Information pursuant to Articles 13, 14 and 21 of the EU General Data Protection Regulation (GDPR).

Preamble

We hereby inform you about our processing of your personal data and the claims and rights to which you are entitled according to data protection regulations. The exact type of data that is processed and how it is used is determined by the services you have requested or that have been arranged with you.

1. Who is responsible for data processing and who can I contact?

The controller responsible for processing your personal data is:

Dengo Portraits Delaware LLC

Registered Office:

16192 Coastal Highway
Lewes, DE 19958, United States

Email: hello@dengoportraits.com

Phone: +1 (352) 349-9028

2. What sources and data do we use?

We process the personal data that we receive from you as part of our business relationship. In addition, we process, to the extent necessary for the provision of our services, personal data that we receive from other sources (e.g. the facilities in which we photograph, such as schools and day-care centres) in a legally permissible way (e.g. to execute orders, to fulfil contracts or on the basis of a consent granted by you). We are also permitted to process personal data which we may have obtained from publicly available sources (e.g. debtor directories, press, media) in a legally permissible way. Relevant personal data are personal details and contact details (name, address, telephone number and email address). In addition, this may also include order data or data from the fulfilment of our contractual obligations, such as advertising and sales data, documentation data, data on your use of our tele-media offerings, as well as other data comparable with the aforementioned categories.

3. Why do we process your data (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR).

3.1. To fulfil contractual obligations (Art. 6 (1) letter. b GDPR)

The processing of personal data is carried out for the provision of the photographic services and the associated sale of captured images and their electronic transmission or production on photo products and delivery to customers, and in particular also to carry out our contracts or pre-contractual measures with you, as well as the execution of your orders. The purposes of data processing are primarily obligations arising from the sales contract in which you enter with us by placing an order in our shop and can include, among other things, reminders of important events. You can find further details about the purpose of data processing in the respective terms and conditions.

3.2. In the context of the balancing of interests (Art. 6 (1) letter f GDPR)

If necessary, we process your data beyond the actual fulfillment of a contract in order to protect our own legitimate interests or those of third parties. These purposes may include advertising, market research, or opinion research, insofar as you have not objected to the use of your data; the enforcement of legal claims and defense in legal disputes; ensuring IT security; preventing and investigating criminal offenses; business management; the development of services and products; fraud prevention; payment verification; customer support; website administration; analytics; service improvement; order management; quality assurance; and maintaining the security of our systems. Where express consent is legally required, including for SMS marketing communications, we rely on your consent rather than legitimate interests. We also process personal data when you contact us through our contact form. We process any information that you include in the form. This information is needed to process and respond to your inquiry or request. Once your inquiry or request has been resolved, we delete your information unless it must be retained to comply with legal obligations, resolve disputes, document customer service communications, or enforce our agreements. When we are engaged to provide photography services at an event, school, childcare center, or other organization, we may process personal data obtained there on the basis of our legitimate interest in fulfilling the services requested and offering the resulting photographs for purchase. When applicable, we provide information regarding the photographs taken and the right to object. Please note that an objection only takes effect in the future. Processing carried out before the objection remains unaffected.

3.3. On the basis of your consent (Art. 6 (1) letter a GDPR)

If you have given us consent to the processing of personal data for certain purposes (e.g. publication or use of images), the legality of such processing is based on your consent. You may revoke your consent at any time with effect for the future. Please note that the revocation only takes effect in the future. Processing carried out before the revocation remains unaffected.

3.4. Pursuant to legal requirements (Art. 6 (1) letter c GDPR) or in the public interest (Art. 6 (1) letter e GDPR)

We also process personal data on the basis of legal requirements. For example, we store invoice data (name, address) on the basis of existing legislation, such as the retention obligations.

4. Who gets my data?

In the course of using the online shop, your data will be received by those who require it to fulfill our contractual and legal obligations. Our data processors may also receive information for these purposes. These may include companies that provide IT services, online gallery services, cloud storage, payment processing, professional photo laboratory services, shipping, website hosting, email communications, customer support, accounting services, telecommunications services, and collection services when legally necessary. A transfer of data to recipients outside Dengo Portraits Delaware LLC takes place only when permitted by applicable law, necessary to provide the requested services, required to fulfill a legal obligation, or authorized through your consent. Under these conditions, recipients of personal data may include public authorities and institutions, supervisory authorities, banking institutions, payment providers, legal advisors, accountants, insurance providers, government agencies, and law enforcement authorities when required by applicable law. Other data recipients may include those for whom you have expressly consented to the transmission of data. For clarity, nothing in this section permits the sale, rental, or sharing of mobile phone numbers, SMS opt-in information, or messaging consent data with third parties or affiliates for their own marketing or promotional purposes. Mobile information may be provided only to service providers acting on our behalf when reasonably necessary to operate and deliver our messaging services. These service providers are authorized to use the information solely to provide services on our behalf and not for their own marketing or promotional purposes.

