Source: https://www.rolandberger.com/nl/Privacy/
Timestamp: 2019-04-24 00:20:37+00:00

Document:
Protecting your Personal Data, and complying with the GDPR and other relevant data protection legislation, is something we take very seriously. This statement is intended to give you an overview of how we ensure this protection, what kinds of data we collect and why, and how we deal with it.
Responsibility for data processing and in connection with this Data Protection Statement is with Roland Berger Holding GmbH, Sederanger 1, 80538 Munich, Germany (“Roland Berger”, “we”, “us”). For more detailed information about Roland Berger, please see How to contact us?
Why do we collect, process and use data?
Roland Berger uses our website to present general information about our company and what we do. There are some areas of our websites or individual pages which serve more specific purposes.
We collect, process and use data for the reasons above, unless there are more specific reasons, which we will give when collecting that data (e.g. for applicants ). We do not use data other than for its intended purpose in each case.
other similar data and information, which serve to avert risks in the event of attacks on our information technology systems.
Roland Berger cannot attribute this data to any specific person as a general rule (unless you log in). We do not combine this data with data from any other sources.
to provide law enforcement authorities with the necessary information for prosecution in the event of a cyberattack.
This data is statistically analyzed by Roland Berger in order to increase data protection and data security in our company, so we can ensure the best possible level of protection for the Personal Data we process. These purposes state our legitimate interests for the temporary storage of data on the legal basis of Art. 6 para 1 lit.a) GDPR.
We record and process information you enter on our websites or send us otherwise. This includes data you enter in forms or contact fields fields (e.g. for the subscription of newsletters), or select from lists or menus.
There are some points in our websites where you can send us information by uploading documents via those websites to our servers. That is what happens when you apply online, for example (refer to the supplementary Data Protection Statement for applicants ).
We also record and process Personal Data when you email someone at Roland Berger. This concerns the contents of your emails as such, but also data obtained from queries to our email server, such as sender and addressee IDs, time stamp, errors or grounds for refusal if mail does not get through. The legal basis for such data processing is Art. 6 para 1 lit.a) GDPR.
When you provide your Personal Data, we will ask you to give your consent for processing that data. In that case, the legal basis for processing is Art. 6 para 1 lit.a) GDPR. You can withdraw your consent at any time with future effect, using mail, fax, or email using the contact details given above under How to contact us? .
There are some access-restricted areas of the websites for which you need to register before you can use them, like the recruiting/applicant and alumni areas in particular. When registering, there are some details you have to enter that the registration form itself requires, particularly your email address, a password, and some information about yourself. Any other details you enter are voluntary. We process and save this data in accordance with the supplementary data protection statements for applicants and alumni .
You can withdraw your consent to the processing of your Personal Data given in the registration process at any time with future effect, using mail, fax, email using the contact details given above under How to contact us? .
There are many points on Roland Berger's websites where we offer newsletters or comparable mar-keting and information services. If you would like to use these, we will need a working email address for you and details to enable us to verify that this email address is really yours, or that the person whose address it is agrees to receive the newsletter. For legal reasons, an email will be sent to the email address you provided asking for confirmation in a double-opt-in procedure after signing up to our newsletter. That is the only information we gather. The legal basis for sending you newsletters is Art. 6 para 1 lit.a) GDPR.
Furthermore, subscribers to the newsletter may be informed by email if necessary for offering the newsletter service or for registration, for example in the event of changes to the offer of the newsletter or changes in technical conditions. In the event that you have agreed to receive newsletters from other companies of the Roland Berger Group , we will share your Personal Data within the Roland Berger Group only for those purposes. The legal basis for this is Art. 6 para 1 lit.a) GDPR. Otherwise your Personal Data collected in the context of the newsletter service will not be passed on to third parties.
You can withdraw your consent to your data and email address being recorded and used to send newsletters and object to the use of your Personal Data for marketing purposes at any time with future effect, either by using the link enclosed to each newsletter email we send you or, alternatively, by directly contacting Roland Berger Holding GmbH via mail, fax, email or using the contact details given above under How to contact us?
To whom we may disclose your Personal Data?
Where does data go once it reaches Roland Berger?
Once you send data, or it is collected on our websites, we transmit it within Roland Berger to the recipients that need to know it. Applications, for instance, go to our human resources department and the department for which the position is advertised (refer to the supplementary data protection statement for applicants ).
We may share your personal data with external service providers who work on our behalf, such as marketing agencies, e-commerce fulfilment partners, market research companies, software, website hosting and other IT service providers. These external providers are required not to use your Personal Data other than to provide the services requested by us or otherwise in accordance with our instructions.
