Kontent.ai

Privacy Policy Overview

Effective date: June 2, 2025

Controller: Kontent s.r.o. and certain Kontent Group companies, acting as joint controllers. Other providers may act as processors. The policy applies to the Kontent.ai website, services, Partner Program, training, events, supplier relationships, and job applications.

1. Data Collection and Use

Website and cookies

Kontent may collect:

• IP address, internet domain, company, and approximate location (GeoIP)
• Pages or services requested
• Browser, operating system, access date and time
• Referring website
• Cookie information
• Information submitted through forms, such as name, email, company, phone number, IP address, and office address

Cookies support site functionality, remember preferences, and may support analytics and personalization. Website activity may be monitored for profiling, lead scoring, statistics, personalized content, and tailored offers. Cookie-based processing depends on browser or cookie settings.

Services and accounts

For contracts and account administration, Kontent may collect contact, identity, residence, company, invoicing, and bank-account information. It uses this information to:

• Negotiate and conclude contracts
• Provide and invoice for services
• Create and maintain accounts
• Analyze service usage on an anonymous basis
• Protect legal rights and defend claims

Uploaded personal data—particularly data about third parties—is generally processed on the customer’s instructions, with Kontent acting as a processor.

Other activities

Kontent may process:

• Marketing: name, location, email, phone number, and potentially recorded sales calls
• Partners and suppliers: contract and contact information
• Training: contact, billing, training progress, and certification results
• Events: registration details, attendance information, evaluation data, and photographs where consent is given
• Job applicants: CV, contact details, date of birth, education, qualifications, experience, and interview information

Legal bases include contract performance, pre-contract steps, legitimate interests, and consent. Retention varies substantially: some data may be held for four or five years after a relationship ends, and data relevant to legal claims may be retained for up to 11 years, depending on limitation periods.

2. User Rights

Under the GDPR, users may request:

• Access to personal data and processing information
• Correction of inaccurate data
• Erasure, where legally applicable
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Objection to direct marketing

Consent-based processing can generally be withdrawn at any time, including through marketing unsubscribe links or the consent-settings page. Requests can be sent to privacy@kontent.ai. Users may also complain to the Czech Office for Personal Data Protection or another relevant supervisory authority.

These rights are subject to GDPR exceptions—for example, Kontent may retain data needed for legal claims or statutory obligations.

3. Third-Party Sharing and International Transfers

Data may be shared with:

• Kontent Group companies in the Czech Republic, Netherlands, UK, US, Australia, and Canada
• Microsoft Azure and its subcontractors
• Service-specific subprocessors listed in the “Personal Data in Kontent.ai” materials
• Professional advisers, including lawyers, tax advisers, and IT specialists
• Courts, government bodies, or others where legally required or necessary to protect Kontent’s rights

Some recipients are outside the EU. Kontent states that transfers are protected primarily through European Commission Standard Contractual Clauses. Third-party websites linked from Kontent’s site are governed by their own privacy policies.

4. AI/ML Training

The policy does not state that user data is used to train artificial-intelligence or machine-learning models. It mentions profiling, lead scoring, analytics, and anonymous service-use analysis, but these statements are not an express AI-training authorization. Users should review the separate service terms, enterprise agreement, and “Personal Data in Kontent.ai” document for further detail, particularly regarding uploaded content.

5. Key User Obligations and Restrictions

If you upload personal data, you must ensure it was collected and uploaded lawfully under the GDPR, including providing required notices and obtaining any necessary permissions. You must also inform Kontent about third-party contact persons whose data you provide.

The policy states Kontent is not liable for claims arising from your breach of these obligations. Event photographs and marketing communications may be used only under the conditions described, including consent where required.

6. Liability and Disputes

The policy does not provide a broad liability cap or detailed dispute-resolution clause. It states that Kontent may retain data to avoid or defend litigation, generally for the applicable limitation period, potentially up to 11 years. Complaints about data processing may be brought to a supervisory authority. Contract-specific liability, governing law, jurisdiction, and dispute procedures are likely contained in the applicable Terms of Service or Enterprise Agreement.

7. Policy Changes

Kontent may amend the policy. It will display the date of the latest version, maintain archived versions, and provide notice when changes are significant. The policy does not specify exactly how much advance notice will be given or what qualifies as “significant.”