Privacy notice

This privacy notice explains how D’Andrea & Partners Consulting Co. LTD, as data controller, processes the personal data concerning you and your colleagues that are provided by you or third parties and/or collected by us in carry on our business.

Our main office is in Shanghai, B1701-02 Sunyoung Center, No. 398 Jiangsu Road, 200050 Shanghai – China.

1) Personal data

“Personal data” is any information that relates to you and that identifies you either directly from that information or indirectly, by reference to other information that we have access to. The personal data that we collect, and how we collect it, depends upon how you interact with us. Categories of personal data that we collect include:

• Biographical information and contacts;
• Marketing, communication preferences and related information such as feedback and survey responses;
• Billing and financial information such as billing address, bank account and payment information;
• Special categories of data such as race and ethnicity, trade union membership, information about health or information, political opinions or religious beliefs;
• Personal data that may reveal the existence of criminal convictions and criminal proceedings in progress;
• Any other data connected with working with you.

2) Collection of personal data

We collect personal data directly from you as follows:

• When you sign up to receive articles, newsletters, use a toolkit or register for one of our online services, we will ask you provide your contact and other relevant information, as well as your communication preferences;
• When you register to attend one of our events, we will ask you to provide your contact, guest and other relevant information including meal preferences;
• When we meet you during and event and/or meeting, we may collect your contact information and/or business card;
• When you use our website or one of our online services we collect information about your visit and how you interact with our website.
• When a client uses our legal services, we will ask for the information that we need to provide those services; this information includes contact details, billing information, information necessary to conduct pre-clearance checks and information relevant to the services we provide. Information provided by a client may include personal data that relates to persons whose information is relevant to the instruction; for example, when we advise on a business transaction or a regulatory investigation or represent a client in a legal dispute.
• When you apply for a job with us we will ask you for information relevant to your application. We ask all applicants to apply via our recruitment system where a specific privacy notice is available.
• If you visit one of our buildings we may collect information that we need in order to identify you and complete necessary security checks. We may also collect your image on CCTV.
• If you provide information to us about another person, you must ensure that you comply with any legal obligations that may apply to your provision of the information to us, and to allow us, where necessary, to share that information with our service providers.

3) Information collected from third parties

Most of the personal data that we collect about you will be information that you provide to us voluntarily. In some circumstances, we may also receive information from:

• our clients, when we handle personal data on their behalf;
• regulatory bodies;
• credit reference agencies;
• other companies providing services to us.

4) Data automatically collected

When you visit one of our websites, we automatically collect, store and use technical information about your equipment and interaction with our website. This information is sent from your computer to us using a variety of cookies.

5) Use of personal data

We will only use your personal data fairly and where we have a lawful reason to do so.

We are allowed to use your personal data if we have your consent or another legally permitted reason applies. These include to fulfil a contract with you, when we have a legal duty to comply with, or when it is in our legitimate business interest to use your personal data. We can only rely on our legitimate business interest, if it is fair and reasonable to do so.

We will only process special category data where the processing is necessary for the purposes of providing our client with advice regarding obligations or an individual with advice regarding their rights in the field of employment or social security; or where it is necessary to do so in order to establish, exercise or defend legal claims.

6) Data sharing and transferring

We treat your personal data with respect and do not share it with third parties except as described below.

We may disclose your personal data to DP Group offices around the world for the purpose of our internal business processes (such as administration and billing) and for the purpose of providing legal advice and services.

We may disclose personal data relating to our clients, their employees and agents to other legal specialists including barristers, mediators, arbitrators, consultants or experts engaged in a matter. We may also disclose personal data to third party law firms for the purpose of obtaining foreign legal advice.

We may share personal data with our suppliers and service providers including event organisers and partners and document production and management services.

We may share personal information when necessary with law enforcement and regulatory authorities.

We may also share your personal data when you have consented to us doing so.

7) Keeping your personal data

We do not keep your personal data for any longer than is necessary to fulfil the purpose for which we collected them, or to comply with any legal, regulatory or reporting obligations or to assert or defend against legal claims.

8) Your rights regarding your personal data

You have certain rights regarding how we use and keep your personal data, and in particular

• the right to obtain confirmation of the existence or non-existence of personal data concerning you;
• the right to be informed of:

1. the origin of the personal data;
2. the purpose and methods of data processing;
3. the identity of the data controller and the data processors;
4. have your data updated, corrected and supplemented;
5. have the processing of your personal data restricted and any unlawfully-processed data erased, made anonymous or blocked;
6. obtain, in a structured format commonly used and readable by electronic devices, the personal data provided to D’Andrea & Partners Consulting Co. Ltd, and to have the data transmitted to another data controller (known as data portability).

• the right to object in whole or in part to:

1. the processing, on legitimate grounds, of your personal data, including data relevant for the purpose they were collected;
2. the processing of your personal data for the purpose of sending advertising material and direct sales messages, and to carry out profiling and surveys, including on client satisfaction.