Global Recruitment Privacy Notice

Last Updated: November 15, 2023

OUR APPROACH TO PRIVACY

This Recruitment Privacy Notice explains how we process your personal information when you apply for a position with us, or otherwise provide information in relation to a role or work placement at Orrick.

This Recruitment Privacy Notice is not a contract and does not create any legal rights or obligations. This Recruitment Privacy Notice is also not intended to replace other notices or disclosures we may provide to you in connection with your application for a job or eventual role with us, which will supersede any conflicting disclosures contained in this Recruitment Privacy Notice.

When we use the terms 'Orrick', 'we', 'our' or 'us', we are referring to the Orrick entity to which you submit your application and consequently acts as the data controller of your personal information. A list of Orrick entities can be found under 'Affiliates' at https://www.orrick.com/en/Privacy-Notice.

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

The types of personal information we collect, and its use, will vary depending on the nature of the position or role you are applying for and the location of the respective Orrick entity.

For applications submitted to an Orrick entity in the EU, London and Switzerland, the table in Annex II sets out the categories of personal information we collect about you and how we use that information. The table also provides the legal basis which we rely on to process your personal information. For applications submitted to Orrick entities in China, Japan, the United States and Singapore, you should refer to the relevant region-specific disclosures in Annex I.

When we collect such information from you, we will inform you if the information is mandatory or optional. If you do not provide any information which is marked as mandatory, we may be unable to process your application.

AUTOMATED PROCESSING OF PERSONAL INFORMATION

During the recruitment process, we may use artificial intelligence recruitment software to process the applications that we receive. The software will evaluate job applications against the advertised job criteria and return prioritised recommendations for the relevant position. The automated recommendations returned by the software, together with our recruitment team's evaluation of each individual candidate on their own merits, will be used to make an informed decision during the recruitment process. Our recruitment team does not reject candidates based on automatically generated recommendations and you will not be subject to a decision based solely on the automated processing of your personal information.

SOURCES OF PERSONAL INFORMATION

We generally collect your personal information directly from you when you submit your CV or application to us, or when you communicate with us in respect of an application. Where permissible and permitted by local law, we may also collect personal information about you from other parties including recruiters, executive search firms, referees, referrals from our employees or clients, information from publicly available sources (including business and employment-focussed social media platforms) and the results of any pre-employment screening checks against public or government databases.

RETENTION OF YOUR PERSONAL INFORMATION

We will store your personal information for no longer than necessary for the purposes set out in this Recruitment Privacy Notice, or as otherwise required by applicable law.

If your application is successful and you become an employee or are otherwise engaged to work for Orrick, the personal information we collect during the application process may be transferred to your personnel file and processed in accordance with the applicable Orrick Employee Privacy Notice.

If your application to an Orrick entity in the EU or the UK is unsuccessful or you decide not to accept a position that we offer to you, we will keep your personal information for 12 months, unless you consent to us retaining your personal information for no longer than 2 years, so that you may be considered for other roles which might be of interest to you.

RECIPIENTS OF PERSONAL INFORMATION

We may share your personal information with the following (as required in accordance with the uses set out in this Recruitment Privacy Notice):

Other Orrick entities: we are part of the “Orrick Group” which consists of Orrick, Herrington & Sutcliffe LLP a Californian limited liability partnership, and other undertakings that are authorised to carry the name "Orrick" and / or are otherwise connected with it. The Orrick entities, whilst separate legal entities, operate together under the "Orrick" brand and in so doing, share for example IT, administrative systems, human resource, legal and compliance responsibilities. As a result, personal information may be transferred to other entities within the Orrick Group which are involved in the processing of personal information for recruitment purposes.
Where these Orrick entities are involved in your recruitment process, they will process your personal information as controllers in the same way as described in this Recruitment Privacy Notice. This may be the case, for instance, in respect of senior level hires which require review and approval at a business unit or Orrick Group management level in addition to the local office level. The legal basis we rely on for such transfers is that the processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
Service providers: we may share your personal information with third party vendors and other service providers that perform recruitment related services for us or on our behalf, which may include recruitment agents and consultants, background screening and talent management software platforms. These providers will only process your personal information in accordance with our instructions.
Law enforcement, regulators, government bodies and other parties for legal reasons: we may share your personal information with third parties as required by law or if we reasonably believe that such action is necessary to make or defend a legal claim. The lawful basis for such disclosures is that processing is necessary to comply with a legal obligation, or necessary for our legitimate interests in complying with non-EEA and non-UK legal obligations, regulatory oversight requirements and bringing or defending legal claims.

