Orrick Cookie Notice

Last Updated: September 22, 2020

Unless otherwise expressly stated, terms in this Cookie Notice have the same meaning as defined in our Privacy Notice.

SCOPE OF NOTICE

This Cookie Notice supplements the information contained in our Privacy Notice by explaining how Orrick, Herrington & Sutcliffe, LLP, its affiliates and subsidiaries (collectively, “Orrick,” “we,” “us,” “our”) and our business partners and service providers use cookies and related technologies in the course of managing and providing our online services and our communications to our users. It explains what cookies are and how we use them, as well as users’ rights to control our use of them.

WHAT ARE COOKIES AND RELATED TECHNOLOGIES

Cookies are small data files, which are downloaded to an individual’s browsing device (such as a computer or smartphone) when they visit a website. Cookies allow us and our third-party partners and providers to collect certain information about an individual’s interactions with our email communications, websites and other online services. We and our third-party partners and providers may also use other, related technologies to collect this information, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”).

WHAT WE COLLECT WHEN USING COOKIES

We and our third-party partners and providers may use cookies to automatically collect certain types of usage information when an individual visits or interacts with our email communications, websites and other online services. For example, we may collect log data about an individual’s device and its software, such as IP address, operating system, browser type, date/time of visit, and other similar information. We may collect analytics data or use third-party analytics tools such as Google Analytics to help us measure usage and activity trends for our online services.

HOW WE USE THAT INFORMATION

Cookies do lots of different jobs, like helping website operators understand how their website is being used, letting a user navigate between pages efficiently, remembering a user’s preferences, and generally improving browsing experience.  Cookies can also help ensure the advertisements an individual sees online are more relevant to their interests.

WHAT TYPES OF COOKIES ARE USED BY ORRICK?

The types of cookies used on Orrick’s websites can generally be put into one of the following categories: strictly necessary; analytical or performance; functional; and targeting:

Strictly Necessary Cookies These cookies are essential to making Orrick’s websites work. They enable core functionality such as security, network management and accessibility. Without these cookies, services that are necessary for an individual to use a site, such as accessing secure areas or remembering the information inputted into a webform, are not available. These cookies do not track browsing history on non-Orrick websites. The legal basis for our use of strictly necessary cookies are our legitimate interests, namely being able to provide and maintain our website.
Analytical or Performance Cookies These cookies collect information about how the number of visitors to our websites and online services, and to see how visitors move around our websites and online services when they are using them. This helps us to improve the way our websites and online services work, for example, by ensuring that users are finding what they are looking for easily. Information collected from these cookies may be aggregated and used on an anonymous basis. The legal basis for our use of analytical/performance cookies is an individual’s consent.
Functional Cookies These cookies enable a website to remember information that changes the way the website behaves or looks, such as preferred language or the region that an individual is accessing our website from. The legal basis for our use of functional cookies is an individual’s consent.
Targeting Cookies

These cookies record an individual’s visit to our website, the pages they have visited and the links they have followed. They are used to track visitors across our websites. We use this information to make our website and the marketing messages we send to an individual more relevant to their interests. We may also share this information with third parties who provide a service to us for this purpose. The legal basis for our use of targeting cookies is an individual’s consent.

Please see the Interest Based Advertising section below for more information.

 

The list of some of the specific cookies which are most frequently used by Orrick may be found in the Cookies Used By Orrick annex below.

HOW LONG WILL COOKIES STAY ON A BROWSING DEVICE

The length of time a cookie will stay on a browsing device depends on whether it is a “persistent” or “session” cookie.  Session cookies will only stay on a device until the individual stops browsing.  Persistent cookies stay on a browsing device until they expire or are deleted (i.e. after an individual has finished browsing).  Details of “persistent” and “session” cookies set on Orrick websites can be found in the Cookies Used By Orrick annex below.

FIRST- AND THIRD-PARTY COOKIES

“First-party cookies” are cookies that belong to Orrick and that Orrick places on a device.  “Third-party cookies” are cookies that another party places on a browsing device through an Orrick website.

Third-party cookies set on an Orrick website may provide a service or function to Orrick, however, we are not always in control of how the third-party uses these cookies.  We recommend checking the third-party’s website for more information about how they use cookies.  Details of third-parties that set cookies through Orrick websites can be found in the Cookies Used By Orrick annex below.

