GDRP & EEA

GDPR & EEA Compliance

The EU’s General Data Protection Regulations (GDPR) take effect May 25, 2018, and we are fully behind the spirit of these regulations for a safe and secure Internet. We aspire to embrace privacy by design and, whenever possible, to not collect and store personally identifiable information. 

Our Privacy Policy contains mentions of the few instances where personally identifiable information is required. Typically this will include an email address to log in to Recession Proof Holdings, LLC, or a social network username to manage your account.

Overall, we aim for privacy by default: if data collection is not integral to the way our product works, then we won’t collect it. This approach has felt very much in line with the spirit of GDPR, and we’re fortunate that a lot of these data collection practices have been in place at Recession Proof Holdings, LLC for some time. As such, you may see a few banners or forms requesting consent for us to collect personally identifiable information for tracking or other purposes. We don’t deem this information necessary to provide Recession Proof Holdings, LLC’s service to you, and we choose not to engage in activities and strategies that make this data relevant.

At any time, you may request your information to be exported and sent to you for review, and we promptly honor any requests by you to have your information deleted and forgotten.

LEGAL FRAMEWORKS FOR DATA TRANSFERS

Effective February 1, 2020

Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in the Privacy Policy. We also comply with certain legal frameworks relating to the transfer of data, such as the European frameworks described below.

The European Commission has determined that certain countries outside of the European Economic Area (EEA) adequately protect personal data. You can review current European Commission adequacy decisions here. To transfer data from the EEA to other countries, such as the United States, we comply with legal frameworks that establish an equivalent level of protection with EU law.

EU-U.S. and Swiss-U.S. Privacy Shield Frameworks

As described in our Privacy Policy, we comply with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries (including EEA member countries) and the UK as well as Switzerland, respectively. RPH, including Recession Proof Holdings, LLC, and its wholly-owned US subsidiaries (unless explicitly excluded), has certified that it adheres to the Privacy Shield Principles. RPH remains responsible for any of your personal information that is shared under the Onward Transfer Principle with third parties for external processing on our behalf, as described in the “Sharing your information” section. 

If you have an inquiry regarding our privacy practices about our Privacy Shield certification, we encourage you to contact us. Recession Proof Holdings (RPH) is subject to the investigatory and enforcement powers of the US Federal Communications Commission (FCC). You may also refer a complaint to your local data protection authority and we will work with them to resolve your concern. In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Google's Annex I to the Privacy Shield Principles.

Model contract clauses

The European Commission has approved the use of model contract clauses as a means of ensuring adequate protection when transferring data outside of the EEA. By incorporating model contract clauses (Google) into a contract established between the parties transferring data, personal data can be protected when transferred outside the EEA to countries that have not been deemed by the European Commission to adequately protect personal data.


Contact Us