CONSENT

We are not required to obtain your consent for most of the processing activities that we undertake in respect of your personal information. We may, however, need your consent for some uses of certain personal information. For instance, in certain circumstances, we may need your consent to use certain "sensitive" information, such as information about your health or ethnicity, in particular ways. If we need your consent, we will notify you of the personal information we intend to use and how we intend to use it.

You will never be obliged to provide consent. Where you have provided us with your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details below.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage. All personal information we collect will be stored on secure servers. Where we transfer personal information to others, we will ensure that the recipients also implement appropriate technical and organisational security measures to protect your personal information.

INTERNATIONAL TRANSFERS OF YOUR PERSONAL INFORMATION

The personal information we collect may be transferred to and stored in countries outside of the jurisdiction in which you provide it. If you are based in the UK or the EEA, please note that where necessary your personal information may be processed by other Orrick entities and service providers outside the UK and EEA. These international transfers of your personal information will be made pursuant to the following appropriate safeguards:

Adequacy: which is a formal decision made by the European Commission decisions which recognises that another country provides an equivalent level of protection for personal data as the EU; or, if you are in the United Kingdom, similar recognition that the destination country offers an equivalent level of protection under the UK Data Protection Act 2018 or regulations made by the UK Secretary of State under the UK Data Protection Act 2018.
Standard Contractual Clauses issued by the European Commission and, if you are in the United Kingdom, the approved addendum to those Standard Contractual Clauses issued under the UK Data Protection Act 2018.

The countries outside of the UK and EEA that we may transfer your personal information to include:

Destination country	Reasons for transfer	Basis for transfer under the GDPR
United States of America	This is where a number of Orrick entities are located, including our Orrick Group management team and certain technical providers.	Standard Contractual Clauses
Japan	We have an entity in Japan that may be involved in making decisions relating to certain hires.	Adequacy
China	We have an entity in China that may be involved in making decisions relating to certain hires.	Standard Contractual Clauses
Singapore	We have an entity in Singapore that may be involved in making decisions relating to certain hires.	Standard Contractual Clauses

We continually monitor the circumstances surrounding such transfers to ensure that these maintain, in practice, a level of protection that is essentially equivalent to the standard guaranteed by the EU GDPR and UK GDPR.

If you wish to enquire further about the safeguards that we use, please contact us using the details set out at the end of this Recruitment Privacy Notice.

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

Subject to applicable law, you may have certain rights in respect of the personal information that we hold about you, including:

Right of access. You have the right to access and obtain a copy of your personal information.
Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
Right to object. You have a right, in some circumstances, to object to any processing based on our legitimate interests. There may, however, be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case.

Please see the region-specific disclosures below for more information concerning applicable data protection and privacy rights. Nothing in this Recruitment Privacy Notice should be interpreted to establish data protection and privacy rights which go beyond the rights provided under applicable laws.

Before we process your request, we will need to verify your identity. We may at times need to request additional personal data from you, taking into consideration our relationship with you and the sensitivity of your request.

In certain circumstances, you are permitted to use an authorised agent to submit requests on your behalf where we can verify the authorised agent’s authority to act on your behalf. To verify the authorised agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorised agent, and a statement of authorisation for the request. Depending on the evidence provided, we may still need to contact you to confirm whether the authorised agent has permission to act on your behalf and to verify your identity in connection with the request. If we deny your request, you have the right to request an explanation of the basis for such denial.

