Privacy

Be Privacy

Privacy Policy for the Applicant Management Process at Roland Berger Group

We want you on our team!

Protecting your Personal Data and complying with the General Data Protection Regulation (GDPR) and other relevant data protection legislation, is something we take very seriously.

This Privacy Policy for the Applicant Management Process (the "Recruitment Privacy Policy") is intended to provide you with information on how we ensure this protection during the entire application process, including in online interviews and your membership in Roland Berger candidate communities.

As you are using the Roland Berger website, please also take note of the General Privacy Policy, which applies to personal data which we collect and process through the Roland Berger website and which explains what "personal data" and other terms mean. It also explains your data protection rights which also apply to this Recruitment Privacy Notice.

1. Data controller

The data controller (which is also referred to as "we" in this Recruitment Privacy Policy) for processing your application and related personal data is Roland Berger Holding GmbH, Sederanger 1, 80538 Munich, Germany, if you apply for a job located in Germany. When you apply for a job in a different country, the respective Roland Berger entity in this country will act as data controller.

2. How we use your personal data

  • Application portal
    If you use the Roland Berger online application portal, we have to process the personal data you submit through our application portal for the purposes of processing and considering your application. If you are hired, your data will be placed into your personnel file. When the controller is an entity that is located in the European Union (EU), it will do so on the legal basis of Art. 6 (1) lit. b General Data Protection Regulation (GDPR).
  • Participation in a live or question-based interview
    In the event you agree to an online live interview or a question-based video interview, we will use the information you provide during the interview to review your suitability for the position for which you have applied and, if applicable, for other positions that could be offered to you. For EU controllers, the legal basis for this is Art. 6 (1) lit. a GDPR. If you have declared your consent, we may record your live interview for these purposes, in order to view the interview at a later time during the application procedure. EU controllers will do this on the basis of Art. 6 (1) lit. a GDPR. No systematic analysis, for example, by using speech analysis software, will take place. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer.
  • Membership in Roland Berger candidate communities
    You may choose to become member of one of our Roland Berger candidate communities. This means that with your consent, we will retain your application, including your personal data, for a maximum period of three years (for jobs in the U.S. four years) in order to match you with and contact you about future career opportunities and other relevant positions within the Roland Berger Group. Controllers in the EU will do this on the legal basis of Art. 6 (1) lit. a GDPR. Your consent is voluntary and will not affect the status of your application. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer.

3. How long we keep your personal data

  • Application portal
    Unless your application results in an employment by Roland Berger, we retain your application and personal data for as long as necessary to complete the application process and to comply with the legally required periods for data storage, currently a maximum period of up to six months after the end of the application process. If you apply for a job in the U.S., your data may be stored for a maximum period of four years. Should you apply for multiple jobs within six months (in the U.S.: four years), the retention period starts at the end of your last application process.
  • Interview data
    In the event you agree to an online live interview or a question-based video interview, any video footage or audio files of your remote interview will be deleted six months after we recorded or received it. We will also erase this data if you withdraw your consent before then.
  • Membership in Roland Berger candidate communities
    If you chose to be added to a Roland Berger candidate community, we will retain your application, including your personal data, for a period of up to three years. If you apply to a position in the U.S. the maximum period is four years.

4. Disclosure of your personal data

  • Within the Roland Berger Group
    If you chose to be added to a Roland Berger candidate community, we may also consider you for vacant positions in different offices of the Roland Berger Group. For this purpose, your personal data may be shared and processed by recruiting teams at other Roland Berger Group offices, including those outside of the European Union.
    This may include that your personal data is forwarded to or accessible from a country outside of the EU which is not subject to a comparable level of data protection. In this event, we will ensure that the receiving Roland Berger entities and offices provide appropriate guarantees (e.g. by agreement to EU standard contractual clauses). You can obtain copies of the guarantees here.
  • Disclosure of personal data to service providers
    If Roland Berger controllers in the EU involve service providers who support the processing of personal data and who may have access to your personal data, this is only done after the conclusion of a data processing agreement in accordance with Art. 28 GDPR that requires our service providers to only process personal data in accordance with our instructions and to keep such data confidential. Roland Berger Holding GmbH holds all contracts with service providers and acts as processor for other Roland Berger controllers. Currently, we may use the following service providers as data processors/sub-processors:

Who is the service provider and what we are using them for:

  • BESTCONSULTANT, 26, rue de Condillac, 33000 Bordeaux, France:
    Providing a platform to manage interview scheduling and feedback process. Processing of the provided personal data as well as application process data.
  • Cammio B.V., W. de Zwijgerlaan 68, 2252 VS Voorschoten, Netherlands:
    Providing a platform for live and asynchronous video interviews.Processing of basic personal data (name, email address and in some cases mobile phone number) as well as recording and processing recorded video sequences (including audio).
  • FirstBird GmbH, Hietzinger Hauptstr. 34, 1130 Vienna, Austria:
    Providing a referral tool for current employees to refer friends and acquaintances from their network for open positions. Processing of personal data and application outcome in case of employee referrals.
  • Hay Group GmbH, Barckhausstr. 12-14, 60325 Frankfurt a.M., Germany:
    Administering analytical tests during the application process. Processing of personal data and test results of candidates selected for analytical test.
  • LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA:
    Enabling effective sourcing and managing of potential candidates from LinkedIn. Synchronization of relevant application, candidate and job data to LinkedIn. Processing of the provided personal data and communication.
  • SmartRecruiters GmbH, Winsstr. 62/63, 10405 Berlin, Germany:
    Provision and development of the cloud platform (“Software as a Service”) for the above purposes. Processing of the provided personal data.

If your personal data is forwarded to a country outside of the EU, which is not subject to a comparable level of data protection, we do so only after ensuring the existence of appropriate safeguards, (e.g. by agreement to standard EU contract clauses). You can obtain copies of the guarantees here.

5. Whom to contact

If you have questions about this Recruitment Privacy Policy, please use the following central contact:

Roland Berger Holding GmbH
Sederanger 1
80538 Munich
Germany
Email address: contact@rolandberger.com

You can also contact the Data Protection Officer at any time:

Data Protection Officer
Roland Berger Holding GmbH
Sederanger 1
80538 Munich
Germany
Email address: dataprotection@rolandberger.com

Last change

September 8, 2020