Alumni Privacy Policy
View in Chinese, German, Japanese, Korean, Italian, and Spanish.
Alumni Privacy Policy
Last Updated: March 2024
This privacy notice explains how we may collect, use and disclose information about you and describes the rights you may have in respect of your own personal information. Please read this carefully before submitting any further personal information to this site.
1. Who We Are
Latham & Watkins (“Latham”) is an international law firm that services the world’s leading companies. The LathamAlumni Website (the “Site”) is an online service hosted by a third party, Vuture US Inc. (“Vuture”) that offers Latham alumni a community in which to stay in touch with Latham and former colleagues and to pursue commercial and career goals. Latham respects your privacy and is committed to collecting, maintaining and using personal information about you responsibly. This Alumni Privacy Policy (the “Policy”) applies to your use of the Alumni Site. References to “you” or “your” means an individual who has registered with this site. Unless otherwise indicated, references to “Latham” or “we” means Latham collaborating with Vuture to provide the services and products available on this Site. In accordance with applicable law, we have appointed a Data Privacy Officer (DPO) for our German offices. Our DPO, Dr. Sebastian Kraska, can be reached at +49.89.189.1736-0 or skraska@iitr.de.
2. Information We Collect From You
We collect information from you when you register for membership, when you sign up to our Alumni groups and when you register for any events. We also collect whatever additional personal information you enter on the Site, which is dependent on your activities and what you decide to include in your profile.
3. Information We Collect From Third Parties
It is important for us that the information we include on our Site is accurate and as such, if we become aware (through a legitimate method, such as an update you have notified us of or made on another professional website, or via publicly available social media platforms) of changes to your current business and contact information we will supplement and update this information on your Site profile on your behalf. Changes to current business information will be highlighted on our website for all other members to see in an “Alums on the Move” data feed.
If you feel that any of this information is incorrect or you wish to have it removed, contact lathamalumni@lw.com.
4. The Type Of Personal Information We Collect Includes:
Latham collects about you, and in the past 12 months, has collected about users of the Site, when submitted by such users, the following categories of personal information:
- identifiers, including: name, postal and email addresses, current business and contact information, details about family; Professional or employment information, including your work history, job positions, career highlights, life achievements, employer(s) information;
- characteristics of protected classifications provided for specific purposes (e.g. disability and dietary preferences for event management purposes);
- biometric information: photo;
- other personal information: information about areas of interest and events invited to and whether or not the user has responded or attended.
Fields are usually marked as mandatory or optional and most are optional unless the activity requires the personal information. As a member of the Alumni Network you may choose to submit comments and share your personal information which may be accessible to other members of the Alumni Network. Note that this information may be accessible to other members of the Alumni Network so do not submit any comments that you do not want others to see.
We generally do not directly collect personal information from a child under 14 years of age but may collect such personal information from the guardian of the child where such processing necessary for the relevant processing activities as described in this policy. The parent or legal guardian may exercise the minor’s rights as described in section 10 “Your Rights.”
5. How We Use Your Information
Administration of the Alumni Network
We will use information that you submit through the Site for the administration of the Alumni Network to:
- keep in contact with you
- facilitate contact between members of the Alumni Network
- plan events for Alumni
- invite you to networking and other events
- share information and publications that may be of interest to you
- contact you for research purposes
Marketing and Business Development
We may use your personal details to send you information by email or post, or using social media or social networking sites, about our services, developments in law and practice, brochures, press releases, invitations to seminars and talks. You can select the Affinity Groups you are interested in when you sign up on our Site by clicking on “Manage your Profile” where you may also update your preferences or opt out of receiving marketing communications at any time.
Events
You can register to attend an event through the Site. If you attend an event that is run by or in association with us, we will collect contact details as part of event registration. This information may include dietary requirements and details of any health issues or disabilities. We collect this information to help us to make appropriate arrangements for the event.
Where an event is run in association with a partner organisation or hosted at an external venue, we may need to share your personal details with the partner, event organiser or venue. This will be made clear to you before you sign up for the event. Only the minimum information will be shared as necessary for the purposes of running the event.
If the event is run in association with a partner organisation, they will be responsible for informing you about any marketing they may wish to undertake and obtaining your consent where necessary.
More details on how we use your information
The table in Appendix 1 provides more detail about the purposes, the information we may collect, the source of the information and the legal authority relied upon by us.
6. Your Rights — Managing Your Personal Information
You have a number of choices in terms of how you manage and restrict the visibility or use of your personal information to the Alumni Network. One important element of the Alumni Network is to let members know what is going on, so various groups within Latham may occasionally ask for emails to be sent such as those promoting particular events or internal vacancies. Most of the emails will have an “opt out” link or similar directions. If you do not wish to receive emails from that sender again, follow the opt-out directions. If you are unable to see an “opt-out” opportunity in an email that you did not wish to receive again, please contact us and we will use reasonable efforts to promptly discontinue the email. In all cases where particular e-mails are regulated by law, we will comply with those laws. We will process opt-out requests relating to emails in a reasonable time, subject to applicable law.
In certain circumstances, subject to certain exceptions and applicable law, you may have the following rights in relation to your personal information:
- the right to know (i) the categories of personal information Latham collects; (ii) the purpose for its collection; (iii) the categories of sources from which Latham collects such personal information; and (iv) the categories of third parties to whom Latham discloses such personal information. Please see Appendix 1 for more information;
- to access the personal information held by us about you;
- to have your personal information corrected, for example if it is incomplete or incorrect;
- to opt out of receiving marketing communications at any time;
- the right to request that your personal information is deleted;
- the right to restrict or object to the processing of your personal information;
- in certain circumstances and subject to applicable law, the right to receive a copy of the personal information which you have provided to the firm, in a structured, commonly used and machine-readable format (known as “data portability”);
- where you have provided personal information voluntarily, or otherwise consented to its use, the right to withdraw your consent;
- the right not to be discriminated against if you opt to exercise any of your consumer rights conferred by the California Consumer Privacy Act of 2018 or other applicable data protection laws;
- the right to complain to a Data Protection Authority (see further below).
You may access, update and correct your personal information preferences by accessing the Manage Profile page on the Site. If you would like to be removed from the Alumni Network please email us at lathamalumni@lw.com.
If you have a query about this statement or wish to exercise your rights, please contact Latham's Global Data Privacy Office at GlobalDPO@lw.com. California residents may also call our toll-free number (866) 596-3896. You may also appoint an agent to submit a request on your behalf.
Once we receive your request, a member of the firm’s Global Data Privacy Office will contact you or your agent within the timeframe specified by applicable law to confirm receipt of your request and, if needed, to gather more information about your request. Depending on the nature of the request, the firm’s Global Privacy Office may request additional information. You or your authorized agent may need to provide the following:
- Proof of identity and address (e.g., a copy of your driving license or valid passport);
- If you are acting as an authorized agent, express notarized permission from the individual on whose behalf you are acting;
- A description of the right(s) you want to exercise and the information to which your request relates.
Please note, we may not be obligated to provide access to personal information or delete any data to the extent that we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on that person’s behalf. Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
Further information about making a complaint, either to Latham or to a Data Protection Authority, can be found below.
7. How Long We Keep Your Personal Information
The firm will retain personal information only for as long as it is needed for the purposes described in section 5 above: How we use your information.
The retention period for Alumni data is specified in Latham’s Retention policy and we currently retain the data for 5 years after you stop being a member of the Alumni Network. Note that retention periods may vary in different jurisdictions.
We may need to retain information for significant periods of time in order to establish, exercise or defend our legal rights, and for archiving and historical purposes. Where possible and practical, personal information will be rendered anonymous through the removal, substitution or blocking of details which enable individuals to be identified.
If you decide that you no longer wish to receive communication from the Alumni Network please be aware that we still need to retain a minimal amount of personal information so that we can keep a record that you have asked us not to contact you.
8. Links
Links to web sites that are not operated by or for Latham (“Third Party Sites”) are provided solely as a convenience to you. If you use these links, you will leave the Site. This Policy does not apply to Third Party Sites. We have not reviewed the Third Party sites, do not control and are not responsible for any of their content or their privacy policies, if any. We do not endorse or make any representations about them, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the Third Party Sites listed on or linked to from this Site, you should understand that you do so at your own risk.
9. Sharing Of Information — International Transfers
With other Latham offices
The entity responsible for the management and use of the Site and personal information collected from them is Latham & Watkins LLP in the United States. However, Latham operates worldwide through its international offices, partnerships and affiliates and may transfer personal information across national borders. Latham Sites are operated on servers located in various jurisdictions, including the United States. When you access or use Latham Sites, personal information about you may be transferred outside the country in which you are situated to these other locations.
Latham has adopted a set of Binding Corporate Rules (“BCRs”) which allow personal information originating in the European Economic Area (“EEA”) and/or the UK to be transferred globally within the firm. The BCRs ensure that such personal information is protected to the same standard when processed by any Latham entity or office around the world.
You can access the firm’s Binding Corporate Rules here.
With Service Providers
We use trusted third parties to provide services to us such as systems, web hosting including microsites of the Site and other IT services; internal and external advisors and auditors.
We will put in place contracts with our service providers which address the requirements of relevant privacy laws. Service providers will be required to use appropriate security measures to protect personal information and will be prohibited from using personal information other than as agreed with us.
Some service providers may be located in countries that have different levels of data protection laws that may not be of the same level as data protection laws within the European Economic Area (EEA) or the UK. We will ensure that service providers comply with any applicable legal requirements for transferring personal information outside the jurisdiction in which it was originally collected.
If data is transferred outside the EEA or the UK to a country that has not been granted “adequate” status by the European Commission, Latham will require Vendors to execute the Standard Contractual Clauses for the transfer of personal information to third countries, as sanctioned under applicable European and UK privacy laws.
With Vuture
Latham has engaged Vuture, an unaffiliated service provider, to operate this Site. Vuture built the Site, and manages it in consultation with Latham. Only the relevant personnel of both Latham and Vuture, who require full access to operate the Site and to provide the agreed services, will be given access to everything on the Site, including all personal information submitted to the Site. Latham and Vuture will only use and disclose your personal information as described in this Policy. In the event that Latham’s contract with Vuture ends, you will be promptly informed and provided with information regarding how to continue to participate in the Latham Alumni Network.
If you would like more information about the Service Providers we work with, please contact the Global Data Privacy Office.
10. Disclosing Your Personal Information
We may also disclose your personal information:
(i) if required by applicable law; (ii) in connection with a reorganization or combination of our firm with another firm, (iii) if we believe that such disclosure is necessary to enforce or apply its terms of use and other agreements or otherwise protect and defend Latham’s rights, property or safety or that of our clients and other users of the Site; (v) in order to comply with a judicial proceeding, court order or other legal obligation, or a regulatory or government inquiry; or (vi) with your consent.
Latham does not and will not sell your personal information as defined under the California Consumer Privacy Act of 2018.
We have in the last 12 months disclosed for a business purpose the categories of personal information listed in Appendix 1.
11. Security
Latham is committed to safeguarding the personal information provided to us. We maintain appropriate levels of security to protect personal information from accidental or unlawful access, use, disclosure, alteration, loss or destruction. Although we cannot and do not provide any assurance that these measures will be sufficient to protect against every possible effort to gain unauthorized access to the information, we take steps to ensure the ongoing confidentiality, integrity, availability and resilience of our networks and systems. It is your responsibility to keep your password confidential and secure, and to sign out once you have finished browsing.
If you have any concerns about the security of your personal information, please report it to the Global Data Privacy Office.
12. Cookies
Latham Sites also use cookies. You can find out more about this in our Cookies Policy.
13. How to contact us
If you have general questions about how we use your personal information:
Our Global Data Privacy Office is responsible for monitoring compliance with data protection legislation and can be contacted at GlobalDPO@lw.com.
If you have any complaints:
Latham’s Data Privacy Complaints’ Procedure contains information on how to:
- access personal information relating to you
- request correction or deletion of your personal information
- object to processing or request a restriction on use of your personal information
- raise any other concern about our use of your personal information
Follow this link to access the Complaints’ Procedure.
You also have the right to complain to a Data Protection Authority if you believe that your personal information has been collected or used in breach of relevant privacy legislation or Latham’s Binding Corporate Rules. If you are located in the European Union, this will be the Data Protection Authority in the country in which you are located. Alternatively you may contact the Hesse Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter fuer den Datenschutz und die Infromationsfreiheit), PO Box 3163, 65021 Wiesbaden, Germany. Further information and contact details can be found at https://datenschutz.hessen.de/. Further information about making a complaint, either to Latham or to a Data Protection Authority, can be found in the Latham Data Privacy Complaints Procedure. California residents may also call our toll-free number (866) 596-3896. You may also appoint an agent to submit a request on your behalf.
Alternatively, you may contact the Office of the Information Commissioner in the UK at www.ico.org.uk, by telephone on +44 (0)303 123 1113 or by writing to this address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF United Kingdom. Our registration can be accessed by clicking on our registration number: Z5940371.
14. Data Controller
The data controller for your personal information will be the Latham entity or entities with which you are dealing and/or Latham & Watkins LLP, 555 West Fifth Street, 8th Floor, Los Angeles, California 90013 United States. Contact details for our offices around the world can be found on our website www.lw.com.
15. Agreement and amendments to this Policy
By submitting your personal information on the Site, you agree to the collection and use of your personal information on the basis described above. If you do not agree, please do not provide any further personal information via the Site. If we decide to update this Policy, we will indicate this next to the Privacy Policy link on the front page of our Site. If there are material changes, we will prominently post such changes. Any information collected under our old Privacy Policy will then become subject to the terms of our new Privacy Policy. If you wish to receive this policy in an alternative format, please contact Latham's Global Data Privacy Office.
Appendix 1
This table describes in more detail the information we may collect, where it comes from, why we need it, how we may use it and which categories we have disclosed for a business purpose.