Source: https://globalconsultingcompany.de/de/datenschutz
Timestamp: 2019-04-23 22:12:00+00:00

Document:
Protecting your Personal Data and complying with the GDPR and other relevant data protection legislation, is something we take very seriously. This statement is intended to give you an overview of how we ensure this protection, what kinds of data we collect and why, and how we deal with it.
By “Personal Data” we mean in accordance with the GDPR any information relating to an identified or identifiable individual. This is broader than just information of a personal or private nature, and also includes information such as your name, date of birth, and email address.
Responsibility for data processing and in connection with this Data Protection Statement is Global Consulting Company GmbH, P.O. Box 1165, 82025 Grünwald, Germany (“GCC”, “we”, “us”). For more detailed information about Global Consulting Company GmbH, please see “How to contact us?
Why do we collect, process and use data? GCC uses our website to present general information about our company and what we do. There are some areas of our websites or individual pages which serve more specific purposes.
There is the applicants' area of our different recruiting websites, where potential applicants can apply for jobs, internships and other positions (refer to the supplementary Data Protection Statement for applicants).
And there are other pages on specific topics or with specific functions. Details can be found in the contents section of each page.
We collect, process and use data for the reasons above, unless there are more specific reasons, which we will give when collecting that data (e.g. for applicants). We do not use data other than for its intended purpose in each case.
• other similar data and information, which serve to avert risks in the event of attacks on our in-formation technology systems.
GCC cannot attribute this data to any specific person as a general rule (unless you log in). We do not combine this data with data from any other sources.
We record and process information you enter on our websites or send us otherwise. This includes data you enter in forms or contact fields, or select from lists or menus.
There are some points in our websites where you can send us information by uploading documents via those websites to our servers. That is what happens when you apply online, for example (refer to the supplementary Data Protections Statement for applicants).
We also record and process Personal Data when you email someone at GCC. This concerns the contents of your emails as such, but also data obtained from queries to our email server, such as sender and addressee IDs, time stamp, errors or grounds for refusal if mail does not get through. The legal basis for such data processing is Art. 6 para 1 lit.a) GDPR.
There are some access-restricted areas of the websites for which you need to register before you can use them, like the recruiting/applicant and alumni areas in particular. When registering, there are some details you have to enter that the registration form itself requires, particularly your email address, a password, and some information about yourself. Any other details you enter are voluntary. We process and save this data in accordance with the supplementary data protection statements for applicants.
In some areas of our websites, like our alumni network in particular, some of your registration data or contributions you make can be seen by other users once they log in. It is up to you to decide whether you want other registered users of this site to see your information and, if so, what. You can change these settings at any time. During the registration process, we will ask you to give your consent for processing and saving that data. The legal basis for processing that data is Art. 6 para 1 lit.a) GDPR.
You can withdraw your consent to the processing of your Personal Data given in the registration process at any time with future effect, using mail, fax, email using Personal Data collected automatically.
There are many points on GCC's websites where we offer newsletters or comparable marketing and information services. If you would like to use these, we will need a working email address for you and details to enable us to verify that this email address is really yours, or that the person whose address it is agrees to receive the newsletter. For legal reasons, an email will be sent to the email address you provided asking for confirmation in a Double-Opt-in procedure after signing up to our newsletter. That is the only information we gather. The legal basis for sending you newsletters is Art. 6 para 1 lit.a) GDPR.
Furthermore, subscribers to the newsletter may be informed by email if necessary for offering the newsletter service or for registration, for example in the event of changes to the offer of the newsletter or changes in technical conditions. In the event that you have agreed to receive newsletters from other companies of the GCC Group, we will share your Personal Data within the GCC Group only for those purposes. The legal basis for this is Art. 6 para 1 lit.a) GDPR. Otherwise your Personal Data collected in the context of the newsletter service will not be passed on to third parties.
You can withdraw your consent to your data and email address being recorded and used to send newsletters and object to the use of your Personal Data for marketing purposes at any time with future effect, either by using the link enclosed to each newsletter email we send you or, alternatively, by directly contacting GCC GmbH via mail, fax, email or using the contact details given above under How to contact us?
Where does data go once it reaches GCC?
Once you send data, or it is collected on our websites, we transmit it within GCC to the recipients that need to know it. Applications, for instance, go to our human resources department and the department for which the position is advertised (refer to the supplementary Data protection statement for applicants).
Data can also be accessed in purely technical terms by service providers and contract partners we use to operate our websites. These external providers are required not to use your Personal Data other than to provide the services requested by us or otherwise in accordance with our instructions.
