Pimcore

Summary of Important Changes

1. General Terms and Conditions (PTC) presentation

• The page was substantially rewritten from general marketing/navigation content into a dedicated “Pimcore General Terms & Conditions (PTC)” page.
• The revised page directs customers to download separate PTC documents based on region:
• EU & EEA
• US & Canada
• Customers outside those regions
• The actual contractual terms are not included in the diff. They are available only through external regional downloads.

Risk: Customers may not know which regional terms apply, and the diff does not show whether the underlying PTC documents themselves changed. The downloaded documents should be separately reviewed for governing law, liability, termination, data processing, and AI provisions.

2. Personal-data use and sharing

The revised page adds or clarifies several statements concerning information submitted through forms:

• Pimcore states that it will use personal data “solely to process your request.”
• Pimcore may share data with certified solution partners in the customer’s geographical region to provide a more localized experience.
• Form submissions are stated to authorize Pimcore to store and process personal information to provide the requested content.
• A separate optional marketing checkbox allows users to request:
• Exclusive insights
• Expert tips
• Pimcore updates
• Newsletter submissions state that Pimcore may store and process data to send emails.

Risks and points to verify:

• “Solely” processing request data appears limited, but the separate partner-sharing language creates an additional disclosure/use channel.
• The scope of “certified solution partners,” the categories of data shared, partner obligations, retention periods, and international transfers are not specified here.
• The marketing language should clearly distinguish optional consent from processing necessary to fulfill a request.
• The privacy policy and any data-processing terms should be checked for consistency with these statements.

3. AI-model training

• No express change or new provision concerning the use of customer data to train, fine-tune, evaluate, or improve AI models appears in the supplied diff.
• The revised page uses general language about Pimcore’s platform and data management, but this is marketing content and does not create a clear contractual restriction or permission regarding AI training.
• There is no visible statement addressing:
• Whether customer data or prompts may be used for AI training
• Whether data is anonymized or aggregated first
• Whether third-party AI providers may receive customer data
• Whether customers can opt out
• Ownership of AI outputs or derived models

Recommended action: Obtain and review the applicable regional PTC, privacy policy, DPA, and any AI-specific terms before concluding that customer data is excluded from model training.

4. Drafting and technical concerns

• The diff contains extensive duplicated and corrupted webpage text, including placeholder words and navigation fragments.
• This may create uncertainty about the authoritative wording and whether the displayed page is intended to be legally operative.

Summary

The provided diff does not include the actual added, deleted, or replaced contract language. It only states:

> “Added approximately 1313 words to the document”

Accordingly, it is not possible to determine:

• What contractual obligations or rights changed;
• Whether liability, indemnity, confidentiality, security, termination, or dispute provisions were revised;
• Whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models;
• Whether data may be shared with affiliates, service providers, or third parties;
• Whether the customer has opted out of AI training or has any deletion, audit, or control rights; or
• Whether the changes create new compliance, confidentiality, intellectual-property, or data-protection risks.

Information Needed

Please provide the complete marked-up diff, including:

• Additions in {curly brackets};
• Deletions in [square brackets]; and
• Replacements in the format []{}

If the added language is too long, provide at least the provisions addressing:

1. Customer data and content;

2. Artificial intelligence, machine learning, or model training;

3. Product improvement or analytics;

4. Confidentiality and security;

5. Data retention and deletion;

6. Third-party providers or subprocessors; and

7. Intellectual-property ownership and licenses.

Without the actual language, no reliable legal-risk or AI-training analysis can be performed.

Summary

The provided diff only states that approximately 1,313 words were removed from the document. It does not identify which clauses, definitions, or rights were deleted.

AI Training and Data Use

• The diff provides no specific information about whether customer data may be used to:
• Train, fine-tune, or improve AI or machine-learning models;
• Develop products or services;
• Create aggregated, anonymized, or de-identified datasets;
• Permit third-party providers to use customer data for AI training; or
• Retain inputs, outputs, prompts, or other usage data for model development.

• Because wording was removed, there is a potential risk that restrictions on AI training or secondary use of customer data may have been deleted. However, this cannot be confirmed without seeing the actual removed text.

Other Potential Risks

The deletion of 1,313 words could have removed important provisions concerning:

• Confidentiality and permitted uses of customer information;
• Data ownership and licensing rights;
• Data retention and deletion;
• Security obligations and breach notification;
• Subprocessors and third-party data access;
• Compliance with privacy and data-protection laws;
• Audit rights and customer controls;
• Liability, indemnification, or contractual limitations; and
• Termination-related data return or deletion obligations.

The commercial and legal effect cannot be reliably assessed from the word-count description alone. A large deletion may simplify the agreement, but it may also remove customer protections or narrow the provider’s obligations.

Information Needed

To conduct a meaningful review, provide either:

1. The actual redline showing deleted text; or

2. The prior and revised versions of the document.

The specific clauses addressing customer data, machine learning, artificial intelligence, model training, product improvement, anonymization, de-identification, usage data, and subprocessors should be included.

Structured Summary of Important Changes

1. Apparent scope of the change

The diff appears largely to replace or overlay the General Terms and Conditions page with Pimcore’s broader website navigation, product descriptions, marketing content, and lead-generation forms. It does not show substantive amendments to the underlying PTC legal text.

The page continues to identify separate PTC documents for:

• EU and EEA customers;
• US and Canadian customers; and
• Customers in the rest of the world.

Because the actual regional PTC documents are not included in the diff, changes to liability, warranties, confidentiality, security, data processing, intellectual property, or termination cannot be assessed from this material.

2. Customer-data use changes

New or clarified marketing-form language

The additions include statements that:

• Pimcore will use submitted personal data “solely” to process a request;
• Pimcore may share that data with certified solution partners in the customer’s geographical region;
• users may separately opt in to receive “exclusive insights, expert tips, and updates”;
• Pimcore may store and process submitted data to send newsletter emails; and
• data use is subject to the Privacy Policy.

Risks and implications

• Partner disclosure: The language expressly introduces or emphasizes sharing personal data with certified solution partners. The scope of partners, purposes, locations, onward disclosures, and contractual safeguards are not stated here.
• Purpose ambiguity: “Solely” for processing a request may conflict with the separate newsletter consent and partner-sharing language unless the purposes are clearly separated by form and consent mechanism.
• Consent and compliance: Marketing consent appears to be presented through optional checkboxes, but the diff does not establish whether consent is freely given, separately recorded, withdrawable, or required to obtain the requested service.
• Geographical transfers: The wording refers to localized experiences and regional partners, but does not identify applicable transfer mechanisms or retention periods.

3. AI-model training

No provision in the diff expressly states that customer data, submitted personal information, customer content, or usage data may be used to train, fine-tune, evaluate, or improve AI models.

The website adds marketing language describing Pimcore as “the most AI-enabled Platform,” but this is promotional language and does not itself authorize AI training or establish how customer data is handled.

Accordingly, there is no identifiable new contractual permission for AI training in the supplied diff. The relevant PTC, Privacy Policy, data-processing terms, and any AI-specific terms should be reviewed separately to confirm whether such rights exist.

4. Key action points

• Obtain and compare the applicable regional PTC documents.
• Review the Privacy Policy and data-processing terms for AI training, service improvement, profiling, and model-provider disclosures.
• Clarify partner-sharing purposes, recipients, international transfers, retention, and opt-out rights.
• Confirm that marketing consent is separate from demo or service-request consent.

