Privacy policy

This policy describes how konst24 ("we") processes personal data when you use konst24.se and related services.

1. Controller

The data controller for konst24 is:

konst24
For legal and privacy matters, contact [email protected].
Sweden
Privacy contact: [email protected]

2. Data we process

Depending on how you use the service, we may process:

Account data: name, email, role (e.g. artist, buyer), profile fields you provide.
Content you upload: artwork metadata, images, messages sent via the platform.
Technical data: IP address, device/browser type, logs needed for security and operations.
Cookies and similar technologies as described in our cookie policy.

3. Purposes and legal bases (GDPR)

We process data to:

Provide the service and perform our contract with you (Art. 6(1)(b) GDPR).
Meet legal obligations, e.g. accounting or abuse reports (Art. 6(1)(c)).
Protect the platform and users, and improve reliability (legitimate interests, Art. 6(1)(f)).
Send essential service messages; marketing only where you have opted in where required (Art. 6(1)(a)).

4. Recipients and transfers

We use infrastructure and subprocessors (e.g. hosting, email) that may process data on our behalf under agreements. If data is transferred outside the EU/EEA, we use appropriate safeguards (e.g. Standard Contractual Clauses) where required.

5. Retention

We keep data only as long as needed for the purposes above, unless a longer period is required by law. Account data is removed or anonymised when no longer necessary, subject to backup cycles.

6. Your rights

Where GDPR applies, you may have the right to access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with your supervisory authority. Contact us to exercise rights.

7. Security

We implement appropriate technical and organisational measures. No online service is perfectly secure; use a strong password and protect your account.

8. Children

The service is not directed at children under the age where consent is required for data processing in your country.

9. Changes

We may update this policy. The "last updated" date will change; material changes will be highlighted where appropriate.

Last updated: April 2026.

2. Data we process

Depending on how you use the service, we may process:

Account data: name, email, role (e.g. artist, buyer), profile fields you provide.

Content you upload: artwork metadata, images, messages sent via the platform.

Technical data: IP address, device/browser type, logs needed for security and operations.

Cookies and similar technologies as described in our cookie policy.

3. Purposes and legal bases (GDPR)

We process data to:

Provide the service and perform our contract with you (Art. 6(1)(b) GDPR).

Meet legal obligations, e.g. accounting or abuse reports (Art. 6(1)(c)).

Protect the platform and users, and improve reliability (legitimate interests, Art. 6(1)(f)).

Send essential service messages; marketing only where you have opted in where required (Art. 6(1)(a)).