Privacy policy
This policy explains what personal data we process, why, and what rights you have. It applies to visitors, account holders, people who contact us and the persons listed on the site.
Last updated:
In short
- We collect as little as possible. Browsing needs no account and we use no advertising or analytics cookies.
- We never sell personal data and never share it for advertising.
- Profiles contain only what the listed person made public about their professional work. Never legal names, addresses or family details.
- A listed person can have their profile removed at any time, without giving a reason.
- You can access, correct or delete your data by writing to [email protected].
1. Data controller
The controller of your personal data is the operator of BabesProfiles. Contact for all privacy matters: [email protected].
We have not appointed a Data Protection Officer; the privacy mailbox is handled by the person responsible for data protection.
2. Visitors and account holders
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Delivering the site, security, preventing abuse | IP address, browser and device type, requested page, time, referring page (server and network logs) | Art. 6(1)(f): our legitimate interest in a secure, working site | 30 days, longer only while a security incident is investigated |
| Protection against bots and spam on forms | IP address, browser signals checked by the bot protection service | Art. 6(1)(f): legitimate interest in preventing abuse | Seconds to minutes, as set by the provider |
| Your account | Email, username, password (stored only as a secure hash), sign-up date and IP address, favorites | Art. 6(1)(b): performing our agreement with you | Until you delete the account; backups up to 30 days |
| Comments | Comment text, username, date, IP address when posting (never shown) | Art. 6(1)(b): performing the agreement | Until you or we delete the comment, or you delete the account |
| Honest ratings and rankings | Rating, a random browser identifier, a shortened (truncated) IP address | Art. 6(1)(f): legitimate interest in rankings that cannot be manipulated | 12 months |
| Answering messages, corrections, claims, removal requests, copyright and illegal content notices | Name if given, email, message, URLs, proof of identity you send us, IP address, browser and time of sending | Art. 6(1)(c): legal obligations (Digital Services Act, GDPR requests); Art. 6(1)(f): handling your request | 3 years after the case is closed |
| Keeping a removed profile from being published again | Stage name, profile address, date and decision | Art. 6(1)(f) and 17: respecting your objection permanently | As long as we run the site |
| Establishing or defending legal claims | Data relevant to the dispute | Art. 6(1)(f): legitimate interest | Until the claims are time-barred |
We count profile views and votes only in aggregated form and do not build profiles of visitors. We use no third-party analytics. If we ever add analytics, it will run only with your consent (see the cookie policy).
3. Persons listed on the site
This section gives the information required by Art. 14 GDPR to the persons we write about. Informing each person individually would involve disproportionate effort (Art. 14(5)(b)), so we publish it here and link to it from every profile.
| Topic | What we do |
|---|---|
| Data we publish | Stage name and other stage names, date of birth, nationality, physical details that are part of a public professional profile (such as height, hair and eye colour), career facts (years active, studios, awards), links to official public accounts, photos published under free licences or supplied by the person or their agency. |
| Data we never publish | Legal names, home addresses, cities, family members or partners, health data, private contact details, leaked or private material, nude images. |
| Sources | Wikidata, Wikipedia, IMDb, the person's own official accounts, studio and agency press materials, award announcements. The sources of each profile are listed on it. |
| Purpose | Providing accurate reference information about the public professional activity of people who perform under a stage name. |
| Legal basis | Art. 6(1)(f) GDPR: our legitimate interest and the public's interest in information about public professional activity, balanced with freedom of expression (Art. 85). Where data reveals information about a person's sex life (Art. 9), we rely on Art. 9(2)(e): data the person has manifestly made public. We publish nothing beyond that. |
| How long | While the person remains publicly known for this work, or until they object. |
| Your right to object | Use the removal form or write to [email protected]. The profile is hidden at once and removed within 72 hours of verification. We do not ask you to justify the request. |
4. Who receives the data
We use service providers that process data on our behalf under data processing agreements (Art. 28 GDPR): hosting and content delivery, bot protection, email delivery and IT support. We disclose data to authorities only when the law requires it, and to our legal advisers when needed for a claim. We do not sell personal data and do not share it for cross-context behavioural advertising.
5. Transfers outside the EEA
Some providers may process data outside the European Economic Area, for example in the United States. We only allow this where the country has an adequacy decision (including companies certified under the EU-US Data Privacy Framework) or under the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards at [email protected].
6. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy;
- correct inaccurate data;
- have your data erased;
- restrict processing;
- data portability for data you gave us under our agreement;
- object at any time to processing based on our legitimate interest, including your profile if you are a listed person;
- withdraw consent at any time, where processing is based on consent.
Write to [email protected]. It is free. We answer within one month; for complex requests this can be extended by two more months, and we will tell you if so. We may ask you to confirm your identity before we act.
You may also complain to a data protection authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl; in another EU country, the authority where you live or work; in the United Kingdom, the Information Commissioner's Office (ico.org.uk).
7. Automated decisions
We make no decisions based solely on automated processing that have legal or similarly significant effects on you. Our comment filter only holds comments for review by a person.
8. Children
The site is not for anyone under 18. We do not knowingly collect data from minors and delete any account we learn belongs to one. Every person listed is a verified adult; if you believe otherwise, report it through the contact form and we will hide the profile at once.
9. Security
We use encrypted connections (HTTPS), store passwords only as salted hashes, limit access to personal data to people who need it, log access to administration tools, and keep backups encrypted. No system is perfectly secure; we will notify you and the authority of a breach where the law requires it.
10. Additional information for US residents
This section applies under the California Consumer Privacy Act and other US state privacy laws. In the last 12 months we collected the categories described in section 2: identifiers (email, username, IP address), internet activity on our site, and the content of messages you send us. We collect them from you and your browser, for the purposes in section 2.
We do not sell or share personal information, including for targeted advertising, and we do not use sensitive personal information to infer characteristics about you. We honour Global Privacy Control signals. You have the right to know, access, correct and delete your personal information, and we will not discriminate against you for using these rights. Requests: [email protected]; an authorised agent may act for you with your signed permission.
11. Other countries
We apply the rights described here to everyone, wherever you live, including under the UK GDPR, the Swiss Federal Act on Data Protection, Brazil's LGPD and Canada's PIPEDA.
12. Changes to this policy
We update this policy when our processing changes. The date of the current version is shown at the top. Account holders are informed by email of significant changes.