Ours
Privacy Policy
1. Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection provisions, is:
Elysium by Valeria GmbH
im Mediapark 8
50670 Cologne
Managing Director: Marianne Merx
office@elysium-highclassescort.com
2. Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
a) Description and scope of data processing: The following data is collected in this process:
1. Time of access
2. URL of the website from which the file was requested (referrer URL)
3. Type and version of the browser used
4. The user’s IP address
The data is stored in our system’s log files. This data is not analysed for marketing purposes in this context.
b) Legal basis for data processing: The legal basis for the temporary storage of the data and the log files is Article 6(1)(f) of the GDPR.
c) Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session. Data is stored in log files to ensure the website functions properly. Furthermore, the data helps us to optimise the website and to ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.
d) Duration of storage: The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this is the case once the relevant session has ended. In the case of data stored in log files, this occurs after 30 days at the latest.
e) Hosting provider: We use the external hosting provider CrayssnLabs (CrayssnLabs GmbH, Kartäuserstraße 21d, 99084 Erfurt – https://www.crayssnlabs.de/) to operate and host our website. The personal data processed on this website is stored on the service provider’s servers.
External hosting is carried out for the purpose of ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR).
A data processing agreement has been concluded with this provider in accordance with Article 28 of the GDPR to ensure the protection of your data on German servers.
3. SSL or TLS encryption
For security reasons and to protect the transmission of confidential information – such as enquiries you send to us as the website operator – this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar in your browser changes from ‘http://’ to ‘https://’ and by the padlock icon in your browser’s address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties. However, we would like to point out that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not technically possible to provide complete protection of data against access by third parties.
4. Contact via the contact form
a) Description and scope of data processing: Our website features a contact form which can be used to contact us electronically. If a user makes use of this option, the data entered in the input form is transmitted to us and stored. This data generally includes:
• Name / pseudonym
• Email address
• Subject and content of the message
In addition, the following data is logged within the contact form at the time the message is sent:
1. IP address of the computer accessing the site
2. Date and time of the submission attempt
This privacy policy is referred to in connection with the processing of data during the submission process. No data is passed on to third parties in this context. The data is used exclusively for handling the correspondence and processing your enquiry. This form is not linked to a customer relationship management (CRM) system.
b) Legal basis for data processing: The legal basis for processing the data transmitted when an enquiry is submitted is Article 6(1)(f) of the GDPR. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. The legal basis for logging the submission process (IP address, time) is Article 6(1)(f) of the GDPR.
c) Purpose of data processing: We process the personal data entered via the contact form solely for the purpose of handling your enquiry. The additional logging of the submission process (IP address, time) is carried out expressly for the purpose of defending against hacker attacks, preventing misuse of the form and ensuring the security of our IT systems (e.g. technical spam protection).
d) Duration of storage: The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data entered via the contact form, this is the case once the relevant conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. The additional logging of the submission process is deleted after a period of no more than 30 days.
5. Application Process and Handling of Applicants’ Data
We offer you the opportunity to apply to us via an online form. Below, we explain the scope, purpose and use of your personal data collected as part of the application process.
a) Scope and purpose of data collection: When you submit an application to us, we process your associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to enter into an employment relationship or a working arrangement. The application documents are used solely for the purpose of a potential working arrangement.
b) Confidentiality and security: Given the sensitive nature of the role, we treat your application data with particular confidentiality in accordance with Article 32 of the GDPR. Access to your documents is restricted exclusively to authorised persons directly involved in the selection process. Your data will not be disclosed to third parties.
b) Legal basis for processing: Data processing is carried out on the basis of Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general pre-contractual processing) and – provided you have given your consent – Article 6(1)(a) of the GDPR. You may withdraw your consent at any time.
c) Data retention period: If we are unable to make you an offer, if you decline an offer or if you withdraw your application, we reserve the right to retain the data you have provided on the basis of our legitimate interests (Article 6(1)(f) of the GDPR) for up to 6 months after the conclusion of the application process. The purpose is to provide evidence in the event of a legal dispute (e.g. under the General Equal Treatment Act – AGG). The data will then be deleted and the physical application documents destroyed. Data will only be retained for a longer period if you have expressly consented to such retention or if statutory retention obligations prevent deletion.
6. Social media links (X, Telegram, WhatsApp)
Links to the social media services X (formerly Twitter), Telegram and WhatsApp are integrated into our website. These are expressly not social media plugins that transmit data to the respective provider as soon as the page is loaded.
The icons on our website are simply hyperlinks. You will only be redirected to the respective service’s page once you actively click on one of these icons. For technical reasons, information (in particular the referrer URL) is transmitted to the destination provider during this process. We have no influence over the collection of data or its subsequent use by the operators of these social networks. For further information, please refer to the privacy policies of the respective providers:
• X (Twitter): https://twitter.com/privacy
6.1 WhatsApp: We use the WhatsApp Business version for communication. This service is operated in the EU and the EEA by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”), a company belonging to the Meta Group.
