Privacy notice

Who is responsible for your data

Christian Hebenstreit, Kanalstraße 5e, 39326 Jersleben, Deutschland. Email: kontakt@escort-österreich.com; phone: +49 172 3960666.

Privacy requests may be submitted by email. To prevent unauthorised disclosure, proportionate proof of identity may be required; only information necessary for that check will be requested.

Public use without a customer account

Visitors can use city pages, search and profiles without an account. We process only the connection data needed to display pages and prevent abuse. Full IP addresses are not kept in our usage statistics.

Favourites and the 18+ confirmation remain on the device being used. We collect only anonymous daily totals for views, clicks and loading speed. They contain no contact details, persistent identifiers or history across separate visits.

Provider data

For registration and profile operation we process account and contact data, stage name, stated age, languages and profile text, prices, services, city offers, areas, availability, travel, contact hours, images, consents, confirmation of image rights and independent work, and data relating to reviews and appeals.

For manual identity and age review, we process private documents. A short, randomly assigned personal task may be requested only where there is a specifically documented suspicion of forgery. Faces are not automatically recognised or measured. The record we retain is limited to the result, date, method, document type and country, expiry and reviewer.

A profile becomes public only after a complete review. Legal name, date of birth, precise address, private review evidence and internal decisions are not shown in the profile or search results.

Reports, safety and authority contact

For reports we process the affected URL or profile location, reason, explanation, good-faith declaration and optional contact details. Suspected child sexual offences can be reported without a name or email. A third-party reporter’s identity is not included in the reported provider’s data export.

Protective action, decisions, reasons, appeals and authorised government requests may be handled only by staff responsible for that work. The handling is securely documented. Data is not sent automatically to authorities or other external bodies.

Purposes and legal bases

We process data to provide accounts and free basic listings, take pre-contractual and contractual steps, deliver the site securely, prevent abuse, conduct manual verification and moderation, comply with legal duties, and handle reports, claims and data-subject rights. Depending on purpose, processing relies on Article 6(1)(a), (b), (c) or (f) GDPR.

Where profile or verification data reveals special categories of personal data, intended publication or other consent-dependent processing takes place only under separate explicit consent pursuant to Article 9(2)(a) GDPR. Withdrawal applies for the future and leads to publication-relevant data being hidden. Processing required by law or necessary for the establishment, exercise or defence of legal claims remains possible only within the permitted scope.

Consents

We request separate, explicit and documented consent under Article 9(2)(a) GDPR for the intended publication of sensitive profile data. Visibility in external search engines is a separate optional setting. Images, contact methods and German and English text supplied by the provider are parts of the profile she chooses; image rights and independent work are contractual declarations and are not labelled as consent.

Publication consent can be withdrawn for the future through the personal account area when available or through the contact point. A withdrawal concerning publication leads to the profile being hidden. Turning off only the optional search-engine setting leaves the profile reachable through direct platform routes but removes it from sitemap and indexing approval. Acceptance of the terms and separate acknowledgement of this privacy notice are recorded independently.

Retention

We aim to delete submitted identity documents and any specifically requested authenticity recordings within 72 hours after the final decision; this is not a statutory or guaranteed deadline. They are kept longer only where this is specifically justified, time-limited and required by law or necessary for legal claims. Unfinished uploads are deleted after 24 hours and verification messages after seven days.

Without renewed confirmation, a profile is hidden after 30 days, archived without public images after 60 days and deleted after 90 days. Where further retention is required by law or necessary for legal claims, only the essential information is kept. Phone verification is normally renewed every 90 days.

Security and operating records are kept for 14 days, short-term abuse-prevention data for seven days and anonymous daily statistics for 30 days. Export files and download links expire after 24 hours. Backups are kept for no more than 35 days. Any different legal duty is limited by purpose, scope and review date.

Recipients and storage

We use Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, to host, deliver and technically protect this website. Vercel processes connection and log data needed for those purposes, in particular the IP address, time, requested URL, and browser and device information. Private review evidence is additionally encrypted. Apart from this hosting, we do not send data to external analytics, advertising, CAPTCHA, identity-checking, image-search, translation or AI services.

Vercel and its subprocessors may also process data in the United States or other locations. Where a transfer is not covered by an adequacy decision, the required safeguards, in particular Standard Contractual Clauses under Article 46 GDPR, are used. Intern, access is limited to people who need it for their work. Disclosure to authorities or other recipients requires a valid legal basis and is documented.

Your rights

Subject to the GDPR, people have rights to information and access, rectification, erasure, restriction, portability and objection and may withdraw consent for the future at any time. The personal account area supports data copies, correction, restriction, withdrawal and deletion requests when it is available; the contact point remains an alternative route.

You also have the right to complain to a competent data protection authority, in particular where you habitually live or work or where an alleged infringement occurred. Legal conditions and the rights of others may limit a request; reasons will be provided.

Automated decisions and updates

There is no solely automated first publication and no face recognition. Content may be hidden as a precaution, but approval and safety-critical decisions are always made by a person. Default ordering follows the published criteria and cannot be bought.

This notice is updated when our purposes, systems or the law change. Material changes are explained before taking effect.