RB Alumni

Welcome to the Roland Berger Alumni Network

This is an exclusive platform to stay in touch with former colleagues and with us

Privacy

Roland Berger Alumni Data Protection Notice

Roland Berger Alumni Data Protection Notice

The relevant domestic and international data protection framework that applies to Roland Berger requires the protection of our alumni's personal data. In addition, the lawfulness and transparency of all data processing operations is a guiding principle for Roland Berger. We therefore provide you with the following information about our data processing operations on the platform of the Roland Berger Alumni Network.


I. Who is responsible for the data processing operations and who can I contact?

In this notice "Roland Berger", "we", "us" or "our" refers to Roland Berger Holding GmbH & Co. KGaA, its affiliates, and subsidaries. The Roland Berger entity that was your former employer is the data controller under the GDPR (if applicable), as this company uses your personal data in the context of the respective relationship with you. The address and name of this Roland Berger entity can be found here.

We welcome your feedback. If you have any comments, complaints or questions regarding this Data Protection Notice or our processing of your Personal Data, or would like to exercise any of your rights, you can contact us at:

Roland Berger Holding GmbH & Co. KGaA, Sederanger 1, 80538 Munich, Germany, Phone: +49-89-9230-0, Fax: +49-89-9230-8202, email: [email protected]

The contact details of our data protection officer are:

Roland Berger Holding GmbH & Co. KGaA, z.Hd. Datenschutzbeauftragter, Sederanger 1, 80538 Munich, Germany, email: [email protected]


II. What data are we processing, what are the purposes of the processing operations and on what legal basis are we processing the data?

Data processed

Throughout your membership and interactions with the platform of the Roland Berger Alumni Network, we process personal data at various stages.

For former employees, the following information is obtained from Roland Berger’s HR management systems upon the end of their employment relationship with the company:

  • Basic information such as name, last name, location, contact details (including personal email, phone numbers, and mailing address), gender, birthdate, and profile picture
  • Employment-specific details, including positions held, employment history with Roland Berger (time at the firm, office and platform affiliations, and tenure), project history
  • Educational background, including degrees earned, institutions attended, and dates of enrollment

Additionally, we may directly collect the following information from you:

  • Additional employment information and history
  • Further educational details
  • Social media links
  • Stated interests (including function, industry, etc.)
  • Job board subscriptions
  • Mailing subscriptions
  • Event participation
  • Communication preferences
  • Alumni network survey data
  • Phone number
  • Personal and business email
  • Profile picture
  • Location

To ensure the ongoing accuracy of the data we hold and to complete, update or correct your data (job changes, etc.), we search and use personal data from public sources (such as LinkedIn, Xing and other publicly available sources on the internet). We may also add internal classifications and notes for administrative purposes. 


Purposes of the processing operations

The purposes of our processing operations are:

  • To stay in contact with you and invite you to alumni events and other events organized by our corporate group
  • To enable you to stay in touch with your former colleagues and other alumni to maintain a network, utilize business contacts, establish business relationships with other alumni, and grow your ongoing careers
  • To send you useful professional information and material or give you the opportunity to request it
  • To make job openings available to you
  • To support you in your professional development when we see opportunities to do so
  • To establish new business relations with you or develop business opportunities where appropriate
  • To carry out the admission and registration process
  • To ensure the ongoing accuracy of the data
  • You also have the possibility to contact the Alumni team using this contact form or email addresses and, telephone numbers provided on the platform of the Roland Berger Alumni Network. When you contact us through the above channels, we will store and process the resulting personal data for the purposes of dealing with your request. All data are used exclusively for the processing of your request.

Legal basis for the processing operations

In case of your consent, the legal basis for the processing operations for controllers in the EU is Article 6 (1) lit. a) GDPR. In case of contract initiations or executions, the legal basis for EU controllers for the processing operations is Article 6 (1) lit. b) GDPR; in all other cases, the legal basis for the processing operations is Article 6 (1) lit. f) GDPR.

III. Who will receive my data?

Sharing with other alumni and intra-group sharing

We will make the information you provide available to other alumni, as well as selected employees of the Roland Berger Group through a highly secured and restricted access to our alumni database. Some of the information is available to all users, some is hidden (and marked accordingly) and only available to you and administrators. As members of our network, you and your former colleagues as well as other alumni can use publicly shared information to stay in touch, maintain a network, utilize business contacts, establish business relationships with other alumni, and grow your ongoing careers. You will also be able to search, subscribe and respond to job listings advertised by other alumni, Roland Berger offices, hiring companies, or executive search companies in our database.

Roland Berger may make your personal data available to offices of the Roland Berger Group in accordance with this Data Protection Notice. We ensure that your personal data is treated strictly confidentially within the Roland Berger Group and only used for the above-mentioned purposes. Your contact and employment details (if provided) are also stored in our CRM system to ensure consistency of data across our systems.

Transfer of data to countries outside the EU/EEA

If your personal data is transferred to a country outside European Union (EU) or the European Economic Area (EEA) which is not subject to a comparable level of data protection, we will ensure that the data transfer is based on an adequacy decision or conclusion of the EU standard contractual clauses, which can be viewed and downloaded here (https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en).

