Briefly, first: this site sets no cookies, runs no analytics or tracking, and loads nothing from anyone else's servers.
This is a courtesy translation. The binding version is the German Datenschutzerklärung — where the two differ, the German text governs.
The controller for the processing described here, within the meaning of the GDPR, is:
Ashok GunasekaranWe are not required to appoint a data protection officer; the address above handles any question about your data.
Since it answers most of the questions:
That is also why there is no cookie banner here: there is nothing to consent to.
You have the right to know what we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on legitimate interests (Art. 21).
Where processing rests on your consent, you can withdraw it at any time with effect for the future. That does not affect the lawfulness of what was done before.
In every one of these cases an informal message to pixietalesstudio@gmail.com is enough. We answer within a month.
This site is hosted by Vercel Inc., USA (Vercel's privacy policy). Vercel processes the data arising when the page is requested on our behalf, under a data processing agreement per Art. 28 GDPR that incorporates the EU Commission's Standard Contractual Clauses for transfers outside the EU.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is serving this website reliably, quickly and securely.
Each page request automatically records the data your browser sends, which is technically necessary to deliver the page:
We do not combine this with any other data and do not analyse it against individuals. It is deleted automatically after a short period.
This site is served only over an encrypted TLS connection — the https:// and the padlock in your browser. What you send us cannot be read in transit by anyone else.
If you fill in the form on the Reserve page, you send us what you type there: your name, your email address, the kind of session, the due date or the date of the occasion, and — if you choose to — your message and how you found us.
We use it for one thing: to answer you and to prepare a possible shoot with you.
The entries are sent to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where they are stored in a spreadsheet (Google Sheets); we also receive a notification by email (Gmail). Google may transfer data onward to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. See Google's privacy policy for more.
Art. 6(1)(b) GDPR, since the processing serves pre-contractual steps taken at your request. The tick box in the form additionally records your consent under Art. 6(1)(a) GDPR.
If no booking follows, we delete your enquiry at the latest six months after we last heard from you. If a booking does follow, we keep the data as long as we need it to do the work, and beyond that only where commercial and tax law requires us to.
This form does not put you on a mailing list. We use your address to answer you and to arrange your session, and nothing else. We send marketing email only where you have separately and explicitly asked for it.
If you write or call us directly, we keep your message and what is in it in order to deal with it. The legal basis is Art. 6(1)(b) GDPR where it concerns a possible booking, otherwise Art. 6(1)(f) — our legitimate interest in answering enquiries. The same deletion periods apply.
Photographs and film made at a session are processed first of all simply to fulfil our contract with you (Art. 6(1)(b) GDPR).
Publishing them — on this website, in our portfolio, or on social media — happens only on the basis of your separate consent under Art. 6(1)(a) GDPR and § 22 KunstUrhG. That consent is genuinely optional: it is not a condition of working with us, and refusing it costs you nothing.
You can withdraw it at any time with effect for the future. Tell us, and we take those frames off this website and out of our own channels. Copies that other people have already saved or shared are beyond our reach — that is the one part we cannot undo, and we would rather say so in advance.
Where children are photographed, we obtain consent from those with parental responsibility.
We use no automated decision-making and no profiling within the meaning of Art. 22 GDPR.
If you believe we are handling your data unlawfully, you can complain to a data protection authority. Ours is:
Berliner Beauftragte für Datenschutz und InformationsfreiheitWe update this policy whenever something changes about the site or the services behind it. The version published here is the one that applies.
Last updated: 2 August 2026 · Impressum