Your data.
Clear information.
Who processes your data?
Clément Kabeya, sole trader operating as Opulentia (Maison Opulentia), is the controller for the processing described here: Cité de Pommard 6, 4970 Stavelot, Belgium, enterprise number 1030.907.585. For questions or rights requests: clement@opulentiaagency.be.
Project enquiries and follow-up.
We collect the name, email address and brief needed to answer your enquiry. Your organisation, project location, selected profiles, requested portfolio and dates or flexibility complete it when you provide them. The form language helps us reply in French or English.
The information is recorded in our CRM with the contact, any organisation and the exchange history. Maud handles initial follow-up and prepares relevant information; Clément decides on engagements. Professional email may send a confirmation and receive your replies. Recording, sending and receipt by your email service are separate steps: an on-screen message does not guarantee delivery. No booking commitment is automated.
The basis is taking steps at your request before entering a contract when you act for yourself; for contacts acting for an organisation, our legitimate interest is to answer the enquiry and manage the professional relationship. The form does not subscribe you to a marketing list.
Applications and opportunities.
We request your name, email address and introduction to review your application. A telephone number and portfolio link are optional. No age, identity document or photo upload is requested at this stage. Please do not provide health information or sensitive documents we have not requested.
The initial review responds to your precontractual request. Using an unsuccessful application to search for future opportunities remains suspended until its legal basis and related information have been settled. Submitting the form is not treated as acceptance of that use. You may request erasure of your application without affecting another ongoing request. An application creates no account, contract or public profile; acceptance requires human review.
Unsuccessful applications eligible for erasure are deleted 12 months after the last actual exchange with you. Administrative edits, drafts or restoration do not restart this period. Files linked to a contract, obligation or dispute are reviewed separately.
Profiles and images.
For represented talent, the catalogue displays information selected by the agency within the representation relationship and image authorisations: public first name or display name, photographs and professional characteristics. Private contact details, age and internal files are not exposed by the catalogue. The profile is removed from public presentation when the talent leaves the house.
Authorisations allowing the agency to promote a profile do not replace the rights a client must obtain for a campaign. Usage and removal requests are reviewed in light of the applicable agreement and the rights of the people concerned.
Private areas and security.
Private access lets authorised people view and manage files, profiles and availability. Passwords are hashed; sign-in sessions last at most eight hours. Accounts are individual. Detailed calendars and internal files are not public; availability for a project must be reconfirmed by a person.
Opening Clément’s access may involve a single administrative invitation from Maud to Clément through professional email. It is separate from client exchanges and does not mean the recipient has activated the account. Staff invitations expire after 24 hours and model-calendar invitations after 48 hours; each is single-use. These are not file retention periods.
Hosting also processes IP addresses and technical logs needed for operation, security and access traceability. Protecting people, accounts and files relies on our legitimate interest. The website does not automatically decide on applications or bookings and does not perform advertising profiling.
Access, hosting and email.
File access is limited to Clément and people authorised to handle enquiries. Information needed for a file may be shared with the models, clients or partners concerned, according to its purpose and applicable rights. An unsuccessful application is not published in the catalogue.
The website and CRM are hosted by OVHcloud on a server in Gravelines, France. LTS Consulting administers this infrastructure and provides technical maintenance.
An isolated, protected copy of the data is kept on the server and on the maintenance team’s Mac. Access is restricted to authorised people and its restoration has been verified. Erasing a file and removing it from backup copies are separate steps, with safeguards against its reintroduction during restoration.
Our professional email uses Google Workspace for confirmations, replies and handovers between Maud and Clément. Data needed for these exchanges falls under Google’s data processing agreement. Google and its subprocessors may process it outside the European Economic Area, including in the United States. Covered transfers to the United States rely on the EU–US Data Privacy Framework; other transfers requiring contractual safeguards are governed by Google’s standard contractual clauses. The linked Google information details the countries, subprocessors and applicable safeguards. You may also request a copy from Clément.
- Google Workspace subprocessors and countries
- Google data processing addendum
- Google transfer mechanisms
Maud is a software assistant for handling enquiries, using OpenAI’s Codex and our professional email. OpenAI processes the parts of your enquiry needed to prepare follow-up communications. The agency remains responsible for the file: this assistance does not decide whether to accept an application or make a commitment or booking; those decisions remain with Clément.
Images, fonts and scripts are served by the website. No Google Analytics, advertising tool, reCAPTCHA, Maps or Instagram embed is integrated. Instagram and LinkedIn links lead to separate services governed by their own rules.
How long is data retained?
The 12-month rule applies only to unsuccessful applications, from the last actual exchange. Data shared with an active file, contractual or accounting documents and disputes are excluded from automatic erasure and reviewed separately. A pseudonymised erasure log is kept for eight days to prevent reintroduction after restoration; the protected restoration window is seven days.
For project enquiries, representation relationships and correspondence, retention depends on handling the project and relationship, then on legal obligations or the need to establish, exercise or defend a right. Information no longer needed is to be deleted or anonymised during file review; the 12-month period is not automatically applied to every category. Public profile removal and erasure from archives, email and backups are separate operations. Contact us for the rule applicable to your file.
Cookies and browser storage.
Sign-in cookies are necessary for private areas. Persistent storage of the model selection and theme is optional and subject to your choice. Before acceptance or after refusal, requested functions may use tab storage without persistent saving. The inventory, durations and controls are on the cookie policy page. Clearing your browser does not delete a file received previously by the agency.
Your rights.
Subject to the GDPR’s conditions, you have rights of access, rectification, erasure, restriction, objection and portability. You can object to follow-up for future opportunities and withdraw consent to optional storage at any time. Withdrawal does not affect earlier lawful processing.
Write to clement@opulentiaagency.be and explain your request. Identity checks are proportionate; do not send an identity-document copy unless necessary. We normally reply within one month, with a reasoned extension where the GDPR permits it. You may complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels. Last updated: 1 November 2026.
