Privacy policy

Last updated: 2026-10

1. Controller

For any question about data protection or to exercise your rights, simply email this address.

2. Hosting and server logs

This website is hosted by an external hosting provider. Whenever a page is requested, the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, browser and operating system, and the previously visited page. This is needed to deliver the website and run it securely (Art. 6(1)(f) GDPR).

3. No cookies

This website does not set cookies. On the casting pages your browser only remembers the language you chose (in so-called localStorage). This never leaves your device and can be deleted at any time in your browser settings.

4. Visitor statistics with Matomo

We count visits with Matomo, open-source software running on our own server. No data is passed on to third parties. Tracking works without cookies; IP addresses are shortened by two bytes before storage and cannot be linked to a person. On the casting pages we also count how many visitors start and send the form – without any of its content. Raw data is deleted after six months. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). If your browser sends “Do Not Track”, you are not tracked.

You can opt out here:

5. Applications for our castings

What we store

When you apply through one of our casting forms, we store the details you provide: first and last name, email address and your photos and – if you provide them – phone number, date of birth, city, country, experience, preferred day or availability, whether you need accommodation, social media profiles, portfolio address and your “About you” text. We also store the language you chose, the time, your browser identifier and a shortened, irreversible check value of your IP address that lets us recognise repeated submissions.

Why

Solely to review your application, select models for the shoot and get in touch with you. After sending, you receive a confirmation email, and our scouting team is notified of your application.

Legal basis

Your consent, given with the checkbox in the form (Art. 6(1)(a) GDPR), and steps taken at your request before a possible collaboration (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by emailing scouting@xovela.com; we will then delete your application.

Who has access

Applications are stored on our own server, protected against direct access from the internet. Only our team can view them, through a password-protected area. We do not pass your data or photos on to third parties and do not publish them.

How long

Applications we do not select are deleted no later than 6 months after the respective shoot. If we work together, we keep the data for as long as the collaboration requires.

Under 18

You can apply if you are under 18. If you are younger than 16, we need your parents’ or legal guardian’s consent to process your data. We clarify this before inviting you; without consent, we delete the application.

6. Contact by email

If you email us, we use your details only to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that purpose.

7. Your rights

You have the right at any time to

• access the data we hold about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR),
• receive your data in a common format (Art. 20 GDPR),
• object to processing based on our legitimate interest (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7(3) GDPR).

An email to scouting@xovela.com is enough. You can also lodge a complaint with a data protection supervisory authority, for example in the country where you live.