Data Sharing & Disclosure Policy

1. Purpose & Scope

Aevum Zenth operates across 400+ subsidiaries spanning energy, technology, aerospace, healthcare, finance, and industrial sectors. Due to the nature of our multidivisional enterprise, data sharing occurs internally across business units and externally with carefully vetted partners. This policy ensures transparency, regulatory compliance (GDPR, CCPA, HIPAA, SOX, etc.), and the protection of stakeholder data.

2. Categories of Data Shared

We share only data necessary for legitimate business, legal, or safety purposes. This includes:

• Personal Identification Information (PII): Names, contact details, employment records, and client identifiers.
• Operational & Technical Data: Device identifiers, usage logs, system telemetry, and smart infrastructure metrics.
• Financial & Transactional Records: Payment details, contract terms, and audit trails (processed through Aevum Capital Group).
• Health & Biometric Data: Strictly limited to Zenth Health Sciences operations, shared only with explicit consent and HIPAA/GDPR compliance.
• Anonymized/Aggregated Data: Used for market research, AI model training, and cross-divisional analytics.

3. Who We Share Data With

Data sharing occurs under strict contractual obligations and data processing agreements (DPAs):

• Internal Subsidiaries: Cross-divisional data flows for integrated service delivery (e.g., logistics routing powered by Zenth Digital Systems).
• Third-Party Service Providers: Cloud hosting, payment gateways, cybersecurity vendors, and HR management platforms.
• Regulatory & Legal Authorities: Disclosures made in response to lawful requests, court orders, or mandatory compliance reporting.
• Strategic Partners & Joint Ventures: Shared only for specific collaborative projects, with data minimization principles enforced.
• Business Transfers: In the event of merger, acquisition, or restructuring, data may be transferred as a business asset under confidentiality safeguards.

4. International Data Transfers

As a global enterprise, data may be processed in jurisdictions outside your country of origin, including our global headquarters in Neo Geneva, and regional hubs in New York, London, Tokyo, and Singapore. We ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Advanced encryption (AES-256) in transit and at rest
• Regular third-party security audits and penetration testing

5. Your Rights & Controls

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Opt out of non-essential data sharing (marketing, cross-divisional analytics)
• Request data portability in machine-readable formats
• Lodge a complaint with a relevant data protection authority

Exercises of rights are typically processed within 30 days. Identity verification may be required to protect against unauthorized disclosures.

6. Data Security & Retention

Aevum Zenth maintains ISO 27001, SOC 2 Type II, and industry-specific certifications across all divisions. Data is retained only as long as necessary to fulfill the purpose for which it was collected, meet legal obligations, resolve disputes, and enforce agreements. Upon expiration, data is securely destroyed or irreversibly anonymized.

7. Policy Updates

We may update this policy to reflect changes in technology, regulations, or business operations. Material changes will be communicated via email, platform notifications, or prominent website banners. Continued use of Aevum Zenth services after updates constitutes acceptance of the revised terms.