Other Covered Entities

A.T. Kearney, Inc.
Cervello, Inc.

Industries

  • Business and Professional Services
  • Management Consulting Services

Participation

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 9/26/2017
Next Certification Due Date: 6/5/2024
Data Collected: HR, NON-HR

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 11/9/2016
Next Certification Due Date: 6/5/2024
Data Collected: HR, NON-HR

Purpose of Data Collection

As processors, A.T. Kearney, Inc. and its other covered entities (collectively, “Kearney”) receive personal data about its clients/ consumers located in the EU. For example, in connection with providing strategic, management, and data consulting or other services to its clients Kearney may access or obtain personal data about a client’s consumers located in the EU. In addition, Kearney may access or obtain personal data about a client’s consumers located in the EU in connection with providing support services to the subsidiaries and affiliates of A.T. Kearney Holdings Limited. Kearney also collects personal data directly from consumers. This collection occurs, for example, when a consumer visits Kearney’s websites or mobile applications, and provides personal data through the websites or mobile applications. In addition, Kearney obtains personal data, such as contact information, in connection with maintaining the firm’s client relationships and providing services to clients. Kearney also obtains personal data, such as contact information, of its vendors and representatives. Kearney uses this information to manage its relationships with its vendors. Kearney obtains and processes personal data about its workers, and the workers of its subsidiaries and affiliates, when carrying out and supporting administrative and human resources functions and activities. Kearney also obtains and processes personal data about workers’ emergency contacts and other individuals (such as dependents and beneficiaries) to the extent our workers provide the information to the company. Kearney processes this information to comply with its legal obligations and for internal administrative purposes. Kearney may disclose personal data to recipients such as (1) the company’s affiliates and subsidiaries, (2) third-party controllers and (3) third-party processors the company has retained to perform services on its behalf and pursuant to its instructions. Kearney also may disclose personal data if it is required to do so by law or legal process or in response to lawful requests from public authorities, including to meet national security, public interest or law enforcement requirements.

Privacy Policy

HR Data

Cervello employee data privacy policy
Description:

Effective Date: 7/1/2022
Kearney employee privacy policy
Description:

The Policy is available to employees on the company’s intranet.

Effective Date: 7/6/2022

Non-HR Data

Description:

Effective Date: 7/1/2022
Description:

Effective Date: 7/14/2023
Description:

E.U.-U.S. Privacy Shield: Consumer Privacy Policy

Effective Date: 6/1/2023
Description:

Effective Date: 3/22/2023

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact A.T. Kearney, Inc. at:

Kacie Moscrip
Associate Counsel
A.T. Kearney, Inc.
227 W Monroe St
Chicago, Illinois 60606

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from A.T. Kearney, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against A.T. Kearney, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission