About Ankura

Ankura Consulting Group (collectively “Ankura”, “we,” or “us”) provides management consulting and expert services to businesses. You can find a list of our services here.

We operate globally through our different legal entities. The location of our offices may change from time to time, but we maintain a link to all current Ankura’s offices including their contact details available here.

We are data controllers and data processors

Ankura Consulting Group LLP is the data controller of information collected through this website or when you otherwise interact with us. There are certain circumstances where our subsidiaries may also be data controllers or data processors, for instance when you engage us for the provision of services, but we will inform you of these circumstances in advance.

How to contact us

If you want to exercise your data protection rights, have any questions, or need further information about this Privacy notice or the processing of your Personal Data by Ankura, please contact us by email at privacy@ankura.com.

We also have appointed a Data Protection Officer that you can contact at dpo@ankura.com.

This Privacy Notice applies to:

• All electronic communications with Ankura, including visiting our website (‘Website’);
• Personal data we receive from anyone who requests information or otherwise interact with us;
• Job applications with Ankura;
• Our marketing activities, including events and conferences;
• Our collection and use of information in the normal course of business.

We have a separate policy for how we process personal data from our employees. If a service or a data collection has its own specific privacy and security provisions, then these provisions – not this privacy notice – applies.

This Privacy Notice is at all times subject to applicable local law requirements.

We collect information and data from you in various ways, including:
Information received directly or indirectly from you:

• Online data. Through use of the Website, including any information you send to us and through our use of “cookies” – see our Cookie Policy;
• Contact and event registration. Information that you provide when you contact us, or for event registration;
• Job applications. When you apply for a job position with Ankura;
• Business relationships. When you provide or receive services from Ankura we usually collect information voluntarily from you, or from third parties, with your authorization;

Or from third-party sources:

• Information that we obtain from other third-party sources such as social media sites, company websites, and subscription-based third-party databases such as corporate research databases.

“Personal Data” as used herein means all information that can directly or indirectly identify you or other individuals.

Technical Usage Information and Analytics

When you visit our Site, we collect usage information sent to us by your computer or mobile device that tells us how you are using the Website, including information such as the browser type, IP address, user language, the operating system, unique device identifier, or location. This information is collected through the use of cookies and similar technologies. Please see the Cookie Policy for further details.

Contact information for Event Registration and to respond to inquiries

We collect your name, email, title, company, postal address, telephone number or other information that you voluntarily choose to provide to us for event registration, or to send you marketing information as requested.

If you do not provide us with all the information requested for event registration, we may not be able to respond to your request or needs.

Career Information

If you apply for a position at Ankura, we will collect information such as name, address, telephone number, resume, employment history, education, reference information, salary expectations, work permit/visa requirements, and other information that you choose to provide to us.

When providing names and contact information of third-party references in connection with applying for a position with Ankura, you represent that you have obtained permission from your references to provide us with their personal information. Any providers we engage during the screening process will be vetted to ensure they have the appropriate privacy and security practices in place.

If you don’t provide us with all the requested information, we may not be able to consider your job application.

Additionally, as permitted by applicable local law and when you authorize us through a separate consent, we will collect special categories of personal data, your social security number, or a consumer report (e.g. background check). Note that we don’t want this information or additional details, like your date of birth and financial information, in your resume.

Business information

When we have or are developing a business relationship, we collect contact business information, such as: names, titles, contact information and emails from you (if you are a natural person) or from your employees or representatives, including areas of interest and potential synergies for future projects.

When receiving or providing services, we also collect payment information, conflict checks and credit reference information (including background checks when appropriate and according to local laws).

If you do not provide us with the information required, we may not be able to do business with you.

Information related to the provision of our services

When providing services to clients, in additional to business information we will process different documents, files, software or hardware tools at the request of our clients, that may contain personal data, and special categories of personal data.

The provision of this type of information and consequences are defined on a case-by-case basis through a separate agreement with each of our clients.

Information from Other Sources

The information we collect may be combined with information from outside records (e.g., demographic information, navigation information, additional contact information) that we have acquired in accordance with law. For example, if you work at a law firm but we don’t know your title, we may go to the firm’s website or a social media site to confirm your title.

We do not use solely automated decision-making systems.

We collect and use Personal Data collected from you according to the following purposes and legal basis:

When it is necessary for entering into or the performance of a contract:

• Recruitment. We process your job application for employment management and recruitment purposes;
• Compliance with contracts and engagements. We collect personal data to perform our business functions providing consultancy services to clients, and executing contracts with our providers;
• Billing and payments; we collect data of the appropriate representatives of accounts payable or receivable

To comply with applicable laws:

• To comply with laws such as anti-money-laundering rules, fraud prevention, tax, employment and other relevant national laws;
• Courts, and law enforcement requests. Including disclosures to courts, public authorities and law enforcement;

For our legitimate interests in:

• Collecting Technical usage information and Analytics. We collect information automatically for administering and improving our Website, including analyzing the traffic patterns of our site, according to our Cookie Policy;
• Responding to inquiries and information requests;
• Providing registration for Events. We collect information necessary for the organization of events, seminars, and publications related to our different practices and services;
• Conducting Marketing activities. Our marketing activities include sending newsletters, updates, and other information and materials related to our services and events that we think will be of your business interest;
• Engaging in Business development. Building business relationships and synergies for future projects with our clients and potential clients, including business strategy decisions;
• Client Administration and management. Consolidating information relating to our clients, potential clients and service providers among Ankura’s offices for the provision of services and for business development purposes;
• Information security. Implementing security measures to protect availability, integrity and confidentiality of information processed by Ankura, and to prevent and respond to cybersecurity threats and data breaches.
• Defending our interest and legal rights. For instance, to enforce our website terms, policies and contracts with clients and providers; for the establishment, exercise or defense of legal claims;
• Business transfer. Sharing certain personal data in the context of a merger, sale, acquisition, reorganization, dissolution or other change of ownership of control;

We also use your personal data based on your consent, in these cases you can withdraw that consent at any time:

• When appropriate and permitted by applicable local laws we process special categories of personal data based on your explicit consent (for instance when you provide diet preferences or disability-related needs when you register to our events).
• Some marketing activities and events are based on your consent (for instance, when we don’t have a business relationship with you).

According to our retention policy, we retain Personal Data as necessary for the duration of the purposes outlined in this Privacy Notice and to comply with our legal obligations. The retention period depends on the context in which we process personal data, for instance:

• Technical Usage Information. Information collected automatically through the use of cookies is retained for a maximum period of 13 months, see our Cookie Policy for additional information.
• Career information. We keep your personal data up to 5 years for potential future opportunities unless you request that we delete your information sooner. If you are successful and offered an employment with Ankura, this information will be retained and transferred to your personnel file and used to manage your employment or other relationship with Ankura (e.g. to administer benefits, training, performance reviews, regulatory compliance).
• Remaining information. The rest of retention periods are determined by the purposes defined above for which the information is collected and used, for instance when it is necessary to continue providing a service or to comply with our professional obligations, taking into account applicable data protection laws, and legal requirements, including tax and anti-money laundering regulations, that may vary depending on the jurisdiction.

We will delete or block your Personal Data after these retention periods, unless you authorize us to keep it, or when it is necessary to enforce our agreements or resolve disputes.

These storage terms apply unless agreed otherwise in a contract with Ankura or in locally applicable legislation.

Information collected may be shared with:

Ankura subsidiaries

We may share the information we collect about you with our Ankura affiliates and subsidiaries. Contact details of Ankura’s offices are available here.

The information may be disclosed (i) to provide joint content and our services (e.g. consultancy services); (ii) to help detect and prevent potentially illegal acts, violations of our policies, fraud and/or data security breaches; and (iii) to guide decisions about our Ankura services, website, and communications.

Service Providers and Other Third Parties

We may disclose your information to service providers under contract who help with our business operations including, sub-contractors supporting the delivery of professional, technology, or communication services. Any providers or third parties we engage will be vetted to ensure they have the appropriate privacy and security practices in place.

Other Entities with your Consent

We will disclose your information to other third parties to whom you explicitly ask us to send your Personal Data. On this Site, you may have opportunities to express interest in or register for other services such as registering for events and webinars organized by third parties. If you do, we will provide your Personal Data to those third parties, to fulfill your request.

Social media sites

When you interact with our Website through social media sites, plug-ins or other applications, depending upon your privacy settings, this information may become public on the Internet. We cannot prevent further use of this information. You can control what data you share through privacy settings available on some social media sites. Please refer to those third-party sites’ privacy policies and terms of use to learn more about their privacy practices, which we do not control.

Legal Obligations

We may disclose your Personal Data as required by law, such as to comply with lawful requests by enforcement and public authorities or courts, when we believe in good faith that disclosure is necessary to comply with such legal process, or to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. We will use reasonable endeavors to notify you before doing so, unless we are legally restricted from so doing.

