ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø LLP PRIVACY STATEMENT
ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø LLP (U.S.)1Ìýand its wholly owned subsidiary, ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø Law US LLC (together "ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø," “we,â€� “our,â€� and “usâ€�), is committed to protecting the confidentiality and privacy of the personal information we obtain via our websites, web-based and mobile applications, meetings and events (in-person and virtual), marketing materials and content, and other services, in each case that link to, post or otherwise refer to this Privacy Statement (collectively, “Activitiesâ€�). The following explains our practices regarding the collection, use, disclosure, and protection of personal information. By engaging in such Activities, you understand and agree to our privacy practices.
Ìý
1ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø LLP, a Delaware limited liability partnership and the U.S. member firm of the ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø global organization of independent member firms affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International Limited (“ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø Internationalâ€�), a private English company limited by guarantee. ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International and its related entities do not provide services to clients.
Ìý
1.1 Personal Information You Provide
1.1.1 Sensitive Personal Information
1.2.2 How We Gather Personal Information
2. How We Use Personal Information
2.1 Participate in Activities and Further Our Business Purposes
2.4 Personal Information Sold or Shared
3. Disclosure of Personal Information
3.2 Sale or Sharing of Personal Information
3.6 Cross-Border Collection and Transfer
3.7 Third Party Recipients of Personal Information
6. Additional Data Subject Notices
10. Changes to This Privacy Statement
We, and third-party providers engaged by us, collect personal information when you engage in Activities. The personal information we collect will depend on your relationship with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø. For example, we may collect personal information from our business clients during an engagement to provide products and services to our clients; our collection and use of such personal information is governed by our contract or engagement letter with that entity. In other cases, we may collect personal information directly from individuals that engage in our Activities. Please review theÌýAdditional Data Subject Notices in Section 6, applicable to ÀÖÓ㣨Leyu£©ÌåÓý¹Ù꿉۪s Firm Personnel, residents of California, Colorado, Connecticut, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Montana, Oregon, Texas, Utah, and Virginia, along with individuals located outside of the U.S.
Categories of Personal Information Collected
We may collect the following categories of personal information about you:
We collect the personal information that you provide voluntarily (e.g., subscribing to a newsletter or participating in a survey). For example, when youÌýregister attend a firm-sponsored event, we may collect business contact information about you such as your name, title, employer, work e-mail address, mailing address, and phone number. We may also collect information about your allergies, dietary restrictions, disabilities, and any special accommodations needed.
We only collect sensitiveÌýpersonal information when you voluntarily provide us withÌýthis information What constitutes "sensitive personal information" may vary by law, and generally includesÌýpersonal information regarding a person's race, ethnicity, political beliefs,Ìýtrade union membership, religious or similar beliefs, physical or mentalÌýhealth, disabilities, biometrics, precise geolocation, sexual orientation, criminal record, citizenship, or immigration status. Please use your discretion whenÌýproviding sensitive personal information to ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø or permitting ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø to use such sensitive personal information. Do not provide sensitive personal information toÌýÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø or permit ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø to use such sensitive personal information unless you consent to ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø's use of that sensitive personal information for itsÌýbusiness purposes.Ìý
In some instances, we and our third-party providers use cookies, web beacons, wayfinding technology, and other tracking technologies to collect certain types of personal information when you engage in Activities (e.g., web-based, or mobile applications), as well as through messages that we may exchange or through collaboration platforms.
IP Addresses. We collect an IP address when you conduct an Activity online. An IP address is a number assigned to your Internet-enabled device (including computers and mobile devices) whenever you access the Internet. It allows computers and servers to recognize and communicate with one another.
Cookie Data. We gather various information via cookies or similar web tracking technologies. Please see ourÌýCookie Preferences in Section 9Ìýfor further information.
Location Information. We may collect geographical location from your Internet-enabled device (e.g., via tracking beacons, Bluetooth, or Global Positioning System technology) in connection with certain Activities, but only if you have not disabled sharing of such information via your device. Typically, you may disable or enable sharing of such information by managing the location services preferences on your device. If you disable location services, some features of our Activities may not be available.
Cookies.ÌýWe use cookies to identify you online and gather certain personal information. Please see ourÌýCookie Preferences in Section 9Ìýfor further information.