If you contact us via this channel, the communication is protected by end-to-end encryption. However, when using this service, WhatsApp collects data relating to you, your account, your messages, your network, your usage (in particular of payment services), log information, device and connection data, and location information. Cookies are also installed on your device. Data is shared within the Meta group of companies. The group includes:
• WhatsApp LLC in the USA
• Meta Platforms Ireland Limited in Ireland
• Facebook Israel Limited in Israel
• Facebook UK Limited in the United Kingdom
• Facebook Germany GmbH in Germany
• Meta Platforms, Inc. in the USA
• FB Spain S.L. in Spain
• Facebook Singapore Pte Limited in Singapore
The provision and use of WhatsApp serve our legitimate interest in establishing rapid contact with you as the person initiating contact. The legal basis is Article 6(1)(f) of the GDPR. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
WhatsApp LLC and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework (DPF). The European Commission has determined that certified companies provide an adequate level of data protection. Further information on DPF certification can be found at https://www.dataprivacyframework.gov/.
We have entered into a data processing agreement (WhatsApp Business Data Processing Terms) with the provider in accordance with Article 28 of the GDPR to ensure that your data is processed in accordance with the requirements of the GDPR.
Please note that, despite the certification, there remains a residual risk that US authorities may access the data without you having any effective legal remedies against this.
7. Data subject rights (rights of the data subject)
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the data controller:
7.1 Right of access (Article 15 of the GDPR)
You may request confirmation from us as to whether or not personal data concerning you is being processed. Where such processing takes place, you may request information regarding the following:
• the purposes for which the personal data is processed;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
• the envisaged period for which the personal data concerning you will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request rectification or erasure of personal data concerning you, restriction of processing by the controller, or the right to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• any available information as to the source of the data where the personal data is not collected from the data subject;
• The existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
7.2 Right to rectification (Article 16 GDPR)
You have the right to rectification and/or completion from the controller if the processed personal data concerning you is inaccurate or incomplete. The controller must carry out the rectification without undue delay.
7.3 Right to restriction of processing (Article 18 GDPR)
Under the following conditions, you may request the restriction of processing of your personal data:
• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
• the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defense of legal claims, or
• if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.
7.4 Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
You may request the controller to erase the personal data concerning you without undue delay, provided that one of the following grounds applies:
• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing.
• The personal data concerning you have been processed unlawfully.
The right to erasure does not apply, inter alia, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.
7.5 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to whom the personal data were provided.
7.6 Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (data processing based on a balancing of interests).
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
7.7 Right to withdraw consent under data protection law
You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
7.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement—if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf.
8. No automated decision-making
Automated decision-making or profiling pursuant to Art. 22 (1) and (4) of the GDPR does not take place on our website.
9. Planned marketing activities and links to third-party portals
a) Description and scope of data processing: As part of our business activities, we plan advertising measures on specialized third-party portals (including love99, Euroescort, theeroticreview, german-escort, and word-escort-guide). Through these advertising measures, users can reach our website via external links.
If you arrive at our site via such an advertisement, technical parameters (e.g., referrer information) may be transmitted by the respective portal operator. We do not currently use tracking pixels or analysis tools ourselves to track your user behavior across platforms after clicking on these advertisements (no conversion tracking).
b) Legal basis for data processing: The legal basis for placing this advertising and the associated processing of access data is our legitimate interest in marketing our services pursuant to Art. 6 (1) (f) of the GDPR.
c) Purpose of data processing: The purpose of the links is to increase reach and acquire new customers. The processing of technical access data by the third-party portals is beyond our control.
d) Duration of storage: Since we do not collect or permanently store our own tracking data from these marketing measures, we do not store any data beyond the general server logs. Regarding the storage duration at the third-party portals, we refer to their respective privacy policies.
10. Data disclosure to third parties and recipients of personal data
Within our company, access to your data is granted only to those departments that require it to fulfill our contractual and legal obligations and to process your inquiries. Your data is disclosed to external recipients exclusively:
• if this is necessary to process or respond to your inquiry;
• if there is a legal obligation to disclose the data (e.g., to law enforcement authorities);
• if we have engaged external service providers (data processors) to provide IT infrastructure or technical services.
Categories of recipients:
• IT service providers: Hosting providers for the operation of our website and the storage of log files (location: EU).
• Communication service providers: If you contact us via messenger services (WhatsApp, Telegram), processing is carried out by the respective service providers (see the Social Media section).
11. Data Security (Technical and Organizational Measures)
In accordance with Art. 32 of the GDPR, and taking into account the state of the art, the costs of implementation, the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
These measures include, in particular:
• Confidentiality: We attach the utmost importance to protecting your privacy. Beyond technical measures, we use organizational safeguards (e.g., restricting access to authorized personnel) to ensure that your data is protected against unauthorized access. This applies particularly to information that could reveal details about your personal preferences or your sexual life.
• Integrity: Control over the transmission, input, and availability of data.
• SSL Encryption: As previously stated in Section 3, the transmission of sensitive content takes place in encrypted form.
• Procedures for regular review: We have implemented processes to continuously evaluate the security of data processing and adapt it to technical advancements.