Pimcore

Summary

The provided diff does not include the actual amended contract language. It only states:

> “Added approximately 463 words to the document”

Without the text of those additions, it is not possible to reliably identify:

• Changes to customer data rights or ownership
• New permissions to access, process, disclose, or retain customer data
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Whether such use is limited to de-identified, aggregated, or anonymized data
• Whether customer consent is required or can be withdrawn
• Any opt-out, deletion, confidentiality, security, or data-retention obligations
• Changes to liability, indemnification, compliance, or audit rights

AI Training Risk

No conclusion can be reached about AI-model training because the relevant contractual language is missing. The added text should be reviewed specifically for terms such as:

• “train,” “fine-tune,” “develop,” “improve,” or “optimize” models
• “machine learning,” “artificial intelligence,” or “generative AI”
• “customer data,” “content,” “inputs,” “outputs,” or “usage data”
• “de-identified,” “aggregated,” or “anonymized”
• Rights that are “perpetual,” “irrevocable,” “worldwide,” “royalty-free,” or transferable
• Permission to use data after termination or for other customers
• Opt-out or consent mechanisms

Needed Information

Please provide the actual 463 words added to the document, including any surrounding provisions needed to understand defined terms and cross-references. Once provided, the changes can be analyzed for legal effect, customer-data protections, and AI-training risks.

Summary of Important Changes

1. Change from newsletter subscription to product-demo promotion

The original call to action:

• “Subscribe to our newsletter”

has been replaced with language promoting product demonstrations, including:

• “Get a demo fitting your requirements”
• “Book a free guided tour with an expert”
• “Explore on your own”
• “Most popular Free Guided Product Tour”
• “Try Pimcore Yourself”
• “Receive direct access to a demo with pre-filled data across various modules”

2. New customer-facing offerings and claims

The revised text introduces two distinct options:

1. Free Guided Product Tour

• Described as an expert-guided experience.
• Includes the marketing claim that users can experience “how Pimcore can propel your business forward.”

2. Self-service demo

• Provides access to a demo environment containing “pre-filled data across various modules.”

These statements may create commercial or customer-expectation risks if the guided tour, expert availability, demo access, or pre-filled content is not consistently provided. The phrase “Most popular” is also a factual marketing claim that should be supportable.

3. Potential data and privacy implications

The revised text no longer expressly requests a newsletter subscription. Accordingly, it appears to remove or reduce the direct implication that a visitor’s contact information will be used for ongoing newsletter marketing.

However, the new demo-related calls to action may still involve collecting personal information, such as a name, email address, company details, or other qualification data. The text does not explain:

• What information will be collected;
• How it will be used;
• Whether it will be shared with sales or service providers;
• Whether users will receive follow-up marketing;
• How long the information will be retained; or
• Whether consent is required for marketing communications.

These matters should be addressed in the relevant form, privacy notice, and consent language.

4. AI-model training

No provision in the supplied diff expressly addresses:

• Use of customer data to train AI models;
• Use of demo data for model development;
• Automated analysis or profiling; or
• Restrictions on using customer-provided content.

The reference to “pre-filled data” does not, by itself, authorize AI training or other secondary use. If demo users may upload or enter their own data, the surrounding terms should clearly state whether that data is isolated, retained, reviewed, used for analytics, or used to train or improve AI systems.

5. Drafting/formatting issue

The diff appears to combine navigation labels, marketing copy, and calls to action in one replacement. The final published text should be checked to ensure that deleted newsletter language is not accidentally displayed alongside the new demo language.

Structured Summary of Important Changes

1. Cookie and Tracking Information

The diff substantially changes or expands the cookie inventory and related descriptions. It adds or restores information concerning:

• Cloudflare (__cf_bm): Bot detection and differentiation between humans and bots.
• Cookie consent (CookieConsent): Storage of the user’s consent state, including persistent local storage and a stated duration of one year.
• HubSpot cookies (cookietest, __hssc, __hssrc, __hstc, hubspotutk): Browser recognition, session identification, visitor re-entry, interaction tracking, and analytics.
• Language preference (lang): Retention of the user’s selected language for one year.
• Marketing and analytics providers: HubSpot, LinkedIn, YouTube, Hotjar, Mixpanel, Microsoft, LogMeIn, Google/YouTube-related technologies, and others.
• Embedded-content tracking: Several YouTube and related storage technologies track interaction with embedded content and videos viewed.
• Local storage, IndexedDB, pixels, and persistent identifiers: The policy now references technologies beyond ordinary HTTP cookies, including HTML local storage, IndexedDB, and pixel trackers.

Legal and privacy risks

• The listed purposes include tracking, analytics, marketing, browser recognition, session identification, and embedded-content monitoring, which may require consent under applicable privacy and electronic communications laws.
• Several entries appear to use “Pending” or incomplete provider/purpose information, reducing transparency.
• The presence of third-party providers may involve sharing personal data with external vendors and potentially international transfers.
• The stated retention periods vary significantly, including persistent storage and 400-day cookies, which may require justification and clear disclosure.
• The policy should distinguish strictly necessary technologies from analytics, advertising, and functionality technologies and explain how users can withdraw consent.

2. AI Model Training

The diff contains no clear provision stating that customer or visitor data may be used to train, fine-tune, evaluate, or improve AI models. It also does not add:

• A customer-data license for AI training;
• A right to use prompts, outputs, telemetry, or account data for model development;
• Opt-in or opt-out mechanisms for AI training;
• Restrictions on human review or model providers;
• Confidentiality, deletion, or retention rules specifically addressing AI training.

Accordingly, no new AI-training authorization can be identified from this diff. The cookie and analytics changes could, however, expand collection of behavioral data that might later be used for profiling or analytics unless expressly restricted.

3. Document Integrity and Drafting Concerns

The replacement at the end appears corrupted or improperly inserted. It adds:

• “✕Stop” and “catalog” fragments;
• An unrelated marketing sentence (“See how aligning product data and design gets you to market faster. Register Now”);
• A very large block of meaningless repeated characters.

This creates a serious document integrity, notice, and enforceability risk. The published policy should be checked against the approved source version before release, and the corrupted text should be removed.

Summary of Available Changes

The supplied diff only states that approximately 1,370 words were removed. It does not identify which provisions were deleted or provide the underlying text.

Key Legal Impact

Because the deleted language is not included, it is not possible to determine:

• Whether customer data may be used to train, fine-tune, validate, or improve AI models.
• Whether such use was made optional, restricted, or prohibited.
• Whether the provider retained rights to use customer prompts, inputs, outputs, files, or usage data.
• Whether data may be de-identified, aggregated, or shared with affiliates or subprocessors for model development.
• Whether the provider’s confidentiality, security, deletion, or data-retention obligations changed.
• Whether the customer lost audit rights, notice rights, indemnities, or remedies relating to AI training.
• Whether any restrictions on selling, licensing, or commercializing customer data were removed.
• Whether the deletion affects compliance obligations involving personal data, confidential information, regulated data, or intellectual property.

AI Training Risk Assessment

The deletion could be significant if it removed language that:

• Prohibited using customer content to train general-purpose or third-party AI models;
• Required customer opt-in consent before training use;
• Limited training use to de-identified or aggregated data;
• Required deletion of training data after termination;
• Required disclosure of the models, vendors, or purposes involved; or
• Allocated ownership and intellectual-property rights in training inputs and outputs.

Conversely, the deletion could reduce restrictions on the provider if it removed an express permission allowing AI training. The direction of the risk cannot be determined from the information provided.

Information Needed

To perform a reliable legal comparison, provide either:

1. The full before-and-after contract text;

2. The actual redline showing deleted language; or

3. At minimum, the deleted 1,370 words and any replacement language.

Until then, the principal risk is uncertainty: the contract may have materially changed the provider’s rights to use customer data, including for AI model training, but the supplied diff does not reveal the nature or effect of those changes.

Summary of Available Changes

Scope of the Diff

The provided diff states only:

> “Added approximately 1370 words to the document”

It does not include the actual added language, deleted language, or replacement provisions. As a result, the legal effect of the changes cannot be reliably assessed.

Customer Data and AI Training

No conclusions can be drawn about whether the document now allows, restricts, or prohibits using customer data to train AI models. The added language could potentially address matters such as:

• Whether customer content may be used to train, fine-tune, or improve AI models;
• Whether use is limited to de-identified, aggregated, or anonymized data;
• Whether human reviewers or service providers may access customer data;
• Whether customer data may be retained after termination;
• Whether the customer can opt out of model training;
• Whether data may be used to create derivative data, embeddings, or model outputs;
• Whether the provider may use data for product development, analytics, or security;
• Whether customer data may be transferred to affiliates or subprocessors; and
• Whether the provider claims ownership or broad license rights over inputs, outputs, or derived information.

