminated against if you opt to exercise any of your consumer rights conferred by the California Consumer Privacy Act of 2018 or other applicable data protection laws;
- the right to complain to a Data Protection Authority (see further below).
You may access, update and correct your personal information preferences by accessing the Manage Profile page on the Site. If you would like to be removed from the Alumni Network please email us at email@example.com.
If you have a query about this statement or wish to exercise your rights, please contact Latham's Global Data Privacy Office at GlobalDPO@lw.com. California residents may also call our toll-free number (866) 596-3896. You may also appoint an agent to submit a request on your behalf.
Once we receive your request, a member of the firm’s Global Data Privacy Office will contact you or your agent within the timeframe specified by applicable law to confirm receipt of your request and, if needed, to gather more information about your request. Depending on the nature of the request, the firm’s Global Privacy Office may request additional information. You or your authorized agent may need to provide the following:
- Proof of identity and address (e.g., a copy of your driving license or valid passport);
- If you are acting as an authorized agent, express notarized permission from the individual on whose behalf you are acting;
- A description of the right(s) you want to exercise and the information to which your request relates.
Please note, we may not be obligated to provide access to personal information or delete any data to the extent that we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on that person’s behalf. Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
Further information about making a complaint, either to Latham or to a Data Protection Authority, can be found below.
7. How long we keep your personal information
The firm will retain personal information only for as long as it is needed for the purposes described in section 5 above: How we use your information.
The retention period for Alumni data is specified in Latham’s Retention policy and we currently retain the data for 5 years after you stop being a member of the Alumni Network. Note that retention periods may vary in different jurisdictions.
We may need to retain information for significant periods of time in order to establish, exercise or defend our legal rights, and for archiving and historical purposes. Where possible and practical, personal information will be rendered anonymous through the removal, substitution or blocking of details which enable individuals to be identified.
If you decide that you no longer wish to receive communication from the Alumni Network please be aware that we still need to retain a minimal amount of personal information so that we can keep a record that you have asked us not to contact you.
Links to web sites that are not operated by or for Latham (“Third Party Sites”) are provided solely as a convenience to you. If you use these links, you will leave the Site. This Policy does not apply to Third Party Sites. We have not reviewed the Third Party sites, do not control and are not responsible for any of their content or their privacy policies, if any. We do not endorse or make any representations about them, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the Third Party Sites listed on or linked to from this Site, you should understand that you do so at your own risk.
9. Sharing of Information – International Transfers
With other Latham offices
Latham operates worldwide as a limited liability partnership (with affiliated limited liability partnerships conducting the practice in France, Hong Kong, Italy, Singapore, and the United Kingdom and as an affiliated partnership conducting the practice in Japan, in South Korea as a Foreign Legal Consultant Office, and in cooperation with the Law Office of Salman M. Al-Sudairi in the Kingdom of Saudi Arabia), and all personal information processed by this Site will be shared with the affiliated limited liability partnerships and affiliated partnerships for the purposes set out in this Policy, for building relationships and knowledge sharing. The entity responsible for the management and use of the Site and personal information collected from them is Latham & Watkins LLP in the United States.
With Service Providers
We use trusted third parties to provide services to us such as systems, web hosting including microsites of the Site and other IT services; internal and external advisors and auditors.
We will put in place contracts with our service providers which address the requirements of relevant privacy laws. Service providers will be required to use appropriate security measures to protect personal information and will be prohibited from using personal information other than as agreed with us.
Some service providers may be located in countries that have different levels of data protection that may not be of the same level as data protection within the European Economic Area (EEA). We will ensure that service providers comply with any applicable legal requirements for transferring personal information outside the jurisdiction in which it was originally collected.
For information collected in the EEA or which relates to data subjects in the EEA, we will require one of the following to be in place to protect that information and the rights of individuals:
- standard data protection clauses adopted by the European Commission;
- an approved code of conduct;
- an approved certification mechanism such as binding corporate rules; or
- an adequacy decision by the European Commission (such as the EU-US Privacy Shield framework).
