Expert.ai S.p.A., with registered offices at Rovereto (38068 – Trento, Italy), Via Fortunato Zeni, n. 8, VAT number 02608970360 (hereinafter, the “Company”) and any entity within the expert.ai Group that processes personal data in the circumstances specified below (each individually the “Relevant Company” and, jointly with the Company, “expert.ai“), are committed to protecting the online privacy of the users of the websites www.expert.ai, https://community.expert.ai/, https://try.expert.ai/hereinafter jointly referred to as the “Websites”). As such, this document (hereinafter, “Privacy Policy”) has been written, under Article 13 and 14 of EU Regulation 2016/679 (hereinafter, the “Regulation”), in order to allow you to understand expert.ai’s policy regarding your privacy, and how your personal information will be handled when using the Websites. This Privacy Policy will also provide you with information so that you are able to consent to the processing of your personal data in an explicit and informed manner, where appropriate.

The information and data you may provide, or which may otherwise be collected through the Websites, in the context of your use of expert.ai’s services, such as the registration to the Natural Language API developer platform provided on the website or to expert.ai’s community, the use of the NL Platform (“Platform”) or the use of our analysis & classification tool provided on the website , the request to have further information on our products and services, etc.  (hereinafter, the “Services”) as defined in Section 3, will be used by expert.ai in compliance with the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity and confidentiality.

Unless otherwise specified in relation to the individual processing purposes mentioned in this Privacy Policy, for the purposes of this Privacy Policy Relevant Company of the expert.ai Group means:

Expert System Enterprise Corp., with registered offices at 6110 Executive Boulevard, Suite 690, Rockville (U.S.A.), MD 20852.

Expert System Iberia S.l.u., with registered offices at Avenida Alcalde Barnils, 64-68, Local 1 Planta 2ª Módulo C, 08174 Sant Cugat del Vallés, Barcelona, Espana.

Expert System France S.a., with registered offices at 15 – 17, rue Traversiere, 75012 Paris, France.

Expert System Deutschland Gmbh., with registered offices at Weinbergsweg 3c
61348 Bad Homburg v. d. Höhe, Germany.

Expert System Cogito Ltd., with registered offices at Unit 203, Second Floor China House
401 Edgware Road, NW2 6GY, London, United Kingdom.

Expert System Canada – Semantic T. Inc., with registered offices at 900-2001 av.McGill College Montréal (Québec) H3A1G1, Canada.

CONTENTS

1. Data Protection Officer

It is possible to contact the Data Protection Officer (DPO) by writing to: [email protected].

2. Personal Data processed

As you use the Websites and/or the Services, we inform you that the Company and/or the expert.ai Group’s Relevant Company may collect and process information related to you as an individual and which allows you to be identified (either directly, or together with additional information), or which is related to other individuals (“Personal Data”), such as your name, an identification number, an online ID.

Please note that payments for the services provided by the Natural Language API are made through a third-party platform (depending on the country in which you are located, e.g. PayPal or others), which operates as an independent data controller and does not allow expert.ai to access your payment information, such as credit card number or other data that you must provide to complete the purchase. Expert.ai will, however, use your billing information, which will be requested at the time of purchase, for any relevant tax and accounting obligations and to send you the invoice relative to your purchase.

Your Personal Data may be collected either because you voluntarily provided it (for example, when filling out an online form or when you decide to register to the Natural Language API or to expert.ai’s community and set your profile) or simply by analyzing your behavior on the Websites.

