This Privacy Policy includes information applicable to European Union ("EU") residents or users accessing the website in the EU. If you are located in the EU, this Privacy Policy provides you with information regarding your rights under the EU General Data Protection Regulation ("GDPR").
COLLECTION OF PERSONAL DATA
When you visit our website, we collect the personal data described above under "What Do We Collect and How?" In our legal practice, we typically represent corporate entities who are not data subjects under the GDPR. Sometimes, in providing services, we may receive personal information of individuals such as officers, representatives, adverse parties, related parties, vendors, suppliers, professional advisors and government representatives.
LEGAL BASIS FOR PROCESSING YOUR INFORMATION
As discussed above, we process your information for the legitimate interest of communicating with clients, prospective clients, and other users about our legal services and our events and publications related to developments in the law. Processing your information for the purposes described is necessary for us to do what we do, and it's in both of our interests. When we use your information based on our legitimate interests, we conduct a balancing test based on the legitimate interest, necessity of processing your information, and how such processing impacts you.
We use personal information collected in the course of providing legal services solely to provide such legal services to our clients. Such processing is necessary for our compliance with legal obligations and our ethical and professional duties as lawyers. Our processing may also be necessary to fulfil a contract we have with you, such as an engagement letter for legal services.
We may also process your information when it is necessary to take action regarding illegal activities, alleged fraud, safety threats, security issues or violations of our Terms of Use or engagement with a client. Such processing is necessary to comply with our legal and client service obligations.
TRANSFER OF PERSONAL DATA
The firm and our websites are based in the United Kindgom and, regardless of where you access the website, the information collected as part of that use will be transferred to and maintained on servers located in the United Kingdom. The firm is not currently certified under the Privacy Shield. By providing your information, you are consenting to the transfer of your personal data to the U.K.
Although there is a risk in transmitting your information to another country, Cross-Border does take steps to secure your personal data. If you are aware that you will be transferring personal information to us, we will execute a Data Protection Agreement that includes Standard Contract Clauses for the transfer of personal information from the EU to the United Kingdom.
YOUR CHOICES
The GDPR provides you with certain privacy rights. You may also request to have your information deleted, although we may retain information for backups, prevention of fraud and abuse, satisfaction of legal obligations or other ongoing legitimate interests. You may decline to share certain personal information.
Right of access: If you wish to access your personal information, please contact us at the address or number below.
Right to Correction: If the personal information we hold about you is inaccurate or incomplete, you may request to have it corrected. If you are entitled to have information corrected and if we have shared your personal information with others, we will let them know about the rectification where possible. You may also ask us with whom we have shared your information. We will let you know where possible and lawful, so that you can contact them directly.
Right to Erasure: You may ask us to delete or remove your personal information in some circumstances, such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to have your information deleted and if we have shared your personal information with others, we will let them know about the deletion where possible. You may also ask us with whom we have shared your information. We will let you know where possible and lawful, so that you can contact them directly about erasure.
Right to Object: If you are an EU resident, you have the right to object to our processing that is based on legitimate interests by contacting us at the address or number below. If you are entitled to restriction and if we have shared your personal information with others, we will let them know about the restriction where it is possible for us to do so.
Right to Data Portability: If you are an EU resident, you have the right you have the right, in certain circumstances, to receive a copy of personal information we've obtained from you in a structured, commonly used and machine-readable format, and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Right in Relation to Automated Decision-Making and Profiling: If you are an EU resident, you have the right not to be subject to a decision based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us. We do not engage in automatic processing. Some third party sites to which we link, such as social networks, may engage in automatic processing. See their privacy policy for information on objecting to automatic processing.
Right to Withdraw Consent: If you provide your consent to the processing of your personal information and that consent forms our legal basis for processing, you have the right to withdraw your consent at any time by contacting us at the number below.
Right to Lodge a Complaint: If you are located in the EU and you believe that we have infringed your rights under the GDPR, please contact us by sending an email to [email protected]
You have the right to lodge a complaint with a supervisory authority in your applicable Member State.