If you wish to exercise one of these rights, please contact us using the details below.

CHANGES TO THIS NOTICE

We may update this Recruitment Privacy Notice from time to time. The most recent version can be found at https://www.orrick.com/en/Privacy-Notice.

This Recruitment Privacy Notice was last updated on 15 November 2023.

CONTACT US

If you have any questions or concerns regarding this Recruitment Privacy Notice or the processing of your personal information, please contact:

Data Protection Officer
107 Cheapside
London
EC2V 6DN
T: 44 20 7862 4623
E: [email protected]

If we are unable to deal with any issues you raise with us, you have the right to lodge a complaint to your local data protection authority.

ANNEX I
REGION-SPECIFIC DISCLOSURES

CHINA

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

Category of personal information	How we use it	Legal basis for processing
Contact and identification information, such as your name, phone number, date of birth, address, e-mail address and ID documentation.	We use this information to open and maintain applicant records.	The processing is necessary to conclude or fulfil a contract in which the individual is an interested party.
	We use this information to communicate with you as part of the recruitment process.
	We use this information to confirm your identity.
Job application information, such as position applied for, employment history, job description, responsibilities and assignments, years of service, qualifications and experience, and other information contained in your CV.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary to conclude or fulfil a contract in which the individual is an interested party.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Results of reference checks, such as verification of education, employment history and details of your nominated referees.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary to conclude or fulfil a contract in which the individual is an interested party.
	We use this information to fulfil our obligations under applicable law, regulations, legal processes or enforceable government requests.
Nationality, citizenship and right to work information, such as country of birth, government identification documents (including passports and residency permits) and, where relevant, visa information.	We use this information to determine your eligibility to work.	The processing is necessary to fulfil statutory duties or responsibilities or statutory obligations.
	We use this information to fulfil our obligations to relevant government authorities.
Interview evaluation and appraisal information, such as comments and notes made by interviewers or other Orrick employees in connection with your application.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary to conclude or fulfil a contract in which the individual is an interested party.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Financial Information: such as your previous salary (if you volunteer this information to us) or desired salary, bonus, benefits, expenses, and stock or equity grants.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary to conclude or fulfil a contract in which the individual is an interested party.
Any other information voluntarily provided by you in the course of the application process, including electronic communications with you in relation to the application process.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary to conclude or fulfil a contract in which the individual is an interested party.
	We use this information to respond to your enquiries and to monitor and improve our application process.
Website related information such as technical details about your visit to our online services contained in log files or analytics data relating to your usage and activity on our online services.	For more information, please refer to the general Privacy Notice on our website.	For more information, please refer to the general Privacy Notice on our website.

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

In accordance with applicable data protection laws, you have the following rights in respect of your personal information that we hold:

Right of access. You have the right to access and obtain a copy of your personal information.
Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
Right to object. You have a right, in some circumstances, to limit or refuse the handling of their personal information by others, unless laws or administrative regulations stipulate otherwise. Where personal information is handled based on your consent, you have the right to rescind your consent.

If you wish to exercise one of these rights, please email us at [email protected].

