Legal Basis & Processing Framework

Overview & Scope

Aevum News is committed to processing personal data transparently, lawfully, and in strict accordance with applicable data protection regulations, including but not limited to the GDPR (EU 2016/679), CCPA/CPRA, and other relevant international privacy frameworks. This document outlines the legal grounds upon which we collect, store, and process personal information.

Lawful Basis for Processing

We rely on one or more of the following lawful bases for processing personal data, depending on the context and purpose:

1. Explicit Consent: For newsletter subscriptions, marketing communications, and non-essential analytics cookies.
2. Contractual Necessity: To fulfill subscription agreements, deliver paid content, and manage account services.
3. Legitimate Interest: For site security, fraud prevention, service improvement, and anonymized trend analysis.
4. Legal Obligation: To comply with tax, record-keeping, and journalistic source-protection laws where mandated.

Consent may be withdrawn at any time via account settings or by contacting our data protection team. Withdrawal does not affect the lawfulness of prior processing.

Data Categories & Purpose

We process only the minimum data necessary for stated purposes:

• Identity & Contact: Name, email, billing address — for account management and correspondence.
• Usage & Behavioral: Article views, session duration, interaction metrics — for content optimization and analytics.
• Technical: IP address, device fingerprint, browser type — for security, load balancing, and fraud detection.
• Payment: Processed exclusively by PCI-DSS compliant third-party gateways; we do not store full card numbers.

Retention & Deletion

Personal data is retained only as long as necessary to fulfill the purpose for which it was collected, or as required by law:

• Subscription Data: Retained while account is active, plus 24 months post-cancellation for reconciliation.
• Analytics & Cookies: Aggregated and anonymized within 13 months; session data purged after 30 days.
• Legal/Compliance Records: Stored per statutory requirements (typically 5–7 years).

Requests for data deletion are processed within 30 days, subject to legal archival obligations.

Your Legal Rights

Depending on your jurisdiction, you may exercise the following rights regarding your personal data:

• Access & Portability: Request a copy of your data in a machine-readable format.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion where no legal basis for retention exists.
• Restriction & Objection: Limit processing or object to direct marketing and profiling.
• Withdraw Consent: Revoke permission at any time without affecting service continuity where lawful.

Submit requests via privacy@aevumnews.com or through your account dashboard. Verification may be required to protect your information.

Third-Party & International Transfers

We engage trusted service providers for hosting, analytics, payment processing, and email delivery. All partners are bound by strict data processing agreements (DPAs) and undergo regular compliance audits. International data transfers are safeguarded via Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.

Compliance & Audits

Aevum News maintains an ongoing data protection impact assessment (DPIA) program, conducts annual third-party security audits, and aligns with ISO 27001 and SOC 2 Type II standards. Our Data Protection Officer (DPO) oversees framework implementation and regulatory alignment.

Updates & Contact

This framework is reviewed quarterly and updated to reflect regulatory changes or operational adjustments. Material changes will be communicated via email or platform notice.