Data Protection Policy
Last updated: September 2026
This Data Protection Policy explains how personal data is processed when you visit our website, contact us, make a booking enquiry or apply to become a model.
1. Data Controller
The controller responsible for data processing on this website is:
Melanie Constein
Nest Model Management
Brunnenstr. 9
10119 Berlin
Germany
Email: info@nestmodelmanagement.com
Telephone: +49 (0)30 889 12755
2. Processing of Personal Data When Visiting Our Website
When you access our website, technical information may automatically be transmitted by your browser and processed in connection with the operation and delivery of the website. This may include your IP address, the date and time of access, the page or file requested, browser and device information and other technical information required for the operation and security of the website.
We process this data in order to ensure the secure, reliable and technically functional operation of the website, to identify and resolve technical problems and to protect the website against misuse.
Where this processing is based on our legitimate interests, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and efficient operation of our website.
Technical data is retained only for as long as necessary for these purposes, unless a longer retention period is required due to a security incident or legal obligation.
3. Hosting and Technical Infrastructure
Our website is hosted using services provided by Vercel. We also use Google Firebase as part of the technical backend of the website.
In connection with the provision and operation of the website, these service providers may process technical information such as IP addresses, device and browser information and request data.
According to our current technical configuration, data stored through our backend is stored within the European Union.
We use these services for the secure and reliable operation of our website. Where the processing is based on our legitimate interests, the legal basis is Art. 6(1)(f) GDPR.
Where service providers process personal data on our behalf, we take the measures required under applicable data protection law.
4. Contact, Booking Enquiries and Model Applications
Our website does not operate its own contact, booking or model application forms. Instead, the website provides email links through which you can contact us directly.
Depending on the nature of your enquiry, emails are sent to info@nestmodelmanagement.com or scouting@nestmodelmanagement.com.
If you contact us by email, we process the information that you voluntarily provide in order to respond to and handle your enquiry.
Depending on the nature of your communication, this may include your name, email address, telephone number, company details, project or booking information and the contents of your communication.
For model applications, this may additionally include information such as your age or date of birth, location, height, photographs and other information you choose to provide as part of your application.
Where your enquiry or application relates to the preparation or performance of a contract, the legal basis for processing is Art. 6(1)(b) GDPR.
For other enquiries, processing may be based on our legitimate interest in communicating with clients, prospective clients, applicants and other business contacts pursuant to Art. 6(1)(f) GDPR.
We retain this information only for as long as necessary to deal with the relevant enquiry or application and, where applicable, for the duration of statutory retention periods or where further retention is necessary for the establishment, exercise or defence of legal claims.
5. Cookies and Similar Technologies
The website itself does not currently set cookies for analytics, advertising or marketing purposes. In particular, we do not currently use Google Analytics, Google Tag Manager, Meta/Facebook/Instagram tracking pixels or comparable marketing tracking technologies.
Third-party services integrated into the website may, however, use cookies or comparable technologies. This currently applies in particular to embedded Vimeo videos, as described below.
6. Video Content (Vimeo)
We use the video platform Vimeo to display video content on our website. Vimeo is operated by Vimeo, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA.
Our website currently contains embedded Vimeo videos which may play automatically.
When Vimeo content is loaded or played, a connection may be established between your browser and Vimeo’s servers. In this context, Vimeo may receive information including your IP address, browser and device information and information about the page from which the video was accessed.
Vimeo may also store cookies or comparable identifiers, including information in local storage, on your device. The subsequent processing of this information by Vimeo is subject to Vimeo’s own data protection practices.
Where consent is legally required for the storage of or access to information on your device or for subsequent processing of personal data, Vimeo content should only be activated after the relevant consent has been obtained.
7. Recipients and Service Providers
We use external service providers where necessary for the operation of our website and technical infrastructure.
Based on the current technical configuration of our website, these include Vercel, Google in connection with Firebase, and Vimeo in connection with embedded video content.
Personal data may also be disclosed where required by law, to competent public authorities or where disclosure is necessary for the establishment, exercise or defence of legal claims.
We do not sell personal data.
8. Transfers to Countries Outside the European Economic Area
Some service providers used in connection with our website may be established outside the European Economic Area or may process personal data in countries outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, such transfers are made in accordance with the requirements of the GDPR.
Depending on the recipient and destination country, this may be based on an adequacy decision of the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Further information regarding the safeguards applicable to a particular transfer may be requested from us.
9. Storage and Deletion of Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected.
Data may be retained for a longer period where this is required by statutory retention obligations or where it is necessary for the establishment, exercise or defence of legal claims.
Once the relevant purpose no longer applies and applicable retention periods have expired, the data will be deleted or anonymised in accordance with applicable law.
10. Rights of Data Subjects
You have the rights provided for under the GDPR, subject to the applicable legal requirements.
In particular, you may have the right to obtain information about the personal data we process concerning you pursuant to Art. 15 GDPR, to request the correction of inaccurate personal data pursuant to Art. 16 GDPR, to request deletion pursuant to Art. 17 GDPR, to request restriction of processing pursuant to Art. 18 GDPR and to receive certain personal data in a structured, commonly used and machine-readable format pursuant to Art. 20 GDPR.
You may also have the right to object to certain processing pursuant to Art. 21 GDPR.
Where processing is based on your consent, you may withdraw your consent at any time pursuant to Art. 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact info@nestmodelmanagement.com.
11. Right to Object
Where personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation in accordance with Art. 21 GDPR.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
You may in particular contact the supervisory authority responsible for your habitual residence, your place of work or the place of the alleged infringement.
13. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures are reviewed and adapted where appropriate in light of technological developments and the risks associated with the processing.
14. Automated Decision-Making
We do not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.
15. Changes to this Data Protection Policy
We may update this Data Protection Policy where our website, services, processing activities or applicable legal requirements change.
The current version will be made available on our website.
Last updated: September 2026