1. Data Controller / Personal Data Manager

Open Art Lund
To: Asaf Kliger
📧 kliger@openartlund.se

We are responsible for the processing of your personal data.
We are responsible for the processing of your personal data.

2. Personal Data We Collect / What data we collect

We collect only what is necessary to provide and improve our services:
We only collect the information needed to operate and improve our services:

Contact forms: name, email, and message.
Cookies and tracking: via Wix for website functionality and analytics.

We do not collect sensitive data or data from minors (<18).
We do not collect sensitive data or information about minors (under 18 years of age).

3. Purpose and Legal Basis

Purpose / ÄndamålLegal Basis / Legal basis

Respond to contact form messages / Svara på kontaktformulerLegitimate interest (Article 6.1 f GDPR)

Website functionality & security / Website functionality and security Legitimate interest (Article 6.1 f)

Cookies & analytics / Cookies and analyticsConsent (Article 6.1 a)

Payment processing via Stripe / Payments via StripeContractual necessity (Article 6.1 b)

You can withdraw cookie consent at any time through your browser or Wix cookie banner.
You can withdraw your consent to cookies at any time via browser settings or the Wix cookie banner.

Declaration of partial compliance with the standard due to third-party content

The accessibility of certain pages on the site depends on contents that do not belong to the organization, and instead belong to. The following pages are affected by this: We therefore declare partial compliance with the standard for these pages.

4. Sharing of Data

We share information only with trusted partners necessary for our operations:
We only share information with trusted suppliers that are necessary for our operations:

Wix .com Ltd. — Website hosting and analytics / Web hosting and analytics
Stripe Payments Europe Ltd. — Payment processing

Both providers comply with GDPR and process data within the EU/EEA.
Both providers comply with GDPR and process data within the EU/EEA.

We never sell or rent your personal data.
We never sell or rent your personal information.

5. Data Retention / Storage period

Contact form data kept up to 12 months.
Cookie and analytics data follow Wix retention policies.
Payment data retained as required by Swedish accounting law.

Contact forms are saved for up to 12 months.
Cookie and analytics data follow Wix retention periods.
Payment data is saved in accordance with Swedish accounting law.

6. Your Rights

You have the right to:
You have the right to:
access your data / get access to your data
correct errors / correct incorrect information
request erasure (“right to be forgotten”)
restrict or object to processing
data portability / data portability
withdraw consent
To exercise your rights, contact: kliger@openartlund.se
To exercise your rights, contact: kliger@openartlund.se
You may also lodge a complaint with the Integitetsskyddsmyndigheten (IMY): www.imy.se
You can also file a complaint with the Swedish Data Protection Authority (IMY): www.imy.se

7. Security

We use appropriate technical and organizational measures to protect your data.
We use appropriate technical and organizational security measures to protect your personal data.
Our website is hosted securely by Wix.
Our website is securely hosted by Wix.

8. International Transfers / Transfers outside the EU/EEA

We do not transfer data outside the EU/EEA.
We do not transfer personal data outside the EU/EEA.
If this changes, GDPR-approved safeguards will be applied.
If this were to change, GDPR-approved safeguards will be applied.

9. Updates / Changes

We may update this policy from time to time.
We may update this policy as necessary.
The latest version is always available at:
The latest version is always available at:
www.openartlund.se/privacy-policy

10. Contact

For any questions about how we handle your data:
For questions about how we handle your personal data:
📧 kliger@openartlund.se