Privacy policy

Who is responsible for your data

One Man Empire AB is the data controller for the personal data described here.

• One Man Empire AB, Åsögatan 176, 116 32 Stockholm, Sweden
• Company registration number (org.nr): 556829-6205
• VAT registration number: SE556829620501
• Email: store@askenback.com

We are small enough that we are not required to appoint a data protection officer. Mail to the address above reaches the person who decides these things.

What we collect, and why we are allowed to

• Order details — your name, email address, delivery and billing address, phone number if you give one, what you bought, the amount, and the payment and delivery status. We need this to perform the purchase contract with you (GDPR Article 6(1)(b)). You enter it on the Stripe checkout page; we read it back from the Stripe dashboard, which is our order book.
• Payment data — card numbers go directly to Stripe and never touch our site. We see only the card brand, the last four digits, the amount and whether the payment succeeded. Also contract performance (Article 6(1)(b)).
• Accounting records — receipts and invoices, including your name, address and what you paid. We are required to keep these by the Swedish Bookkeeping Act (bokföringslagen) and VAT rules, so the basis is a legal obligation (Article 6(1)(c)).
• Emails you send us — whatever you write and whatever you attach, kept so we can answer and so we have a record of what was agreed. Our legitimate interest in running the shop and handling claims (Article 6(1)(f)).
• Server logs — our web host records IP address, browser, time and requested page for security and troubleshooting. Legitimate interest again (Article 6(1)(f)). We do not use these logs to build any picture of you.

Providing your details is voluntary, but without them we cannot take an order or deliver anything. We do not ask for, and have no use for, any sensitive category of personal data.

Who else sees it

• Stripe (Stripe Payments Europe, Ltd., Ireland) — hosts the checkout, processes the payment, calculates VAT, sends your receipt and screens for fraud. Stripe is our processor for the order, and its own controller for parts of the payment and fraud handling under Stripe's privacy policy.
• Klarna (Klarna Bank AB, Sweden) — only if you choose Klarna at checkout. Klarna is its own controller, with its own terms and credit assessment.
• Swish (Getswish AB and your bank) — only if you pay by Swish.
• The carrier — gets your name, delivery address and, where needed for delivery notices, your phone number or email.
• Our web host and email provider — store the site, its server logs and our mailbox.
• Our accountant and the Swedish Tax Agency — receive the accounting records the law requires.

That is the whole list. Your data is never sold, rented or used for advertising, and it is not shared with anyone else unless the law obliges us to.

We do no profiling and take no automated decisions about you. Stripe does run automated fraud checks that can decline a payment; if that happens to you, email us and a human will look at it.

Transfers outside the EU/EEA

We keep things in Europe where we can. Stripe Payments Europe is based in Ireland but may transfer data to its group companies in the United States; those transfers are covered by the European Commission's standard contractual clauses and Stripe's own safeguards. If you would like a copy of the relevant safeguards, ask us.

How long we keep it

• Order and accounting records: seven years after the end of the financial year, because the Swedish Bookkeeping Act says so.
• Email correspondence: up to two years after the matter is closed, longer if it concerns an ongoing complaint or dispute.
• Server logs: a short period set by our host, normally weeks rather than months.

Cookies and what your browser stores

This site sets no cookies of its own and runs no analytics, advertising or social media scripts. There is nothing here to consent to.

Your cart is kept in your browser's local storage under the key askenback-cart. It holds only the items you added and their quantities, it stays on your device, and it is not a tracking technology — it is the functional equivalent of the basket in your hand. It leaves your browser only when you press checkout, and then only as a list of item identifiers sent to our checkout endpoint so Stripe can build the payment session. Empty the cart, or clear site data for askenback.com, and it is gone.

When you continue to payment you leave for checkout.stripe.com, where Stripe sets its own cookies for security and fraud prevention under its own privacy policy. No Stripe script runs on askenback.com itself.

Your rights

Under the GDPR you can ask us for a copy of the personal data we hold about you, have it corrected, have it erased, have our use of it restricted, object to processing we base on legitimate interest, and receive the data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting what was done before.

Email store@askenback.com and we will answer within one month. One honest limit: we cannot erase invoices and other accounting records before the statutory seven years are up, however politely either of us asks.

If you think we got it wrong

Tell us first and we will fix it. You also have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy.se, or to the supervisory authority in the EU country where you live.

Children

The shop is meant for adults and we do not knowingly collect data about children. Orders require a parent or guardian's consent if you are under 18, as set out in the terms of purchase.

Changes to this policy

If we start using a new tool — analytics, a newsletter, a new carrier — we update this page and change the date at the top before it goes live, not after.