Ankura Consulting Group LLP and its subsidiaries (collectively “Ankura”, “we,” or “us”) are the controllers of personal data provided to us by data subjects. We also act as data processors when providing certain services to our business clients.
Ankura adopts this notice to provide transparency to individuals about the Personal Data we collect, how that data is used and how Ankura complies with data protection laws such as the General Data Protection Regulation (“GDPR”) and California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the GDPR or CCPA have the same meaning when used in this notice.
If you have any privacy concern or questions about how your personal data is used, please feel free to contact us.
You can find our contact details in the last section of this notice.
Ankura provides management consulting and expert services to businesses. You can find a list of our services here.We operate globally through our different legal entities. The location of our offices may change from time to time, but we maintain a link to a listing of Ankura’s current office locations and contact information here.We are data controllers and data processorsAnkura is the data controller of information collected through this website or as provided by you when you otherwise interact with us. Ankura also serves as a data processor when we provide services and perform work for our business clients. Ankura’s services are delivered as requested and directed by our clients. The client remains the data controller of personal information provided to Ankura as necessary to perform the service. There are certain circumstances where our subsidiaries may also be data controllers or data processors, for instance when you engage us for the provision of services, but we will inform you of these circumstances in advance.How to contact usIf you want to exercise your data protection rights, have any questions, or need further information about this Privacy notice or the processing of your Personal Data by Ankura, please contact us by email at firstname.lastname@example.org.We also have appointed a Data Protection Officer that you can contact at email@example.com.
This privacy notice applies to information collected through the website, when you apply for a job position online, or when you otherwise interact with us. We have other privacy policies that apply in certain circumstances, such as when personal data is provided to us by a client and Ankura is acting as a data processor. We are also committed to complying with local legal requirements in jurisdictions where we offer services.
This Privacy Notice applies to:
We have a separate policy for how we process personal data from our employees. If a service or a data collection has its own specific privacy and security provisions, then these provisions – not this privacy notice – applies.
This Privacy Notice is at all times subject to applicable local law requirements.
We collect information from different sources depending on the context of your interactions with Ankura, for instance when you visit our website, when applying for a job position, or when engaging our services.
We collect information and data from you in various ways, including:
Information received directly or indirectly from you:
Or from third-party sources:
Depending on the relationship you have with Ankura and where you are located, we collect and use different types of personal data, according to local laws.
“Personal Data” as used herein means all information that can directly or indirectly identify you or other individuals.
We collect your name, email, title, company, postal address, telephone number or other information that you voluntarily choose to provide to us for event registration, or to send you marketing information as requested.
If you apply for a position at Ankura, we will collect information including, but not limited to, your name, address, telephone number, employment history, education, reference information, salary expectations, work permit/visa requirements, and other information that you choose to provide to us.
When providing names and contact information of third-party references in connection with applying for a position with Ankura, you represent that you have obtained permission from your references to provide us with their personal information. Any providers we engage during the screening process will be vetted to ensure they have the appropriate privacy and security practices in place.
If you don’t provide us with all the requested information, we may not be able to consider your job application.
Additionally, as permitted by applicable local law and when you authorize us through a separate consent, we will collect special categories of personal data, such as your social security number, or information necessary to complete a background check.
When we have or are developing a business relationship, we collect business contact information, such as: name, title, organization, contact information and email address from you or from your employees or representatives, including areas of interest and potential and professional focus for purposes of identifying future opportunities to work together.
When receiving or providing services, we also collect payment information, conflict checks and credit reference information (including background checks when appropriate and according to local laws).
If you do not provide us with the information required, we may not be able to do business with you.
When providing services to clients, in addition to collecting business contact information, we will process various documents, files, or other data using software or hardware tools at the request of our clients. The data we process on behalf of our clients may contain personal data, and special categories of personal data.
The receipt and processing of this type of information and the appropriate data protection measures are defined on a case-by-case basis through a risk analysis and/or through a separate agreement with each of our clients.
The information we collect may be combined with information from outside records (e.g., demographic information, navigation information, additional contact information) that we have acquired in accordance with law. For example, if you work at a law firm but we don’t know your title, we may go to the firm’s website or a social media site to confirm your title.
We do not use automated decision-making systems.
The purposes for which we collect and use your personal data may vary depending on the type of relationship you have with us, such as if you are a website visitor, one of our clients, or an applicant for a job position with us.
When it is necessary for entering into or the performance of a contract:
To comply with applicable laws:
For our legitimate interests in:
We also use your personal data based on your consent, in these cases you can withdraw that consent at any time:
We retain personal data only for the length of time required to fulfill the purpose for which the data was collected or to comply with legal obligations.
According to our retention policy, we retain Personal Data as necessary for the duration of the purposes outlined in this Privacy Notice and to comply with our legal obligations. The retention period depends on the context in which we process personal data, for instance:
We will delete or block your Personal Data after these retention periods, unless you authorize us to keep it, or when it is necessary to enforce our agreements or resolve disputes.
These retention terms apply unless agreed upon otherwise in a contract with Ankura or as required by applicable local law.
At times, we disclose your personal data to our Ankura subsidiaries and to our vendors to help accomplish our business objectives and provide you services. There are other circumstances where we are required by law to disclose personal data to public bodies or judicial authorities.
Information collected may be shared with:
We may share the information we collect about you with our Ankura affiliates and subsidiaries. Contact details of Ankura’s offices are available here.
The information may be disclosed (i) to provide services (e.g. consultancy services); (ii) to help detect and prevent potentially illegal acts, violations of our policies, fraud and/or data security breaches; and (iii) to guide decisions about our Ankura services, website, and communications.