Potential Risk Areas Requiring Review

The actual text should be reviewed for:

1. Broad licenses allowing use of customer data for any business purpose.

2. AI-training permissions that are not limited to service delivery or that apply by default.

3. Vague de-identification standards that may still permit re-identification.

4. Indefinite retention of data or trained model artifacts after contract termination.

5. Third-party sharing with affiliates, vendors, or model providers.

6. Reduced confidentiality protections for data used in machine learning.

7. Limited opt-out or consent mechanisms for customers.

8. Ownership claims over customer content, derived data, or AI-generated outputs.

9. Disclaimers and liability limitations that may leave the customer responsible for unauthorized data use.

10. Retroactive application to previously collected customer data.

Conclusion

The diff is insufficient for substantive legal analysis. Please provide the full redlined text—or at least the approximately 1,370 added words and any related deletions or replacements—to identify the specific contractual changes, AI-training provisions, and associated risks.

Summary of Changes

Materiality of the Diff

• The diff states that approximately 1,370 words were removed from the document.
• No replacement text or details of the deleted provisions are provided.
• Because the deleted language is not shown, it is not possible to determine precisely which rights, obligations, limitations, or protections changed.

Potential Legal Risks

Removing a substantial amount of contract language may unintentionally or intentionally eliminate:

• Customer rights or provider obligations.
• Data security, confidentiality, or privacy commitments.
• Restrictions on data use, disclosure, retention, or sale.
• Service-level commitments, warranties, or indemnities.
• Liability limitations or remedies.
• Termination, audit, compliance, or dispute-resolution provisions.
• Definitions that limit or expand the scope of other terms.

The legal effect depends on whether the deleted provisions were replaced elsewhere, incorporated by reference, or simply omitted. If they were omitted entirely, the remaining contract may contain gaps or materially shift risk to the customer.

AI Model Training and Customer Data

• The supplied diff does not identify any specific additions, deletions, or replacements concerning AI training.
• It is therefore impossible to determine whether the revised document:
• Permits or prohibits training AI models on customer data.
• Allows use of customer data to improve, fine-tune, or evaluate models.
• Applies only to de-identified, aggregated, or anonymized data.
• Allows human review or use by subcontractors and affiliates.
• Provides opt-out rights or requires customer consent.
• Imposes deletion, retention, confidentiality, or security obligations for training data.
• Grants the provider ownership or broad usage rights over inputs, outputs, or derived data.

Recommended Review

The complete redlined text or at least the deleted 1,370 words should be reviewed, particularly for provisions addressing:

1. Customer data ownership and permitted uses.

2. AI training, model improvement, and data retention.

3. De-identification and aggregation standards.

4. Confidentiality and security controls.

5. Third-party, affiliate, and subcontractor access.

6. Deletion and return of data after termination.

7. Indemnities, warranties, and liability allocation.

Bottom line: The deletion is potentially material, but the provided diff is insufficient to identify the exact legal changes or any specific change to AI-model training rights.

Change Summary

1. Major change: Legal page content replaced by marketing/navigation content

• The former page presented Pimcore General Terms and Conditions (PTC) and explained that customers could download the applicable terms based on region.
• The revised content inserts extensive website navigation, product descriptions, promotional claims, and form content into the page.
• The actual contractual terms are not shown in the diff. The page still links to PTC documents for:
• EU & EEA customers
• US & Canada customers
• Customers in the rest of the world
• Risk: The revised page may make the operative terms harder to locate or distinguish from marketing material. It should be confirmed that the correct, current PTC documents remain accessible and that the website content does not create ambiguity about which terms govern.

2. Expanded product and service descriptions

The revised text adds or emphasizes:

• Product Information Management (PIM)
• Digital Asset Management (DAM)
• Master Data Management (MDM)
• Customer Data Platform (CDP)
• Digital Experience Platform (DXP)
• Digital Commerce and data syndication services
• “AI-enabled Platform” and automation-related marketing language
• PaaS, Enterprise, Professional, and Community editions

Risk: These descriptions could create expectations about functionality, ownership, security, support, compliance, or service scope. They do not appear to amend contractual commitments, but customers should ensure that binding specifications, service levels, support obligations, and AI-related functionality are addressed in the applicable agreement or order form.

