Table of contents
General Terms and Conditions (GTC) of BSO Beratung-Organisation GmbH for the digital learning system “NoMoreFakeSecurity”
1. Scope
These General Terms and Conditions (GTC) comprehensively govern the contractual relationship between BSO Beratung-Organisation GmbH (hereinafter: "Provider") and all users of the web-based learning system "NoMoreFakeSecurity." This includes both natural and legal persons. The GTC serve as a legally binding regulation of all access, usage, and contractual modalities in accordance with applicable European and German consumer, data protection, and contract law.
consumer within the meaning of Section 13 of the German Civil Code (BGB) are subject to supplementary protective regulations, in particular Sections 2–5 and 7–8 of these General Terms and Conditions.
Entrepreneur within the meaning of Section 14 of the German Civil Code (BGB) accept the special provisions applicable to them by concluding the contract, in particular Section 3 Paragraph 3 and Section 10.
The service is available exclusively digitally via a software-as-a-service (SaaS) model. Physical delivery of content is not possible. Stable internet access and a compatible device are required to use the services.
2. Conclusion of contract, commencement of service and model types
A valid user agreement is concluded if the following conditions are met:
Selection of the desired product (one-off course, modular course, subscription),
complete digital ordering process,
Consent to these Terms and Conditions and the Privacy Policy,
express declaration of consent to the immediate commencement of service provision in accordance with Section 356 Paragraph 5 of the German Civil Code (BGB),
full payment of the agreed fee.
By completing the order process, the user makes the following binding declaration:
"I agree that access to the courses will be activated immediately after payment – even before the expiration of the statutory cancellation period. I am aware that by doing so, I will lose my right of cancellation in accordance with Section 356 Paragraph 5 of the German Civil Code."
Offer structure
The provider offers the following learning formats:
One-off courses with a fixed term (e.g. four weeks),
Module courses with staggered content release,
Subscriptions with monthly, quarterly or annual terms, which can include additional features such as forum access, certifications or bonus material.
All models are generally subject to the same contractual framework, unless explicitly stated otherwise.
All details regarding the course structure and technical requirements are documented in the course catalog (Appendix 2). The user confirms that they have read and understood this information during the ordering process.
Trial periods (max. 72 hours) may be provided for promotional offers. A paid subscription only begins with the user's explicit consent (opt-in).
Individual additional services (e.g., API access, add-ons) require separate agreements. Refunds are excluded unless there is a significant defect according to Section 434 of the German Civil Code (BGB).
3. Contract term and notice periods
consumer
Minimum subscription term: six months
Notice period: 30 calendar days to the end of the month
Pro rata refund for unused services in case of timely cancellation
Entrepreneur
Minimum term: twelve months (excluding one-off courses)
Notice period: 40 calendar days before the end of the term
Refund only in case of significant defects (§ 434 BGB)
Notices of termination can be submitted in writing or digitally. An electronic confirmation of receipt will be provided.
4. Right of withdrawal for consumers
Consumers have the right to withdraw from contracts within 14 days without giving reasons (§ 355 BGB).
Sample revocation:
"To BSO GmbH, Musterstraße 1, 18439 Stralsund: I hereby revoke the contract for the use of the learning platform 'NoMoreFakeSecurity'. Date: ________ Signature: ________"
Revocations can be sent by email to widerruf@bso.de take place.
Exclusion of revocation
The right of withdrawal ceases to apply if the user agrees to immediate performance during the purchase process and confirms that he loses his right of withdrawal (Section 356 (5) of the German Civil Code).
5. Payment terms
Prices include VAT. The provider accepts the following payment methods:
PayPal
Prepayment by bank transfer (Payment term: 14 calendar days)
Instant bank transfer (Klarna)
Stripe (credit cards, wallets)
Activation will occur after confirmed receipt of payment. Delays are possible with advance payments.
Discount codes are only valid for the specified period and are not transferable, combinable, or redeemable. Misuse will result in access being blocked and, where appropriate, legal consequences.
Refunds will only be issued in the case of objectively significant defects. Non-use of the service by the user does not constitute a refund claim.
In case of late payment, the provider is entitled to block the account, issue a reminder and demand default interest in accordance with Section 288 of the German Civil Code (BGB).
6. Access restrictions and consequences of misuse
Access is restricted to a specific user. Multiple parallel logins (more than three devices) may result in a lockout.
Prohibited uses include:
automated scraping,
Circumvention of technical protection mechanisms,
Distribution of protected content,
Manipulation of the platform code.
In case of violation, the contract will be terminated immediately and civil and, if applicable, criminal claims will be asserted (§§ 106 UrhG, 263 StGB).
7. Technical protective measures and data protection consent
To protect intellectual property, the provider uses:
Two-factor authentication,
TLS/SSL encryption,
individual watermarks,
Device and session tracking.
Consent during the ordering process:
“I agree to the use of anonymized watermarks to protect copyrighted content (Art. 6 (1) (a) GDPR).”
8. Participation certificates and disclaimer
The provider assumes no liability for individual learning outcomes. Participation certificates merely confirm successful completion of a course. They contain an SHA-256 signature. Their external recognition is at the discretion of third parties.
9. Data protection and data processing
The processing of personal data is based on the GDPR:
Art. 6 (1) (b) GDPR (Contract fulfillment)
Art. 6 (1) (f) GDPR (security interest)
Server location: Germany (ISO 27001 certified)
Data transfer: No transfer to third countries outside the EEA
Pseudonymized access data is processed for fraud prevention and system optimization.
10. Subject to change
The provider reserves the right to amend these Terms and Conditions if objectively justified. Changes will take effect no earlier than 30 days after notification.
Obligation to consent: The user must actively consent to the change. If they refuse, the contract will end at the earliest possible date.
11. Place of jurisdiction and severability clause
For consumers, the statutory place of jurisdiction applies. For businesses, Stralsund is the exclusive place of jurisdiction.
Should any provision of these Terms and Conditions be invalid, the remainder of the contract shall remain unaffected. In place of the invalid provision, a provision that most closely approximates the original economic intent shall apply.
As of May 2025