Privacy
Privacy policy
This policy explains what personal data we collect when you buy an artwork or contact us, why, and what your rights are under the EU General Data Protection Regulation (GDPR). Last updated 2026-10-03.
Who is responsible
Lisa Aronsson (Lisa Aronsson Konst), Hantverkshuset i Gårdsby, Växjö, Sweden, is responsible for your personal data. Contact: lisaaronssonkonst@outlook.com.
What we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Name, email, delivery and billing address, the artwork you bought, amount paid | To deliver your artwork and handle returns or complaints | Contract (GDPR art. 6(1)(b)) | Until the purchase is complete and any complaint period has ended |
| Record of the sale (artwork, date, amount) | To declare income from sales to the Swedish Tax Agency | Legal obligation (art. 6(1)(c)) | As long as needed for tax purposes, at most 7 years |
| Emails you send us and your contact details | To answer your questions | Legitimate interest (art. 6(1)(f)) | As long as needed for your question, then deleted |
You don't have to give us your details, but we can't deliver an artwork without a name and address. We don't use your data for advertising and we don't sell it.
Card payments
Payments are handled by Stripe on its own secure checkout page. Your card details go directly to Stripe; we never see or store them. Stripe also processes payment data under its own privacy policy, for example to prevent fraud (stripe.com/privacy).
Who else handles your data
We use these services to run the shop. They handle data only as needed to provide their service:
- Stripe: payments and the checkout page.
- Vercel: hosts this website; its servers log technical data such as IP addresses for security and operation.
- Resend: sends the order notification email to us.
- Microsoft (Outlook): our email inbox.
Some of these companies are based in the USA. Transfers outside the EU are protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies
This website does not use cookies for statistics or advertising, so we don't ask for cookie consent. Stripe's checkout page uses its own cookies that are needed for secure payment.
Your rights
You have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to our use of it, and to receive it in a portable format. Records we must keep for tax purposes can't be deleted before that need ends. To use your rights, email lisaaronssonkonst@outlook.com.
If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).