3. Customer and visitor data use

The revised page adds several data-processing disclosures and consent statements:

• For demo and tour requests, Pimcore states it will use personal data “solely to process your request.”
• It also states that data may be shared with certified solution partners in the customer’s geographical region for a better-localized experience.
• Forms collect first name, last name, company, job function, business email, country, areas of interest, message content, and tracking fields such as UTM parameters.
• Separate optional language states that Pimcore may use submitted data to send newsletters, “exclusive insights,” expert tips, and updates.
• Newsletter registration states that Pimcore may store and process data to send emails.
• The text repeatedly directs users to the Privacy Policy for further details.

Risks:

• “Solely” processing a request may conflict with sharing, analytics, CRM, marketing, security, or other processing described elsewhere.
• Sharing with regional partners introduces additional recipients, possible independent-controller issues, international-transfer questions, and transparency/consent requirements.
• Optional marketing consent should be clearly separated from necessary request processing and should not be bundled or preselected.
• Tracking fields and profiling/lead-management uses are not clearly explained.

4. AI training

• The diff contains no express provision authorizing Pimcore to use customer data to train, fine-tune, evaluate, or improve AI models.
• The addition of “AI-enabled Platform” is promotional only and does not itself establish a data-training right.
• The diff also does not state that customer data is excluded from AI training.

Recommended check: Review the linked PTC, Privacy Policy, data-processing terms, and product-specific documentation for any broader rights to use customer content, telemetry, prompts, outputs, or de-identified data for AI development or model training.

Structured Summary of Important Changes

1. General Terms and Conditions (PTC) presentation

• The page changes from general marketing/navigation content to a dedicated “Pimcore General Terms & Conditions (PTC)” page.
• The page now directs customers to download the applicable PTC based on geography:
• EU & EEA
• US & Canada
• Customers outside the EU, EEA, US & Canada
• This creates a clearer regional contracting structure, but also raises an important issue: the diff does not show the actual PTC documents. The legal effect of the regional differences—such as governing law, liability, data protection, dispute resolution, and termination—cannot be assessed from this page alone.
• Customers should confirm which regional PTC applies and whether the version available at contracting is incorporated into the agreement, including by URL or document version/date.

2. Broader geographic segmentation

• The page expressly distinguishes customers in the EU/EEA, US/Canada, and the rest of the world.
• This may result in different contractual terms depending on the customer’s location. Customers operating across multiple jurisdictions should verify whether the classification is based on headquarters, contracting entity, service location, or end-user location.

3. Personal-data processing and sharing

The revised page contains more explicit privacy language in connection with demos, tours, and forms:

• Pimcore states: “We will use your personal data solely to process your request.”
• It adds that data “might” be shared with certified solution partners in the customer’s geographical region for a more localized experience.
• Forms state that submission authorizes Pimcore to store and process submitted personal information to provide the requested content.
• Separate optional marketing language asks users to consent to receive “exclusive insights, expert tips, and updates.”
• Newsletter signup states that submission permits Pimcore to store and process data to send emails.

Risks

• The phrase “solely to process your request” may be inconsistent with the stated sharing with regional partners and any analytics, CRM, profiling, or marketing activities. The privacy policy should clearly explain all purposes and legal bases.
• “Might share” does not identify the partners, countries, transfer mechanisms, retention period, or whether partners act as processors or independent controllers.
• Marketing consent should be clearly optional and separate from consent necessary to deliver a requested demo or tour.
• The forms collect potentially extensive information, including job function, company, country, product interests, messages, and tracking parameters. Data minimization, retention, and profiling implications should be reviewed.

4. AI-model training

• No express change concerning use of customer data to train AI models appears in the supplied diff.
• The revised marketing copy refers to Pimcore being “AI-enabled,” but this is a product description, not a contractual permission to use customer data for AI training.
• The actual PTC, privacy policy, and any AI/data-processing addendum should be reviewed for terms permitting use of customer content, prompts, telemetry, or personal data to train, fine-tune, or improve AI models.

Summary

The supplied diff does not include the actual contractual language. It only states:

> “Added approximately 1373 words to the document”

Accordingly, it is not possible to identify the legal changes, new risks, or changes concerning use of customer data to train AI models.

AI Training and Data-Use Analysis

No conclusions can be drawn because the added wording is not provided. In particular, the diff does not reveal whether the new terms:

• Permit the provider to use customer data, prompts, outputs, or usage information to train or improve AI models;
• Distinguish between customer content and metadata, telemetry, or de-identified data;
• Make AI training use automatic, opt-out, or opt-in;
• Allow data to be shared with affiliates, subcontractors, or third-party model providers;
• Permit retention of data after termination;
• Apply different rules to personal data, confidential information, or regulated data;
• Restrict human review or automated analysis of customer content;
• Provide security, deletion, confidentiality, or data-location commitments; or
• Give the provider rights to use customer content for commercial, research, or product-development purposes.

