RRA Organizational Survey Privacy Notice

What personal information is collected?
If you participate in the Project, the voluntary questionnaire may be comprised of a number of questions about you that if answered, may involve the collection of the following types of personal information: (i) demographic identifiers, such as your gender, your nationality, your race or ethnicity, and your sexual orientation; and (ii) professional information, such as your length of tenure and management status. Your employer provides RRA with identification data such as your name and email address in order to send the survey and send reminders.  Depending on the country in which you are located, the demographic identifiers may be categorized as "sensitive data" or a "special category data" under applicable data protection laws.

Will RRA have access to your information?
Yes. If you participate in the Project, then RRA on behalf of your employer, will collect and process the types of personal information listed above.  

How will your information be used?
Your responses to the survey questions will be kept confidential and will only be used for purposes of assessing your organization’s leaders within the scope of the Project. Any information you provide will be de-identified and combined with responses from other participants to generate aggregate statistical and benchmarking data that are used to assess your firm’s leaders across a number of areas. The information is presented to your employer in the form of individual leader reports and a summary report that identifies patterns or trends related to assessed leadership dimensions. Your contact information will only be used to communicate with you about the Project (including to send you reminders if you have not completed a questionnaire) and to track those communications. RRA may also use aggregate statistics generated that do not identify you or your organization for RRA’s internal research purposes, including to analyze trends in a specific industry, for research on leadership trends and for quality assurance.  

Who has access to your information?
The confidentiality of your responses is of utmost importance to us.  RRA will not sell or share your information to or with any third parties, except with our third party vendors (on a confidential basis) who help us administer and store data under our strict instructions. We may also disclose your information if we are compelled to do so by applicable law, although we endeavor to redirect any such legal requests to your employer first (unless we are prohibited from doing so by law). Any disclosure of your information by RRA will be carried out in accordance with the terms of our engagement with your employer.

Where will we transfer your information?
RRA’s computer networks on which your information will be maintained, and the recipients discussed in the previous paragraph, are located in the United States and Singapore, where privacy laws may not be as protective as the laws where you are located. We take steps to ensure all recipients understand the confidential nature of any information provided and are subject to strict contractual requirements (including, for transfers from the UK and/or the European Economic Area, the applicable Standard Contractual Clauses) to protect your information in accordance with applicable data protection laws and the terms of our engagement with your employer.

How long do you keep my information?
RRA will hold records containing your personal information for as long as is necessary for the Project and in accordance with your employer's instructions. 

What are my privacy rights?
In some regions (like the European Economic Area / UK), you have certain rights under applicable data protection laws.  These may include the right: (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure of your personal information; (iii) to restrict the processing of your personal information; (iv) to data portability; and (v) to withdraw your consent to processing (although this will not affect the lawfulness of anything done before its withdrawal). In certain circumstances, you may also have the right to object to the processing of your personal information.  If you would like to exercise any of these rights, please follow the instructions provided under the heading "Who can I contact with questions?" below.

You also have the right to complain to a data protection authority about the collection and use of your personal information in connection with the Project.  For more information, please contact your local data protection authority.

Additional Information for European Residents (including residents of the European Economic Area, Switzerland and the UK ("Europe"))

What is your employer's legal basis to process your personal information?
In connection with the Project, your employer will process information about your race and sexual orientation that are considered special category data under the applicable data protection laws with your explicit consent (which has been obtained by RRA on your employer's behalf through this form). Your employer will process other demographic identifiers in reliance on its legitimate interests in understanding whether the performance of its leaders is impacted by diversity and inclusion factors.

Is your personal information stored outside of Europe?
RRA is a global business and your personal information will be transferred and processed by us or our service providers in the United States and Singapore, which may not have privacy laws as protective as the laws where you are located.  However, RRA takes steps to ensure that your personal information remains protected in accordance with applicable data protection laws and the terms of the engagement with your employer (for example, by entering into the applicable standard contractual clauses for the transfer of any data from European Economic Area, UK or Switzerland).

Who can I contact with questions? 
Your employer is the "controller" of your personal information, which means that if you have any questions about how your information is collected and used by RRA, or your rights in respect of your personal information, you should contact your employer in the first instance.  RRA principally processes your personal information as a "processor," meaning it is simply a service provider to your employer and uses your personal information only as your employer instructs.  Nevertheless, if you wish contact RRA for any reason, you may do so using the following contact details: privacy@russellreynolds.com