Privacy Policy – RMP e-Academy (rmp-academy.thinkific.com)
As of: 18 August 2026
Joint controllers: RMP germany GmbH, Reiss Motivation Profile Switzerland GmbH (RMP Swiss), Human Assets Management Consulting GmbH (RMP Austria), RMP Nordic Oy
Lead / contact point: RMP Swiss
Platform: https://rmp-academy.thinkific.com/
1. Joint Controllers (Art. 26 GDPR)
The RMP e-Academy is operated jointly by the following licence partners. They jointly determine the purposes and essential means of processing and are joint controllers within the meaning of Art. 26 GDPR and, where Swiss law applies, Art. 26 revFADP:
RMP germany GmbH
Schelder Au 1, 35687 Dillenburg, Germany
E-mail: [email protected]
Reiss Motivation Profile Switzerland GmbH (RMP Swiss) – Lead Party
Gartenlaubenstrasse 17, CH-6430 Schwyz, Switzerland
Represented by: Daniele Gianella (CEO)
E-mail: [email protected]
Phone: +41 79 410 53 30
Human Assets Management Consulting GmbH (RMP Austria)
Mariahilferstrasse 167/15, 1150 Vienna, Austria
E-mail: [email protected]
RMP Nordic Oy
Takojankatu 7 A 20, 33540 Tampere, Finland
E-mail: [email protected]
Essence of the arrangement (Art. 26(2) GDPR): RMP Swiss holds the Thinkific contract, publishes this Privacy Policy and the Terms, and is the central contact for data-subject rights. Each licence partner may invite its own RMP Masters and may grant named staff access to the Academy. The Academy is a single School: authorised staff of any partner can see user accounts from all four markets (Masters and public users). Assessment data of Masters’ end customers is not processed on this platform.
You may contact any of the controllers. We ask that you use [email protected] as the primary channel; requests received by another partner are forwarded to the Lead Party.
2. Overview
This Privacy Policy applies to your use of the RMP e-Academy, which is hosted on the Thinkific platform (Thinkific Labs Inc., Canada). It applies to all users who register on rmp-academy.thinkific.com, access courses, purchase digital downloads, or use the community – regardless of whether they arrived via rmp.eu or registered directly.
There are two user groups:
RMP Masters invited by their licence partner (Germany, Switzerland, Austria or Nordics) for training, onboarding and contract-essential Academy use; opt-out of non-mandatory content is possible.
Public users who register themselves via rmp.eu or directly on the Academy for a course, the community or a download.
Technical platform operator (processor): Thinkific Labs Inc., Vancouver, Canada. Platform data is stored on servers in the United States (not in the EU/EEA). Transfer basis: Standard Contractual Clauses (SCC, EU 2021/914). For further details, see Section 6.
3. Data We Collect
3.1 Registration (required information)
When creating a user account, we collect:
First name, last name
Email address
Password (stored in encrypted form)
Country of residence (required field)
RMP Master (Yes/No) – for internal segmentation (required field)
Legal basis: Art. 6(1)(b) GDPR (performance of contract / user agreement or licence/master agreement)
3.2 Course use and learning activities
During your use of the platform, the following data is collected automatically:
Course enrolments and course progress
Quiz and survey results
Activity log (login times, content accessed)
Device data and IP address (for operation and security)
Legal basis: Art. 6(1)(b) GDPR (performance of contract); for security-related logs also Art. 6(1)(f) GDPR
3.3 Communication
If you contact us by email, the data you provide (name, email address, message content) will be processed to handle your enquiry.
Legal basis: Art. 6(1)(b) or (f) GDPR (performance of contract / legitimate interests)
4. Social Login (optional)
You may sign in using an existing account with the following providers:
Provider | Company | Country | Transfer basis |
|---|---|---|---|
Google Ireland Limited / Google LLC, USA | USA | EU-US Data Privacy Framework (DPF) + SCC | |
Meta Platforms Inc., Menlo Park, CA, USA | USA | EU-US DPF + SCC | |
LinkedIn Ireland Unlimited / Microsoft Corp., USA | USA | EU-US DPF + SCC | |
Apple | Apple Inc., Cupertino, CA, USA | USA | SCC |
When you use Social Login, your name and email address are transferred from the respective provider to the Academy platform. A separate contractual relationship exists between you and your Social Login provider; their privacy policies apply in addition to this one.
Legal basis: Art. 6(1)(a) GDPR (consent)
Use of Social Login is voluntary — registration with an email address and password is always available as an alternative.
