Privacy policy

1. Data Controller

Anna Lindberg


Email: byannalindberg [at] gmail.com

2. What Personal Data Is Collected

I may collect and process the following categories of personal data:

- Full name

- Email address

- Telephone number

- Address

- Information submitted via the contact form

- Information shared via email correspondence

- Contract details

- Payment and invoicing information

- Photographs in which you may be identifiable

Personal data is collected directly from you when you contact me, enter into an agreement, or otherwise communicate with me.

3. Purpose and Legal Basis for Processing

Personal data is processed for the following purposes:

- To respond to inquiries

- To enter into and fulfil a contract

- To manage payments and accounting

- To showcase portfolio work (where applicable)

Where processing is based on consent, you may withdraw your consent at any time.

4. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy.

- Accounting records are stored for seven (7) years in accordance with the Swedish Accounting Act (Bokföringslagen).

- Contractual communication is retained for as long as necessary to fulfil the agreement and handle potential claims.

- Photographs may be stored for an undetermined period in secure archival storage for portfolio, historical, and backup purposes.

When data is no longer necessary, it will be securely deleted or anonymised.

5. Sharing of Personal Data

Personal data is never sold.

Data may be shared with trusted third-party service providers (“data processors”) where necessary to operate the business, including:

- Website hosting provider

- Email service provider

- Social media platforms (if publication consent is given)

- Print laboratories or suppliers

- Accounting and payment service providers

- Advertising and analytics providers

This website may use advertising and analytics technologies provided by Meta (Facebook and Instagram), including the Meta Pixel, to measure website traffic, understand interactions with the website, and improve advertising performance.

Data is processed only where legally permitted and, where required, only after your consent has been obtained through the cookie consent banner.

These providers process personal data only under contractual agreements and in compliance with GDPR.

7. Use and Storage of Photographs

Photographs may be displayed on this website and social media platforms solely for portfolio and marketing purposes.

Publication of identifiable images is based on the client’s explicit consent. Clients may actively agree or decline such use.

Consent may be withdrawn at any time. Upon withdrawal, images will be removed from future use where reasonably possible.

Original image files may be retained securely for archival and backup purposes.

8. Cookies

This website uses necessary cookies to ensure functionality and security.

With your consent, this website may also use analytics and marketing technologies, including the Meta Pixel (Facebook and Instagram), to:

- Measure website traffic and visitor interactions

- Understand the effectiveness of advertising campaigns

- Improve marketing and website performance

- Deliver relevant advertising on Meta platforms

The Meta Pixel may collect information such as pages visited, device and browser information, referral sources, and interactions with forms or website content.

Marketing and analytics cookies are activated only after your consent has been provided through the cookie banner. You may withdraw or change your cookie preferences at any time.

For more information about how Meta processes personal data, please refer to Meta’s Privacy Policy: Meta Privacy Policy

9. Data Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, alteration, or disclosure.

However, no system can be guaranteed completely secure.

10. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the right to:

- Request access to your personal data

- Request rectification of inaccurate data

- Request erasure (“right to be forgotten”)

- Request restriction of processing

- Object to processing based on legitimate interest

- Request data portability

- Withdraw consent at any time (where applicable)

You also have the right to lodge a complaint with the Swedish supervisory authority:

Integritetsskyddsmyndigheten (IMY)

11. Third-Party Websites

This privacy policy applies only to this website. The website may contain links to third-party websites. I am not responsible for the privacy practices or content of external sites.

12. Updates to This Policy

This privacy policy may be updated from time to time. The most recent version will always be published on this website. Last updated: May 23rd, 2026.