AirMedia is committed to ensuring the protection and privacy of personal information, recognising the importance of adhering to the stringent requirements set forth by the General Data Protection Regulation (GDPR), which governs data protection and privacy in the European Union (EU) and the European Economic Area (EEA), as well as the transfer of personal data outside the EU and EEA areas.
As a UK-based company, AirMedia acknowledges its obligation to comply with GDPR, as well as any relevant UK legislation that aligns with or supplements GDPR post-Brexit. Herein, we detail our approach and practices to ensure GDPR compliance:

Data Protection Principles

AirMedia adheres to the core data protection principles of GDPR, ensuring that personal data is:
- Processed lawfully, fairly, and in a transparent manner.
- Collected for specified, explicit, and legitimate purposes.
- Adequate, relevant, and limited to what is necessary.
- Accurate and kept up to date.
- Stored no longer than necessary.
- Processed in a manner that ensures appropriate security.
- Lawful Basis for Processing

We process personal data on a lawful basis, including but not limited to, consent from the data subject, processing necessary for the performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task carried out in the public interest, and for the purposes of legitimate interests pursued by us or a third party.

Rights of Data Subjects

AirMedia fully supports and facilitates the rights of data subjects under GDPR, including:
- The right to be informed.
- The right of access.
- The right to rectification.
- The right to erasure.
- The right to restrict processing.
- The right to data portability.
- The right to object.
- Rights in relation to automated decision-making and profiling.

Data subjects can exercise these rights by contacting AirMedia directly through the provided contact information.

Data Transfers

AirMedia ensures that any transfer of personal data outside the EU and EEA is conducted in compliance with GDPR, utilising mechanisms such as Standard Contractual Clauses or adherence to recognised frameworks that ensure an adequate level of protection for personal data.

Data Security

We implement robust technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage, ensuring a level of security appropriate to the risk.

Breach Notification

In the event of a personal data breach, AirMedia will promptly notify the relevant supervisory authority and, when applicable, the data subject, in accordance with GDPR requirements.

Continuous Compliance

AirMedia commits to ongoing assessment and adjustment of our data protection practices to maintain compliance with GDPR and to reflect any changes in data protection laws, ensuring continuous protection of personal data.

This GDPR compliance statement is designed to affirm AirMedia's commitment to data protection and privacy, outlining our practices and principles in line with GDPR requirements.