Evercore Global Privacy Notice

When you visit our website we collect, use and store personal information relating to you including your IP address together with the date, time and duration of your visit. An IP address is an assigned number, similar to a telephone number, which allows your computer to communicate over the Internet. We also collect, use and store your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, information about your visit including the full Uniform Resource Locators (URL), clickstream to, through and from the website (including date and time), pages viewed, download errors, page interaction information (such as scrolling clicks) and methods used to browse away from the website. Depending on your user settings, some of this information may be collected from third party service providers that we use to operate and optimize our website, to improve your user experience and analyse website interaction. For more details about the third party services that we use in this context, please read our Cookie Policy.

You are not required to provide any other personal information to access public areas of our website.

We will collect, use and store this personal information for the purposes of:

1. operating our business;
2. physical security, network security and fraud prevention;
3. maintaining our records;
4. complying with our regulatory and legal obligations;
5. improving, enhancing or developing our services; and
6. statistical analysis and market research

We may disclose the personal information we hold about website visitors with:

1. vendors that process personal information on Evercore’s behalf;
2. professional advisors such as accountants, lawyers or other consultants; and
3. applicable regulators and other governmental agencies anywhere in the world.

Some browsers may transmit “do-not-track” (“DNT”) signals to websites with which the user communicates. We currently do not change our tracking practices in response to DNT Signals nor a common definition of “tracking,” we currently do not change our tracking practices in response to DNT settings in your browser. Our analytics vendors may collect information  about your online activities over time and across websites. This information is collected in a de-identified manner, that is not tied to a particular individual. This information is not sold or shared and is only used for our internal purposes.

Evercore’s cookie policy can be found here.

When you visit our offices, we collect, use and store images (but not sound or facial recognition) of you in public areas from CCTV footage; your location while at Evercore’s offices through access key card monitoring; contact information by completion of the visitor guest list; health information such as though the completion of the first aid accident book or temperature checks; and names and dietary preferences for catering purposes.

Most of this information will be provided by you or otherwise collected directly by Evercore. However, there may be instances where certain personal information is collected from third parties, including where we use third party services to help us maintain the security of our facilities, or where your employer provides information for the purposes of registering you to attend an event being organized by or on behalf of Evercore.

We will collect, use and store this personal information for the purposes of:

1. physical security, network security and fraud prevention;
2. complying with our regulatory and legal obligations;
3. assist in the control of infectious diseases such as the virus Covid-19;
4. operating our business; and maintaining our records.

We may disclose the personal information we hold about office visitors with:

1. vendors which process personal information on Evercore’s behalf;
2. other companies in the Evercore group;
3. professional advisors, such as accountants, lawyers or other consultants; and
4. applicable regulators and other governmental agencies anywhere in the world.

If you have had contact with Evercore, for example through emailing us or meeting a representative of Evercore, we collect, use and store limited amounts of personal information relating to you, such as your name, job title, employer organization and contact details. We also use publicly available information about you or information you have provided us with to add to Evercore’s contact database.

We will collect, use and store this personal information for the purposes of:

1. maintaining a record of contacts;
2. providing periodic business updates as described below;
3. organizing meetings between you and your Evercore representatives; and
4. sending you periodic updates about Evercore’s business, activities and opportunities, in particular, by email and post; you can opt out of receiving updates at any time by asking your Evercore business contact to remove you from updates.

This information will often be collected directly by Evercore or its representatives. However, there may be cases where we obtain your information from third parties, including via mutual business contacts or from your employing organization. We may also collect your personal information from publicly available sources, such as social media and other professional profiles.

We will share the personal information we hold about business contacts with:

1. companies which process personal information on Evercore’s behalf;
2. professional advisors, such as accountants, lawyers or other consultants;
3. other companies in the Evercore Group, including in the United States;
4. Evercore’s auditors; and
5. applicable regulators and other governmental agencies anywhere in the world.

We collect our investors’ contact details, financial account information, and other information for the purposes of:

1. complying with our regulatory and legal obligations;
2. communicating with investors (including the mailing, in physical or electronic format, of Annual Reports, AGM or EGM notices or proxy cards, or communications in relation to other corporate actions);
3. facilitating the payment of dividends; and
4. sending you periodic updates about Evercore’s business, activities and opportunities, in particular, by email and post; you can opt out of receiving updates at any time by asking your Evercore contact to remove you from such updates.

This information will often be provided to us by you. However, depending on the circumstances and the nature of your relationship with Evercore, certain information may be collected from third party sources. This includes third party service providers that we use for conducting due diligence and verification checks, and to provide IT-based services. It may also include online sources, such as third party websites and media coverage.

