The website som.com is operated by Skidmore, Owings & Merrill LLP (“we” or “us”) on behalf of the relevant SOM family of companies. This means that, on behalf of the relevant SOM family of companies, we are responsible for, and control the processing of, your personal information.
We take your privacy very seriously and we ask that you read this policy carefully as it contains important information on:
- the personal information we collect about you;
- what we, and the SOM family of companies, do with your information; and
- who your information might be shared with.
II. Information which we may collect about you
We collect personal information about you when you contact us via our website.
We may collect the following personal information:
- full name;
- associated organization or institution;
- email address;
- machine identifiers (such as IP addresses);
- behavioral data (see ‘Cookies and Tracking’ section below); and
- any other contact information you voluntarily provide (for example in your correspondence with us through our ‘Contact Us’ page).
III. Our approach to information security
The SOM family of companies have policies and procedures in place to make sure that only authorized personnel can access the information, that information is handled and stored in a secure and sensible manner and all systems that can access the information have the necessary security measures in place. To accomplish this, all employees, contractors and sub-contractors have roles and responsibilities defined in those policies and procedures.
To make sure all of our employees understand these responsibilities they are provided with the necessary training and resources. In addition to these operational measures, we also use a range of technologies and security systems to reinforce the policies. Audits to identify areas of non-compliance are routinely scheduled. Additionally, all areas of the organization are regularly monitored and measured to identify problems and issues before they arise.
The security of your personal information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. It is possible that we might be forced to disclose your personally identifiable information in response to legal process or when we believe in good faith such disclosure is required by law, such as in response to a court order, a law enforcement agency request, in response to a subpoena, or in response to an administrative agency’s request.
IV. How we use your information
We will collect your personal information for the following purposes:
- to identify you and manage any of your inquiries submitted by you via our contact form;
- to conduct research, statistical analysis and behavioral analysis;
- to detect and prevent fraud;
- to customize our website and its content to your particular preferences;
The personal data that you provide is collected by Skidmore, Owings and Merrill LLP and may be transferred to a related Skidmore, Owings & Merrill entity located inside or outside the European Economic Area (EEA) for marketing, press requests, academic requests, recruiting and other business inquiries. The personal information that you provide and we transfer between the SOM family of companies is legally collected for the aforementioned internal purposes and we will ensure that the transfer of your personal information will comply with applicable laws and regulations that will appropriately safeguard your privacy rights.
V. Your rights
i. For EU Residents
For the purposes of the Data Protection Act 2018 and the EU General Data Protection Regulation 2016/679, Skidmore, Owings & Merrill (Europe) LLP are the “controller”. If you live in the EU, you have the following rights with respect to how we collect and use your data. In order to process any of the requests listed below, we may need to verify your identity for your security. In such cases your response will be necessary for you to exercise this right.
The right to access information we hold about you
At any point you can contact us to request that the information we hold about you as well as why we have that information, who has access to the information and where we got the information. Once we have received your request we will respond within 30 days.
The right to correct and update the information we hold about you
If the data we hold about you is out of date, incomplete or incorrect, you can inform us and we will ensure that it is updated.
The right to have your information erased
If you feel that we should no longer be using your data or that we are illegally using your data, you can request that we erase the data we hold. When we receive your request, we will confirm whether the data has been deleted or tell you the reason why it cannot be deleted.
The right to object to processing of your data
You have the right to request that the SOM family of companies stops processing your data. Upon receiving the request, we will contact you to tell you if we are able to comply or if we have legitimate grounds to continue. If data is no longer processed, we may continue to hold your data to comply with your other rights.
The right to ask us to stop contacting you with direct marketing
You have the right to request that we stop contacting you with direct marketing. In order to process your request we may need to verify your identity for your security.
The right to data portability
You have the right to request that we transfer your data to another controller. Once we have received your request, we will comply where it is feasible to do so.
In those cases where we need your consent to hold your information, we will ask you to check a box on any form requiring consent. By checking these boxes you are stating that you have been informed as to why the SOM family of companies is collecting the information, how it will be used, for how long it will be kept, who else will have access to it and what your rights are as a data subject.
