Privacy policy

Last updated: June 2026

1. responsible person

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Thomas Buhl
Am Dachsbau 59
13503 Berlin
Germany
Phone: 030 / 39821419
E-mail: info@remstim.com
Website: https://remstim.com

2. general information on data processing

We process personal data only to the extent necessary to provide this website, to process inquiries, to process orders, to provide digital content, to process payments, to fulfill legal obligations or on the basis of legitimate interests.

Personal data is all information that relates to an identified or identifiable natural person, in particular name, address, e-mail address, telephone number, IP address, order data, payment data, usage data and technical access data.

The processing of personal data takes place in particular on the basis of Art. 6 para. 1 lit. a GDPR, insofar as consent is obtained, Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, Art. 6 para. 1 lit. c GDPR, insofar as legal obligations exist, as well as Art. 6 para. 1 lit. f GDPR, insofar as the processing is necessary to safeguard legitimate interests.

3. access to the website and server log files

When you access this website, the web server automatically processes information that your browser transmits. This may include in particular

• IP address
• Date and time of access
• Page or file accessed
• Referrer URL
• Browser used
• Operating system used
• Amount of data transferred
• Message about successful or failed retrieval

The processing takes place in order to make the website technically available, to ensure the stability and security of the systems, to prevent misuse and to analyze errors.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and functional operation of this website.

4. contact us by e-mail, telephone or contact form

If you contact us by e-mail, telephone or via a contact form, we process the data you provide, in particular your name, e-mail address, telephone number, message text and other voluntarily provided information.

The processing is carried out to process your request and to communicate with you. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as your request is related to a contract or pre-contractual measures, otherwise Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the proper response to inquiries.

The data will be deleted as soon as the request has been finally processed and there are no statutory retention obligations or other legitimate reasons for further storage.

5. cookies and comparable technologies

This website uses cookies and similar technologies. Cookies are small text files that are stored on your end device. Some cookies are technically necessary to provide the website and its functions. Other cookies or comparable technologies are only used if consent has been given for this.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR and Section 25 (2) TDDDG. Our legitimate interest lies in the technically error-free and user-friendly provision of the website.

Non-necessary cookies and comparable technologies, in particular for analysis, marketing or tracking purposes, are only used on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 (1) TDDDG. Any consent given can be revoked at any time with effect for the future.

6. consent management with Real Cookie Banner

We use the WordPress plugin “Real Cookie Banner” to manage and document consent to cookies and similar technologies.

Real Cookie Banner is used to obtain and manage consent and to document it in a legally secure manner. In particular, the following data can be processed:

• Your consent or refusal decision
• Date of the decision
• Technical information on the browser and end device used
• IP address in truncated or otherwise technically required form

The processing is carried out to fulfill legal obligations to provide evidence and to manage your consents. The legal bases are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in the legally compliant administration and documentation of consents.

7. online store with Ecwid / Lightspeed

We use the Ecwid or Lightspeed store system to operate our online store for physical products.

If you place an order via our online store, the personal data required for the order and contract processing will be processed. This may include in particular

• Name and address
• E-mail address
• Telephone number, if given
• Order data
• Delivery address
• Invoice data
• Payment method
• Technical order and transaction data

The processing takes place for the execution of the purchase contract, for order processing, for payment allocation, for delivery of the goods, for customer communication and for the fulfillment of legal storage obligations.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. c GDPR.

Insofar as Ecwid / Lightspeed processes personal data on our behalf as a technical service provider, this is done on the basis of an agreement on order processing in accordance with Art. 28 GDPR or on the basis of the respective applicable data protection agreements of the provider.

8. payment processing for physical products

The payment methods displayed in the order process are available in the online store for the payment of physical products. These may include, in particular, PayPal, Stripe, credit card, Google Pay and prepayment by bank transfer.

Depending on the selected payment method, payment data is transmitted to the respective payment service provider or collected directly by them. The processing takes place for payment processing, payment confirmation, fraud prevention and contract execution.

The legal bases are Art. 6 para. 1 lit. b GDPR and, insofar as legal obligations exist, Art. 6 para. 1 lit. c GDPR. Insofar as payment service providers pursue their own purposes, they are independently responsible under data protection law.

8.1 PayPal

If you select PayPal as your payment method, payment will be processed via PayPal. In particular, your name, e-mail address, invoice amount, order information, payment status, IP address and other data required for payment processing may be processed.

The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Further information on data processing by PayPal can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

8.2 Stripe

If you choose a payment method offered via Stripe, in particular credit card or Google Pay, the payment will be processed via Stripe.

In particular, name, e-mail address, billing data, payment data, card data, transaction data, IP address and other technical information may be processed.

The provider for users within the European Union is Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Further information on data processing by Stripe can be found in Stripe’s privacy policy:
https://stripe.com/de/privacy

8.3 Prepayment by bank transfer

If payment is made in advance, we process the data required for payment allocation, in particular the name, invoice amount, order number, bank details of the payer, if evident from the transfer, as well as the receipt of payment.

