Privacy Policy.

1. Controller

The controller responsible for data processing on this website is:

interXenial — Chiara Reschenhofer
Stadlergasse 4/1, 1130 Vienna, Austria
Email: hello@interxenial.com

For any question about this policy or about your personal data, simply write to the address above. Full contact details are listed in our Impressum.

2. Server log files

When you visit our website, our hosting provider automatically collects technical data that your browser transmits: IP address, date and time of the request, the page requested, referrer URL, browser type and version, and operating system. This data is required to deliver the website, to guarantee its stability and security, and is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the secure and reliable operation of this website. Retention: log entries are deleted after no more than 14 days.

3. Cookies and local storage

This website does not use tracking cookies, advertising cookies or web analytics. We store a single entry in your browser's local storage (interxenial-consent) to remember your choice in the consent banner, so that we do not have to ask you again on every page. This entry contains no personal data and is never transmitted to us or to third parties.

Legal basis: § 165 (3) TKG 2021 / Art. 6(1)(c) GDPR — storage that is strictly necessary to honour your own consent decision. You can withdraw or change your choice at any time via “Cookie settings” in the footer, or by clearing your browser storage.

4. Application form (models and creatives)

If you apply via our application form, we process the data you enter: name, email address, city, Instagram handle, and — depending on the type of application — your measurements, hair and eye colour, agency experience, discipline, portfolio link, artist statement and the photos (polaroids) you upload.

This data is used solely to assess your application and to contact you about it. It is stored on our server in Germany and additionally sent to us by email. We do not use it for automated decision-making within the meaning of Art. 22 GDPR — every application is reviewed by a person.

Legal basis: Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract. Retention: if we do not work together, your application is deleted no later than 12 months after the final decision, unless you ask us to keep it on file for longer. If we do work together, the data becomes part of your talent file.

Uploading photos is voluntary. Please only upload images you are entitled to share, and do not include data you do not want us to have (for example health data or documents unrelated to the application).

5. Booking and contact requests

If you contact us via the booking form, the contact form or by email, we process the data you provide (name, company, email, project details) in order to answer your enquiry and to prepare a possible booking. Enquiries that do not lead to a contract are deleted after 12 months; where a contract results, statutory retention periods under commercial and tax law (up to 7 years) apply.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance) and Art. 6(1)(f) GDPR (our interest in answering enquiries).

6. Virtual Scout — AI voice assistant

Our website offers the “Virtual Scout”, an AI-powered voice assistant. In accordance with Article 50 of Regulation (EU) 2024/1689 (EU AI Act), we inform you that when using the Virtual Scout you are interacting with an artificial intelligence system, not a human. The assistant is clearly labelled as AI within the widget, and its spoken and written responses are generated by artificial intelligence.

The Virtual Scout only becomes active when you explicitly start a session and grant your browser permission to access your microphone. During an active session, your voice input is transmitted to and processed by our technology partner bitpull.ai, which transcribes it and generates spoken responses on our behalf. Session data (audio, transcripts, and technical connection data) is processed solely to conduct the conversation and to answer your request. It is not used for automated decision-making producing legal or similarly significant effects concerning you (Art. 22 GDPR), nor for emotion recognition or biometric categorisation.

You can end a session at any time by closing the widget. The use of the Virtual Scout is entirely optional — all information and services on this website are equally available without it. If you prefer to speak with a human, contact us at hello@interxenial.com.

Legal basis: Art. 6(1)(a) GDPR — your consent, given by starting a session. You can withdraw it at any time with effect for the future by ending the session.

7. Recipients and processors

We do not sell your data. We pass it on only to service providers who process it strictly on our instructions under a data processing agreement pursuant to Art. 28 GDPR:

Hetzner Online GmbH (Germany) — hosting and server infrastructure.
bitpull.ai — operation of the Virtual Scout voice assistant.
Resend (Plus Five Five, Inc.) — delivery of form notification emails.
IONOS SE (Germany) — our email mailboxes.
Squarespace Ireland Ltd. — image delivery via the Squarespace CDN; loading a portfolio image transmits your IP address to this provider.

Where a provider processes data outside the EU/EEA, the transfer is based on the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, on the provider's certification under the EU–US Data Privacy Framework.

8. Fonts

The fonts used on this site (Playfair Display and Outfit) are hosted on our own server. No connection to Google Fonts or any other font CDN is established when you visit this website, and no data is transmitted to such providers.

9. Social media links

Our pages link to our profiles on Instagram and TikTok. These are plain links — no data is transmitted to those networks until you actively click them. Once you do, the privacy policy of the respective network applies.

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise any of these rights, contact us at hello@interxenial.com. You also have the right to lodge a complaint with the supervisory authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at

11. Data security

This website is delivered exclusively over an encrypted TLS connection (HTTPS), which you can recognise by the lock symbol in your browser. We take appropriate technical and organisational measures to protect your data against manipulation, loss and unauthorised access.

12. Changes to this policy

We may update this privacy policy to reflect changes in our services or in the legal framework. The version published here always applies.