Latham has engaged Vuture, an unaffiliated service provider, to operate this Site. Vuture built the Site, and manages it in consultation with Latham. Only the relevant personnel of both Latham and Vuture, who require full access to operate the Site and to provide the agreed services, will be given access to everything on the Site, including all personal information submitted to the Site. Latham and Vuture will only use and disclose your personal information as described in this Policy. In the event that Latham’s contract with Vuture ends, you will be promptly informed and provided with information regarding how to continue to participate in the Latham Alumni Network.
If you would like more information about the Service Providers we work with, please contact the Global Data Privacy Office.
10. Disclosing your personal information
We may also disclose your personal information:
Latham does not and will not sell your personal information as defined under the California Consumer Privacy Act of 2018.
We have in the last 12 months disclosed for a business purpose the categories of personal information listed in Appendix 1.
Latham has adopted a set of Binding Corporate Rules (“BCRs”) which have been approved by Data Protection Regulators in Europe. The BCRs allow personal information originating in the European Economic Area (“EEA”) to be transferred globally within the firm, and ensure that such personal information is protected to the same standard when processed by any Latham entity or office around the world. For more information visit www.lw.com.
Latham is committed to safeguarding the personal information provided to us. We maintain appropriate levels of security to protect personal information from accidental or unlawful access, use, disclosure, alteration, loss or destruction. Although we cannot and do not provide any assurance that these measures will be sufficient to protect against every possible effort to gain unauthorized access to the information, we take steps to ensure the ongoing confidentiality, integrity, availability and resilience of our networks and systems. It is your responsibility to keep your password confidential and secure, and to sign out once you have finished browsing.
If you have any concerns about the security of your personal information, please report it to the Global Data Privacy Office.
- Cookies which are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website
- Performance and analytics cookies (including Google Analytics) which keep track of the pages that you visit and the videos and other content you access, so we can determine which content is most popular and improve the performance of our website. These cookies record only anonymous statistical data and do not collect any personal information that could identify an individual visitor
- Functionality cookies which remember the choices you make, such as language options or the region you are in. These cookies help to make your visit more personal and are deleted automatically when you close your browser or the session expires
- Cookies which keep track of how you share content from the Site via social media or email, using sharing buttons provided by AdThis
13. How to contact us
If you have general questions about how we use your personal information:
Our Data Protection Office is responsible for monitoring compliance with data protection legislation and can be contacted at GlobalDPO@lw.com.
If you have any complaints:
Latham’s Data Privacy Complaints’ Procedure contains information on how to:
- access personal information relating to you
- request correction or deletion of your personal information
- object to processing or request a restriction on use of your personal information
- raise any other concern about our use of your personal information
Follow this link to access the Complaints’ Procedure.
You also have the right to complain to a Data Protection Authority if you believe that your personal information has been collected or used in breach of relevant privacy legislation or Latham’s Binding Corporate Rules. If you are located in the European Union, this will be the Data Protection Authority in the country in which you are located. Alternatively you may contact the Office of the Information Commissioner in the UK at www.ico.org.uk, by telephone on +44 (0)303 123 1113 or by writing to this address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF United Kingdom. Further information about making a complaint, either to Latham or to a Data Protection Authority, can be found in the Latham Data Privacy Complaints Procedure.
Alternatively you may contact the Office of the Information Commissioner in the UK at www.ico.org.uk, by telephone on +44 (0)303 123 1113 or by writing to this address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF United Kingdom. Our registration can be accessed by clicking on our registration number: Z5940371.
14. Data Controller
The data controller for your personal information will be the Latham entity or entities with which you are dealing and/or Latham & Watkins LLP, 555 West Fifth Street, 8th Floor, Los Angeles, California 90013 United States. Contact details for our offices around the world can be found on our website www.lw.com.
15. Agreement and amendments to this Policy
This table describes in more detail the information we may collect, where it comes from, why we need it, how we may use it and which categories we have disclosed for a business purpose.