We may disclose your information to service providers under contract who help with our business operations including, sub-contractors supporting the delivery of professional, technology, or communication services. Any providers or third parties we engage will be vetted to ensure they have the appropriate privacy and security practices in place.
We will disclose your information to other third parties to whom you explicitly ask us to send your Personal Data. On this Site, you may have opportunities to express interest in or register for other services such as registering for events and webinars organized by third parties. If you do, we will provide your Personal Data to those third parties, to fulfill your request.
We may disclose your Personal Data as required by law, such as to comply with lawful requests by law enforcement and public authorities or courts, when we believe in good faith that disclosure is necessary to comply with such legal process, or to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. We will use reasonable endeavors to notify you before doing so, unless we are legally restricted from so doing.
Ankura may in the future reorganize or transfer all or part of its businesses, which may result in the transfer of your Personal Data to new Ankura entities or third parties through which the whole or a part of the Ankura businesses will be carried out. If Ankura becomes insolvent, enters receivership or any similar or equivalent event occurs, parts of the business may be sold or transferred to a third party. This change of control may result in the transfer of your Personal Data to a third party that will carry out the business.
You can opt-out of your marketing communications anytime.
You can opt-out of receiving our newsletter or other marketing communications by following the opt-out instructions in our commercial e-mails or by contacting firstname.lastname@example.org.
If you are located outside the United States and you interact with our Website or provide Ankura Personal Data, then your information may be transferred to the United States. Only in certain circumstances, your personal data will be transferred to other jurisdictions. However, we provide appropriate safeguards to ensure the same level of protection of your personal data.
If you are located outside the United States and you interact with our Website or provide us Personal Data, then your information may be transferred to Ankura affiliates in the United States or to our third-party service providers located in the United States. In certain circumstances, for instance, when it is necessary for the provision of services, we may transfer your personal data to the Ankura offices or service providers based in other jurisdictions. In these situations, we ensure compliance with local data protection requirements.
If you are based in the European Economic Area (EEA), the United Kingdom or Switzerland, we use Standard Contractual Clauses (SCC) to ensure appropriate safeguards when we transfer your personal data to the US or to other jurisdictions that do not provide an equivalent level of protection. These contracts can be provided on request. In exceptional situations where it is not possible to use SCC or other transfer mechanisms, we rely on derogations including your explicit consent, necessity to enter into a contract with you or in your interest, or for the establishment, exercise or defense of legal claims.
If you interact with our EEA/UK offices, reside in these territories or in other locations where similar rules apply Ankura is committed to facilitate the exercise of your rights granted by the data protection laws of your country of residence.
Ankura is committed to facilitate the exercise of your rights granted by the data protection laws of your country of residence. Accordingly, some of the rights listed below will only apply in certain circumstances. You can contact us at any time to discuss any of these rights or your privacy concerns at email@example.com.
All these requests should be submitted as follows:
The California Consumer Privacy Act (CCPA) provides California residents with specific rights regarding their personal information. This section describes the CCPA rights and explains how to exercise those rights. We will not discriminate against you for exercising your CCPA rights.
Right to Know
You may have the right to send us a request, no more than twice in a 12-month period, for any of the following:
Right to Delete
You have the right to request that a company delete any of your Personal Information that it has collected from you and retained, subject to certain exceptions.
For example, we may deny your deletion request if retaining the information is necessary for us to complete the transaction or service that you requested, detect security incidents or enable internal uses that are reasonable aligned with your expectations.
How to Exercise your California Privacy Rights
To exercise the right to access and/or the right to delete your personal information, please submit a verifiable consumer request to us by either:
Please, describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In order to verify a request from you exercising your rights, you will need to provide (i) your legal first and last name, (ii) email address you use to correspond with Ankura, (iii) describe your relationship with Ankura, and (iv) identify the state in which you currently reside.
Once the initial identification and verification process is complete, we will send you an acknowledgement of receipt within 10 days from receiving your request and a reference number. Any request that you submit to us is subject to an identification process to verify your identity or authority to make the request. We will endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you in writing. To exercise any of these privacy rights you can also designate another person to act on your behalf. In this case, we will need this person to provide us with a written authorization (such as a Power of Attorney). We will typically not charge a fee to fully respond to your requests. However, if we determine that the request warrants a fee according to the CCPA, we will tell you why and a cost estimate before completing your request. If you require this notice to be provided in a different format, please contact us at: firstname.lastname@example.org
Sale of Personal Information
You can contact our Data Protection Officer at email@example.com.
We take commercially reasonable precautions to try to keep all information obtained from you secure against unauthorized access and use, and we periodically review our security measures.
We are committed to processing your data in a secure manner and have implemented appropriate technical and organizational measures designed to help prevent the Personal Data we hold from being accidentally or deliberately compromised.
We maintain technical, physical and administrative security measures to try to protect the security of your Personal Data against loss, misuse, unauthorized access, disclosure or alteration. Authorized Ankura personnel and third parties will only have access to your Personal Data to the extent needed to do their job or provide their services. Despite these precautions Ankura cannot guarantee that unauthorized persons will not obtain access to your information.
Please note that any electronic communication made between us, including via the Website, may not be secure and, unless you are already a client, may not be treated as confidential. While we welcome your inquiries, please do not send us any electronic communication that contains any confidential or sensitive Personal Data.
Our Site may contain links to other third-party websites. We are not responsible for the privacy practices or the content or security of these third-party sites.
Our Site does not respond to do-not-track signals.
Our services are not directed to children
We do not knowingly collect personal data from children. If a parent or guardian becomes aware that his or her child has provided us with Personal Data without their consent, please contact us at firstname.lastname@example.org.
We reserve the right to modify this privacy notice at any time. We will duly inform you of any material changes.
This Policy was last updated on August 13, 2021.