01Who I am
This website and my photography sessions are run by Miraç Koçak (Miraç Hüseyin Koçak), a freelance photographer based in Budapest, Hungary. I am the data controller for the personal data described here.
For anything about your data, write to mirackocak.eu@gmail.com. I answer within 30 days, usually much sooner.
02What I collect
When you book or ask about a session: your name, email address, phone or WhatsApp number, the date, place and kind of session, the number of people, and anything you choose to tell me, such as a proposal plan or a child's age.
When we meet: the photos and short videos I take of you and the people with you.
When you leave a review: your first name, where you are from, your rating and your words. The review form on this site does not send anything by itself; it prepares a WhatsApp message that you send yourself.
When you browse: this site has no analytics, advertising or tracking cookies. It keeps one small note in your browser's session storage so the opening titles play only once per visit. Fonts load from Google Fonts, which means your browser connects to Google's servers and shares your IP address with them.
03Why I use it, and on what legal basis
To plan, photograph and deliver your session, because that is our agreement (GDPR Article 6(1)(b)).
To answer your messages and keep simple records, because I have a legitimate interest in running my work well (Article 6(1)(f)).
To keep invoices and accounting records, because Hungarian law requires it (Article 6(1)(c)).
To show your photos or your review in my portfolio, on this website or on Instagram, only with your consent (Article 6(1)(a)). You can say no, or change your mind at any time, and it never affects your session or your gallery.
04Photos of children
I photograph children only with a parent or guardian present, and I never publish a photo in which a child can be recognised without the written consent of their parent or guardian.
05Who else handles your data
I don't sell or rent your data, and I don't share it for advertising. A few services help me run my work and process data on my behalf: my booking calendar (Cal.com), WhatsApp and my email provider for messages, the service that hosts your online gallery and my backups, the provider that hosts this website, and payment providers when you pay by card or transfer.
Some of these companies are based outside the European Economic Area. Where that is the case, your data is protected by the European Commission's standard contractual clauses or an adequacy decision.
06How long I keep it
Messages and booking details: up to two years after your session, then deleted.
Your photos: I keep a backup for 12 months after delivery, so a lost download can be sent again, then I delete it. Photos you agreed I could use in my portfolio stay there until you ask me to remove them.
Invoices and accounting records: for as long as Hungarian accounting law requires, currently eight years.
07Your rights
You can ask me for a copy of your data, ask me to correct it or delete it, ask me to limit or stop using it, ask for your data in a portable format, and withdraw any consent you gave. Write to the email address above and I'll take care of it.
You can also complain to the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu), or to the authority where you live.
08Security
I keep your photos and details in password-protected accounts, share galleries through private links, and delete what I no longer need.
09Changes
If this policy changes, the new version will appear on this page with a new date. Last updated: 12 October 2026.