Our Commitment to Data Transparency

At Aevum News, we believe that informed readers deserve full visibility into how their personal data is handled. This document provides a comprehensive mapping of all personal data categories we collect, the specific purposes for which each category is processed, and the corresponding legal bases under GDPR, CCPA, and other applicable regulations.

We have organized this information into 9 distinct data categories, each with detailed breakdowns of data elements, purposes, legal basis, retention periods, and third-party sharing details. You can expand each section below for full details.

9
Data Categories
47
Data Elements Tracked
6
Processing Purposes
πŸ“‹

Complete Data Processing Register

Click each category to expand and view detailed processing information.

Required

1. Identity & Contact Data

β–Ό

Data that can directly identify you or be used to contact you. This is collected primarily through account registration, newsletter sign-ups, subscription purchases, and communication with our support team.

Data Elements Purpose Legal Basis Retention
  • Full Name
  • Email Address
  • Phone Number
  • Postal Address
 Account Management Subscription Delivery Customer Support
Contractual Necessity
⏱ Duration of account + 2 years
  • Display Name
  • Profile Photo
 Profile Personalization Community Features
Consent
⏱ Until deletion requested
Required

2. Authentication & Security Data

β–Ό

Technical data used to verify your identity, protect your account, and secure our systems against unauthorized access and fraud.

Data Elements Purpose Legal Basis Retention
  • Encrypted Password Hash
  • Salt Value
  • Session Tokens
 Account Authentication Security & Fraud Prevention
Contractual Necessity
⏱ Duration of account + 90 days
  • 2FA Backup Codes
  • Recovery Email
  • Login Timestamps
 Account Recovery Security Monitoring
Legitimate Interest
⏱ 180 days for logs
  • OAuth Tokens (SSO)
  • API Keys
 Third-Party Login API Access
Consent
⏱ Until revoked
Optional

3. Usage & Behavioral Data

β–Ό

Information about how you interact with our platform β€” which articles you read, how long you engage, what you search for, and how you navigate our services. This helps us improve content and user experience.

Data Elements Purpose Legal Basis Retention
  • Articles Viewed
  • Reading Duration
  • Click Patterns
  • Search Queries
 Content Personalization Service Improvement Trend Analysis
Legitimate Interest
⏱ 12 months (aggregated)
  • Bookmarks / Saves
  • Article Shares
  • Comments / Reviews
 Feature Functionality Community Moderation
Contractual Necessity
⏱ Until account deletion
  • A/B Test Variations
  • Feature Adoption Rates
 Product Development User Experience Research
Legitimate Interest
⏱ 6 months
Required

4. Device & Technical Data

β–Ό

Technical information about the devices, browsers, and networks you use to access Aevum News. This data is essential for delivering our services, ensuring compatibility, and maintaining security.

Data Elements Purpose Legal Basis Retention
  • IP Address
  • Browser Type & Version
  • Operating System
  • Device Type
 Service Delivery Security & Fraud Prevention
Legitimate Interest
⏱ 6 months (IP logs)
  • Screen Resolution
  • Language Preference
  • Timezone
 Display Optimization Localization
Contractual Necessity
⏱ Duration of session
  • App Version
  • Crash Reports
  • Performance Metrics
 Bug Fixing Performance Monitoring
Legitimate Interest
⏱ 30 days
Optional

5. Location Data

β–Ό

Approximate geographic location derived from IP address or, with your consent, precise GPS coordinates. Used to deliver relevant regional news content and comply with content licensing requirements.

Data Elements Purpose Legal Basis Retention
  • Country
  • City / Region
  • IP-Based Location
 Regional Content Delivery Content Licensing Compliance
Legitimate Interest
⏱ Duration of session
  • Precise GPS Coordinates
 Location-Based Alerts Local News Push Notifications
Explicit Consent
⏱ Not stored β€” processed in real-time
Optional

6. Content & Interaction Data

β–Ό

Content you create, share, or interact with on our platform β€” including comments, forum posts, survey responses, and feedback submissions.

Data Elements Purpose Legal Basis Retention
  • Article Comments
  • Forum Posts
  • Reactions / Likes
 Community Features Moderation
Contractual Necessity
⏱ Until deletion requested
  • Survey Responses
  • Feedback Forms
  • Newsletter Preferences
 Service Improvement Research
Consent
⏱ 2 years (aggregated)
Required

7. Financial & Transaction Data

β–Ό

Payment information and transaction records collected when you purchase subscriptions, make donations, or buy digital content. We never store raw card numbers β€” all payment processing is handled by PCI-DSS compliant providers.

