Privacy Policy and Data Protection Notice

Dieses Dokument ist auf Türkisch und Englisch verfügbar; nachfolgend die englische Fassung.

Last updated: 1 October 2026

This notice explains how your personal data is processed when you use the BIMRank platform (www.bimrank.io). It has been prepared in line with the EU General Data Protection Regulation (GDPR, 2016/679) and the information obligation under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Data Controller

7Dimensions OÜ (Estonian Commercial Register code: 14770084), Narva mnt 5, 10117 Tallinn, Estonia · E-mail: support@7dimensions.eu · Web: www.bimrank.io

2. Personal Data We Process

Identity and contact: name, e-mail address, phone, company name, billing address.
Account and transactions: user account, subscription and package details, orders, invoices and payment records (your card details are not stored by us; they are processed by the payment provider).
Exams and assessment: theory exam answers and scores, practical exam records, uploaded log (.txt) files, analysis results, exam start and end times, certificate details.
Career and CV: the CV you upload and the education, experience, skills, languages and certificates it contains, and your preference for sharing it with employers.
Team data: for corporate packages, the name, e-mail, assigned disciplines and exam credits entered by the team leader.
Security data: IP address, browser and device details, session and access logs, cookies.

3. Purposes and Legal Bases

Running membership, subscription and purchase processes, delivering and scoring exams and issuing certificates — performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
Invoicing, accounting and tax obligations — legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
Exam integrity, prevention of cheating and misuse, system security and service improvement — legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
Allowing third parties to verify certificates — performance of a contract and legitimate interests.
AI analysis of your CV, transfer to service providers abroad and sharing with employers — your explicit consent (GDPR Art. 6(1)(a); KVKK Arts. 5(1) and 9). You may withdraw your consent at any time.
Non-essential cookies — your consent.

4. Automated Assessment

The log file you upload in the practical exam and your CV are analysed with AI-assisted software to produce scores and summaries. To contest these results and request a review by a human, write to support@7dimensions.eu within 14 days of the result being published.

5. Recipients of Your Data

Hosting and software: Odoo S.A. (Belgium, EU) — hosting and operation of the platform.
Files, analysis and CV processing: Google Ireland Ltd. / Google LLC (Google Drive, AppSheet, Google Cloud) — storage and analysis of log and CV files. Data may be transferred to the USA; transfers rely on the EU Commission Standard Contractual Clauses and the EU-US Data Privacy Framework.
Payment provider: only the data needed to collect payment.
Team leader: in corporate packages the team leader can see the exam credits and results of team members.
Employers: only with your explicit consent and the “Show to Employers” setting, your competencies, skills and certificates; your contact details are not shared unless you give separate consent.
Certificate verification: anyone with the verification code can see your name, discipline, scores and certificate dates.
Authorities: courts and public authorities where required by law.

6. Retention Periods

Account and exam records: as long as your account is open and for 2 years after closure.
Certificate records: for the validity of the certificate and 2 years afterwards, for verification purposes.
Invoices and accounting records: for the period required by law (7 years under the Estonian Accounting Act).
CV and career data: until you delete them or withdraw your consent.
Log files: 2 years from the exam date.

When the period ends, data is deleted, destroyed or anonymised.

7. Your Rights

Under GDPR Articles 15–22 and KVKK Article 11 you have the right to know whether your data is processed, to request information and a copy, rectification, erasure, restriction, to object, to data portability, to withdraw consent and to contest decisions based on automated processing. Send your request in a way that allows us to verify your identity to support@7dimensions.eu ; we reply within 30 days at the latest.

You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), the supervisory authority of your EU country of residence, or the Turkish Personal Data Protection Authority.

8. Security and Other Matters

Your data is protected by access controls, encrypted connections (HTTPS) and record-level access rules. The service is not intended for persons under 18. This notice may be updated; significant changes will be announced on the site.

Privacy · Cookie Policy · Terms of Use · Pre-Contractual Information · Distance Sales Agreement · Cancellation and Refunds · Explicit Consent