Roland Berger – Alumni Data Protection Notice
The relevant domestic and international data protection framework that applies to Roland Berger requires the protection of our alumni's personal data. In addition, the lawfulness and transparency of all data processing operations is a guiding principle for Roland Berger. We therefore provide you with the following information about our data processing operations on the platform of the Roland Berger Alumni Network:

I. Who is responsible for the data processing operations and who can I contact?
The responsible controller is:
Roland Berger Holding GmbH & Co. KGaA, Sederanger 1, 80538 München, Germany
alumni.network@rolandberger.com

For data protection inquiries, please contact:
Roland Berger Holding GmbH & Co. KGaA, Sederanger 1, 80538 München, Germany
dataprotection@rolandberger.com

II. What are the purposes of the processing operations and on what legal basis do we process the data?
Purposes of the processing operations
The purposes of our processing operations are:
• To stay in contact with you and invite you to alumni events and other events organized by our corporate group
• To stay in touch with your former colleagues and other alumni to maintain a network, utilize business contacts, establish business relationships with other alumni, and grow your ongoing careers
• To send you useful professional information and material or give you the opportunity to request it
• To make job openings available to you
• To support you in your professional development when we see opportunities to do so
• To establish new business relations with you or develop business opportunities where appropriate
• To carry out the admission and registration process
• You also have the possibility to contact the Alumni team using this contact form or email addresses, telephone and fax numbers provided on the platform of the Roland Berger Alumni Network. When you contact us through the above channels, we will store and process the resulting personal data for the purposes of dealing with your request. All data are used exclusively for the processing of your request.

Legal basis for the processing operations
In case of your consent, the legal basis for the processing operations is Article 6 (1) lit. a) GDPR. In case of contract initiations or executions, the legal basis for the processing operations is Article 6 (1) lit. b) GDPR. In all other cases, the legal basis for the processing operations is Article 6 (1) lit. f) GDPR.

III. Who will receive my data?
We will make the information you provide available to other alumni, as well as selected employees of the Roland Berger Group via password-protected access to our alumni database. We offer visibility settings that allow you to choose what information you share publicly. These personal settings can be changed at any time. As members of our network, you and your former colleagues as well as other alumni can use publicly shared information to stay in touch, maintain a network, utilize business contacts, establish business relationships with other alumni, and grow your ongoing careers.
You will also be able to search and respond to job listings advertised by other alumni, Roland Berger offices, hiring companies, or executive search companies in our database. Roland Berger may correspondingly make your personal data available to HR departments of other companies or offices of the Roland Berger Group in accordance with this Privacy Notice. In addition, we may also make your data available to hiring companies or executive search companies. We ensure that your personal data is treated strictly confidentially within the Roland Berger Group and only used for the above-mentioned purposes. In case of such an intra group data sharing, and with respect to any data processing operation according to this Alumni Data Protection Notice, you can contact and enforce your rights against Roland Berger under the contact details given above under I. If your personal data is transferred to a country outside European Union (EU) or the European Economic Area (EEA) which is not subject to a comparable level of data protection, we will ensure that the data transfer is based on an adequacy decision or conclusion of the EU standard contractual clauses.
Access to personal data is also technically possible for service providers and contract partners that we use to operate our IT systems. These external providers are obliged to use your personal data only to provide the services requested by us or otherwise in accordance with our instructions. Apart from these transmissions, your personal data will not be disclosed or passed on to third parties.

IV. What cookies are used (Cookie Declaration)?

V. How is Google analytics used?
If you have given your consent, this website uses Google Analytics, a web analysis service of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored.

We use the function 'anonymizeIP' (so-called IP-Masking): Due to the activation of IP-anonymization on this website, your IP-address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. During your website visit the following data will be collected:

• The pages you call up, your "click behaviour“
• Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)
• Your user behavior (for example clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information about your browser and the end devices you use (e.g. language settings, screen resolution)
• Your internet provider
• The referrer URL (via which website/advertising medium you came to this website

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. If the data are no longer required for these obligations, they are regularly deleted, unless their temporary further processing is required for legal reasons. Temporary processing may be necessary, for example, due to social security and tax regulations.

VII. What are my rights?
Every Alumni has the following rights:
• Right of access, Article 15 GDPR
• Right to rectification, Article 16 GDPR
• Right to erasure, Article 17 GDPR
• Right to restriction of processing, Article 18 GDPR
• Right to data portability, Article 20 GDPR
• Right to object, Article 21 GDPR
Furthermore, you are entitled to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). In addition, you can revoke any potentially given consent to the processing of personal data at any time with effect for the future by sending an email to dataprotection@rolandberger.com or by contacting us via the contact details given above under I.
 
VIII. Am I obliged to provide data?
The provision of your personal data (contact data) is required for your participation in the Alumni network.

IX. To what extent does Roland Berger carry out automated decision making (including profiling) within the Alumni network?
Roland Berger does not carry out automated decision making or profiling within the Alumni network.

Please also refer to our general Privacy Notice and our Pathfinder Privacy Notice.