If you have any queries about this policy, need further information on the SOM family, how long we keep your personal information, on our information security policy, wish to lodge a complaint, or for other inquiries please contact [email protected] You can make a complaint to us by contacting us at [email protected] or to the data protection supervisory authority – in the UK, this is the Information Commissioner’s Office, at https://ico.org.uk/.
ii. For California Residents
The California Consumer Privacy Act of 2018 (“CCPA”) provides California residents (referred to as “Consumers”) with certain rights discussed below. Consumers may contact SOM regarding any of these rights by email at [email protected]; by mail at SOM, One Maritime Plaza, San Francisco, California, Attention: Robert DeMillo, Chief Technology Officer; or by telephone at 833-386-0261. An online portal for Consumers to submit a request to exercise a right is under development. SOM will respond within a reasonable time following receipt of a verified Consumer request, in any event, within the time period specified by law.
Consumers exercising their rights will be required to complete a questionnaire and submit a proof of identity and residency in California. Verification of identity will require, at a minimum, two (2) forms of government issued identification (such as a passport and driver’s license) and (1) form of proof of residency (such as a utility bill) showing residency in California at the time the request is made. SOM may request additional information it deems necessary or desirable to verify the identity of a person making a request under the CCPA for specific personal information. All information requested during the verification process shall be used solely for verification of identity and residency.
Consumers have the right to designate an agent to act on their behalf. Consumers wishing to do this and agents acting on behalf of Consumers should contact SOM as provided above.
SOM does not sell personal information as defined under the CCPA.
Consumers have the right to:
- Request to Know. You have the right to obtain a copy of the personal information and the categories of personal information we hold about you by contacting us as directed above.
- Request to Delete. You have the right to request that we delete your personal information by contacting us as directed above.
- You have the right to receive SOM’s services on equal terms regardless of whether you exercise your rights under the CCPA.
This section sets out how we process your personal data for marketing purposes.
We may periodically send promotional emails about our services or other information which we think you may find interesting using the name and email address that you provided via the website inquiry form, or that you have otherwise provided to a member of the SOM family of companies. In this context, from time to time, we may use your information to contact you for marketing purposes by email. If you are a European resident, you can opt out of receipt of these emails at any time by contacting [email protected] Please note that we will keep a record of your request to unsubscribe from our marketing material to ensure we do not market to you in the future.
The SOM family of companies may pass your details to third parties where this is necessary for the administration of our marketing – for example see references to MailChimp and Constant Contact in the ‘Sharing Your Information’ section below.
Sharing your information
The SOM family of companies may pass the personal data collected to third parties where this is necessary for the functioning of our website or for marketing purposes. These third parties include:
We use Logiforms to administer certain functions on our website, for example entries submitted on our ‘Contact Us’ page. All of your personal information will be stored in a secure central database in the cloud and transmitted securely across networks. This information will be accessible only to those who are authorized to view it. For any one user, this will include administrators working for the SOM family of companies, and who has been pre-authorized to access the data for the purposes of marketing, press requests, academic requests, recruiting and other business inquiries. This means that users who have the permissions will be able to see the information you have provided us via our website.
- Google Analytics / Facebook Pixel
We use Workday to administer applications submitted via our careers page. Please note that when accessing this page, you will be redirected to a Workday website and your use of such will be subject to separate policies. Please contact us at [email protected] for further information in relation to how we link from our website to Workday for job applicants.
- Mailchimp and Constant Contact
For marketing purposes and to stay in touch with you, we may sometimes use third party automated email distribution providers such as MailChimp and Constant Contact. We will only add you to a marketing distribution list if we have the legal basis to send you marketing material (see ‘Marketing’ section above). All personal data uploaded to these platforms is protected and will not be shared with further parties.
VII. Cookies and Tracking
- recognize you whenever you visit this website;
- obtain information about your preferences, online movements and use of the internet;
- carry out research and statistical analysis to help improve our content, products and services and to help us better understand our customer requirements and interests;
- target our marketing and advertising campaigns more effectively by providing interest-based advertisements that are personalized to your interests; and
- make your online experience more efficient and enjoyable.
We will need you to enable cookie usage on your website browser in order for us to use the cookies on our website provided by Logiforms, Google Analytics and Facebook Pixels (see the ‘Sharing your information’ section above).
How to turn off cookies
If you do not want to accept cookies, you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of this website. For further information about cookies and how to disable them please go to the Information Commissioner’s webpage on cookies: https://ico.org.uk/for-the-public/online/cookies/.
Changes to this policy