JAPAN

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

Category of personal information	How we use it
Contact and identification information, such as your name, phone number, date of birth, address, e-mail address and ID documentation.	We use this information to open and maintain applicant records.
	We use this information to communicate with you as part of the recruitment process.
	We use this information to confirm your identity.
	We use this information to carry out the background checks referred to below.
Job application information, such as position applied for, employment history, job description, responsibilities and assignments, years of service, qualifications and experience, and other information contained in your CV.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Results of reference checks, such as verification of education, employment history and details of your nominated referees.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to fulfil our obligations under applicable law, regulations, legal processes or enforceable government requests.
Nationality, citizenship and right to work information, such as country of birth, government identification documents (including passports and residency permits) and, where relevant, visa information.	We use this information to determine your eligibility to work.
	We use this information to fulfil our obligations to relevant government authorities.
Interview evaluation and appraisal information, such as comments and notes made by interviewers or other Orrick employees in connection with your application.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Financial Information: such as your previous salary (if you volunteer this information to us) or desired salary, bonus, benefits, expenses, and stock or equity grants.	We use this information to process and assess your application, including assessing your suitability for a role.
Any other information voluntarily provided by you in the course of the application process, including electronic communications with you in relation to the application process.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to respond to your enquiries and to monitor and improve our application process.
Website related information such as technical details about your visit to our online services contained in log files or analytics data relating to your usage and activity on our online services.	For more information, please refer to the general Privacy Notice on our website.

The entities which process personal information of individuals in Japan are:

Orrick, Herrington & Sutcliffe LLP (a Californian limited liability partnership), the Orrick Building, 405 Howard Street, San Francisco, CA 94105-2669, United States
Orrick Tokyo Law Offices (a Japanese partnership), Izumi Garden Tower, 28th Floor, Roppongi 1-6-1, Minato-ku, Tokyo 106-6028, Japan

Orrick’s Tokyo office is joint venture of the foregoing two entities.

SECURITY MEASURES

We employ a combination of policies, procedures, and technical and physical controls to protect your personal information against accidental or unlawful destruction, loss, change or damage. We regularly review and update such policies and standards. We are committed to preserving the confidentiality, integrity, and availability of all information systems and applications, including any information stored, transmitted, or processed within our information processing facilities. In furtherance of that commitment, Orrick maintains ISO/IEC 27001:2013 standards certification.

We limit access to your personal information to members of our personnel to the extent strictly necessary for the purposes specified in this Recruitment Privacy Notice, or to comply with applicable law. We also ensure that those who process your personal information on our behalf have committed themselves to respecting the confidentiality of such personal information.

We employ physical security measures to safeguard personal information, including the deployment of appropriate building security, the implementation of restricted access to all physical areas within our premises that contain personal information and the deployment of appropriate policies to ensure that access to personal information within hardcopy documents is limited in the same way it would be on an electronic I.T. system.

We have designated a person in charge for the processing of personal information, who ensures, that entities within the Orrick network process personal information in accordance with applicable laws, regulations and our internal policies.

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

In accordance with the Act on the Protection of Personal Information (APPI), we will process requests for the disclosure, correction and the suspension of processing or the deletion of your personal information.

If you wish to exercise one of these rights, please email us at [email protected].

JOINT USE OF PERSONAL INFORMATION

Personal information, in particular contact and identification information and job applicant information, may be transferred to other entities within the Orrick Group to jurisdictions outside of Japan, in particular the United States, which are involved in the processing of personal information for recruitment purposes.

All personnel within the Orrick Group are required to comply with internal policies and procedures to ensure that we:

process personal information for a specific, explicit and legitimate purpose and not further processed in a manner that is incompatible with those purposes;
maintain adequate security measures for the protection of personal information;
provide regular and appropriate training to our personnel;
transfer personal information only in accordance with applicable laws;
notify to Personal Information Protection Commission of Japan and data subjects of the occurrence of major security incidents; and
comply with all other requirements of the APPI.

The name and address of the representative responsible for the supervision of the personal information subject to joint utilisation is:

Orrick, Herrington & Sutcliffe (UK) LLP
FAO: The Data Protection Officer
107 Cheapside
London
EC2V 6DN
T: 44 20 7862 4623
E: [email protected]

SINGAPORE

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

Category of personal information	How we use it
Contact and identification information, such as your name, phone number, date of birth, address, e-mail address and ID documentation.	We use this information to open and maintain applicant records.
	We use this information to communicate with you as part of the recruitment process.
	We use this information to confirm your identity.
	We use this information to carry out the background checks referred to below.
Job application information, such as position applied for, employment history, job description, responsibilities and assignments, years of service, qualifications and experience, and other information contained in your CV.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Results of reference checks, such as verification of education, employment history and details of your nominated referees.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to fulfil our obligations under applicable law, regulations, legal processes or enforceable government requests.
Nationality, citizenship and right to work information, such as country of birth, government identification documents (including passports and residency permits) and, where relevant, visa information.	We use this information to determine your eligibility to work.
	We use this information to fulfil our obligations to relevant government authorities.
Interview evaluation and appraisal information, such as comments and notes made by interviewers or other Orrick employees in connection with your application.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Financial Information: such as your previous salary (if you volunteer this information to us) or desired salary, bonus, benefits, expenses, and stock or equity grants.	We use this information to process and assess your application, including assessing your suitability for a role.
Any other information voluntarily provided by you in the course of the application process, including electronic communications with you in relation to the application process.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to respond to your enquiries and to monitor and improve our application process.
Website related information such as technical details about your visit to our online services contained in log files or analytics data relating to your usage and activity on our online services.	For more information, please refer to the general Privacy Notice on our website.

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

In accordance with applicable data protection laws, you have the following rights in respect of your personal data that we hold:

Right of access. You have the right to access and obtain a copy of your personal information.
Right of portability. You have the right, in certain circumstances, to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
Right to correction. You have the right to correct any error or omission in the personal data we hold about you.
Right to erasure. You have the right, in some circumstances, to require us to erase your personal data without undue delay if the continued processing of that personal data is not justified.

If you wish to exercise one of these rights, please email us at [email protected].

UNITED STATES

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

Category of personal information	How we use it
Contact and identification information, such as your name, phone number, date of birth, address, e-mail address and ID documentation.	We use this information to open and maintain applicant records.
	We use this information to communicate with you as part of the recruitment process.
	We use this information to confirm your identity.
	We use this information to carry out the background checks referred to below.
Job application information, such as position applied for, employment history, job description, responsibilities and assignments, years of service, qualifications and experience, and other information contained in your CV.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Results of reference checks, such as verification of education, employment history and details of your nominated referees.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to fulfil our obligations under applicable law, regulations, legal processes or enforceable government requests.
Nationality, citizenship and right to work information, such as country of birth, government identification documents (including passports and residency permits) and, where relevant, visa information.	We use this information to determine your eligibility to work.
	We use this information to fulfil our obligations to relevant government authorities.
Interview evaluation and appraisal information, such as comments and notes made by interviewers or other Orrick employees in connection with your application.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to calculate proposed salary and assessing eligibility for certain benefits.
	We use this information to monitor and improve our application process.
Financial Information: such as your previous salary (if you volunteer this information to us) or desired salary, bonus, benefits, expenses, and stock or equity grants.	We use this information to process and assess your application, including assessing your suitability for a role.
Any other information voluntarily provided by you in the course of the application process, including electronic communications with you in relation to the application process.	We use this information to process and assess your application, including assessing your suitability for a role.
	We use this information to respond to your enquiries and to monitor and improve our application process.
Website related information such as technical details about your visit to our online services contained in log files or analytics data relating to your usage and activity on our online services.	For more information, please refer to the general Privacy Notice on our website.
Equal opportunity information such as age, race, ethnicity, national origin, citizenship, sex, gender identity, sexual orientation, religion, disability or accommodation request, or marital or veteran status when you choose to provide it, but it will not be used in the hiring decision unless specifically permitted by law.	We use this information to monitor and improve our recruitment processes. In the UK, this information is anonymized and aggregated.
Basic criminal records check	We use this information to determine whether you have any unspent criminal convictions.
Basic criminal records check	We use this information to assess your character and suitability for the position.
Health Screening Information: such as symptoms information, testing information, travel information and other health-related information for screening purposes.	Protect the health and safety of our personnel and visitors to our premises

NO SALES OR TARGETED ADVERTISING

We do not sell personal information about individuals in connection with job applications, and we do not share or otherwise disclose personal information about individuals acting in their capacity as job applicants to third parties for the purpose of displaying advertisements that are selected based on personal information obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioural advertising”).

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

You may be able to exercise the following rights in relation to the personal information that we have collected about you (subject to certain limitations at law):

The Right to Access/Know. You have the right to request any or all the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity:
- The specific pieces of personal information we have collected about you;
- The categories of personal information we have collected about you;
- The categories of sources of the personal information;
- The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
- The categories of personal information we have sold or shared about you (if any), and the categories of third parties to whom the information was sold or shared; and
- The business or commercial purposes for collecting or, if applicable, selling or sharing the personal information.
The Right to Request Deletion. You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
The Right to Correction. You have the right to request that any inaccuracies in your Personal Information be corrected, taking into account the nature of the personal information and the purposes of the processing of your personal information.
The Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to engage with you in the same manner or provide the benefits and services we may provide other personnel.

If you wish to exercise one of these rights, please email us at [email protected].

ANNEX II

Orrick office	Category of personal information	How we use it	Legal basis for the processing
Belgium, France, Germany, Italy, Switzerland, UK	Contact and identification information, such as your name, phone number, date of birth, address, e-mail address and ID documentation.	We use this information to open and maintain applicant records.	The processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
		We use this information to communicate with you as part of the recruitment process.
		We use this information to confirm your identity.	The processing is necessary for compliance with a legal obligation to which we are subject.
UK		We use this information to carry out the background checks referred to below.	The legal basis for processing is as described in respect of the relevant checks listed below.
Belgium, France, Germany, Italy, Switzerland, UK	Job application information, such as position applied for, employment history, job description, responsibilities and assignments, years of service, qualifications and experience, and other information contained in your CV.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
		We use this information to calculate proposed salary and assessing eligibility for certain benefits.
		We use this information to monitor and improve our application process.	The processing is necessary for our legitimate interests, namely reviewing and updating our applications process.
Belgium, France, Germany, Italy, Switzerland, UK	Results of reference checks, such as verification of education, employment history and details of your nominated referees.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
Belgium, France, Germany, Italy, Switzerland, UK		We use this information to fulfil our obligations under applicable law, regulations, legal processes or enforceable government requests.	The processing is necessary for compliance with a legal obligation to which we are subject.
Belgium, France, Germany, Italy, Switzerland, UK	Nationality, citizenship and right to work information, such as country of birth, government identification documents (including passports and residency permits) and, where relevant, visa information.	We use this information to determine your eligibility to work.	The processing is necessary for compliance with a legal obligation to which we are subject.
Belgium, France, Germany, Italy, Switzerland, UK		We use this information to fulfil our obligations to relevant government authorities.
Belgium, France, Germany, Italy, Switzerland, UK	Interview evaluation and appraisal information, such as comments and notes made by interviewers or other Orrick employees in connection with your application.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
		We use this information to calculate proposed salary and assessing eligibility for certain benefits.
		We use this information to monitor and improve our application process.	The processing is necessary for our legitimate interests, namely assessing and managing applications for positions with Orrick.
Belgium, France, Germany, Italy, Switzerland, UK	Financial Information: such as your previous salary (if you volunteer this information to us) or desired salary, bonus, benefits, expenses, and stock or equity grants.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
Belgium, France, Germany, Italy, Switzerland, UK	Any other information voluntarily provided by you in the course of the application process, including electronic communications with you in relation to the application process.	We use this information to process and assess your application, including assessing your suitability for a role.	The processing is necessary for the performance of a contract or to take steps at your request to enter into a contract.
Belgium, France, Germany, Italy, Switzerland, UK		We use this information to respond to your enquiries and to monitor and improve our application process.	The processing is necessary for our legitimate interests, namely managing applications and improving the application process.
Belgium, France, Germany, Italy, Switzerland, UK	Website related information such as technical details about your visit to our online services contained in log files or analytics data relating to your usage and activity on our online services.	For more information, please refer to the general Privacy Notice on our website.
UK	Equal opportunity information such as age, race, ethnicity, national origin, citizenship, sex, gender identity, sexual orientation, religion, disability or accommodation request, or marital or veteran status when you choose to provide it, but it will not be used in the hiring decision unless specifically permitted by law.	We use this information to monitor and improve our recruitment processes. In the UK, this information is anonymized and aggregated.	We will only process this personal information to the extent that you have given us your explicit consent to do so.
UK	Basic criminal records check	We use this information to determine whether you have any unspent criminal convictions.	The processing is necessary for our legitimate interests, namely ensuring compliance with our obligations to our regulator.
UK	Basic criminal records check	We use this information to assess your character and suitability for the position.	The condition relied on for processing information relating to your criminal convictions is that set out in the Data Protection Act 2018, Schedule 1, Part 2, Paragraph 12, namely that the processing is necessary for the purposes of complying with, or assisting other persons to comply with, a regulatory requirement which involves taking steps to establish whether another person has committed an unlawful act or been involved in dishonesty, malpractice or other seriously improper conduct.
UK	Check of your eligibility to practice law against records maintained by the SRA	Where required for your role, we use this information to verify your eligibility to practice as a solicitor.	The processing is necessary to comply with a legal obligation to which we are subject.
UK	Results of financial probity checks, such as searches against the bankruptcy and insolvency register, County Court Judgments and searches against the edited version of the electoral roll. The financial probity check does not constitute a credit check.	We use this information to assess whether your financial position presents an increased risk when handling client money or sensitive data.	The processing is necessary to comply with a legal obligation to which we are subject.
UK		Where applicable for your role, we use this information to verify that your practicing certificate has not been suspended while you are an undischarged bankrupt or subject to a debt relief order.
UK	Results of checks against directorship and disqualification registers, including current and former directorships held, details of the companies, industry type and date of appointment of the relevant directorships, and any disqualifications from acting as a director.	We use this information to verify your suitability for a role and to assess potential conflicts of interest which may arise from current and past directorships or shareholdings.	The processing is necessary for our legitimate interests, namely, to assess your suitability for the role and to assess potential conflicts of interest which may arise from current and past directorships or shareholdings.
UK	Results of anti-financial crime checks, for example against sanctions lists and politically exposed persons lists.	We use this information to identify and manage our risk and exposure to bribery and corruption, money laundering, tax evasion facilitation and negative publicity.	The processing is necessary for our legitimate interests, namely risk and reputational management.
UK	Results of adverse media searches, conducted using adverse key words relating to crime, terror, fraud or other illicit activities.	We use this information to assess your character and suitability for a role.	The processing is necessary for our legitimate interests, namely, to maintain public trust and confidence in the legal services provided by the firm.

Global Recruitment Privacy Notice

OUR APPROACH TO PRIVACY

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

AUTOMATED PROCESSING OF PERSONAL INFORMATION

SOURCES OF PERSONAL INFORMATION

RETENTION OF YOUR PERSONAL INFORMATION

RECIPIENTS OF PERSONAL INFORMATION

CONSENT

HOW WE PROTECT YOUR PERSONAL INFORMATION

INTERNATIONAL TRANSFERS OF YOUR PERSONAL INFORMATION

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

CHANGES TO THIS NOTICE

CONTACT US

ANNEX IREGION-SPECIFIC DISCLOSURES

CHINA

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

JAPAN

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

SECURITY MEASURES

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

JOINT USE OF PERSONAL INFORMATION

SINGAPORE

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

UNITED STATES

PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

NO SALES OR TARGETED ADVERTISING

YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

ANNEX II

ANNEX I
REGION-SPECIFIC DISCLOSURES