Policy
privacy
The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:
Nicole May, trading as Salted Strength Club
Sole proprietorship (Einzelunternehmen)
c/o Christian Jahnke
Gulisastraße 93
56072 Koblenz
Germany
Email: hello@saltedstrengthclub.com
Website: https://saltedstrengthclub.com
For questions about this Privacy Policy or the processing of your personal data, please contact us using the email address above.
1. CONTROLLER
Last updated: September 20, 2026
Salted Strength Club
This Privacy Policy explains how Salted Strength Club (“SSC,” “we,” “us,” or “our”) collects and processes personal data when you:
Personal data means any information relating to an identified or identifiable individual.
- Visit our public website;
- Use our Uscreen membership platform;
- Create or manage an account;
- Start a free trial or purchase a membership;
- Watch or interact with our training content or community features;
- Contact us; or
- Subscribe to or receive communications from us.
Personal data means any information relating to an identified or identifiable individual.
2. scope of this privacy policy
We collect personal data:
- Directly from you when you create an account, purchase a membership, contact us, or interact with the service;
- Automatically when you visit our website or use the membership platform; and
- From service providers involved in delivering the website, membership, payment, and communication services.
3. HOW WE COLLECT PERSONAL DATA
Our public website is created and hosted using Showit, provided by Showit, Inc.
When you visit the website, technical data may be processed to display the site securely and reliably. This may include:
This processing is necessary to provide the website and protect it against technical failures, misuse, and unauthorized access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are operating a secure, reliable, and functional website.
Showit may use hosting and infrastructure providers located outside the European Economic Area. More information is available in Showit’s Privacy Policy.
When you visit the website, technical data may be processed to display the site securely and reliably. This may include:
- IP address;
- Date and time of access;
- Pages and files requested;
- Browser and device information;
- Operating system;
- Referring page or website; and
- Technical error and security information.
This processing is necessary to provide the website and protect it against technical failures, misuse, and unauthorized access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are operating a secure, reliable, and functional website.
Showit may use hosting and infrastructure providers located outside the European Economic Area. More information is available in Showit’s Privacy Policy.
4. WEBSITE HOSTING AND TECHNICAL DATA
You can contact us at hello@saltedstrengthclub.com.
If you contact us, we process the information you provide, which may include:
We use this information to answer your request and provide customer support.
The legal basis is Article 6(1)(b) GDPR where your message concerns a current or potential membership or other contractual matter. For general inquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to communications concerning SSC and its services.
Our business email is hosted using Spacemail, provided by Spaceship. Email content and associated technical data are therefore processed through this provider. Spacemail may automatically scan messages for spam, malware, phishing, and other harmful activity.
Please do not send sensitive medical or health information by email unless it is necessary for us to address your request.
If you contact us, we process the information you provide, which may include:
- Your name;
- Email address;
- The content of your message;
- Attachments; and
- Related correspondence.
We use this information to answer your request and provide customer support.
The legal basis is Article 6(1)(b) GDPR where your message concerns a current or potential membership or other contractual matter. For general inquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to communications concerning SSC and its services.
Our business email is hosted using Spacemail, provided by Spaceship. Email content and associated technical data are therefore processed through this provider. Spacemail may automatically scan messages for spam, malware, phishing, and other harmful activity.
Please do not send sensitive medical or health information by email unless it is necessary for us to address your request.
5. CONTACTING US
Our membership platform, video library, account system, checkout, and member features are provided through Uscreen, operated by Uscreen.TV, LLC.
When you create or use an SSC membership account, the following information may be processed:
We use this information to:
Processing required to create an account, administer a trial, or provide a membership is based on Article 6(1)(b) GDPR.
Processing required for tax, accounting, consumer-protection, or other legal obligations is based on Article 6(1)(c) GDPR.
Security, fraud prevention, service administration, and protection of our legal rights are based on Article 6(1)(f) GDPR.
Uscreen processes subscriber data on our behalf as a data processor. Uscreen and its subprocessors may process personal data in the United States and other countries outside the European Economic Area, subject to the safeguards described in Section 15. More information is available in Uscreen’s Privacy Policy.
Certain account information is required to create an account or purchase a membership. If you do not provide that information, we may be unable to create your account, process your membership, or provide the requested service.
When you create or use an SSC membership account, the following information may be processed:
- Name;
- Email address;
- Account and authentication information;
- Country and approximate location;
- Subscription and free-trial information;
- Purchases, invoices, payments, and transaction history;
- Membership status and renewal dates;
- Content viewed and viewing progress;
- Workout or program completion activity;
- Favorites, playlists, and viewing history;
- Community posts, comments, profile information, and other content you choose to provide;
- Customer-support communications;
- IP address;
- Browser and device information;
- Login and session information;
- Referring URLs and campaign information; and
- Security and fraud-prevention data.
We use this information to:
- Create and administer your account;
- Provide access to purchased content;
- Operate the seven-day free trial;
- Manage subscriptions, renewals, and cancellations;
- Save workout progress and account preferences;
- Provide community and member features;
- Process payments and maintain transaction records;
- Provide customer support;
- Detect misuse, fraud, or unauthorized account access; and
- Maintain and improve the operation of the membership service.
Processing required to create an account, administer a trial, or provide a membership is based on Article 6(1)(b) GDPR.
Processing required for tax, accounting, consumer-protection, or other legal obligations is based on Article 6(1)(c) GDPR.
Security, fraud prevention, service administration, and protection of our legal rights are based on Article 6(1)(f) GDPR.
Uscreen processes subscriber data on our behalf as a data processor. Uscreen and its subprocessors may process personal data in the United States and other countries outside the European Economic Area, subject to the safeguards described in Section 15. More information is available in Uscreen’s Privacy Policy.
Certain account information is required to create an account or purchase a membership. If you do not provide that information, we may be unable to create your account, process your membership, or provide the requested service.
6. USCREEN MEMBERSHIP PLATFORM
If you use community, commenting, or other interactive features, your profile information and the content you submit may be visible to other members.
Do not publish medical information, payment details, private contact information, or other sensitive personal data in public or member-visible areas.
Community content is processed to provide the interactive membership features you choose to use. The legal basis is Article 6(1)(b) GDPR.
We may remove or restrict content where necessary to enforce our Terms of Service, protect other users, maintain platform security, or comply with legal obligations. The legal bases are Articles 6(1)(c) and 6(1)(f) GDPR.
Do not publish medical information, payment details, private contact information, or other sensitive personal data in public or member-visible areas.
Community content is processed to provide the interactive membership features you choose to use. The legal basis is Article 6(1)(b) GDPR.
We may remove or restrict content where necessary to enforce our Terms of Service, protect other users, maintain platform security, or comply with legal obligations. The legal bases are Articles 6(1)(c) and 6(1)(f) GDPR.
7. COMMUNITY CONTENT
Membership payments are processed through Stripe.
When you enter payment information at checkout, it is transmitted to Stripe. Depending on the payment method, Stripe may process:
SSC does not receive or store your complete payment-card number. We may receive limited transaction information, such as the payment status, transaction amount, payment method, card type, expiration information, and the last four digits of the card.
The legal basis for processing payments is Article 6(1)(b) GDPR. Tax and accounting records are processed under Article 6(1)(c) GDPR. Fraud prevention and the establishment, exercise, or defense of legal claims may be based on Article 6(1)(f) GDPR.
Stripe may act as our processor for certain activities and as an independent controller for activities it determines itself, including regulatory compliance, fraud prevention, and payment-network obligations.
More information is available in Stripe’s Privacy Policy and Stripe’s Privacy Center.
When you enter payment information at checkout, it is transmitted to Stripe. Depending on the payment method, Stripe may process:
- Name;
- Billing address;
- Email address;
- Country;
- Payment-card or payment-account information;
- Transaction amount and currency;
- Tax-related information;
- IP address and device information; and
- Fraud-prevention and authentication information.
