privacy policy

Based on: GDPR
Country-specific extension's:
Country: Germany, Abbreviation: BDSG, Law: Federal Data Protection Act
Country: Austria, Abbreviation: DSG, Law: Data Protection Act
Country: France, Abbreviation: Loi Informatique et Libertés, Law: Law on Information Technology and Freedoms
Country: Italy, Abbreviation: Codice Privacy, Law: Codice in materia di protezione dei dati personali
Country: Spain, Abbreviation: LOPDGDD, Law: Ley Orgánica de Protección de Datos Personales y Garantía de los Derechos Digitales
Country: Netherlands, Abbreviation: UAVG, Law: Uitvoeringswet Algemene verordening gegevensbescherming
Country: Sweden, Abbreviation: Dataskyddslag, Law: Data Protection Act
Country: Denmark, Abbreviation: Databeskyttelsesloven, Law: Data Protection Act
Country: Poland, Abbreviation: Ustawa o ochronie danych osobowych, Law: Law on the Protection of Personal Data Data
Country: Finland, Abbreviation: Tietosuojalaki, Law: Data Protection Act
Country: Belgium, Abbreviation: Loi relative à la protection des personnes physiques à l’égard des traitements de données à caractère personnel, Law: Law on the Protection of Natural Persons with regard to the Processing of Personal Data
Country: Portugal, Abbreviation: Lei no. 58/2019, Law: GDPR Implementing Act
Country: Czech Republic, Abbreviation: Zákon č. 110/2019 Sb., Law: Personal Data Processing Act
Country: Hungary, Abbreviation: Info tv., Law: Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information
Country: Greece, Abbreviation: Νόμος 4624/2019, Law: GDPR Implementing Act
Country: Slovakia, Abbreviation: Zákon č. 18/2018 Z.z., Law: Personal Data Protection Act
Country: Romania, Abbreviation: Legea no. 190/2018, Law: Law Implementing the GDPR
Country: Bulgaria, Abbreviation: Закон за защита на личните данни, Law: Law on the Protection of Personal Data
Country: Croatia, Abbreviation: Zakon o provedbi Opće uredbe o zaštiti podataka, Law: Law Implementing the GDPR
Country: Slovenia, Abbreviation: ZVOP-1, Law: Zakon o varstvu osebnih podatkov (Data Protection Act)
Country: Lithuania, Abbreviation: Asmens duomenų teisinės apsaugos įstatymas, Law: Law on the Legal Protection of Personal Data
Country: Latvia, Abbreviation: Fizisko personas datu apstrādes likums, Law: Law on the Processing of Personal Data
Country: Estonia, Abbreviation: Isikuandmete kaitse seadus, Law: Personal Data Protection Act
Country: Cyprus, Abbreviation: Personal Data Protection Act
Country: Malta, Abbreviation: Data Protection Act (Cap. 586), Law: Data Protection Act
Country: Ireland, Abbreviation: Data Protection Act 2018, Law: Data Protection Act 2018
Country: Luxembourg, Abbreviation: Loi du 1er août 2018, Law: Law on the Protection of Natural Persons with regard to the Processing of Personal Data

1. General Information
Protecting your personal data is very important to us. We endeavor to treat your data exclusively in accordance with legal regulations, but we cannot and do not guarantee this. If you do not agree to this, please leave our website and do not use our services. The explanation for this can be found in Section 3. This privacy policy informs you about the most important aspects of data processing on our website.

2. Responsible Entity
As shown in provider identification, https://hiltonmodels.com/provider_ident/

3. Collection and Processing of Personal Data
When you visit our website, certain data is automatically collected, for example IP address, browser type, operating system, accessed pages and maybe more. Maybe therefore, cause we have no influence on the functioning of servers, clouds, or the software running on them. These data are used solely for functional as well statistical purposes and to improve the website. Please aware, that all data sent over internet will be stored at several servers worldwide. In fact, there is no personal data protection because U.S.A. Freedom Act, FISA §702 for none-US-Residents, Executive Order 12333, Cloud Act (since 2018).

Data protection for non-US citizens outside the US is not given if they use services from US providers (e.g., Google, Microsoft, Meta, Amazon). The NSA and other US authorities may access your data without specific suspicion – and you have no right to object or sue.

To be clear: While companies and smaller businesses are harassed, your data is stored, processed and used arbitrarily on US servers for reasons we don't know.

We also don't guarantee anything here. Every bit, every byte, every character you send is stored on the internet, on servers, and in the clouds, probably forever. Everyone knows this, but we're reiterating it here for the benefit of those who have been warned.

This also applies to data giants like Google, for example, with Google Fonts. When you visit the site, a connection to Google servers in the US is automatically established. Without our intervention. The visitor's IP address is transmitted to Google – without consent. According to some legal provisions, the IP address is already considered as personal data.

4. Contact Forms and File Upload (Forminator Plugin)
When you contact us via the form or upload files, the data you provide (e.g., name, email, message, uploaded files) will be stored to process your request and for follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (contract or pre-contractual measures)

Retention period: The data will be deleted as soon as it is no longer necessary for the purpose of processing.

Special notice for file uploads:
Please do not upload sensitive data (e.g., health data, confidential contracts), unless explicitly necessary. Uploaded files are used only for the stated purpose and are not shared with third parties.

5. Cookies
Our website uses cookies. Cookies are small text files stored on your device that enable certain website functions. You can configure your browser to notify you about cookies and to allow them only in individual cases.

6. Your Rights
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Lodge a complaint with a data protection authority

7. Data Security
We take technical and organizational measures to protect your personal data from loss, destruction, unauthorized access, modification, or dissemination. Nevertheless, we refer to point 3.

8. Changes
We reserve the right to amend this privacy policy to comply with legal requirements or to reflect changes to our services.

9. External Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data. Conclusion of a Data Processing Agreement To ensure data protection-compliant processing, we have concluded a data processing agreement with our hoster.

Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)

If data processing is based on Article 6 (e) or (f) of the GDPR, you have the right to object to the processing of your personal data at any time for reasons related to your particular situation. This also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21 (1) GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

10. Contact Forms, Casting Form

If you send us inquiries via any form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent. This data is processed on the basis of Art. 6 (1) (b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if this was requested. The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Google Web Fonts, Google reCAPTCHA

If we use some day google fonts or google reCAPTCHA (hereinafter "reCAPTCHA") on this website, please note Point 3.
The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is designed to verify whether the data entered on this website (e.g., in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, length of time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place. The data is stored and analyzed on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and spam. If corresponding consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.

For more information about Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links:

https://policies.google.com/privacy

https://policies.google.com/terms