Privacy Policy

At AECOMI, we value your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, store and protect the information you provide when using our website, certification services, training and any other related services.

By accessing and using our services, you accept the practices described in this policy. If you do not agree with any of the terms set forth herein, we recommend that you do not use our services.

This policy complies with the General Data Protection Regulation (GDPR) of the European Union and the Spanish Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

Identity: AECOMI — International BIM Certification Organization

Postal address: Madrid, Spain

Email: privacy@aecomi.com

Main activity: BIM competency certification, specialized training and research applied to the AEC sector (Architecture, Engineering and Construction).

For any queries related to data protection, you can contact our Data Protection Officer (DPO) through the email address provided.

We may collect and process the following types of personal data:

2.1 Registration and contact data

• First and last name
• Email address
• Phone number
• Postal address
• Country of residence
• Company or organization
• Job title or position

2.2 Browsing data

• IP address
• Browser type and operating system
• Pages visited and browsing time
• Date and time of access
• Visit origin (referrer)

2.3 Certification data

• Academic and professional history
• Experience in BIM projects
• Exam and assessment results
• Certifications obtained and their validity
• Supporting documentation (CV, references)

2.4 Cookies and similar technologies

Please see our Cookie Policy for detailed information on the use of cookies and tracking technologies.

The processing of your personal data is based on one or more of the following legal grounds:

• Consent: When you voluntarily provide your data to receive information, request certifications or register for our services.
• Contract performance: To manage your certification request, formalize the contractual relationship and provide the contracted services.
• Legal obligation: To comply with tax, accounting and regulatory obligations applicable to our activity.
• Legitimate interests: To improve our services, ensure the security of our platforms, prevent fraud and conduct anonymized statistical analysis.

Your personal data is used for the following purposes:

• Certification management: Process applications, assess eligibility, schedule exams, issue certificates and manage renewals.
• Communication: Send information about your certifications, renewal reminders, regulatory updates and operational communications.
• Customer support: Handle inquiries, resolve incidents and provide technical assistance.
• Service improvement: Analyze the use of our services to identify areas for improvement and develop new training products.
• Marketing (with consent): Send newsletters, information about events, courses and BIM-related services, provided you have given explicit consent.
• Legal compliance: Comply with legal obligations, respond to authority requests and exercise or defend rights in legal proceedings.

AECOMI does not sell, rent or trade your personal data to third parties. However, we may share information in the following circumstances:

• Service providers: Companies that provide us with hosting, email management, online exam platforms and analytics tools. These providers act as data processors under contract and adequate guarantees.
• Partner institutions: Accredited universities and training centers with which we have agreements, only when necessary for the academic validation of certifications.
• Regulatory bodies: Competent authorities when there is a legal obligation or formal request.
• International transfers: If any service provider is located outside the European Economic Area (EEA), we ensure that appropriate safeguards are applied, such as Standard Contractual Clauses approved by the European Commission.

As the data subject, you have the following rights recognized by the GDPR and LOPDGDD:

• Right of access: Obtain confirmation as to whether we are processing your personal data and, if so, access it.
• Right to rectification: Request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure ("right to be forgotten"): Request the deletion of your data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.
• Right to restriction of processing: Request the restriction of the processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used and machine-readable format, and transmit it to another controller.
• Right to object: Object to the processing of your data based on legitimate interests, including profiling.
• Right not to be subject to automated decisions: Including profiling, which produce significant legal effects.

To exercise any of these rights, please send a written request to privacy@aecomi.com, including a copy of your identification document. We will respond within a maximum period of 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your data violates applicable regulations.

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of personal data processing:

• Encryption: Use of SSL/TLS protocols for data transmission. Sensitive information encrypted at rest.
• Access control: Robust authentication systems, secure passwords and role-based access policies.
• Periodic audits: Regular security reviews, vulnerability analysis and penetration testing.
• Staff training: Continuous training in data protection and security best practices.
• Backups: Periodic backups to ensure information availability and recovery.
• Incident logging: We maintain a security breach register and notify the supervisory authority and affected parties when appropriate.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as well as to comply with applicable legal obligations:

• User registration data: As long as you maintain an active account on our platforms. After cancellation, for the legally established period (generally 5 years).
• Certification data: During the validity of the certification and corresponding renewal periods, plus the time necessary to accredit historical issuance.
• Unapproved application data: For 2 years from the resolution of the application.
• Commercial communication data: Until you withdraw your consent or request to unsubscribe.
• Cookie data: In accordance with our Cookie Policy.

Once the retention period has ended, the data is securely deleted or anonymized for statistical purposes.

For any queries, requests or complaints related to personal data protection, you can contact us through:

• Email: privacy@aecomi.com
• Postal address: AECOMI — Data Protection Officer, Madrid, Spain
• Contact form: Available on our contact page

We are committed to responding to all requests within a maximum period of 30 calendar days.

AECOMI reserves the right to modify this Privacy Policy at any time to adapt it to legislative developments, changes in our services or improvements in our data protection practices.

When we make significant changes, we will notify you through:

• A prominent notice on our website
• An email to the address associated with your account
• A notification in your user dashboard, if applicable

We recommend that you periodically review this policy to stay informed about how we protect your information. Your continued use of our services after any modification will constitute acceptance of the new terms.