Privacy Policy

Last updated: October 2025

The protection of your personal data is very important to us. This Privacy Policy explains how we process your personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Table of Contents

  1. Name and Contact Details of the Controller
  2. Contact Details of the Data Protection Officer
  3. Processing of Personal Data on Our Website
    1. Website Visits
    2. Contact by Email
    3. Hosting
  4. Processing of Personal Data in Business Relations (Models, Clients, Partners)
    1. Scope and Purposes of Processing
    2. No Use of Artificial Intelligence (AI)
    3. Data Sources
  5. Applications (Job Candidates and Open Positions)
  6. Categories of Recipients
  7. Duration of Storage
  8. Your Rights as a Data Subject
  9. Right to Object (Art. 21 GDPR)

1. Name and Contact Details of the Controller

Tanit Talent & Brand Alliances GmbH
Bleibtreustraße 16
10623 Berlin
Germany
Phone: +49 (30) 960 646 90
Email: support@tanit-alliances.com

Website: www.tanit-alliances.com

2. Contact Details of the Data Protection Officer

DataCo GmbH
Sandstraße 33
80335 Munich
Germany
Phone: +49 (89) 452459 900
Email: privacy@dataguard.de

Website: www.dataguard.de

3. Processing of Personal Data on Our Website

3.1 Website Visits

When you visit our website, our system automatically collects the following data:

  • Browser type and version
  • Operating system
  • Referrer URL
  • IP address
  • Date and time of access

These data are temporarily stored in server log files. The processing is technically necessary to provide the website securely and reliably.
The legal basis for this processing is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient operation of the website).

3.2 Contact by Email

If you contact us via email, we will process the data you provide (such as your name, email address, and message content) to handle your inquiry.
The legal basis for processing is Art. 6 (1) (b) GDPR (performance of a contract or steps prior to entering into a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding to requests).
Your data will be deleted after your inquiry has been fully processed, unless statutory retention obligations apply.

3.3 Hosting

Our website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

All personal data collected on our website are processed on servers located within the European Union. The hosting service is used for the purpose of secure and efficient provision of our online offering.
The legal basis for data processing is Art. 6 (1) (f) GDPR (legitimate interest in reliable website operation).

4. Processing of Personal Data in Business Relations (Models, Clients, Partners)

4.1 Scope and Purposes of Processing

Tanit processes personal data of models, clients, and business partners in order to establish and manage collaborations between talents and brands. This includes:

  • Managing talent and client profiles (e.g., comp cards, contact information, portfolio details)
  • Communication with clients and models
  • Coordination and management of projects and bookings
  • Contract management and billing

The legal basis for processing is Art. 6 (1) (b) GDPR (contract performance or pre-contractual measures) and, where applicable, Art. 6 (1) (f) GDPR (legitimate interest in effective business administration and communication).

4.2 No Use of Artificial Intelligence (AI)

Tanit does not use artificial intelligence (AI) tools for processing, editing, or enhancing photos, videos, or personal data.
Tanit does not create avatars, digital replicas, or AI training datasets using personal data.
If AI-based photo or video editing is performed, it takes place exclusively under the responsibility of the respective client (e.g., brand, agency, or production company). Tanit does not access or control such processing.

4.3 Data Sources

Personal data is usually collected directly from you (for example, during registration or application as a model).
In some cases, data may be provided by clients or cooperation partners for project coordination purposes.

5 Applications

If you apply for a position with us, we process the personal data you provide as part of your application (for example, name, contact details, CV, references, and any other information you voluntarily submit).
The purpose of this processing is to evaluate your application, carry out the recruitment process, and, if applicable, initiate an employment relationship.
The legal basis for this processing is Art. 6 (1) (b) GDPR and Section 26 (1) BDSG (data processing for employment-related purposes).
Your data will be stored for the duration of the recruitment process and deleted no later than six months after the conclusion of the application procedure, unless you have given consent to longer storage (for example, inclusion in a talent pool) or statutory retention obligations require otherwise.

6. Categories of Recipients

We may transfer personal data to service providers (e.g., IT, CRM, or accounting providers) that support us in the execution of our business processes.
These providers are contractually bound to process data securely and in compliance with the GDPR.
If data is transferred outside the European Union (to a “third country”), this only occurs if an adequacy decision by the European Commission exists or if appropriate safeguards (e.g., standard contractual clauses) are in place.

7. Duration of Storage

Personal data is stored for as long as necessary to fulfill contractual or legal obligations.
After the purpose ceases to apply, or upon request for deletion, the data will be erased unless statutory retention periods (e.g., under tax or commercial law) require longer storage.

8. Your Rights as a Data Subject

You have the following rights under the GDPR with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)

To exercise these rights, please contact us at support@tanit-alliances.com or the Data Protection Officer at privacy@dataguard.de.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your data is being processed unlawfully.

9. Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data that is based on Art. 6 (1) (f) GDPR (processing for legitimate interests), including profiling based on those provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves to establish, exercise, or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling related to direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
You may submit your objection at any time by email to support@tanit-alliances.com.

This Privacy Policy was created with the support of DataGuard.