Last updated: May 2026
Avalw S.R.L.
Romania, European Union
Data Protection Officer (DPO): office@avalw.com (Subject: DPO)
This Privacy Policy explains how Avalw S.R.L. ("AVALW," "we," "us," or "our") collects, uses, stores, and protects your personal data when you visit AVALW.COM ("the Platform"). We are committed to protecting your privacy and processing your data in compliance with applicable data protection laws.
This Privacy Policy is designed to comply with the following regulations:
For jurisdictions not listed above, AVALW applies the highest applicable standard, which is generally the EU GDPR.
AVALW News is designed with data minimization as a core principle. We do not require user accounts, logins, or registrations to access the Platform. The data we collect is limited to what is strictly necessary for the operation and security of the service.
| Data | Purpose | Retention | Legal Basis |
|---|---|---|---|
| IP address | Rate limiting and abuse prevention | Not stored persistently; used in-memory only | Legitimate interest (Art. 6(1)(f)) |
| Consent preference | Recording your cookie/consent choice | 12 months (localStorage) | Legal obligation (Art. 6(1)(c)) |
| View counts | Internal analytics (aggregate, anonymous) | Indefinite (no personal data) | Legitimate interest (Art. 6(1)(f)) |
| Email address (newsletter only) | Sending newsletter to subscribers | Until unsubscribe | Consent (Art. 6(1)(a)) |
| Verification code (newsletter only) | Confirming newsletter subscription | Deleted after verification | Consent (Art. 6(1)(a)) |
We use the data we collect for the following purposes only:
We do not use your data for profiling, behavioral advertising, content personalization based on user tracking, or any form of automated decision-making that produces legal effects concerning you.
| Item | Type | Purpose | Duration |
|---|---|---|---|
| Consent preference | localStorage | Records whether you accepted or rejected cookies | 12 months |
| View counter | Server-side | Counts page views (anonymous, aggregate) | N/A (no client-side storage) |
| Newsletter subscription | Server-side | Stores email for newsletter delivery | Until unsubscribe |
The Platform loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When you visit the Platform, your browser makes requests to Google's servers to download these font files. This means Google receives your IP address and standard HTTP request headers.
AVALW does not control how Google processes this data. Google's handling of this information is governed by Google's Privacy Policy. We use Google Fonts for typographic quality and do not use any other Google services on the Platform.
AVALW offers an optional email newsletter. If you choose to subscribe:
| Data | Retention Period | Deletion Method |
|---|---|---|
| IP addresses | Not stored (in-memory only during request processing) | Automatic (memory cleared) |
| Consent preference | 12 months | Automatic expiry or manual browser clear |
| Newsletter email | Until unsubscribe + 30 days | Permanent deletion from database |
| Verification codes | Deleted immediately after use or within 24 hours if unused | Automatic deletion |
| View counts | Indefinite (anonymous aggregate data, not personal data) | N/A |
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
| Right | GDPR Article | Description |
|---|---|---|
| Right of access | Article 15 | Request a copy of any personal data we hold about you |
| Right to rectification | Article 16 | Request correction of inaccurate personal data |
| Right to erasure | Article 17 | Request deletion of your personal data ("right to be forgotten") |
| Right to restrict processing | Article 18 | Request that we limit how we use your data |
| Right to data portability | Article 20 | Receive your data in a structured, machine-readable format (JSON/CSV) |
| Right to object | Article 21 | Object to processing based on legitimate interest |
| Right to withdraw consent | Article 7(3) | Withdraw consent at any time (e.g., newsletter unsubscribe) |
To exercise any of these rights, contact office@avalw.com (Subject: Privacy). We will respond within 30 days as required by GDPR Article 12(3). In complex cases, this may be extended by an additional 60 days, and we will inform you of any extension within the initial 30-day period.
Exercising your rights is free of charge. We may charge a reasonable fee for manifestly unfounded or excessive requests, as permitted by GDPR Article 12(5).
AVALW does not engage in any automated decision-making or profiling that produces legal effects or similarly significantly affects users, as described in GDPR Article 22. Our AI systems are used exclusively for content creation (article synthesis and image generation), not for making decisions about individuals.
AVALW operates the AVALW Live Protocol, a real-time broadcast monitoring system that processes audio from publicly available live television news streams to generate original news articles. This section explains what data is and is not processed by this system.
Processing of broadcast content under the AVALW Live Protocol is based on:
| Data | Retention | Notes |
|---|---|---|
| Audio buffers | 0 seconds (not stored) | Processed in memory, immediately discarded |
| Raw transcripts | Deleted after article generation | Typically within minutes of creation |
| Published articles | Indefinite | Original works; do not contain broadcast content |
If you are a public figure mentioned in an AVALW Live Protocol article and wish to request a correction or removal, contact office@avalw.com (Subject: Live Protocol). Requests are reviewed on a case-by-case basis, balancing the right to privacy with the public interest in news reporting.
Broadcasters who wish to exclude their channel from monitoring may request an opt-out at office@avalw.com (Subject: Live Protocol Opt-Out).
AVALW's infrastructure is located in the European Union (Romania). We process data primarily within the EU/EEA.
