1. Operator and contact
This notice explains how Continental People processes personal data submitted through continentalpeople.com request forms and related access-review communications.
Operator: Individual Entrepreneur Georgii Vladimirovich Ilin (ИП Ильин Георгий Владимирович), operating under the trade name Continental People. Privacy contact: privacy@continentalpeople.com.
2. What this notice covers
This notice covers demo dataset early-access requests, 4K or extended dataset requests, pilot and custom dataset requests, access review, country eligibility review, authority confirmation, license acceptance, acceptance certificate preparation, future delivery logs, future download logs and audit records for continentalpeople.com.
This notice does not itself provide dataset access. Delivery requires the applicable participant rights documentation, Dataset License, privacy and legal review, country eligibility review, package manifest, storage and delivery controls.
3. Data collected in request forms
The 1080p demo dataset request form may collect full name, work email, company or organization, country, primary interest, optional role, optional website, intended use, authority confirmation, Privacy Notice acknowledgement, Dataset License acceptance and optional marketing consent.
The 4K or extended dataset request form may collect request token if present, full name, work email, company or organization, country, optional role, optional website, primary interest, intended use, larger project data needs, expected project scale, expected timeline, additional technical requirements, authority confirmation, Privacy Notice acknowledgement and optional marketing consent.
The pilot or custom data collection request form may collect full name, work email, company or organization, country, optional role, optional website, primary interest, intended use, project description, approximate scale, desired timeline, authority confirmation, Privacy Notice acknowledgement and optional marketing consent.
Legal and review records may include request ID, submitted form type, document version, document URL, SHA-256 hash, exact checkbox text, UTC timestamp, request status, country eligibility status, access decision status, review notes, transactional email status and future delivery or download log status.
To protect public request forms from automated abuse, we may process limited technical and interaction signals associated with a form attempt, including challenge outcome, form route, timestamps and privacy-minimised keyed correlation values derived from network and email data. We do not place form message content, a person’s name or email address into Turnstile action or custom-data fields.
4. Purposes
We use request information to review whether dataset access, 4K access or a custom pilot is appropriate; confirm authority to act for the organization; maintain legal acceptance records; communicate request status; prevent abuse; prepare audit records; support participant, deletion, quarantine and withdrawal workflows; and support future controlled delivery if legal clearance is granted.
We may also use optional marketing consent to contact you about relevant visual data collection services. Marketing consent is separate from delivery, license acceptance and privacy acknowledgement.
5. Legal basis
Processing is based on the requester’s consent, steps requested before entering into a contract, performance of applicable agreements, Continental People’s need to maintain legal and security records, and compliance with applicable legal obligations.
Optional marketing communication is based on separate consent where the marketing checkbox is selected. A refusal to provide marketing consent does not block request review.
Where applicable, processing of limited anti-abuse signals is based on Continental People’s legitimate interests in securing its website, preventing fraudulent or automated requests, and protecting requesters and operational systems.
6. Access review and country eligibility
Dataset-related requests are reviewed before access. Country is required so that cross-border transfer status, recipient eligibility and delivery restrictions can be reviewed before any delivery decision.
A country eligibility result does not create an automatic right to dataset access. Non-Russia countries are handled through access review unless a separate legal or security decision applies. No country receives automatic download or automatic delivery.
Russian personal-data localization requirements may apply to Russia-based requests. The public request forms on continentalpeople.com are currently not available for Russia-based requests; please email ai@continentalpeople.ru for manual handling.
7. Technical providers
The current technical stack uses GitHub for repository hosting and Netlify for hosting, serverless functions, CDN and form handling. Netlify Forms may store request, acknowledgement and acceptance records submitted through website forms.
Netlify provides website hosting, serverless request processing and a site-scoped data store used to retain privacy-minimised anti-abuse evidence and short-lived advisory security state.
Continental People uses Cloudflare Turnstile to protect public request forms from automated abuse. When a protected form loads or is submitted, Cloudflare may process browser, device, network and interaction signals needed to assess whether the request is automated. Turnstile is used for form security and abuse prevention, not for advertising or general website analytics. More information is available in the Cloudflare Turnstile Privacy Addendum.
Cloudflare processes Turnstile data on our behalf when providing site-protection functionality and may act as an independent controller for limited data used to improve Turnstile and detect abuse, as described in the Cloudflare Turnstile Privacy Addendum.
