Recruitment Privacy Policy

This Privacy Policy only applies to the personal information of job applicants, potential candidates for employment, and our optional recruiting programs and events.

 

 

What information do we collect?

The types of personal information that BCG Inc. and its subsidiaries and affiliates (“we”), request from you and the ways that we process it are determined by the requirements of the BCG office’s country in which the position is located, and not the country in which you reside. If you apply to more than one location or if the role to which you apply is available in more than one country, the types of personal information we request from you and the ways that we process it are determined by the requirements of all BCG offices’ countries in which the position is located. It can include e.g. your contact data, employment and educational history, grades, and data relating to your recruiting performance.

In addition to information you may submit directly to us now, we also collect information from third-party sources, such as professional recruiting firms, resume books, student organizations, and social media sites, in order to populate your profile. As a result, you may see information in your profile which you did not provide directly to us. We encourage you to revise any data which you feel is inaccurate or outdated or that you prefer not to include and we thank you for your help in keeping your profile up to date.

We do not seek to collect sensitive personal information about a candidate unless permitted to do so by applicable laws. We may collect some optional information that may reveal your sensitive personal data when we ask you about your dietary requirements for events registration, or whether you are interested in BCG LGBT initiatives, and you may share with us information or a photo or video, which can reveal for instance your ethnic origin or disability. Sensitive personal information is a subset of personal information and includes ethnicity, health, sexual orientation, as well as other categories as prescribed by law.

You are not required to provide any requested information to us, but failing to do so may result in not being able to continue your candidacy for the job for which you have applied.

 

 

How do we use your information?

We use your personal information for:

 

  • recruiting and business management reasons including, identifying and evaluating candidates for potential employment, as well as for future roles that may become available;

 

  • inviting you to recruiting events and keeping you informed about recruiting programs;

 

  • record keeping in relation to recruiting and hiring;

 

  • ensuring compliance with legal requirements, including diversity requirements and practices; and

 

  • protecting our legal rights to the extent authorized or permitted by law.

 

We may also analyze your personal information or aggregated data to improve our recruitment and hiring process and augment our ability to attract successful candidates.

We process your personal information for the purposes described above: when we have your consent to do so; when necessary to enter into an employment contract with you; when necessary for us to comply with a legal obligation; or when necessary for the purposes of our legitimate interests as an employer operating globally. You may withdraw your consent at any time by sending an email to .

 

 

When will we share your information?

BCG uses carefully selected third-party service providers and business partners who:

 

  • provide a recruiting software system;

 

  • process information on our behalf to help run some of our internal business operations including email distribution and IT services;

 

  • assist us in recruiting talent, administering and evaluating pre-employment screening and testing, and improving our recruiting practices;

 

  • organize events;

 

  • law enforcement bodies in order to comply with any legal obligation or court order.

 

BCG will ensure that legal mechanisms are in place with such third parties to protect your personal information.

 

 

Do we transfer your personal information across geographies?

Because BCG is a global organization we may transfer personal information across geographical borders to BCG entities, our service providers or business partners in other countries working on our behalf in accordance with applicable law. Our affiliates and third parties may be based in different countries around the world, including outside of the EEA. Examples of countries we transfer personal information to include, but are not limited to, Germany, Netherlands, the United States of America, Singapore, and India. We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect information held in that country.

 

 

How do we protect your information?

BCG has in place appropriate technological and operational security processes designed to protect your personal information from loss, misuse, alteration or destruction. Only authorized employees and providers will have access to any data provided by you, and that access is limited by need. Each employee or provider having access to any personal information is obligated to maintain its confidentiality. Although we take steps that are generally accepted as industry standard to protect your personal information, BCG cannot guarantee that your personally-identifiable information will not become accessible to unauthorized persons.

 

 

How long will we retain your information?

If we do not employ you, we may continue to retain and use your personal information for a period of time (which may vary depending on the country) for system administration purposes, and to perform research. At the expiry of this period, we will retain a minimum amount of your personal information to record your recruiting activity with us. In addition, we may ask you for permission to retain your personal data to consider you for future employment opportunities.

 

 

Your Rights

In accordance with applicable data protection laws, including but not limited to the GDPR, you have a right to request a copy of the personal information we hold about you and details of how we use that information.  If any of the information held about you is incorrect or out of date, you have the right to amend or rectify it. Please follow the process outlined below and we will amend our records where appropriate. You also have the right to require us to erase your personal data, stop processing your personal data, restricting the processing of your personal information, right of portability of your personal information and/or to withdraw your consent to processing.  This may not apply if there are other legal justifications to continue processing.

If you think we may have incorrect personal information, or would like a copy of the personal information we hold on you, or to exercise any other data protection right, please write to:

You also have a right to lodge a complaint with your local supervisory authority.

For further questions you may contact

 

 

Cookies and other tracking technologies

We use cookies on this website. A cookie is a small piece of data that is created when visiting a website and stored on the system of the user of the website. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. In our Cookie Policy you can find out about essential and non-essential cookies and change your preferences.

Cookies are stored on your computer and transmitted to us by it. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. You can also change the cookie settings in our cookie banner.