SSC does not receive or store your complete payment-card number. We may receive limited transaction information, such as the payment status, transaction amount, payment method, card type, expiration information, and the last four digits of the card.
The legal basis for processing payments is Article 6(1)(b) GDPR. Tax and accounting records are processed under Article 6(1)(c) GDPR. Fraud prevention and the establishment, exercise, or defense of legal claims may be based on Article 6(1)(f) GDPR.
Stripe may act as our processor for certain activities and as an independent controller for activities it determines itself, including regulatory compliance, fraud prevention, and payment-network obligations.
More information is available in Stripe’s Privacy Policy and Stripe’s Privacy Center.
8. PAYMENTS AND STRIPE
We may send emails necessary to provide and administer your account, including:
These communications are necessary to perform the membership contract and are based on Article 6(1)(b) GDPR or, where applicable, Article 6(1)(c) GDPR.
Operational emails may be sent through Uscreen or our email provider.
- Account-verification messages;
- Password-reset messages;
- Purchase and payment confirmations;
- Trial and subscription information;
- Renewal, cancellation, or failed-payment notices;
- Material service or policy updates; and
- Customer-support responses.
These communications are necessary to perform the membership contract and are based on Article 6(1)(b) GDPR or, where applicable, Article 6(1)(c) GDPR.
Operational emails may be sent through Uscreen or our email provider.
9. TRANSACTIONAL AND MEMBERSHIP EMAILS
We send promotional emails only where you have consented or where applicable law otherwise permits us to contact existing customers.
Where marketing is based on consent, the legal basis is Article 6(1)(a) GDPR. Where communication with an existing customer is legally permitted without separate consent, the legal basis is Article 6(1)(f) GDPR together with the applicable requirements of German unfair-competition law.
You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting hello@saltedstrengthclub.com.
Unsubscribing from promotional emails does not prevent us from sending account, billing, security, or other service-related messages.
Where marketing is based on consent, the legal basis is Article 6(1)(a) GDPR. Where communication with an existing customer is legally permitted without separate consent, the legal basis is Article 6(1)(f) GDPR together with the applicable requirements of German unfair-competition law.
You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting hello@saltedstrengthclub.com.
Unsubscribing from promotional emails does not prevent us from sending account, billing, security, or other service-related messages.
10. marketing communications
We use Google Analytics 4 on our public Showit website to understand how visitors find and use the website, evaluate website performance, and improve our content and navigation.
Google Analytics is provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Depending on your consent choices, Google Analytics may process information such as:
Google Analytics is configured to operate according to the consent status communicated through CookieScript. Analytics cookies and analytics storage are not enabled unless you provide the required consent. If analytics consent is not granted, analytics storage remains denied and Google Analytics operates only in the limited manner supported by the configured consent settings.
The legal basis for consent-based analytics processing is Article 6(1)(a) GDPR. Access to or storage of analytics information on your device is based on Section 25(1) TDDDG.
You may withdraw or change your consent at any time through the cookie settings control on our website. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Our current Google Analytics data-retention settings are:
These retention settings apply to the relevant user-level and event-level data maintained through Google Analytics and do not necessarily affect aggregated reporting data.
Google Signals and user-provided data collection are not currently enabled. We do not currently use Google Analytics to submit customer email addresses or other user-provided identifying information to Google for analytics or advertising matching.
Our Google Analytics configuration applies to the public Showit website. It does not currently provide analytics tracking inside the separately hosted Uscreen membership platform.
Google and its subprocessors may process data outside the European Economic Area. Such transfers are made using an applicable adequacy decision, including the EU–US Data Privacy Framework where available, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
More information is available in Google’s Privacy Policy and its information about Google Analytics data safeguards.
Google Analytics is provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Depending on your consent choices, Google Analytics may process information such as:
- Pages visited;
- Date, time, and duration of visits;
- Interactions with website content;
- Referring websites and campaign information;
- Browser, device, operating-system, and screen information;
- General geographic information;
- Technical network and online-identifier information; and
- Events relating to navigation and website use.
