Privacy
Last updated: 4 November 2026
Data controller
My Jonsson, [Gatuadress], [Postnummer] Uppsala, Sverige. Contact: hej@ateliermy.se.
In short
This website uses no cookies, no analytics and no tracking tools. We only collect the data needed to sell and ship a work to you, or to reply when you contact us.
What data and why
- When you buy a work: name, email, shipping address, phone number, the work you bought and payment status, to complete the purchase, ship the work and handle any returns. Legal basis: contract (Article 6(1)(b) GDPR). Card details are handled only by Stripe.
- When you email us: your email address and message, to reply. Legal basis: legitimate interest (Article 6(1)(f)).
- When you visit the site: our host Cloudflare processes technical data such as IP address and browser to deliver the page and protect it from attacks. Legal basis: legitimate interest (Article 6(1)(f)).
How long
Purchase data is kept as long as needed to complete the purchase, handle complaints and for tax purposes, at most 7 years. Emails are kept at most 2 years after our last contact. Technical logs are kept only briefly, according to Cloudflare's routines.
Who we share data with
- Stripe – payments. Stripe is also an independent controller for some data, see Stripe's privacy policy.
- Cloudflare – hosting and security.
- Shipping carriers – name, address and phone number to deliver the work.
Stripe and Cloudflare may process data in the USA. Transfers are protected by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. We never sell your data.
Cookies
This website sets no cookies. The checkout on Stripe's page (checkout.stripe.com) uses necessary cookies for secure payment and fraud prevention, under Stripe's own policy. Links to Instagram lead to an external service with its own terms.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to processing, and receive it in a machine-readable format. Contact us at hej@ateliermy.se. You can also complain to the Swedish Authority for Privacy Protection (imy.se) or your local data protection authority.