Privacy policy
Last updated: 6 September 2026
DRAFT — this text has not been through legal review and is not binding.
1. Data controller
The organisation using the platform is the controller for its participants' data and BizSim is the processor. For data sent to us directly through the marketing site, BizSim is the controller.
2. Data we collect
Account details (name, email, phone, role), academic profile (university, faculty, specialty, year), usage events (lesson completions, exam attempts, sign-in records) and uploaded files (project PDFs, avatars). Through the demo form: name, company, email, phone, estimated participant count and message.
3. Purposes
Delivering the service, tracking participant progress, issuing and verifying certificates, investigating security incidents, billing and support.
4. Legal basis
Performance of a contract (delivering the service), legitimate interest (security and abuse prevention), legal obligation (accounting) and consent (the marketing form).
6. International transfers
Processing takes place primarily on servers in the European region. Where a transfer outside that region occurs, legal mechanisms such as standard contractual clauses apply.
7. Retention
Account data is kept for the life of the subscription and for as long as the law requires afterwards. Issued certificates are kept longer so they remain verifiable. Demo form submissions are deleted once the sales process ends.
8. Security measures
Encrypted connections, hashed passwords, mandatory two-factor authentication for admin roles, role-based authorisation, organisation isolation enforced at the database level, and an audit log.
9. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data. See the contact section below to make a request. Note: for data held by an organisation you participate in, address the request to that organisation first.
11. Changes to this policy
When this document is updated the date above changes. Significant changes are announced to organisation admins by email.
12. Contact
For privacy questions and data requests, use the form on the contact page and mention “Privacy” in your message.