5. Recipients
We disclose personal data only where necessary for the Academy purposes:
Thinkific Labs Inc. (processor) – platform operation (see Section 6)
Stripe – payment processing for paid courses/downloads (see Section 5a)
Social-login providers – only if you use Social Login (see Section 4)
Named staff of the joint controllers (RMP germany, RMP Swiss, RMP Austria, RMP Nordic) with Admin/Staff access to the School, for operation, support and Master training. These persons may see user accounts from all four markets.
Newsletter marketing via Mailchimp is a separate processing operation of RMP germany GmbH and is not part of this Academy platform.
5a. Payment Processing
For paid courses and digital downloads, payments are processed via Stripe:
Stripe Technology Europe Limited (for EU/EEA users)
Stripe, Inc., South San Francisco, CA, USA
Transfer basis: EU-US Data Privacy Framework (DPF)
The merchant account is held by RMP Swiss as Lead Party. The joint controllers do not receive full payment data (card numbers). Stripe processes these directly. Stripe's privacy policy applies: https://stripe.com/privacy
Legal basis: Art. 6(1)(b) GDPR (performance of contract)
6. Thinkific as Processor (Third-Country Transfer)
The platform is operated by Thinkific Labs Inc. (Vancouver, BC, Canada). Although Thinkific is a Canadian company (Canada: EU adequacy decision since January 2024), user data is stored on servers in the United States.
For this transfer of data to the USA, the following applies:
Transfer basis: Standard Contractual Clauses (SCC) pursuant to EU Commission Decision 2021/914/EU
Switzerland: Swiss data protection requirements (revFADP/nDSG) are explicitly addressed in the Thinkific DPA; competent supervisory authority: Swiss Federal Data Protection and Information Commissioner (FDPIC)
DPA: https://www.thinkific.com/dpa/ (as of: 17 July 2025)
Thinkific engages the following key sub-processors (selection):
Sub-processor | Country | Purpose | Transfer basis |
|---|---|---|---|
Amazon Web Services | USA | Hosting, data storage, CDN | SCC |
Cloudflare Inc. | USA | CDN, DDoS protection | SCC |
Stream.io Inc. | USA | Real-time messaging (community) | EU-US DPF + Swiss-US DPF |
Stripe Inc. | USA | Payment processing | EU-US DPF |
Full sub-processor list: https://www.thinkific.com/thinkificsubprocessors/
7. Retention Periods
Data category | Retention period |
|---|---|
User account data | For as long as the account is active; deleted within 30 days of account deletion |
Course progress and certificates | For as long as the account exists; exportable on request even after account deletion |
Payment data | In accordance with statutory retention obligations (CH: 10 years, DE: 10 years, AT: 7 years) |
Communications (email enquiries) | 3 years after the enquiry is closed |
8. Your Rights
Depending on the applicable law (GDPR / revFADP), you have the following rights:
Right of access (Art. 15 GDPR / Art. 25 revFADP)
Right to rectification (Art. 16 GDPR / Art. 32 revFADP)
Right to erasure (Art. 17 GDPR / Art. 32 revFADP)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
To exercise your rights, please contact: [email protected] (Lead Party). You may also contact the licence partner in your market (see Section 1).
You can also manage your account data directly (account settings, data deletion) by logging in to your Thinkific account at rmp-academy.thinkific.com/users/edit.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority:
EU users: The supervisory authority of your Member State of residence (Germany: HBDI, Wiesbaden; Austria: Datenschutzbehörde, Vienna; Finland: Tietosuojavaltuutetun toimisto, Helsinki)
Swiss users: Swiss Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch/
10. Cookies and Tracking
The platform rmp-academy.thinkific.com uses technically necessary cookies required for operation (session management, authentication). Thinkific may additionally use analytics cookies internally (Google Analytics as a Thinkific sub-processor). We recommend consulting Thinkific's Privacy Policy at https://www.thinkific.com/privacy-policy/.
11. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy as needed. The current version is always available at rmp-academy.thinkific.com/pages/privacy. For material changes, we will notify you by email or through a notice on the platform.
12. Data Protection Contact
Primary contact (Lead Party):
Reiss Motivation Profile Switzerland GmbH
Attn: Daniele Gianella
Gartenlaubenstrasse 17 · CH-6430 Schwyz
Email: [email protected]
Phone: +41 79 410 53 30
Further controllers and contacts: see Section 1.