We at RHSPC, LLC (“RHSPC,” “we,” “our,” or “us”) take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have under applicable laws in both the United States (including Ohio law) and the European Union (GDPR and the German Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG).

1. Data Controller

The controller responsible for data processing in connection with this website is:

RHSPC, LLC
Registered Agents Inc
6545 Market Ave N Ste 100
Canton, Ohio 44721

Email: info@rhspc.com

2. Personal Data We Process

• Contact details (e.g., name, email address, phone number, mailing address) you provide via forms or direct communication.
• Message content from your inquiries.
• Website usage data (IP address, browser type, device information, pages visited) collected via cookies and analytics.
• Client/HR-related data you provide for consulting services (treated as strictly confidential).

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

United States / Ohio:

• Responding to inquiries and providing services in compliance with Ohio Revised Code § 1349.19 (data breach notification).
• Handling background checks in compliance with the Fair Credit Reporting Act (FCRA).
• Taking precautions comparable to HIPAA standards when handling sensitive employee health information.

European Union / Germany:

• Responding to inquiries and providing HR consulting (Art. 6(1)(b) GDPR – contract; Art. 6(1)(f) – legitimate interests).
• Communicating with you about our services (Art. 6(1)(b), Art. 6(1)(f) GDPR).
• Improving our website and services (Art. 6(1)(f) GDPR).
• Complying with legal obligations (Art. 6(1)(c) GDPR).
• With your consent for cookies/analytics (Art. 6(1)(a) GDPR).

4. Cookies and Tracking

We use cookies and similar technologies:

• Essential cookies: Required for functionality.
• Non-essential cookies/analytics: Used only with explicit consent (GDPR, TTDSG).

Consent mechanism: When you first visit our website, a cookie banner will appear, allowing you to consent to or reject non-essential cookies. You can change your preferences at any time via the banner or through your browser settings. We store your consent decision and respect it until you withdraw or change it.

5. Hosting and Service Providers

Our website is hosted by Hostinger International Ltd. (Cyprus). Hostinger acts as a data processor under Art. 28 GDPR. We also engage carefully selected service providers (e.g., IT, analytics, email, and professional partners such as payroll processors) under confidentiality agreements and Data Processing Agreements. Where service providers are located outside the EU, we ensure adequate safeguards (such as EU Standard Contractual Clauses or participation in the EU-U.S. Data Privacy Framework).

6. Sharing of Data

We do not sell or rent personal data. We may share information with:

• Service providers and professional partners as necessary.
• Legal or regulatory authorities if required by law.
• Recipients in third countries (e.g., the U.S.) where safeguards such as EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework apply.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, or as required by law. Specifically:

• Contact form and email data: typically deleted after 24 months unless longer retention is required for legal reasons.
• Client/HR data: retained for the duration of the engagement and up to 10 years for legal and tax obligations.
• Server logs: typically deleted after 30 days.
• Analytics data: retained for a maximum of 14 months.

8. Data Security

We apply appropriate technical and organizational measures (TOMs) to protect your data, including encryption, secure servers, access controls, and contractual safeguards with our service providers. However, no online system can be guaranteed 100% secure.

9. Your Rights

United States / Ohio:

• Right to be notified in the event of a data breach (Ohio Revised Code § 1349.19).
• Rights under the Fair Credit Reporting Act (FCRA) when background checks are involved.
• Comparable safeguards to HIPAA for sensitive health data.

European Union / Germany:

• Right of access, rectification, erasure, restriction, portability, objection (Arts. 15–21 GDPR).
• Right to withdraw consent (Art. 7(3) GDPR).
• Right to lodge a complaint with a supervisory authority. For Leipzig, this is:
    Sächsischer Datenschutzbeauftragter
    Bernhard-von-Lindenau-Platz 1
    01067 Dresden, Germany
    www.datenschutz.sachsen.de

Automated decision-making and profiling: We do not use your personal data for profiling or automated decision-making within the meaning of Art. 22 GDPR.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most recent version will always be posted on our website, with the date of revision indicated at the top.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: info@rhspc.com