We stand with Ukraine

This document (“Information Notice” or “Privacy Policy”) has been prepared pursuant to Articles 13 and 14 of the EU Regulation 2016/679 (“Regulation”) in order to enable you to understand how your Personal Data, as more fully defined below, will be processed in the context of your use of the Sites, and to learn about our privacy policy. The purpose of the Notice is to provide you with the information necessary for you to express explicit and informed consent to the processing carried out through the sites www.expert.ai, https://community.expert.ai/, https://developer.expert.ai/, and https://try.expert.ai/ (hereafter, collectively, the “Sites”), if you deem it appropriate.

The information and data you may provide, or which may otherwise be collected through the Websites, in the context of your use of expert.ai’s services, such as the registration to the Natural Language API developer platform provided on the website https://developer.expert.ai/or to expert.ai’s community, the use of the NL Platform (“Platform”) or the use of our analysis & classification tool provided on the website https://try.expert.ai/, the request to have further information on our products and services, etc.  (hereinafter, the “Services”) as defined in the Purpose of processing Section, will be used by expert.ai in compliance with the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity and confidentiality.

CONTENTS

1. Data Controller

The Data Controller of your personal data is expert.ai S.p.A., registered office in Rovereto (38068 – Trento, Italy), Via Fortunato Zeni, No. 8, VAT No. 02608970360 (hereinafter the “Company”), as well as each company of the expert.ai Group that processes personal data under the circumstances specified below (each individually the “Relevant Company” and jointly with the Company, “expert.ai”).

Unless otherwise specified in relation to the individual processing purposes mentioned in this Privacy Policy, for the purposes of this Privacy Policy Relevant Company of the expert.ai Group means:
Expert System Enterprise Corp., with registered office in 6110 Executive Boulevard, Suite 690, Rockville (U.S.A.), MD 20852.
Expert System Iberia S.l.u., with registered office in Calle Poeta Joan Margall, 3-5, escalera izquierda, planta 1ª, derecha, 28020, Madrid, Espana.
Expert System France S.a., with registered office in 15 – 17, rue Traversiere, 75012 Paris, France.
Expert System Deutschland Gmbh., with registered office in Weinbergsweg 3c, 61348 Bad Homburg v. d. Höhe.
Expert System Cogito Ltd., with registered office in Unit 203, Second Floor China House 401 Edgware Road, NW2 6GY, London – United Kingdom.
Expert System Canada – Semantic T. Inc., with registered office in 900-2001 av.McGill College Montréal (Québec) H3A1G1 – Canada.

2. Data Protection Officer

It is possible to contact the expert.ai Group Data Protection Officer (“DPO”) by writing to: [email protected].

3. Personal Data processed

As a result of browsing the Sites and/or the Services, we inform you that the Company and/or the Relevant Company of the expert.ai Group will process your Personal Data, which may consist – also depending on your decisions on how to use the Services – of an identifier such as your name, an identification number, an online identifier (hereinafter just “Personal Data”), either because you voluntarily provide it (e.g. when you fill out an online form or when you decide to register with Natural Language API or the expert.ai community and create your profile) or simply by analyzing your behavior on the Sites.

Please note that payments for the services provided by the Natural Language API are made through a third-party platform (depending on the country in which you are located, e.g. PayPal or others), which operates as an independent data controller and does not allow expert.ai to access your payment information, such as credit card number or other data that you must provide to complete the purchase. Expert.ai will, however, use your billing information, which will be requested at the time of purchase, for any relevant tax and accounting obligations and to send you the invoice relative to your purchase.

Personal Data which may be processed through the Websites are as follows:

a. Name, contact details and other Personal Data

In some sections of the Websites (e.g. Contact Us, Resources, Newsletter, online training programs, community’s profile settings, Natural Language API registration form, etc.), you may be asked to enter information such as your name, surname, telephone number, email address, job title, company you work for, etc.

b. Job applications. Special Categories of Personal Data

By sending your application and your CV from the “Careers” section on www.expert.ai, you authorize the Company and/or the expert.ai Group’s Relevant Company to process your Personal Data. Expert.ai asks that you do not disclose Personal Data which may fall under the category of Personal Data referred to in Article 9 of the Regulation – i.e. “[…] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”, unless you consider this to be strictly necessary, and to provide your consent if you decide to share them by authorization to be included in the CV. The processing of such Personal Data may be permitted as it is based on the release of your consent according to the applicable rules on personal data protection. Expert.ai asks that you do not disclose any such types of Personal Data unless you consider this to be strictly necessary. In any case, expert.ai would stress the importance of providing your explicit consent to process this sort of Personal Data, if you decide to share it, nonetheless.

c. Third party Personal Data provided voluntarily by the user.


