This notice supplements our Privacy Policy and describes how The AI Data Company, a division of Devin Media Corp, processes personal data of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland under the EU and UK General Data Protection Regulation ("GDPR").
1. Controller
For personal data collected through this website and our inquiry forms, Devin Media Corp acts as the data controller. When we process data on behalf of a publisher or enterprise customer under a data licensing agreement, we act as a processor for that party, subject to the terms of the applicable agreement and Data Processing Addendum (DPA).
2. Categories of personal data
- Business contact details (name, work email, company, role).
- Content of messages and partnership inquiries you send us.
- Technical data (IP address, browser, device, timestamps).
- Anti-abuse signals from Cloudflare Turnstile.
3. Purposes and legal bases
- Responding to inquiries and administering partnerships — legitimate interests and, where applicable, steps to enter into a contract.
- Security, fraud prevention, and rate limiting — legitimate interests in protecting our services.
- Analytics and product improvement — legitimate interests or consent, depending on the tools used.
- Legal and regulatory compliance — compliance with a legal obligation.
4. International transfers
We transfer personal data to the United States and other jurisdictions where we or our sub-processors operate. Where required, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) to safeguard transfers.
5. Retention
We keep personal data only for as long as necessary for the purposes described above and to meet legal obligations, typically no longer than 24 months after our last interaction unless a longer period is required.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data.
- Request erasure ("right to be forgotten").
- Restrict or object to processing.
- Data portability, where applicable.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local supervisory authority.
7. Exercising your rights
To exercise any of these rights, contact us via the contact form on our homepage and select "Other" as the interest with your request in the message. We may need to verify your identity before responding. We aim to respond within one month.
8. Sub-processors
We engage vetted service providers to host our infrastructure, deliver transactional email, secure our forms, and support customer communications. A current list of sub-processors is available on request under an executed DPA.
9. Data Protection contact
For GDPR-specific questions, contact Devin Media Corp, Attn: Data Protection, via the contact form on our homepage. An EU/UK representative will be appointed where legally required and identified on request.