Log in
Get Pro
Log in
Get Pro
Legal
Last updated: October 2026
ValueKnow Aerospace is operated by Lluís Foreman (NIF 47421811C, Príncep de Viana, 08401 Granollers, Spain — see the Legal Notice), acting as the data controller for the personal data described below. Contact for anything privacy-related: info@valueknow.com.
You must be at least 18 years old to create an account or purchase. This platform is not directed at anyone under 18, and we do not knowingly collect personal data from minors.
| Data | Purpose | Legal basis |
|---|---|---|
| Account data: username, email, password (hashed) | Create your account, log you in, send password-reset emails | Contract (Art. 6(1)(b) GDPR) |
| Learning data: lesson progress, quiz answers and scores, your private lesson notes | Show you your progress through the courses | Contract |
| Certificate data: your name and the course, on a public certificate page with a unique link | Issue the verifiable certificate you claim and share (e.g. on your CV or LinkedIn) | Contract |
| Lead data: your email and the short survey you answer when requesting the free Map (why you're learning, how you found us), your timezone, and the state of your five-email welcome sequence | Send you the document you asked for, apply your early-access price, and run the short email sequence you consented to | Consent (marketing emails); contract (delivering the Map) |
| Consent evidence: the consent checkbox state, its timestamp and your IP address | Prove that consent was given (legal accountability) | Legal obligation (Art. 6(1)(c)) |
| Early-access coupon data: your personal code, its expiry and Stripe's internal identifiers | Apply your discount at checkout and tie the purchase to your account | Contract |
| Payment metadata: Stripe session ID, amount, currency | Record your subscription and entitlements | Contract; legal retention duties |
| Community data: your display name, your profile photo if you add one, the threads and posts you write, the images you upload (resized, with metadata such as location removed), reports you file, moderation decisions about your posts or account, likes, in-site notifications (replies and likes), the lesson a thread discusses, and your reply-email preference | Run the members-only community: show your posts to other members, let you edit or delete them, and keep the community safe (reports and moderation, including the record of a suspension) | Contract; legitimate interest in moderation and legal compliance (Art. 6(1)(f)) |
| Weekly community digest: your email address, the fact and time you switched it on, and when we last sent it | Email you the week's new and busiest community threads, only if you switch it on in your community settings; every email has a one-click unsubscribe | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Technical logs (IP, user agent) kept by our hosting provider | Security and service operation | Legitimate interest (Art. 6(1)(f)) |
| Visit statistics: pages visited, referring site, a one-way salted hash of your IP (we cannot reverse it or identify you from it), date and time | Understand which content is useful and keep counts accurate (aggregate, first-party only) | Legitimate interest (Art. 6(1)(f)); deleted after 90 days |
Card details are processed by Stripe on Stripe's own infrastructure. We never see or store your card number. The free course requires no account and no personal data: progress made as a visitor is kept only in your browser session and is not stored by us. When you begin a subscription, we first ask a few optional background questions (e.g. your reason for learning). If you complete registration but the payment does not go through, that information is kept only as a pending signup record to complete your purchase and is deleted automatically after 30 days. A full account is created only once the payment confirms.
Lesson notes are private to you. Certificates are public pages by design — they show your name and the course, so you can share them as proof. If you ever want your certificate page removed or unlisted, email us and we will do it.
The community is private to members: other members see your display name (first name and last initial unless you choose another) and what you post; your email address is never shown. Community pages and images are served only to signed-in members and are not indexed by search engines. We do not log your IP address for community activity.
We do not carry out automated decision-making or profiling that has legal effects on you. Moderation decisions are made by a person.
We do not sell personal data, and we do not run advertising or third-party analytics on this site. No tracking cookies are used — only the strictly necessary session and CSRF cookies required for the site to function, plus a local (on-device) preference for light/dark mode. See the Cookie Policy. We do keep our own private, aggregated visit statistics (which pages are visited and where visitors arrive from) — server-side, cookieless, described in the table above.
Our hosting and database are in the EU. Transfers outside the EEA happen only where necessary: Stripe (United States — certified under the EU–US Data Privacy Framework) and Bunny Stream's content-delivery network when a video is requested from a non-EU edge location (covered by Bunny's data processing agreement, which incorporates standard contractual clauses). Email is sent from Germany.
Account and learning data are kept while your account is active. Payment records are retained as long as required by Spanish tax and accounting law (generally 4–10 years). Server logs are retained by our hosting provider for a limited period (currently up to 7 days). Lead data — including your email, survey answers and consent evidence — is kept while we run your welcome sequence and, if you subscribe to the newsletter, occasional updates; if no purchase is made, it is deleted or anonymised after 24 months of inactivity, or earlier when you unsubscribe.
Community posts stay visible to members while they are in the community, including after your membership ends, so that other members' discussions remain readable. When you delete a post, its text and images are removed. You can erase all your community data yourself from Community → Settings, or ask us to. Everything you posted is then shown as by a "Former member" and unlinked from your account (or, if you choose, the text of your posts is deleted too), and all your images, your profile photo, likes and notifications are deleted. The same happens automatically when your account is deleted. If your community access is suspended, the content hidden by the suspension is kept for up to 12 months as a record of the decision (to establish or defend legal claims, Art. 17(3)(e) GDPR) and then anonymised automatically. In-site notifications are deleted 90 days after you have seen them.
You may request access, rectification, erasure, restriction, portability of your data, and object to processing, by emailing info@valueknow.com — we respond within 30 days. You can also edit your name, email and password, and manage your subscription, yourself from the Account page at any time, and download everything you have posted in the community (posts and images) from Community → Settings. You may lodge a complaint with the Spanish data protection authority (www.aepd.es) or your local authority. To delete your account entirely, email us from your account address; deletion removes your profile, progress and subscriptions (payment records are anonymised and kept only as required by law). Withdrawing marketing consent (the unsubscribe link in any email) stops the welcome sequence and newsletter at once.
If you are in the United States: we do not sell or share your personal data for cross-context behavioural advertising, and we do not use it for targeted advertising. Depending on your state, you may have the right to know what personal data we hold, request its deletion or correction, and not be discriminated against for exercising these rights — contact info@valueknow.com. We will verify your request (usually by replying to the email on your account) and respond within the timeframe your state's law requires. Marketing emails comply with the CAN-SPAM Act: every one carries our postal address and a working unsubscribe link.
Data is encrypted in transit (HTTPS) and at rest, access is restricted, and we maintain an incident-response procedure including notification to the competent authority within 72 hours where required.