Google Analytics is configured to operate according to the consent status communicated through CookieScript. Analytics cookies and analytics storage are not enabled unless you provide the required consent. If analytics consent is not granted, analytics storage remains denied and Google Analytics operates only in the limited manner supported by the configured consent settings.
The legal basis for consent-based analytics processing is Article 6(1)(a) GDPR. Access to or storage of analytics information on your device is based on Section 25(1) TDDDG.
You may withdraw or change your consent at any time through the cookie settings control on our website. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Our current Google Analytics data-retention settings are:
- Event data: 14 months; and
- User data: 14 months.
These retention settings apply to the relevant user-level and event-level data maintained through Google Analytics and do not necessarily affect aggregated reporting data.
Google Signals and user-provided data collection are not currently enabled. We do not currently use Google Analytics to submit customer email addresses or other user-provided identifying information to Google for analytics or advertising matching.
Our Google Analytics configuration applies to the public Showit website. It does not currently provide analytics tracking inside the separately hosted Uscreen membership platform.
Google and its subprocessors may process data outside the European Economic Area. Such transfers are made using an applicable adequacy decision, including the EU–US Data Privacy Framework where available, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
More information is available in Google’s Privacy Policy and its information about Google Analytics data safeguards.
13. GOOGLE ANALYTICS
Personal data may be disclosed to the following recipients where necessary:
We do not sell personal data.
- Showit, for website hosting and delivery;
- Uscreen, for membership accounts, checkout, video delivery, community features, and platform administration;
- Stripe, for payments, tax-related checkout information, authentication, and fraud prevention;
- Spacemail/Spaceship, for email hosting and communication;
- CookieScript, for cookie-consent management;
- Google Ireland Limited and its subprocessors, for consent-based analytics on the public Showit website;
- Meta, in connection with Instagram features and links;
- Hosting, content-delivery, security, and technical subcontractors used by these providers;
- Professional advisers, including accountants, tax advisers, insurers, and legal advisers, where necessary;
- Public authorities, courts, regulators, and tax authorities where disclosure is legally required; and
- Other parties where necessary to establish, exercise, or defend legal claims.
We do not sell personal data.
15. service providers and other recipients
Some service providers or their subprocessors are located outside Germany or the European Economic Area, particularly in the United States.
Where personal data is transferred to a country outside the European Economic Area, the transfer is based on an applicable European Commission adequacy decision or appropriate safeguards under Article 46 GDPR, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.
You may contact us for additional information about the safeguards relevant to a particular transfer.
Where personal data is transferred to a country outside the European Economic Area, the transfer is based on an applicable European Commission adequacy decision or appropriate safeguards under Article 46 GDPR, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.
You may contact us for additional information about the safeguards relevant to a particular transfer.
16. international data transfers
We retain personal data only for as long as necessary for the relevant purpose or as required by law.
In particular:
Deletion may be suspended where information is required for legal proceedings, regulatory obligations, tax audits, or the defense of legal claims.
In particular:
- Account and membership information is generally retained while the account or membership remains active.
- If an Uscreen account is permanently deleted, identifying subscriber information is scheduled for deletion or anonymization through Uscreen’s account-deletion process, subject to legally required records.
- Payment, invoice, tax, and accounting information is retained for the applicable statutory retention periods. Depending on the type of document, German law may require retention for six, eight, or ten years.
- Customer-support and general correspondence is generally retained until the inquiry has been resolved and may then be retained for up to three years where necessary to establish, exercise, or defend legal claims.
- Marketing information is retained until consent is withdrawn, an objection is made, or the information is no longer required. Limited suppression-list information may be retained to ensure that an unsubscribe request continues to be respected.
- Google Analytics event data and user data are currently configured to be retained for 14 months. These settings apply to the relevant user-level and event-level data maintained through Google Analytics and do not necessarily affect aggregated reporting data.
- CookieScript stores the visitor’s cookie preference on the visitor’s device for the period configured through CookieScript or until the visitor changes the preference, withdraws consent, or clears the relevant browser data.
