This notice relates to the processing of your personal data which has been collected by us or provided by you to us through this website. The way we process personal data will evolve over time and we will update this notice from time to time to reflect changing practices.

Controller

Arthur Cox LLP is the controller and responsible for your personal data (collectively referred to as “Arthur Cox”, “we”, “us” or “our” in this notice). Our full details are on the Contact Us page of our website.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be directly or indirectly identified. It does not include data where the identifying information has been removed (anonymised data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes your first name, last name, username or similar identifier, title and gender.
• Contact Data includes your email address and telephone number.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Profile Data includes your username and password, your interests, preferences and feedback.
• Usage Data includes information about how you use our website and services.

We also collect, use and share Aggregated Data such as statistical or demographic data. Aggregated Data may be derived from your personal data, but it does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will be used as described in this privacy notice.

As a law firm, our services are intended for adults. We do not knowingly collect personal data from children under the age of 18.

How is your personal data collected?

Personal data is collected directly from you via our website and through the third-party sources in the following ways:

Direct interactions

You may give us your Identity Data and Contact Data by filling in forms via this website. This includes personal data you provide when you:

• subscribe to our publications or notifications about events; or
• give us some feedback via the website.

Automated technologies or interactions

As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies.

Third parties or publicly available sources

We may receive personal data about you from various third parties and public sources such as Technical Data from the following parties:

• analytics providers (such as Google Analytics);
• digital content publishing platform providers (such as Foleon); and
• social media pages such as our Arthur Cox LinkedIn account (https://www.linkedin.com/company/arthur-cox/), which includes anonymised traffic data and not any information that identifies you individually.

How we use your personal data

We have set out below, in table format, a description of all the ways we use your personal data and the legal bases we rely on to do so.

Withdrawing consent

Where we rely on your consent to deliver marketing messages to you, you can unsubscribe at any time or alternatively you can Contact Us.

Sharing personal data

We may share your personal data with the categories of recipients set out below for the purposes set out in the table above.

Internally: Entities that are part of Arthur Cox and are based in Ireland, the UK and the US.

External third parties:

• Service providers acting as processors based in Europe and the US including:
  • Website hosting and IT infrastructure providers;
  • Analytics providers (Google Analytics, Hotjar);
  • Cookie consent management providers (OneTrust);
  • Digital content platform providers (Foleon); and
  • Video hosting services (YouTube).

• Third-party partners for the purposes of hosting events.
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

The types of personal data shared with third-party service providers are limited to:

• Identity Data;
• Contact Data;
• Technical Data (IP addresses, browser information, device information);
• Usage Data (anonymised information about how you interact with our website); and
• Cookie data (as described in the section on cookies below).

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International transfers

We may transfer your data outside the European Economic Area (EEA).

Whenever we transfer your personal data out of the EEA, we ensure an equivalent degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• Providing that an adequacy decision of the European Commission is in place in respect of the jurisdiction to which personal data is transferred to. For example, Commission Implementing Decision (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom and Commission Implementing Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework.
• Where there is no adequacy decision in place, we rely on standard contractual clauses approved by the European Commission to ensure appropriate safeguards for your personal data.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

Data retention

We will only retain your personal data for as long as necessary for the purposes for which that personal data is processed. Further details on retention periods are available by contacting us.

We may anonymise certain personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this anonymised information indefinitely without further notice to you.

Your legal rights

You have rights in relation to your personal data, which include the right to:

• Request access to your personal data;
• Request correction of the personal data that we hold about you;
• Request erasure of your personal data in certain circumstances;
• Object to processing of your personal data in certain circumstances;
• Request restriction of processing of your personal data in certain circumstances;
• Request the transfer of your personal data to you or to a third party in certain circumstances; and
• Withdraw consent at any time where we are relying on consent to process your personal data. Please note that this will not affect the lawfulness of any processing carried out before you withdraw your consent. Where consent is withdrawn, we may not be able to provide certain services to you and will advise you if that’s the case.

If you wish to exercise any of the rights set out above, please contact us.

You also have the right to make a complaint at any time to the Irish data protection supervisory authority, the Data Protection Commission (the “DPC”), which provides contact information on its website. We would, however, appreciate the chance to deal with your concerns before you approach the DPC so please contact us in the first instance.

Cookies

Cookies are small text files that provide information regarding the device used by a visitor. Where used, cookies are downloaded to your device and stored on your device. The table below explains the cookies this website uses and why.

How do I change my cookies settings?

• You can change your cookie preferences at any time through the Cookie Settings (which can be located via the toggle on the left bottom corner across all webpages).
• You can select “On” or “Off” for non-strictly necessary cookies. You may need to refresh your page for the settings to take effect.
• You may, at any time, delete or configure cookies by configuring your internet browser. Please visit the dedicated help sections of your browser for information on cookie settings:

To find information relating to other browsers, visit the browser developer’s website.