Data Protection Agreement

1. Introduction & Scope

Welcome to Aevum News. We are committed to protecting your privacy and handling your data with transparency and care. This Data Protection Agreement ("DPA") outlines the types of personal information we collect, how it is used, shared, and protected, and the rights you hold under applicable data protection laws, including the GDPR, CCPA, and other global regulations.

This policy applies to all visitors, subscribers, newsletter recipients, and users of the Aevum News digital platform, mobile applications, and associated services. By accessing or using our services, you acknowledge that you have read, understood, and agree to the practices described herein.

2. Information We Collect

We collect information to deliver accurate journalism, personalize your reading experience, and maintain platform security. Data collected includes:

• Identity & Account Data: Name, email address, subscription tier, and payment information (processed securely by PCI-DSS compliant third parties).
• Usage & Interaction Data: Articles viewed, search queries, time spent on pages, click-through rates, and newsletter engagement metrics.
• Device & Technical Data: IP address, browser type, operating system, device identifiers, and approximate geographic location.
• Communication Data: Messages sent via contact forms, customer support tickets, and reader feedback submissions.
• Consent Records: Records of your preferences regarding marketing communications, data sharing, and cookie acceptance.

3. How We Use Your Information

Aevum News uses collected data strictly for the following purposes:

1. Delivering verified news content and premium subscriber features.
2. Personalizing editorial recommendations and reading dashboards.
3. Processing newsletter subscriptions and sending editorial updates.
4. Analyzing platform performance to improve user experience and site reliability.
5. Preventing fraud, spam, and unauthorized access to secure areas.
6. Complying with legal obligations, journalistic standards, and regulatory requirements.

We never sell personal data to data brokers or unauthorized third parties. Analytical insights are aggregated and anonymized to protect individual privacy.

4. Data Sharing & Third Parties

We may share limited personal information with trusted service providers who assist in operating our platform. All third parties are contractually bound to confidentiality and data protection standards:

• Cloud Hosting & CDN: Secure infrastructure providers for content delivery and data storage.
• Analytics Partners: Privacy-focused measurement tools that process aggregated, non-identifiable traffic data.
• Newsletter & CRM Platforms: Email delivery services that handle subscription management under strict data processing agreements.
• Payment Processors: PCI-compliant gateways that tokenize and securely manage financial transactions.
• Legal & Regulatory Authorities: When required by law, court order, or to protect the safety and rights of our users and staff.

5. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or rectify inaccurate or incomplete information.
• Deletion: Request removal of your data, subject to legal retention requirements.
• Portability: Receive your data in a structured, machine-readable format.
• Restriction & Objection: Limit processing or opt out of direct marketing and behavioral analytics.
• Withdraw Consent: Revoke previously granted permissions at any time without affecting prior lawful processing.

To exercise these rights, contact our Data Protection Officer via the details provided in Section 9. We will respond to valid requests within 30 days.

6. Security Measures

Aevum News implements industry-standard technical and organizational safeguards to protect your data against unauthorized access, alteration, disclosure, or destruction. These include:

• End-to-end TLS 1.3 encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Regular penetration testing, vulnerability assessments, and third-party security audits.
• Strict access controls, multi-factor authentication, and role-based permissions for internal staff.
• Automated backups and disaster recovery protocols to ensure data integrity and availability.

While we strive to protect your information, no system is entirely immune to risk. In the event of a confirmed data breach affecting personal information, we will notify affected users and regulatory authorities in accordance with applicable law.

7. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes outlined in this agreement, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type:

• Account & Subscription Data: Retained while active + 24 months after account closure.
• Newsletter & Marketing Preferences: Retained until unsubscribed or revoked.
• Usage & Analytics Data: Aggregated and anonymized after 12 months.
• Communication Records: Retained for 36 months for support and journalistic accountability purposes.
• Financial Transaction Logs: Retained for 7 years per tax and accounting regulations.

8. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to ensure platform functionality, analyze traffic, and remember your preferences. Categories include:

• Strictly Necessary: Essential for site security, login sessions, and accessibility features.
• Performance & Analytics: Help us understand how readers navigate and engage with content (anonymized).
• Functional: Remember language preferences, theme settings, and reading history.
• Marketing & Personalization: Used only with explicit consent to deliver relevant newsletter prompts and editorial recommendations.

You can manage or withdraw consent for non-essential cookies at any time via our Cookie Preferences Center or browser settings.

9. Contact & Data Protection Officer

For questions, complaints, data requests, or concerns regarding this DPA, please contact our dedicated privacy team:

If you believe your rights have been violated, you also have the right to lodge a complaint with your local data protection authority.