Kirkland & Ellis LLP ("Kirkland," "we," or "us") respects your right to privacy. This Privacy Statement explains what type of information we collect in connection with your use of the Alumni Network website (the "Site"), what we do with the information you provide, and how you can access your information.
The Site is located and operated in the United States. By providing information in connection with the Site, you consent to the transfer to, and storage of, your information in the United States, the laws of which may not be as stringent as the laws in the country in which you reside.
This Site collects personal information about your professional activities that you submit to us. We connect this information with your employment history with Kirkland.
We collect your personal information in the following ways:
• In connection with your registration on the Site, such as your name, company, job title, address and email address. You have the opportunity to provide this information directly or import it from a third party website, such as LinkedIn.
• When you include additional information on your profile, such as skills, education and employment history.
• When you post information on the Site, such as an article or job posting.
The information that you make available through your public profile on the Site, post in a public forum on the Site, or provide to other members or in response to a posting ("Public Information") is accessible by others. Kirkland is not liable for the access, use, misuse or sharing of Public Information.
Uses of personal information
We use the personal information collected by the Site for the following purposes:
• To enable other users to search for and locate you via the directory;
• To research and analyze our users' demographics, interests and behavior in an aggregated form to better understand and serve our users and improve our site and its offerings;
• To contact you periodically with communications about events, publications or employment opportunities with Kirkland; and
• To address other purposes, which we would always describe to you when we collect the information.
Sharing of Information
Except as stated herein, we will not share your information unless we state so at the time of collection. We may share your information with affiliates and third parties who assist us by providing services related to the Site, including, but not limited to, database management, e-mail distribution and website management.
In the unlikely event that all or substantially all of our assets relating to the Site are sold or transferred to another party, your information may be transferred to this acquiring entity. Finally, we may disclose your information to third parties in order to (i) comply with law and law enforcement agencies, (ii) to protect our rights in or the safety of the Site, or (iii) to protect the safety or rights of other users of the Site.
We may provide links to third party sites. We have no responsibility or liability for the privacy practices or the content of any such sites. These linked sites are only for your convenience and you, therefore, access them at your own risk. Any information you provide to these sites is subject to the third party site’s own policies.
Rights to Access, Correct and Eliminate Information About You
You have a right to access, modify, correct and eliminate the data you supplied to the Site. If you update any of your information, we may keep a copy of the information that you originally provided to us in our archives for uses documented in this policy. You may request deletion of your information at any time by contacting us by one of the methods set forth below. We will use reasonable efforts to respond to your request within 10 days. Please note, however that information you have shared with others, or that other users have copied, may also remain visible even if you request its deletion.
We will retain and use your information as necessary to provide you services, comply with our legal obligations, resolve disputes, and enforce this Agreement.
We may update this Privacy Statement at any time, with or without advance notice. Using the Site after a notice of changes has been sent to you or published on our site shall constitute consent to the changed terms or practices.
We implement a variety of security measures to protect your personal information on our systems. Notwithstanding our efforts to protect your information, no security system is completely impenetrable, so we cannot guarantee the absolute security of our databases, nor can we guarantee that information you supply to us will not be intercepted while in transit to us over the Internet.
How to contact us
Kirkland & Ellis LLP ("Kirkland" or the "Firm") adheres to the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework (the "Safe Harbor Frameworks") concerning the transfer of personal data from the European Economic Area (EEA) (which includes (i) the member states of the European Union (EU) plus Iceland, Liechtenstein, and Norway), and (ii) Switzerland, respectively, to the United States, including the respective Safe Harbor Privacy Principles, as set forth by the U.S. Department of Commerce (the "Principles").
SAFE HARBOR PRINCIPLES
Scope: This Policy applies to all "personal data," defined as information that:
• is received by the Firm's U.S. offices from (i) the Firm's EU offices (directly or through affiliated entities, and references herein to the Firm's EU offices shall be deemed to include their affiliated entities), and (ii) the Firm’s clients;
• is about, or pertains to, a specific individual in the EEA or Switzerland;
• can be linked to that individual (also referred to as the "data subject"); and
• is recorded in any form, including on-line, off-line, and manually processed data.
Kirkland complies with the Principles, subject to the limitations and exceptions, in each case, as set forth below.
Notice: Where Kirkland collects personal data directly from individuals in the EEA or Switzerland (i.e., excluding clients that are not individuals), Kirkland will inform such individuals about (i) the purposes for which it collects and uses personal data about them, (ii) the types of non–agent third parties to which Kirkland discloses that information, (iii) the choices and means, if any, Kirkland offers individuals for limiting the use and disclosure of personal data about them, and (iv) the means to contact Kirkland. Notice will be provided in clear and conspicuous language when individuals are first asked to provide personal data to Kirkland, or as soon as practicable thereafter, and in any event before Kirkland uses or discloses the information for a purpose other than that for which it was originally collected. Consent for personal data to be collected, used, and/or disclosed in certain ways may be required in order for an individual to obtain or use the Firm's services. Such consent is provided through employment consent forms, engagement letters, and similar documents. Although in most cases it is anticipated that personal data to which this Policy applies will be collected or processed by Kirkland & Ellis International LLP, if Kirkland's U.S. offices directly collect such personal data they will do so in accordance with the Principles and this Policy.
Choice: Where acting as a data controller (i.e., the person or entity that determines the purposes for which, and the manner in which, any personal data is processed), Kirkland will offer individuals the opportunity to choose (opt-out) whether their personal data is (i) to be disclosed to a non-agent third party, or (ii) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. For sensitive personal data, Kirkland will give individuals the opportunity to affirmatively and explicitly (opt-in) consent to the disclosure of such personal data to a non-agent third party or the use of such personal data for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. Because Kirkland processes personal data at the direction of the Firm’s clients, we typically have no direct relationship to the individuals whose personal data the Firm receives in connection with client engagements. Kirkland may disclose personal data to (i) agents as provided herein, and (ii) non-agent third parties for the purposes of, and as directed by, the client in connection with which that personal data was collected.
Onward Transfer: Kirkland will use reasonable efforts to obtain assurances from its agents that they will safeguard personal data consistent with this Policy. Where Kirkland has knowledge that an agent is using or disclosing personal data in a manner contrary to this Policy, Kirkland will take reasonable steps to prevent or stop the use or disclosure.
Security: Kirkland will take reasonable precautions to protect personal data in its possession from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.
Data Integrity: Kirkland will use personal data only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. To the extent necessary, Kirkland will take reasonable steps to ensure that personal data is relevant to its intended use, accurate, complete, and current.
Access: Upon request, Kirkland will grant individuals reasonable access to personal data that it holds about them in the Firm’s role as data controller. In addition, Kirkland will take reasonable steps, subject to the limitations and exceptions set forth below, to permit individuals to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete. For information that the Firm holds as a data processor, the Firm will direct the individual to the data controller. If an individual becomes aware that information the Firm maintains about that individual is inaccurate, or if an individual would like to update or review his or her information, the individual may contact the Firm using the contact information set forth below. The individual will need to provide sufficient identifying information, such as name, address, and birth date. The Firm may request additional identifying information as a security precaution. In addition, the Firm may limit or deny access to personal data where providing such access would be unreasonably burdensome or expensive in the circumstances, or as otherwise permitted by the Principles. In some circumstances, the Firm may charge a reasonable fee, where warranted, for access to personal data.
Enforcement: Kirkland will conduct compliance audits of its relevant privacy practices to verify adherence to this Policy. Any partner or employee who Kirkland determines is in violation of this policy may be subject to disciplinary action up to and including termination of employment.
Dispute Resolution - Human Resource Data: Any questions or concerns regarding the use or disclosure of Kirkland's human resource data should be directed to the Firm's HR Director or the Director of Administration. Kirkland will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal data by reference to the Principles and this Policy. For unresolved complaints related to Kirkland's human resources data for partners and employees in the EU offices, Kirkland will cooperate with the European Data Protection Authorities (DPAs).
Dispute Resolution - Client Data: Any questions or concerns regarding the use or disclosure of client-related personal data should be directed to the Firm at email@example.com. Kirkland will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal data by reference to the Principles and this Policy. Unresolved complaints made pursuant to the Safe Harbor Frameworks will be submitted to the alternative dispute resolution provider JAMS for arbitration.
Limitations of the Principles and this Policy: Adherence by Kirkland to the Principles and this Policy will be limited as permitted by the Principles: (i) to the extent necessary to meet national security, public interest, or law enforcement requirements, (ii) by statute, government regulation, or case law that creates conflicting obligations or authorizations, provided that, in exercising any such authorization, the Firm’s non-adherence is limited to the extent necessary to meet the overriding legitimate interests the Firm furthers, or (iii) if the effect of the EU Directive on Data Protection (the "Directive"), EU Member State law, or the Swiss Federal Act on Data Protection (FADP) is to allow exceptions or derogations, provided the Firm applies such exceptions or derogations in comparable contexts. Further, because Kirkland is a law firm providing legal advice, adherence to certain of the Principles (including Notice, Choice and Access), is limited with respect to personal data that the Firm processes and uses in certain respects, including, but not limited to, the establishment of a legal claim or defense or the representation of a client's interests and rights in an acquisition, merger, joint venture or other transaction. Personal data may also be subject to ethical duties of confidentiality.
The Firm's U.S. offices do not disclose personal data to third parties except in accordance with the Principles and this Policy. The following are examples, but not an exhaustive list, of situations where disclosure or transfer would be permitted in accordance with this section:
• The disclosure involves personal data of a client and is permitted by applicable law (including U.S. court rules governing lawyers' duty of confidentiality to their clients) such as:
• when information generally known in the local community or in the trade, field or profession to which the information relates;
• when information is disclosed with such client's informed consent;
• when disclosure is impliedly authorized to advance the best interests of the client and is reasonable and customary;
• when it is necessary or advisable to prevent reasonably certain death or substantial bodily harm;
• when it is necessary or advisable to prevent the client from committing a crime;
• when it is necessary or advisable to withdraw an opinion the Firm issued where the Firm believes the opinion is being
used to further a fraud;
• when it is necessary or advisable to secure legal advice about the Firm’s compliance with the law;
• when it is necessary or advisable to defend the Firm against an accusation of wrongful conduct or to collect a fee;
• when it is necessary or advisable to respond to a subpoena served on the Firm or otherwise to comply with law; and
• when the client has offered material evidence to a tribunal that is false and disclosure is necessary as a remedial measure.
• The disclosure involves personal data of a data subject that is not a client and one of the following applies:
• the data subject intentionally made the information public;
• the data subject has given the Firm consent to make the disclosure; or
• the Firm’s duty of confidentiality to a client combined with the Firm’s professional obligation to provide competent
representation and not prejudice the client during a representation preclude the Firm from seeking consent from the data
subject, for example:
• the Firm represents a company in a litigation or government investigation and assists the company in responding to a
subpoena where responsive company documents include employee or other individuals' personal data that the client
has transferred to the Firm.
• the Firm represents a company in a transactional matter that requires transfer of employee or other individuals'
personal data in the company's possession to prospective buyers or investors for the purposes of their due diligence,
provided the client has given its consent to do so
• Whether the data subject is a client or not:
• a law or regulation such as the Patriot Act or law enforcement requirement states that the Firm is obligated to disclose the
• disclosure is necessary or advisable to protect the rights, safety, or property of the Firm or others;
• the disclosure is to another Kirkland office or to persons or entities providing data processing or other services on the
Firm’s or the individual's behalf (each a "transferee"), consistent with the purpose for which the information was obtained,
if the transferee, with respect to the information in question:
• subscribes to the Principles;
• is subject to the Directive or another adequacy finding; or
• agrees in writing that is will provide at least the same level of privacy protection as is required by the relevant
• the disclosure is otherwise permissible under the Directive.
• Permitted transfers of personal data, either to third parties or within Kirkland, include the transfer of data from one jurisdiction to another, including transfers to and from the United States.
CONTACTS FOR QUESTIONS AND CONCERNS
Questions and concerns regarding this Policy should be directed to the Firm at firstname.lastname@example.org.
This policy may be amended from time to time, consistent with the requirements of the Principles.
Last Updated: May 30, 2014