CoreMedia

Legal Document Overview

> Important scope note: This text is primarily a website Terms of Use and disclaimer, not a complete privacy policy. It provides limited information about personal-data processing, user rights, third-party disclosures, or AI training. Those issues may be addressed in CoreMedia’s separate Privacy Policy and cookie settings.

1. Data Collection & Usage

The document indicates that CoreMedia may collect:

• Registration information: Users must provide accurate and current information on forms used to access gated content.
• Account credentials and activity: Users are responsible for their username, password, and activities conducted through their account.
• User communications: Comments, questions, feedback, forum posts, and other submissions.
• Potential transaction-related data: If users transact with other companies through the website, those companies’ privacy policies may apply.

CoreMedia states that communications submitted to the website are considered non-confidential and non-proprietary. It claims ownership rights over those communications and may use or disclose them for any purpose without compensation.

The document does not explain:

• What specific personal information is collected;
• Cookie, analytics, advertising, or tracking practices;
• Retention periods;
• International data transfers;
• Security measures;
• The legal basis for processing;
• Whether sensitive or children’s data is collected.

Users should review the separate Privacy Policy before submitting information, particularly in forums or contact forms.

2. User Rights

No specific data-protection rights are described. The document does not explain procedures for:

• Accessing or obtaining a copy of personal data;
• Correcting inaccurate information;
• Deleting data;
• Restricting or objecting to processing;
• Data portability;
• Withdrawing consent;
• Opting out of marketing communications;
• Filing a privacy complaint.

Although the opening language says users “expressly consent” to storage and use of data described in the declaration, the declaration itself does not provide sufficient detail about that processing. Applicable rights may depend on the user’s location, such as rights under the GDPR, UK GDPR, or applicable U.S. state privacy laws.

3. Third-Party Sharing

The text permits or contemplates disclosure in several situations:

• User communications: CoreMedia may use or disclose submitted communications without restriction or compensation.
• Legal requirements: CoreMedia will comply with court orders requiring disclosure of a poster’s identity.
• Third-party websites and providers: Linked websites are outside CoreMedia’s control and have their own responsibility and privacy practices.
• Suppliers, partners, and affiliates: These entities are referenced in the liability disclaimer, but the document does not specify what data they receive.
• Other companies involved in transactions: Their own privacy policies apply.

There is no detailed list of service providers, categories of recipients, advertising partners, or international recipients.

4. AI/ML Training

The document does not state whether user data, communications, feedback, or website activity is used to train AI or machine-learning models. Any AI-related processing should be checked in the separate Privacy Policy, product-specific terms, or applicable data-processing agreement.

5. Key User Obligations and Restrictions

Users must:

• Provide accurate and current registration information;
• Protect account credentials and restrict access to their computer;
• Accept responsibility for all activity under their account;
• Avoid sharing passwords or misrepresenting identity or affiliation;
• Use protected areas only if authorized;
• Post only lawful and non-infringing content;
• Avoid abusive, obscene, defamatory, harassing, sexually explicit, or otherwise indecent material;
• Respect copyright and trademark rights.

Website content may be viewed, printed, or downloaded only for personal, non-commercial use, unless CoreMedia gives prior written permission. Copying, modifying, republishing, distributing, transmitting, or commercially using materials is prohibited.

CoreMedia may monitor communications, although it is not obligated to do so, and may restrict website access at any time.

6. Liability and Disputes

CoreMedia provides the website “as available” and disclaims most warranties, including accuracy, currency, fitness, merchantability, uninterrupted operation, and freedom from viruses.

It broadly excludes liability for direct, indirect, incidental, consequential, data-loss, revenue-loss, and similar damages, to the fullest extent permitted by law. Users also agree to indemnify and defend CoreMedia against third-party claims arising from their use of the website or communications.

Disputes are governed by U.S. federal law and California law, with exclusive jurisdiction and venue in federal or state courts located in California. No arbitration provision or liability cap is stated.

7. Changes

CoreMedia says it may change the Terms of Use at any time without notice. Users are expected to revisit the terms periodically. This creates a risk that continued use may subject users to updated terms without individualized notification.

Privacy Policy Overview

Controller: CoreMedia GmbH, Hamburg, Germany.

Data Protection Officer: Myrna Coaching & Consulting BV, Belgium.

Policy date: Privacy Policy last updated April 1, 2024. The cookie declaration states it was updated July 16, 2026, creating a potential version inconsistency.

1. Data Collection & Usage

CoreMedia collects different information depending on how you use the website:

• Technical and browsing data: browser and operating system, internet provider, IP address, access date/time, referring websites, and pages visited. Server logs are generally retained for up to seven days, with IP addresses subsequently deleted or anonymized.
• Cookies and similar technologies: login information, page views, feature usage, device identifiers, online identifiers, and browsing behavior. Analytics and marketing cookies may support audience segmentation, advertising, remarketing, conversion tracking, and cross-device analysis.
• Forms and communications: name, email address, telephone number, company, country, comments/messages, IP address, and submission time.
• Newsletters: email address and name, with optional phone number and company. Registration IP address and timestamp are also collected.
• Accounts and training/support registration: name, email, company, address, telephone number, country, and comments.
• Blog comments: name, email, optional website URL, comment text, IP address, and submission time.
• Job applications: contact details, date of birth (if provided), nationality, salary expectations, desired start date, CV, certificates, photographs, and other application materials.
• Chatbot interactions: name, company, email, phone number, and messages. Chatbot data may be retained for up to 24 months.
• Analytics and marketing: Google Analytics, LinkedIn Insight, Pendo, HubSpot, ZoomInfo, Gartner, Dreamdata, social-media tools, and other embedded services may collect interaction, device, advertising, and behavioral data.

Processing is based on consent, contract necessity, legal obligations, or CoreMedia’s legitimate interests, depending on the activity.

2. User Rights

Under the GDPR, users may generally:

• Request access to their data and information about its use;
• Correct inaccurate or incomplete data;
• Request deletion, subject to legal exceptions;
• Restrict processing;
• Receive portable copies of certain data;
• Object to processing based on legitimate interests and to direct marketing;
• Withdraw consent at any time, without affecting earlier lawful processing;
• Object to certain solely automated decisions and profiling;
• Complain to a data-protection authority.

Requests can be directed to info@coremedia.com. Newsletter subscriptions can be cancelled through the unsubscribe link or the preference center.

3. Third-Party Sharing

CoreMedia says it uses external processors under data-processing agreements and generally limits them to information needed for their tasks. Nevertheless, data may be shared with or collected by:

• Google, LinkedIn, Meta/Facebook, Twitter/X, Instagram, Pinterest, XING, Vimeo, YouTube;
• HubSpot, Zendesk, Pendo, ZoomInfo, Gartner, Dreamdata, Eventbrite, Riddle, and related providers;
• Authorities or other recipients where legally required;
• CoreMedia affiliates, including its U.S. corporation in some recruitment situations, with prior consent.

Several providers may process data in the United States or other non-EEA countries, relying mainly on Standard Contractual Clauses or other safeguards. Third-party social-media and embedded-content providers may independently track users under their own policies.

4. AI/ML Training

The policy does not state that personal data is used to train artificial-intelligence or machine-learning models. It mentions chatbots, AI-related products, analytics, and personalization, but provides no specific AI-training permission, prohibition, retention rule, or opt-out. This is an important ambiguity, particularly for chatbot messages, support content, and submitted business information.

5. Key User Obligations and Restrictions

• Users should provide accurate information and avoid submitting unnecessary sensitive or confidential data.
• Email contact is stated to be unencrypted, creating confidentiality and interception risks.
• Disabling cookies may impair website functions.
• Users control cookie settings through the consent manager or browser, but some necessary cookies cannot be refused if the site is to function.
• Embedded content such as YouTube or Vimeo may transmit data to those providers once enabled.

6. Liability & Disputes

This document is a privacy notice, not a contract containing liability caps, warranties, governing-law terms, arbitration clauses, or dispute procedures. It therefore provides no clear contractual limitation of CoreMedia’s liability or special dispute-resolution process. GDPR complaints may be made to a supervisory authority, including one where the user lives, works, or believes an infringement occurred.

7. Changes

The policy explains how data is processed but does not specify how users will be notified of policy changes. Users should monitor the policy and cookie-consent pages. The differing update dates also make it important to verify which version applies at the time of use.