Privacy Policy

Who is responsible?

The controller under the GDPR is UEC Limited, trading as Ultimate Escorts Models, Nikou Papageorgiou 5, 8250 Emba, Cyprus. For any data protection question, write to contact@ultimate-escort-models.com.

Because the company is based in the European Union, the GDPR applies directly.

What happens when you visit the website?

Whenever a page is requested, our hosting provider processes technical access data that every browser sends automatically:

• your device's IP address
• date and time of the request
• the page or file requested
• the previously visited page (referrer), if your browser sends it
• browser, operating system and language setting

We need this data to deliver the site, protect it against attacks and find errors. The legal basis is our legitimate interest in a secure, working website (Article 6(1)(f) GDPR). We do not use it to identify you and do not combine it with other data.

If you open only the domain name without any further path, our hosting provider sends you straight on to the German or the English home page. To do this it reads the first language setting of your browser. If that is neither German nor English, the country derived from your IP address decides: Germany, Austria, Switzerland, Liechtenstein and Luxembourg lead to German, all other countries to English. This happens only at the moment of the request; nothing is stored and no cookie is set. You can switch at any time with the language switcher. The legal basis is our legitimate interest in showing you the site in a suitable language straight away (Article 6(1)(f) GDPR).

All fonts, images and videos are hosted on our own server. No content from Google, Meta, YouTube or any other third party loads when you open a page. External links only take you to another site once you click them; that site's own privacy policy then applies.

Do we use cookies or tracking?

Only with your consent. On your first visit a banner asks whether we may use Google Analytics to count which pages are read. If you say no or make no choice, we set no cookies and load no analytics tool. We never use advertising pixels or retargeting.

If you agree, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics then sets the cookies “_ga” and “_ga_” with our measurement ID, each valid for up to two years, and processes information about your visit: pages viewed, time on the page, approximate origin (country, city), device, browser and the page you came from, and whether a form was submitted. Google does not receive the content of your application. According to Google, Google Analytics 4 does not store IP addresses. We keep the data in Google Analytics for two months and only use it in aggregated form to improve the website.

The legal basis is your consent (Article 6(1)(a) GDPR, Section 25(1) of the German TDDDG). You can withdraw it at any time via “Cookie settings” in the footer; the cookies in your browser are then deleted straight away. Google may also process data in the United States (see “Is data processed outside the EU?”). More in the Google Privacy Policy.

Apart from that, only a few purely technical entries are stored in your browser's storage, and no cookie: first, your choice in the cookie banner (key “uem-einwilligung”), so it does not appear again on every visit; second, on the magazine pages (key “uem-thema”), whether you chose the light or the dark design; third, markers for the two small notices “Feeling curious?” and newsletter (keys beginning with “uem-hw-”), so that a closed notice pauses for a while, does not return after you have applied or signed up, and at most one appears per visit; some of them only last for the current session. These entries never leave your device, contain no identifier, are not used for tracking and can be deleted at any time in your browser settings. They are strictly necessary for the functions you asked for (section 25(2) no. 2 of the German TDDDG and the equivalent ePrivacy rules).

What data does the application form collect?

The form only asks for what we need for a first conversation:

A hidden field only serves to block spam bots and contains no information about you.

If you arrive through a link that carries the identifier of an advertising campaign (a short keyword in the address, for example “quelle=portal-x”), we receive this identifier together with your application, so that we can see which campaign works. It contains no information about you. Nothing is stored on your device for this: the identifier stays only in the links of the page you are currently viewing and reaches us only when you submit the form. The same applies to the referral form and the newsletter sign-up.

To protect the form against automatically submitted spam, a Google reCAPTCHA box asks before sending whether a human is filling it in. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For this your browser loads a script from Google at the form, and Google processes your IP address, information about your browser and device and your behaviour on the page, and sets a cookie used only for this purpose. The legal basis is our legitimate interest in protecting the form against abuse (Article 6(1)(f) GDPR); access to your device is technically necessary for this (Section 25(2) no. 2 TDDDG). Google does not receive the content of your application. More in the Google Privacy Policy.

On what legal basis do we process your application?

We use your details to review your application and to talk with you about working together. These are pre-contractual steps taken at your request (Article 6(1)(b) GDPR).

Applying to an escort agency, and photos in particular, may reveal information about your sex life. Such information belongs to the special categories of personal data. We process it only with your explicit consent, which you give by ticking the box in the form (Article 9(2)(a) GDPR).

