Privacy Policy

Personal data, usually referred to as “data” below, will only be processed by us to the extent necessary and for the purpose of providing a functional, secure and user-friendly website, including its contents and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation, hereinafter referred to as the “GDPR”, “processing” means any operation or set of operations performed on personal data, whether or not by automated means. This includes, for example, collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, restriction, erasure or destruction.

The following privacy policy is intended to inform you about the type, scope, purpose, duration and legal basis of the processing of personal data, whether under our own control or in cooperation with service providers. We also inform you below about third-party services and technical components used to provide, secure, optimize and improve our website.

Last updated: July 2026

Our privacy policy is structured as follows:

1. Information about us as controller
2. The rights of users and data subjects
3. Information about the data processing

I. Information about us as controller

The party responsible for this website, the “controller” for purposes of data protection law, is:

THE MISS INTERCONTINENTAL ORGANIZATION S.A.
MANOJ CHATLANI

Torre SL 55, Calle 55 / Esq. Samuel Lewis, Obarrio
Panama City, Republic of Panama
Tel: +(507) 83 24194
Fax: +(507) 2277485
E-Mail: info@missintercontinental.com

The controller’s data protection contact is:

Torre SL 55, Calle 55 / Esq. Samuel Lewis, Obarrio
Panama City, Republic of Panama
Tel: +(507) 83 24194
E-Mail: info@missintercontinental.com

II. The rights of users and data subjects

With regard to the data processing described below, users and data subjects have the following rights under the GDPR:

• the right to obtain confirmation as to whether personal data concerning them is being processed, information about the processed data, further information about the nature of the data processing and copies of the data, Art. 15 GDPR;
• the right to have inaccurate or incomplete data corrected or completed, Art. 16 GDPR;
• the right to the deletion of personal data concerning them, Art. 17 GDPR, or, alternatively, the right to restriction of processing, Art. 18 GDPR;
• the right to receive the personal data concerning them and provided by them in a structured, commonly used and machine-readable format and to transmit those data to another controller, Art. 20 GDPR;
• the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates data protection law, Art. 77 GDPR.

In addition, the controller is obliged to inform all recipients to whom personal data has been disclosed of any correction, deletion or restriction of processing pursuant to Art. 16, 17 and 18 GDPR, unless this proves impossible or involves a disproportionate effort. Users also have the right to be informed about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the future processing of personal data concerning them if the processing is based on Art. 6 Para. 1 lit. f GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage no longer applies, provided that deletion does not conflict with statutory retention obligations or unless otherwise stated below.

Provision of the website, hosting and server log files

To provide our website securely and efficiently, we use hosting services and technical infrastructure services. When you access our website, technical data is processed in order to deliver the website to your browser, maintain the stability of the website and ensure security.

This data may include, in particular, the requested page or file, date and time of access, amount of data transferred, browser type and browser version, operating system, referrer URL, IP address and the requesting provider.

This data is processed for the purpose of providing the website, ensuring system security, detecting technical errors, preventing misuse and maintaining the stability of the website.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website.

Content Delivery Network and website security with Bunny.net

We use Bunny.net for the secure, stable and efficient delivery of our website. Bunny.net is provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia.

Bunny.net is used as a Content Delivery Network and as a technical security solution. Website content may be delivered through Bunny.net servers. In addition, incoming requests may be checked by technical security functions such as Web Application Firewall, bot detection, access controls, rate limiting and attack detection.

The purpose of using Bunny.net is to deliver our website faster, more reliably and more securely, and to detect and prevent automated attacks, abusive access and attempts to exploit technical vulnerabilities at an early stage.

When you access our website, Bunny.net may process technical access data. This may include IP addresses, requested URLs, date and time of access, browser and device information, HTTP headers, referrer information and information about security-related events.

Bunny.net may use short-lived, technically necessary first-party cookies or comparable technologies for security functions. These technologies may be used to recognize legitimate access, validate sessions, prevent automated bot requests and protect the website. They are not used for advertising, marketing or cross-site tracking purposes.

The legal basis for this processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and high-performance provision of our website as well as in the protection against attacks, misuse and unauthorized access.

Where required by data protection law, we have concluded a data processing agreement with BunnyWay d.o.o.

• Processed data: usage data, meta and communication data, IP addresses, browser and device information, technical access data, security event data.
• Purpose of processing: website delivery, website security, bot protection, attack detection, performance optimization and system stability.
• Legal basis: Art. 6 Para. 1 lit. f GDPR.
• Provider: BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia.
• Website: https://bunny.net/
• Privacy policy: https://bunny.net/privacy/

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your device by your browser. These cookies may process certain information such as browser information, session data, language settings or IP address.

This processing makes our website more user-friendly, efficient and secure. For example, cookies may be used to provide language settings, security functions or other technically necessary website functions.