In addition, we use the following tracking technologies:

Information on legal bases: The legal basis for the use of essential cookies (necessary for the operation of the website) is Art. 6 (1) sentence 1 lit. f GDPR. We use cookies required on our website to ensure the proper operation of the website and to provide basic functionality. These purposes also constitute our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR. In the case of non-essential cookies, the legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • Piwik PRO Analytics Suite
    We use Piwik PRO for the analysis of our website. We collect first-party data about website visitors based on cookies, IP numbers and browser fingerprints; we create user profiles based on browsing history and calculate metrics related to website usage, such as bounce rate, intensity of visits, page views, etc. We host our solution in the Microsoft Azure infrastructure in the Netherlands and the data is stored in raw data for a period of 25 months.The cookies are only set after you have given us your consent. The purpose of data processing is analysis  and conversion tracking on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • Google Ads (formerly: AdWords)
    We use Google Ads (formerly: AdWords) and, as part of Google AdWords, conversion tracking, an online advertising service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.We use this for search and display ads and, in this context, conversion tracking (visit action evaluation). When you click on an ad served by Google, a conversion tracking cookie is stored on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of ours and the stored cookie on your computer  has not yet expired, it can be seen that someone  has been redirected to our website through the advertisement. Each AdWords customer receives a different cookie. Cookies can thus be tracked via the websites of AdWords customers. The assignment takes place via a statistical evaluation of non-personal data.Further detailed information on the information processed can be found  under https://www.google.com/intl/de/policies/privacy/#infocollect under  “Data we receive as a result of your use of our services”, as well as under https://privacy.google.com/businesses/adsservices/.The cookies are only set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  •  Google Analytics
    On our website we use Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.Google Analytics uses cookies that enable an analysis of the use of the websites you visit. Your IP address and your online identifier may be processed.  In addition, web beacons, i.e. not visible graphics, can also be used, which e.g.  enable the evaluation of visitor traffic on websites. The information generated by cookies and web beacons about the use of our website (including the IP address of the users) is transmitted to a Google server, possibly in the USA or other third countries, and stored there. This information may be passed on by Google to contractual partners of Google.Detailed information on the processed information can be found here: https://www.google.com/intl/de/policies/privacy/#infocollect.By integrating Google Analytics, we pursue the purpose of analyzing user behavior on our website and being able to react to it. This allows us to continuously improve our offer.The cookies are only set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • Google Tag Manager
    We use Google Tag Manager on our website. Google Tag Manager is a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.The Google Tag Manager enables us to integrate various codes and services on our website in a simplified way and to get an overview of the integrated services; in addition, the loading times of the various services are optimized.  Tags are implemented by Google Tag Manager.  In doing so,  Google may process information (including personal data), such as: Your IP address and your online identifier. It cannot be ruled out that Google may also transmit the information to a server in a third country.Detailed information about Google Tag Manager can be found here: https://www.google.de/tagmanager/use-policy.html.The tags will only be set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • Bing Universal Event Tracking (UET)
    We use Bing Universal Event Tracking (UET) (formerly “Bing Ads”) on our website. UET is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.UET allows us to track the activities of you as a user on our website if you have come to our website via advertisements from Microsoft Ads. If you access our website via such an advertisement, a cookie will be placed on your computer. Some non-personal data about the use of the website is stored, including the time spent on the website, areas of the website accessed and on the basis of which display the website was reached. Information about your identity is not collected.In doing so, UET may process information (including personal data), such as: Your IP address and your online identifier. It cannot be ruled out that the information may also be transmitted to a server in a third country.For more information about privacy at Microsoft, see the Microsoft Privacy Statement (https://privacy.microsoft.com/de-de/privacystatement).The cookies are only set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • Meta Pixel
    On our website we use the “Meta-Pixel” of Meta (formerly Facebook).  The meta-pixel is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.When you click on an ad placed on Facebook, Instagram, or another Meta product, a Meta “tracking pixel” (“Meta Pixel”) is placed on your computer for conversion tracking. Among other things, collects your IP address, device and browser properties, and page events. These meta-pixels lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of ours and the stored cookie on your computer has not yet expired, it is recognizable that someone has been redirected to our website through the ad on Facebook. Each Facebook user receives a different meta pixel. Meta-pixels can thus be tracked via the ads placed on Facebook websites. The assignment takes place via a statistical evaluation of non-personal data. As a result, the effectiveness of the Meta advertisements can be evaluated for statistical and market research purposes and future advertising measures can be optimized. This allows Facebook to place advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.In Facebook’s privacy policy you will find further information on the protection of your privacy: https://de-de.facebook.com/about/privacy/.The cookies/ pixels are only set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • Reddit Pixel
    We also advertise on Reddit  (so-called Reddit ads). For this purpose, we use the Reddit pixel to check the effectiveness of this advertising.Reddit, Inc., 548 Market St.  #16093, San Francisco, California 94104.When you click on an ad placed on Reddit, a conversion tracking cookie is placed on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of ours and the stored cookie on your computer  has not yet expired, it can be seen that someone  has been redirected to our website through the advertisement. Each Reddit Ads customer receives a different cookie. Cookies can thus be tracked via the websites of Reddit Ads customers. The assignment takes place via a statistical evaluation of non-personal data.Further information on data protection at Reddit can be found in the LinkedIn privacy policy: https://www.reddit.com/policies/privacy-policy?tid=130340934The cookies are only set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).

 

  • LinkedIn Insight Tag
    Our website uses the conversion tool “LinkedIn Insight Tag” of LinkedIn Ireland Unlimited Company.When you click on an ad placed on LinkedIn, a conversion tracking cookie is stored on your computer. Among other things, Collects your IP address, device and browser properties, and page events. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of ours and the stored cookie on your computer has not yet expired, it is recognizable that someone has been redirected to our website by the advertisement. Each LinkedIn customer receives a different cookie. Cookies can thus be tracked via the websites of Reddit Ads customers. The assignment takes place via a statistical evaluation of non-personal data.Further information on data protection at LinkedIn can be found in the LinkedIn data protection information: https://www.linkedin.com/legal/privacy-policyThe cookies are only set after you have given us your consent. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR; you can revoke this at any time (see: G) Revocation of your consent).