Privacy and Data Protection Policy

This update explains transparently what data we use, why, for how much and what rights you have.

1. Data we process

Endexevai na epexepcagdmapve: dnoma, email, vhlefohno and pvoixeia pyndephs· hmepomhnia cennhphs or epibebaiohph 18+· evaipiMrd pvoixeia, pdlo, ΑΦΜ/VAT and eMrppopohphph· model city, features and professional experience; photos, videos, comp cards and proof of rights; availability, castings, applications, favorites, messages and private accesses; package, amount, currency, receipt and Stripe identifiers; IP, device, browser, timestamps, security/audit logs and cookies; support, complaints and history consents.

We do not store full card details. We do not use facial recognition or biometric identification. Regular photos are not treated as biometric data unless subjected to special technical processing for unique identification.

Me vhn epilocor «Stats» mevpdme pucMrenvpohviMrd ppoboles and model profile and an ecinan by pundedemeno epaccelmaviMrd locapiapmd. Pepiopigoume vis epanalambandmenes ppoboles cia 30 minutes me ppopohpind Mrleidi and den diavhpoyme pvon pinaMra ppobolohn IP, browser or vauvdvhva epipMrepvh. Ta pucMrenvpohviMrd pvoixeia ppobdllonvai mdno pvh diaxeipiph and diacpdfonvai magi me vo profiles.

2. Sources

We receive data from the user himself, authorized representative, other booking party when necessary, Stripe as transaction confirmation and automatically from usage. When data comes from a third party, we provide the required update outside of the statutory exception.

3. Purposes and Legal Basis

• Account, dhmioupcia and dhmopieuph profiles Mravdpin aivormavos of the model, portfolio, castings, applications, pundpomor and upopvorpixh: eMrveleph pymbaphs or ppopumbaviMrd mevpa.
• Documents, tax records and legal authority requests: legal obligation.
• Security, fraud prevention, logs, moderation and claims defense: legitimate interest after weighting.
• Newsletter, optional marketing and non-necessary cookies: consent, where required.
• Specific commercial use of image: written contract/license and other appropriate basis where required.

4. Recipients

Access is limited to authorized personnel and the necessary hosting, email/SMTP, security/CDN, backup, technical-support and consent-management providers. Stripe receives the necessary payment, billing, fraud prevention and subscription data. We do not use analytics or marketing tags prior to the required consent.

The dhmdpio profiles and uliMrd ppobdllonvai pe epipMrepves, enoh ppopvaveumena pvoixeia and idiohviMrd uliMrd emfanigonvai mdno pvis Mravhcopies epalhieumenohn professionals and me vis ecMrpipeis pou pepicpdfei h uphpepia. H plhpohmenh ppdpbaph den papaxohpei diMraiohma anvicpafors or xporphs eiMrdnas. Dedomena cnohpvopoioynvai pe apxes or pumboylous dvan required by law or necessary for a claim.

5. Transfers outside the EEA

Opou pdpoxos epexepcdgevai eMrvds ΕΟΧ, xphpimopoioyme byfaph epdpMreias, Tupopoihmenes SumbaviMres Porvpes and, dvan apaiveivai, pumplhpohmaviMrd mevpa. Plhpofopies for warranties are available upon request.

6. Retention Times

• Active account and profile: as long as it remains active.
• Deleted portfolio/private material: from active systems without undue delay and from backups within up to 90 days.
• Pepiopipmeno idiohviMrd ipvopiMrd eccpafors model: dnoma, email, dhlohmeno Instagram, MrohdiMrds and hmepomhnies eccpafors/diacpafors to 24 mornes cia apfdleia, diepeynhph pfdlmavos, apovpopor Mravdxphphs and veMrmhpiohph vhs leivoupcias. Den pepilambdnei photos, portfolio, vhlefohno, hliMria or xapaMrvhpipviMrd emfdniphs.
• Automatic diacpafor ecMravaleleimmenhs eccpafors: pepiopipmeno idiohviMrd pvicmidvupo to 24 mornes cia apfdleia, diepeynhph pfdlmavos and veMrmhpiohph.
• Incomplete registration: warning and automatic deletion according to the 3/7, 7/14 or 14/21-day route shown in the account.
• Castings, applications and private accesses: up to 24 months after closing, unless otherwise stated.
• Security logs: up to 12 months, excluding incident.
• Support, anafopes pepiexomenou and Mravaccelies: to 24 mornes or pepippdvepo cia ndmimh axiohph.
• Active newsletter: only name and email are retained until withdrawal. After unsubscribing, minimal evidence of the objection is retained for up to five years.
• Documents and transactions: for as long as Greek tax law requires, usually at least 5 years and more when there is a legal extension or audit.

7. Security and Incidents

We use HTTPS, password hashing, access control, privilege restriction, backups, critical action logging and incident processing. Where required, we report a breach to the supervisory authority within 72 hours and notify affected persons when there is a high risk.

8. Rights

You can request access, correction, erasure, restriction, portability, objection and withdrawal of consent, as well as human intervention in important purely automated decision. We normally respond within one month and may request reasonable identity verification.

Request: privacy@wmodels.agency. You can report the processing to the competent authority of the place of residence, work or violation, such as the Greek Data Protection Authority at dpa.gr or the Cypriot Commissioner at dataprotection.gov.cy.

9. Delete account

H diacpafor afaipei locapiapmd, profiles, photos and enepcd pepiexdmeno. Cia locapiapmd model mpopei na papameinei cia to 24 mornes mdno vo pepiopipmeno idiohviMrd ipvopiMrd eccpafors pou anafepevai papapdnoh. Den diavhpoynvai photos, portfolio, vhlefohno, hliMria or xapaMrvhpipviMrd emfdniphs. Exaipoynvai epiphs xohpipvd files pou einai anacMraia cia fopolociMror upoxpeohph, enepcor pucMravdieph newsletter, apfdleia/apoMrleipmd Mravdxphphs, eMrMrpemes booking or nomiMror axiohph. H aMrypohph pundpomors, h diacpafor locapiapmoy and h andMrlhph pucMravdiephs newsletter einai diafopeviMres enepceies.

10. Newsletter

Newsletters are sent by email only after separate, freely given and clear consent. Deleting the account does not by itself withdraw this separate choice. While it remains active, only the name and email address are retained; phone numbers and Instagram are not kept for this purpose. Every newsletter includes a free unsubscribe link. After withdrawal, delivery stops and only the minimum evidence of the objection is retained to prevent accidental re-enrolment.

11. Changes

The current version is always here. For material changes, appropriate advance notice is provided where required.

Last substantial update: 28 September 2026.