Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of Art. 4 (7) GDPR is:

CJ Modeling GmbH Bahnhofstrasse 12, 8001 Zurich, Switzerland Email: privacy@cjmodeling.com

You can reach our data protection contact at privacy@cjmodeling.com.

2. Overview & Scope

We process personal data only where a legal basis exists, where you have given consent, or where processing is necessary to provide this website and our services. Personal data is any information relating to an identified or identifiable natural person.

3. Legal Bases

We process personal data on the following legal bases:

• — Art. 6 (1) (a) GDPR — consent, e.g. for optional analytics and marketing cookies.
• — Art. 6 (1) (b) GDPR — performance of a contract or pre-contractual measures, e.g. handling a booking enquiry.
• — Art. 6 (1) (c) GDPR — compliance with a legal obligation, e.g. commercial retention periods.
• — Art. 6 (1) (f) GDPR — legitimate interests, e.g. the technically secure and stable operation of this website.

4. Hosting & Server Log Files

This website is hosted by an external service provider acting as our processor under Art. 28 GDPR. When you access the site, the hosting infrastructure automatically records data that your browser transmits:

• — Anonymised or shortened IP address
• — Date and time of the request
• — Requested page, file name and transferred data volume
• — HTTP status code and referrer URL
• — Browser type, version and operating system

5. Retention Of Log Data

Log data is processed on the basis of Art. 6 (1) (f) GDPR for the purpose of operational security and abuse prevention and is deleted or anonymised after a maximum of 30 days, unless retention is required to investigate a specific security incident.

6. Contact & Enquiry Form

If you send us a booking or press enquiry, we process the data you provide (name, brand, email address, enquiry type and brief) solely in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR for contractual enquiries and otherwise Art. 6 (1) (f) GDPR.

The enquiry form opens your own email client; the message is sent from your email account to bookings@cjmodeling.com. Enquiry data is deleted once the matter has been concluded and no statutory retention obligations apply — as a rule after six months, and after ten years for commercially relevant correspondence.

7. Cookies & Local Storage

We use strictly necessary cookies and local storage entries that are required to operate the site and to store your consent and language choice. These are set on the basis of Art. 6 (1) (f) GDPR and § 25 (2) TDDDG and cannot be disabled.

Optional analytics and marketing cookies are only set after you have given consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You may withdraw your consent at any time with effect for the future via the cookie settings page. A full list of the technologies used, their purpose and storage duration is available there.

8. Web Fonts

This website loads the typefaces Bodoni Moda and Jost from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a font file is requested, your IP address is transmitted to Google and may be processed on servers in the USA on the basis of the EU standard contractual clauses and the EU-US Data Privacy Framework. The legal basis is Art. 6 (1) (f) GDPR — the consistent presentation of our editorial typography.

9. Recipients & Processors

We only pass personal data to third parties where this is legally permitted. Recipients may include our hosting and email providers, IT service providers and, where required, tax advisers and legal counsel. All processors are bound by data processing agreements pursuant to Art. 28 GDPR.

10. Third-Country Transfers

Where data is transferred to countries outside the EU/EEA, we ensure an adequate level of protection through an adequacy decision of the European Commission, EU standard contractual clauses pursuant to Art. 46 (2) (c) GDPR, or your explicit consent pursuant to Art. 49 (1) (a) GDPR.

11. Your Rights

As a data subject you have the following rights at any time, free of charge:

• — Right of access — Art. 15 GDPR
• — Right to rectification — Art. 16 GDPR
• — Right to erasure — Art. 17 GDPR
• — Right to restriction of processing — Art. 18 GDPR
• — Right to data portability — Art. 20 GDPR
• — Right to object to processing based on legitimate interests — Art. 21 GDPR
• — Right to withdraw consent at any time with effect for the future — Art. 7 (3) GDPR

12. Right To Lodge A Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

13. Obligation To Provide Data

You are not obliged to provide personal data. However, without the data marked as mandatory in the enquiry form we cannot process your request.

14. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. The talent shown on this site is generated with artificial intelligence but no personal data of website visitors is used for that purpose.

15. Data Security

This website uses TLS/SSL encryption for all transmissions. We apply appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data against loss, manipulation and unauthorised access.

16. Changes To This Policy

We adapt this privacy policy where changes to our services or the legal situation require it. The version published here always applies.