Personal Data which may be processed through the Websites are as follows:

a. Name, contact details and other Personal Data

In some sections of the Websites (e.g. Contact Us, Resources, Newsletter, online training programs, community’s profile settings, Natural Language API registration form, etc.), you may be asked to enter information such as your name, surname, telephone number, email address, job title, company you work for, etc.

b. Job applications. Special Categories of Personal Data

By sending your CV to the contacts and addresses on the Website, you authorise the Data Controller to process your Personal Data.
Expert.ai asks that you do not disclose Personal Data which may fall under the category of Personal Data referred to in Article 9 of the Regulation – i.e. “[…] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”, unless you consider this to be strictly necessary, and to provide your consent if you decide to share them by authorization to be included in the CV.
The processing of such Personal Data may be permitted as it is based on the release of your consent according to the applicable rules on personal data protection. Expert.ai asks that you do not disclose any such types of Personal Data, unless you consider this to be strictly necessary. In any case, expert.ai would stress the importance of providing your explicit consent to process this sort of Personal Data, if you decide to share it nonetheless.

c. Third party Personal Data provided voluntarily by the user

As mentioned above, in some parts of the Websites (such as the “Contact Us” section on www.expert.ai, the comment boxes under the topics created by expert.ai’s community members, or when you add a text or type in a web URL in the analysis & classification tool), you may insert text messages or information which may contain third party Personal Data. In any situation where you decide to share Personal Data related to other persons through the Websites, you will be considered as an independent data controller regarding that Personal Data and will have to assume all inherent legal obligations and responsibilities. To this end, you must fully indemnify expert.ai against any complaints, claims or demands for compensation for damages which may arise from the processing of this Personal Data, initiated by the third parties whose Personal Data have been processed through the use of the Websites in violation of the applicable rules on personal data protection. In any case, if you provide or in other way process Personal Data of third parties in using the Websites, you henceforth guarantee – assuming all related responsibilities – that this specific processing is grounded on an appropriate legal basis in accordance with art. 6 of the GDPR, which legitimizes the processing of the information in question.

d. Publicly available online data

As part of the presentation and promotion activities (“Demo“) of its semantic analysis platform, the Company may also process documents and information publicly available online that may contain Personal Data (e.g. in newspaper articles, magazines, etc.). Such processing is based on the legitimate interest of the Company to demonstrate the correct functioning and capabilities of the Demo(s) and is carried out for the time strictly necessary to achieve the aforementioned purpose. For further information you can write to: [email protected]

e. Browsing Data

The Websites’ operation, as is standard with any website on the Internet, involves the use of computer systems and software procedures, which collect information about the Websites’ users as part of their routine operation. While expert.ai does not collect this information in order to link it to specific users, it is still possible to identify those users either directly via that information, or by using other information collected – as such, this information is also considered Personal Data. This information includes several parameters related to your operating system and IT environment, including your IP address, location (country), the domain names of your computer, the URI (Uniform Resource Identifier) addresses of resources you request on the Websites, the time of requests made, the method used to submit requests to the server, the dimensions of the file obtained in response to a request, the numerical code indicating the status of the response sent by the server (successful, error, etc.), and so on. These data are used exclusively to compile anonymous, statistical information on the use of the Websites and/or of the Platform, as well as to ensure its correct operation and identify any faults and/or abuse of the Websites and/or of the Platform – the data is deleted immediately after processing, unless it must be used to identify responsible parties in the event of cybercrime committed which harms the Websites, the Platform or third parties, in which case information on web contacts may be kept for a period of 7 (seven) days.

f. Cookies

Information regarding the use of cookies can be found in the Cookie Policy available

3. Purpose of the processing

The Company (and/or, where relevant, the expert.ai Group’s Relevant Company) intends to use your Personal Data, collected through the Websites, for the following purposes:

  • to provide Services you request, such as the download of the materials shared on the Websites (e.g. in the “Resources” section on www.expert.ai), subscribing to events, the online training programs and/or expert.ai’s community, providing you access to the Natural Language API you request, using the Platform or our analysis & classification tool, responding to a request sent to addresses you may find on the Websites (“Provision of the Service“);
  • to analyze the CV and to contact the candidates who submit their applications through the addresses you may find in the “Careers” section on www.expert.ai (“Recruitment“);
  • to carry out marketing activities, such as to conduct surveys, studies, research, market statistics and send you newsletter, advertising and information material via e-mail, telephone and/or through the official pages of expert.ai on social media related to the activities, the products and the services of expert.ai (“Marketing“). You can, at any time, withdraw your consent that you have previously granted to traditional or automated methods by giving notice to the Company and/or the expert.ai Group’s Relevant Company without any formality, simply by writing to the addresses indicated in Section 8 of the Privacy Policy, without prejudicing the lawfulness of the processing founded on your previous consent;
  • to carry out direct marketing activities via e-mail for services similar to those you have subscribed to through the Websites, unless you objected to such processing initially or in subsequent communications (“Soft Opt-In“);
  • to analyze your preferences, habits, interests and consumption choices expressed through the use of the Websites and the services offered, and, where appropriate, by using non-essential cookies, in order to send you material and commercial communications and personalized promotions on the services offered by expert.ai (“Personalization”);
  • to fulfil the legal obligations which required the Company and/or the expert.ai Group’s Relevant Company to collect and/or further process certain types of Personal Data (“Compliance“);
  • to prevent or identify any fraudulent conduct by using the Websites in order to allow the Company and/or the expert.ai Group’s Relevant Company for legal defense (“Abuse/Fraud”);
  • to verify information relevant to the use of the Platform in order to ensure the security of the services we provide (“Security”).
  • to carry out statistical analysis without the possibility of identifying the user (“Statistics”);
  • to disclose, where a subscription to the expert.ai online training programs occurs, Personal Data (name, surname, company role, and – if applicable – LinkedIn account) of the contractual representative or another contact point of the partners of expert.ai on expert

4. Legal basis and mandatory / discretionary nature of the processing

The legal bases the Company (and/or, where relevant, the expert.ai Group’s Relevant Company) rely on for the processing of Personal Data for the purposes referred to in aforementioned Section 3 , are as follows:

  • Provision of the Service: the processing for this purpose is carried out by the Company in its capacity as autonomous data controller. Such processing is necessary to provide the Service and for the performance of the contract. The provision of your Personal Data for this purpose is optional, however, failure to provide them would imply the inability to initiate the requested Services provided through the Websites or to respond to requests.
  • Recruitment: the processing for this purpose is necessary for the Company (or, where appropriate, the expert.ai Group’s Relevant Company) to be able to consider your application and, therefore, it is necessary in order to start the selection process. The provision of your Personal Data is optional, but any failure to provide it would make it impossible to evaluate your profile. If you decide to provide special categories of Personal Data (e.g. data concerning health, religious beliefs, etc.), the Company (or, where appropriate, the expert.ai Group’s Relevant Company) may require your specific consent which, in this case, may be inserted at the bottom of your application. The processing operations carried out by expert.ai may be permitted as they are based on the release of your consent pursuant to art. 9(2)(a) of the Regulation and according to the applicable rules on personal data protection. Expert.ai asks that you do not disclose any such types of Personal Data unless you consider this to be strictly necessary. In any case, expert.ai would stress the importance of providing your explicit consent to process this sort of Personal Data, if you decide, nonetheless, to share it. In the absence of your consent to the processing of special categories of Personal Data referred to you, if you provide such data, your application cannot be taken into consideration.
  • Marketing: the processing for this purpose is carried out by Expert.ai S.p.A. jointly with Expert System Enterprise Corp. and the expert.ai Group’s Relevant Company involved from time to time (in relation to the geographical area of reference) as joint controllers (“Joint Controllers“). Such processing is based on your consent or, if applicable, on legitimate interest. It is not mandatory for you to give your consent to the Joint Controllers for this purpose and you can withdraw your consent at any time without any consequences (except for the fact that you will no longer receive marketing communications from the Data Controller). You may withdraw your previously granted consent or object every time to the processing by following the instructions provided in Section 8 of this Privacy Policy.

