Privacy statement
In this data protection statement, we exclusively inform about the customer register of Matka-Villa's Johku shop and its data processing principles.
We may change our data protection policies and this privacy statement from time to time. We recommend that you familiarize yourself with our privacy practices regularly.
1. Registrar
Heittotyttö
Örninpolku 10
99300 Muonio
+358 (0)400 505952
oona@villarauha.fi
FI21881193
2. The person responsible for registry matters
Oona Kuru
0400 505952
oona@villarauha.fi
3. Register name
Matka-Villa's online store customer register
4. Legal basis and purpose of personal data processing / purpose of use of the register
According to the EU General Data Protection Regulation, the legal basis for the processing of personal data is a contract that is created when the customer orders products and/or services from Matka-Villa's online store. The purpose of the register is to enable online trading using Matka-Villa's online store, such as the transmission of order information, invoicing information, payment confirmation information or processing information between Matka-Villa and the customer. In addition to this, the register is collected to enable the contacts required by customer service, to maintain the customer relationship and for electronic marketing communications when the customer has given his consent.
Matka-Villa does not in any way save orders made for products of other merchants or related information in its customer register.
The information is not used for automated decision-making. The data can be used for profiling.
5. Data content of the register
First and last name
Address
Postal code
Country
Telephone number
Email address
Personal identification number (private invoicing customer)
Order source page
The following for companies are also registered:
Name of the company
VAT ID
Online billing address
Broker ID
Reference
In addition, the customer is offered the opportunity to provide additional information about the process in the field in a free form as well as other information he deems appropriate.
Data retention period
Information is stored as long as the user and Matka-Villa have a valid mutual agreement and/or consent.
Information can be stored longer to the extent that it is necessary to fulfill the obligations set by the current legislation, such as, for example, accounting and consumer trade responsibilities, and to demonstrate their proper implementation.
6. Regular sources of information
The information is collected using the electronic forms of the Johku online service. Customers enter the information personally when ordering from Yritys Oy's Johku online store.
7. Regular data transfers and data transfer outside the EU or the European Economic Area
The information is not passed on separately and remains only with the controller. Data can technically be processed outside the EU or the European Economic Area.
8. Principles of registry protection
Care is taken when processing the register and the information processed with the help of information systems is properly protected. When register data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.
Electronically stored information
The register is located in the Johku service and the data processor is Aptual Commerce Oy. Only the controller and Aptual Commerce Oy's technical maintenance staff can access complete register data.
More about the data protection principles of the Johku service: johku.fi/fi/tietosvoja
Manual material
Basically, we avoid printing the information in the register as manual material. If in some situations manual material is printed from the register, the material is kept in a locked state and only the registrar has access to the material.
9. Right of inspection and implementation of the right of inspection
Every person in the register has the right to check their information stored in the register and to correct any incorrect or incomplete information. This right is automated by the Johku system used by Matka-Villa in the following way:
Johku communicates to the user with the Oma Johku service about the processing of their personal data in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service.
In Oma Johku, the user can check the information stored about himself and make corrections if necessary. The service also has functionality that allows the user to download data in a structured format to transfer data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer.
Oma Johku also offers the option to terminate the Oma Johku contract and delete data from Oma Johku. If the user stops using Oma Johku and terminates his contract with Johku,all automatic functions related to managing your own data will cease. After the end of the agreement, the user must manage his own data (checking, correction, right to be forgotten, restriction, right to transfer from one system to another) in writing directly with Matka-Villa. If necessary, Matka-Villa may ask the applicant to prove his identity. Matka-Villa will respond to a written request within the time stipulated in the EU data protection regulation (generally within a month).
The use of the Oma Johku service is free of charge.
10. Other rights related to the processing of personal data
A person in the register has the right to request the removal of personal data about him from the register ("the right to be forgotten"). Those registered also have other rights according to the EU's General Data Protection Regulation, such as limiting the processing of personal data in certain situations.
However, it is worth noting that the information stored in Matka-Villa's customer register is always created when the customer buys products and/or services. In this case, Matka-Villaa is also bound by the obligations set by accounting and tax legislation to store the material.
Requests must be sent in writing to the controller. If necessary, the registrar can ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).
13. Cookies
This website uses cookies. The website sends a small file to the browser, which is saved on the computer's hard drive. Both (temporary) session ID cookies are used, which close when you close the Internet browser, and permanent cookies, which are stored on the computer's hard drive. The purpose of the cookie is to improve the user experience on the site. If you are a registered user, the cookie also manages login and access to pages that are only intended for registered users. Cookies can be used to monitor and view the user's interests and thereby influence the usability of the service. Internet browsers generally accept cookies automatically. If necessary, the use of cookies can be turned off in the browser settings, in which case some functionalities will be removed.
Advertising cookies can be used to help optimize the advertising experience for the user of the service. Some third-party vendors, including Google, may also use cookies or web beacons (1-pixel image files) to improve the advertising experience.
The data collected with the help of cookies and web trackers do not contain the user's personal data. Activities carried out online cannot be linked to a specific person.
Prepared: May 18, 2021