The processing is carried out for the execution of the contract and payment allocation on the basis of Art. 6 para. 1 lit. b GDPR.

9. digital products via CopeCart

For the purchase of digital products, in particular the digital video tutorial, you will be redirected from our website to the CopeCart checkout.

The Customer’s contractual partner for the purchase of the digital product is CopeCart. Conclusion of the contract, payment processing, invoicing, revocation processing and the processing of the purchase contract are carried out via CopeCart in accordance with the conditions displayed in the checkout.

As part of the CopeCart checkout, the data entered by the Customer is processed by CopeCart. This may include, in particular, name, address, e-mail address, payment data, invoice data, product data, transaction data and technical access data.

We receive the data from CopeCart that is required to assign the purchase, to provide digital access, for customer communication and to fulfill legal obligations. This may include, in particular, name, e-mail address, purchased product, purchase status and technical transaction information.

The legal basis for the processing by us is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the provision of digital access or for communication with the customer. Insofar as statutory retention obligations exist, the legal basis is Art. 6 para. 1 lit. c GDPR.

Further information on data processing by CopeCart can be found in the CopeCart checkout and in the data protection information provided there.

10. provision of digital content via Memberspot

We use the Memberspot platform to provide the digital video tutorial.

provider is:

Memberspot GmbH
Rilkestraße 26
71642 Ludwigsburg
Germany

Memberspot processes personal data on our behalf in accordance with Art. 28 GDPR. The basis is an agreement on order processing.

In particular, communication data, especially the e-mail address, as well as technical usage and progress data within the platform are processed. This may include whether, when and how often certain content was accessed or completed and at what point a video was paused.

This processing serves to provide protected access, the technical delivery of the content, the orientation of the user within the video tutorial, the security of access and the prevention of unauthorized use.

No personal supervision, examination, assessment, correction of tasks or individual learning success control takes place on the basis of this data.

The legal bases are Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the provision of digital access, and Art. 6 para. 1 lit. f GDPR, insofar as the processing serves to protect access, technical security and the prevention of misuse.

11. access protection, DRM and device fingerprinting for digital content

To protect the digital video tutorial from unauthorized distribution, duplication or misuse, we use technical protection measures within the Memberspot platform.

In particular, DRM protection mechanisms, a limitation of access profiles, devices or IP addresses as well as device or access-related detection can be used for this purpose.

As part of these protective measures, technical information may be processed, in particular:

• IP address
• Login times
• Device and browser features
• Access and usage data
• Technical identifiers for the recognition of accesses
• Information on video playback and license verification

The sole purpose of this processing is to protect the acquired access to the video tutorial against unauthorized disclosure, to prevent misuse, to restrict use to the intended group of users and to enable the technical playback of protected video content.

In this respect, it is not used for advertising purposes or to create advertising user profiles.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in protecting our digital content, preventing unauthorized use, ensuring that the video tutorial is provided in accordance with the contract and protecting against commercial misuse.

If Memberspot uses subcontractors for DRM, video provision, technical delivery, error analysis or device detection, this is done within the framework of the data protection agreements with Memberspot.

12. subcontractors of Memberspot

Memberspot may use subcontractors to provide the platform, hosting, video delivery, e-mail delivery, error analysis, authentication, database management, DRM licensing and device recognition.

According to the information provided by Memberspot, this may include in particular providers for hosting and infrastructure, databases, content delivery networks, video storage, e-mail dispatch, error monitoring, DRM licensing and device fingerprinting.

Insofar as processing takes place outside the European Union or the European Economic Area or access from a third country cannot be ruled out, this takes place in accordance with the relevant data protection requirements, in particular on the basis of standard contractual clauses or other suitable guarantees in accordance with Art. 44 et seq. GDPR.

13th WP Statistics

This website may use the analysis tool WP Statistics to statistically evaluate visitor access.

The provider is Veronalabs, Tatari 64, 10134 Tallinn, Estonia.

We can use WP Statistics to analyze the use of our website. In particular, log data, IP address, referrer, browser used, origin of the user, search engine used and page views can be processed.

Where WP Statistics is used, the data is always stored on our own server. We use WP Statistics with anonymized or shortened IP addresses where possible.

The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the statistical analysis of the use of our website, the improvement of our offer and the technical optimization of the website.

Insofar as consent is requested for the use of WP Statistics, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time with effect for the future.

14 Google Ads and conversion tracking

This website may use Google Ads and Google Conversion Tracking to measure the effectiveness of advertisements and to optimize our advertising.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you reach our website via a Google ad, Google may set a cookie or use comparable technologies to recognize whether certain actions take place on our website after clicking on an ad, such as a purchase, an inquiry or another defined conclusion.