The legal basis is Art. 6 Para. 1 lit. b GDPR insofar as cookies are used to initiate or process contractual relationships. If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality, security and usability of our website. The legal basis is then Art. 6 Para. 1 lit. f GDPR.

Session cookies are deleted when you close your browser.

b) Technically necessary security cookies

We may use technically necessary cookies or comparable technologies to ensure the security and functionality of our website. This may be necessary in particular to detect and prevent automated access, abusive requests, bot attacks or other security-related processes.

Such cookies are not used for advertising, marketing, analytics or user tracking, but exclusively for the technical provision and protection of our website.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure operation of our website and the prevention of misuse.

c) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analytics, embedded content or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

d) Disabling cookies

You can refuse the use of cookies by changing the settings of your browser. You can also delete cookies that have already been stored. However, if you prevent or restrict the installation of cookies, not all functions of our website may be fully usable.

Contact

If you contact us via email or contact form, the data you provide will be used for the purpose of processing your request. This data is necessary in order to process and answer your inquiry. Without this data, we may not be able to answer your inquiry in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b GDPR insofar as your request relates to a contract or pre-contractual measures. In all other cases, the legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in responding to inquiries addressed to us.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store the data.

Customer account / registration

If you create a customer account with us via our website, we will use the data entered during registration, such as name, address or email address, exclusively to provide the customer account, process contractual relationships and provide customer care. We may also store the IP address and the date and time of registration.

During the registration process, your consent may be obtained for this processing, with reference made to this privacy policy. The data collected will be used exclusively to provide the customer account.

If you give your consent to this processing, Art. 6 Para. 1 lit. a GDPR is the legal basis. If the opening of the customer account is also intended to initiate or fulfill a contractual relationship, the legal basis is Art. 6 Para. 1 lit. b GDPR.

You may revoke your consent at any time with future effect pursuant to Art. 7 Para. 3 GDPR. The data collected will then be deleted as soon as processing is no longer necessary, unless statutory retention obligations apply.

Newsletter

If you register for our newsletter, the data requested from you for this purpose, in particular your email address and, where applicable, your name, will be processed for the purpose of sending the newsletter. We may also store the IP address and the date and time of registration in order to document the registration process.

The legal basis is Art. 6 Para. 1 lit. a GDPR.

You may revoke your consent to receive the newsletter at any time with future effect. You can do this by informing us that you are revoking your consent or by clicking the unsubscribe link contained in each newsletter.

User posts, comments and ratings

If we offer the opportunity to post questions, answers, opinions, comments or ratings on our website, we process and publish your post, the date and time of submission and any pseudonym used.

The legal basis for publishing such content is Art. 6 Para. 1 lit. a GDPR if you have given your consent.

In addition, we may process your IP address and email address if we have a legitimate interest in taking or supporting further action in the event that your post infringes the rights of third parties or is otherwise unlawful. The legal basis in this case is Art. 6 Para. 1 lit. f GDPR.

Follow-up comments

If we offer the option to subscribe to follow-up comments, we will process your email address in order to send you notifications about subsequent comments.

The legal basis is Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with future effect.

Google Analytics

We may use Google Analytics on our website. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics may process usage and user-related information, such as IP address, time and frequency of visits and information about the use of our website. We use Google Analytics to analyze, optimize and improve our website.

If Google Analytics is used with IP anonymization, Google will shorten the IP address within the European Union or the European Economic Area before transmission to the United States, except in exceptional cases.

The legal basis is generally your consent pursuant to Art. 6 Para. 1 lit. a GDPR, insofar as consent is required. Where processing is carried out on the basis of legitimate interests, the legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

You can prevent the storage of cookies by selecting the appropriate settings in your browser. In addition, Google provides an opt-out browser add-on at https://tools.google.com/dlpage/gaoptout?hl=en.

Further information about Google’s data processing can be found at https://policies.google.com/privacy.

Google Maps

Our website may use Google Maps to display maps or provide directions. Google Maps is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When Google Maps is integrated and accessed, Google may process your IP address and, depending on your device settings, location data. Google may also process information about the use of the map function.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in improving the functionality and usability of our website. Where consent is required, the legal basis is Art. 6 Para. 1 lit. a GDPR.

Further information can be found in Google’s privacy policy at https://policies.google.com/privacy.

Google reCAPTCHA

Our website may use Google reCAPTCHA to check whether entries on our website, for example in contact forms, are made by a human or by an automated program. Google reCAPTCHA is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google reCAPTCHA may process your IP address and other information required to provide and ensure the service. This may include browser and device information, interaction data and usage behavior.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the security of our website and the prevention of unwanted automated access, spam and misuse. Where consent is required, the legal basis is Art. 6 Para. 1 lit. a GDPR.

Further information can be found in Google’s privacy policy at https://policies.google.com/privacy.

