Data Sharing & Third Parties

1. Overview

At Aevum News, we treat user privacy as a foundational commitment to our journalistic integrity. This section details how, when, and why we share personal data with third-party entities, the safeguards we enforce, and the controls available to you.

2. When We Share Data

We may share your personal information in the following circumstances:

• Service Provision: With vendors who process payments, host our content, deliver newsletters, or provide analytics required to maintain our platform.
• Legal Requirements: When compelled by law, court order, subpoena, or government request, after verifying legal sufficiency and, where permitted, notifying you.
• Protection of Rights: To protect the safety, rights, or property of Aevum News, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, with prior notice and appropriate data protection measures.

3. Third-Party Categories & Examples

We partner with carefully vetted service providers. Each relationship is governed by strict data processing agreements.

4. Security & Compliance Standards

Every third party receiving Aevum News data must meet our rigorous compliance framework:

• Data Processing Agreements (DPAs): Legally binding contracts that restrict data usage strictly to contracted purposes.
• Encryption Requirements: All data in transit must use TLS 1.3+; data at rest must be encrypted with AES-256 or equivalent.
• Regular Audits: Annual third-party security assessments, SOC 2 Type II compliance where applicable, and right-to-audit clauses.
• Liability Clauses: Vendors assume full responsibility for breaches originating from their infrastructure.

5. Your Controls & Rights

You retain full authority over how your information is shared:

• Opt-Out of Analytics: Disable tracking via your account settings or browser preferences.
• Cookie Management: Control third-party cookies through our consent manager or browser settings.
• Data Portability: Request a machine-readable export of all data shared with third parties on your behalf.
• Deletion Requests: Instruct us to notify third parties to purge your data within 30 days (subject to legal retention requirements).
• GDPR/CCPA Rights: Submit formal requests for access, correction, restriction, or objection via our privacy portal.

6. International Data Transfers

As a global news organization, some third-party services operate outside your country of residence. We ensure compliance through:

• EU Standard Contractual Clauses (SCCs) for all cross-border transfers
• Supplementary measures including binding corporate rules and technical safeguards
• Regular monitoring of adequacy decisions and regulatory changes
• Transparent disclosure of data routing and storage locations in our Global Data Map

7. Policy Updates

We review this section quarterly to reflect changes in our partnerships, legal requirements, and privacy standards. Significant updates will be communicated via email and in-app notification at least 30 days before implementation. Your continued use of Aevum News services constitutes acceptance of updated terms.