Other Legal Risks

The new provisions could also materially affect:

• Liability limitations and indemnities;
• Intellectual-property ownership and licenses;
• Confidentiality obligations;
• Data-protection compliance;
• Service suspension or termination rights;
• Audit and transparency rights;
• Warranties and disclaimers;
• Governing law and dispute resolution; and
• Changes to pricing, renewal, or service scope.

Information Needed

Please provide the full marked-up diff, including the approximately 1,373 added words and any surrounding deleted or replaced language. The additions should be shown using {...}, deletions using [...], and replacements using [...] {...}. Without the actual text, a substantive contract analysis would be speculative.

Summary of Important Changes

1. General Terms and Conditions (PTC) presentation

• The page changes from promotional website content to a dedicated “General Terms and Conditions” page.
• It now directs customers to download the applicable Pimcore General Terms and Conditions based on region:
• EU & EEA
• US & Canada
• Customers outside those regions
• The revised wording is clearer that different regional PTC documents may apply. However, the diff does not show:
• Which version governs if a customer operates in multiple regions;
• Whether the PTC is incorporated into a contract merely by downloading or accessing it;
• Effective dates or version controls; or
• Whether Pimcore may update the PTC unilaterally.

Risk: Customers should confirm the applicable regional document, its effective date, and how it becomes contractually binding.

2. Personal-data collection and use

The revised page adds or makes prominent several lead-generation forms, including requests for:

• First and last name;
• Company and job function;
• Business email;
• Country;
• Product interests;
• Messages and campaign-tracking information (UTM data).

The new notices state that Pimcore may:

• Store and process submitted personal information to provide the requested demo, tour, access, or content;
• Share data with certified solution partners in the customer’s geographical region for a “better localized experience”; and
• Send newsletters or “exclusive insights, expert tips, and updates” where the user selects the relevant option or submits the newsletter form.

Risks:

• “Certified solution partners” is not defined, and the number, identity, role, and location of recipients are not specified.
• Regional sharing may involve international transfers and additional controllers or processors.
• The forms appear to combine service-request processing with optional marketing communications. Consent should be clearly separate, freely given, and revocable.
• The wording “store and process” is broad and should be checked against the privacy policy for retention periods, legal bases, rights, and deletion procedures.

3. AI-model training

• No express change concerning the use of customer data to train, fine-tune, evaluate, or improve AI models is shown in this diff.
• The page includes marketing language referring to Pimcore as “the most AI-enabled” platform, but this is a product claim, not a data-use authorization.
• The diff does not add any customer-data license, AI-training permission, model-improvement right, anonymization commitment, or opt-out mechanism.

Important limitation: This conclusion is based only on the supplied webpage diff. Any AI-training provisions may appear in the downloadable regional PTC, privacy policy, data-processing agreement, or service-specific terms and should be reviewed separately.

4. Drafting and implementation concerns

• The diff contains substantial duplicated, stale, and apparently corrupted page text.
• This could make the operative privacy notices, consent language, and links difficult to identify or interpret.

Recommended action: Obtain and review the actual regional PTC, privacy policy, DPA, and any AI-specific terms before relying on the webpage text.

Structured Summary of Important Changes

1. No substantive PTC/contract changes identified

The diff does not appear to show changes to the legal General Terms and Conditions themselves. Instead, it largely replaces the former terms-page text with extensive website navigation, product descriptions, marketing copy, forms, and footer content.

The actual PTC documents are still presented as downloadable documents for:

• EU and EEA customers
• US and Canadian customers
• Customers in the rest of the world

Risk: Because the operative terms are provided by regional download rather than reproduced in the page text, the applicable contractual version, effective date, and incorporation process should be verified separately.

2. Website and product-content additions

The additions introduce or expand descriptions of:

• Pimcore’s platform and product offerings
• PIM, DAM, MDM, CDP, DXP, commerce, and data-syndication tools
• Enterprise, Professional, Community, and PaaS editions
• Partners, events, resources, demos, and customer information forms

These appear to be marketing and navigation changes rather than contractual amendments.

