GDPR Compliance Statement for Amsterdam Escort XXX
Legal Basis and Role of the Data Controller
Scope of Applicability
This statement applies to all users interacting with the agency via its website, forms, email, phone, or in person. It applies to:
- Clients requesting companionship or related services
- Independent escorts affiliated with the agency
- Website visitors and registered users
- Newsletter subscribers
- Technical service providers and partners handling data under contract
Purposes and Legal Grounds for Data Processing
Personal data is processed only when there is a valid legal basis under Article 6 GDPR:
- Consent (Art. 6(1)(a)) – for newsletters or marketing communication
- Contract performance (Art. 6(1)(b)) – for bookings, inquiries, and account creation
- Legal obligation (Art. 6(1)(c)) – in case of requests by Dutch authorities or compliance with criminal laws
- Legitimate interest (Art. 6(1)(f)) – for internal analytics, fraud prevention, and operational security
Categories of Personal Data Processed
We collect the following categories of personal data, depending on the nature of your interaction:
- Full name or alias (optional)
- Email address and phone number
- Client preferences for appointments
- Escort profile data: images, pseudonyms, availability
- IP address and browser/device details
- Location area (only if voluntarily disclosed)
Processing Activities and Forms
Security Measures
In line with Article 32 GDPR, Amsterdam Escort XXX has implemented appropriate technical and organizational safeguards, including:
- HTTPS encryption (SSL/TLS) for all data transmission
- Restricted access to personal data based on roles
- Secure hosting infrastructure in the Netherlands
- Regular internal audits and risk assessments
Data Retention
- Data processed for contractual purposes: retained until contract execution or termination
- Consent-based data: retained until consent is withdrawn
- Analytics logs: stored for max. 12 months
- Escort listings: deleted within 14 days of account deactivation
- Legal claims: data may be retained up to 5 years in line with Dutch civil law
Third-Party Access and Data Processors
Access to personal data is strictly limited to:
- Internal staff under confidentiality agreements
- Website hosting and email service providers (located in the Netherlands or EEA)
- Legal counsel or government authorities (only under legal obligation)
All processors are bound by GDPR-compliant contracts (Art. 28 GDPR).
International Transfers
Amsterdam Escort XXX does not transfer personal data outside the European Economic Area. If an exception arises, we will ensure proper safeguards via:
- Standard Contractual Clauses (SCCs)
- Transfers to countries with EU adequacy decisions
- Explicit user consent (Art. 49 GDPR)
Cookies Policy
The website uses cookies for the following purposes:
- Maintaining session integrity and preferences
- Traffic analytics (using anonymized data)
- Security and fraud prevention
You may disable cookies in your browser settings at any time. No third-party tracking or advertising cookies are used.
Your Rights Under GDPR
As a data subject under the General Data Protection Regulation (GDPR), you are granted several core rights that empower you to control how your personal information is collected, processed, stored, and shared. Divas Amsterdam is fully committed to upholding these rights in every aspect of its operations. Below is an overview of your key data protection rights and what they mean in practice:
- Access to your personal data (Article 15):
You have the legal entitlement to request a copy of the personal data we hold about you. This includes details about how we process it, with whom it may be shared, and for what purposes. We will provide this information transparently and without unnecessary delay. - Requesting corrections (Article 16):
If any of the data we hold about you is inaccurate, outdated, or incomplete, you can ask us to correct or update it. We are obligated to make these changes as promptly as possible once your request is verified. - Erasure of your data (Article 17 – “Right to be forgotten”):
In specific cases, you may request that we delete your personal data entirely — for example, when the data is no longer necessary, or you have withdrawn consent. We will honor such requests unless we are legally required to retain the data for a specific period. - Limiting how your data is used (Article 18):
You may ask us to temporarily restrict the processing of your data, especially while a correction or objection is being considered. During this restriction period, we may store your data but will not process it further unless permitted by law or with your consent. - Receiving your data in portable format (Article 20):
You can request to receive your personal data in a structured, commonly used, and machine-readable format. Additionally, you may ask us to transmit this data directly to another data controller, where technically feasible. - Objecting to certain types of processing (Article 21):
You have the right to object to the processing of your data when it is based on legitimate interest or used for direct marketing. Once you object, we will cease processing your data for those purposes unless compelling legitimate grounds override your request. - Withdrawing consent at any time (Article 7):
If we rely on your consent to process your personal data (e.g., for newsletters or optional cookies), you may withdraw that consent at any time. Withdrawal does not affect the legality of prior processing, but we will stop using your data moving forward. - Filing a complaint with a supervisory authority:
If you believe that your data rights have been violated or mishandled, you have the right to lodge a complaint with the Dutch Data Protection Authority, known as Autoriteit Persoonsgegevens. We encourage you to contact us first to resolve any issues, but you are always free to exercise this right independently.