We share the personal information we hold about our investors with:

1. companies which process personal information on Evercore’s behalf;
2. professional advisors, such as accountants, lawyers, proxy advisors or other consultants;
3. other companies in the Evercore group worldwide;
4. Evercore’s auditors; and
5. applicable regulators and other governmental agencies anywhere in the world.

We collect, use and store a limited amount of personal information about the family members of our employees including contact details, business or place of employment, benefits entitlements, leave circumstances and certain financial holdings. This information is typically provided by our employees but in some limited cases, where connected to the administration of employee benefits, may be provided by third parties involved in providing and administering those benefits.

We collect, use and store personal information about these individuals for the purposes of:

1. monitoring for insider trading risks;
2. complying with our regulatory and legal obligations
3. Administering family-related leave for employees; and
4. Administering employee benefits.

We may disclose the personal information we hold about these individuals with:

1. vendors which process personal information on Evercore’s behalf;
2. professional advisors such as accountants, lawyers, proxy advisors or other consultants;
3. other companies in the Evercore group;
4. Evercore’s auditors;
5. Third parties involved in providing and administering employee benefits; and
6. applicable regulators and other governmental agencies anywhere in the world.

We want our alumni to stay in touch with us and connect with each other. We invite alumni to register through our alumni page to sign up for news and events. When you register with us as an alumnus/a, interact with us at events or engage in other alumni activities, we collect, use and store the personal information you provide including contact information, employment and professional information, and what types of networking events you are interested in.

We will typically collect this information directly from you but may also obtain information from third party public sources, such as social media, industry media and online professional profiles.

We collect, use and store personal information that our alumni provide for the purposes of:

1. communicating with you after you leave Evercore;
2. connecting alumni;
3. ensuring that the personal information we hold about you remains accurate and;
4. sending you periodic updates about Evercore’s business, activities, opportunities and alumni events, in particular, by email and post; you can opt out of receiving updates at any time by asking your Evercore contact to remove you from such updates.

We may disclose the personal information we hold about our alumni with:

1. vendors which process personal information on Evercore’s behalf;
2. other companies in the Evercore group; and
3. other alumni in the Evercore alumni network.

If you do not provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as advising on a particular transaction), or we may be prevented from complying with our legal obligations (such as to perform client due diligence).

All our third-party service providers and other companies in the Evercore Group are required to take appropriate security measures to protect your personal information. Except where needed for their own direct relationship with you, we generally do not allow our third-party service providers to use your personal information for their own purposes and we only permit them to process your personal information for specified purposes and in accordance with our instructions.

We will share your personal information with other companies in the Evercore Group for internal administrative purposes.

We may share your personal information with other third parties, for example in the context of the possible sale or restructuring of the business. If needed to comply with law and regulations, we will also need to share your personal information with a regulator, governmental agency or otherwise.

We will comply with applicable data protection law. This says that the personal information we hold about you must be:

1. used lawfully, fairly and in a transparent way;
2. collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
3. relevant to the purposes we have told you about and limited only to those purposes;
4. accurate and to the extent appropriate, kept up to date;
5. kept only as long as necessary for the purposes we have told you about; and
6. kept securely.

For the purposes of applicable data protection law, the Evercore company that you have dealings with is the controller of your personal information. This means that we are responsible for deciding how we hold and use personal information about you. We are required under applicable data protection law to notify you of the information contained in this privacy notice.

We have appointed a Data Protection Committee which is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the Data Protection Committee by email at [email protected] or using the contact details for your region set out below.

You have the right to make a complaint at any time to the relevant data protection authority (for details of which please click below). We would, however, appreciate the chance to deal with your concerns before you approach the data protection authority, so please contact us in the first instance.

Evercore Partners International LLP (for advisory/investment banking business) or International Strategy & Investment (UK) Limited (for research/sales business) is the controller of your personal information and so responsible for this privacy notice.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

You can contact Evercore’s Data Protection Committee from the United Kingdom as follows:

• By post at 15 Stanhope Gate, London, W1K 1LN and communications should be marked for the attention of the Data Protection Committee
• By telephone on 00 44 207 653 6000
• By email at [email protected]

Evercore GmbH is the controller of your personal information and so responsible for this privacy notice.

You have the right to make a complaint at any time to Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, the Hessian Commissioner for Data Protection and Freedom of Information for data protection issues (https://datenschutz.hessen.de/). We would, however, appreciate the chance to deal with your concerns before you approach the HBDI so please contact us in the first instance.

You can contact Evercore’s Data Protection Officer in Germany as follows:

• By post at Florian Reichert
  Scheja & Partners GmbH & Co. KG · Adenauerallee 136 · 53113 Bonn
• Contact Form: https://www.scheja-partners.de/en/contact/contact.html

Evercore Partners International LLP is the controller of your personal information and so responsible for this privacy notice.