Potential risk: Product descriptions such as “secure,” “reliable,” “full ownership and control,” and “compliance” could create expectations or be viewed as representations, although they are not clearly incorporated into the PTC.

3. Customer and personal-data use

The revised page includes several new or more prominent data-use statements relating to website forms:

• Pimcore states it will use personal data “solely to process your request.”
• It may share data with certified solution partners in the user’s geographical region for a localized experience.
• Form submissions consent to Pimcore storing and processing submitted information to provide requested content.
• Optional marketing language allows users to request “exclusive insights, expert tips, and updates.”
• Newsletter submissions permit Pimcore to store and process data to send emails.
• The page directs users to the Privacy Policy for further details.

Risks:

• “Solely” processing data for a request may conflict with the separate partner-sharing, analytics/UTM tracking, marketing, security, or legal-compliance purposes unless clearly explained in the Privacy Policy.
• Regional sharing with partners may involve disclosure to independent controllers or additional processors, cross-border transfers, and differing privacy practices.
• Marketing consent should be clearly optional, specific, informed, and separated from access to the requested demo or content.
• The forms collect business and professional information, including job function, company, country, interests, messages, and tracking parameters.

4. AI-model training

No provision in the diff expressly authorizes or prohibits using customer or website-submitted data to train AI models.

The new references to an “AI-enabled Platform” describe a product/demo option only; they do not state that customer data will be used for AI training.

Recommended clarification: The PTC and Privacy Policy should expressly address whether customer content, personal data, prompts, outputs, telemetry, or support materials may be used to train, fine-tune, evaluate, or improve Pimcore’s or third-party AI models.

Summary of Important Changes

1. Page purpose and structure

• The page changes from general marketing/navigation content to a dedicated “General Terms and Conditions” page.
• It now directs customers to download region-specific Pimcore General Terms & Conditions (“PTC”) for:
• EU & EEA
• US & Canada
• Customers outside those regions (“RoW”)
• This creates a clearer regional contracting structure, but the diff does not show the actual PTC documents. The legal terms, governing law, liability provisions, data-processing terms, and AI provisions therefore cannot be assessed from this diff.

2. Regional scope and contracting risk

• The wording now expressly distinguishes customers by geography. This may affect which contractual version applies and could create disputes if:
• A customer operates in multiple regions;
• The contracting entity and customer location differ;
• Services are used globally; or
• The applicable regional document is not clearly incorporated into the order or agreement.
• Customers should confirm that the applicable PTC version is identified in the order form and that later website changes cannot silently alter the contract.

3. Personal-data processing and sharing

The lead-generation and demo language changes materially:

• The previous wording stated that Pimcore would use personal data “solely to work smarter, not harder.”
• The new wording states that Pimcore will use personal data “solely to process your request.”
• The new text also states that Pimcore might share data with certified solution partners in the customer’s geographical region for a “better localized experience.”

Risks

• “Process your request” is more specific but still potentially broad unless the privacy policy explains the exact purposes, retention period, legal basis, recipients, and transfer safeguards.
• Sharing with solution partners introduces third-party disclosure and possible international-transfer risks.
• The term “certified solution partners” is not defined, and the text does not state whether partners act as processors, independent controllers, or joint controllers.
• The privacy policy is incorporated by reference, so its current and future wording is important.

4. Marketing communications

• Forms now include an express optional marketing statement: “Yes, I want exclusive insights, expert tips, and updates from Pimcore.”
• Newsletter signup wording states that submitting data authorizes Pimcore to store and process it to send emails.

This is a clearer consent mechanism, but the interface should ensure the checkbox is optional, unselected by default, and records consent separately from consent to receive the requested demo or content.

5. AI-model training

• No express change concerning the use of customer data to train, fine-tune, evaluate, or improve AI models appears in the supplied diff.
• References to Pimcore being “AI-enabled” are marketing/navigation content only and do not grant or restrict AI-training rights.
• Because the actual PTC, privacy policy, and any data-processing agreement are not included, the diff does not establish whether customer content, prompts, usage data, or personal data may be used for AI training. This should be verified in those documents before acceptance.

Summary

Key Limitation

The diff provided states only:

> “Added approximately 1373 words to the document”

It does not include the actual added language, deleted language, or replacement provisions. Accordingly, it is not possible to determine:

• What contractual terms changed;
• Whether liability, indemnity, confidentiality, payment, termination, or governing-law provisions were modified;
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
• Whether data may be shared with affiliates, vendors, or third parties;
• Whether the customer has any opt-out, deletion, or data-use controls; or
• Whether the changes create new compliance, security, intellectual-property, or confidentiality risks.

AI-Training Review

No specific AI-training language appears in the supplied diff. Therefore, no conclusion can be reached about whether the revised document:

• Permits training on customer content, prompts, outputs, or usage data;
• Uses customer data to train general-purpose or shared models;
• Limits training to de-identified, aggregated, or anonymized data;
• Allows human review of customer data for model improvement;
• Gives the provider ownership or broad rights to use customer data;
• Provides an opt-out or requires affirmative consent;
• Applies different rules to free, paid, enterprise, or API customers; or
• Requires deletion or cessation of training use after termination.

Risk Assessment

The only identifiable fact is that approximately 1,373 words were added. A substantial addition may introduce material obligations or broaden the provider’s rights, but the nature and risk level cannot be assessed without the actual text.

Information Needed

Please provide the complete redline, including:

1. The added wording in {};

2. The deleted wording in []; and

3. Replacement wording in []{}.

The prior and revised versions, or a side-by-side comparison, would also be sufficient.

Structured Summary of Important Changes

1. General Terms and Conditions (PTC) presentation

• The page has been changed from general marketing/navigation content to a dedicated “General Terms and Conditions” page.
• The page now states that Pimcore’s General Terms & Conditions (PTC) are available for download by customer location.
• Separate PTC documents are identified for:
• EU & EEA customers
• US & Canada customers
• Customers outside the EU, EEA, US & Canada
• Customers are directed to contact Pimcore with questions.

Legal significance and risks

• The regional structure may mean that different contractual terms apply depending on the customer’s location. Customers should confirm:
• Which regional PTC applies;
• Whether the applicable PTC is incorporated into the order or agreement;
• Which version and effective date govern; and
• Whether the PTC can be changed unilaterally.
• The diff does not include the actual PTC documents, so important provisions—such as liability limits, data-processing obligations, warranties, termination rights, governing law, and dispute resolution—cannot be assessed.
• The “outside of EU, EEA, US & Canada” category is broad and could create uncertainty for customers in other jurisdictions.

2. Marketing and website content changes

• Marketing statements have largely been replaced with product-navigation, product-category, and demo-request content.
• The page now promotes Pimcore products and modules, including PIM, DAM, MDM, CDP, DXP, digital commerce, experience portals, and data syndication.
• “Seamless platform” has been changed to “personalised tour.”
• References to Pimcore’s customer base and product capabilities have been removed from some page sections and replaced with navigation content.

Legal significance and risks

• These appear primarily to be website-content changes rather than contractual amendments.
• Product descriptions and promotional statements may still create expectations regarding functionality, AI capabilities, compliance, or performance. Customers should rely on the signed agreement and specifications rather than marketing language.

3. Personal-data collection and sharing

The revised forms state that:

• Pimcore will use personal data to process demo or tour requests.
• Data may be shared with certified solution partners in the customer’s geographical region for a better-localized experience.
• Users may opt in to receive exclusive insights, tips, and updates.
• Newsletter submissions authorize Pimcore to store and process data to send emails.
• The privacy policy is incorporated by reference for further information.

Legal significance and risks

• Sharing data with regional solution partners expands the potential recipient group and may involve international transfers, additional processors/controllers, and direct partner marketing.
• The diff does not clarify whether partner sharing is optional, what data is shared, retention periods, or how consent can be withdrawn.
• Customers should review the privacy policy and relevant data-processing terms.

4. AI-model training

• No express change concerning the use of customer data to train, fine-tune, evaluate, or improve AI models is shown in the diff.
• Although the page now advertises products as “AI-enabled,” this is marketing language and does not establish whether customer content is used for AI training.
• The actual PTC, privacy policy, and any AI/data-processing addendum should be reviewed for an explicit training-data provision, opt-out, anonymization, ownership, or confidentiality protections.

Summary

The supplied diff does not show the actual amended legal language. It only states:

> “Added approximately 23 words to the document”

Because the specific additions are not provided, it is not possible to determine:

• What contractual rights or obligations changed;
• Whether liability, indemnity, confidentiality, or termination provisions were affected;
• Whether customer data may be collected, accessed, shared, retained, or disclosed differently; or
• Whether the customer’s data may be used to train, fine-tune, evaluate, or improve artificial intelligence or machine-learning models.