You can withdraw this consent at any time without giving a reason; a short message to contact@ultimate-escort-models.com is enough. We then delete your application. Processing carried out before the withdrawal remains lawful (Article 7(3) GDPR).

How does contact by email, phone or messenger work?

We get in touch through the channel you chose in the form. If you email us, we process your address and the content in order to reply (Article 6(1)(b) GDPR; for sensitive content Article 9(2)(a) GDPR).

If you choose WhatsApp or Signal, the conversation runs through that service. WhatsApp belongs to Meta and receives connection and contact data under its own terms; Signal states that it stores almost no data. Both encrypt messages end to end. If that matters to you, choose Signal or email.

How does the newsletter work?

On many pages you can sign up for our newsletter: new guides, cities and insights, once a month. For this we process your email address, the language and the page on which you signed up, and the time of your sign-up and of your confirmation. If your link carried the identifier of an advertising campaign, we receive that too with the sign-up (see application form). We need nothing else.

We use the double opt-in procedure: after you submit the form you receive an email with a confirmation link that is valid for seven days. Only when you click it do we add your address to the list. If you do not confirm, we do not add you. This way nobody can sign up someone else’s address.

The legal basis is your consent, which you give by ticking the box in the form and clicking the confirmation link (Article 6(1)(a) GDPR). You can withdraw it at any time: via the unsubscribe link in every newsletter email or with a short message to contact@ultimate-escort-models.com. Processing carried out before the withdrawal remains lawful.

The sign-up is first received by Netlify Forms, the form service of our hosting provider. From there it is passed to Resend, the service we use to send the confirmation email and the newsletter and to keep the list of subscribers (see “Who sees your data?”). We do not track whether you open our emails or click links in them.

Who sees your data?

Only a small team bound by confidentiality sees your application. We do not sell data, never pass it on to clients and never use it for advertising.

On the technical side we work with a few service providers who process data only on our behalf and on our instructions (Article 28 GDPR):

• Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA: website hosting and receipt of form submissions. More in the Netlify Privacy Statement.
• Our email provider: receiving and sending our emails, including notifications about new applications, referrals and newsletter sign-ups.
• Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA: sending the confirmation of your application and the application notification to us, the confirmation email and the newsletter, keeping the list of subscribers (email address, language, subscription status). More in the Resend Privacy Policy.
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: visitor statistics with Google Analytics, only with your consent.
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: spam protection of the forms with reCAPTCHA.

Authorities only receive data where a law obliges us to share it. Beyond that, we never pass your data on to outside third parties.

Is data processed outside the EU?

Yes, for hosting: Netlify is based in the United States. Netlify states that it is certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of protection (Article 45 GDPR); the EU Standard Contractual Clauses apply in addition (Article 46 GDPR).

For application emails and the newsletter: Resend (Plus Five Five, Inc.) is also based in the United States and processes the data there. Resend states that it complies with the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply here as well.

For Google Analytics: Google may also process data in the United States (Google LLC). Google states that it is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

For reCAPTCHA: Google may also process data in the United States (Google LLC). Google states that it is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

We make no other transfers to countries outside the EU.

How long do we keep your data?

We keep your data only as long as we need it: if we do not work together, we delete your application and photos no later than 90 days after receipt, immediately on request.

We keep data longer only if we need it to resolve a specific legal dispute.

What rights do you have?

At any time and free of charge, you can:

• ask what data we hold about you (Article 15 GDPR),
• have incorrect data corrected (Article 16),
• have your data deleted (Article 17),
• have processing restricted (Article 18),
• receive your data in a common format (Article 20),
• object to processing based on legitimate interests (Article 21),
• withdraw your consent (Article 7(3)).

An email to contact@ultimate-escort-models.com is enough; we reply within one month. You can also lodge a complaint with a data protection authority (Article 77 GDPR): the authority where you live, or the Commissioner for Personal Data Protection of the Republic of Cyprus, which is responsible for us.

There is no automated decision-making or profiling within the meaning of Article 22 GDPR. A person decides on every application.

How do we protect your data?

The connection to the website is always encrypted (HTTPS with HSTS). Only the responsible team can open applications, each member with personal, protected access.

We never publish photos from an application. Images for a later profile are only taken in agreement with you and only with your separate consent.

What about people under 21?

Our service is only for adults aged 21 and over. We do not accept applications from anyone under 21. If we find out that an applicant is under 21, we delete her data immediately.

When does this policy change?

We update this policy when our processes, service providers or the law change. The version published here applies.

Last updated: October 2026.