Within the Roland Berger Group's organization , there is a need to exchange Personal Data on an intragroup basis as Joint Controllers. For this reason, Roland Berger will transfer and share your Personal Data within the Roland Berger Group's organization for the purposes set out in this Data Protection Statement. Roland Berger entities might also be established outside the European Union or the European Economic Area. In such cases, we will ensure that there are adequate safeguards (i.e. EU standard data protection clauses) in place to protect process your Personal Data. We at Roland Berger are responsible to inform you about your rights as data subject under applicable data protection laws. You can address any requests or complaints you may have with regard to your Personal Data to Roland Berger. The other Roland Berger entities within the Roland Berger Group's organization that might also keep your Personal Data will give us reasonable cooperation, assistance and information in order to comply with such requests or complaints.
As a fundamental rule, we do not disclose, transfer, sell or otherwise market Personal Data to third parties, such as other companies or organizations, without your express consent, or as required to meet our contractual obligations between Roland Berger and you, the website user, which make it necessary to transfer such data.
Where there is a sufficient legal basis, your Personal Data may be transferred to and processed outside the EU/EEA in other countries where laws and provisions governing the processing of Personal Data may be less stringent. In such cases, we will ensure that there are adequate safeguards in place to protect your Personal Data (i.e. EU standard data protection clauses adopted by the EU commission). Further details of these transfers and copies of these agreements are available from us on request here .
Our website uses a web analytics services provided by Matomo (www.matomo.org; formerly PIWIK). We use the Matomo cookie to collect information on the use of our website from our users including the website from which your accessing system comes to our website, the subsites, which are accessed via an accessing system on our website, the frequency and duration of your visit to our website, and your IP address. We will shorten your IP address to ensure that we cannot identify you personally. We will not use the collected information to compile user profiles or combine information on specific users. The purpose of processing is marketing and optimization of our websites. These purposes constitute our legitimate interests for processing of Personal Data using Matomo on the legal basis of Art. 6 para 1 lit.f) GDPR. Your Personal Data is deleted once the reasons we collected it for cease to apply. That is the case after 180 days.
You can object to the use of your information with effect for the future if you do not wish for your information to be collected and used with a simple mouse click.
If you click into the field below, a so-called opt-out-cookie will be set on your device which allows us to recognize that we may not collect information on your usage. Please note that if you delete cookies from your browser this may affect the opt-out-cookie. You can activate the opt-out-cookie at any time here: Opt out of Matomo here .
You can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available under tools.google.com/dlpage/gaoptout?hl+en&hl=en .
The LinkedIn Insight Tag enables the collection of data regarding members’ visits to our website, including the URL, referrer, IP address, device and browser characteristics, timestamp, and page views. This data is encrypted, then de-identified within seven days, and the de-identified data is deleted within 90 days. LinkedIn does not share the personal data with the website owner, it only provides aggregated reports about the website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling the website owner to show personalized ads off its website by using this data, but without identifying the member.
We use the open source mapping tool OpenStreetMap to display geodata. The OpenStreetMap Foundation is based in the UK and operates its servers in Europe. More details, please see the OpenStreetMap Foundation’s privacy statement .
You have a right of objection against the generation of such user profiles. To exercise this right to object you need to contact the third-party provider. You will receive further information on the purpose and scope of data collection and processing by the third-party provider as well as on your relevant rights and options for protecting your privacy here or by sending an email to support-de@google.com .
We have embedded Vimeo-videos in our website. These videos are stored on www.vimeo.com and are directly playable from our website. The video-platform is operated by Vimeo, Inc. By visiting a website with embedded Vimeo-videos a direct connection between your browser and a server of Vimeo in the USA is established. Vimeo stores information about your visit of our website including your IP-address. If you have a Vimeo-account and do not wish that Vimeo collects information about you through this website and associates this information with your member data on Vimeo, you must log out before visiting this website. You will receive further information on the purpose and scope of data collection and processing by the third-party provider as well as on your relevant rights and options for protecting your privacy on vimeo.com/cookie_policy or vimeo.com/privacy .
Some of our sub-sites are hosted on Wix. Wix.com is a cloud based web development platform with millions of users worldwide and operates its servers outside the EU/EEA. Therefore, your Personal Data is transferred outside the EU/EEA. However, Wix.com ensures adequate safeguards for pro-cessing your Personal Data because Wix.com participates in, and has certified its compliance with, the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. Wix.com may also place cookies on your computer when visiting our subsites hosted on Wix. For more insight, you may also want to read here.
Roland Berger takes extensive technical and organizational security precautions to protect your Personal Data against being manipulated, either accidentally or deliberately, or being lost, destroyed or accessed by unauthorized third parties. We are constantly improving these precautions as technology develops.
This Data Protection Statement was last modified on October 26, 2018. We may occasionally modify or amend it from time to time. When we make changes to this Data Protection Statement we will update the revision data at the top of this Data Protection Statement. Where those changes are material, we will take steps to let you know. The new modified or amended Data Protection Statement will apply from that revision date. Please always verify whether you have consulted the last version of the Data Protection Statement.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6