Legal & GDPR Compliance Statement – Divas Amsterdam

This page outlines how Divas Amsterdam, a legally registered escort agency based in Amsterdam, complies with the General Data Protection Regulation (GDPR – Regulation EU 2016/679) and its Dutch implementation, the Algemene verordening gegevensbescherming (AVG).

Divas Amsterdam operates strictly within the legal framework of the Netherlands and is subject to oversight by both local municipalities and the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We provide adult companionship services responsibly, and we handle personal data in full compliance with applicable data protection laws.

Legal Status of Escort Services in the Netherlands

The Netherlands is widely recognized for its transparent and regulated approach to adult services, including escorting. Unlike many countries where such services operate in a legal grey area, Dutch law provides a structured legal framework that outlines when and how escort services can be offered. This framework aims to protect the rights of both clients and service providers while ensuring public safety, legal compliance, and oversight. Municipal authorities, including the city of Amsterdam, are granted the power to issue permits and enforce strict conditions under which agencies can legally operate. As a result, escort services offered by licensed agencies like Divas Amsterdam are entirely lawful and carefully monitored by Dutch institutions.

Is escorting legal in Amsterdam?

Yes, escorting is entirely legal in the Netherlands, including in Amsterdam. Both independent escorts and licensed agencies are permitted to operate under clearly defined laws and regulations. The key legal requirement is that all individuals involved must be consenting adults, acting voluntarily and without any form of coercion or third-party exploitation. Furthermore, agencies must comply with strict municipal licensing frameworks that cover registration, operational transparency, health and safety standards, and taxation. When these legal conditions are met, escort services are recognized as legitimate business activities under Dutch law. They are subject to oversight by local authorities and law enforcement to ensure continued compliance.

Agency Licensing & Regulatory Requirements

Operating a legal escort agency in the Netherlands requires strict adherence to both national and municipal regulations. Divas Amsterdam maintains complete commercial registration with the Dutch Chamber of Commerce (KVK) and meets all operational criteria enforced by the City of Amsterdam and other relevant authorities. These requirements are in place to ensure ethical practices, financial transparency, and the protection of all individuals involved in adult services. Agencies are subject to local inspections and may only operate if they demonstrate full compliance with applicable laws on employment, anti-trafficking, and public safety. As a result, Divas Amsterdam operates with integrity, legal accountability, and a strong commitment to maintaining the highest professional standards.

All escorts work voluntarily and independently, without coercion or third-party control.
We maintain clear contractual agreements and transparent communication with all parties.
Full compliance with Dutch labor, anti-trafficking, and human rights legislation
All personal data is processed securely in accordance with GDPR and the Dutch AVG framework.

Role as Data Controller

Divas Amsterdam acts as a Data Controller under Article 4(7) of the General Data Protection Regulation (GDPR). This legal designation means that we alone determine the purposes for which personal data is collected and the methods by which it is processed. Whether you interact with us through our website (www.divasamsterdam.com), via telephone, email, or in-person communication, we remain fully responsible for how your data is handled. Our responsibilities include ensuring that data processing activities comply with the principles of lawfulness, fairness, transparency, data minimization, and integrity. As the Data Controller, we are also accountable for implementing appropriate technical and organizational measures to protect your information and for upholding your rights as outlined under the GDPR and Dutch privacy law (AVG).

Scope of This Privacy Statement

This privacy statement outlines how Divas Amsterdam collects, uses, protects, and discloses personal data across all aspects of its business operations. The policy applies regardless of how individuals interact with us—whether digitally through our website or offline via direct communication. It covers both clients and service providers, as well as any third parties engaged in technical or operational roles. The scope of this policy is intentionally broad to ensure complete transparency and compliance with GDPR obligations. By clearly identifying the categories of individuals and interactions covered, we aim to provide clarity about how data is handled, who is affected, and under what circumstances this policy takes effect.