AI Training and Data-Use Risk

No conclusion can be drawn about AI-model training from the information supplied. The added 23 words could potentially:

• Authorize use of customer content or personal data to train or improve models;
• Permit use of de-identified, aggregated, or anonymized data;
• Grant the provider a broad, perpetual, irrevocable, worldwide, or sublicensable license;
• Allow data use for product development, analytics, or service improvement;
• Remove or narrow an existing opt-out or confidentiality restriction; or
• Clarify that customer data will not be used for AI training.

Each possibility has materially different legal and commercial consequences.

Information Needed

Please provide the actual diff, including the 23 added words and any surrounding deleted or replacement language. The surrounding text is important because a new sentence may modify the scope of an existing data-use, confidentiality, intellectual-property, or security provision.

Structured Summary of Important Changes

1. No identifiable AI-training provision

• The diff does not add, remove, or modify any express term stating whether customer data, prompts, content, personal information, or usage data may be used to:
• Train, fine-tune, or improve artificial-intelligence models;
• Develop machine-learning products;
• Create aggregated or de-identified datasets; or
• Be disclosed to AI providers or other technology vendors.
• The available changes appear primarily to involve website navigation, embedded forms, analytics code, and page metadata rather than contractual terms.
• Accordingly, this diff does not establish that customer data is excluded from AI training, nor does it authorize such use. The applicable privacy policy, terms, data-processing agreement, and product-specific terms should be reviewed separately.

2. Privacy notice wording changes

• One notice appears to change from directing users to the privacy policy for information about their “geographical region” to directing them to the privacy policy for information about “how your data is used.”
• This may broaden or clarify the subject matter of the notice, but the surrounding text is incomplete, so the legal effect cannot be determined confidently.
• Another reference states that data is used to send emails and directs users to the privacy policy. This suggests continued marketing communications and should be checked against consent and opt-out requirements.

3. Increased tracking and third-party processing

The replacement content introduces or exposes substantial tracking and marketing functionality, including:

• HubSpot forms and form-submission event tracking;
• HubSpot meeting-booking tracking;
• Google Tag Manager/data-layer events;
• Cookies recording page views and session duration;
• HubSpot page metadata, canonical URLs, portal identifiers, and analytics information.

These changes may involve collection and transmission of personal data—such as email addresses, form responses, browsing behavior, and booking activity—to third-party service providers. The privacy policy and any consent mechanism should accurately describe:

• The categories of data collected;
• The purposes of processing;
• Third-party recipients and subprocessors;
• International transfers;
• Cookie and analytics consent;
• Retention periods; and
• Available privacy rights.

4. Contractual significance and limitations

• Most changes are technical or presentational and do not appear to amend substantive customer obligations, warranties, liability provisions, or data-processing commitments.
• The diff is heavily corrupted and combines source code with website text. A clean comparison of the actual legal terms is recommended before relying on this analysis.

Summary of the Change

• The amendment removes approximately 219 words from the document.
• The actual deleted language is not provided, so the legal and commercial impact cannot be determined reliably.

Customer Data and AI Training

• The available diff does not identify whether any provisions concerning customer data, artificial intelligence, machine learning, model training, or use of customer content were deleted.
• If the removed text addressed these topics, the deletion could materially change:
• Whether the provider may use customer data or content to train, fine-tune, or improve AI models;
• Whether such use requires the customer’s consent;
• Whether data is used for product improvement, analytics, or shared model training;
• Whether the customer may opt out of AI training or secondary uses;
• Confidentiality, de-identification, retention, and deletion protections;
• Ownership or licensing rights in customer data, outputs, or trained models; and
• The provider’s obligations regarding security, privacy, and regulatory compliance.

Potential Legal Risks

• Loss of protections: Deleted language may have limited the provider’s rights to use customer data or imposed safeguards.
• Expansion by omission: If restrictions or opt-out rights were removed, the remaining agreement may permit broader data use, depending on the surrounding provisions.
• Ambiguity: Removing definitions, exceptions, or procedural requirements may make the agreement unclear and increase dispute risk.
• Compliance exposure: Any deletion affecting data-use consent, confidentiality, or privacy obligations could create risks under applicable privacy and sector-specific laws.
• Interpretation risk: The effect depends heavily on what language remains and whether the deletion was accompanied by changes elsewhere.

Required for a Definitive Review

Please provide the actual 219 deleted words, or the full before-and-after text. Without the deleted language and its location in the agreement, it is not possible to determine whether customer data may now be used for AI training or whether any related protections were removed.

No

No