Change of Control

Ankura may in the future reorganize or transfer all or part of its businesses, which may result in the transfer of your Personal Data to new Ankura entities or third parties through which the whole or a part of the Ankura businesses will be carried out. If Ankura becomes insolvent, enters receivership or any similar or equivalent event occurs, parts of the business may be sold or transferred to a third party. This change of control may result in the transfer of your Personal Data to a third party that will carry out the business.

You can opt-out of receiving our newsletter or other marketing communications by following the opt-out instructions in our commercial e-mails or by contacting marketing@ankura.com.

If you are located outside the United States and you interact with our Website or provide us Personal Data, then your information may be transferred to Ankura Consulting Group LLP or to our third-party service providers located in the United States. In certain circumstances, for instance, when it is necessary for the provision of services, we may transfer your personal data to Ankura’s offices or service providers based in other jurisdictions. In these situations, we ensure compliance with local data protection requirements.

If you are based in the European Economic Area (EEA), the United Kingdom or Switzerland, we use Standard Contractual Clauses (SCC) to ensure appropriate safeguards when we transfer your personal data to the US or to other jurisdictions that do not provide an equivalent level of protection. These contracts can be provided on request. In exceptional situations where it is not possible to use SCC or other transfer mechanisms, we rely on derogations including your explicit consent, necessity to enter into a contract with you or in your interest, or for the establishment, exercise or defense of legal claims.

Ankura is committed to facilitate the exercise of your rights granted by the data protection laws of your country of residence. Accordingly, some of the rights listed below will only apply in certain circumstances. You can contact us at any time to discuss any of these rights or your privacy concerns at privacy@ankura.com.

• Transparency and the right to information: we provide you notice of how we use your Personal Data in our day-to-day operations at the time of collection, or as soon thereafter as possible. We also publish this privacy notice for a greater transparency.
• Right to access, and rectification: we provide you with access to your own personal data where required by applicable law. In addition, we will rectify your Personal Data when we are notified that it is inaccurate.
• Right to object, restriction of processing, erasure and withdraw consent at any time: for all marketing materials, you can opt-out anytime, and free of charge. The right to object for other processing activities, the right of erasure and restriction of processing will be balanced to ensure that these are not incompatible with local laws and regulations or other overriding rights. When we have collected your personal data with your consent, then you can withdraw it at any time.
• Right to data portability: based on your specific situation, we provide you with the right to obtain and reuse your data across different services, including the transfer of your data to you or to another third-party.
• Right to lodge a complaint with your supervisory authority: if you are not satisfied with our response or how we process your personal data you can complain to the data protection authority of your habitual residence.

How to exercise these data protection rights

All these requests should be submitted as follows:

• Opt-out of marketing communications: you can opt-out anytime by following the opt-out instructions in our commercial e-mails or by contacting us at marketing@ankura.com.
• To exercise the rest of your rights: you should send a communication in writing to privacy@ankura.com. Ankura will attend to your request in a timely manner within 30 days after receiving your request. If for any reason we need to extend this period of time, we will contact you.
• You also have the right to lodge a complaint with a supervisory authority: A list of the European authorities is available here, the contact information of the Federal Data Protection and Information Commissioner of Switzerland is available here, and the Information Commissioner’s Office in the UK is available here.

We are committed to processing your data in a secure manner and have implemented appropriate technical and organizational measures designed to help prevent the Personal Data we hold from being accidentally or deliberately compromised.

We maintain technical, physical and administrative security measures to try to protect the security of your Personal Data against loss, misuse, unauthorized access, disclosure or alteration. Authorized Ankura personnel and third parties will only have access to your Personal Data to the extent needed to do their job or provide their services. Despite these precautions Ankura cannot guarantee that unauthorized persons will not obtain access to your information.

Please note that any electronic communication made between us, including via the Website, may not be secure and, unless you are already a client, may not be treated as confidential. While we welcome your inquiries, please do not send us any electronic communication that contains any confidential or sensitive Personal Data.

Our Site may contain links to other third-party websites. We are not responsible for the privacy practices or the content or security of these third-party sites.

Our Site does not respond to do-not-track signals.

We do not knowingly collect personal data from children. If a parent or guardian becomes aware that his or her child has provided us with Personal Data without their consent, please contact us at privacy@ankura.com.

This Privacy Policy may be amended by us at any time. If we make any material changes to how we treat Personal Data, we will notify you by placing a prominent notice on the Site. The time stamp you see on the policy will indicate the last date it was revised.