In this privacy statement, we only provide information about the Customer register of Yritys Oy's Johku store and the principles for processing its data.
Kilpisjärven Ladut ry
2. Person responsible for the registration and/or contact person
Kilpisjärven Ladut ry
3. Name of the register
Kilpisjärven Ladut ry online store customer register
4. Legal basis and purpose of the processing of personal data / purpose of the register
The legal basis for the processing of personal data, in accordance with the EU Data Protection Regulation, is an agreement that arises when a Customer orders products and/or services from Kilpisjärven Ladut ry online store. The purpose of the register is to enable online trading through Kilpisjärven Ladut ry online store, such as the transmission of order information, billing information, payment confirmation information or processing information between Kilpisjärven Ladut ry and the Customer. In addition, the register is collected to enable the contacts required by Customer service, to maintain the Customer relationship and for electronic marketing communications when the Customer has given his or her consent.
The company Kilpisjärven Ladut ry does not in any way store in its Customer register orders placed for other Merchants' products or related information.
The data is not used for automated decision making. The data can be used for profiling.
5. Information content of the register
• First and last name
• Telephone number
• Email address
• Personal ID (private billing Customer)
• Order source page
The following companies are also registered:
• Name of the company
• Business ID
• E-invoice address
• Intermediary ID
Apart from it, an additional information about the process in the field will be offered to the Customer for the opportunity to provide other information they deem appropriate in a free-form manner.
Data retention period
The information is stored as long as the user and Kilpisjärven Ladut ry have a valid mutual agreement and/or consent.
The data may be kept longer to the extent necessary to fulfill the obligations imposed by the applicable legislation, such as accounting and consumer trade responsibilities, and to demonstrate their proper fulfillment.
6. Regular sources of information
The information is collected using the electronic forms of the Johku online service. Customers enter the information in person when ordering from Kilpisjärven Ladut ry Johku online store.
7. Regular disclosures and transfer of data outside the EU or the European Economic Area
The data will not be disclosed separately and will remain only with the Registrar. The data can be technically processed outside the EU or the European Economic Area.
8. Principles of register protection
The register shall be handled with due care, and the data processed by the information systems shall be adequately protected. When register data is stored on Internet servers, the physical and digital security of their hardware must be ensured. The Registrar shall ensure that any data stored, the access rights to the servers, and any data considered critical from the perspective of the security of personal data, is processed confidentially, and only by employees who are required to do so as part of their job description.
Data stored electronically
The register is located in the Johku service, and the data processor is Aptual Commerce Oy. Only the registrar and the technical maintenance personnel of Aptual Commerce Oy have access to the complete register information.
Read more about the data protection principles of the Johku service at johku.fi/fi/tietosuoja
In principle, we avoid printing the information in the register as manual material. If, in some situations, manual material is printed from the register, the material will be kept in a locked state and only the registrar will have access to that material.
9. Right of inspection and enforcement of this right
Each person in the register has the right to check the information stored in that register and to correct any wrong or incomplete information. This right is automated by the Johku system used by Kilpisjärven Ladut ry in the following way:
Johku communicates to the user, with the help of the Oma Johku service, information about the processing of his or her personal data in connection with the Merchant's confirmation messages. The messages contain a link to the Oma Johku service.
In the Oma Johku service, the user can check the data stored on him/herself and make corrections if necessary. The above service also has functionality that allows the user to download data in a structured format to transfer that data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer.
The Oma Johku service also offers the possibility to terminate the Oma Johku agreement and delete data from the service in question. If the user terminates his/her agreement with Johku, all automatic functionalities related to the management of their personal data will cease. After the termination of the agreement, the user must manage his/her personal data (review, correction, right to be forgotten, restriction, right to data transfer from one system to another) by writing directly to Kilpisjärven Ladut ry. Kilpisjärven Ladut ry may, if necessary, ask the applicant to prove his or her identity. Kilpisjärven Ladut ry will respond to the written request within the time period specified in the EU Data Protection Regulation (generally within one month).
Use of the Oma Johku service is free of charge.
10. Other rights related to the processing of personal data
Any person in the register has the right to request the removal of his or her personal data from the register ("right to be forgotten"). The registered users also have other rights under the EU Data Protection Regulation, such as to request restrictions on the processing of their personal data in certain situations.
However, it is worth noting that the information stored in Kilpisjärven Ladut ry Customer register is always created when the Customer purchases products and/or services. In this case, Kilpisjärven Ladut ry is also bound by the obligations imposed by the accounting and tax legislation to store the data of their customers.
Requests must be sent in writing to the Registrar. If necessary, the Registrar may ask the applicant to prove his or her identity. The Registrar will respond to the Customer within the time limit set by the EU Data Protection Regulation (generally within one month).
The information collected through cookies and web beacons does not contain any personal information about you. It cannot be used to associate network activities with a specific person.