In this Notice, “Roland Berger,” “we,” “us” or “our” refers to the relevant Roland Berger group company depending on your relationship with us, the contract, the service used, the office visited or the website accessed. For the handling of personal information in Japan, Roland Berger Ltd. or the relevant Roland Berger entity in Japan will, in principle, act as the personal information handling business operator.

If you have any questions, comments, complaints, requests for disclosure or other rights, withdrawal of consent, or inquiries regarding provision to third parties or to third parties located outside Japan, please contact the following office.

Roland Berger Ltd.
Address: Toranomon Hills Station Tower 35th Floor, 2-6-1 Toranomon, Minato-ku, Tokyo 105-5535, Japan
Contact office: Marketing & Communications / Personal Information Protection Contact
Email: [email protected]

Global data protection inquiries may also be addressed to the data protection contact of Roland Berger Holding GmbH & Co. KGaA, Sederanger 1, 80538 Munich, Germany, at [email protected]. However, for requests under Japanese law and other inquiries concerning the handling of personal information in Japan, the Japan contact office above will serve as the primary contact.

When collecting personal information, we specify the purposes of use as clearly as possible and collect such information by lawful and appropriate means. Except where permitted by law, we use personal information only to the extent necessary to achieve the purposes of use that have been publicly announced or notified in advance.

Our services are not generally intended for children. If we need to collect personal information of a person under the age of 16, we may request the involvement or consent of a parent or other legal representative to the extent required by law or practice.

It is important that the personal data we hold about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be aware of. Please use the contact details above or keep your contact person at Roland Berger informed.

We use the personal information we collect mainly for the following purposes.

• Operating, managing and improving our websites, services, events, seminars, webinars, surveys, newsletters, publications and other information offerings
• Responding to inquiries, requests for materials, registrations, applications, complaints, requests for disclosure and other communications
• Communicating with clients, business partners, experts, applicants, visitors and other stakeholders, entering into and performing contracts, billing and payment, identity verification, credit and anti-social-force checks, legal compliance and internal administration
• Consulting work, research, analysis, studies, knowledge development, report preparation, service quality improvement and business development
• Providing information, marketing and advertising regarding products, services, events, publications, recruitment information and related matters of us or other Roland Berger group companies
• Information systems, networks, facilities, visitor management, security, accident prevention, emergency response and prevention of unauthorized use
• Responding to laws, regulations, court or administrative orders, audits, litigation and other dispute resolution matters

If we collect special care-required personal information, we will obtain the prior consent of the individual concerned except where permitted by law. If it becomes necessary to use personal information beyond the scope of the purposes of use specified at the time of collection, we will obtain the prior consent of the individual concerned except where permitted by law.

Cookies, Advertising Identifiers, Analytics and Similar Technologies

On our websites, we may use cookies, web beacons, pixel tags, advertising identifiers and similar technologies for service provision, security, analytics, convenience improvement, content optimization, advertising and marketing. These technologies may collect device information, browser information, browsing history, referrer information, access date and time, page interactions, IP addresses and other online identifiers.

Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website.

During some visits we may use software tools such as JavaScript to measure and collect session information, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse overs), and methods used to browse away from the page. We may use this information to measure website activity, to develop ideas for improving our websites and for any other purpose to the extent permitted by applicable law.

The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visiting times and other details about the use of our online offering, and may also be linked to such information from other sources.

Where required by law, if we provide personal-related information obtained through cookies or similar technologies to a third party and it is expected that such third party will acquire it as personal data, we will obtain the prior consent of the individual concerned. Where the external transmission rules under the Telecommunications Business Act apply, we will publicly announce or notify, through a cookie banner, cookie settings screen or website display, the content of the information transmitted, the recipient, the purpose of use by the recipient and other required matters.

Business Cards and General Contact Information

If you provide us with your business card or share your contact details during personal interaction — for example, at events, trade fairs, business meetings, or seminars — we record the information provided by you. This typically includes your name, company, address, email address, and telephone or fax number. We use this data to initiate and maintain business relationships, send you relevant information about our services, products, and events, and store these details securely in our Customer Relationship Management (CRM) system for efficient contact and relationship management purposes.

The processing of this data is based on your consent , the necessity of the data for initiating or fulfilling a contract, as well as our legitimate interest in networking, client engagement, and relationship maintenance. You can object to this processing or revoke your consent at any time, and we will delete your data, unless retention is required for contractual purposes or due to statutory obligations.

Newsletters, Postal Mailings, and Direct Communications

We send newsletters, print materials such as our Think:Act magazine via post, and tailored offers or updates to keep you informed about our services, publications, and events. If you register for our newsletter, either online or through other registration channels, your submission requires the provision of a valid email address along with other mandatory details including your name, company, and job title. Collecting comprehensive information allows us to deliver more personalized and relevant communications that align with your professional interests and areas of focus. After subscribing to the newsletter, you will receive a confirmation link to validate your subscription (Double Opt-In); only after this confirmation will you begin receiving our newsletter.

In addition to electronic communications, our (potential) clients also may receive our Think:Act magazine as a hardcopy sent via post. If we have your postal address within the context of a business relationship and believe the content aligns with your interests, we may send this magazine to you without requiring additional explicit consent.

Furthermore, we use the data to analyze and optimize our newsletter campaigns. For this purpose, the emails we send contain so-called web beacons or tracking pixels. These are small image files stored on our website that enable us to determine whether a newsletter has been opened and which links have been clicked. Through so-called conversion tracking, we can also assess whether a predefined action was taken after clicking on a link, such as registering for a webinar.

As part of these analyses, we also collect technical information such as the time the email was accessed, the IP address, the browser type used, and the operating system. The data obtained is used exclusively to evaluate and improve our newsletter campaigns, helping us to better tailor future content to the interests of our recipients.

information, inquiry details, event participation information, website usage information and other personal data necessary for the purposes above. The entity responsible for the management of jointly used personal data is Roland Berger Ltd. for handling in Japan, and Roland Berger Holding GmbH & Co. KGaA or the relevant Roland Berger entity for global handling.

Within Roland Berger, personal data is made available only to departments, officers and employees who need the information for the purposes described in this Notice, such as client service, marketing, event management, recruitment support, administration, compliance, security and IT operations.

Roland Berger Ltd. may jointly use personal data with Roland Berger group companies for client and business partner management, contract performance, provision and improvement of services, marketing, compliance, security, internal administration and group-wide business operations. The categories of jointly used personal data may include names, employers, departments and titles, contact details, transaction and contract information, inquiry details, event participation information and website usage information. Roland Berger Ltd. is responsible for the management of jointly used personal data in Japan.

Except where permitted by law, Roland Berger Ltd. does not provide personal data to third parties without the prior consent of the individual concerned. When personal data is provided to a third party, we will explain the recipient, the categories of personal data to be provided, the purpose of provision and other matters required by law, and obtain any necessary consent.

Roland Berger Ltd. may outsource the handling of personal data to external service providers, including IT, cloud, CRM, event management, marketing support, printing, delivery, payment and professional service providers. In such cases, we select appropriate service providers and exercise necessary and appropriate supervision by contract and other measures.

Roland Berger Ltd. may provide personal data to Roland Berger group companies, external service providers, cloud service providers and other third parties located outside Japan. In such cases, we will take measures required under the APPI, including obtaining prior consent where required, confirming that the recipient has established an appropriate system for the protection of personal data, or using another method permitted by law. Where consent is required, we will provide information on the recipient country, the personal information protection system of that country and the measures taken by the recipient.

With respect to retained personal data held by us, you may make the following requests under the APPI.

• Request for notification of the purpose of use
• Request for disclosure of retained personal data or records of provision to third parties
• Request for correction, addition or deletion where the content of retained personal data is not factual
• Request for suspension of use, deletion or suspension of provision to third parties where the data is handled in violation of law or in other applicable cases
• Request for suspension of use or other measures where there is a risk of harm to your rights and interests, including leakage of personal data

If you wish to make any of these requests, please contact the office specified in Section 1. After verifying your identity, we will respond within a reasonable period and scope in accordance with applicable law. Depending on the request, we may charge a fee as permitted by law.

We retain personal data only for the period necessary to achieve the purposes of use, the period required by contract or law, or the period necessary for dispute resolution, audits or internal administration. When the retention period expires or the purpose of use has been achieved, we will delete, erase, anonymize or suspend the use of the personal data in accordance with applicable law and internal rules.

We implement organizational, personnel, physical and technical security control measures to prevent leakage, loss, damage, unauthorized access and other risks relating to personal data. These measures include internal rules, access control, employee training, supervision of service providers, encryption, log management, vulnerability management, backups and incident response systems.

Roland Berger operates an information security management framework and applies technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. Areas of our websites where users actively input data use encrypted transmission such as TLS where appropriate.

If a leakage or similar incident involving personal data occurs and reporting or notification is required under the APPI because there is a high risk of harm to individual rights and interests, we will take necessary measures in accordance with law, including reporting to the Personal Information Protection Commission and notifying the affected individuals.

For questions, requests, complaints or consultations concerning this Privacy Notice or the handling of personal information by Roland Berger Ltd., please contact the office stated in Section 1.

This Privacy Notice was last modified on August 10, 2026. We may occasionally modify or amend it from time to time. When we make changes to this Privacy Notice we will update the revision date at the top of this Privacy Notice. Where those changes are material, we will take steps to let you know. The new modified or amended Privacy Notice will apply as from that revision date. Please always verify whether you have consulted the latest version of the Privacy Notice.