Continental People uses Resend to send transactional messages relating to website requests, request review and controlled dataset access. Resend may process the recipient and sender email addresses, subject, text and HTML message content, reply-to details, message identifiers, delivery status and related technical metadata needed to transmit and monitor those messages.
Continental People uses Cloudflare R2 as private object storage for controlled dataset packages and related package files. Depending on the applicable package, stored materials may include participant images, voices, actions and associated dataset metadata. The storage bucket is not a public dataset library. Access is limited to authorized operational use and separately approved controlled delivery.
Continental People does not use general analytics or advertising cookies on this site. Turnstile may use strictly necessary cookies or similar technologies for security and abuse prevention as described by Cloudflare.
No dedicated error logging provider was found in the current repository audit. If analytics, advertising technologies or error logging are added later, this notice should be updated before use.
8. Email delivery
Continental People may send transactional messages including request confirmations, requests for additional information, review decisions, licensing or delivery timing information and legal or operational notices. These messages are necessary to process the submitted business request and are separate from optional marketing consent.
Dataset files are not attached to request confirmations. The browser does not receive a private dataset object path, storage credential, full dataset URL or password. Any future temporary access link must be generated through an approved controlled-delivery process.
9. Controlled delivery and logs
Controlled delivery may create records relating to license acceptance, delivery authorization, temporary-link creation, transactional email delivery, expiry, revocation, deletion or quarantine notices, participant-related restrictions and audit exports. Download-completion logging is used only where the selected delivery method provides a verified application-level event.
Private storage of a dataset package does not by itself grant access. Public request pages do not create automatic dataset downloads, and automatic dataset delivery remains disabled unless a separately approved legal and technical release changes that status.
10. Retention
Request records, rejected requests, acceptance records, email logs, review decisions, future delivery logs and future download logs are retained while needed for manual review, legal acceptance evidence, audit, security, deletion or quarantine notices, withdrawal handling, abuse prevention, legal defense and business follow-up.
Request records that do not lead to delivery are generally retained for up to 3 years after the last interaction, unless a longer period is needed for legal, security, abuse-prevention or audit purposes.
License acceptance records, delivery records, download logs and withdrawal/deletion/quarantine records may be retained for the dataset license term and for an additional period needed to protect legal rights, prove acceptance, process participant-related restrictions and handle disputes.
Marketing consent records are retained until consent is withdrawn or the contact is removed from marketing communications, subject to necessary suppression-list retention.
Minimal anti-abuse evidence controlled by Continental People — challenge outcome categories, bounded reason codes, timestamps, form type and keyed pseudonymous correlation values — is retained for up to 90 days, unless a longer period is necessary to investigate an active security incident. High-confidence spam payloads are not added to marketing, license-acceptance or delivery records.
Any incident-based extension is documented with a review owner, reason and next review date. Extended anti-abuse evidence is deleted after the incident is closed and the documented retention need ends.
11. RKN and cross-border transfer
A regular RKN personal-data processing notification has been submitted. The public registry can be searched through the RKN operators registry using notification number 100336097 where available.
We also submitted a cross-border transfer notification, and RKN responded that the described website access scenario is not subject to cross-border transfer notification review. Russian Federation personal-data localization requirements may still apply to Russian citizen data.
12. Your rights
You may contact us to request access, correction, deletion, export, restriction, objection or withdrawal where applicable. We may need to verify the request and may ask for information needed to locate the relevant request record.
Some records may need to be retained where required for legal defense, audit, security, abuse prevention, participant protection or license evidence.
13. Withdrawal and contact process
To make a privacy, withdrawal, deletion, quarantine or participant-related request, email privacy@continentalpeople.com with enough detail to identify the request, organization and relevant dataset package if applicable.
If a request affects an already delivered dataset in the future, Continental People may review whether deletion, quarantine, revocation or recipient notification is required.
14. Marketing consent
Marketing consent is optional, unchecked by default and separate from transactional request processing, license acceptance, privacy acknowledgement and dataset delivery. You can unsubscribe or object to marketing contact at any time.
15. No automatic dataset delivery
No request form, checkbox, email, country eligibility status or website page creates automatic dataset access. Dataset delivery requires separate approval by Georgii Ilin or an authorized Continental People representative.