As mentioned above, in some parts of the Sites (such as, for example, in the Contact Us section found at expert.ai, in the comment sections found under topics created by members of the expert.ai community, or when you enter text or type in a URL within the analysis and classification tool) you may enter text messages or information that may contain Personal Data of other people.

With respect to such hypotheses, you stand as autonomous data controller, assuming all the obligations and responsibilities of the law. In this sense, it confers on the point the widest indemnity with respect to any dispute, claim, request for compensation for damages from processing, etc. that may be received by expert.ai from third parties whose Personal Data have been processed through its use of the functions of the Sites in violation of the applicable data protection regulations. In any event, should it provide or otherwise process Personal Data of third parties in its use of the Sites, it warrants as of now – assuming all related liability – that such particular instance of processing is based on the consent of such third party concerned or on another appropriate legal basis legitimizing the processing of such information.

d. Publicly available online data

As part of the presentation and promotion activities (“Demo”) of its semantic analysis platform, the Company may also process documents and information publicly available online that may contain Personal Data (e.g. in newspaper articles, magazines, etc.). Such processing is based on the legitimate interest of the Company to demonstrate the correct functioning and capabilities of the Demo(s) and is carried out for the time strictly necessary to achieve the aforementioned purpose. For further information you can write to: [email protected].

e. Browsing Data

The computer systems and software procedures used to operate the Sites acquire, in the course of their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. While expert.ai does not collect this information in order to link it to specific users, it is still possible to identify those users either directly via that information, or by using other information collected – as such, this information is also considered Personal Data. This information includes several parameters related to your operating system and IT environment, including your IP address, location (country), the domain names of your computer, the URI (Uniform Resource Identifier) addresses of resources you request on the Websites, the time of requests made, the method used to submit requests to the server, the dimensions of the file obtained in response to a request, the numerical code indicating the status of the response sent by the server (successful, error, etc.), and so on.  Data could be used to ascertain liability in case of hypothetical computer crimes against the Sites, the Platform or third parties: except for this eventuality, at present, data on web contacts do not persist for more than seven days.

f. Cookies

Information regarding the use of cookies can be found in the Cookie Policy available

4. Purpose of the processing

The Company (and/or, where relevant, the expert.ai Group’s Relevant Company) intends to use your Personal Data, collected through the Websites, for the following purposes.

To provide Services you request, such as the download of the materials shared on the Websites (e.g. in the “Resources” section on www.expert.ai), subscribing to events, the online training programs and/or expert.ai’s community, providing you access to the Natural Language API you request, using the Platform or our analysis & classification tool, responding to a request sent to addresses you may find on the Websites (“Provision of the Service“).

To analyze the CV and to contact the candidates who submit their applications through the addresses you may find in the “Careers” section on www.expert.ai (“Recruitment“).

To carry out marketing activities, such as to conduct surveys, studies, research, market statistics and send you newsletter, advertising and information material via e-mail, telephone and/or through the official pages of expert.ai on social media related to the activities, the products and the services of expert.ai (“Marketing“). You can, at any time, withdraw your consent that you have previously granted to traditional or automated methods by giving notice to the Company and/or the expert.ai Group’s Relevant Company without any formality, simply by writing to the addresses indicated in Section 8 of the Privacy Policy, without prejudicing the lawfulness of the processing founded on your previous consent.

To carry out direct marketing activities via e-mail for services similar to those you have subscribed to through the Websites, unless you objected to such processing initially or in subsequent communications (“Soft Opt-In“).

To analyze your preferences, habits, interests, and consumption choices expressed through the use of the Websites and the services offered, and, where appropriate, by using non-essential cookies, in order to send you material and commercial communications and personalized promotions on the services offered by expert.ai (“Personalization”).

To fulfil the legal obligations which required the Company and/or the expert.ai Group’s Relevant Company to collect and/or further process certain types of Personal Data (“Compliance“).

To prevent or identify any fraudulent conduct by using the Websites in order to allow the Company and/or the expert.ai Group’s Relevant Company for legal defense (“Abuse/Fraud”).

To verify information relevant to the use of the Platform in order to ensure the security of the services we provide (“Security”).

To carry out statistical analysis without the possibility of identifying the user (“Statistics”).

To disclose, where a subscription to the expert.ai online training programs occurs, Personal Data (name, surname, company role, and – if applicable – LinkedIn account) of the contractual representative or another contact point of the partners of expert.ai on expert.ai social media accounts, in order to promote the certification obtained (“Disclosure“).

5. Legal basis data controllership and mandatory/discretionary nature of the processing

The legal bases the Company (and/or, where relevant, the expert.ai Group’s Relevant Company) to process your Personal Data, in accordance with the purposes set out in the Purpose of Processing Section above, are as follows:

Provision of the Service: the processing for this purpose is carried out by the Company in its capacity as autonomous data controller. Such processing is necessary to provide the Service and for the performance of the contract. The provision of your Personal Data for this purpose is optional, however, failure to provide them would imply the inability to initiate the requested Services provided through the Websites or to respond to requests.

Recruitment: the processing for this purpose is necessary for the Company (or, where appropriate, the expert.ai Group’s Relevant Company) to be able to consider your application and, therefore, it is necessary in order to start the selection process. The provision of your Personal Data is optional, but any failure to provide it would make it impossible to evaluate your profile. If you decide to provide special categories of Personal Data (e.g. data concerning health, religious beliefs, etc.), the Company (or, where appropriate, the expert.ai Group’s Relevant Company) may require your specific consent which, in this case, may be inserted at the bottom of your application. In this regard, we would like to remind you not to provide such type of information unless strictly necessary and that in the absence of your giving your consent to the processing of special categories of Personal Data related to you, if you provide such type of data, your application cannot be considered.

Marketing: the processing for this purpose is carried out by expert.ai S.p.A. jointly with Expert System Enterprise Corp. and the expert.ai Group’s Relevant Company involved from time to time (in relation to the geographical area of reference) as joint controllers (“Joint Controllers”). Such processing is based on your consent or, if applicable, on legitimate interest. It is not mandatory for you to give your consent to the Joint Controllers for this purpose and you can withdraw your consent at any time without any consequences (except for the fact that you will no longer receive marketing communications from the Data Controller). You may withdraw your previously granted consent or object every time to the processing by following the instructions provided in Section 8 of this Privacy Policy.

Soft Opt-In: the processing for this purpose is carried out by the Company in its capacity as autonomous data controller. Such processing is based on the interest of the Company to send marketing communications by email regarding products and services similar to those requested through the Websites. You may interrupt the receipt of these communications, without any consequence for you (with the exception of the failure to receive such further communications from the Company) using the link at the bottom of each of these emails.

Personalization: the processing for this purpose is carried out by Expert.ai S.p.A. jointly with Expert System Enterprise Corp. and the expert.ai Group’s Relevant Company involved from time to time (in relation to the geographical area of reference) as Joint Controllers. Such processing is based on your consent. It is not mandatory to give your consent to the Joint Controllers for this purpose and you may withdraw it at any time without any consequences (except the impossibility to benefit from the personalization of the commercial offers that will be received by the Joint Controllers). You may withdraw your previously granted consent by following the instructions provided in Section 8 of this Privacy Policy.

For Personalization purposes, where applicable in relation to the geographical area of reference, the Relevant Company acting as Joint Controller is: Expert System Iberia S.l.u. (for Spain), Expert System France S.a. (for France), Expert System Deutschland Gmbh (for Germany), Expert System Cogito Ltd. (for the United Kingdom), Expert System Canada – Semantic T. Inc. (for Canada).

  • Compliance: the processing for this purpose is carried out by the Company (or, where appropriate, the expert.ai Group’s Relevant Company) in its capacity as autonomous data controller and is necessary in order to fulfil any legal obligations. When you provide Personal Data, they must indeed be processed according to the applicable regulations, which could entail their retention and disclosure to the Authorities for accounting, tax, or other obligations.
  • Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activity or abuse in the use of the Websites and therefore allow the Company or the expert.ai Group’s Relevant Company, in its capacity as autonomous data controller, to defend in court.
  • Security: the processing for this purpose is carried out by the Company in its capacity as autonomous data controller and it is based on the legitimate interest of the Company.
  • Statistics: it is specified that such processing is not performed on Personal Data and therefore can be freely carried out by expert.ai.

Disclosure: processing for this purpose is carried out by the Company in its capacity as autonomous data controller. Such processing is based on your consent. It is not mandatory to give your consent to the Company for this purpose and you may withdraw it at any time without any consequences (except from the impossibility – after the subscription to the expert.ai online training programs– to disclose your Personal Data on expert.ai’s social media accounts in order to promote the certification you obtained). You may withdraw your previously granted consent by following the instructions provided in the Data subjects’ rights of this Privacy Policy.

6. Recipients of Personal Data

Your Personal Data may be shared with the subjects mentioned below (collectively “Recipients”):

  • subjects typically acting as data processors, namely: persons, companies or professional firms providing the Company (or, where appropriate, the expert.ai Group’s Relevant Company) with advice and consulting in accounting, administrative, legal, tax, financial and debt collection matters related to the provision of the Services;
  • subjects to engage with in order to provide the Services (for instance hosting providers or email platform providers);
  • persons authorized to perform technical maintenance (including maintenance of network equipment and electronic communications networks);

  • persons authorized by the Company (or, where appropriate, the expert.ai Group’s Relevant Company) to process the Personal Data required for carrying out activities strictly related to the provision of the Services, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality, for example the Company and/or expert.ai Group’s Relevant Company employees;
  • public entities, bodies, or authorities to disclose your Personal Data to in accordance with Compliance, Abuse/Fraud purposes or under the orders of the authorities.

7. Transfers of Personal Data

Some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. Expert.ai ensures that your Personal Data are processed by these Recipients in accordance with the applicable rules on data protection. Indeed, transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. Further information is available from expert.ai by writing to the following email address: [email protected].

8. Retention of Personal Data

Personal Data processed for Provision of the Service purposes will be kept by the Company for the period deemed strictly necessary to fulfil such purposes. In any case, as these Personal Data are processed for the provision of the Services, the Company will retain them for a longer period of time, particularly as may be necessary under applicable law to protect the Company’s interests against possible claims relating to the Services.

Personal Data processed for Recruitment purposes will be kept by the Company and/or expert.ai Group’s Relevant Company for 24 months and they may be used to contact you for any future job opportunities at expert.ai.

Personal Data processed for Marketing and Personalization purposes will be kept by the Joint Controllers until you withdraw your consent or until you object to the processing (where applicable). Once the consent has been withdrawn, the Joint Controllers will no longer use your Personal Data for such purposes, but they may retain them in any case, in particular if it may be deemed necessary in order to protect the interests of the Joint Controllers from potential complaints based on such processing.

Similarly, Personal Data processed for the purpose of Disclosure will be retained by the Company until you withdraw your consent or until you object to the processing (where applicable). Once the consent has been withdrawn, the Company will no longer use your Personal Data for such purposes, but may still retain it, in particular if it may be deemed necessary in order to protect the interests of the Joint Controllers from potential complaints based on such processing.

Personal Data processed for Soft Opt-in purposes will be kept by the Company until you object to the processing for such purpose.

Personal Data processed for the Compliance purpose will be retained by the Company or by expert.ai Group’s Relevant Company for the period provided for by specific legal obligations or applicable law.

Personal Data processed to prevent Abuse/Fraud and for the Security purpose will be retained by the Company (or, if appropriate, by expert.ai Group’s Relevant Company) for the time deemed strictly necessary for the aforementioned purposes, and thus until it is bound to keep them so as to protect himself in court to communicate such data to the competent Authorities.

Further information about the data retention period and the criteria used to determine this period can be asked by writing to the Data Controller at the e-mail addresses provided in the Data subjects’ rights in Section of this Privacy Policy.

9. Data subjects’ rights


Under Article 15 et seq. of the Regulation, you, as a data subject, are entitled to request at any time, to the Company or, where appropriate, to the expert.ai Group’s Relevant Company, access to your Personal Data, the correction and erasure of your Personal Data, as well as to object to its processing, pursuant to Article 21 of the Regulation. You are also entitled to request the restriction of the processing of your Personal Data in the cases set out in Article 18 of the Regulation, as well as to obtain the Personal Data you have provided in a structured, commonly used, and machine-readable format, in the cases set out in Article 20 of the Regulation. You may interrupt the reception of Soft Opt-in, by using the appropriate link you may find at the bottom of each e-mail you receive. Requests should be made in writing to: [email protected] or to the work address of the Company (or the expert.ai Group’s Relevant Company) listed above.

In any case, please note that, as a data subject, you are entitled to file a complaint with the competent supervisory authorities for the protection of Personal Data, if you believe that the processing of your Personal Data carried out through these Websites violates applicable law.

10. Amendments


This Privacy Policy entered into force on July 13, 2021. The Company reserves the right to amend this Privacy Policy partly or fully, or simply to update its content, e.g., as a result of changes in applicable law. The Company will inform you of such changes as soon as they are introduced. The Company therefore invites you to regularly visit this Privacy Policy in order to keep up with the latest, updated version of the Privacy Policy, so that you may remain constantly informed on the collection and use of your Personal Data.

11. Additional information regarding local processing, where applicable, and privacy law

This Privacy Policy has been drafted in compliance with the European Union and Italian data protection legislation, as expert.ai Group has its registered office in Italy. For further information with specific regard to the processing of Personal Data by expert.ai in compliance with the data protection laws applicable in your Country, please write to: [email protected].