Apreia — The platform for creatives

1. Data controller

The controller of your personal data on this platform is:

Apreia is an independent creative platform operating from Europe. The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven, Act No. 502 of 23 May 2018).

2. Personal data we collect

We collect and process the following categories of personal data:

Data you provide directly

Full name and username
Email address
Password (stored encrypted, never in plain text)
Profile information: biography, location (city or country), physical attributes in model profiles, specializations and experience level
Profile photos and portfolio images
Messages sent through the platform
Casting applications or submissions
Reports or complaints submitted about other users

Data collected automatically

Session data and authentication tokens
Connection status (last activity timestamp)
Account registration date and time
Basic technical information necessary to ensure service security

3. Legal basis for processing

In accordance with Article 6 of the GDPR, we process your personal data on the following legal bases:

Purpose	Legal basis
Account creation and management	Performance of a contract (Art. 6(1)(b))
Displaying your profile to other users	Performance of a contract (Art. 6(1)(b))
Sending messages between users	Performance of a contract (Art. 6(1)(b))
Report management and moderation	Legitimate interest (Art. 6(1)(f))
Platform security and abuse prevention	Legitimate interest (Art. 6(1)(f))
Account-related notifications	Performance of a contract (Art. 6(1)(b))

4. How we use your data

Your personal data is used exclusively for the following purposes:

Creating and maintaining your user account
Displaying your public profile to other platform users
Enabling messaging and collaboration between users
Managing casting calls and applications
Processing user reports and ensuring community safety
Sending essential notifications related to your account (security, important changes or account management)
Enforcing platform rules and preventing abuse or misuse

Apreia does not use your personal data for personalized advertising, commercial profiling or automated decision-making.

We do not sell or share your personal data with third parties for commercial purposes either.

5. Data sharing and third parties

Your personal data is not sold or shared with third parties for commercial purposes.

Data may only be disclosed in the following cases:

When required by applicable legislation
When there is a court order or request from a competent authority
When necessary to protect the rights, safety or integrity of Apreia or its users
When necessary to investigate potential abuse, fraud or illegal activities on the platform

The platform does not use external advertising networks or third-party analytics tools.

6. Data storage and security

All data is stored on servers located within the European Union or the European Economic Area.

Apreia applies appropriate technical and organizational measures to protect personal data, including:

Encrypted connections via HTTPS/TLS
Passwords stored using secure hashing algorithms
Access controls restricted to authorized administrators
Periodic infrastructure security reviews
Measures to prevent unauthorized access or misuse

7. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy.

Active account data: retained as long as the account remains active
Deleted account data: permanently deleted after account deletion, unless there is a legal obligation to retain them
Messages between users: retained as long as both accounts exist. If an account is deleted, messages may be anonymized or removed
Reports and moderation records: may be retained for longer when necessary for platform security or for defense against legal claims

8. Your rights under the GDPR

Under the GDPR you have the following rights:

Right of access (Art. 15): You may request a copy of the personal data we process about you.
Right to rectification (Art. 16): You may correct inaccurate or incomplete data.
Right to erasure (Art. 17): You may delete your account and request the deletion of your personal data.
Right to restriction of processing (Art. 18): You may request that we limit the use of your data in certain circumstances.
Right to data portability (Art. 20): You may request your data in a structured, machine-readable format.
Right to object (Art. 21): You may object to processing based on legitimate interest.

To exercise any of these rights you may write to:

privacy@apreia.com

We will respond within a maximum of 30 days, in accordance with the GDPR.

9. Cookies

Apreia only uses strictly necessary technical cookies for the operation of the platform.

Cookies used:

sessionid — Keeps your session active.
csrftoken — Protects against cross-site request forgery (CSRF) attacks.

These cookies are not used for advertising or user tracking.

In accordance with the EU ePrivacy Directive and Danish cookie regulations, these technical cookies do not require prior consent.

10. Children's privacy

Apreia is not intended for persons under 18 years of age.

We do not knowingly collect personal data from minors.

If we detect that a user is under 18 years of age, their account will be deleted immediately.

11. International data transfers

Data processing and storage is carried out exclusively within the European Union or the European Economic Area.

Apreia does not make international data transfers to countries outside the EU/EEA.

12. Changes to this policy

We may update this privacy policy occasionally to adapt it to legal, technical or operational changes to the platform.

When changes are significant, users will be informed through the platform.

The date shown at the top reflects the last update.

13. Right to file a complaint

If you believe that the processing of your personal data infringes applicable regulations, you have the right to file a complaint with the competent supervisory authority.

In Denmark:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Web: www.datatilsynet.dk

14. Contact

For any questions or requests related to this privacy policy or the processing of your personal data, you may contact: