We want you on our team!
Protecting your Personal Data and complying with the General Data Protection Regulation (GDPR) and other relevant data protection legislation, is something we take very seriously.
- Application portal
If you use the Roland Berger online application portal, we have to process the personal data you submit through our application portal for the purposes of processing and considering your application. If you are hired, selected contact and CV data may already be used for onboarding purposes before you begin working for us, and data relevant for the employment will be placed in your personnel file. When the controller is an entity that is located in the European Union (EU), it will do so on the legal basis of Art. 6 (1) lit. f General Data Protection Regulation (GDPR) and on the legal basis of Art. 6 (1) lit. b GDPR.
- Analytical tests
In the event you agree to an analytical test, we will use the information you provide during the analytical test to determine your suitability for the position for which you have applied and, if applicable, for other positions that could be offered to you; we will document your test result for these purposes, in order to view your responses and evaluate them by experienced recruiters. The analytical test and the documentation of the results will take place only if you have given us your consent. EU controllers will do this on the legal basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer .
- Participation in a live or question-based interview
In the event you agree to an online live interview or a question-based video interview, we will use the information you provide during the interview to review your suitability for the position for which you have applied and, if applicable, for other positions that could be offered to you. We may record your live interview for these purposes, in order to view the interview at a later time during the application procedure. EU controllers will do this on the legal basis of Art. 6 (1) lit. a GDPR. No systematic analysis, for example, by using speech analysis software, will take place. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer .
- Membership in Roland Berger candidate communities
You may choose to become member of one of our Roland Berger candidate communities. This means that with your consent, we will retain all parts of your application, including any results from analytical tests (if any) or other personal information which are generated in the course of the application process, for a maximum period of three years (for jobs in the U.S. four years) in order to match you with and contact you about future career opportunities and other relevant positions within the Roland Berger Group and/or to stay in contact and inform you about recruiting events or other interesting Roland Berger news. Controllers in the EU will do this on the legal basis of Art. 6 (1) lit. a GDPR. Your consent is voluntary and will not affect the status of your application. You may withdraw your consent at any time with future effect. To do so, please contact our Data Protection Officer .
- Recruiting events
In the event you participate on one of our recruiting events your personal data will be collected during your application process. This data will be processed for the purpose to identify you as a registered participant of the event, to grant you access to the event, to send reminders and to inform you if there are any changes to the event (e.g. a change of date and time) and to contact you after the event to ask for your feedback. Controllers in the EU will do this on the legal basis of Art. 6 (1) lit. b GDPR.
In addition, photos can be taken at the event. If you do not wish to be photographed, please let the photographer know on the spot. We process the photos for the purposes of documentation of the event, for printed and for online publicity on our publicly available websites or/and on social media (a.o. Instagram, Facebook, LinkedIn). For controllers in the EU the legal basis for taking and publishing of photos is our legitimate interest in reporting on the event pursuant to Art. 6 (1) lit. f GDPR. We ask for your separate consent pursuant to Art. 6 (1) lit. a GDPR for the publication of photos, if the content and composition of the photos or the intended use requires this.
- Application portal
Unless your application results in an employment by Roland Berger, we retain your application and personal data for as long as necessary to complete the application process and to comply with the legally required periods for data storage, currently a maximum period of up to six months after the end of the application process. If you apply for a job in the U.S., your data may be stored for a maximum period of four years. Should you apply for multiple jobs within six months (in the U.S.: four years), the retention period starts at the end of your last application process. If you have chosen to be added to one of our Roland Berger candidate communities (see below), we will retain your application and personal data for a period of up to three years. If you apply to a position in the U.S. the maximum period is four years.
- Interview data
In the event you have agreed to an online live interview or a question-based video interview, any video footage or audio files of your remote interview will be deleted six months after we recorded or received it, also if you have chosen to be added to one of our Roland Berger candidate communities (see below). We will also erase this data if you withdraw your consent before then.
- Analytical test data
In the event you have agreed to an analytical test, your test results will be deleted at the latest six months after the end of the application process. We will also erase this data if you withdraw your consent before then. In the event you applied via our Application portal and have chosen to be added to one of our Roland Berger candidate communities (see below), we will retain your test results for a period of up to three years after the end of the application process. If you apply to a position in the U.S. the maximum period is four years.
- Applications from headhunters
Should we receive your application through a headhunter (e.g., for a management position) which we have to pay a fee or agree to other contractual conditions relating to your application or employment, we may store your personal data for a longer period of up to two years (Art. 6 (1) lit. b and f GDPR).
- Membership in Roland Berger candidate communities
If you chose to be added to a Roland Berger candidate community, we may retain all parts of your application, including any results from analytical tests (if any) or other personal information which are generated in the course of the application process, for a period of up to three years. If you apply to a position in the U.S. the maximum period is four years. Please note, you can decide for each application if you want to be added to our candidate communities. However, not agreeing to this option does not withdraw any community consent you might have given in previous applications. To withdraw your previous consent, please contact our Data Protection Officer .
- Recruiting events
Roland Berger will store the photos processed for as long as it is necessary for the fulfilment of the aforementioned purposes.
- Within the Roland Berger Group
If you chose to be added to a Roland Berger candidate community, we may also consider you for vacant positions in different offices of the Roland Berger Group . For this purpose, all parts of your application, including any results from analytical tests (if any) or other personal information which are generated in the course of the application process, may be shared and processed by recruiting teams at other Roland Berger Group offices, including those outside of the European Union. We may also share photos taken on recruiting events with other entities of the Roland Berger Group that may use it for their publicity.
This may include that your personal data is forwarded to or accessible from a country outside of the EU which is not subject to a comparable level of data protection. In this event, we will ensure that the receiving Roland Berger entities and offices provide an appropriate level of protection by concluding the so-called EU standard contractual clauses. These are contracts of the EU Commission, which can be viewed and downloaded here .
- Disclosure of personal data to service providers
If Roland Berger controllers in the EU involve service providers who support the processing of personal data and who may have access to your personal data, this is only done after the conclusion of a data processing agreement in accordance with Art. 28 GDPR that requires our service providers to only process personal data in accordance with our instructions and to keep such data confidential. Roland Berger Holding GmbH holds all contracts with service providers and acts as processor for other Roland Berger controllers. Currently, we work with the following service providers which we may instruct as data processors/sub-processors for processing your personal data:
Who is the service provider and what we are using them for:
- BESTCONSULTANT, 26, rue de Condillac, 33000 Bordeaux, France:
Providing a platform to manage interview scheduling and feedback process. Processing of the provided personal data as well as application process data.
- Cammio B.V., W. de Zwijgerlaan 68, 2252 VS Voorschoten, Netherlands:
Providing a platform for live and asynchronous video interviews.Processing of basic personal data (name, email address and in some cases mobile phone number) as well as recording and processing recorded video sequences (including audio).
- FirstBird GmbH, Hietzinger Hauptstr. 34, 1130 Vienna, Austria:
Providing a referral tool for current employees to refer friends and acquaintances from their network for open positions. Processing of personal data and application outcome in case of employee referrals.
- Korn Ferry (DE) GmbH, Barckhausstr. 12-14, 60325 Frankfurt a.M., Germany:
Administering analytical tests during the application process. Processing of personal data and test results of candidates selected for analytical test.
- LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA:
Enabling effective sourcing and managing of potential candidates from LinkedIn. Synchronization of relevant application, candidate and job data to LinkedIn. Processing of the provided personal data and communication.
- SmartRecruiters GmbH, Winsstr. 62/63, 10405 Berlin, Germany:
Provision and development of the cloud platform (“Software as a Service”) for the above purposes. Processing of the provided personal data.
You have rights with respect to Roland Berger in relation to your personal data in accordance with Art. 15-21 GDPR. In particular, you have the right to:
- request a copy of the personal data we hold about you (right of access, Art. 15 GDPR);
- ask that we update the personal data we hold about you, or correct any personal data that you think is incorrect or incomplete (right to rectification, Art. 16 GDPR);
- ask that we delete personal data that we hold about you, or restrict the way in which we use your personal data (right to erasure, Art. 17 GDPR and right to restriction of processing, Art. 18 GDPR)
- object to our processing of your personal data (right to object, Art. 21 and 22 GDPR)
- request that your personal data be transferred to you or another data controller (right to data portability, Art. 20 GDPR).
If you are unhappy with the way we have handled your personal data or any data protection query or request that you have raised with us, you have a right to complain to the competent supervisory authority (Art. 77 GDPR). We would, however, appreciate the chance to deal with your concerns before you approach the data protection authority, so please contact us in the first instance.
We may need to request specific information from you to help us confirm your identity and ensure your right of access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Objection and withdrawal of consent
If you have given us your consent to process your personal data (Art. 6 para. 1 lit. a) GDPR), you can withdraw your consent at any time with future effect. If we process your personal data based on Art. 6 para. 1 lit. f) GDPR (legitimate interests), you can object at any time to the processing of your personal data for marketing reasons.
Please use either the link included in each Newsletter we send you or, alternatively, contact Roland Berger via mail, fax, email or using the contact details given under 6. Whom to contact.
Roland Berger Holding GmbH
Email address: firstname.lastname@example.org
You can also contact the Data Protection Officer at any time:
Data Protection Officer
Roland Berger Holding GmbH
Email address: email@example.com