Data Elements Purpose Legal Basis Retention
  • Payment Method Token
  • Card Last 4 Digits
  • Transaction IDs
  • Billing Address
 Payment Processing Subscription Management
Contractual Necessity
⏱ Duration + 7 years (legal)
  • Invoice Records
  • Tax Information
  • Refund Records
 Tax Compliance Billing Support
Legal Obligation
⏱ 7 years
Optional

8. Marketing & Communication Preferences

β–Ό

Your preferences regarding how and when you wish to be contacted by Aevum News, including newsletter topics, notification frequency, and communication channels.

Data Elements Purpose Legal Basis Retention
  • Email Preferences
  • Push Notification Settings
  • Topic Interests
 Targeted Communications Personalized Newsletters
Consent
⏱ Until consent withdrawn
  • Email Open Rates
  • Link Clicks in Emails
  • Unsubscribe Events
 Email Campaign Analytics Engagement Optimization
Legitimate Interest
⏱ 6 months
Optional

9. Special Category & Inferred Data

β–Ό

We do not collect special category data (health, biometrics, political opinions, religious beliefs, etc.) as defined under GDPR Article 9. However, we may process inferred data β€” data derived from patterns in your behavior, such as inferred interests or demographic estimates. This data is always probabilistic, never deterministic, and can be corrected or opted out at any time.

Data Elements Purpose Legal Basis Retention
  • Inferred Interests
  • Estimated Age Range
  • Estimated Income Bracket
 Audience Analytics Content Recommendations
Legitimate Interest
⏱ 12 months (aggregated)
  • Content Engagement Score
  • Reading Level Estimate
 Content Optimization Accessibility Features
Legitimate Interest
⏱ 6 months
βš–οΈ

Understanding Our Legal Bases

The four legal grounds under which we process your personal data under GDPR.

βœ“

Consent

You have given clear, affirmative consent for us to process your personal data for a specific purpose. You may withdraw consent at any time, and we will stop processing data based on that consent within 30 days.

πŸ“„

Contractual Necessity

Processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract β€” such as delivering a paid subscription or managing your account.

🎯

Legitimate Interest

Processing is necessary for our legitimate interests (such as improving our services, preventing fraud, or ensuring network security) that are not overridden by your fundamental rights and freedoms.

πŸ›

Legal Obligation

Processing is necessary for us to comply with a legal obligation β€” for example, retaining financial records for tax purposes or responding to lawful requests from government authorities.

πŸ”—

Third-Party Data Sharing

Complete list of third-party services we share data with and the categories of data shared.

Service Provider Data Categories Shared Purpose Type
Stripe (Payment Processing) Financial & Transaction Data, Identity & Contact Data Process subscription payments and billing
Google Analytics (Web Analytics) Usage & Behavioral Data, Device & Technical Data Understand website traffic and usage patterns
SendGrid / Mailchimp (Email Delivery) Identity & Contact Data, Marketing Preferences Deliver newsletters and transactional emails
Cloudflare (CDN & Security) Device & Technical Data, Location Data (IP-level) Website performance, DDoS protection, security
Auth0 (Identity Management) Authentication & Security Data Manage user authentication and SSO
Twitter / X, Facebook, LinkedIn (Social Embeds) Device & Technical Data, Usage & Behavioral Data Display embedded social media content and share buttons
Segment (Data Management Platform) Usage & Behavioral Data, Identity & Contact Data Centralize data collection for analytics and marketing
Sentry (Error Tracking) Device & Technical Data Track and resolve application errors
πŸ›‘οΈ

Your Data Rights

Under GDPR, CCPA, and other applicable laws, you have the following rights regarding your personal data.

πŸ‘οΈ

Right to Access

Request a copy of all personal data we hold about you, including the categories of data, purposes of processing, and recipients.

✏️

Right to Rectification

Request correction of inaccurate or incomplete personal data we hold about you at no cost.

πŸ—‘οΈ

Right to Erasure

Request deletion of your personal data where there is no compelling legal reason for us to continue processing it ("Right to be Forgotten").

⏸️

Right to Restrict Processing

Request that we temporarily stop processing your data, for example while we verify an accuracy dispute.

πŸ“¦

Right to Data Portability

Request a machine-readable copy of your data that you provided to us, which you can transfer to another service provider.

🚫

Right to Object

Object to processing of your personal data where we are relying on legitimate interest or for direct marketing purposes.

πŸ€–

Rights Regarding Automated Decisions

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects.

↩️

Right to Withdraw Consent

Where we rely on consent for processing, you may withdraw it at any time through your account settings or by contacting our Data Protection Officer.

Questions About Your Data?

If you have any questions about the data we collect, how we use it, or wish to exercise any of your rights, our Data Protection team is here to help.

βœ‰οΈ Email Our DPO πŸ“ Submit a Data Request