Privacy Policy

Last updated: October 28, 2026

1. Who We Are

Digital Twin AEC ("we", "us") operates this website to provide online courses, live lectures, exams, and certificates. This policy explains what personal data we collect, why we collect it, and the rights you have over it, in line with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. What We Collect

  • Account data: name, email address, and password (stored hashed, never in plain text).
  • Course activity: enrollments, lesson progress, quiz answers and scores, questions you post.
  • Certificates: your name and course completion date, shown on a certificate that can be publicly verified by its unique certificate number.
  • Communications: newsletters and course-related emails we send you, and support messages you send us.
  • Technical data: session cookies required to keep you logged in and to protect forms from forgery (CSRF protection). We do not use third-party advertising or tracking cookies.

3. Why We Collect It

  • To create and manage your account and course enrollments.
  • To track your progress, grade assignments, and issue certificates.
  • To send you service-related emails (verification, progress, replies to your questions) and, where you have not opted out, newsletters and course offers.
  • To secure the platform (authentication, fraud/abuse prevention).

4. Legal Basis

We process your data under the legal bases of contract (to provide the course service you signed up for), legitimate interest (platform security, service communications), and consent (optional newsletters, which you can unsubscribe from at any time).

5. How Long We Keep It

We retain account and course data for as long as your account is active, or as needed to provide a certificate verification service. You may request deletion at any time, subject to Section 7.

6. Sharing

We do not sell your personal data. We only share it with service providers strictly necessary to operate the platform (e.g. email delivery, hosting), each bound to protect your data.

7. Your Rights

Under GDPR and similar laws, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten"), except where we must retain it for legal or legitimate certificate-verification purposes.
  • Export your data in a portable format.
  • Withdraw consent for optional communications (e.g. newsletters) at any time.
  • Object to or restrict certain processing.

To exercise any of these rights, contact us at privacy{{ request()->getHost() }}.

8. Cookies

We use only strictly necessary cookies (session and security tokens) required for the site to function — there is no third-party advertising or analytics tracking on this site at this time.

9. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be noted on this page.

We use only strictly necessary cookies to keep you signed in and to secure the site — no advertising or tracking cookies. See our Privacy Policy for details.