The types of personal information that BCG Inc. and its subsidiaries and affiliates (“we”), requests from you and the ways that we process it are determined by the requirements of the BCG office’s country in which the position is located, and not the country in which you reside. If you apply to more than one location or if the role to which you apply is available in more than one country, the types of personal information we request from you and the ways that we process it are determined by the requirements of all BCG offices’ countries in which the position is located. It can include e.g. your contact data, employment and educational history, grades, and data relating to your recruiting performance.
In addition to information you may submit directly to us now, we also collect information from third-party sources, such as professional recruiting firms, resume books, student organizations, and social media sites, in order to populate your profile. As a result, you may see information in your profile which you did not provide directly to us. We encourage you to revise any data which you feel is inaccurate or outdated or that you prefer not to include and we thank you for your help in keeping your profile up to date.
We do not seek to collect sensitive personal information about a candidate unless permitted to do so by applicable laws (e.g., US equal opportunity monitoring). We may collect some optional information that may reveal your sensitive personal data when we ask you about your dietary requirements for events registration, or whether you are interested in BCG LGBT initiative, and you may share with us information or a photo or video, which can reveal for instance your ethnic origin or handicap. Sensitive personal information is a subset of personal information and includes ethnicity, health, sexual orientation, as well as other categories as prescribed by law.
You are not required to provide any requested information to us, but failing to do so may result in not being able to continue your candidacy for the job for which you have applied.
We use your personal information for:
We may also analyze your personal information or aggregated data to improve our recruitment and hiring process and augment our ability to attract successful candidates.
We process your personal information for the purposes described above: when we have your consent to do so; when necessary to enter into an employment contract with you; when necessary for us to comply with a legal obligation; or when necessary for the purposes of our legitimate interests as an employer operating globally. You may withdraw your consent at any time by sending an email to email@example.com. For candidates in Germany please email us at firstname.lastname@example.org.
BCG uses carefully selected third-party service providers and business partners who:
BCG will ensure that legal mechanisms are in place with such third parties to protect your personal information.
Because BCG is a global organization we need to transfer personal information across geographical borders to BCG entities, our service providers or business partners in other countries working on our behalf in accordance with applicable law. Our affiliates and third parties may be based in different countries around the world, including outside of the EEA. Examples of countries we transfer personal information to include, but are not limited to, Germany, Netherlands, the United States of America, Singapore, and India. We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect information held in that country.
BCG has in place appropriate technological and operational security processes designed to protect your personal information from loss, misuse, alteration or destruction. Only authorized employees and providers will have access to any data provided by you, and that access is limited by need. Each employee or provider having access to any personal information is obligated to maintain its confidentiality. Although we take steps that are generally accepted as industry standard to protect your personal information, BCG cannot guarantee that your personally-identifiable information will not become accessible to unauthorized persons.
If we do not employ you, we may continue to retain and use your personal information for a period of time (which may vary depending on the country) for system administration purposes, and to perform research. At the expiry of this period, we will retain a minimum amount of your personal information to record your recruiting activity with us. In addition, we may ask you for permission to retain your personal data to consider you for future employment opportunities, as part of our optional recruiting programs. If you join a recruiting program, but subsequently wish to withdraw, please contact us at email@example.com.
In accordance with applicable data protection laws, including but not limited to the GDPR, you have a right to request a copy of the personal information we hold about you and details of how we use that information. If any of the information held about you is incorrect or out of date, you have the right to amend or rectify it. Please follow the process outlined below and we will amend our records where appropriate. You also have the right to require us to erase your personal data, stop processing your personal data, restricting the processing of your personal information, right of portability of your personal information and/or to withdraw your consent to processing. This may not apply if there are other legal justifications to continue processing.
If you think we may have incorrect personal information, or would like a copy of the personal information we hold on you, or to exercise any other data protection right, please write to: firstname.lastname@example.org.
You also have a right to lodge a complaint with your local supervisory authority.
For further questions you may contact the appropriate data protection point of contact:
Data Protection Office
The Boston Consulting Group Inc.
One Beacon Street
Boston, MA 02108
Data Protection Officer (Der Datenschutzbeauftragte)
The Boston Consulting Group GmbH
80539 Munich Germany