Privacy Policy

1. Privacy at a glance This privacy policy explains which personal data may be processed when visiting this website and using the available contact options. This website is a personal cosplay and portrait photography portfolio website by Rakku.

2. Controller The controller responsible for data processing on this website is the person or entity named in the legal notice. The legal notice is linked in the footer of this website. For privacy-related questions, please use the contact option listed there.

3. Website access and server log files When you visit this website, technically necessary access data may be processed by the web server. This can include the IP address, date and time of access, requested page or file, referrer URL, browser type, operating system, HTTP status code and transferred data volume.

This data is processed to deliver the website technically, ensure stability and security, analyze errors and prevent misuse.

4. Cookies and live chat This website itself does not use its own tracking or marketing cookies. A technically necessary session cookie is used for the protected dashboard area after login.

For the live chat (Tawk.to, see section 9) the provider itself may set cookies, e.g. for recognition purposes, once the chat is loaded on a page. See section 9 for details.

5. MongoDB and stored website data This website uses MongoDB to store website and portfolio data, such as page texts, design settings, links, portfolio entries, image paths, categories, tags and technically necessary dashboard sessions.

6. Portfolio, images and uploads Portfolio entries may display images, titles, descriptions, categories, tags and additional shooting information. These contents become publicly visible once enabled or published in the dashboard. Please upload only images for which you have the required rights and where the people shown have agreed to publication.

7. Contact via Instagram, Discord, e-mail or live chat This website may link to Instagram, Discord and e-mail options, as well as the live chat (Tawk.to, see section 9). There is no classic contact form that stores messages directly on this website. If you use Instagram or Discord, you leave this website and the privacy policies of the respective platforms apply as well.

8. External links This website may contain links to external platforms such as Instagram, Discord, YouTube, TikTok or X/Twitter. When clicking such links, personal data may be processed by the respective providers.

9. Live chat (Tawk.to) This website embeds the live chat service tawk.to, provided by tawk.to inc., a company based in the United States (187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA). Once the chat is loaded, the following data may be processed: chat messages, voluntarily provided name and e-mail address, IP address, device and browser information, and technical cookies needed to provide the chat.

The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in fast, direct communication) or Art. 6 (1)(a) GDPR where the chat is actively used or cookie consent has been given.

Since tawk.to processes data in the United States, this involves a transfer of data to a third country. tawk.to has self-certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as an adequacy mechanism for data transfers to the US; tawk.to also offers a Data Processing Addendum (DPA). See tawk.to's own privacy policy for further details.

10. Storage period Request data from the shooting request form or the live chat (e.g. name, contact details, request information) is generally deleted once the request has been fully handled and no further communication is required, but no later than 12 months after the shoot is completed or the last contact.

If invoices, payment records or other tax-relevant business documents are created in connection with a shoot, these are retained for 6 or 10 years after the end of the respective calendar year due to statutory retention obligations under German law (§ 147 AO, § 257 HGB), even where earlier deletion would otherwise be possible.

Personal data is stored only as long as necessary for the respective purpose. Portfolio and website data remain stored until changed, hidden or deleted in the dashboard. Chat history is retained according to tawk.to's own retention periods.

11. Automated decision-making No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

12. Your rights Within the scope of applicable law, you have rights to information, rectification, deletion, restriction of processing, data portability and objection to certain processing activities.

13. Right to lodge a complaint with a supervisory authority If you believe that the processing of personal data violates data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

14. Changes to this privacy policy This privacy policy may be updated if website features, used services or legal requirements change.