Privacy Policy
Last updated: 2026-06-09
This Privacy Policy describes how Studio Sabina Hannila, Swedish organisation number 198803066946, processes personal data in connection with visits to kreativkatastrof.se, purchases in the online shop, contact via forms or email, and any future marketing.
Data controller
The data controller is:
Studio Sabina Hannila
Swedish organisation number: 198803066946
Address: Hägernäsvägen 3, 183 66 Täby, Sweden
Email: info@sabinahannila.se
Website: kreativkatastrof.se
What personal data is processed?
When you visit the website, contact me or make a purchase, the following personal data may be processed:
name
email address
phone number, if you provide it
billing and delivery address
order information
payment information
IP address and technical information about your device and browser
communication that you send to me via email or forms
information related to complaints, returns or customer service
I only collect the information needed to manage orders, deliveries, customer service, bookkeeping, legal obligations and the functionality of the website.
Why is personal data processed?
Personal data is processed in order to:
receive and manage orders
deliver purchased products
manage payments
send order confirmations and information about your order
handle returns, right of withdrawal and complaints
answer questions via email or contact forms
fulfil bookkeeping requirements and other legal obligations
improve and administer the website
send newsletters or marketing, if you have expressly signed up for this
Legal basis
The processing of personal data is based on the following legal grounds:
Contract: When you make a purchase, I need to process your information in order to manage the order, payment and delivery.
Legal obligation: Certain information needs to be stored in order to comply with bookkeeping requirements and other legal obligations.
Legitimate interest: Certain information may be processed in order to answer questions, manage customer service, prevent misuse and administer the website.
Consent: If you sign up for a newsletter or other voluntary marketing, your information is processed based on your consent. You may withdraw your consent at any time.
Payments
Payments are handled through the payment solutions offered at checkout, such as Squarespace Payments, Stripe, PayPal or another payment service stated at the time of purchase.
I do not normally have access to complete card details. The payment provider processes payment information according to its own terms and privacy policy.
Squarespace and technical providers
The website is built and operated through Squarespace. This means that Squarespace may process certain information necessary for the website to function, such as technical information, order data, analytics data and information connected to purchases in the online shop.
I may also use other providers for services such as payments, shipping, bookkeeping, email, analytics or newsletters. Personal data is only shared with such providers when necessary to provide the website, manage purchases or comply with legal obligations.
Cookies
The website may use cookies and similar technologies to function correctly, manage the shopping cart and purchases, analyse traffic and improve the user experience.
Some cookies are necessary for the website to function. Other cookies, such as those used for analytics or marketing, are only used where there is a legal basis and where consent is required.
You can change or withdraw your cookie settings via the website’s cookie settings, if such a function is enabled, or through the settings in your browser.
How long is personal data stored?
Personal data is only stored for as long as it is needed for the purposes for which it was collected.
Order and payment information is stored for as long as required by bookkeeping legislation and in order to handle any possible complaints.
Communication by email is stored for as long as necessary to handle the matter.
Newsletter information is stored until you unsubscribe or withdraw your consent.
Sharing of personal data
Personal data may be shared with:
website platform, such as Squarespace
payment providers
shipping carriers
bookkeeping or accounting systems
email or newsletter providers
authorities, if required by law
I do not sell your personal data to third parties.
Transfer outside the EU/EEA
Some providers, such as website platforms, payment solutions or analytics tools, may process personal data outside the EU/EEA.
When such a transfer takes place, it must be supported by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or other approved mechanisms under the GDPR.
Your rights
You have the right to:
receive information about which personal data is processed about you
request correction of inaccurate information
request deletion of information, where possible under the law
request restriction of processing
object to certain processing
request data portability in certain cases
withdraw consent, if the processing is based on consent
file a complaint with the Swedish Authority for Privacy Protection, IMY
To exercise your rights, you can contact me at:
Contact
If you have any questions about how your personal data is processed, you are welcome to contact:
Studio Sabina Hannila
info@sabinahannila.se