You have the right to make a complaint at any time to the Spanish Data Protection Agency (Agencia Española de Protección de Datos (AEPD)), the Spanish supervisory authority for data protection issues (https://www.agpd.es). We would, however, appreciate the chance to deal with your concerns before you approach the AEPD so please contact us in the first instance.

You can contact Evercore’s Data Protection Committee from Spain as follows:

• By post at Paseo de la Castellana 36-38, Madrid, Spain and communications should be marked for the attention of the Data Protection Committee
• By telephone on 00 34 91 119 0584
• By email at [email protected]

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances (each a lawful basis):

1. where we need to perform the contract we are about to enter into or have entered into with you;
2. where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests; or
3. where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal basis for processing your personal information.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Evercore (Japan) Ltd is the controller of your personal information and is located at 21F, Shin Marunouchi Center, 1-6-2, Marunouchi, Chiyoda-ku, Tokyo, 100-0005, Japan. You may contact us at [email protected] for details of the representative director of Evercore (Japan) Ltd.

We may share your personal data within the Evercore Group for joint use. The categories and purposes of personal data for the joint use are in accordance with section 2 (“PERSONAL INFORMATION WE HOLD ABOUT YOU AND PURPOSES FOR WHICH WE USE IT”). The controller responsible for the joint use is Evercore (Japan) Ltd.

Under certain circumstances, under applicable data protection law, you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, or request that we transfer a copy of your personal information to another party, please contact us.

No fee usually required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

Your right to withdraw consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us at [email protected]. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

If you are a California resident, you have the right to request that we disclose what information we collect, use, disclose and sell. Specifically, you may request that we:

(1)  Disclose to you the following information covering the 12 months preceding your request:

• The categories of personal information we collected about you and the categories of sources from which we collected such Personal Information;
• The specific pieces of personal information we collected about you;
• The business or commercial purpose for collecting (if applicable) personal information about you; and
• The categories of personal information about you that we otherwise shared or disclosed, and the categories of third parties with whom we shared or to whom we disclosed such personal information (if applicable).

(2)  Delete Personal Information we collected from you.

We will respond to your request consistent with applicable law. Nonetheless, you have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

How to Make Requests
If you are a California resident, you may make a request for the disclosures described above or make a request to delete personal information we collected from you, by contacting us at:

(1) Web Request Form – linked here
(2) Toll-Free Number: 1-877-993-2673

You must provide us with enough information that we can verify your identity and that you are a California resident.  If you designate an authorized agent to make an access or deletion request on your behalf, we may require the agent to show written authorization from you and require you to verify your identity with us.

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

By law you have the right to request access to and to correct the personal information that we hold about you. If you want to review, verify, correct, or withdraw consent to the use of your personal information you may also send us an email at [email protected] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

If you are concerned about our response or would like to correct the information provided, you may contact us (see section 12 below).

For the personal information processed by us, you are entitled to the following legal rights:

• the right to obtain information regarding the processing of your personal information and to request us to explain our rules of personal information processing;

• the right to withdraw your consent to the processing of your personal information at any time. If you withdraw your consent, it will not affect the effectiveness of our processing activities based on your consent before the withdrawal. However, please note that in some cases, even if you withdraw your consent, we may still have the right to process your personal information based on other legal grounds;

• the right to access the information we hold about you and obtain a copy of such information. Evercore will advise you if access to all or part of the information cannot be given because of legal or security reasons;

• if you request us to transfer your personal information to certain designated personal information processor, we will provide the channel of transfer provided that the conditions specified by the applicable law or competent regulators are met;

• the right to request us to correct or supplement inaccurate or incomplete personal information;

• under certain circumstances, the right to request us to erase your personal information. However, please note that even if you request us to erase your personal information, we may still have the right to store such information before the expiry of the retention period specified in applicable laws and regulations;

• under certain circumstances, the right to request that we stop or restrict our processing of your personal information. There may be circumstances where you ask us to restrict our processing of your personal information, but we are legally entitled to refuse that request;

• where an automated-decision has material impacts on your rights and interests, the right to request explanation on the processing and not being subject to a decision based solely on automated processing; and

• the right to complain and report illegal personal information processing activities to competent regulators.

If you wish to exercise any of the abovementioned rights, you can do so at any time by contacting us at [email protected]. We will respond to your requests in accordance with applicable data protection laws.

If you wish to request the notification, disclosure, correction, addition or deletion, discontinuance of use, discontinuance of provision to a third party or of complaint responses in relation to your personal data, you can do so at any time by contacting us using the contact details provided under section 12 (“HOW TO CONTACT US”). We will respond to your requests in accordance with applicable data protection laws.