1. Controller
The controller is EscortPraha, company ID , . For anything about personal data contact [email protected].
We process data under Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on the Processing of Personal Data.
2. What we process
Advertisers: e-mail, name or nickname, password (stored only as a one-way hash), the details and photos in the ad (age, appearance, languages, area, prices, services, phone, WhatsApp, Telegram), records of sign-ins and account changes, credit and payment details (amount, date, reference, payer’s account number from the bank statement).
Photo verification: the photo with a handwritten note you send us. Only moderators see it and we delete it after the decision.
Visitors: technical data needed to deliver the site (IP address, browser type, time) in server logs. A report contains the reason, the description and your e-mail; we store the reporter’s IP address only as a one-way code used to stop repeated reports.
Visitor statistics: we count page views and taps on the contacts in ads, to know how the site is used and to show advertisers how often their ad was seen. We use no cookies and no third-party tools for this. We store the page address, the name of the site you came from, the device type and the country; instead of the IP address only a one-way code that changes every day. Detailed records are deleted within 60 days, after that only daily totals remain. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Favourites and the age confirmation are stored only in your browser and are not sent to us.
3. Data about sex life
An ad may reveal information about the advertiser’s sex life, which is a special category of personal data (Article 9 GDPR). We process it only on the basis of your explicit consent (Article 9(2)(a) GDPR), given when you create the account and publish the ad, and to the extent you have manifestly made it public yourself (Article 9(2)(e) GDPR).
You can withdraw consent at any time by deleting the ad or account or by e-mail to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
4. Purposes and legal bases
Contract (Article 6(1)(b) GDPR): running the account, publishing the ad, packages, credits, service e-mails (for example about a package ending).
Legal obligation (Article 6(1)(c) GDPR): accounting and tax, DSA obligations, requests from public authorities.
Legitimate interest (Article 6(1)(f) GDPR): site security, preventing fraud and abuse, protecting minors and victims of coercion, handling reports, establishing and defending legal claims.
Explicit consent: data about sex life in the ad (see point 3).
5. Who sees the data
The content of a published ad is public. Other data is seen only by authorised staff of the operator.
Processors: the server (hosting) provider and the e-mail delivery service, under data processing agreements. Payments are received by our bank. We hand data to public authorities only when the law requires it. We do not sell data and use no advertising or analytics networks.
We process data in the European Union. If a transfer outside the EEA were necessary, it would take place only with safeguards under Chapter V GDPR.
6. How long
Account and ads: until deleted. A deleted ad is removed with its photos and video at once, and from backups within 30 days at the latest.
Verification photo: deleted right after the decision. Server logs: 30 days at most. Reports and moderation records: 3 years after they are closed, to defend legal claims and meet DSA obligations.
Payment records: for the period required by Czech accounting and tax law (Act No. 563/1991 Coll. on Accounting and Act No. 235/2004 Coll. on VAT), up to 10 years.
7. Your rights
You have the right of access (Article 15 GDPR), rectification (16), erasure (17), restriction (18), portability (20) and the right to object to processing based on legitimate interest (21). You can withdraw consent at any time. Send requests to [email protected]; we answer within one month.
You can delete your account and all ads yourself in the account settings.
You have the right to complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
8. Security
The site runs only over an encrypted connection (HTTPS). Passwords are stored only as hashes and moderators sign in with two-factor authentication. We remove hidden data including location (EXIF) from uploaded photos. Photos awaiting approval and verification photos are not publicly accessible.
We do no profiling and no automated decision-making with legal effects.
9. Changes
We may update this policy. We tell registered users about important changes by e-mail.