Clients who request companionship or related services
Independent escorts affiliated with the agency
Website visitors, contact form users, and registered members
Newsletter subscribers
Technical service providers and data processors

Legal Grounds for Processing Personal Data

We process personal data only when a lawful basis applies under Article 6 of the GDPR:

Consent (Art. 6(1)(a)) – For newsletters, marketing communication, or optional data
Contractual necessity (Art. 6(1)(b)) – For bookings, inquiries, escort registration, or account creation
Legal obligation (Art. 6(1)(c)) – For compliance with requests from Dutch authorities
Legitimate interest (Art. 6(1)(f)) – For internal analytics, fraud prevention, and site security

Categories of Personal Data We Collect

Depending on your interaction with us, we may collect:

Full name or alias (optional)
Email address and phone number
Escort profile data (photos, availability, pseudonyms)
Client preferences or booking details
IP address, browser, and device metadata
Location data (only when explicitly provided)

How We Process Your Data

At Divas Amsterdam, we process personal data with a clear purpose and always within the framework of the GDPR. Each interaction you have with our platform or team may involve the collection and use of certain data types. Below, we explain the specific activities where personal data is involved, what kind of data we process, why we do so, and under which legal basis this processing is justified. Our goal is complete transparency, so you can make informed decisions about how your data is handled.

1. Booking & Contact Forms

When you submit a contact or booking form through our website, we collect the personal data you voluntarily provide—typically your name (or alias), contact details, preferred time, and specific service inquiries. This data is used solely to respond to your request, confirm appointments, and communicate with you securely and confidentially. We do not use this data for marketing unless you’ve explicitly opted in elsewhere.

Legal basis: Contractual necessity (Article 6(1)(b) GDPR).

2. Escort Registration

Independent escorts who wish to be listed on Divas Amsterdam are required to submit specific information through our secure registration process. This includes profile data such as a stage name, availability, photos, and contact preferences. The data is used exclusively to create, publish, and manage escort profiles on our platform. Only data necessary for the service is collected and never shared externally without consent.

Legal basis: Contractual necessity (Article 6(1)(b) GDPR).

3. User Account Creation

To enable secure access to certain features on our platform—such as member areas or direct messaging—we require basic registration data from users. This may include a username, email address, and optionally a phone number. We use this information to authenticate users, prevent unauthorized access, and maintain account security. No unnecessary data is requested or stored.

Legal basis: Contractual necessity (Article 6(1)(b) GDPR).

4. Email Correspondence

When you contact us by email, we retain the message content and contact information only for as long as necessary to address your inquiry or fulfill your request. All communication is stored securely and is never shared externally unless legally required. We do not add your email to any mailing list unless you’ve explicitly opted in.

Legal basis: Contractual necessity (Article 6(1)(b) GDPR).

5. Newsletter Subscriptions

If you choose to subscribe to our newsletter, we collect and store your email address for the sole purpose of sending you updates, promotional content, or important announcements. We use a double opt-in process to ensure your explicit consent, and every email includes a clear unsubscribe link. You can withdraw your consent at any time, and your subscription will be terminated immediately.

Legal basis: Consent (Article 6(1)(a) GDPR).

6. Technical Logs & Analytics

Our website collects anonymized technical data such as your IP address, browser type, device information, referral source, and session duration. This information is used solely to improve website performance, detect potential security threats, and understand user behavior through aggregated statistics. We do not use cookies for behavioral profiling or advertising.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR).

Security Measures

Divas Amsterdam Escort Agency takes data security seriously and implements both technical and organizational safeguards in full accordance with Article 32 of the General Data Protection Regulation (GDPR). Our goal is to ensure that all personal data under our control is protected against unauthorized access, accidental loss, unlawful disclosure, or malicious intrusion. We apply modern cybersecurity practices and continuously review our protocols to adapt to evolving threats. Below are some of the key measures we have in place to secure your data and maintain the integrity of our systems:

SSL/TLS encryption for all data transfers:
All data exchanged between your browser and our servers is encrypted using industry-standard SSL/TLS protocols. This ensures that any personal or sensitive information submitted via our website is protected from interception during transmission.
Role-based access control to internal data:
Access to personal data is restricted to authorized staff members based on job function. Only personnel who require access to fulfill their duties (such as customer support or technical administration) are permitted to view or process user data.
Secure data hosting within the Netherlands:
We host all systems and databases on professionally managed servers located within the Netherlands or the European Economic Area (EEA). These data centers are equipped with strong physical and digital protections, and they comply with EU data security standards.
Regular internal audits and security reviews:
Our team conducts periodic security assessments and compliance reviews to identify risks, address vulnerabilities, and improve our protocols. These reviews help us ensure ongoing compliance with GDPR and strengthen our ability to respond to incidents effectively.

Data Retention Policy

Contractual data: Retained until contract is fulfilled or terminated
Consent-based data: Retained until consent is withdrawn
Analytics logs: Stored for a maximum of 12 months
Escort listings: Removed within 14 days of profile deactivation
Legal obligations: Certain data may be kept up to 5 years in compliance with Dutch civil law

Third-Party Access and Data Processors

We limit access to personal data to the following:

Internal staff, bound by confidentiality agreements
Hosting, email, and technical service providers based in the Netherlands or within the EEA
Legal advisors or government authorities, where required by law

All third-party processors are contractually bound by GDPR-compliant data processing agreements (Art. 28 GDPR).

International Data Transfers

Divas Amsterdam does not transfer personal data outside the European Economic Area (EEA). If an exception arises, we will apply one of the following safeguards:

Standard Contractual Clauses (SCCs)
Transfers to countries with an adequacy decision
Explicit user consent (Art. 49 GDPR)

Cookies Policy

Our website uses minimal cookies solely for:

Session functionality and user preferences
Anonymous traffic analytics
Security and fraud prevention

No third-party advertising or tracking cookies are in use. You can turn off cookies anytime through your browser settings.

Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you are granted several key rights that allow you to understand, manage, and control how your data is collected and used by Divas Amsterdam. We fully support and respect these rights, and we are committed to acting on all verified requests within the legally mandated timeframes.

Access your data (Article 15):
You may request a complete overview of the personal data we hold about you. This includes information on how the data was obtained, how it’s being used, and who it may be shared with. We provide this access transparently and free of charge.
Make corrections to inaccurate information (Article 16):
If you notice that any personal data we process is incorrect, outdated, or incomplete, you can ask us to amend it. Once verified, we will update the records without unnecessary delay.
Request the deletion of your data (Article 17 – “Right to be forgotten” ):
In certain situations, you may ask us to erase your data—for example, when it’s no longer needed, or you have withdrawn consent. If no legal obligations require us to retain it, we will proceed with the erasure promptly.
Temporarily restrict processing (Article 18):
You can request a restriction on the use of your data—for instance, while a dispute over accuracy or legitimacy is being resolved. During this time, we may store the data, but will not process it further without your permission.
Receive your data in a portable format (Article 20):
If technically feasible, we can provide your data in a structured, commonly used, and machine-readable format. You may also request that we transfer it directly to another organization upon your instruction.
Object to certain processing activities (Article 21):
When we process your data based on legitimate interest or for direct marketing, you can object at any time. If no overriding legal reasons exist, we will stop the processing in question.
Withdraw previously given consent (Article 7):
For any processing based on your explicit consent (e.g., for newsletters), you are free to withdraw that consent at any moment. This will not affect data processing carried out before the withdrawal.
File a formal complaint with the supervisory authority:
If you believe your data rights have been violated or mishandled, you have the right to contact the Dutch Data Protection Authority, known as the Autoriteit Persoonsgegevens. We recommend contacting us first to resolve any concerns, but this right is always available to you.

How to Exercise Your Rights

To exercise your data rights or make an inquiry, please get in touch with our Data Protection Officer using our contact form. All requests will be handled within 30 calendar days as mandated by Article 12 GDPR.

Policy Updates

This policy may be updated periodically to reflect legal, operational, or regulatory changes. The latest version was published on August 19, 2025. Previous versions are available upon request.