- 1 DATA CONTROLLER
- 2 NAME OF THE PERSON RESPONSIBLE FOR THE REGISTER
- 3 NAME OF THE REGISTER
- 4 THE PURPOSE OF THE REGISTER
- 5 CONTENT OF THE REGISTER – WHAT DATA WE PROCESS
- 6 THE SOURCE OF THE INOFRMATION AND TIME FOR STORING
- 7 DISCLOSURE OF INFORMATION
- 8 SAFETY PROTECTION AND DATA STORAGE
- 9 RIGHT OF INSPECTION AND HOW TO DO IT
- 10 OTHER RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
In this privacy statement, we only provide information about Lomamaja Pekonen’s Johku online store’s customer register and the principles for processing its data.
1 DATA CONTROLLER
+358 40 550 4836
2 NAME OF THE PERSON RESPONSIBLE FOR THE REGISTER
+358 40 550 4836
3 NAME OF THE REGISTER
Lomamaja Pekonen online store customer register
4 THE PURPOSE OF THE REGISTER
The legal basis for the processing of personal data under the EU General Data Protection Regulation is an agreement that occurs when a customer orders services from Lomamaja Pekonen online store. The goal of the register is to manage personal data required for collaboration between Lomamaja Pekonen Oy and its customers, to ensure smooth-running e-commerce, customer services, and the production and provision of services, and to enable management of the customer relationship and marketing when the customer has given his/her consent for that.
Personal data is collected and processed in collaboration with the customer for the following purposes:
- the realization and confirmation of purchases related to cottages, apartments, rooms, and other services
- the provision of additional information related to online purchases
- the realization and confirmation of online purchases to the customer
- the services agreed upon with a corporate customer, related invoicing and the management of the customer relationship
- the analysis and development of services and business and the preparation of the necessary statistics
- the collection of feedback and information on deviations and customer satisfaction advertising, marketing, and direct marketing.
- The data subject has the right to prohibit direct marketing
5 CONTENT OF THE REGISTER – WHAT DATA WE PROCESS
The register may contain the following information:
- First and last name
- Postal district
- Country of origin
- Telephone number
- Email address
- Personal ID (private billing customer)
- Order source page
In addition, the following information is registered from corporate customers:
- Name of the company
- Business ID
- E-invoice address
- Broker ID
In addition, additional information about the process in the field will be offered to the customer to provide other information they deem appropriate in a free-form manner.
6 THE SOURCE OF THE INOFRMATION AND TIME FOR STORING
The information is collected using the electronic forms of the Johku online service. Customers enter the information in person when ordering or making a reservation on Lomamaja Pekonen ‘s Johku online store. Information related to customers and partners is stored in the register for as long as the agreement or mutual consent has been terminated and all contractual obligations have been met unless otherwise agreed on or required by law.
7 DISCLOSURE OF INFORMATION
The data is only disclosed to the extent permitted or required by law. Data is not transferred outside the EU or EEA.
8 SAFETY PROTECTION AND DATA STORAGE
The data controller only collects and processes information that is necessary for its operations. Digital material may only be accessed by authorized employees and collaboration partners with a personal username and password. Each user is granted access rights on a level that is as restricted as possible but suffices for the performance of his or her tasks.
Data stored online
The register is located in the Johku service and the data processor is Aptual Commerce Oy. Only the register and the technical maintenance personnel of Aptual Commerce Oy can access complete registry information. More about the data protection principles of the Johku service: https://johku.fi/fi/privacy
In principle, we avoid printing the information from the register as printed material. If, in some situations, printed material needs to be taken from the register, the material will be kept in a locked state and only the registrar has access to the material.
9 RIGHT OF INSPECTION AND HOW TO DO IT
Data subjects have the right to know what information pertaining to them is stored in the register and to correct any incorrect or incomplete information (inspection right). This is automated by the Johku online store provider as follows:
Johku communicates with the user through the My Johku service whenever his/her personal data is being processed. A message coming from the service always contains information about the data controller carrying out the processing and a link to the My Johku service.
In My Johku, a user may check data saved about him/herself and, if necessary, make corrections to it. The service also has a function by which the user can download the data in a structured format for transfer from one system to another. You can access the My Johku service at any time at the address johku.com/customer.
My Johku also offers users the chance to terminate their My Johku agreement and delete data from My Johku. If the user stops using My Johku and terminates his/her agreement with Johku, all automatic functions concerning the management of his/her data will cease and Johku’s possibilities to work for the benefit of the user in relation to the merchant will disappear. Once the agreement has ended, the user must manage his/her own data (checking, correction, the right to be forgotten, limitation, the right to transfer data from one system to another) in writing directly with the merchant keeping the register.
Under no circumstances does Johku use profiling and automatic decision-making based on it.
The use of the My Johku service is free of charge.
If the user terminates the use of My Johku service and terminates his contract with Johku, all automatic functionalities related to the management of his own data will cease.
Upon termination of the Agreement, you must manage your personal information (review, rectification, right to be forgotten, restriction, right to transfer from one system to another) in writing directly with Lomamaja Pekonen. Lomamaja Pekonen may, if necessary, ask the applicant to prove his or her identity. Lomamaja Pekonen will respond to the written request within the time limit set by the EU Data Protection Regulation (generally within one month).
10 OTHER RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
A person in the register has the right to request the removal of his or her personal data from the register (“right to be forgotten”). Data subjects also have other rights under the EU’s general data protection regulation, such as restrictions on the processing of personal data in certain situations.
However, it is worth noting that the information stored in the customer register is always created when the customer purchases products and / or services. In this case, Lomamaja Pekonen is also bound by the obligations imposed by the accounting and tax legislation on the retention of material.
Requests must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will respond to the customer within the time limit set by the EU Data Protection Regulation (generally within one month).
There are both (temporary) session ID cookies that close when you close your Internet browser and persistent cookies that are stored on your computer’s hard drive. The purpose of the cookie is to improve the user experience on the website. If you are a registered user, the cookie also manages login and access to pages intended only for registered users. Cookies can be used to track and view the user’s interests and thereby affect the usability of the service.
Most browsers have a menu option that explains how cookies can be disabled, how the browser warns the user each time a cookie is being sent and how cookies can be deleted. If cookies are disabled, the use of the website may be restricted or become slower.
The information collected through cookies does not contain any personal information about you. It cannot be used to associate network activities with a specific person. The data can be used for profiling.