Web Beacons.ÌýWe may use web beacons to gather certain information. A web beacon is aÌýsmall image file on a web page that can be used to collect certain informationÌýfrom your Internet-enabled device, such as an IP address, the time the content was viewed,Ìýweb browser type, and the existence of cookies previously set by the same server. You have the option toÌýrender some web beacons unusable by rejecting their associated cookies. The webÌýbeacon may still record an anonymous visit from your IP address, but cookieÌýinformation will not be recorded. If you opt to render some web beacons unusable, some features of our Activities may not be available.
Social Media Applications. Our online Activities may permit the sharingÌýof information between third party social media platforms (e.g., Facebook and LinkedIn), or allow you to use your social media platform credentials to log into and access our online Activities.ÌýThese social media platforms may collect and use personal information regarding yourÌýuse of our online Activities. Information you provide via a social mediaÌýplatform may be collected and used by the provider of that social media platform and subject to their privacy practices. We do not have control over, orÌýresponsibility for, those providers, or their use of your information.
Analytics Tools.ÌýWe use third-party usage analytics tools as part of online Activities, including Google Analytics, which may be subject to Google’s privacy policies. More information about how Google Analytics is used by ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø can be found here:Ìý.To provide website visitors with more choice on how their data is collected by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. The Add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics. The Add-on does not prevent information from being sent to us or to other web analytics services.
In some of ourÌýonline Activities (e.g., newsletters and marketing materials), we and third-party providers operating on our behalf, may monitor recipient actions such asÌýe-mail open rates through embedded links within the messages. If you wish to unsubscribe from receiving certain publications or from all ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø communications, a unique link to manage your preferences is available in the footer of our marketing messages. You may also opt out at any time by e-mailingÌýus-optout@kpmg.com.
Our online Activities may not recognize all web browser based “Do Not Trackâ€� signals. However, you may be able to modify your Internet-enabled device’s web browser settingsÌýto block all cookies or third-party cookies.
ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø understands theÌýimportance of protecting children's privacy. Our Activities areÌýnot intentionally designed for nor directed at children under the age of 18. ItÌýis our policy not to knowingly collect or maintain personal information about anyoneÌýunder the age of 18, except as may be required by applicable law or professional standards (e.g., for auditor independence checks), and where permission has been granted by a child’s parent or legal guardian (e.g., for benefits administration).
We use the personal information we collect to enable you to engage in Activities as detailed below. Among other things, thisÌýpersonal information allows us to customize your online experience;Ìýimprove the performance, usability, and effectiveness of our Activities; advertise and market our Activities; measure the effectiveness of our Activities; and generateÌýand analyze statistics about your engagement in our Activities.ÌýWe also use your personal information (i) when you expressly permit us to use it, or (ii) as required or permitted by applicable law or professional standards.
If we provide specific terms in connection with a particular request, product or service, those terms which apply to such request, product, or service, and in the event of a conflict between this Privacy Statement and those terms, the specific terms provided in connection with the request, product or service shall control.
We may use the personal information we collect to: enable you to engage in Activities; provide you with web-based and mobile applications; communicate with you; provide you with information about ÀÖÓ㣨Leyu£©ÌåÓý¹Ù꿉۪s products and services; comply with applicable laws, regulations, and/or professional standards, including for background checks for onboarding Firm Personnel and prospective clients, auditor independence, conflicts checks, anti-money laundering, and know-your-client checks; operate, maintain, and enhance any of our Activities; improve the delivery or quality of services or technology for ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø and its clients through the use of technologies, such as artificial intelligence (including, but not limited to, machine learning), internal analytics, and benchmarking; and fulfill your specific requests. For example, if you send us a message requesting information about ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø, we will use the contact information you provide, such as your e-mail address, and other personal information you provide, to respond to your request. If you send us a resume or curriculum vitae to apply online for a position with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø, we will use the personal information that you provide to match you with available ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø job opportunities.
IPÌýaddresses from which visitors appear to originate may be recorded for our ITÌýsecurity and system diagnostic purposes. This information may also be used to maintain and improve our Activities and to generate and analyze statistics about the Activities andÌýyour engagement.
We may use location data we gatheredÌýto provide you information regarding our Activities, products, and services which weÌýbelieve may be of interest to you based on your geographic location, and toÌýimprove our location-based Activities, responses to requests, products, and services. We use data from monitoring recipient actions, such asÌýe-mail open rates, to gauge user interest and to maintain andÌýimprove our online Activities.