- Technical and security information is retained only for as long as required to maintain security, diagnose errors, prevent misuse, or establish legal claims.
Deletion may be suspended where information is required for legal proceedings, regulatory obligations, tax audits, or the defense of legal claims.
17. DATA RETENTION
Subject to the applicable legal requirements, you have the right to:
Where processing is based on consent, withdrawal does not affect the lawfulness of processing performed before the withdrawal.
You may exercise your rights by emailing hello@saltedstrengthclub.com. We may request information necessary to verify your identity.
We will respond without undue delay and generally within one month. This period may be extended by up to two additional months where permitted by the GDPR because of the complexity or number of requests. If an extension is necessary, we will notify you within the initial one-month period.
- Request access to your personal data under Article 15 GDPR;
- Request correction of inaccurate or incomplete data under Article 16 GDPR;
- Request deletion under Article 17 GDPR;
- Request restriction of processing under Article 18 GDPR;
- Receive eligible data in a portable format under Article 20 GDPR;
- Object to processing based on legitimate interests under Article 21 GDPR;
- Withdraw consent at any time under Article 7(3) GDPR; and
- Lodge a complaint with a supervisory authority under Article 77 GDPR.
Where processing is based on consent, withdrawal does not affect the lawfulness of processing performed before the withdrawal.
You may exercise your rights by emailing hello@saltedstrengthclub.com. We may request information necessary to verify your identity.
We will respond without undue delay and generally within one month. This period may be extended by up to two additional months where permitted by the GDPR because of the complexity or number of requests. If an extension is necessary, we will notify you within the initial one-month period.
18. YOUR DATA PROTECTION RIGHTS
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing for reasons arising from your particular situation.
Where personal data is processed for direct marketing, you may object at any time. If you object to direct marketing, your personal data will no longer be used for that purpose.
Where personal data is processed for direct marketing, you may object at any time. If you object to direct marketing, your personal data will no longer be used for that purpose.
19. RIGHT TO OBJECT
You may lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for private businesses established in Bavaria is:
Bavarian State Office for Data Protection Supervision
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
The supervisory authority responsible for private businesses established in Bavaria is:
Bavarian State Office for Data Protection Supervision
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
20. RIGHT TO LODGE A COMPLAINT
SSC does not make decisions about members based solely on automated processing that produce legal or similarly significant effects.
Payment providers may independently use automated fraud-prevention and authentication systems under their own legal responsibilities.
Payment providers may independently use automated fraud-prevention and authentication systems under their own legal responsibilities.
21. AUTOMATED DECISION-MAKING
We and our service providers use appropriate technical and organizational measures intended to protect personal data against accidental loss, misuse, unauthorized access, alteration, and disclosure.
These measures may include encrypted connections, access restrictions, authentication controls, backups, and security monitoring.
No online service can guarantee absolute security.
These measures may include encrypted connections, access restrictions, authentication controls, backups, and security monitoring.
No online service can guarantee absolute security.
22. DATA SECURITY
SSC memberships and services are intended for adults aged 18 and older.
We do not knowingly offer memberships to or collect account information from children. If we become aware that an account belongs to a person under 18, we may close the account and delete the associated information, subject to applicable legal obligations.
We do not knowingly offer memberships to or collect account information from children. If we become aware that an account belongs to a person under 18, we may close the account and delete the associated information, subject to applicable legal obligations.
23. CHILDREN
We may update this Privacy Policy when our services, providers, legal obligations, or data-processing practices change.
The current version will be published on this page with the date of the latest update. Where required, material changes will also be communicated through email or the membership platform.
The current version will be published on this page with the date of the latest update. Where required, material changes will also be communicated through email or the membership platform.
24. CHANGES TO THIS PRIVACY POLICY
For questions about this Privacy Policy or the processing of your personal data, contact:
Salted Strength Club
Email: hello@saltedstrengthclub.com
Salted Strength Club
Email: hello@saltedstrengthclub.com
24. CONTACT
You can embed an email signup form here by pasting the code for one in the blank "embed" box below.
Almost there!
