Section 8: Data Retention
At Aevum News, we are committed to processing personal data in an efficient and secure manner. This section outlines our data retention policies, specifying how long we retain different categories of personal data and the criteria used to determine those periods.
We do not retain personal data for longer than is necessary for the purposes for which it was collected. Where required, data is retained in anonymized or aggregated form for statistical analysis and journalistic research.
âšī¸ Guiding Principle
Retention periods are based on the minimum period required to achieve the purpose for which the data was collected, compliance with legal obligations, and our legitimate business interests.
Data Retention Schedule
The following table details the retention periods for specific categories of data processed by Aevum News. "Active" refers to the duration of the user's active engagement with our services.
| Data Category | Purpose | Retention Period | Legal Basis |
|---|---|---|---|
| User Account Data Email, Username, Hashed Password |
Account management, authentication | Active + 24 months | Contract, Consent |
| Subscription & Payment Transaction IDs, Billing info |
Processing payments, tax compliance | 7 years | Legal Obligation |
| User Comments Content, IP, Timestamp |
Community interaction, moderation | Indefinite (Anonymized after 5 years) | Legitimate Interest |
| Newsletter Subscriptions Email, Preference data |
Marketing communications | Until Unsubscribe | Consent |
| Server & Access Logs IP, Device info, Timestamps |
Security, fraud prevention, analytics | 12 months | Legitimate Interest |
| Cookie & Tracking Data Usage patterns, analytics |
Service improvement, personalization | 13 months | Consent |
| Customer Support Tickets Correspondence logs |
Support resolution, quality assurance | Active + 24 months | Contract |
Legal & Regulatory Compliance
Aevum News operates globally and must adhere to various data protection frameworks, including but not limited to:
- âĸ GDPR (EU/UK): Requires data minimization and defined retention periods.
- âĸ CCPA/CPRA (California): Grants rights regarding data retention and deletion.
- âĸ Tax & Commercial Law: Mandates retention of financial records for audit purposes.
Where legal obligations exceed our internal retention needs, we retain data for the duration required by law. Upon expiration, data is securely deleted or permanently anonymized.
Anonymization & Aggregation
Aevum News values historical data for journalism research and trend analysis. When retention periods expire, we may retain data in an anonymized form that cannot be used to identify individuals.
đ What is Anonymization?
Anonymization involves removing or altering personal identifiers (such as names, emails, and IP addresses) so that the data cannot reasonably be used to identify an individual. Once anonymized, the data is no longer considered "personal data" under GDPR and can be retained indefinitely for statistical purposes.
Aggregated data (e.g., "50% of readers in Region X prefer politics") is derived from personal data but does not identify individuals and is not subject to retention limits.
Your Rights Regarding Data Retention
You have specific rights regarding how long we keep your data. You may exercise these rights at any time via your account settings or by contacting our Data Protection Officer.
Right to Erasure
Request deletion of your data before the retention period expires, subject to legal obligations.
Right to Access
Obtain a copy of the personal data we hold and information about its retention period.
Right to Restrict
Request that we pause processing of your data while retention disputes are resolved.
Right to Portability
Receive your data in a machine-readable format to transfer to another service.
Exceptions to Retention Periods
We may retain data beyond standard periods in the following exceptional circumstances:
- Legal Disputes: If data is relevant to an ongoing legal claim, investigation, or litigation.
- Archival Public Interest: Data necessary for journalistic archiving, research, or academic purposes where public interest outweighs privacy risks.
- Fraud Prevention: Data associated with suspected fraud or security incidents may be retained for investigation.
- Regulatory Requests: Data may be preserved upon request by law enforcement or regulatory bodies.
Questions About Data Retention?
If you need clarification on our retention policies, wish to submit a data deletion request, or have concerns about how your data is stored, please contact our Data Protection Office.
đ§ dpo@aevum.newsOr write to: Aevum News Privacy Office, 1200 Journalism Blvd, Suite 400, Media City, MC 90210