Summary of the Diff

Scope of Changes

• The diff states that approximately 1,313 words were removed from the document.
• No replacement text or details of the deleted provisions are provided.
• As a result, the precise legal, commercial, and operational effects cannot be determined from the diff alone.

Customer Data and AI Training

• The available diff does not identify whether any provisions concerning AI, machine learning, model training, data analytics, or use of customer data were deleted.
• However, if the removed language addressed these topics, its deletion could materially change the customer’s rights and the provider’s permitted uses of data.
• Important questions include whether the deleted provisions:
• Prohibited or limited training AI models using customer data;
• Required customer consent before using data for training;
• Restricted use of customer content to aggregated, anonymized, or de-identified data;
• Required deletion or segregation of customer data from training datasets;
• Addressed ownership of inputs, outputs, models, or derived data;
• Required disclosure of third-party AI providers or subprocessors;
• Applied confidentiality, security, or retention obligations to AI-related processing; or
• Provided audit, opt-out, indemnity, or liability protections relating to AI use.

Key Risks

• Reduced protections: Deleting data-use restrictions could broaden the provider’s ability to process or reuse customer data.
• Unclear AI permissions: If AI-related language was removed, the contract may no longer clearly state whether customer data can be used for model training.
• Loss of consent or opt-out rights: Deleted provisions may have required express authorization or offered an opt-out mechanism.
• Confidentiality and compliance exposure: Removal of limitations could create uncertainty regarding compliance with privacy laws, confidentiality duties, data-location requirements, or sector-specific rules.
• Ownership and control uncertainty: Deletion may affect rights in customer content, AI outputs, derived data, or models trained using customer information.
• Remedy risk: Deleted indemnity, warranty, audit, or liability language could leave the customer with fewer remedies if data is misused.

Recommended Follow-Up

Obtain both the prior and revised full agreements, or at least the text of the 1,313 deleted words. Review specifically the sections on data use, confidentiality, privacy, security, intellectual property, subprocessors, analytics, and AI/model training before accepting the changes.

Summary of Changes

1. New material added to the document

• A very large block of text has been added after the existing reference to “TOMs” (likely Technical and Organisational Measures).
• The added content consists largely of repeated placeholder words and an alphanumeric string:
• Repeated “word” text
• Repeated mmMwWLliI0fiflO&1 sequences
• The addition does not appear to contain coherent contractual language, defined terms, obligations, or operational provisions.

2. Legal and contractual risks

• Unclear contractual meaning: If incorporated into the agreement, the added text may create ambiguity about the parties’ rights and obligations. Courts or contracting parties could dispute whether it is operative language, an appendix, or corrupted content.
• Document integrity and version-control risk: The unusual text suggests a possible drafting, formatting, testing, or system-injection error. The customer should verify that the document has not been altered unintentionally.
• Potential incorporation by reference: Because the text appears immediately after “TOMs,” there is a risk that it could be interpreted as part of the technical and organisational measures or another contractual annex, despite lacking meaningful content.
• Compliance uncertainty: The addition does not provide usable information about security controls, privacy safeguards, subprocessors, data retention, or other requirements commonly addressed in TOMs.

3. Customer data and AI-model training

• No identifiable AI-training provision has been added or deleted.
• The diff contains no clear language addressing:
• Whether customer data may be used to train, fine-tune, or improve AI models;
• Whether prompts, outputs, personal data, or confidential information are used for training;
• Whether training is performed by the provider or its subprocessors;
• Whether the customer can opt out;
• Data retention or deletion after use for training; or
• Ownership and permitted use of model outputs.
• Accordingly, the diff does not expressly expand or restrict AI-training rights, but it also does not resolve any existing uncertainty in the underlying agreement.

Recommended action

Do not accept this version without clarification. Request a clean copy, confirmation that the added text is accidental or intentional, and an express statement governing whether customer data may be used to train or improve AI models.

Summary of Changes

1. Extensive deletion of legal and privacy documentation

The diff removes a very large block of text following references to:

• Imprint
• Privacy Policy
• General Terms & Conditions (PTC)
• Technical and Organizational Measures (TOMs)

No replacement text or additions are shown. The deleted material appears to include a substantial portion of the applicable contractual and privacy documentation, although its exact contents cannot be determined from the diff.

2. Customer data and AI-model training

The diff does not contain any identifiable new language expressly addressing:

• Whether customer data may be used to train, fine-tune, or improve AI models;
• Whether prompts, inputs, outputs, or personal data are retained for model training;
• Whether training is conducted by the provider or third-party service providers;
• Whether customers may opt out of AI training;
• Whether data is anonymized, aggregated, or otherwise de-identified before training; or
• Ownership or licensing rights relating to training data or model outputs.

However, because the Privacy Policy, General Terms, and TOMs appear to have been materially deleted, any prior restrictions or commitments concerning AI training, data use, confidentiality, retention, subprocessors, or security may no longer be visible or may have been removed from the operative text.

3. Legal and commercial risks

The deletion creates significant uncertainty and potential risk, including:

• Unclear data-use rights: It is not possible to confirm whether customer data remains limited to service provision or may be used for broader purposes.
• Potential loss of AI-training protections: Any prior prohibition, consent requirement, or opt-out mechanism concerning model training may have been deleted.
• Reduced privacy transparency: Key disclosures required to explain processing purposes, legal bases, retention, and data recipients may be missing.
• Unclear security commitments: The TOMs may have contained technical and organizational safeguards that are no longer stated.
• Contractual enforceability risk: Removing referenced terms without providing replacement language may create ambiguity regarding which terms apply.
• Regulatory risk: If personal data is processed, missing privacy and security provisions could create compliance concerns under applicable data-protection laws.

Overall assessment

This is a high-impact deletion with insufficient information to determine the new contractual position. The most important follow-up is to compare the deleted text with the prior version and confirm specifically whether any provisions governing customer-data use for AI training, retention, subprocessors, confidentiality, or security were removed or changed.

Structured Summary of Important Changes

1. Scope and document presentation

• The diff appears to replace a simple General Terms and Conditions page with extensive website navigation, marketing, product, and form content.
• The substantive PTC content is not shown as amended legal language. Instead, the page now presents separate PTC downloads for:
• EU & EEA customers
• US & Canada customers
• Customers in the rest of the world
• Risk: The applicable contractual terms may differ by customer location. Customers should confirm which regional PTC applies and review the downloaded document rather than relying on this webpage text.
• The diff contains substantial duplicated and apparently malformed content, including repeated navigation text, placeholder “word” strings, and technical-looking fragments. This creates uncertainty about whether the published page accurately displays the intended legal terms.

2. Expanded product and service descriptions

• The wording changes from a narrow description of the “Provision of Services” to broader descriptions involving:
• Data management
• Digital experiences and transformation
• Personalized omnichannel experiences
• Product information, customer data, and digital experience platforms
• New marketing language describes Pimcore as an “AI-enabled Platform.”
• Risk: Although largely promotional, these descriptions may broaden expectations about the functionality and scope of the services. They do not appear to create clear contractual commitments, service levels, or performance warranties.

3. Customer personal data and sharing

New or more prominent privacy language states that Pimcore will:

• Use personal data “solely to process” a request.
• Potentially share data with certified solution partners in the customer’s geographical region.
• Store and process information submitted through demo, guided-tour, and newsletter forms.
• Send marketing communications where the user selects or accepts the relevant option.

