DATA PROCESSING & GDPR NOTICE
MEDIATION BRIEF™
🌍 DATA PROCESSING & GDPR NOTICE
Effective Date: April 1, 2026
1. Introduction
Organizational Strategy, LLC (“OSL,” “we,” “our,” or “us”) may process personal data of individuals located outside of the United States, including those in the European Economic Area (“EEA”), the United Kingdom (“UK”), and other jurisdictions with applicable data protection laws.
This Data Processing & GDPR Notice supplements our Privacy Policy and explains how we handle personal data in accordance with applicable international data protection principles.
2. Scope of Application
This Notice applies to personal data collected through:
- Our websites and platforms
- Our Services, including Position Statement™, Bilingual HRBP™, Remote HRBP™, and Mediation Brief™
- Communications, scheduling tools, and interactions with users
3. Legal Basis for Processing (Where Applicable)
Where required by applicable law, OSL processes personal data on one or more of the following legal bases:
- Consent: When you voluntarily provide information or agree to receive communications
- Performance of a Contract: To provide Services you request
- Legitimate Interests: To operate, improve, and secure our Services
- Legal Obligations: To comply with applicable laws and regulations
4. Your Rights (EEA/UK and Similar Jurisdictions)
Depending on your location, you may have rights under applicable data protection laws, including:
- The right to access your personal data
- The right to correct inaccurate data
- The right to request deletion of your data
- The right to restrict or object to processing
- The right to data portability (where applicable)
- The right to withdraw consent (where processing is based on consent)
You may exercise these rights by contacting us using the information provided below.
5. International Data Transfers
As described in our Privacy Policy, personal data may be transferred to and processed in the United States or other jurisdictions.
Where applicable, OSL takes reasonable steps to implement safeguards for international data transfers, which may include:
- Contractual protections with service providers
- Data processing agreements
- Security measures designed to protect personal data
6. Data Minimization and Retention
We process only the personal data necessary for the purposes described in our Privacy Policy and retain such data only as long as necessary to:
- Provide Services
- Comply with legal obligations
- Resolve disputes and enforce agreements
7. Data Security
OSL implements reasonable administrative, technical, and physical safeguards to protect personal data from unauthorized access, disclosure, or misuse.
However, no method of transmission or storage is completely secure.
8. Third-Party Processors
We may engage third-party service providers (processors) to assist with:
- Payment processing
- Scheduling and communications
- Analytics and marketing
- Customer relationship management
These processors are required to process personal data only on our behalf and in accordance with applicable data protection obligations.
9. No Establishment in the European Union
OSL is based in the United States and does not maintain an establishment in the European Union or United Kingdom.
If required by applicable law in the future, OSL will take appropriate steps to comply with additional regulatory requirements.
10. Contact Information
If you have questions about this Notice or wish to exercise your data protection rights, please contact:
📧 info@positionstatement.com
Simply Put
- If you are outside the U.S., your data may still be processed by us
- We use your data only for legitimate business purposes
- You may have additional privacy rights depending on your location
- We take reasonable steps to protect your information