When data is transferred outside the European Economic Area (such as through the use of Google Fonts), we ensure an adequate level of protection through:
As required by UK GDPR Article 27, users in the United Kingdom may direct data protection inquiries to our UK point of contact: legal@avalw.com (Subject: UK GDPR). We are in the process of appointing a formal UK representative and will update this section upon completion.
AVALW News is not available in jurisdictions requiring a news publishing license that has not been obtained, including the People's Republic of China. See Section 15 of our Terms and Conditions for details.
AVALW implements appropriate technical and organizational measures to protect personal data, in accordance with GDPR Article 32:
AVALW News is a general-audience news platform. We do not knowingly collect, store, or process personal data from children under the age of 16.
The Platform does not require registration or login, so we have no mechanism to verify the age of visitors. If we become aware that we have inadvertently collected personal data from a child under 16 (for example, through a newsletter subscription), we will delete that data immediately upon discovery.
If you are a parent or guardian and believe your child has provided personal data to AVALW, please contact us at office@avalw.com (Subject: Privacy) and we will promptly delete the information.
In the event of a personal data breach, AVALW follows the procedures required by GDPR Articles 33 and 34:
| Stage | Timeline | Action |
|---|---|---|
| Detection | T+0 | Breach identified and containment measures initiated immediately |
| Assessment | T+24h | Scope, severity, and risk assessment completed |
| Authority notification | T+72h | ANSPDCP (Romanian DPA) notified if breach poses risk to individuals (GDPR Art. 33) |
| Individual notification | Without undue delay | Affected individuals notified if breach poses high risk to their rights and freedoms (GDPR Art. 34) |
| Post-incident report | T+7 days | Root cause analysis and remediation report completed |
Notifications to affected individuals will include: the nature of the breach, the data involved, likely consequences, measures taken to address the breach, and contact details for further information.
We never sell, rent, or trade personal data to any third party.
Limited data exposure may occur through:
Personal data may be disclosed to law enforcement or regulatory authorities only in response to a valid court order or binding legal obligation under Romanian or EU law.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
AVALW does not sell or share personal information. We do not engage in targeted advertising, behavioral profiling, cross-context behavioral advertising, or data brokerage of any kind.
To exercise your California privacy rights, contact office@avalw.com (Subject: CCPA Request). We will respond within 45 days as required by law.
Avalw S.R.L. reserves the right to update this Privacy Policy. When changes are made:
For any questions, concerns, or requests related to your personal data or this Privacy Policy:
We aim to respond to all privacy-related inquiries within 30 days.
If you are unsatisfied with our response or believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.
Romanian supervisory authority (ANSPDCP):
EU residents may also lodge a complaint with the data protection authority in their country of residence.
Canadian residents are protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the upcoming Consumer Privacy Protection Act (CPPA). You may file a complaint with the Office of the Privacy Commissioner of Canada: www.priv.gc.ca.
Australian residents are protected under the Privacy Act 1988 and the 13 Australian Privacy Principles (APPs). You may file a complaint with the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au.
Brazilian residents are protected under Lei Geral de Proteção de Dados (LGPD), Law No. 13,709/2018. You have the right to access, correct, anonymize, delete, or obtain a copy of your personal data. Complaints may be filed with the Autoridade Nacional de Proteção de Dados (ANPD): www.gov.br/anpd.
Japanese residents are protected under the Act on the Protection of Personal Information (APPI). AVALW complies with APPI requirements regarding the collection, use, and disclosure of personal information. Complaints may be filed with the Personal Information Protection Commission (PPC): www.ppc.go.jp.
Users in the People's Republic of China are protected under the Personal Information Protection Law (PIPL). AVALW does not operate servers within China and does not collect personal information beyond what is described in this policy. For inquiries, contact office@avalw.com (Subject: PIPL).
Indian residents are protected under the Digital Personal Data Protection Act, 2023 (DPDP Act). You have the right to access, correct, and erase your personal data. AVALW processes minimal personal data and does not require user registration. For data-related requests, contact office@avalw.com (Subject: DPDP).
South Korean residents are protected under the Personal Information Protection Act (PIPA), as amended in 2026 with fines up to 10% of total revenue for serious violations. AVALW complies with PIPA requirements. Complaints may be filed with the Personal Information Protection Commission (PIPC): www.pipc.go.kr.
Users in Türkiye are protected under Kişisel Verileri Koruma Kanunu (KVKK), Law No. 6698. You have the right to request information about your data, its correction, or deletion. Complaints may be filed with the Kişisel Verileri Koruma Kurumu: www.kvkk.gov.tr.
Thai residents are protected under the Personal Data Protection Act (PDPA), B.E. 2562 (2019). You have the right to access, correct, delete, and withdraw consent for your personal data. Complaints may be filed with the Personal Data Protection Committee or the Expert Committee under the PDPA.
Users in the United Arab Emirates are protected under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. You have the right to access, correct, and request deletion of your data. Complaints may be filed with the UAE Data Office.
If you reside in a jurisdiction with data protection laws not specifically listed above, AVALW commits to processing your data in accordance with the highest applicable standard, which is generally the EU GDPR. You may exercise your rights by contacting office@avalw.com (Subject: Privacy).