HODGSON RUSS, LLP
PRIVACY POLICY
Welcome to www.hodgsonruss.com (the “Site”), a website provided by Hodgson Russ LLP, a New York limited liability partnership, (the “Firm”). The Firm, which is engaged in the practice of law, respects your privacy, and this policy covers the Firm’s handling, use and disclosure of information collected from you through the Site or other sources in the ordinary course of the Firm’s business, including the provision of legal services.
Information obtained by the Firm in the course of representing our clients may be subject to or protected in ways not covered by this Privacy Policy, including the attorneys’ professional duty of confidentiality, the attorney-client privilege, the attorney work product doctrine, judicial protective orders, and other legal privileges or protections.
1. Acceptance
You should review this policy carefully, and be sure you understand it, prior to using the Site or otherwise providing any information to the Firm. Your use of the Site, providing any information to the Firm or any other indication of your assent is deemed to be acceptance by you of this policy. If you do not agree to this policy, you should not use, and should immediately terminate your use of, the Site and not otherwise provide any information to the Firm. For purposes of this Section, accessing the Site only to review this policy is not deemed to be use of the Site.
2. Data Privacy Framework
Some information collected by the Firm may relate to individuals in the European Union, United Kingdom or Switzerland. The European Union, United Kingdom and Switzerland have adopted and approved, or are in the process of approving, requirements for the protection of certain information. In order to satisfy such requirements, the Firm will comply with, and has self-certified to the U.S. Department of Commerce under, (a) the E.U.-U.S. Data Privacy Framework Principles, including the Supplemental Principles and Annex I (the “E.U.-U.S. DPF”), (b) the U.K. Extension to the E.U.-U.S. DPF, and (c) and the Swiss-U.S. Data Privacy Framework Principles, including the Supplemental Principles and Annex I (the “Swiss-U.S. DPF”) regarding the Firm’s protection, transfer and use of personal data transferred from the European Union, the United Kingdom and Switzerland, as applicable, to the United States (the “Framework”). In particular, the Firm has self-certified that, with respect to all Framework Information, it will adhere to the Framework’s Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, and recourse, enforcement and liability.
For purposes of enforcing compliance with the Privacy Framework, the Firm is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission, which can impose sanctions consisting of administrative orders and civil penalties. Hodgson Russ is listed at https://www.dataprivacyframework.gov/s/participant-search as having certified to its compliance with the Framework. Additional information regarding the Framework can be found at the U.S. Department of Commerce’s website at https://www.dataprivacyframework.gov/s/.
3. Information
In this policy:
(a) “Analytical Information” means all Non-Personal Information collected by the Firm, either directly or through the use of third parties acting on the Firm’s behalf, using cookies (or other tracking technologies) and server log files (including, but not limited to, (i) your search terms, (ii) your computer’s access date and time, browser, connection speed, Internet service provider, language, location, manufacturer, operating system and other visit details, and (iii) whether or not you opened e-mail messages and other electronic communications from the Firm, and if you did, the times they were opened);
(b) “California Information” means all Personal Information that relates to residents of California and that is covered by the California Consumer Privacy Act (as amended by the California Privacy Rights Act or otherwise), the California Online Privacy Protection Act, or any other applicable California privacy or data protection law, including any amendments thereto (collectively, the “California Laws”);
(c) “Collected Information” means all (i) Personal Information and (ii) Non-Personal Information;
(d) “Framework Information” means all Personal Information that relates to individuals in the European Union, United Kingdom or Switzerland and that is covered by the Framework.
(e) “Non-Personal Information” means all information collected by the Firm, whether electronically or manually, through (i) the Site, (ii) e-mail messages and other electronic communications that you may send to the Firm, and (iii) other sources in the ordinary course of the Firm’s business, that is not Personal Information (including, but not limited to, any Analytical Information);
(f) “Personal Information” means all information collected by the Firm, whether electronically or manually, through (i) the Site, (ii) e-mail messages and other electronic communications that you may send to the Firm, and (iii) other sources in the ordinary course of the Firm’s business, that relates to an individual and that identifies, or can be used in conjunction with other readily-accessible information to identify, such individual (including, but not limited to, name, e-mail address, physical address, and phone number); and
(g) “Sensitive Framework Information” means all Framework Information of an individual concerning the (i) health data, (ii) racial or ethnic origin, (iii) political opinions, (iv) religious or philosophical beliefs, (v) union membership, (vi) genetic data, (vii) biometric data or (viii) the sex life or sexual orientation of such individual.
