Privacy

Be Privacy

Privacy Policy for the Applicant Management Process at Roland Berger Group

We want you on our team!

Protecting your Personal Data and complying with the General Data Protection Regulation (GDPR) and other relevant data protection legislation, is something we take very seriously.

This Privacy Policy for the Applicant Management Process (the "Recruitment Privacy Policy") is intended to provide you with information on how we ensure this protection during the entire application process, including in online interviews and your membership in Roland Berger candidate communities.

As you are using the Roland Berger website, please also take note of the General Privacy Policy , which applies to personal data which we collect and process through the Roland Berger website and which explains what "personal data" and other terms mean. It also explains your data protection rights which also apply to this Recruitment Privacy Notice.

1. Data controller

The data controller (which is also referred to as "we" in this Recruitment Privacy Policy) for processing your application and related personal data is Roland Berger Holding GmbH, Sederanger 1, 80538 Munich, Germany, if you apply for a job located in Germany. When you apply for a job in a different country, the respective Roland Berger entity in this country will act as data controller.

2. How we use your personal data

  • Application portal
    If you use the Roland Berger online application portal, we have to process the personal data you submit through our application portal for the purposes of processing and considering your application. If you are hired, selected contact and CV data may already be used for onboarding purposes before you begin working for us, and data relevant for the employment will be placed in your personnel file. When the controller is an entity that is located in the European Union (EU), it will do so on the legal basis of Art. 6 (1) lit. f General Data Protection Regulation (GDPR) and on the legal basis of Art. 6 (1) lit. b GDPR.
  • Analytical tests
    In the event you agree to an analytical test, we will use the information you provide during the analytical test to determine your suitability for the position for which you have applied and, if applicable, for other positions that could be offered to you; we will document your test result for these purposes, in order to view your responses and evaluate them by experienced recruiters. The analytical test and the documentation of the results will take place only if you have given us your consent. EU controllers will do this on the legal basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer.
  • Participation in a live or question-based interview
    In the event you agree to an online live interview or a question-based video interview, we will use the information you provide during the interview to review your suitability for the position for which you have applied and, if applicable, for other positions that could be offered to you. We may record your live interview for these purposes, in order to view the interview at a later time during the application procedure. EU controllers will do this on the legal basis of Art. 6 (1) lit. a GDPR. No systematic analysis, for example, by using speech analysis software, will take place. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer.
  • Membership in Roland Berger candidate communities
    You may choose to become member of one of our Roland Berger candidate communities. This means that with your consent, we will retain all parts of your application, including any results from analytical tests (if any) or other personal information which are generated in the course of the application process, for a maximum period of three years (for jobs in the U.S. four years) in order to match you with and contact you about future career opportunities and other relevant positions within the Roland Berger Group and/or to stay in contact and inform you about recruiting events or other interesting Roland Berger news. Controllers in the EU will do this on the legal basis of Art. 6 (1) lit. a GDPR. Your consent is voluntary and will not affect the status of your application. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer.
  • Recruiting events
    In the event you participate on one of our recruiting events your personal data will be collected during your application process. This data will be processed for the purpose to identify you as a registered participant of the event, to grant you access to the event, to send reminders and to inform you if there are any changes to the event (e.g. a change of date and time) and to contact you after the event to ask for your feedback. Controllers in the EU will do this on the legal basis of Art. 6 (1) lit. b GDPR.
    In addition, photos can be taken at the event. If you do not wish to be photographed, please let the photographer know on the spot. We process the photos for the purposes of documentation of the event, for printed and for online publicity on our publicly available websites or/and on social media (a.o. Instagram, Facebook, LinkedIn). For controllers in the EU the legal basis for taking and publishing of photos is our legitimate interest in reporting on the event pursuant to Art. 6 (1) lit. f GDPR. We ask for your separate consent pursuant to Art. 6 (1) lit. a GDPR for the publication of photos, if the content and composition of the photos or the intended use requires this.

3. How long we keep your personal data

  • Application portal
    Unless your application results in an employment by Roland Berger, we retain your application and personal data for as long as necessary to complete the application process and to comply with the legally required periods for data storage, currently a maximum period of up to six months after the end of the application process. If you apply for a job in the U.S., your data may be stored for a maximum period of four years. Should you apply for multiple jobs within six months (in the U.S.: four years), the retention period starts at the end of your last application process. If you have chosen to be added to one of our Roland Berger candidate communities (see below), we will retain your application and personal data for a period of up to three years. If you apply to a position in the U.S. the maximum period is four years.
  • Interview data
    In the event you have agreed to an online live interview or a question-based video interview, any video footage or audio files of your remote interview will be deleted six months after we recorded or received it, also if you have chosen to be added to one of our Roland Berger candidate communities (see below). We will also erase this data if you withdraw your consent before then.
  • Analytical test data
    In the event you have agreed to an analytical test, your test results will be deleted at the latest six months after the end of the application process. We will also erase this data if you withdraw your consent before then. In the event you applied via our Application portal and have chosen to be added to one of our Roland Berger candidate communities (see below), we will retain your test results for a period of up to three years after the end of the application process. If you apply to a position in the U.S. the maximum period is four years.
  • Applications from headhunters
    Should we receive your application through a headhunter (e.g., for a management position) which we have to pay a fee or agree to other contractual conditions relating to your application or employment, we may store your personal data for a longer period of up to two years (Art. 6 (1) lit. b and f GDPR).
  • Membership in Roland Berger candidate communities
    If you chose to be added to a Roland Berger candidate community, we may retain all parts of your application, including any results from analytical tests (if any) or other personal information which are generated in the course of the application process, for a period of up to three years. If you apply to a position in the U.S. the maximum period is four years. Please note, you can decide for each application if you want to be added to our candidate communities. However, not agreeing to this option does not withdraw any community consent you might have given in previous applications. To withdraw your previous consent, please contact our Data Protection Officer.
  • Recruiting events
    Roland Berger will store the photos processed for as long as it is necessary for the fulfilment of the aforementioned purposes.

4. Disclosure of your personal data

  • Within the Roland Berger Group
    If you chose to be added to a Roland Berger candidate community, we may also consider you for vacant positions in different offices of the Roland Berger Group. For this purpose, all parts of your application, including any results from analytical tests (if any) or other personal information which are generated in the course of the application process, may be shared and processed by recruiting teams at other Roland Berger Group offices, including those outside of the European Union. We may also share photos taken on recruiting events with other entities of the Roland Berger Group that may use it for their publicity.

    This may include that your personal data is forwarded to or accessible from a country outside of the EU which is not subject to a comparable level of data protection. In this event, we will ensure that the receiving Roland Berger entities and offices provide an appropriate level of protection by concluding the so-called EU standard contractual clauses. These are contracts of the EU Commission, which can be viewed and downloaded here.
  • Disclosure of personal data to service providers
    If Roland Berger controllers in the EU involve service providers who support the processing of personal data and who may have access to your personal data, this is only done after the conclusion of a data processing agreement in accordance with Art. 28 GDPR that requires our service providers to only process personal data in accordance with our instructions and to keep such data confidential. Roland Berger Holding GmbH holds all contracts with service providers and acts as processor for other Roland Berger controllers. Currently, we work with the following service providers which we may instruct as data processors/sub-processors for processing your personal data:

Who is the service provider and what we are using them for:

  • BESTCONSULTANT, 26, rue de Condillac, 33000 Bordeaux, France:
    Providing a platform to manage interview scheduling and feedback process. Processing of the provided personal data as well as application process data.
  • Cammio B.V., W. de Zwijgerlaan 68, 2252 VS Voorschoten, Netherlands:
    Providing a platform for live and asynchronous video interviews.Processing of basic personal data (name, email address and in some cases mobile phone number) as well as recording and processing recorded video sequences (including audio).
  • FirstBird GmbH, Hietzinger Hauptstr. 34, 1130 Vienna, Austria:
    Providing a referral tool for current employees to refer friends and acquaintances from their network for open positions. Processing of personal data and application outcome in case of employee referrals.
  • Korn Ferry (DE) GmbH, Barckhausstr. 12-14, 60325 Frankfurt a.M., Germany:
    Administering analytical tests during the application process. Processing of personal data and test results of candidates selected for analytical test.
  • LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA:
    Enabling effective sourcing and managing of potential candidates from LinkedIn. Synchronization of relevant application, candidate and job data to LinkedIn. Processing of the provided personal data and communication.
  • SmartRecruiters GmbH, Winsstr. 62/63, 10405 Berlin, Germany:
    Provision and development of the cloud platform (“Software as a Service”) for the above purposes. Processing of the provided personal data.

5. Whom to contact

If you have questions about this Recruitment Privacy Policy, please use the following central contact:

Roland Berger Holding GmbH
Sederanger 1
80538 Munich
Germany
Email address: contact@rolandberger.com

You can also contact the Data Protection Officer at any time:

Data Protection Officer
Roland Berger Holding GmbH
Sederanger 1
80538 Munich
Germany
Email address: dataprotection@rolandberger.com

Last change

June 7, 2022