Risks:

• “Certified solution partners” are not identified in the diff, and the scope of sharing, partner roles, and geographic transfers are unclear.
• The language should be checked against the privacy policy for lawful basis, retention, international transfers, data-subject rights, and processor/controller allocation.
• Marketing consent appears separately from the request-processing language, but the exact consent mechanism and withdrawal process are not shown.

4. AI-model training

• No express change or clause was identified stating that customer data may be used to train, fine-tune, evaluate, or improve AI models.
• The phrase “most AI-enabled Platform” is promotional only and does not itself authorize AI training.
• The diff does not clarify whether:
• Customer content is used for model training;
• prompts, outputs, analytics, or usage data are retained;
• data is aggregated or anonymized before model use; or
• customers can opt out.
• Key risk: If AI functionality is provided under the services, the absence of an explicit training restriction or permission leaves uncertainty. Customers should request written confirmation that customer data and confidential information will not be used to train third-party or general-purpose AI models without consent.

5. Recommended follow-up

Obtain and compare the applicable regional PTC, privacy policy, DPA/data-processing terms, AI terms, and security terms. Clarify partner sharing, international transfers, retention, confidentiality, and any use of customer data for AI development or model training.

Summary

The provided diff states only that approximately 1,525 words were removed. It does not identify the deleted language or show any replacement text.

Key Legal Implications

Because the deleted provisions are not provided, it is not possible to determine with confidence whether the changes:

• Narrow or expand either party’s rights or obligations;
• Remove warranties, liability limits, indemnities, or termination rights;
• Change confidentiality, security, privacy, or data-retention requirements;
• Alter governing law, dispute resolution, or audit rights; or
• Affect ownership or licensing of customer data, content, or derivative works.

AI Training and Customer Data

No conclusion can be reached about changes to AI-model training from the information supplied. The deleted text may have included provisions addressing:

• Whether customer data or content may be used to train, fine-tune, test, or improve AI models;
• Whether such use requires customer consent or may occur automatically;
• Whether data is anonymized, aggregated, de-identified, or shared with third-party model providers;
• Whether customer data may be retained after termination for model-training purposes;
• Whether the customer may opt out of AI training or revoke permission; and
• Ownership of model outputs, embeddings, derived datasets, or other AI-generated materials.

If any of these protections were deleted, the customer could face increased risks involving unauthorized secondary use, loss of confidentiality, regulatory exposure, and difficulty requiring deletion of data incorporated into trained models.

Overall Assessment

The deletion of approximately 1,525 words is potentially material, but the available diff is insufficient for substantive legal analysis. The deleted provisions should be supplied in full, together with any replacement language, before approving the changes. Particular attention should be paid to any deleted language containing terms such as “train,” “improve,” “machine learning,” “artificial intelligence,” “model,” “customer data,” “content,” “aggregate,” “de-identify,” “retain,” “opt out,” or “service improvement.”

Structured Summary of Important Changes

1. Nature of the Change

The diff appears primarily to replace or contaminate the “General Terms and Conditions” page with extensive website navigation, marketing copy, product descriptions, and form content. It does not show a clear revision to substantive contractual clauses such as liability, payment, warranties, termination, intellectual property, confidentiality, or governing law.

Key concern: The actual PTC text is largely absent from the supplied diff. The revised page may make the governing terms harder to locate or download, even though it continues to refer to regional PTC documents.

2. Geographic Scope and Regional Terms

The page now refers to separate PTC documents for:

• EU and EEA customers;
• US and Canada customers; and
• Customers in the rest of the world.

This preserves or clarifies a regional-document structure, but the diff does not provide the documents themselves. Customers should confirm:

• Which regional terms apply;
• Whether the applicable version is clearly identified and dated;
• Whether conflicting website content could override or create ambiguity regarding the contractual terms; and
• Whether data-processing and transfer provisions differ by region.

3. Customer and Personal Data Uses

The new or surfaced form language states that Pimcore may:

• Store and process submitted personal information to provide requested content or demo access;
• Share data with “certified solution partners” in the customer’s geographical region for a localized experience;
• Use submitted information to send emails, including exclusive insights, tips, and updates, where the user selects the relevant option; and
• Collect extensive lead-generation data, including name, company, job function, business email, country, selected product interests, messages, and UTM tracking fields.

Risks

• Partner disclosure: Sharing with regional partners expands the categories of recipients and may involve additional controllers or processors and international transfers.
• Marketing consent: The marketing checkbox appears separate from the request for demo/content access, but the legal basis, withdrawal process, retention period, and consequences of refusal are not stated in the diff.
• Data minimization and retention: The diff does not explain how long form data or tracking information is retained or how it is deleted.
• Transparency: The language refers users to the Privacy Policy, so the actual obligations cannot be assessed without reviewing that policy.

4. AI-Training Use

The diff contains no express language authorizing Pimcore to use customer data, submitted personal information, demo data, prompts, outputs, or customer content to train, fine-tune, evaluate, or improve AI models.

References to an “AI-enabled Platform” are marketing language only and do not, by themselves, create a training right. However, the absence of an explicit prohibition means the Privacy Policy, PTC, data-processing agreement, and product-specific terms should be checked for broader rights to use customer content or service data.

5. Recommended Actions

• Obtain and compare the actual regional PTC documents.
• Confirm whether customer content is excluded from AI-model training.
• Review subprocessors, international-transfer, retention, and deletion provisions.
• Clarify whether partner sharing is optional and how consent can be withdrawn.

Structured Summary of Important Changes

1. Page purpose and structure

• The page has been substantially rewritten from general Pimcore marketing content into a dedicated “General Terms and Conditions” page.
• The revised page directs customers to region-specific PTC documents for:
• EU & EEA
• US & Canada
• Rest of World
• The revised wording states that customers should download the applicable document based on their geographic region and contact Pimcore with questions.
• The actual contractual terms are not included in the diff; they appear to be provided through downloadable documents. The legal effect therefore depends on the content and incorporation of those documents.

2. Geographic scope and contracting risk

• The revised page expressly distinguishes customers by geographic location. This may create different contractual regimes, rights, liabilities, and dispute-resolution provisions depending on the customer’s location.
• “Customers outside of EU, EEA, US & Canada” is broad and may require clarification for territories with separate data-protection or consumer laws.
• The page should clearly identify:
• Which version applies based on the customer’s legal entity, billing address, or service location;
• Whether the applicable PTC is incorporated into the contract;
• Which document version and effective date govern;
• Whether Pimcore may update the PTC and how notice is provided.

3. Customer and prospect data use

The revised page introduces or consolidates several statements concerning personal data submitted through demo, tour, and newsletter forms:

• Pimcore states it will use personal data “solely to process your request” for demo or tour requests.
• It also states that data “might” be shared with certified solution partners in the customer’s geographic region to provide a more localized experience.
• The revised forms request additional information, including company, job function, country, areas of interest, messages, and marketing-tracking fields such as UTM parameters.
• Separate optional wording asks users to consent to receive exclusive insights, expert tips, and updates.
• Newsletter wording states that Pimcore may store and process data to send emails.

Risk: “Solely” processing for the request may be difficult to reconcile with partner sharing, tracking fields, follow-up marketing, and newsletter communications. The privacy policy should clearly distinguish necessary processing from optional marketing, identify partners or partner categories, state the legal bases, explain international transfers, and provide withdrawal/objection mechanisms.

