GDPR & Privacy Policy

01 Scope & Definitions

This Privacy Policy governs how Aevum Zenth Conglomerate and its global subsidiaries, affiliates, and operating divisions (collectively, "Aevum Zenth," "we," "our," or "us") collect, use, process, share, and protect personal data. This policy applies to all individuals interacting with our digital platforms, corporate services, divisional operations, employees, contractors, and business partners.

Where required by applicable law, including the European Union's General Data Protection Regulation (GDPR), UK GDPR, CCPA/CPRA, and other regional privacy frameworks, this document complies with statutory transparency, consent, and data subject rights obligations.

02 Data Controller & Data Protection Officer

Aevum Zenth Conglomerate acts as the primary data controller for personal data processed through our corporate headquarters and centralized systems. Specific divisional operations may act as independent controllers or processors where legally mandated.

03 Information We Collect

We collect personal data only when necessary for legitimate business, legal, and operational purposes. Categories include:

• Identifiers: Name, email, phone, postal address, IP address, device IDs, employee/business IDs.
• Demographic & Profile Data: Age range, occupation, industry, preferences, communication history.
• Financial & Transactional: Payment details, billing addresses, contract terms, procurement records (processed via PCI-DSS compliant providers).
• Technical & Usage Data: Browser type, OS, page views, clickstream, session duration, error logs, analytics identifiers.
• Sensitive/Special Category Data: Processed only with explicit consent or legal necessity (e.g., health data via Zenth Health Sciences, employment verification, background checks).
• Biometric & Authentication: Used solely for secure system access and fraud prevention under strict governance.

04 How We Use Your Data

Personal data is processed for the following core purposes:

• Delivering, maintaining, and improving our divisional products and corporate services
• Fulfilling contractual obligations and processing transactions
• Communicating account updates, security alerts, and operational notices
• Conducting market research, business intelligence, and R&D innovation
• Ensuring cybersecurity, fraud prevention, and compliance auditing
• Personalizing user experiences and targeted enterprise solutions
• Responding to regulatory inquiries and legal obligations

05 Legal Basis for Processing (GDPR)

Under Article 6 GDPR, we process personal data based on:

1. Contractual Necessity: Providing services you've requested or purchased
2. Legal Obligation: Complying with tax, employment, safety, and industry regulations
3. Consent: Optional marketing, newsletters, and non-essential cookies
4. Legitimate Interests: Fraud prevention, network security, business analytics, and operational efficiency (assessed against data subject rights)
5. Vital Interests: Emergency situations involving life-threatening risks

06 Data Sharing & Third Parties

We do not sell personal data. Sharing occurs only when necessary and under strict contractual safeguards:

• Affiliates & Subsidiaries: For unified service delivery, internal reporting, and compliance across our 400+ divisions
• Service Providers: Cloud hosting, payment processing, logistics, HR platforms, and cybersecurity vendors (all bound by DPA/SCCs)
• Legal & Regulatory: Government agencies, courts, or law enforcement when required by law or to protect rights
• Business Transfers: In the event of mergers, acquisitions, or asset sales, with prior notice and continued privacy commitments

07 International Data Transfers

Aevum Zenth operates globally. Personal data may be transferred, stored, and processed in countries outside your jurisdiction, including Switzerland, the US, UK, EU, Japan, Singapore, and UAE. We ensure compliance through:

• EU Standard Contractual Clauses (SCCs)
• UK International Data Transfer Addendum
• Transfer Impact Assessments (TIAs) and supplemental safeguards
• Binding Corporate Rules (BCRs) for intra-group transfers

08 Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and jurisdiction but generally range from 2 to 7 years post-relationship. Anonymized or aggregated data may be retained indefinitely for research and analytics.

09 Your Rights Under GDPR & Applicable Law

Depending on your location and applicable law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure (Right to be Forgotten): Request deletion where no legal basis exists
• Restriction: Limit processing during verification or legal disputes
• Portability: Receive data in a structured, machine-readable format
• Objection: Opt-out of direct marketing or legitimate interest processing
• Withdraw Consent: At any time, without affecting prior lawful processing

10 Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies for:

• Essential: Security, authentication, session management (cannot be disabled)
• Analytics: Performance monitoring and usage trends
• Functional: Preferences, language, and accessibility settings
• Marketing: Targeted content and campaign measurement (opt-in)

You can manage preferences via our Cookie Consent Manager or browser settings. Disabling essential cookies may impact service functionality.

11 Children's Privacy

Aevum Zenth services are not directed to individuals under 16 (or applicable age of consent in your jurisdiction). We do not knowingly collect data from minors. If you believe a child has provided personal data, contact us immediately at privacy@aevumzenth.com for prompt deletion.

12 Policy Updates

This policy is reviewed regularly and updated to reflect technological, organizational, or legal changes. Material changes will be communicated via email, platform notices, or direct correspondence. Continued use of our services following updates constitutes acceptance of the revised terms.