For Marketing purposes, where applicable in relation to the geographical area of reference, the Relevant Company acting as Joint Controller is: Expert System Iberia S.l.u. (for Spain), Expert System France S.a. (for France), Expert System Deutschland Gmbh (for Germany), Expert System Cogito Ltd. (for the United Kingdom), Expert System Canada – Semantic T. Inc. (for Canada).

  • Soft Opt-In: the processing for this purpose is carried out by the Company in its capacity as autonomous data controller. Such processing is based on the interest of the Company to send marketing communications by email regarding products and services similar to those requested through the Websites. You may interrupt the receipt of these communications, without any consequence for you (with the exception of the failure to receive such further communications from the Company) using the link at the bottom of each of these emails.
  • Personalization: the processing for this purpose is carried out by Expert.ai S.p.A. jointly with Expert System Enterprise Corp. and the expert.ai Group’s Relevant Company involved from time to time (in relation to the geographical area of reference) as Joint Controllers. Such processing is based on your consent. It is not mandatory to give your consent to the Joint Controllers for this purpose and you may withdraw it at any time without any consequences (except the impossibility to benefit from the personalization of the commercial offers that will be received by the Joint Controllers). You may withdraw your previously granted consent by following the instructions provided in Section 8of this Privacy Policy.

For Personalization purposes, where applicable in relation to the geographical area of reference, the Relevant Company acting as Joint Controller is: Expert System Iberia S.l.u. (for Spain), Expert System France S.a. (for France), Expert System Deutschland Gmbh (for Germany), Expert System Cogito Ltd. (for the United Kingdom), Expert System Canada – Semantic T. Inc. (for Canada).

  • Compliance: the processing for this purpose is carried out by the Company (or, where appropriate, the expert.ai Group’s Relevant Company) in its capacity as autonomous data controller and is necessary in order to fulfil any legal obligations. When you provide Personal Data, they must indeed be processed according to the applicable regulations, which could entail their retention and disclosure to the Authorities for accounting, tax, or other obligations.
  • Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activity or abuse in the use of the Websites and therefore allow the Company or the expert.ai Group’s Relevant Company, in its capacity as autonomous data controller, to defend in court.
  • Security: the processing for this purpose is carried out by the Company in its capacity as autonomous data controller and it is based on the legitimate interest of the Company.
  • Statistics: it is specified that such processing is not performed on Personal Data and therefore can be freely carried out by expert.ai.
  • Disclosure: processing for this purpose is carried out by the Company in its capacity as autonomous data controller. Such processing is based on your consent. It is not mandatory to give your consent to the Company for this purpose and you may withdraw it at any time without any consequences (except from the impossibility – after the subscription to the expert.ai online training programs– to disclose your Personal Data on expert.ai’s social media accounts in order to promote the certification you obtained). You may withdraw your previously granted consent by following the instructions provided in Section 8 of this Privacy Policy.

5. Recipients of Personal Data

Your Personal Data may be shared with the subjects mentioned below (collectively “Recipients”):

  • subjects typically acting as data processors, namely: persons, companies or professional firms providing the Company (or, where appropriate, the expert.ai Group’s Relevant Company) with advice and consulting in accounting, administrative, legal, tax, financial and debt collection matters related to the provision of the Services;
  • subjects to engage with in order to provide the Services (for instance hosting providers or email platform providers);
  • persons authorized to perform technical maintenance (including maintenance of network equipment and electronic communications networks);
  • persons authorized by the Company (or, where appropriate, the expert.ai Group’s Relevant Company) to process the Personal Data required for carrying out activities strictly related to the provision of the Services, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality, for example the Company and/or expert.ai Group’s Relevant Company employees;
  • public entities, bodies, or authorities to disclose your Personal Data to in accordance with Compliance, Abuse/Fraud purposes or under the orders of the authorities.

6. Transfers of Personal Data

Some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. Expert.ai ensures that your Personal Data are processed by these Recipients in accordance with the applicable rules on data protection. Indeed, transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. Further information is available from expert.ai by writing to the following email address: [email protected].

7. Retention of Personal Data

Personal Data processed for Provision of the Service purposes will be kept by the Company for the period deemed strictly necessary to fulfil such purposes. In any case, as these Personal Data are processed for the provision of the Services, the Company will retain them for a longer period of time, particularly as may be necessary under applicable law to protect the Company’s interests against possible claims relating to the Services.

Personal Data processed for Recruitment purposes will be kept by the Company and/or expert.ai Group’s Relevant Company for 24 months and they may be used to contact you for any future job opportunities at expert.ai.

Personal Data processed for Marketing and Personalization purposes will be kept by the Joint Controllers until you withdraw your consent or until you object to the processing (where applicable). Once the consent has been withdrawn, the Joint Controllers will no longer use your Personal Data for such purposes, but they may retain them in any case, in particular if it may be deemed necessary in order to protect the interests of the Joint Controllers from potential complaints based on such processing.

Similarly, Personal Data processed for the purpose of Disclosure will be retained by the Company until you withdraw your consent or until you object to the processing (where applicable). Once the consent has been withdrawn, the Company will no longer use your Personal Data for such purposes, but may still retain it, in particular if it may be deemed necessary in order to protect the interests of the Joint Controllers from potential complaints based on such processing.

Personal Data processed for Soft Opt-in purposes will be kept by the Company until you object to the processing for such purpose.

Personal Data processed for the Compliance purpose will be retained by the Company or by expert.ai Group’s Relevant Company for the period provided for by specific legal obligations or applicable law.

Personal Data processed to prevent Abuse/Fraud and for the Security purpose will be retained by the Company (or, if appropriate, by expert.ai Group’s Relevant Company) for the time deemed strictly necessary for the aforementioned purposes, and thus until it is bound to keep them so as to protect himself in court to communicate such data to the competent Authorities.

Further information about the data retention period and the criteria used to determine this period can be asked by writing to the Data Controller at the email addresses provided for in Section 8 of the Privacy Policy.

8. Data subjects’ rights


Under Article 15 et seq. of the Regulation, you, as a data subject, are entitled to request at any time, to the Company or, where appropriate, to the expert.ai Group’s Relevant Company, access to your Personal Data, the correction and erasure of your Personal Data, as well as to object to its processing, pursuant to Article 21 of the Regulation. You are also entitled to request the restriction of the processing of your Personal Data in the cases set out in Article 18 of the Regulation, as well as to obtain the Personal Data you have provided in a structured, commonly used and machine-readable format, in the cases set out in Article 20 of the Regulation. You may interrupt the reception of Soft Opt-in, by using the appropriate link you may find at the bottom of each e-mail you receive. Requests should be made in writing to: [email protected] or to the work address of the Company (or the expert.ai Group’s Relevant Company) listed above.

In any case, please note that, as a data subject, you are entitled to file a complaint with the competent supervisory authorities for the protection of Personal Data, if you believe that the processing of your Personal Data carried out through these Websites violates applicable law.

9. Amendments


This Privacy Policy entered into force on July 13, 2021. The Company reserves the right to amend this Privacy Policy partly or fully, or simply to update its content, e.g., as a result of changes in applicable law. The Company will inform you of such changes as soon as they are introduced. The Company therefore invites you to regularly visit this Privacy Policy in order to keep up with the latest, updated version of the Privacy Policy, so that you may remain constantly informed on the collection and use of your Personal Data.

10. Additional information regarding local processing, where applicable, and privacy law

This Privacy Policy has been drafted in compliance with the European Union and Italian data protection legislation, as expert.ai Group has its registered office in Italy. For further information with specific regard to the processing of Personal Data by expert.ai in compliance with the data protection laws applicable in your Country, please write to: [email protected]