4. Collected Information
Except for any Collected Information obtained automatically through the Site as set forth in this policy, no Collected Information is obtained from you, unless it is voluntarily provided. For example, the Firm collects the full name, email address, postal address, phone number, and other identification and contact data from individuals requesting legal services (clients), or from consumers who sign-up to receive legal alerts and similar publications (website visitors and potential clients). Regardless of the method used to obtain Collected Information, the Firm will only collect and retain Personal Information in a manner that is consistent with the purposes for which it is provided and, except for Framework Information, the Firm’s other legitimate business purposes (including, but not limited to, marketing). You are responsible for obtaining any approvals, authorizations, consents, permissions and permits that are required in connection with your providing the Firm with any information (including, but not limited to, any information relating to a third party). The categories of California Information collected by the Firm are set forth in the Firm’s California Privacy Disclosures and are accessible as set forth in Section 16.
5. Choice
You may refuse to provide any information to the Firm at any time by terminating your use of the Site, or in all other cases not involving use of the Site, by notifying the Firm as set forth in Section 24. If you refuse to provide any information when requested to do so by the Firm or the Site, you may not be able to access, or otherwise receive the benefits of certain services from the Firm or features of the Site.
6. Electronic Communications
Whether or not you have previously sent the Firm an e-mail message, you consent to the Firm’s sending you e-mail messages and other electronic communications (a) in connection with your use of the Site, (b) in the ordinary course of business, or (c) for any other legitimate business purpose (including, but not limited to, marketing). Since the Firm endeavors to send e-mail messages and other electronic communications only to individuals desiring to receive them, you can unsubscribe to such e-mail messages or other electronic communications at any time by contacting the Firm as set forth in Section 24 or by following the directions contained in such e-mail messages or other electronic communications. Any request to unsubscribe to e-mail or other electronic communications will likely be effective within 48 hours after your request is received by the Firm.
7. Analytical Information
This Site utilizes essential cookies to save your site preferences and nonessential cookies for analytical purposes as described in the second paragraph of this Section. When you access the Site, you will be asked to accept the Firm’s use of nonessential cookies for such purposes. If you do not accept the Firm’s use of nonessential cookies, you should click “Don’t Accept” before browsing the Site. By clicking “Don’t Accept” you will disable our use of nonessential cookies; this will not disable our use of essential cookies. In addition, your browser may provide you with the ability to block cookies as well as the ability to delete already existing essential and nonessential cookies. If you block or delete cookies you may not be able to receive the benefits of certain features of the Site. You can customize your cookie selection at any time in Cookie Settings.
Analytical Information will only be used by the Firm (a) to record your use of the Site, (b) to diagnose problems with the Site, (c) to improve the Site and make the Site more useful to you and other users, (d) to assist in the Firm’s marketing efforts, and (e) for other legitimate business purposes of the Firm. The Firm will collect Analytical Information either directly or through third parties acting on its behalf. For example, Google Analytics is one of the third parties used by the Firm to collect Analytical Information. These third parties may combine and use data collected through your use of the Site with data they collect over time and across different websites for their own purposes. You can learn about how Google collects and processes data at https://policies.google.com/technologies/partner-sites. You can also learn about the controls Google offers to manage the collection and use of your information at https://policies.google.com/privacy. The Firm recommends that you review these other entities’ privacy policies or notices at the links provided above.
8. Framework Information and Sensitive Framework Information
You may choose (opt out) whether your Framework Information is (i) disclosed to a third party or (ii) used for a purpose that is materially different from the purpose(s) for which it was originally collected. In addition, any provision of this policy to the contrary notwithstanding, in the unlikely event the Firm collects any Sensitive Information, your explicit consent (i.e. among other things, you must “opt in”) will be obtained before such Sensitive Framework Information is (a) disclosed to a third party or (b) used for a purpose other than the purposes for which such Sensitive Framework Information was originally collected. If at any time, you wish to opt-out of the processing of your Framework Information or Sensitive Framework Information, you may contact the Firm as set forth in Section 24.
9. Security
The Firm will protect client information from loss, unauthorized access, alteration, destruction and disclosure as required by the Rules of Professional Conduct (or other rules) applicable to the Firm’s attorneys and all laws applicable to the Firm; provided, however, that, except as provided in the immediately following sentence, the Firm will, at a minimum, use commercially reasonable efforts to protect Personal Information from loss, unauthorized access, alteration, destruction and disclosure. Certain Personal Information posted by you on the Site may be accessible to the general public, and the Firm is not responsible for protecting such Personal Information from loss, unauthorized access, alteration, destruction, disclosure or use. For example, if you participate in a public forum on the Site, any information disclosed by you when doing so may be available to the general public. Also, since no transmission of information over the Internet or electronic storage of information is completely secure, it is possible that Collected Information could be lost, accessed, altered, destroyed, disclosed or used without authorization, even if the Firm uses such commercially reasonable efforts. In providing information to the Firm, you must assume the risk that Collected Information could be lost, accessed, altered, destroyed, disclosed or used without authorization.
10. Use of Collected Information
All Collected Information may be used by the Firm for any legitimate business purpose, including, but not limited to, representing our clients, conducting business operations, operating the Site and responding to requests for information. However, in the case of Framework Information, and only to the extent required by the Framework, the Collected Information may only be used if such purpose is (a) not incompatible with the purposes for which Framework Information has been collected by the Firm or (b) has been subsequently authorized by you. If the Firm expressly states in this policy or in another writing that any Collected Information will only be used for a specific purpose, the Firm will only use it for such purpose, unless you subsequently consent to its being used for another purpose. The purposes for which California Information is collected by the Firm are set forth in the Firm’s California Privacy Disclosures and are accessible as set forth in Section 16.
11. Transfer/Sharing of Collected Information
Any Collected Information obtained by the Firm, whether or not for a specific purpose, may be transferred to third parties designated by the Firm (including, but not limited to, any affiliates, distributors, sub-contractors or vendors engaged by the Firm to perform administrative and technological functions) for any purposes for which the Firm could use such Collected Information. However, in the case of Framework Information, and only to the extent required by the Framework, the Firm will (a) notify you of such transfer, (b) require third parties to limit the use of Framework Information to such purposes, (c) require third parties to provide at least the same level of privacy protection as is required by the Framework, (d) take commercially reasonable steps to ensure that third parties effectively processes Framework Information in a manner consistent with the Firm’s obligations under the Framework, (e) require third parties to notify the Firm if such third party makes a determination that it can no longer meet its obligation to provide the same level of privacy protection as required under the Framework, (f) take commercially reasonable steps to stop and remediate unauthorized processing of Framework Information upon notice of such, and (g) provide a summary or representative copy of the relevant privacy provisions of its agreements with such third party to the U.S. Department of Commerce (or its designee) upon request. In cases of onward transfers to third parties of Framework Information, the Firm is potentially liable for the failure of such third party to comply with the Framework. The categories of third parties with whom the Firm discloses California Information are set forth in the Firm’s California Privacy Disclosures and are accessible as set forth in Section 16.
The Firm may also at any time, in its sole discretion, transfer any Collected Information (including, but not limited to, a computer’s Internet protocol addresses), whether or not you furnished such Collected Information for a specific purpose, to (a) comply with, or as permitted by, any applicable law or lawful request of a government or public authority for purposes of satisfying, among others, national security and law enforcement requirements, (b) cooperate with law enforcement, and other third parties, in investigating a claim of fraud, illegal activity or infringement of intellectual property rights, (c) protect the rights, property or legitimate business interests of the Firm or a third party, or (d) transfer such Collected Information to a third party acquiring all, or substantially all, of the Firm’s assets. If Collected Information is so transferred, the Firm will have no responsibility for any action of the third party to whom or which such Collected Information is transferred.
12. Deletion
Upon your sending a request to the Firm as set forth in Section 24, the Firm will delete Framework Information or California Information from its servers (and servers of third parties acting on behalf of the Firm) when it is no longer required for the purposes for which it was collected and processed, unless the Firm is legally permitted or required to continue holding it, or it is relevant to the Firm’s interests in any pending dispute, judicial proceeding, government investigation or has another lawful basis to continue holding it.
13. Inaccurate Framework Information
The Firm does not warrant or represent that any Collected Information will be accurate or error-free. Upon your request, the Firm will grant you access to your Framework Information in the possession of the Firm solely for the purpose of correcting such Framework Information that is inaccurate or has been processed in violation of the Framework, except when the burden or expense of providing such access would be disproportionate to the risks to your privacy or where the rights of a third party would be violated. If you desire access to any Framework Information for such purpose, you must contact the Firm in writing as set forth in Section 24.
14. Third-Party Sites
The Site may contain links to, or be accessible from, websites provided by third parties (individually a “Third-Party Site”). Your use of a Third-Party Site will be subject to its terms of use and other provisions, and you are responsible for complying with such terms and other provisions. This policy does not cover the privacy policies or practices of any Third-Party Site, and the Firm is not responsible for any information you submit to, or otherwise collected by, any Third-Party Site. The Firm is only responsible for Collected Information obtained by it (a) through your authorized use of the Site or (b) from other sources in the ordinary course of its business. You should consult each Third-Party Site for its privacy policy or practice before submitting any information to, or otherwise using, such Third-Party Site.
15. Children
The Site is not intended for children under 13 years of age. However, if a parent or guardian of a child who is under 13 years of age discovers that Personal Information of such child has been submitted to the Firm through the Site without the parent’s or guardian’s consent, the Firm will use commercially reasonable efforts to remove such information from the Site and the Firm’s servers at the parent’s or guardian’s request. To request the removal of such Personal Information, the parent or guardian must contact the Firm as set forth in Section 24, and provide all information requested by the Firm to assist it in identifying the Personal Information to be removed.
16. California Residents
The Firm does not sell or share any California Information. A comprehensive description of the Firm’s online and offline information practices pertaining to California Information, and an explanation of the rights afforded to California residents pursuant to the California Laws, can be found at the following link: California Privacy Disclosures. The Firm does not discriminate against a California resident for exercising any right of such resident under the California Laws, except as permitted under the California Laws.
17. Applicable Law
This policy shall be governed by, and construed and interpreted in accordance with, (a) in the case of Framework Information, and solely to the extent required by the Framework, (b) in the case of California Information, and solely to the extent required by the California Laws, the California Laws, (c) any other applicable privacy law solely to the extent required by such law, and (d) in all other cases, the laws of the state of New York, without regard to its principles of conflict of laws. If there is any conflict or inconsistency between any provision of this policy and any provision of any applicable law, the latter shall control.
18. Complaints
Any complaint by you regarding any Collected Information, or otherwise relating to this policy, the Framework, must first be submitted to the Firm as set forth in Section 24, and the Firm must be given a reasonable opportunity of not less than 45 days to investigate and respond to your complaint. Upon the Firm’s completing such investigation and so responding, the Firm and you must then attempt, in good faith, to promptly resolve any remaining aspects of your complaint. Except for complaints relating to Framework Information, if any aspect of your complaint remains unresolved after an additional reasonable period of time of not less than 45 days, you may commence litigation against the Firm in connection with the unresolved portion of your complaint only in a court located in Erie or Niagara Counties, New York, and having subject matter jurisdiction over your complaint. You consent to any such court’s being a proper venue for your complaint, and waive any objection thereto based on inconvenience. If your unresolved complaint relates to Framework Information, you may utilize the process described in Section 19 to resolve your complaint.
19. Independent Recourse Mechanism
If you have a complaint that relates to Framework Information, and you and the Firm were unable to resolve your complaint pursuant to the process described in Section 18, the Firm offers an independent recourse mechanism to resolve your complaint. The independent recourse mechanism offered by the Firm is more fully described at this link: http://www.dataprivacyframework.gov/s/. In order to access the independent recourse mechanism, you must file a complaint with the International Centre for Dispute Resolution of the American Arbitration Association (“ICDR”), and after receiving your complaint, ICDR will resolve the dispute between you and the Firm by following the ICDR Dispute Resolution Procedures located at this link: https://go.adr.org/dpf_irm.html. All fees of ICDR in connection with your use of its independent recourse mechanism described in this Section will be paid by the Firm.
If all other options available to you for resolving a complaint under the Framework are unsuccessful, and upon satisfaction of certain other conditions, you can lodge your complaint with the Framework Panel, which is an “arbitration mechanism” of three neutral arbitrators. Any decision of the Framework Panel will be binding on the Firm and enforceable in certain courts of the United States.
20. Entire Agreement
Except as set forth in this Section, this policy contains the entire agreement, and supersedes all prior oral and written agreements, proposals and understandings, between you and the Firm, with respect to Collected Information. If you use the Site or otherwise have business dealings with the Firm, such use or dealings will be subject to this policy, plus any other agreement between the parties that is applicable thereto. To the extent there is any conflict or inconsistency between any provision of this policy and any provision of such other agreement, the former shall control.
21. Severability
Whenever possible, each provision of this policy shall be interpreted to be effective and valid under applicable law. If, however, any such provision shall be prohibited by or invalid under such law, it shall be deemed modified to conform to the minimum requirements of such law, or if for any reason it is not so modified, it shall be prohibited or invalid only to the extent of such prohibition or invalidity without the remainder of such provision, or any other provision of this policy, being prohibited or invalid.
22. Revisions
The Firm may revise any provision of this policy from time to time by posting the revised provision on the Site so long as such revision does not conflict with the Framework or any applicable law. Any such revision will take effect immediately upon such posting, and will apply to all Collected Information obtained by the Firm after such posting. It is your responsibility to periodically check this policy on the Site for revisions to this policy. The latest version of this policy will always be the one posted on the Site.
23. Expenses
Except as provided in this policy, or any applicable law, you are solely responsible for all fees and disbursements of any attorney or other advisor retained by you in connection with enforcing your rights under this policy.
24. Contact Information
If you (a) desire to make a California Request, or (b) have any questions or complaints, desire additional information, or need to notify the Firm of anything, regarding this policy, please promptly contact the Firm using one of the methods set forth below:
Regular mail to: Hodgson Russ LLP
Attn: Privacy Partner
140 Pearl Street, Suite 100
Buffalo, New York 14202
United States of America
E-mail to: privacy@hodgsonruss.com; or
Toll-free phone number: (800) 724-5184
This Privacy Policy was last updated on March 29, 2024.