Controller
The controller of your personal data is the operator of Paramour (https://www.paramour.cz); its identification is on the Legal information page. Write to info@paramour.cz about anything concerning your data.
Purposes, legal bases and retention
| Purpose and data | Legal basis (GDPR) | How long |
|---|---|---|
| Account and contract: e-mail, password (only as a hash), role, language, nickname, history of Gems, purchases and subscriptions | Contract, Art. 6(1)(b); accounting and tax records: legal obligation, Art. 6(1)(c) | While the account exists; accounting and tax records for the periods set by law (usually 5 to 10 years) |
| Profiles: texts, photos, videos, rates, schedule, contacts, place of work published by advertisers | Contract, Art. 6(1)(b); data that reveal sex life: your explicit consent, Art. 9(2)(a), and data you have made public, Art. 9(2)(e) | Until you delete the profile or the account |
| Verification: a short video and, optionally, photos of the face | Consent, Art. 6(1)(a); verification is voluntary | Files are deleted 7 days after the decision; the decision (verified or not, date) while the account exists |
| Reviews, bookmarks, follows, saved searches | Contract, Art. 6(1)(b) | While the account exists |
| Notifications and mailings: service e-mails; alerts, push and Telegram notifications you switch on | Service e-mails: contract, Art. 6(1)(b); the rest: consent, Art. 6(1)(a) | Until you switch them off or delete the account |
| Safety list and blacklist (if enabled) | Legitimate interest in the safety of advertisers, Art. 6(1)(f) | For the period set by the site; at once after a successful dispute |
| Security and abuse prevention: IP address (shortened in the login history), browser, time of requests, audit log of staff actions, error logs | Legitimate interest in protecting the service and users, Art. 6(1)(f) | Login history: the last entries per account; logs only as long as needed for security |
| Reports, notices, appeals and messages to us | Legal obligation under the Digital Services Act, Art. 6(1)(c); legitimate interest, Art. 6(1)(f) | As long as needed to handle the case and to defend legal claims; reports may stay without a link to your account after its deletion |
| View statistics | Legitimate interest, Art. 6(1)(f) | Per-visitor records 2 days, then only totals |
Data in profiles that reveal sex life
An advertisement on Paramour can reveal information about the sex life of the person shown, which is a special category of data under Art. 9 GDPR. We process it only to publish the profile you created, on the basis of your explicit consent given when you publish the profile and of the fact that you make the data public yourself. You can withdraw the consent at any time by pausing or deleting the profile; this does not affect processing before the withdrawal. Reviews and messages of members may also reveal such information; members publish reviews under a nickname of their choice.
Details of the processing
- Photos: location data (EXIF/GPS) and other metadata are removed from uploaded photos. Public pages show only the name of the profile and, under reviews, the nickname of the member; e-mail addresses are never shown.
- Verification: moderators compare the video and photos with the published photos by hand. We request no identity document and use no automatic face recognition. A Verified Plus photo, if you send one, is shown to signed-in members only with your separate consent. The files are visible only to moderators and are kept longer only for a pending legal case.
- Safety list: advertisers may flag a client as unsafe. We store only a keyed hash of the e-mail or phone, the reason category and the date, not the e-mail or phone itself. The flagged person can dispute the flag.
- Blacklist: members, profile owners and agencies may add an entry about a person or an agency. Every entry is checked by a moderator before it appears and must describe only the author's own experience, without accusations of crimes and without sensitive data. The contact is stored encrypted and, depending on the settings, shown masked or in full; photos are stored outside the public folder without metadata. The author is never shown. The person concerned can dispute the entry; it is hidden while we check. Blacklist pages are closed to search engines.
- Automatic translation: profile descriptions can be translated into the other languages of the site by a translation server on our own infrastructure; the texts are not sent to third-party translation services.
- Automated decisions: we make no decisions with legal or similarly significant effects based solely on automated processing. Automatic filters only stop a message or mark content for a moderator.
Do you have to give us data?
An e-mail and a password are needed to create an account; the data of a profile are needed to publish it. Verification, notifications and optional cookies are voluntary. Without the required data we cannot provide the service.
Recipients
We do not sell personal data. Advertisers on city pages receive nothing about you: we count only impressions and clicks in total. Data are processed for us by our hosting and e-mail providers in the EU and, once online payment is available, by payment providers; they work under our instructions. Authorities receive data only when the law requires it.
- Browser push services (Google, Apple, Mozilla and others) receive only an encrypted notification.
- When you open a map, your browser loads map tiles from the OpenFreeMap service, which receives your IP address.
- When an advertiser saves an address, our server sends only the text of the address, without the account or IP address, to OpenStreetMap (Nominatim) to find its coordinates; the OpenStreetMap Foundation is in the United Kingdom, for which the European Commission has adopted an adequacy decision.
- Telegram receives notifications only if you link our bot yourself. Telegram is outside the EU and its country has no adequacy decision; we send the data on the basis of your explicit consent (Art. 49(1)(a) GDPR), and the protection of your data may be lower there than in the EU.
Your rights
You have the right to access your data, to have them corrected or deleted, to restrict their processing, to receive them in a portable format and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time; every mailing has an unsubscribe link and notification channels are switched off in your account. Export and deletion are available in Settings; for anything else write to info@paramour.cz. We answer within one month; in complex cases we may extend this by two months and tell you why.
You can complain to the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or to the authority of the EU country where you live or work.
Security
Passwords are hashed, the connection is encrypted, access to verification files and reports is limited to moderators, staff actions are recorded in an audit log and staff accounts can be required to use two-factor authentication.
Changes
We publish each new version of this policy on this page with its date and inform registered users of important changes by e-mail or in the account.
Cookie policy
Paramour uses the cookies and browser storage that the site needs to work; under the law on electronic communications they need no consent. Optional cookies are set only with your consent. We do not use advertising cookies.
| Name | Purpose | Lifetime |
|---|---|---|
| laravel_session, XSRF-TOKEN | Login session and protection of forms | Session / 2 hours |
| locale | Your language | 1 year |
| theme | Light or dark theme | 1 year |
| age_ok | Confirmation that you are 18 or older | 1 year |
| cookies_ok | Your choice in the cookie banner (accept or reject) | 1 year |
In the local storage of your browser we keep your favorites, recently viewed profiles, hidden profiles, comparison list, notes and saved searches. They stay on your device; you can clear them in the browser settings.
If we add analytics or advertising in the future, we will ask for your consent first.