We or our third-party providers may use data gathered via web beacons to track the effectiveness of third-party websites that provide us with recruiting or marketing services or to gather aggregate visitor statistics and manage cookies.Ìý
We or our third-party providers may also use personal information in an aggregated, deidentified or anonymized data for our legitimate business purposes detailed below, including, but not limited to, improving the delivery or quality of services or technology, and for research and development. This data does not identify you individually, but rather helps to identify trends in user preferences and behaviors.ÌýAny deidentified information will be maintained in a deidentified form and will not be re-identified.
We may use "interest-based" ads, also known as “online behavioral advertising" or “cross-context behavioral advertisingâ€� (collectively, “Targeted Advertisingâ€�). Targeted Advertising is advertising that is targeted to you based on your web browsing and app usage over time and across websites or applications. We may partner with ad networks and other advertising providers (“Advertising Providersâ€�) who serve ads on the firm’s behalf and at our discretion on third party websites and platforms. Some of these Advertising Providers may use cookies and other tracking technologies to collect information about your online activities over time and across third party websites, applications, and Internet-enabled devices to deliver Targeted Advertising based on your interests and preferences, as inferred from your browsing history. Some of these ads may be personalized, meaning that they are intended to be relevant to you based on information that ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø and its Advertising Providers collect about your visits to our websites and elsewhere.
You have the option to restrict the use of information for Targeted Advertising and to opt-out of receiving Targeted Advertising. Please seeÌýSale or Sharing of Personal Information in Section 3.2Ìýfor further information and opt-out methods.
We retain personal information only for so long as it is needed to fulfil the purpose for which it was collected as described in this Privacy Statement, including to meet business needs and comply with legal requirements, professional standards, or an individual’s request. Accordingly, the retention period may vary and depend on the firm’s retention policies.
In the past 12 months, we may have sold or shared the following categories of your personal information for conducting website analytics and Targeted Advertising:
WeÌýdisclose personal information with third parties that we engage to carry out your requests and as necessaryÌýfor our legitimate professional and business needs, and to market our products or services, including in coordination with other third parties for joint-marketing purposes, asÌýrequired or permitted by law or professional standards,Ìýor otherwise with your permission. We require them to safeguard any personal information disclosed in the same manner as we do. In most cases, the third parties work on our behalf and at our direction, as service providers, except in limited instances as described inÌýSection 3.2.
Furthermore, we may disclose aggregated or deidentified information, including reports on user demographics and traffic patterns, with certain third parties.
Legal Purposes
Our legitimate interest in the effective delivery of information and services to you, and the effective and lawful operation of our business includes:
While ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø does not sell or share any personal information collected through its online Activities for monetary consideration, we may be deemed as selling or sharing limited personal information for non-monetary consideration to certain third parties that we engage under applicable law. Specifically, our use of your IP address, information related to your Internet activity, and third-party cookie and tracking information may be provided to the firm’s Advertising Providers and analytics tool providers. Any sale or sharing of personal information is limited to our online Activities.
Please refer to theÌýChoices in Section 4Ìýto opt-out of any sale or sharing of your personal information. Alternatively, you may click the “Do Not Sell or Share My Personal Informationâ€� link on the footer of our websites to initiate a Data Privacy Request, available at:Ìý.
We may also disclose personal information in order toÌýrespond to lawful requests of government or law enforcement agencies, includingÌýto meet national security or law enforcement requirements or where disclosure is required by applicable laws, courtÌýorders, government regulations or professional rules.
In the event thatÌýthe ownership of ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø or an affiliate or their assets changes as the result ofÌýa merger, acquisition, or sale of assets, information owned or controlled byÌýÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø may be transferred to another company. Information that has been collected by ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø may also be shared inÌýconnection with the consideration, negotiation, or completion of a corporateÌýtransaction in which we are acquired by or merged with another company, or weÌýsell, liquidate, assign, or transfer all or a portion of our assets. TheseÌýdisclosures may also be needed for data privacy or security audits and/or toÌýinvestigate or respond to a complaint or security threat.
If you use social media platforms and integrated third-party provider tools to share personal information or you otherwise interact with these features, those providers may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public. Your interactions with such social media platforms and tools may be governed by the privacy policies of those providers. We encourage you to carefully read those privacy policies.
In addition, our online Activities may feature blogs, forums,Ìýcrowd-sourcing and other applications, or services (collectively, “Social MediaÌýFeaturesâ€�). The purpose of Social Media Features is to facilitate the sharingÌýof knowledge and content. Any personal information that you provide on any ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍøÌýSocial Media Feature may be shared with other users of that Social MediaÌýFeature (unless otherwise stated at the point of collection), over whom we mayÌýhave limited or no control.Ìý
We may collect personal information from or about you if you are in a jurisdiction other than the U.S. in connection with your use of ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø services. Similarly, if you are in the U.S., we may transfer outside of the U.S. the information we collect from or about you. Regardless of where you are, we may transfer certain personal information across geographical borders to ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International, other member firms affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International or to various third-party providers working on our behalf, or we may receive personal information in the U.S. or elsewhere transferred from ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International, another member Firm affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International, or an unaffiliated third party. ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø may also store personal information in a jurisdiction other than where you are based, and such jurisdiction may not provide the same level of protection for your personal information as your home country. By providing your personal information to ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø, you understand that your personal information may be collected, transferred and/or stored in a jurisdiction other than your home country. Each ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø Member Firm affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International is required to safeguard personal information in accordance with its contractual obligations and data protection legislation applicable to its provision of services. Your personal information will only be transferred if appropriate or suitable safeguards are in place.
We may share personal information as described in this Privacy Statement, including with the following categories of third parties:
Categories of Third Parties to Whom Personal Information is Disclosed
Categories of Third Parties to Whom Personal Information is Sold or Shared
Ìý
In the past 12 months, we may have sold or shared personal information to the following categories of third parties for conducting website analytics and Targeted Advertising:
We may require you to provide certain personal information in order to receive additional information about our Activities. We may also ask for your permission for certain uses of your personal information, and you may agree to or decline those uses. If you have previously opted in to particular Activities (e.g., an online newsletter), you will be able to unsubscribe at any time by following the instructions included in each communication. If you decide to unsubscribe from an Activity, we will remove your personal information and reach out to you in case we require additional information or confirmation before we can process your request.
If you have submitted personal information to us, you may have the right to request, under applicable law, that we provide you with reasonable access to your personal information, update or correct any inaccuracies in your personal information, delete your personal information, and, in any such event, we will undertake reasonable and practical efforts to comply with your request, so long as our doing so would be consistent with applicable law, our contractual requirements, our record retention policies, and/or the professional standards applicable to us.
To make aÌýData Privacy Request, please contact us by:
We have data security policies and procedures that help protect personal information from loss, misuse, alteration, destruction, and unauthorized access, disclosure, transfer, use, or modification, and we require our service providers and other third-party providers to similarly safeguard personal information. Despite those efforts, security cannot be guaranteed against all threats. We seek to limit access to your personal information to those who have a need to know, and we require those individuals to maintain the confidentiality of such information.Ìý
ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø has a comprehensive incident response program that includes procedures for incident notification, mitigation, and prevention, as applicable.
The following explains your rights under the California Consumer Privacy Act, as amended, and its regulations, (“CCPAâ€�), and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household; “sensitive personal informationâ€� is defined separately under the CCPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the CCPA.
Our collection practices, including personal information collected during the preceding 12 months, are identified inÌýSection 1.
Source of Personal Information
We may collect personal information from the following sources, including, but not limited to via applications and forms, collaboration platforms, communications, and interactions with us and through our in-person events or meetings and online Activities such as websites and mobile applications:
Purposes for Which Personal Information is Collected
We may collect or use personal information for the following purposes:
Categories of Third Parties to Whom Personal Information is Disclosed
We may share personal information as described in this Privacy Statement, including with the following categories of third parties:
Categories of Personal Information Sold or Shared
In the past 12 months, we may have sold or shared the following categories of your personal information for conducting website analytics and Targeted Advertising:
Categories of Third Parties to Whom Personal Information is Sold or Shared
In the past 12 months, we may have sold or shared personal information to the following categories of third parties for conducting website analytics and Targeted Advertising:
If you are a California resident, you may be able to exercise the following privacy rights.
Right to Know.ÌýIn the last 12 months:
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. The above rights are subject to various exclusions and exceptions under applicable laws and the firm’s record retention policies, and under certain circumstances we may be unable to implement your request.
You may provide us with an opt-out preference signal. Please seeÌýSection 9, we described the way we honor such signals to opt-out.
Where we have received your personal information through our business clients or where we are otherwise operating as a service provider, we may refer you to the business with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your child under 16, you may exercise the above rights on their behalf.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a claim through theÌý.
The following explains your rights under the Colorado Privacy Act (“CPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the CPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the CPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the CPA.
If you are a Colorado resident, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a claim through theÌý.
The following explains your rights under the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTPDPOMâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the CTPDPOM and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the CTPDPOM. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the CTPDPOM.
If you are a Connecticut resident, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may provide us with an opt-out preference signal. Please seeÌýSection 9, we described the way we honor such signals to opt-out.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Privacy Office rejects your appeal, you may further elect to submit a claim through theÌý.
The following explains your rights under the Delaware Personal Data Privacy Act (“DPDPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the DPDPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the DPDPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the DPDPA.
If you are a resident of Delaware, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf. A parent, guardian or conservator may exercise the rights on your behalf, subject to a guardianship, conservatorship, or other protective arrangements.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the Iowa Consumer Data Protection Act (“ICDPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the ICDPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the ICDPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the ICDPA.
If you are a resident of Iowa, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf. A parent, or guardian may exercise the rights on your behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the Nebraska Data Privacy Act (“NDPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the NDPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the NDPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the NDPA.
If you are a resident of Nebraska, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may provide us with an opt-out preference signal. Please seeÌýSection 9, we described the way we honor such signals to opt-out.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf. A parent, guardian or conservator may exercise the rights your behalf, subject to a guardianship, conservatorship, or other protective arrangements.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the New Hampshire Data Privacy Act (“NHDPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the NHDPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the NHDPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the NHDPA.
If you are a resident of New Hampshire, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may provide us with an opt-out preference signal. Please seeÌýSection 9, we described the way we honor such signals to opt-out.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf. A parent, guardian or conservator may exercise the rights your behalf, subject to a guardianship, conservatorship, or other protective arrangements.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the New Jersey Privacy Act (“NJPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the NJPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the NJPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the NJPA.
If you are a resident of New Jersey, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the Montana Consumer Data Privacy Act (“MTCDPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the MTCDPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the MTCDPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed andÌýSection 2.4Ìýfor the categories of personal information sold or disclosed for targeted advertising, as such terms are defined under the MTCDPA.
If you are a resident of Montana, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf. A guardian or conservator may exercise the rights your behalf, subject to a guardianship, conservatorship, or other protective arrangements.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
If you are an Oregon resident, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf. A guardian or conservator may exercise the rights your behalf, subject to a guardianship, conservatorship, or other protective arrangements.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the Texas Data Privacy and Security Act (“TDPSAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the TDPSA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the TDPSA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively. In Sections 2 and 3, we described how we use and disclose personal information. Please see the additional information below related to our “salesâ€� of personal information as that term is defined under the TDPSA, as well as our disclosures of personal information for targeted advertising.
Please seeÌýSection 3.7Ìýfor a list of categories of third-parties to whom personal information is disclosed. Also, please refer toÌýSection 2.4, for the categories of personal information sold or disclosed for targeted advertising.
If you are a Texas resident, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may provide us with an opt-out preference signal. Please seeÌýSection 9, we described the way we honor such signals to opt-out.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a complaint with theÌý.
The following explains your rights under the Utah Consumer Privacy Act, (“UCPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the UCPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the UCPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively.
If you are a Utah resident, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
Note, ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø does not “sellâ€� (as such term is defined under the UCPA) any personal information for monetary consideration.
The following explains your rights under the Virginia Consumer Data Protection Act, (“VCDPAâ€�) and our personal information practices as applicable. For purposes of this Privacy Statement, “personal informationâ€� means “personal dataâ€� that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive dataâ€� is defined separately under the VCDPA and in accordance withÌýSection 1.1.1; and other terms below have the meaning defined in the VCDPA. Our collection practices and business purposes for collecting personal information are identified inÌýSections 1ÌýandÌý3.1, respectively.
If you are a Virginia resident, you may be able to exercise the following privacy rights.
To exercise any of your rights, please contact us by:
We will respond to authorized and verified requests as soon as practicable and as required by law, including any reason for denying or restricting a request. Please note that, where we have received your personal information through our business clients or where we are otherwise operating as a processor, we may refer you to the controller with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
You may authorize someone to exercise the above rights on your behalf. If we have collected information about your minor child, you may exercise the above rights on their behalf.
The above rights are subject to various exclusions and exceptions under applicable laws, and under certain circumstances we may be unable to implement your request.
If you wish to appeal our denial of a request, you may e-mail the firm’s U.S. Confidentiality & Privacy OfficeÌýus-privacy@kpmg.comÌýto reconsider your submission. If the U.S. Confidentiality & Privacy Office rejects your appeal, you may further elect to submit a claim through theÌý.
Note, ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø does not “sellâ€� (as such term is defined under the VCDPA) any personal information for monetary consideration.
ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø provides our Activities in the U.S. and does not direct such activities to individuals that are located outside of the U.S.ÌýHowever, in certain circumstances, we do interact with or collect personal information about individuals outside of the U.S. In such circumstances, we typically collect personal information from individuals outside of the U.S. through a direct collection of that information via our Activities.ÌýHowever, in some circumstances, personal information may be transferred to us from ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International, a member firm affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International or an unaffiliated third party outside of the U.S. Where this applies, we typically receive your personal information because it is necessary to perform a contract or pre-contractual measures with you or because of our legitimate interests. If we receive personal information transferred by a member firm affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International or an unaffiliated third party, it would typically be pursuant to the appropriate foreign regulator-approved standard contractual clauses or based on another lawful basis such as described inÌýSection 7. To know more about non-U.S. residentsâ€� notices and rights, please review theÌýÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø LLP Notice of Processing.
This Privacy Statement does not govern the privacy practices concerning any current or former ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø partners, principals, employees, directors, officers, interns, and individuals engaged with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø through a third party, including contractors and contingent workers (collectively, “Firm Personnelâ€�). The collection and processing of Firm Personnel’s personal information is subject to ÀÖÓ㣨Leyu£©ÌåÓý¹Ù꿉۪sÌýÌýand in furtherance of other firm policies.
ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø complies with theÌýEU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce and as available. ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø has certified to the U.S. Department of Commerce that it adheres to theÌýEU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principlesâ€�) with regards to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principlesâ€�) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (“DPFâ€�) program, and to view our certification page, please visitÌý.
For more details, please review theÌýÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø LLP Data Privacy Framework Policy, which applies to personal information transferred from member countries of the European Economic Area, the United Kingdom (including Gibraltar), and Switzerland pursuant to the DPF.
Our Activities may contain links or refer you to other websites, applications, social media platforms, collaboration platforms, products or services maintained by ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International, other member firms affiliated with ÀÖÓ㣨Leyu£©ÌåÓý¹ÙÍø International, or by unaffiliated third parties (collectively, “Other Sitesâ€�). Other Sites are not governed by this Privacy Statement and may be governed by their own privacy notices. We are not responsible for the content or practices of these Other Sites. We encourage you to review the applicable privacy notices of Other Sites you visit before disclosing personal information.
We use ‘cookiesâ€� and related technologies as part of our online Activities to help identify you, operate our websites, enhance your experience, and conduct advertising and analysis, among other uses. Some of these cookies are optional and are only used when you have agreed to them. You can consent to all our optional cookies at once or set your preferences by (i) clicking “Manage Choicesâ€� link,Ìýaccessible via a banner pop-up when you visit our websites; or (ii) clicking the “Cookie Preferencesâ€� link, located in the footer of our websites.
For residents of the state of California, Colorado, Connecticut, Nebraska, New Hampshire, Montana, and Texas,Ìýyou may provide us with an opt-out preference signal like the Global Privacy Control (“GPCâ€�). Please be aware that your opt-out preference signal may only apply to the collection and use of information from that particular browser or device. Opting out on a particular device may not opt you out of information collection on other devices, nor may it limit cross-device sharing on those other devices. If you use different browsers on a device or multiple devices, for each browser and device you wish to opt out, you may need to individually set your preference signals to opt-out each device and browser separately.
We may modify this Privacy Statement from time to time to reflect our current personal information practices. If we make material changes to this Privacy Statement, we will notify you by revising the “updatedâ€� date at the top of this page or other appropriate means. Any modifications to this Privacy Statement will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Activities after such update indicates your acknowledgment that the modified content of the Privacy Statement applies to your interactions with us. We encourage you to periodically review this Privacy Statement to be aware of updates to our personal information practices.Ìý
If you have questions or comments about this Privacy Statement or our privacy practices, or if you have any concerns regarding compliance with this Privacy Statement, please contact the U.S. Confidentiality & Privacy Office by e-mail atÌýus-privacy@kpmg.com.