4. AI-model training

• No express provision was identified stating that customer, prospect, submitted form, demo, or usage data may be used to train, fine-tune, evaluate, or improve AI models.
• The revised marketing text refers to Pimcore as an “AI-enabled Platform,” but this is a product description and does not itself authorize training on customer data.
• The diff therefore shows no clear new AI-training permission or restriction.
• Nevertheless, the governing PTC, privacy policy, or product documentation should be reviewed for broader rights to use “usage data,” “content,” “feedback,” or “aggregated/de-identified data,” which could indirectly permit AI development or model training.

Structured Summary of Important Changes

1. No express AI-training provision identified

• The diff does not add language authorizing Pimcore to use customer data, submitted personal information, demo data, or customer content to train, fine-tune, improve, or evaluate AI models.
• References to an “AI-enabled Platform” are removed or replaced with general product/experience descriptions. This is a marketing change, not a contractual AI-data-use authorization.
• The diff therefore provides no clear new restriction or permission regarding AI training. The governing privacy policy, PTC, or service agreement should be reviewed separately for any AI-related terms not shown here.

2. Personal-data use for forms and demos is reframed

The prior wording generally stated that Pimcore would use personal data “solely to process your request.” The revised wording states that Pimcore may:

• Store and process submitted personal information to provide the requested content or demo;
• Share data with certified solution partners in the user’s geographical region for a better-localized experience;
• For newsletters, store and process data “to send you emails.”

Risk

This is potentially broader or at least less restrictive than “solely to process your request.” It may permit additional operational, marketing, or partner-related uses, depending on the Privacy Policy. The revised language should clearly identify:

• The legal basis for processing;
• Whether partner sharing is necessary or optional;
• Retention periods;
• International transfers;
• Opt-out and withdrawal mechanisms.

3. Partner sharing is made more prominent

The revised forms repeatedly state that personal data may be shared with certified solution partners in the user’s geographical region.

Risk

This creates third-party disclosure and potential controller/processor-allocation issues. The text does not specify:

• Which partners receive the data;
• Whether partners may independently market to the individual;
• The purposes and limits of partner use;
• Responsibility for partner compliance;
• Whether consent is required or separately collected.

4. Marketing consent is more explicit

The forms add or emphasize affirmative consent for:

• “Exclusive insights, expert tips, and updates from Pimcore”;
• Newsletter emails;
• Storing and processing personal information.

This is clearer than the earlier text, but the marketing consent appears embedded with the demo/content-request flow. Consent should be clearly separated where required, freely given, and not bundled with access to a requested demo.

5. Regional terms and documents change

The site adds or reorganizes PTC links for:

• EU/EEA;
• US and Canada;
• Rest of world (“RoW,” outside the EU, EEA, US, and Canada).

Risk

Customers may be directed to different contractual documents based on geography. The applicable regional terms, precedence rules, governing law, and version control should be verified.

6. Drafting and implementation concerns

The diff contains substantial duplicated, reordered, and corrupted navigation/form text, including template tokens and repeated placeholder words. This may cause:

• Ambiguous consent notices;
• Incorrect form labels;
• Broken links or disclosures;
• Inconsistent privacy language across pages.

A full production-content and consent-management review is advisable.

Summary of Changes

1. Deleted content after “TOMs”

The diff shows the following material being deleted after the references to:

• Imprint
• Privacy Policy
• General Terms & Conditions (PTC)
• TOMs (Technical and Organizational Measures)

The deleted text appears to be repeated, unintelligible placeholder or corrupted content rather than readable contractual language.

2. Legal and commercial impact

Because the deleted text is not intelligible, it is not possible to determine whether it contained:

• Substantive contractual terms;
• Links or references to the Privacy Policy, PTC, or TOMs;
• Data-processing or security obligations;
• Liability, warranty, or termination provisions; or
• Notices concerning customer rights or provider permissions.

If the deletion merely removes corrupted or accidental text, it may have no substantive legal effect. However, if this material represented embedded links, referenced documents, or part of a longer provision, its removal could create uncertainty about which contractual documents apply and how they are incorporated.

3. Customer data and AI-model training

No readable addition or deletion expressly addresses:

• Whether customer data may be used to train, fine-tune, or improve AI models;
• Whether prompts, inputs, outputs, personal data, or usage data are retained for model training;
• Whether training use is automatic or requires consent or an opt-out;
• Whether data is anonymized or aggregated before training; or
• Whether customer data is shared with model providers or other subprocessors.

Accordingly, this diff does not show any identifiable change to AI-training rights or restrictions. The underlying full versions should nevertheless be compared, particularly the Privacy Policy, PTC, and TOMs, because the deleted material may have been a reference or link to one of those documents.

4. Recommended follow-up

Obtain the clean “before” and “after” versions and verify:

1. Whether any contractual text or hyperlinks were removed;

2. Which Privacy Policy, PTC, and TOMs version is incorporated;

3. Whether AI-training provisions exist elsewhere in those documents; and

4. Whether the deletion affects data-use permissions, security commitments, or customer remedies.

Bottom line: The provided diff contains no discernible substantive amendment, but it is insufficient to confirm that no legal or AI-data-use terms were removed.

Summary

The supplied diff only states:

> “Added approximately 1,588 words to the document”

It does not include the actual added, deleted, or replaced legal language. As a result, the substantive changes and associated risks cannot be analyzed reliably.

Key Findings

Customer Data and AI Training

• No contract language addressing customer data, AI training, machine learning, model improvement, or related uses was provided.
• It is therefore impossible to determine whether the revised document:
• Permits the provider to use customer data to train or fine-tune AI models;
• Uses customer data only in de-identified, aggregated, or anonymized form;
• Includes customer prompts, outputs, personal information, confidential information, or usage metadata in training datasets;
• Allows human review or third-party access to customer data;
• Applies opt-out, consent, or deletion mechanisms;
• Retains trained models or derived information after termination; or
• Restricts use of customer data to providing the contracted services.

Other Legal Changes

No conclusions can be drawn regarding changes to:

• Data ownership or licensing rights;
• Confidentiality obligations;
• Security and privacy protections;
• Data retention and deletion;
• Subprocessors or third-party service providers;
• Indemnities and liability limitations;
• Compliance obligations;
• Audit rights; or
• Termination consequences.

Risk Assessment

The fact that approximately 1,588 words were added indicates potentially material changes, but the nature and risk level of those changes cannot be assessed without the actual text. Any assumption about expanded data-use rights or AI-training permissions would be speculative.

Information Needed

Please provide the full redline or the actual inserted, deleted, and replacement language. The analysis should focus particularly on provisions containing terms such as:

• “train,” “training,” “fine-tune,” “improve,” or “develop”;
• “models,” “machine learning,” “artificial intelligence,” or “generative AI”;
• “customer data,” “content,” “inputs,” “outputs,” or “usage data”;
• “aggregated,” “de-identified,” or “anonymized”;
• “service improvement” or “product improvement”; and
• “license,” “retain,” “process,” or “use.”

Without that language, no reliable legal comparison is possible.

Structured Summary of Important Changes

1. General Terms and Conditions (PTC) presentation

• The page changes from general marketing/navigation content to a dedicated “General Terms and Conditions” page.
• It now directs customers to download the applicable PTC based on geographic region:
• EU & EEA
• US & Canada
• Customers outside the EU, EEA, US and Canada
• Risk: The actual contractual terms are not included in the diff. Customers may therefore be bound by different regional terms, but the diff does not show:
• Which regional version applies;
• Whether the terms are incorporated into an agreement;
• Effective dates or version control;
• Priority between the PTC, order forms, service-specific terms, and other documents.
• The geographic categorization should be checked for consistency, particularly for customers with operations, users, or data in multiple regions.

2. Marketing and demo content

The page adds or revises extensive calls to action for:

• Self-guided demos with “pre-filled data”;
• Guided product tours;
• Contact and demo requests;
• Newsletter subscriptions;
• Requests for product and industry information.

The language changes from broad marketing claims to more specific descriptions of Pimcore products and modules, including PIM, DAM, MDM, CDP, DXP, and digital commerce services.

Risk: References to “pre-filled data” should be clarified to confirm whether the data is synthetic, anonymized, or sourced from customers. If real personal or confidential data is used, additional privacy, confidentiality, and security concerns arise.

3. Personal-data processing and sharing

The updated forms state that Pimcore will:

• Use personal data “solely to process your request” or to provide requested content;
• Potentially share data with certified solution partners in the customer’s geographical region for a better-localized experience;
• Process data for newsletters, exclusive insights, expert tips, and updates where the user selects or accepts that option;
• Store and process submitted information subject to the Privacy Policy.

New or increased risks:

• “Certified solution partners” is not defined, and the scope, identity, location, and role of those partners are not explained.
• The sharing language may require a clear legal basis, appropriate disclosures, and—depending on jurisdiction—specific consent.
• The distinction between processing a request and marketing communications should remain clear and separately optional.
• The forms collect business and potentially profiling-related information, including company, job function, country, product interests, message content, and UTM tracking fields. Retention and use of these fields should be addressed in the Privacy Policy.

4. AI-model training

• No express change or new provision concerning the use of customer data to train, fine-tune, evaluate, or improve AI models appears in the diff.
• The page refers to Pimcore as “AI-enabled,” but this is product marketing language and does not authorize AI training or explain how customer data is handled by AI systems.
• The mention of demo instances with pre-filled data should nevertheless be reviewed to ensure that no customer data is used for demonstrations or model training without explicit contractual authorization.

5. Drafting and implementation concerns

• The diff contains substantial duplicated, corrupted, and concatenated website text.
• Before publication, Pimcore should verify that the final page contains only the intended legal notices and links, with no accidental legacy marketing text or placeholder content.

Summary

The provided diff does not include the actual amended contract language. It only states:

> “Added approximately 1588 words to the document”

Because the added text is not provided, it is not possible to reliably identify:

• Changes to the parties’ rights or obligations
• New fees, warranties, indemnities, liability limits, or termination rights
• Changes to confidentiality, security, privacy, or data-retention obligations
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Whether such use is subject to consent, opt-out rights, anonymization, aggregation, or other restrictions
• Whether the provider may share customer data with affiliates, contractors, or AI/model providers
• Whether customer content may be used to create derivatives, analytics, or product improvements
• Any new compliance obligations or material legal risks

AI Training/Data-Use Review

No conclusion can be reached regarding AI-model training because the relevant contractual language is absent. The statement that approximately 1,588 words were added does not indicate whether customer data can be used for:

1. Training or fine-tuning generative AI models

2. Testing, evaluating, or improving AI systems

3. Human review or annotation

4. Creating aggregated, de-identified, or derived data

5. Sharing with third-party model or cloud providers

6. Retention after termination or deletion from active systems

Required Information

Please provide the complete redlined text, including the words shown as:

• {additions}
• [deletions]
• []{replacements}

The analysis should also include any incorporated policies, data-processing addenda, product terms, or acceptable-use policies referenced by the new language, because AI-training permissions are often located in those documents rather than the main agreement.

Summary

The diff only states that approximately 217 words were removed, without identifying the deleted language.

Key legal implications

• Unable to assess specific changes: Because the deleted text is not provided, it is not possible to determine which rights, obligations, limitations, or protections were removed.
• Potential risk from deletions: Removing language could:
• Eliminate customer protections or service commitments.
• Change liability, indemnity, confidentiality, or termination rights.
• Remove restrictions on the provider’s use or disclosure of data.
• Narrow definitions or procedural safeguards.
• Remove disclosures required for compliance or informed consent.

Customer data and AI training

The supplied diff contains no text addressing AI, machine learning, model training, data use, data retention, or data sharing. Accordingly, it is not possible to determine whether the revised document:

• Permits or prohibits using customer data to train AI models.
• Limits training to aggregated, de-identified, or anonymized data.
• Requires customer consent or provides an opt-out.
• Allows human review or labeling of customer data.
• Permits use of prompts, inputs, outputs, metadata, or derived data for training.
• Imposes deletion, retention, security, or confidentiality obligations relating to training data.

Required for a complete review

Please provide the actual deleted language, preferably with the surrounding unchanged provisions. Without it, the principal conclusion is that the deletion creates unknown legal and data-use risk, including a potentially material but unconfirmable change to AI-training rights.

Summary of Important Changes

1. General Terms and Conditions page replaces marketing content

• The page has been substantially repurposed from general Pimcore marketing/navigation content into a General Terms and Conditions (PTC) landing page.
• It now directs customers to region-specific terms for:
• EU and EEA
• US and Canada
• Customers outside those regions
• The applicable contractual terms are not included directly in the page; customers must download the relevant document.

Risk: The page does not state which regional terms apply based on the customer’s location, contracting entity, or order form. Customers should verify that the correct PTC version is incorporated into the contract and that the downloadable document is version-controlled and available at the time of contracting.

2. New or expanded lead-generation and demo forms

The revised content introduces forms for:

• Self-guided demo access
• Free guided product tours
• Requests for information
• Newsletter subscriptions

The forms collect personal and business information, including names, company, job function, business email, country, product interests, messages, and marketing-tracking fields such as UTM parameters.

3. Personal-data processing and sharing disclosures

New disclosures state that Pimcore will:

• Use personal data to process the user’s request
• Potentially share data with certified solution partners in the user’s geographical region for a more localized experience
• Store and process submitted information to provide requested content
• Send emails where the user agrees to receive exclusive insights, tips, and updates
• Process newsletter subscriber data to send emails

Risks:

• “Certified solution partners” is not defined, and the disclosure does not identify the partners, purposes, legal bases, retention periods, or international-transfer safeguards.
• The wording may not clearly distinguish necessary request handling from optional marketing consent.
• The marketing checkbox language and submission consent should be reviewed for compliance with applicable consent, transparency, and withdrawal requirements.
• The privacy policy is incorporated by reference, so its current wording should be reviewed alongside these changes.

4. AI-model training

No express change concerning the use of customer data to train AI models was identified in the supplied diff.

The revised content refers to Pimcore being “AI-enabled,” but it does not state that customer data, submitted form data, demo data, or customer content:

• May be used to train, fine-tune, or improve AI models;
• Will not be used for such training;
• May be shared with AI providers; or
• Will be anonymized or aggregated before use.

Risk: The absence of an AI-training provision leaves the issue unresolved. If the underlying PTC, privacy policy, product terms, or AI terms address model training, those documents should be checked for consistency and clearly linked or incorporated.

5. Possible drafting and implementation issues

• The diff contains extensive duplicated and apparently malformed content, including placeholder text such as repeated “word” entries and unintelligible strings.
• Several navigation and marketing phrases appear to have been unintentionally concatenated with legal or privacy text.

Risk: These defects could create ambiguity about the operative terms, undermine customer comprehension, or result in inaccurate disclosures if published. A clean legal and technical review is recommended before deployment.

Structured Diff Summary

Overall assessment

The diff does not appear to compare two versions of contractual terms. Instead, it largely replaces the General Terms and Conditions page with scraped or rendered website navigation, marketing copy, demo forms, footer content, and placeholder text such as “word.” The actual PTC provisions are not included in a usable form.

Accordingly, no reliable conclusions can be drawn about changes to substantive legal rights, obligations, liability, fees, termination, confidentiality, security, or governing law.

Important apparent changes

1. Contract document access and regional versions

The page now refers to separate PTC documents for:

• The EU and EEA;
• The US and Canada; and
• The rest of the world.

This may affect which contractual version applies to a customer. The diff does not show the underlying documents or explain how the applicable region is determined. Customers should verify that the linked regional PTC is the intended and current version.

2. Customer and prospect data collection

The replacement content adds or displays forms requesting information including:

• Name;
• Company;
• Job function;
• Business email;
• Country;
• Product interests;
• Messages; and
• UTM or marketing attribution data.

The forms state that Pimcore may store and process submitted personal information to provide requested content or demo access. They also include optional marketing language concerning “exclusive insights, expert tips, and updates.”

3. Sharing with solution partners

The new text states that, for a better localized experience, Pimcore “might share” submitted data with certified solution partners in the customer’s geographical region. This is a potentially important privacy change or disclosure, particularly if it was not previously stated. The scope, purposes, recipients, legal basis, retention period, and international-transfer safeguards are not provided in the diff and must be checked against the Privacy Policy.

4. AI model training

No provision expressly states that customer data, personal data, prompts, uploaded content, or service data may be used to:

• Train Pimcore’s AI models;
• Train third-party AI models;
• Improve or fine-tune models;
• Create datasets; or
• Retain data for AI development.

The phrase “most AI-enabled Platform” appears to be marketing language only. It does not itself create a clear contractual authorization to use customer data for AI training. However, because the underlying PTC and privacy terms are missing, the diff cannot confirm that no such authorization exists elsewhere.

Key risks and recommended review

• Treat this diff as unreliable for contract comparison.
• Obtain the actual prior and current PTC documents, including all incorporated policies, data-processing terms, and AI terms.
• Confirm whether customer content is used for model training, whether opt-out rights exist, and whether providers or subprocessors may use it.
• Review the Privacy Policy for partner sharing, marketing consent, international transfers, and retention.

Executive Summary

The diff primarily replaces website navigation and marketing copy with a dedicated General Terms and Conditions (PTC) page and region-specific download links. It does not appear to amend the substantive PTC itself. The main legal implications concern privacy disclosures, marketing consent, and possible sharing of personal data with regional partners.

Important Changes

1. Region-specific terms are now presented

The page now directs customers to separate PTC documents based on location:

• EU and EEA
• United States and Canada
• Rest of the world

Risk: The applicable contractual terms may differ by geography. Customers should confirm which document governs, how location is determined, and whether the correct regional version is incorporated into the contract or order form.

2. Personal-data processing language is more explicit

New or revised language states that Pimcore will:

• Use personal data “solely to process your request”; and
• Store and process submitted information to provide the requested content, demo, or tour.

This is a narrower and more purpose-specific statement than the surrounding marketing copy, but it is qualified by separate disclosures allowing additional activities.

3. Sharing with certified solution partners

The revised forms state that Pimcore “might share your data with certified solution partners in your geographical region” to provide a better-localized experience.

Risk: This introduces or emphasizes disclosure to third parties. The wording does not specify:

• Which data will be shared;
• The identities or categories of partners;
• Whether partners may contact the individual directly;
• The legal basis for sharing;
• International-transfer safeguards; or
• How long partners may retain the data.

The privacy policy should be reviewed to determine whether it supplies these details and whether additional consent is required.

4. Marketing communications remain separately addressed

Forms continue to include an optional statement requesting:

> “exclusive insights, expert tips, and updates from Pimcore.”

The newsletter form also states that submission authorizes Pimcore to store and process data to send emails.

Risk: The user should be able to distinguish clearly between consent required to fulfill a request and optional consent for marketing. Any preselected checkbox or bundled consent could create compliance concerns, particularly under EU/EEA rules.

AI Training and Model Use

No express change was identified concerning:

• Training AI or machine-learning models;
• Using customer or submitted data to improve AI systems;
• Sharing data with AI providers for model training; or
• Opt-out, deletion, or restriction rights relating to AI training.

References to Pimcore being “AI-enabled” and an enterprise AI event are marketing statements only and do not establish permission to use customer data for AI training. The underlying PTC and Privacy Policy should nevertheless be checked for broad “service improvement,” “analytics,” or “de-identified data” rights that could indirectly permit model training.

Other Observations

The diff contains extensive duplicated and apparently corrupted webpage text. This could create uncertainty about which notice, consent language, or PTC link is actually displayed to users. A clean, controlled version should be published and preserved for compliance records.

Summary of Important Changes and Risks

1. Cookie and tracking disclosures have been materially revised

The diff changes or expands descriptions of numerous cookies and local-storage technologies, including those operated by:

• HubSpot
• YouTube/Google
• Hotjar
• Mixpanel
• Microsoft
• LinkedIn
• Twitter/X
• Vimeo
• Capterra, G2, and other third parties
• Pimcore and related domains

The revised purposes include distinguishing humans from bots, recognizing returning browsers, tracking sessions and embedded-content interactions, measuring visits, presenting targeted advertising, and storing language and consent preferences.

Legal risks

• Broader tracking scope: References to targeted advertising, visitor recognition, session tracking, and embedded-content monitoring may require specific consent, particularly under the GDPR/ePrivacy rules, UK PECR, and similar laws.
• Inaccurate or incomplete disclosures: Several entries are marked “Pending,” and some purposes appear generic or inconsistent with the stated technology or storage duration. Cookie notices must accurately identify the provider, purpose, duration, and technology used.
• Third-party sharing: The number of third-party providers suggests potential disclosures or transfers of personal data that may require appropriate contractual terms, transparency, and—where applicable—international-transfer safeguards.
• Consent-record issues: CookieConsent is described as storing the user’s consent state. The business should ensure that consent is freely given, specific, informed, withdrawable, and properly logged.

2. Changes to data use for AI-model training

No express provision concerning AI, machine learning, model training, model improvement, or use of customer data to train AI models appears in the supplied diff.

Accordingly, the diff does not appear to grant or remove an explicit right to use customer data for AI training. However, the revised tracking descriptions may expand the collection of behavioral and interaction data. If that data is later used to train or improve AI systems, the organization should address that use expressly in the privacy notice, customer contract, and—where relevant—consent mechanism.

Important questions not answered by this diff include:

• Whether customer content or telemetry is used to train models;
• Whether data is anonymized, aggregated, or pseudonymized;
• Whether third-party vendors may use the data for their own model training;
• Whether customers can opt out or require deletion from training datasets; and
• Whether confidential, personal, or regulated data is excluded.

3. Apparent content-injection or document-integrity issue

A very large block of repeated “word” text and an apparent encoded/random string has been added. This does not appear to be a legitimate legal or cookie-policy amendment.

Risk

It may indicate accidental corruption, unauthorized content injection, or a security/testing artifact. The document should be checked against the approved source, version history, and publishing system before release.

Summary

The provided diff does not include the actual added contract language. It only states:

> “Added approximately 1605 words to the document”

Accordingly, it is not possible to reliably identify:

• Changes to the parties’ rights or obligations
• New fees, liability provisions, warranties, or termination rights
• Changes to confidentiality, security, or data-processing terms
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Whether such use is subject to consent, opt-out rights, anonymization, aggregation, or restrictions
• Whether the provider may share customer data with affiliates, vendors, or model-development partners
• Ownership or licensing changes concerning customer data, inputs, outputs, or derived data

AI Training and Data-Use Review

No conclusion can be reached regarding AI-model training because the substantive additions are missing. The added language should be reviewed specifically for terms such as:

• “Train,” “fine-tune,” “develop,” “improve,” or “evaluate” models or services
• Use of customer content, prompts, inputs, outputs, telemetry, or usage data
• Whether data is used for general commercial model training or only to provide the contracted services
• Consent or opt-out mechanisms, including whether opt-out applies prospectively only
• De-identification, anonymization, aggregation, or re-identification rights
• Retention periods and deletion obligations
• Disclosure to subprocessors, affiliates, or third-party AI providers
• Customer ownership and provider licenses over data and model outputs
• Security commitments and responsibility for confidential or regulated information

Risk Assessment

The only observable change is a substantial addition of approximately 1,605 words. That size alone suggests potentially material changes, but it does not establish whether the changes are favorable or unfavorable. The full redlined text or the newly added clauses are required for a meaningful legal analysis.

Recommendation: Provide the actual added language, preferably with the surrounding existing provisions, before accepting the amendment.

Structured Summary of Important Changes

1. General Terms and Conditions (PTC) Page Reorganized

• The page has been changed from general marketing/navigation content to a dedicated “General Terms and Conditions” page.
• It now directs users to download the applicable Pimcore General Terms and Conditions based on geographic location:
• EU & EEA
• US & Canada
• Rest of World / customers outside the EU, EEA, US, and Canada
• The actual contractual terms are not included in the diff; the page appears to function primarily as a regional document-selection and download page.

Legal significance

• The regional categorization may determine which contractual version applies to a customer.
• Customers should verify that:
• The correct regional document is provided before contracting;
• The applicable version is clearly incorporated into the agreement;
• There are no inconsistencies between the regional PTC versions;
• The download links and document versions are dated or otherwise version-controlled.
• “Customers outside of EU, EEA, US & Canada” is a broad residual category and may create uncertainty regarding applicable terms and law.

2. Changes to Marketing and Demo Forms

The page adds or revises several calls to action and forms for:

• Self-guided demos;
• Guided product tours;
• Newsletter subscriptions;
• Requests for information;
• Collection of first name, last name, company, job function, business email, country, product interests, messages, and marketing attribution data.

The language states that Pimcore may:

• Store and process submitted personal data to provide the requested content or service;
• Share data with certified solution partners in the user’s geographic region for a localized experience;
• Send marketing emails where the user selects or accepts the relevant option.

Legal significance and risks

• Sharing data with regional solution partners is permissive (“might share”) and does not identify the partners, specific purposes, legal bases, or applicable safeguards.
• Marketing consent language appears alongside service-request language. These should be clearly separated to avoid treating consent to receive a demo or content as consent to marketing.
• The forms collect substantial business and tracking information, including UTM fields. The privacy notice should explain retention, profiling, tracking technologies, and international transfers.
• “Certified solution partners” may act as independent controllers or processors; the allocation of responsibilities should be clear.

3. AI Model Training and Customer Data

• No express change was identified concerning the use of customer data to train, fine-tune, evaluate, or improve AI models.
• The diff contains general references to Pimcore being “AI-enabled,” but these are product-marketing statements and do not create an express contractual right to use customer data for AI training.
• The revised text concerning submitted personal data refers to processing requests, localization, marketing, and sharing with partners—not AI training.

Recommended verification

The underlying regional PTCs, privacy policy, data-processing agreement, and product-specific terms should be reviewed separately for clauses addressing:

• Customer Content and usage rights;
• Service improvement and analytics;
• AI providers or subprocessors;
• Model training or fine-tuning;
• Opt-out rights;
• Deletion and retention;
• Use of de-identified or aggregated data.

Summary

The diff states only that approximately 200 words were removed from the document. The actual deleted language is not provided.

Legal and Commercial Impact

Because the specific deletions are unavailable, it is not possible to determine:

• Which rights, obligations, or protections were removed.
• Whether liability, indemnity, confidentiality, security, or termination terms changed.
• Whether the deletion narrows or expands either party’s contractual rights.
• Whether any pricing, service-level, data-processing, or compliance provisions were affected.
• Whether the removed language created customer protections that no longer apply.

AI Training and Customer Data

The available diff does not identify any change concerning the use of customer data to train, improve, evaluate, or fine-tune artificial-intelligence models.

In particular, it is not possible to determine whether the deleted text:

• Prohibited or restricted using customer data for AI training.
• Required customer consent before AI training.
• Allowed the provider to use customer content, prompts, inputs, outputs, telemetry, or usage data.
• Distinguished between personal data, confidential information, and de-identified or aggregated data.
• Required deletion, anonymization, or segregation of customer data from training datasets.
• Applied opt-out, retention, confidentiality, or security protections to AI-related processing.

Risk Assessment

The deletion itself may create material risk if it removed customer safeguards, especially restrictions on secondary use of data or AI training. However, the direction and severity of the risk cannot be assessed without the deleted wording.

Required Information

To perform a reliable legal comparison, provide either:

1. The approximately 200 deleted words; or

2. The complete before-and-after versions of the relevant provision.

Without that text, no definitive conclusion can be reached regarding AI training or other substantive contractual changes.

Summary

The provided diff only states:

> “Added approximately 1605 words to the document”

It does not include the actual added, deleted, or replaced legal language. As a result, it is not possible to reliably identify:

• Changes to the customer’s rights or obligations
• New fees, liabilities, warranties, indemnities, or termination rights
• Changes to confidentiality, security, or data-processing provisions
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Whether data may be shared with affiliates, vendors, or third parties
• Whether the customer can opt out of AI training or request deletion of data
• Any changes to ownership or licensing of customer data, inputs, outputs, or derived data

AI-Training Review

No conclusion can be reached about AI-model training because the relevant contract language was not provided. The added text should be reviewed for terms such as:

• “train,” “fine-tune,” “improve,” “develop,” or “evaluate” models
• “inputs,” “content,” “customer data,” “prompts,” or “outputs”
• Rights to use data in “de-identified,” “aggregated,” or “anonymized” form
• Permission to share data with service providers or model providers
• Opt-out, deletion, retention, or data-isolation commitments
• Ownership or licensing rights covering data or model improvements

Required Information

Please provide the full redline or the actual text of the approximately 1,605 added words, using the stated notation:

• Additions: {text}
• Deletions: [text]
• Replacements: [old text]{new text}

Without the underlying text, any legal-risk analysis would be speculative.

Structured Summary of Important Changes

1. General Terms and Conditions (PTC)

• The page has been transformed from general marketing/navigation content into a dedicated “Pimcore General Terms and Conditions” page.
• The page now directs customers to download the applicable PTC based on geographic region:
• EU & EEA
• US & Canada
• Customers outside those regions (“RoW”)
• The terms are expressly described as applying to the provision of services by Pimcore to customers.