5. How long will my data be stored?

Where necessary, we process and store your personal data to the extent necessary to comply with our contractual obligations. In addition, we are subject to various retention and documentation obligations. The time limits for storage and documentation can be two to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which are usually three years, but can also be up to thirty years in certain cases.

5.1 Children's Privacy

Our services are provided exclusively in cooperation with schools, childcare centers, preschools, and educational organizations. Information relating to children is collected only as necessary to provide our photography services and only in connection with authorization provided by a parent, legal guardian, or educational institution as permitted by applicable law. We do not knowingly collect personal information directly from children through our website.

6. Is data transmitted to a third country or to an international organisation?

Data transmission to third countries (states outside the European Economic Area, EEA) takes place only to the extent necessary to fulfil our contractual requirements towards you, if required by law, or if you have given us your consent. We will inform you separately about the details if doing so is required by law. Our service providers may process personal data in the United States and other countries where they operate. Whenever required, we implement appropriate safeguards for international data transfers in accordance with applicable privacy laws.

7. What data privacy rights do you have?

Each person concerned shall have the right to information according to Art. 15 of the GDPR, the right to rectification under Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restrict the data processing according to Art. 18 GDPR and the right to data transferability under Art. 20 GDPR. In the right to information and the right to deletion, the restrictions under §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR).

8. Is there a duty for me to provide data?

In the context of our business relationship, you must provide only the personal data necessary for the establishment, execution and termination of a business relationship or for which we are legally obliged to collect. Without this data, we will usually have to reject the conclusion of the contract or the execution of the order or will no longer be able to execute an existing contract and may have to terminate. Furthermore, it is necessary for us to request additional data for the provision of paid services, including how to process your desired payment method.

9. SMS Notifications and Marketing Communications

When you voluntarily provide your mobile phone number and expressly consent to receive text messages, Dengo Portraits Delaware LLC may send you SMS communications relating to photo gallery availability, opportunities to purchase photographs, order reminders, shipping offers, discounts, and other promotional notifications connected with our photography services. We record your consent to receive SMS communications, including available information associated with that consent, such as the date, time, and IP address when applicable. Message frequency varies. Message and data rates may apply. Consent to receive SMS messages is not a condition of purchasing any product or service. You may opt out of receiving SMS communications at any time by replying STOP to any text message. After opting out, you will no longer receive SMS messages from us unless you provide consent again. You may reply HELP for assistance or contact us at hello@dengoportraits.com or +1 (352) 349-9028. We do not sell, rent, share, or provide mobile phone numbers, SMS opt-in information, or messaging consent data to third parties or affiliates for their own marketing or promotional purposes. Mobile information may be disclosed only to service providers acting on our behalf when necessary to operate and deliver our messaging services. These service providers are authorized to use this information solely to provide services on our behalf and not for their own marketing or promotional purposes. Your decision to opt out applies to future SMS communications and does not affect processing that occurred before your opt-out request.

10. Third-party functions

10.1. Cookies

What are cookies?

“Cookies” are text files that are stored on your computer that allow an analysis of your use of the website.

What exactly do cookies do?

The information generated by the cookie about your use of this website is usually transferred to a server and stored there. However, due to the activation of IP anonymisation on some websites, your IP address is sometimes shortened in advance within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Depending on the service provider, such an IP address is stored truncated.

What are the transferred data used for?

On behalf of Dengo Portraits Delaware LLC, the third party will use this information to analyse your use of the website, to compile reports on the activities of the website and to provide further services to the website operator related to the use of the website and the Internet.

How do I turn off cookies?

You can prevent the storage of cookies by changing the corresponding setting in your browser software; however, we would point out that in this case you may not be able to use all the functions of this website to their full extent. Which third-party cookies are used? We use the following third-party cookies on our website:

Google Analytics (if enabled)
Google Tag Manager (if enabled)
GotPhoto
Microsoft 365 Services (if applicable)
Payment processing services used for secure checkout

Last Updated: August 28, 2026

Information about your right to object

According to Art. 21 GDPR

1. General right to object

You have the right, for reasons arising from your particular situation, to file an objection at any time to the processing of personal data relating to you, on the basis of Art. 6 (1) letter f GDPR (data processing based on the balancing of interests). If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcement, exercise or defence of legal claims.

2. Right to object against the processing of data for direct marketing purposes

In individual cases we process your personal data in order to perform direct marketing. You have the right at any time to object to the processing of personal data relating to you for the purpose of such marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection must be addressed in writing by email to the following contact person: