Last Updated: April 5, 2023
Gibson, Dunn & Crutcher LLP, having its registered office at 333 South Grand Avenue, Los Angeles, CA 90071-3197, United States (“Gibson Dunn” or “we” or “us” or “our”), is a global law firm with offices located in 20 major cities around the world. We are committed to safeguarding the privacy of our clients, business partners, contacts, job applicants, website visitors, and subscribers (collectively, “you”) and to protecting the personal information you share with us.
Collection of Personal Information
How We Use Your Personal Information
Disclosure of Personal Information
Retention of Personal Information
Your U.S. State Privacy Rights
Your Rights under the GDPR/UK GDPR
Gibson Dunn processes “Personal Information” regarding (i) its clients’ representatives when using any of our legal services, (ii) users of our Site, (iii) anyone who sends us an inquiry, registers for one of our events, or subscribes to our newsletters, as well as (iv) job applicants. Personal Information generally is information that includes a personal identifier like your name, email address or physical address, phone number, IP address or device identifier, or any data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, back to a natural person, household, or device, subject to definitions and exceptions under applicable law.
Some of the Personal Information we receive may also fall under the sub-category of “Sensitive Personal Information,” or a similar term, as defined by certain laws. This information may include information such as your Social Security Number, driver’s license number, state identification card number, passport number, financial account and credit card information in combination with any required security or access code, geolocation data, and racial and/or ethnic information. We only collect and use Sensitive Personal Information in accordance with privacy laws, upon your consent where required and as necessary to fulfill business purposes. We do not use such information to infer characteristics about you, and do not sell or share Sensitive Personal Information.
We will only process your Personal Information when we have a legal basis to do so (see following section). Personal Information includes information that you provide to us, that we collect automatically, and that we obtain from third parties. This information may include the following:
Personal Information we collect to provide legal services:
We will also collect Personal Information about you indirectly from other sources, namely from our clients and interested third parties in relation to our legal services. Such Personal Information could include contact details and any other categories of Personal Information provided to us and relevant to the matter at stake.
Personal Information we collect to respond to your inquiry, to inform you about our services and events, and to send you our newsletters:
Personal Information we collect when you use the Site:
Personal Information we collect to evaluate and process your application for employment with our firm:
To Provide Our Legal Services
Gibson Dunn processes Personal Information to perform a contract with you or to take precontractual steps at your request in order to:
In addition, Gibson Dunn processes Personal Information based on its legitimate interests, which consist of:
Finally, Gibson Dunn processes Personal Information to comply with the legal obligations to which it is subject, including anti-money laundering or anti-bribery checks.
To provide you with online services and improve our Site
Gibson Dunn processes Personal Information for the performance of the contract with you in order to provide you with our services through our Site.
We process Personal Information to store cookies on your device(s) upon your consent where required, as described in our Cookie Notice.
To respond to your inquiry, to inform you about our services and events, and to send you our newsletters
Gibson Dunn processes Personal Information based on its legitimate interests, which consist of responding to your inquiries, including those sent to the contact details provided on the contact page of the Site and, where consent is not required, sending you marketing communications regarding our services and events.
To evaluate and process your application for employment with our firm
Gibson Dunn processes Personal Information in order to take precontractual steps at your request for processing your application for employment at Gibson Dunn, including to evaluate your candidacy.
To comply with applicable legal obligations
Gibson Dunn also processes Personal Information in order to comply with applicable legal obligations to which it is subject, including employment law.
We do not sell, or share for cross-context behavioral or targeted advertising purposes, as defined by certain laws, your Personal Information to any third party. We may disclose your Personal Information in the following limited circumstances:
In addition, when we share your Personal Information with the entities mentioned above, it may imply transfers of your Personal Information overseas, which may include transfers to countries outside of the EEA or the UK whose laws provide levels of protection for Personal Information that are not always equivalent to the level of protection that may be provided in your own country.
Gibson Dunn maintains appropriate technical and organizational security procedures in order to protect your Personal Information from loss, misuse, unauthorized access, disclosure or alteration, in accordance with applicable data protection and privacy laws.
In addition to such measures, Gibson Dunn maintains confidentiality policies that govern all information that any attorney or other personnel of Gibson Dunn receives in the course of their employment or association with Gibson Dunn. All attorneys and personnel are made aware of these policies and Gibson Dunn has in place procedures to train all attorneys and personnel to implement these policies. Despite our efforts, we cannot guarantee that Personal Information may not be accessed, disclosed, or altered by breach of our safeguards. You should take adequate precautions to protect your Personal Information.
Please note that the data retention period actually applied by Gibson Dunn may vary, depending on the relevant purpose as described hereinafter. In any event, Gibson Dunn may keep your Personal Information for a longer time as those described below as part of its legal obligations. In such case, we will keep your Personal Information for the duration of such legal obligations.
On the expiration of the applicable data retention periods, Gibson Dunn will delete or anonymize the relevant Personal Information.
For legal services
Gibson Dunn will keep your Personal Information for the whole duration of our legal services, extended by the applicable limitation period or as long as may be required by applicable statutory or professional retention obligations.
For online services and our Site improvements
With respect to the services provided to you through our Site, Gibson Dunn will keep your Personal Information during the period of our contractual relationship, extended by the applicable statute limitation period.
For responding to your inquiries, informing you about our services and events and sending you our newsletters
Gibson Dunn will keep your Personal Information for communication purposes until you withdraw your consent or, if you are in the EEA or the UK, for three (3) years after the last contact with you.
For your recruitment and employment
For the applicants who are hired, Gibson Dunn will keep your Personal Information in accordance with the employee notice applicable to you.
If you are in the EEA or the UK, if you do not receive an employment offer, Gibson Dunn will ask you if you want us to keep your information in order to give you the opportunity to apply for future positions. If you are a U.S. resident, information collected from applicants who do not receive an employment offer will be deleted unless required by applicable law, or unless the prospective employee has requested that Gibson Dunn keep their application on file for consideration for future positions.
Depending on the jurisdiction in which you live, you may have the following rights subject to the exceptions allowed by law, including under the California Consumer Privacy Act of 2018 (“CCPA”), the California Privacy Rights Act of 2020 (“CPRA”), the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Utah Consumer Privacy Act, and Connecticut’s Act Concerning Personal Data Privacy and Online Monitoring:
Opt out of the sale or sharing of Personal Information: Gibson Dunn does not sell or share your Personal Information, and therefore does not, and is not required to, provide this option.
To exercise your rights, please contact us at email@example.com, or call us at 1-800-266-0943.
We will first acknowledge receipt of your request within 10 business days and then provide a substantive response within 45 calendar days after its receipt. If we require more time (up to 90 days or the permitted timeframe), we will inform you of the reason and extension period in writing. If you are a Virginia, Colorado, or Connecticut resident and we deny your request, you may appeal our decision by emailing your request to firstname.lastname@example.org or calling us at 1-800-266-0943. Within 45 calendar days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision.
Only you or your authorized agent may make a verifiable consumer request related to your Personal Information. To respond to your requests, we must verify your identity.
If you are in the EEA or the UK, you have various rights in relation to the processing of your Personal Information, depending on the relevant situation. These include the following rights:
In any case, you also have the right to lodge a complaint with the competent data protection authority, in particular in the country of your habitual residence, place of work, or place of an alleged infringement if you consider that the processing of your Personal Information carried out by us infringes any applicable privacy laws.
Gibson Dunn uses “cookies” (small data files) on the Site. For detailed information about “cookies” and how they are used on the Site, please refer to the Cookie Notice.
Gibson Dunn does not knowingly collect, use, or disclose Personal Information from children. If Gibson Dunn is made aware that it has collected Personal Information from a child in a manner that is inconsistent with applicable laws, Gibson Dunn will delete this information as soon as possible.
We do not sell or share the Personal Information of any individuals and, therefore, necessarily do not sell or share the information of children of any age.
or in writing to:
Gibson Dunn & Crutcher LLP
Attn.: Office of the General Counsel
1050 Connecticut Ave., NW
Washington, DC 20036
United States of America
The local representatives for our offices in Europe are provided at: https://gdstaging.com/legal-notices/.