Integritetspolicy
Personal data will only be processed by me to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under my own control or in conjunction with others. I also inform you below about the third-party components I use to optimize my website and improve the user experience which may result in said third parties also processing data they collect and control.
My privacy policy is structured as follows:
I. Information about me as controller of your data
II. The rights of users and data subjects
III. Information about the data processing
I. Information about us as controllers of your data
The party responsible for this website (the "controller") for purposes of data protection law is:
Melanie Weuste – Måla Livet (capturing moments * creating art)
Drottning Ommas Väg 10B
599 93 Ödeshög, Sweden
Email: mala.livet@gmail.com
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
-
to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
-
to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
-
to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
-
to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
-
to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using my website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Contact
If you contact me via email or the contact form, the data you provide will be used for the purpose of processing your request. I must have this data in order to process and answer your inquiry; otherwise I will not be able to answer it in full or at all.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once I have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
Hosting (Wix)
This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. When you visit the website, Wix processes technical data such as your IP address, browser type and time of access in order to deliver and secure the website. Wix also sets cookies that are necessary for the website to function. The legal basis is Art. 6 Para. 1 lit. f) GDPR (legitimate interest in a secure and functional website). More information: www.wix.com/about/privacy
Payments (Stripe, Swish, bank transfer)
Products in the shop are paid via payment links from Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. When you click a payment link, you are forwarded to Stripe, which processes your name, e-mail address, shipping address and payment details in order to complete the purchase. For photography services I send an invoice that can be paid via Swish or bank transfer; the payment data is processed by the respective banks. The legal basis is Art. 6 Para. 1 lit. b) GDPR (performance of a contract). Order and invoice data are stored as long as required by Swedish bookkeeping law (currently seven years). More information: stripe.com/privacy
This website shows a feed from Instagram, a service of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. When you visit a page containing the feed, your browser connects to Meta's servers and Meta may receive data such as your IP address. If you are logged into Instagram, Meta can associate your visit with your account. The legal basis is Art. 6 Para. 1 lit. f) GDPR (legitimate interest in presenting my work). More information: privacycenter.instagram.com/policy
Supervisory authority
The competent supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.