Within the GCC Group`s Organisation, there is a need to exchange Personal Data on an intragroup basis as Joint Controllers. For this reason, GCC will transfer and share your Personal Data within the GCC Group`s Organisation for the purposes set out in this Data Protection Statement. GCC entities might also be established outside the European Union or the European Economic Area. In such cases, we will ensure that there are adequate safeguards (i.e. EU standard data protection clauses) in place to protect process your Personal Data. We at GCC are responsible to inform you about your rights as data subject under applicable data protection laws. You can address any requests or complaints you may have with regard to your Personal Data to GCC. The other GCC entities within the GCC Group`s Organisation that might also keep your Personal Data will give us reasonable cooperation, assistance and information in order to comply with such requests or complaints.
As a fundamental rule, we do not disclose, transfer, sell or otherwise market Personal Data to third parties, such as other companies or organizations, without your express consent, or as required to meet our contractual obligations between GCC and you, the website user, which make it necessary to transfer such data.
Most browsers are initially set to accept cookies. You can disable cookies anytime and hence object to the setting of cookies permanently. You can also delete cookies that have been accepted or have your browser notify you every time a cookie is set through the settings of your browser. Please note that you may not be able to use all functions of these websites if you disable cookies entirely.
Most cookies we use are “session cookies”. We use these to enable your use of our websites and to remember your settings throughout your visit to avoid that you have to reenter your choices several times. Session cookies are deleted automatically at the end of your visit. The purposes stated above constitute our legitimate interests for processing of Personal Data using session cookies on the legal basis of Art. 6 para 1 lit.f) GDPR.
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, to help the website analyze how users use the site and optimize our websites. As a rule, the information generated by the cookie about your use of this website will be transmitted to a Google server in the USA and stored there.
You can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available undertools.google.com/dlpage/gaoptout?hl+en&hl=en .
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketed website tags to be managed using an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register Personal Data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager. The purpose stated above constitutes our legitimate interest for processing of Personal Data using Google Tag Manager on the legal basis of Art. 6 para 1 lit.f) GDPR.
We have embedded YouTube-videos in our website. These videos are stored on www.youtube.com and are directly playable from our website. The video-platform is operated by YouTube, LLC, a company of Google Inc. We have no influence on the data transferred to YouTube. By visiting a website with embedded YouTube-videos a connection between your browser and the Google DoubleClick network may be established. The videos are embedded in an advanced data protection mode. Based on the information given by YouTube, when using the advanced data protection mode, no cookies are placed on your computer and no data about you as a user of our website are transmitted to YouTube if you do not play the videos. Only when you play the videos, the following data is transferred. If you play the embedded videos, YouTube places cookies on your computer and receives the information that you have visited the corresponding subpage of our website. If you are logged in on YouTube, this data is directly associated with your user account. If you do not wish such assignment to your user account on YouTube, you must log out before playing the videos.
YouTube might store this data (also for non-logged-in users) as a user profile and use them for purposes of advertising, market research and need-based design of its website, to provide demand-orientated advertising and to inform other users of the platform about your activities on our website.
You have a right of objection against the generation of such user profiles. To exercise this right to object you need to contact the third-party provider. You will receive further information on the purpose and scope of data collection and processing by the third-party provider as well as on your relevant rights and options for protecting your privacy here or by sending an email to [email protected] .
We store Personal Data according to legal storage periods. We routinely delete this Personal Data or block it, once these periods expire or the reasons for storage cease to apply, following data protection rules.
If you have agreed to a longer duration for storing, processing and using your data, we will delete or block your data after this duration expires or should you revoke your consent (refer to the supplementary data protection statement for applicants ).
If you register to use access-protected areas of Roland Berger's websites, you should keep the login details you receive carefully and protected against access by third parties. If you log in on a computer that is used by more than one person, please don't forget to log off properly at the end of each session and close the browser window you were using.
GCC takes extensive technical and organizational security precautions to protect your Personal Data against being manipulated, either accidentally or deliberately, or being lost, destroyed or accessed by unauthorized third parties. We are constantly improving these precautions as technology develops.
This Data Protection Statement was last modified on May 24, 2018. We may occasionally modify or amend it from time to time. When we make changes to this Data Protection Statement we will update the revision data at the top of this Data Protection Statement. Where those changes are material, we will take steps to let you know. The new modified or amended Data Protection Statement will apply from that revision date. Please always verify whether you have consulted the last version of the Data Protection Statement.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6