External service providers on behalf of Roland Berger

Access to personal data is also technically possible for service providers and contract partners that we use to operate our IT systems. This will only happen after the prior conclusion of a so-called data protection agreement according to Art. 28 GDPR, which obliges the service providers to process personal data only according to Roland Berger’s instructions and to treat them confidentially. Roland Berger Holding GmbH & Co. KGaA holds all contracts with service providers and acts as processor for other Roland Berger controllers. Currently, the main service providers for the operation of the Roland Berger Alumni platform and services are:

  • Netenviron GmbH, Auflegerstraße 10, 81735 München, Germany: IT provider of the Roland Berger Alumni Network as well the job portal Pathfinder
  • Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, 18 D18 P521 Dublin, Ireland: Provider of the Microsoft 365 Cloud Services emails, document procession, collaboration, online meetings, CRM system, surveys, etc. For this specific purpose separate a data protection notice applies (refer to the supplementary Privacy Policy for Microsoft365 Cloud Services)
  • Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany: IT provider of a newsletter and marketing automation system
  • plazz AG, Bahnhofstraße 5a, 99084 Erfurt, Germany: IT provider of the Mobile Event App (MEA)

Sending data to other third parties

As a fundamental rule, Roland Berger does not disclose, transfer, sell or otherwise market personal data to other third parties, such as other companies or organizations, without your express consent, unless disclosure of such data is necessary to fulfill contractual obligations, disclosure is covered by legitimate interests of Roland Berger or if Roland Berger is obliged to do so by law or by an official or court order.
For example, the following categories of recipients may receive your personal data:

  • Authorities, courts, parties to a legal dispute or their designees to whom Roland Berger is required to provide your personal data by applicable law, regulation, legal process or enforceable governmental order, e.g., tax and customs authorities, regulatory authorities and their designees, financial market regulators, public registries;
  • Auditors or external consultants such as lawyers, tax advisors, insurers or banks, and
  • another company in the event of a change of ownership, merger, acquisition or disposal of assets.
 

IV. What cookies are used (Cookie Declaration)?

V. How is Google analytics used?

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Nature and purpose of the processing

Google Analytics 4 uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the User ID function. User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and to analyze user behavior across devices.

We use Google Signals. This allows Google Analytics to collect additional information about users who have personalized ads enabled (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.
Google Analytics 4 has IP anonymization enabled by default. Due to IP anonymization, your IP address will be shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transferred by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of "events". Events can be:

  • Page views
  • First visit to the website
  • Start of session
  • Web pages visited
  • Your “click path”, interaction with the website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • File downloads
  • Seen Ads / clicked Ads
  • Language settings

Also recorded:

  • Your approximate location (region)
  • Date and time of your visit
  • Your IP address (in shortened form)
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • Your internet service provider
  • The referrer URL (via which website/advertising medium you came to this website)

Purposes of the data processing

On behalf of the operator, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data are/may be:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 DSGVO).
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Third country transfer

For the USA, the European Commission adopted a news adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider to establish an appropriate level of data protection in those countries.

Retention period

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

Legal basis

The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit. a GDPR and § 25 para. 1 p.1 TTDSG.

Withdrawal

You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google, by
a. not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

VI. How long will you retain my data?

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations, as long as the purpose of the data processing exists or until you revoke any consent you may have given. If the data are no longer required for these obligations, they are regularly deleted, unless their temporary further processing is required for legal reasons. Temporary processing may be necessary, for example, due to social security and tax regulations.

VII. What are my rights?

You have the right of access under Article 15 GDPR, the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), the right to object (Article 21 GDPR) and the right to data portability (Article 20 GDPR). Furthermore, you are entitled to lodge a complaint with a data protection supervisory authority (Article 77 GDPR).

To the extent that personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) (f) GDPR, data subjects have the right to object to the processing of their personal data pursuant to Article 21 GDPR, provided that there are reasons arising from the data subjects' particular situation. In addition, you can revoke any potentially given consent to the processing of personal data at any time.

Please note that the rights described above primarily apply to Roland Berger entities processing personal data within the EU under the GDPR framework. If your data is processed outside the EU, local data protection laws of the specific jurisdiction will apply, and you may have similar rights depending on the applicable regulations.

For exercising your rights, please send an email to [email protected] or by contacting us via the contact details given above under I.

VIII. Am I obliged to provide data?

The provision of your personal data (contact data) is required for your participation in the Alumni network.

IX. To what extent does Roland Berger carry out automated decision making (including profiling) within the Alumni network?

Roland Berger does not carry out automated decision making or profiling within the Alumni network.

Please also refer to our general Privacy Notice and our Pathfinder Privacy Notice.

X. Updates to this data protection notice

This data protection notice is regularly reviewed and updated. We therefore reserve the right to amend it from time to time and to make changes in the collection, processing, or use of your data. The most current version of this privacy policy is always available at:

https://alumni.rolandberger.com/pages/open/privacy/

Last update: December 2024

***