In particular, the IP address, browser information, device information, pages visited, time of access, referrer information and information about the interaction with advertisements may be processed.

Google may also process the data on servers outside the European Union or the European Economic Area. If data is transferred to third countries, this is done in accordance with the data protection guarantees provided by Google.

Google Ads Conversion Tracking is only used if you have given your consent via our consent tool. The legal basis is Art. 6 para. 1 lit. a GDPR and Section 25 (1) TDDDG. Consent can be revoked at any time with effect for the future.

Further information on data processing by Google can be found at:
https://policies.google.com/privacy?hl=de

15 YouTube

Videos from YouTube may be embedded on this website.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When a page with an embedded YouTube video is accessed, personal data may be transmitted to Google or YouTube. This may include, in particular, IP address, browser information, device information, the page accessed and information about the playback of the video.

If you are logged into your YouTube or Google account while visiting our website, Google can assign the visit to our website to your user account.

Insofar as YouTube videos are only loaded after you have given your consent, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 (1) TDDDG. Consent can be revoked at any time with effect for the future.

Further information on data processing by Google can be found at:
https://policies.google.com/privacy?hl=de

16. amazon partner links

This website may contain links to offers from Amazon. If such links are designed as partner links or affiliate links, we may receive a commission if a purchase is made via this link.

If you click on an Amazon partner link, you will leave our website and be redirected to Amazon. Personal data may be processed by Amazon, in particular IP address, technical access data and information that you have reached Amazon via a partner link.

The provider is Amazon Europe Core S.à r.l. or the respective responsible company of the Amazon Group.

Further information on data processing by Amazon can be found at:
https://www.amazon.de/gp/help/customer/display.html?nodeId=3312401

17 Legal bases of the processing

Insofar as we obtain consent for processing operations, Art. 6 para. 1 lit. a GDPR legal basis.

Insofar as the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR Legal basis.

Insofar as we are legally obliged to process data, in particular due to retention obligations under tax or commercial law, Art. 6 para. 1 lit. c GDPR legal basis.

Insofar as the processing is necessary to safeguard legitimate interests and the interests, fundamental rights and fundamental freedoms of the data subject do not prevail, Art. 6 para. 1 lit. f GDPR Legal basis.

18. storage period

We only store personal data for as long as is necessary for the respective purposes or for as long as statutory retention periods apply.

Data in connection with orders, invoices and business communication may be stored for the legally prescribed periods due to commercial and tax law obligations.

Data from inquiries will be deleted as soon as the inquiry has been finally processed, provided there are no statutory retention obligations or legitimate interests in further storage.

Consent data, in particular in connection with cookie consent management, is stored for as long as is necessary to prove consent and manage it.

19. recipients of personal data

Personal data may be passed on to service providers and contractual partners within the scope of the purposes described above, in particular to:

• Hosting and IT service provider
• Store and platform providers
• Payment service provider
• Shipping service provider
• Tax consultants and accounting service providers
• Support and communication service provider
• Technical service providers for the provision of digital content
• Authorities, insofar as a legal obligation exists

Data will only be passed on if there is a legal basis for this, if this is necessary to fulfill the contract, if there is a legal obligation, if consent has been given or if there is a legitimate interest.

20. transfer to third countries

Some providers used by us or our service providers may be based outside the European Union or the European Economic Area or process data there.

If personal data is transferred to third countries, this will only take place if the requirements of Art. 44 et seq. GDPR are met. This can be done in particular on the basis of an adequacy decision by the European Commission, standard contractual clauses or other suitable guarantees.

21. safety of processing

We take appropriate technical and organizational measures to protect personal data against loss, destruction, unauthorized access, modification or unauthorized disclosure.

The security measures are adapted in accordance with the state of the art, the implementation costs, the nature, scope and purposes of the processing and the risk to the rights and freedoms of natural persons.

22 Your rights

You have the following rights within the scope of the legal requirements:

• Right to information pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to withdraw consent pursuant to Art. 7 (3) GDPR
• Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

You can contact us at any time to exercise your rights:

E-Mail: info@remstim.com

23 Revocation of consent

If processing is based on your consent, you can revoke this consent at any time with effect for the future.

The legality of the processing carried out until the revocation remains unaffected by the revocation.

You can revoke or change your consent to cookies and similar technologies via the settings of our consent tool.

24. right of objection

If we process personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If personal data is processed for direct marketing purposes, you have the right to object to this processing at any time.

25. right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data violates data protection regulations.

In particular, the data protection supervisory authority of your usual place of residence, your place of work or the place of the alleged infringement may be responsible.

26. no automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Technical protection measures such as access protection, DRM or device fingerprinting for digital content are not used for automated decisions on personal characteristics, but solely to protect the acquired digital access and prevent misuse.

27 Updating and amending this privacy policy

This privacy policy may be adapted if legal requirements, technical functions, service providers used or our data processing processes change.

The current version published on this website applies in each case.