Legal significance and risks

• Regional contracting risk: Different regional PTC versions may contain materially different governing-law, liability, data-processing, dispute-resolution, or service terms. Customers should confirm which version applies before contracting.
• Incorporation risk: The diff does not state whether the downloadable PTC is automatically incorporated into an agreement, which version controls, or how updates are notified. These points should be checked in the linked documents.
• Scope ambiguity: “Customers outside of EU, EEA, US & Canada” is broad and should be reviewed for country-specific compliance and enforceability.

2. Personal Data Collection and Use

The revised page adds or clarifies several lead-generation and demo-request practices:

• Pimcore states that personal data will be used “solely to process your request.”
• It also states that data may be shared with certified solution partners in the customer’s geographical region for a more localized experience.
• Users are directed to the Privacy Policy for further information.
• Forms collect additional information, including:
• Name
• Company
• Job function
• Business email
• Country
• Product interests
• Free-text messages
• UTM/source and campaign tracking fields
• Forms include an optional marketing statement allowing Pimcore to send exclusive insights, expert tips, and updates.
• Newsletter registration states that submitting an email permits Pimcore to store and process data to send emails.

Legal significance and risks

• Purpose limitation concern: “Solely to process your request” may conflict with partner sharing, marketing communications, tracking, or other processing unless separately explained and consented to.
• Partner-sharing risk: Sharing with regional solution partners creates additional controller/processor, transparency, international-transfer, and marketing-consent issues.
• Consent clarity: Marketing consent appears alongside request forms and should be genuinely optional, unbundled, and supported by appropriate withdrawal mechanisms.
• Data minimization: Collection of job function, product interests, free-text messages, and tracking identifiers should be justified and covered by the privacy notice.

3. AI Model Training

• No express change was identified concerning the use of customer or personal data to train AI models.
• The diff adds marketing language referring to Pimcore as “AI-enabled” and includes an AI-focused event banner, but it does not state that customer data, submitted form data, demo data, or product data may be used to train, fine-tune, evaluate, or improve AI models.
• The revised language should not be interpreted as granting Pimcore an AI-training license. However, the linked PTC, privacy policy, and any data-processing terms should be reviewed for such provisions.

Executive Summary

The diff appears to be a comparison of a Pimcore webpage before and after a major website redesign, not a reliable redline of the underlying General Terms & Conditions. The prior text referring to the PTC has largely been replaced by website navigation, marketing, product descriptions, forms, and privacy notices. The actual contractual provisions are not included.

Accordingly, no definitive change to contractual rights, obligations, liability, data processing, or AI-training permissions can be confirmed from this diff.

Important Changes and Risks

1. The contractual document has effectively been replaced by webpage content

• References to the “General Terms and Conditions” and regional PTC documents remain, but are surrounded by extensive navigation and marketing text.
• The updated page directs users to separate PTC documents for:
• EU and EEA customers;
• US and Canadian customers; and
• customers in the rest of the world.
• The actual downloadable documents and their governing terms are not shown.

Risk: A customer could have difficulty determining which terms apply, whether the linked documents are incorporated into a contract, and whether the documents have changed without clear version dates or effective dates.

2. Regional contracting structure is emphasized

The revised content expressly distinguishes customers by geographic region and provides separate PTC downloads.

Risk: Different regional terms may contain materially different provisions concerning governing law, dispute resolution, data protection, service levels, liability, and data location. The applicable region should be confirmed before acceptance.

3. Customer and prospect data-sharing language is expanded or made more visible

The updated webpage states that Pimcore may:

• use submitted personal data to process a request;
• share data with certified solution partners in the customer’s geographical region; and
• use data for newsletters, exclusive insights, expert tips, and updates where the user selects the relevant option.

It also includes consent language authorizing Pimcore to store and process submitted information to provide requested content.

Risk: This is marketing/privacy language, not necessarily part of the PTC. Customers should verify the privacy policy, legal basis, partner categories, international-transfer arrangements, retention periods, and opt-out rights.

4. No express AI-model training authorization is visible

The diff contains references to an “AI-enabled Platform” and an enterprise AI webinar, but it does not state that customer data will be:

• used to train, fine-tune, or improve AI models;
• shared with AI providers for model training;
• anonymized or aggregated for training; or
• excluded from training by default.

Conclusion: No specific change concerning use of customer data to train AI models can be identified from the supplied diff. However, because the actual PTC, privacy policy, and any AI/data-processing terms are absent, the diff does not establish that such use is prohibited.

Recommended Follow-Up

Obtain and compare the actual regional PTC documents, privacy policy, data-processing agreement, and any AI terms. Confirm expressly that customer content, personal data, prompts, outputs, and usage data will not be used to train general-purpose AI models without written authorization.

Summary of Changes

Nature of the Change

• The diff indicates that approximately 1,605 words were removed from the document.
• No replacement language or details of the deleted provisions were provided.
• Because the actual deleted text is unavailable, it is not possible to determine precisely which rights, obligations, limitations, or protections changed.

Potential Legal Significance

Removing a substantial portion of a contract may affect important provisions, including:

• Data ownership and permitted uses
• Confidentiality and privacy obligations
• Intellectual-property rights
• Warranties and disclaimers
• Liability limitations and indemnities
• Security and breach-notification requirements
• Termination and post-termination obligations
• Audit, compliance, or regulatory provisions
• Dispute resolution and governing law

The deletion could either reduce the customer’s obligations or remove protections that previously benefited the customer. Its effect cannot be assessed without the deleted language and the surrounding provisions.

AI Training and Customer Data

• The provided diff contains no identifiable language concerning AI, machine learning, model training, model improvement, or use of customer data.
• It is therefore impossible to determine whether the changes:
• Permit or restrict training AI models using customer data;
• Permit use of customer data to improve products or services;
• Allow retention of prompts, outputs, usage data, or derived data;
• Apply de-identification, aggregation, or anonymization requirements;
• Give the customer an opt-out or require consent; or
• Allocate ownership of models, training data, or model outputs.

Risk Assessment

Assessment: Unable to determine from the supplied diff.

The absence of the deleted text is itself a review limitation. A reliable legal analysis requires:

1. The complete text of the provisions removed;

2. The current contract text surrounding those provisions; and

3. Any replacement or cross-referenced terms.

The deleted language should be reviewed specifically for clauses authorizing the provider to use customer content, prompts, outputs, metadata, or other customer data for training, fine-tuning, evaluation, or improvement of AI models.

Summary

The provided diff does not include the actual added legal language. It only states:

> “Added approximately 200 words to the document”

Accordingly, no substantive contractual changes can be analyzed.

AI Training and Data Use

• The diff does not identify whether customer data may be used to:
• Train, fine-tune, or improve artificial intelligence or machine-learning models;
• Create generalized models, datasets, or benchmarks;
• Share data with AI providers, subprocessors, or affiliates;
• Use customer prompts, outputs, content, or usage data for product development;
• Retain data for model-training purposes after termination; or
• Exclude customer data from training through an opt-out mechanism.

Risk Assessment

No new legal risks can be determined from the information provided. The approximately 200-word addition could materially affect issues such as:

• Ownership and licensing of customer data;
• Confidentiality and permitted-use restrictions;
• Privacy and regulatory compliance;
• Data retention and deletion;
• Subprocessor access;
• Intellectual-property rights in outputs or trained models; and
• Customer control over AI training.

Please provide the actual 200-word addition, with the deletion and replacement markup intact, for a meaningful contract-risk analysis.