Last updated: July 16, 2026

Executive Consulting Group, LLC, dba ECG Management Consultants (“ECG”), is committed to protecting and respecting the privacy of your personal data. This Privacy Notice explains how we collect and process your personal data in compliance with applicable data privacy laws when you search for or apply for an open job with ECG. The Privacy Notice explains what personal data is used, for what purposes, with whom it is shared, and your rights in connection with the processing of your data.

Compliance with Local Laws

This Privacy Notice is a general guide on how ECG processes your personal data. As such, you should be aware that data protection and privacy laws can vary in different jurisdictions where ECG operates. ECG’s policy is to comply with applicable local, state, federal, and international laws.

Processing Your Personal Data

This section describes what categories of personal data we use during the recruitment and application process and for what purpose.

The personal data that ECG processes about you primarily consists of the information that you have provided about yourself and data that our recruiting teams and our recruitment and application systems collect and generate about you during the recruitment process. We collect only the information reasonably necessary for recruiting and employment-related purposes. Such personal data (candidate profile information) will be stored in your candidate profile and may include:

General Personal Information

• Information that identifies you, such as your name, date of birth, identification numbers, photograph, and citizenship.
• Contact information, such as your email address and telephone number.
• Information about your education and qualifications, skills, work experience, references, and compensation.
• Referral names and contact information for referrals.
• Information about your location, including relocation preferences.
• Information about your interests, the roles you are interested in, the roles you have applied for, and search queries.
• Account information, such as your username and password.
• Work authorization status.

Sensitive Personal Information (where permitted or required)

• Government identifiers (e.g., SSN, national ID, driver’s license).
• Race and ethnicity (for equal opportunity compliance).
• Health or disability status (for accommodations).
• Background check information.

When you apply for a job, we additionally process the following data, which may include data from third-party sources, e.g., recruitment agencies, career platforms, background check providers, references, or previous employers (application data):

• Information about your interview availability.
• Video interview recordings. ECG does not use facial recognition, emotion recognition, or biometric identification technologies in connection with candidate video interviews.
• Results of your background check(s).
• Assessment information, such as (test) results from an external assessment.
• Information related to our hiring decision process.
• Special categories of personal data, such as health data or religious beliefs, to the extent required by local law.
• Travel expense and reimbursement information related to your application.

As part of the recruitment and application process, we offer you different options and choices that affect how we process your personal data, including who we share it with.

You can:

• Apply for an open job at ECG.
• Create job alerts.
• Join a talent community.

Here is how your choices affect how we use and share your personal information:

Applying for an Open Job

If you apply for a specific job, we will process your candidate profile information and application data to evaluate whether you meet the qualifications for the open job. You may log in to your account to view the status of your application, update your profile, view current job opportunities, manage email subscriptions, and submit a data subject request (e.g., to delete your personal information).

Our recruitment and application systems help us analyze candidate profiles against open positions. However, the final hiring decisions are made by individuals. We may also use your candidate profile information to consider you for all of our open jobs, independent of an application. This means we compare your candidate profile with open jobs and other candidates to identify and suggest positions that match your preferences and interests, as well as our job requirements. This may include automated processing methods, such as machine learning, artificial intelligence, and generative intelligence, to analyze your personal data, identify trends, or generate AI-generated responses or other content. Hiring decisions are made by individuals and are not based solely on automated results.

We may contact you, invite you to schedule one or more interviews, make a final decision regarding your potential employment, conduct reference checks, and begin the hiring and onboarding process.

During the application process, we may use a video interview tool that allows you to record your answers to specific questions.

Upon acceptance of an offer, we will conduct background checks as part of the recruitment and hiring process. Further information can be found below under Background Checks.

Creating a Job Alert

You can choose to create one or more job alerts to be informed about open jobs. Once you create a job alert, we use your candidate profile information, in particular email address, and the information you provide, including city, job category, and more, to send you personalized job alerts.

Joining a Talent Community

When you join a talent community, we will use your candidate profile information, including your resume, email address, and/or phone number, to share insights and relevant company news. By joining a talent community, you will also become part of our talent pool, and your data will be available to our recruiters, who may use it to match you with suitable job opportunities within ECG.

Employee Referral Program

If an ECG employee refers you, we will use your name and email address received to notify you of the referral and invite you to apply. If you decide to apply, your personal data will be processed in accordance with this Privacy Notice. If you decide not to apply, your personal data will be deleted 6 months after the referral.

Background Checks

Upon accepting an offer, we conduct background checks on candidates to ensure their suitability and integrity for the position. These checks may be conducted to verify the accuracy of the information you provided during the application process. You will receive details about the specific background check(s) that will be conducted.

The specific personal data processed will depend on the type of background check. For more information, please refer to the specific background check privacy notice provided to you by our independent vendor.

Improving Our Recruitment Processes

We use candidate profile information and application data for recruitment analytics purposes, with the objective of monitoring and enhancing our recruitment efforts. This includes, for example, analyzing the progression of candidates through the recruitment process; identifying candidate sources; improving diversity, inclusion, and belonging in our recruitment practices; and evaluating the effectiveness of recruitment campaigns. This helps us to optimize our recruitment strategies and enhance your overall experience.

Compliance with Legal Obligations

We process your personal data to comply with our legal obligations, which may include accounting, bookkeeping, auditing, reporting requirements, and legal proceedings. For this purpose, we process candidate profile information, application data, and possibly additional personal data depending on the type of legal obligation and proceedings involved.

Legal Basis for the Processing

We process your personal data based on the following legal grounds:

• Your consent, which we will ask for when it is required (Art. 6(1)(a)) of the General Data Protection Regulation (“GDPR”).
• To assess if you are a good fit for the open job and determine whether we enter into an employment contract with you (Art. 6(1)(b) GDPR).
• To comply with a legal obligation requiring us to process your personal data (Art. 6(1)(c) GDPR).
• Where we believe it is in our legitimate interests, taking into consideration your interests, rights, and expectations (Art. 6(1)(f) GDPR). Our legitimate interests lie in managing and improving our recruitment and application processes, enhancing the candidate experience, and engaging with our talent community. Where ECG relies on its legitimate interests for processing your personal data, we have determined that, after a balancing of interests, our legitimate interests are not overridden by your interests, rights, or freedoms.

Cookies and Tracking Technology

ECG's career site uses standard technology called a "cookie" to collect information about how you use the website.

A cookie is a small text file that is stored on your computer or mobile device to remember information about you, such as your preferences or login information. We do not use cookies to read any other information on your computer or mobile device. This information is used for internal purposes only, and we do not link the information we store in cookies to Personally Identifiable Information (PII) you submit while on this career site. We use cookies to let us know when you visit this career site and how you interact with us, to enrich and personalize your experience, and to help us understand how you use this career site. Our third-party partners do not tie the information gathered to our users’ PII.

ECG’s career site does not currently recognize “do not track” signals transmitted by web browsers.

Links to Other Websites

The ECG career site may contain links to third-party websites and applications. This Privacy Notice, however, only applies to the ECG career site and does not cover how third-party organizations process personal data. For information on their processing of your personal data, we encourage you to read their data privacy policies.

Recipients and Transfer of Personal Data

ECG will only share your personal data with those who have a legitimate need for it. ECG does not sell your personal data. As permitted by law, we may share information with the following recipients, provided that such transfer is necessary:

• Other recipients such as (IT-) service providers which process personal data as part of supporting the recruitment and application process (e.g., recruitment and application software providers, recruitment services providers, agencies, background check vendors, etc.).
• An ECG employee who referred you to inform them about the limited, general status of the referral.
• Third parties in connection with complying with legal obligations or establishing, exercising, or defending rights or claims or in relation to corporate transactions (e.g., for court and arbitration proceedings, to law enforcement authorities and regulators, to attorneys and consultants).

ECG does not restrict applications from countries outside of the United States of America, and as part of our recruitment efforts, your personal data will be processed globally. As such, we may transfer your personal data and process it outside your country of residence. Sometimes, a recipient to whom ECG transfers personal data is in a country in which applicable laws do not provide the same level of data protection as the GDPR. In such cases and unless permitted otherwise by applicable law, ECG only transfers personal data from the EU/EEA if appropriate and suitable safeguards for the protection of personal data are implemented, in particular, if the recipient has entered into the EU Standard Contractual Clauses for the transfer of personal data to third countries (with the UK Addendum if applicable) with us; or has self-certified with the International Trade Administration (ITA) its compliance under the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as applicable; or if the recipient has introduced approved Binding Corporate Rules in its organization.

Data Privacy Framework

ECG complies with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF regarding the transfer of personal data to the United States from the EU/EEA, the UK, and Switzerland. Additional notices applicable to residents of the EU/EEA, UK, and Switzerland under this certification are available here.

Storage Duration and Deletion

Scheduled Data Deletion

If you submit an application for an open job, we store your candidate profile information and application data for the duration of the active recruitment and application process for any position(s) you have applied for. After the conclusion of the recruitment process, we retain your candidate profile information and application data for a period of four (4) years from your most recent application date. Each new application resets this retention period. Once four (4) years have passed without any new application activity, your information will be deleted or anonymized, unless legal obligations or the establishment, exercise, or defense of legal claims make a longer retention necessary. We reserve the right to use anonymized data for any legitimate business purpose.

If you are successful in your application, your application and candidate profile information will be retained as part of your employment record.

Any candidate profile information not associated with a job application, such as a profile created to join our talent community, will also be deleted or anonymized after a period of 4 years.

Deletion/anonymization will occur on the last business day of the month following the 4-year expiration date.

Candidate profile information you have provided as part of creating a job alert will be deleted once you unsubscribe from all job alerts.

Children

ECG’s career site is not directed to or intended to be used by anyone under the age of 18. We do not knowingly collect personal data from anyone under the age of 13. If you are under 18, please do not attempt to fill out our forms or send any personal data about yourself to us. If we learn that we have collected personal data from a child under age 18, we will delete that data promptly.

Your Rights

Under various local, state, and international laws, you may have specific rights in relation to your personal data. In particular, and subject to the statutory requirements and jurisdiction, you may be entitled to:

• Obtain confirmation as to whether ECG processes personal data about you and, where that is the case, obtain access to your personal data processed by ECG as well as other information.
• Obtain the rectification of your inaccurate personal data processed by ECG.
• Obtain from ECG the erasure of your personal data processed by ECG. Please note that there are circumstances under which such a right of deletion does not apply.
• Obtain from ECG restriction of processing of your personal data.
• Obtain a copy of your personal information that you have provided to ECG or request that your personal information be transmitted to another recipient.
• Object on grounds relating to your particular situation to the processing of your personal data by ECG insofar as the processing of your personal data is based on legitimate interests.
• Obtain a list of third parties (other than natural persons) to which personal data has been disclosed.
• Be informed of what data is collected, who is collecting it, for how long, how to file a complaint, and whether data sharing is involved.
• Be safeguarded from discrimination or retaliation for the exercise of your privacy rights.

If you have given ECG your consent to process your personal data, you have the right to withdraw your consent at any time with effect for the future, i.e., your withdrawal does not affect the lawfulness of the processing based on consent before its withdrawal.

To exercise any of your rights, please visit our careers site. Select Returning Candidates and follow the login prompts. From the dashboard, select Data Subject Requests, then submit your request. For questions regarding your rights, please contact ECGPrivacy@ecgmc.com. ECG will acknowledge receipt of a request within 10 business days and provide a substantive response within 30 calendar days of receipt.

ECG Privacy Team

The ECG Privacy Team provides support with any data privacy-related questions, comments, concerns, or complaints, or in case you wish to exercise any of your data privacy-related rights. The ECG Privacy Team may be contacted at: ECGPrivacy@ecgmc.com. The ECG Privacy Team will always use best efforts to address and settle any requests or complaints brought to its attention.

In addition, you may also contact a supervisory authority with requests or complaints. You can find the contact details of your local data protection authority in the EU/EEA here.

If you reside in the UK, you may contact the UK’s Information Commissioner’s Office as the UK data protection regulator at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF; 0303 123 1113 or www.ico.org.uk.

Use of Artificial Intelligence (AI) in Recruitment

We use an AI-powered hiring platform from Endorsed to help us review applications. We want you to know how it works and what your rights are.

What the AI does

• Application review. The AI reads your resume and your answers to screening questions, compares them to the job description and our hiring criteria, and produces a ranked list with reasons. This helps our recruiters decide whose application to read first.
• Fraud detection. A separate AI checks for signals of identity fraud — for example, sanctioned state actors, stolen identities, and fake identities. This helps our recruiters prioritize legitimate candidates.

A human makes the final decision. The AI does not decide whether to hire, reject, or advance you. A human recruiter reviews applications and makes those decisions. Endorsed’s assessment is one of several factors considered in the hiring process.

Audit results. A bias audit of Endorsed has been conducted within the last year, and the results are available at https://trust.warden-ai.com/endorsed.

Your rights. Various local, state, and international laws confer specific rights in relation to AI use. In particular, and subject to the statutory requirements and jurisdiction, you may be entitled to:

• Be notified of AI technology used in processing your application.
• Be notified within 30 days of an AI-assisted decision with an adverse outcome.
• Request a human review of an AI-assisted outcome and/or an explanation of how AI affected a decision about you.
• To exercise this right, if applicable, please visit our careers site. Select Returning Candidates and follow the login prompts. From the dashboard, select Data Subject Requests, then select Request Review or Explanation of an AI-Assisted Outcome, and submit your request. We will respond within 30 days.

How long we keep your data. We keep your AI inputs and outputs for up to 90 days after this hiring process ends, unless we have a legal reason to keep it longer or you agree otherwise. Technical logs are kept for up to 12 months.

Notice for New York City Residents:

When applying for jobs through the ECG career site, Endorsed may be used in connection with your application. You have a right to take at least 10 business days to decide whether to proceed with submitting your information through this process, subject to the job remaining open. By continuing, you confirm your understanding of this notice. If you choose to proceed before the 10-business-day period expires, you are making a knowing and voluntary decision to do so.

Additional Information for California Residents

This section supplements the information contained within this Privacy Notice and provides additional information to California consumers as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, “CCPA”).

California residents are granted the right by law to opt out of the sale of their personal information. ECG does not sell or share personal information (as those terms are defined in the CCPA).

If you reside in California, you may contact the California Privacy Protection Agency at https://privacy.ca.gov/submit-a-complaint/ccpa-complaints/.

Notice of Collection

This Privacy Notice explains the types of information we collect, how we collect information, how we use the information we collect, and with whom we share the information.

As previously stated herein, the nature of your relationship with us will determine the specific information we collect, and how/why that information is collected, used, and shared.

Data Subject Requests

The CCPA may grant you the right to submit certain data subject requests. Please see the sections titled “Your Rights” above, for more information regarding the type of requests you may submit, how you may submit such requests, and how ECG responds to such requests. For questions regarding your rights, please contact ECGPrivacy@ecgmc.com. If you do not have an online account with us, you may contact us toll-free via our affiliate, Siemens Healthineers, at 1-844-901-1795 to make a request concerning any of your rights above.

Opt-Out of AI Application Assessment

If you prefer not to have your application assessed using Endorsed, you may opt out by emailing recruiting@ecgmc.com. Opting out will not negatively impact your application, which will be reviewed manually by our team.

California’s “Shine The Light” Law:

California’s “Shine The Light” law permits California residents to annually request a list of their personal information (if any) that we have disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties. At this time, we do not share any personal information with third parties for their direct marketing purposes.