CHOICES ABOUT COOKIES

If an individual prefers not to accept cookies, most browsers will allow them to: (i) change their browser settings to notify them when they receive a cookie, which lets them choose whether or not to accept it; (ii) disable existing cookies; or (iii) set their browser to automatically reject cookies. The following links may be helpful:

Cookies that are placed on an individual’s browsing device by a third-party can be managed through their browser (as described above) or by reviewing the third-party’s website for more information about cookie management and how to “opt-out” of receiving cookies from them. Some third-parties may use cookies to help gather information about an individual’s browsing activity so that they can deliver advertising to them on other websites relevant to their interests.

HOW WE USE TRACKING TECHNOLOGIES IN OUR EMAILS

Our emails may contain tracking pixels that identify if and when an individual has opened an email that we have sent them, how many times they have read it and whether they have clicked on any links in that email. This helps us measure the effectiveness of our marketing email campaigns, provide more relevant emails to an individual’s interests and to know if an individual has opened and read any important administrative emails we have sent them.

An individual may set their email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether they have accessed our emails and performed certain functions with it.

Some browsers also give the option of downloading and installing extensions that block pixels and other tracking technologies.

INTEREST-BASED ADVERTISING

Please refer to the Interest Based Advertising section of our Privacy Notice for information regarding our interest-based advertising practices and your choices in regard to these practices.

CONTACT US

Please contact us by email at [email protected] with any questions or comments regarding this Cookie Notice.


ANNEX
COOKIES USED BY ORRICK

Last Updated: September 22, 2020

The following tables and information set out the cookies which are most frequently used on Orrick websites. It also provides details of third-parties that set cookies through Orrick websites.

The table and details of cookies used by us may be updated from time to time, so please check back on a regular basis for any changes.

Strictly Necessary

Cookie Name

First- or Third-Party Cookie

Persistent or Session Cookie

Purpose cookie is used for

Host

ASP.NET_SessionId

First

Session

The cookie is used to remember preferences and settings throughout the browsing period and as a user moves between web pages on the site.

orrick.com

dotcom3public#lang

First

Session

Used to track the language context of the user.

orrick.com

OptanonAlertBoxClosed

First

Persistent – expires after 365 days

This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and, in some cases, only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan.

orrick.com

OptanonConsent

First

Persistent – expires after 365 days

This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered.

orrick.com

__cfduid

First

Persistent – expires after 30 days

Cookie associated with sites using CloudFlare, used to speed up page load times. According to CloudFlare it is used to override any security restrictions based on the IP address the visitor is coming from. It does not contain any user identification information.

orrick.com

__cfduid

Third

Persistent

This domain is owned by Cloudflare, a USA based company providing technology to improve web page loading speeds for high traffic websites.

cloudflare.com

__cfduid

Third

Persistent

Helps detect malicious visitors to our websites and minimizes blocking legitimate users. It collects and anonymizes End User IP addresses using a one-way hash of certain values so they cannot be personally identified.

The _cfduid cookie does not:
- allow for cross-site tracking,
- follow users from site to site by merging various _cfduid identifiers into a profile, or
- correspond to any user ID in a Customer’s web application.

siteimproveanalytics.com

__cfduid

Third

Persistent – expires after 4036 days

This domain is owned by OneTrust, a privacy management software which helps organizations achieve compliance with global regulations.

onetrust.com

Analytical or Performance Cookie

Cookie Name

First- or Third-Party Cookie

Persistent or Session Cookie

Purpose cookie is used for

Orrick Website Using Cookie

_gat_UA-nnnnnnn-nn

First

Session

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

orrick.com

nmstat

First

Persistent – expires after 1000 days

This cookie name is associated with the website analytics service provided by SiteImprove. It enables site owners to gather usage statistics about their websites.

orrick.com

SC_ANALYTICS_GLOBAL_COOKIE

First

Persistent – expires after 2914638 days

This cookie name is associated with the Sitecore Content Management System as is used for web analytics to identify repeat visits by unique users.

orrick.com

_ga

First

Persistent – expires after 730 days

This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default, it is set to expire after 2 years, although this is customisable by website owners.

orrick.com

hsfirstvisit

First

Session

This cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics.

orrick.com

_gid

First

Persistent – expires after 1 day

This cookie name is associated with Google Universal Analytics. It appears to store and update a unique value for each page visited.

orrick.com

_gat

First

Session

This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.

orrick.com

_gat_UA-78628664-20

First

Session

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

orrick.com

siteimproveses

Third

Session

This cookie is used purely to track the sequence of pages a visitor looks at during a visit to the site. This information can be used to reduce user journeys, and enable visitors to find relevant information quicker.

6975.global.siteimproveanalytics.io

AWSELB

Third

Session

Used to distribute traffic to the website on several servers in order to optimise response times.

6975.global.siteimproveanalytics.io

JSESSIONID

Third

Session

This domain is controlled by New Relic, which provides a platform for monitoring the performance of web and mobile applications.

nr-data.net

Functional Cookies

Cookie Name

First- or Third-Party Cookie

Persistent or Session Cookie

Purpose cookie is used for

Orrick Website Using Cookie

ASP.NET_SessionId

Third

Session

Lawcruit is a service of Micron Systems, used for certain recruiting listings.

lawcruit.micronapps.com

BNI_LAWCRUIT_persistence

Third

Session

Lawcruit is a service of Micron Systems, used for certain recruiting listings.

lawcruit.micronapps.com

_p_hfp_client_id

Third

Session

Elfsight is used to embed content in certain web pages.

apps.elfsight.com

__cfduid

Third

Persistent – expires after 3672 days

Elfsight is used to embed content in certain web pages.

elfsight.com

smcx_0_last_shown_at

Third

Session

 

www.orrick.com

SM_COOKIE

Third

Persistent – expires after 60 days

This domain is owned by Survey Monkey, a USA based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website.

widget.surveymonkey.com

SM_COOKIE

Third

Persistent – expires after 60 days

This domain is owned by Survey Monkey, a USA based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website.

widget.surveymonkey.com

__cfduid

Third

Session

Helps detect malicious visitors to our websites and minimizes blocking legitimate users. It collects and anonymizes End User IP addresses using a one-way hash of certain values so they cannot be personally identified.

The _cfduid cookie does not:
- allow for cross-site tracking,
- follow users from site to site by merging various _cfduid identifiers into a profile, or
- correspond to any user ID in a Customer’s web application.

embed.ly

__cfduid

Third

Session

This domain is owned by Hubspot. This particular domain for the company ensures that all HubSpot features and functionality are added to the site correctly.

hs-scripts.com

testcookie

Third

Session

Used to test whether the browser accepts cookies. Deleted immediately after creation.

view.ceros.com

__cfduid

Third

Session

This domain is owned by Hubspot. This company provides a range of online marketing and sales technology and services.

hubspot.com

orrick.vuture.net_VxSessionId

Third

Session

Used by Vuture to uniquely identify your visit so that the other Vuture cookies set out in the policy can function correctly.

orrick.vuture.net

__cfduid

Third

Session

This domain is owned by HubSpot. This particular domain for the company ensures that all HubSpot features and functionality are added to the site correctly.

hs-analytics.net

vuid

Third

Persistent – expires after 730 days

This domain is owned by Vimeo. The main business activity is: Video Hosting/Sharing.

vimeo.com

attr_multitouch

Third

Persistent – expires after 365 days

This domain is owned by Survey Monkey, a U.S.-based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website.

surveymonkey.com

ep201

Third

Session

This domain is owned by Survey Monkey, a U.S.-based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website.

surveymonkey.com

ep203

Third

Persistent – expires after 3732 days

This domain is owned by Survey Monkey, a U.S.-based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website

surveymonkey.com

ep202

Third

Persistent – expires after 3732 days

This domain is owned by Survey Monkey, a U.S.-based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website

surveymonkey.com

CX_215360196

Third

Persistent – expires after 365 days

This domain is owned by Survey Monkey, a U.S.-based business. Third party cookies associated with this domain are usually related to survey and questionnaire functionality in a website

surveymonkey.com

Targeting Cookies

Cookie Name

First- or Third-Party Cookie

Persistent or Session Cookie

Purpose cookie is used for

Orrick Website Using Cookie

BE_CLA3

First

Persistent – expires after 37200 days

BrightEdge. Enables data aggregation, analysis and report creation to assess marketing effectiveness and provides solutions toward SEO/SEM or website performance.

orrick.com

BE_CLA3

Third

Persistent – expires after 37200 days

BrightEdge. Enables data aggregation, analysis and report creation to assess marketing effectiveness and provides solutions toward SEO/SEM or website performance.

orrick.com

intEmailHistoryId

Third

Persistent – expires after 2914638 days

Used by the Vuture platform to uniquely identify you if you click on an Orrick web page from an email marketing communication from Orrick. The cookie records the pages you visit on the Orrick website and time spent on the page.

orrick.vuture.net

cerosdomaintracking

Third

Persistent – expires after 365 days

Used to identify a unique visitor with a random UUID.

ceros.com

cerosexperiencetracking

Third

Persistent – expires after 365 days

Used to remember how the user first navigated to the experience, we store the initial referrer.

ceros.com

lang

Third

Session

This domain is owned by LinkedIn, the business networking platform. This sub-domain is connected with LinkedIn's marketing services that enable website owners to gain insight into types of users on their site based on LinkedIn profile data, to improve targeting.

ads.linkedin.com

lang

Third

Session

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain.

dms-src.linkedin.com

__cfduid

Third

Session

This domain appears to be owned by Drawbridge Inc. which provides a platform to enable advertisers to track users across multiple devices.

adsymptotic.com

cerosexperiencetracking

Third

Persistent – expires after 365 days

Used to remember how the user first navigated to the experience, we store the initial referrer.

ceros.com

lang

Third

Session

This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations, that is primarily used for tracking and targeting. Twitter does not currently provide information on the use of specific cookies.

cdn.syndication.twimg.com

cf_ob_info

Third

Session

Used to speed up caching & CDN and DNS, DDoS protection and security.

p.adsymptotic.com

cf_use_ob

Third

Session

Used to speed up caching & CDN and DNS, DDoS protection and security.

p.adsymptotic.com

li_sugr

Third

Persistent – expires after 90 days

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

GPS

Third

Persistent – expires after 2914639 days

YouTube is a Google-owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

youtube.com

cerosexperiencetracking

Third

Persistent – expires after 365 days

Used to remember how the user first navigated to the experience, we store the initial referrer.

ceros.com

bcookie

Third

Persistent – expires after 2914638 days

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

lidc

Third

Persistent – expires after 1 day

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

NID

Third

Persistent – expires after 2914638 days

This domain is owned by Google, Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue, however, is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organizations based on such interest profiles as well as aligning adverts to the content on the pages where its customer's adverts appear.

google.com

NID

Third

Persistent – expires after 183 days

This domain is owned by Google, Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue, however, is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer's adverts appear.

google.com

U

Third

Persistent – expires after 90 days

This domain appears to be owned by Drawbridge Inc. which provides a platform to enable advertisers to track users across multiple devices.

adsymptotic.com

cerosexperiencetracking

Third

Persistent – expires after 365 days

Used to remember how the user first navigated to the experience, we store the initial referrer.

ceros.com

test_cookie

Third

Session

This domain is owned by DoubleClick (Google). The main business activity is: DoubleClick is Google’s real time bidding advertising exchange.

doubleclick.net

test_cookie

Third

Session

This domain is owned by DoubleClick (Google). The main business activity is: DoubleClick is Google’s real time bidding advertising exchange.

doubleclick.net

IDE

Third

Persistent – expires after 730 days

This domain is owned by DoubleClick (Google). The main business activity is: DoubleClick is Google’s real time bidding advertising exchange.

doubleclick.net

IDE

Third

Persistent – expires after 390 days

This domain is owned by DoubleClick (Google). The main business activity is: DoubleClick is Google’s real time bidding advertising exchange.

doubleclick.net

VISITOR_INFO1_LIVE

Third

Persistent – expires after 2914639 days

This cookie is used as a unique identifier to track viewing of videos.

youtube.com

YSC

Third

Session

YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

youtube.com

bscookie

Third

Persistent – expires after 2914638 days

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

lang

Third

Session

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

UserMatchHistory

Third

Persistent – expires after 30 days

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

cerosexperiencetracking

Third

Persistent – expires after 365 days

Used to remember how the user first navigated to the experience, we store the initial referrer.

ceros.com

_ga

Third

Persistent – expires after 730 days

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

UID

Third

Persistent – expires after 720 days

This domain is owned by ScorecardResearch (comScore). The main business activity is: Advertising. The cookies in this domain have lifespans of 2 years.

scorecardresearch.com

lissc

Third

Persistent – expires after 365 days

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

UIDR

Third

Persistent – expires after 720 days

This domain is owned by ScorecardResearch (comScore). The main business activity is: Advertising. The cookies in this domain have lifespans of 2 years.

scorecardresearch.com

_gat

Third

Session

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com

JSESSIONID

Third

Session

This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason, it is classified as a primarily tracking/targeting domain.

linkedin.com