Google Fonts

Our website may use Google Fonts to display external fonts. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When Google Fonts are loaded from Google servers, a connection to Google may be established and your IP address may be transmitted to Google.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the uniform, technically stable and visually appealing presentation of our website. Where consent is required, the legal basis is Art. 6 Para. 1 lit. a GDPR.

Further information can be found at https://policies.google.com/privacy.

Facebook plug-in

Our website may use plug-ins or links to the Facebook social network. Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The parent company is Meta Platforms Inc., USA.

If Facebook plug-ins are integrated, Facebook may process your IP address and information about your visit to our website. If you are logged into Facebook while visiting our website, Facebook may assign this information to your Facebook account.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality and visibility of our website. Where consent is required, the legal basis is Art. 6 Para. 1 lit. a GDPR.

Further information can be found in Facebook’s privacy policy at https://www.facebook.com/policy.php.

Twitter / X plug-in

Our website may use plug-ins or links to the Twitter / X social network. The service is provided by X Corp. or its affiliated companies.

If Twitter / X plug-ins are integrated, Twitter / X may process your IP address and information about your visit to our website. If you are logged into Twitter / X while visiting our website, the information may be assigned to your user account.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality and visibility of our website. Where consent is required, the legal basis is Art. 6 Para. 1 lit. a GDPR.

Further information can be found at https://twitter.com/privacy.

YouTube

We may use YouTube videos on our website. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When YouTube videos are embedded and accessed, YouTube may process your IP address, date and time of access, the website visited and other technical information. If you are logged into YouTube or Google, this data may be assigned to your account.

Where possible, we use YouTube in enhanced privacy mode. According to YouTube, this mode means that certain data is only transmitted when you actually start a video.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality and presentation of our website. Where consent is required, the legal basis is Art. 6 Para. 1 lit. a GDPR.

Further information can be found at https://policies.google.com/privacy.

Shariff social media buttons

Our website may use Shariff social media buttons. Shariff is an open-source solution that helps integrate social media buttons in a more privacy-friendly way.

When Shariff is used, a direct connection to the respective social network is generally only established when you actively click on the corresponding button. Only then may information about your use of our website be transmitted to the respective social network.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in providing privacy-friendly sharing options and improving the visibility of our website.

Further information about Shariff can be found at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

Google Ads and conversion tracking

Our website may use Google Ads and conversion tracking. Google Ads is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Conversion tracking may store a cookie on your device if you click on an advertisement placed by Google. This enables us and Google to determine whether users who clicked on an advertisement were redirected to our website and performed certain actions.

The legal basis is your consent pursuant to Art. 6 Para. 1 lit. a GDPR, where consent is required. Otherwise, the legal basis may be Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website and advertising activities.

Further information can be found at https://policies.google.com/privacy.

Google AdSense

Our website may use Google AdSense to integrate advertisements. Google AdSense is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense may store cookies or comparable technologies on your device and process information such as your IP address, ads displayed, browser information and usage data.

The legal basis is your consent pursuant to Art. 6 Para. 1 lit. a GDPR, where consent is required. Otherwise, the legal basis may be Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Further information can be found at https://policies.google.com/privacy.

Google Remarketing

Our website may use Google Remarketing. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Remarketing can be used to show interest-based advertising on third-party websites that participate in Google’s advertising network. For this purpose, Google may store cookies or comparable technologies on your device and process usage data.

The legal basis is your consent pursuant to Art. 6 Para. 1 lit. a GDPR, where consent is required. Otherwise, the legal basis may be Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website and advertising activities.

Further information can be found at https://policies.google.com/privacy.

Newsletter via WhatsApp

If we offer a newsletter via WhatsApp, your mobile phone number and any further data required for the service will be processed for the purpose of sending the newsletter. WhatsApp is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The parent company is Meta Platforms Inc., USA.

The legal basis for sending the newsletter is your consent pursuant to Art. 6 Para. 1 lit. a GDPR.

You may revoke your consent at any time with future effect. You can also block newsletter delivery using the settings in the WhatsApp software on your device.

Further information can be found at https://www.whatsapp.com/legal/privacy-policy.

Online job applications / publication of job advertisements

We may offer you the opportunity to apply for jobs via our website. In the case of digital applications, we collect and process your application data electronically in order to process your application.

The legal basis for this processing may be Art. 6 Para. 1 lit. b GDPR, Art. 6 Para. 1 lit. f GDPR and, where applicable, national employment data protection provisions.

If you are hired as a result of the application process, we may store the data provided during the application process in your personnel file for the purpose of the employment relationship and in compliance with legal obligations.

If we do not hire you, the data submitted to us will generally be deleted after the application process has been completed, unless statutory retention obligations apply or we have a legitimate interest in retaining the data for legal defense purposes.

If you expressly consent to longer storage of your data, for example for inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect.