Information we collect
Castalia collects personal data in the course of its business activities, including in connection with some client services. We also collect personal data on certain areas of the Sites when you register for or apply for jobs through the Castalia Recruitment Portal, create a user profile, register for Castalia newsletters and alerts, participate in our alumni activities, sign up for conferences and events, or participate in public user posting areas (such as bulletin boards, discussion forums and surveys). The personal data collected varies and may include information that you provide, such as your name, mailing address, e-mail address, telephone number, fax number, and background information required to apply for a job.
We may also automatically collect information about the devices you use to interact with our Sites. The information we automatically collect may include IP address, device identifier, web browser, and browsing information collected through cookies, web beacons, pixels, clear gifs, and other similar technologies (collectively “Cookies and Other Tracking Technologies”) on our Sites. We may also automatically collect information about how you use the Sites, such as what you have searched for and viewed on the Sites. The information automatically collected may be associated with any personal data you have provided.
Castalia may also collect personal data about you from third parties, such as data brokers or aggregators, in the course of its business activities including in connection with some client services. We may combine this data with existing information we have about you or use it independently, for the purposes of our benchmarking and data analytics activities. We will always seek to confirm that the third party has informed you in advance about use of this data.
Use of information
Our Sites do not track you by collecting personal data about your online activities over time and across third party websites or online services. Accordingly, we do not alter our data collection and use practices in response to “do not track” signals transmitted from web browsers.
Use of information collected via mobile devices
In connection with our mobile applications, Castalia may use third party service providers to analyze user activity to fix errors, monitor usage, and improve the performance of the mobile applications.
The legal basis by which we process your personal data
Our processing of your personal data for the purposes mentioned above is based:
- in part, on our legitimate interests in promoting and protecting Castalia, building and maintaining relationships, recruitment, and providing our services;
- in part, on your consent, for example if you create a user profile, or register for our newsletters or alerts, or for business purposes that support web operations such as understanding and enhancing the quality of your experience on our web-site;
- in part, to comply with the law, when certain information is necessary to satisfy our legal or regulatory obligations.
Data recipients and international data transfers
Personal data collected in the course of Castalia business activities, including in connection with some client services, as well as on the Sites may be transferred from time to time to Castalia subsidiaries and affiliates and their personnel across our global organization, as well as to our third party service providers located throughout the world, including in countries where the local law may grant you fewer rights than you have in your own country. Additionally, the Sites may be viewed and hosted by Castalia and our third-party service providers anywhere in the world. Where required by law, we have put in place legal mechanisms designed to ensure adequate data protection of your personal data that is processed by Castalia subsidiaries, affiliates and third-party service providers, including the transfer of your personal data to countries other than the one in which you reside. If you would like more information about these legal mechanisms, which may include the EU’s Standard Contractual Clauses, please contact us at the address below. By using any of the Sites and providing information on any of them, you consent to such trans-border transfer and hosting of such information.
We also may share your personal data with third party service providers who perform services and functions on our behalf to support our interactions with you, including, for example, processing recruitment materials, administering surveys or contests, or communicating with you.
In addition, we may disclose information about you:
- If we are required to do so by law or legal process
- When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity
- If disclosure is necessary to protect the vital interests of a person
- To protect our property, services and legal rights
- To prevent fraud against Castalia, our subsidiaries, affiliates and/or business partners
- To support auditing, compliance, and corporate governance functions; or
- To comply with applicable laws.
In addition, we may disclose or transfer your personal data in the event of a re-organization, merger, sale, joint venture, assignment, or other transfer or disposition of all or any portion of our business.
You should be aware that whenever you publicly disclose information online, that information could be collected and used by others. Castalia is not responsible for any action or policies of any third parties who collect information that users publicly disclose in any such forums on the Sites.
Link to third party sites
The Sites may allow you to sign into and associate your social network accounts including, but not limited to, Twitter, LinkedIn, Facebook, associated with Castalia.
If you would like to disconnect a social media account from us, refer to the settings of that social network account and its provider.
Castalia has implemented generally accepted standards of technology and operational security to protect personal data from loss, misuse, alteration, or destruction. Only authorized Castalia personnel and third-party service providers are provided access to personal data, and these employees and service providers are required to treat this information as confidential. Despite these precautions however, Castalia cannot guarantee that unauthorized persons will not obtain access to your personal data.
Castalia retains personal data, as necessary, for the duration of the relevant business relationship.
The Sites are not designed for or directed at children 13 years of age or younger, and Castalia does not intentionally collect or maintain personal data about anyone under this age.
Where granted by applicable law, you may have the right to request access to the personal data that we have collected about you for the purposes of reviewing, modifying, or requesting deletion of the data. You may also have the right to request a copy of the personal data that we have collected about you and to have any inaccuracies in that data corrected. In certain circumstances, you may also request that we cease processing your personal data.
If you would like to make a request to access, review, or correct the personal data we have collected about you, or to discuss how we process your personal data, please contact us the Data and Privacy Protection Officer (DPPO). To help protect your privacy and security, we will take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your personal data. We will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law. Different laws may prevent us from providing access to your personal data or otherwise fully complying with your request depending upon the circumstances and the request, such as for example, where producing your information may reveal the identity of someone else. We reserve the right to charge an appropriate fee for complying with your request where allowed by applicable law, and/or deny your requests where they may be manifestly unfounded, and/or excessive, or otherwise objectionable or unwarranted under applicable law.
In addition, and where granted by local law, you have the legal right to lodge a complaint with a competent data protection authority.
If you have registered for Castalia newsletter or alerts, or you receive invitations to survey or events from Castalia and you prefer not to receive future email communications from us, please review the communications settings in your profile on mckinsey.com, follow the instructions on the page of the Site where you have provided such information, subscribed or registered to unsubscribe from all Castalia communications.
Your California privacy rights
Pursuant to California Civil Code Section 1798.83(c)(2), Castalia does not share your personal data with third parties for those third parties’ direct marketing use.