Privacy Policy

This privacy policy solely informs about the customer register of Suomen Latu Kiilopää (Suomen Latu ry) Johku store and the principles of its data processing. We may occasionally modify our data protection practices and this privacy policy. We therefore recommend that you review our privacy practices regularly.

  1. Data Controller

    Suomen Latu Kiilopää / Suomen Latu ry

    Kiilopääntie 620, 99830 Saariselkä

    kiilopaa@suomenlatu.fi

    +358 16 6700 700

    Business ID 0202192-1

  2. Data Protection Officer and/or Contact Person

    Satu Salminen

    Suomen Latu Kiilopää / Suomen Latu ry

    Kiilopääntie 620, 99830 Saariselkä

    kiilopaa@suomenlatu.fi

    +358 16 6700 700

  3. Name of the Register

    Customer register of Suomen Latu Kiilopää (Suomen Latu ry) online store

  4. Legal Basis and Purpose of Data Processing/Purpose of the Register

    The legal basis for processing personal data under the EU General Data Protection Regulation is the agreement that is created when a customer orders products and/or services from the Suomen Latu Kiilopää online store. The purpose of the register is to enable online transactions through the Suomen Latu Kiilopää online store, such as the transmission of order information, billing information, payment confirmation information or processing information between Suomen Latu Kiilopää and the customer. In addition, the register is collected to enable customer service contacts, maintain customer relationships, and for electronic marketing communications when the customer has given their consent. Suomen Latu Kiilopää does not in any way store orders or related information made for products of other merchants in its customer register. Data is not used for automated decision-making. Data can be used for profiling.  

5. Register Content

  • First name and last name 

  • Address 

  • Postal code 

  • Country 

  • Phone number 

  • Email address 

  • Personal identity number (for private billing customers) 

  • Order source page 


For companies, the following is additionally registered: 

  • Company name 

  • Business ID 

  • E-invoice address 

  • Intermediary ID 

  • Reference Brand 

  • In addition, in the process additional information field, the customer is offered the opportunity to provide other relevant information as they see fit.

Data Retention Period

Data is stored for as long as the user and Suomen Latu Kiilopää have a valid mutual agreement and/or consent. Data may be stored for a longer period to the extent necessary to fulfill the obligations imposed by applicable legislation, such as accounting and consumer protection liabilities, and to demonstrate their proper fulfillment.

6. Regular Data Sources

Data is collected through electronic forms on the Johku online service. Customers enter the information themselves when ordering from the Suomen Latu Kiilopää Johku online store.

7. Regular Disclosure of Data and Transfer of Data Outside the EU or the European Economic Area

Data is not disclosed to third parties and remains solely with the data controller. Data may be technically processed outside the EU or the European Economic Area.

8. Data Security Principles

The processing of the register is carried out with care, and the data processed using information systems is adequately protected. When register data is stored on Internet servers, appropriate physical and digital security of the equipment is ensured. The data controller ensures that stored data, as well as server access rights and other information critical to the security of personal data, are treated confidentially and only by those employees whose job duties include it.  

Electronically Stored Data

The register is located in the Johku service and Aptual Commerce Oy acts as the data processor. Only the data controller and the technical maintenance personnel of Aptual Commerce Oy have access to the complete register data. For more information on the Johku service's data protection principles: johku.fi/fi/tietosuoja

Manual Material

As a general rule, we avoid printing the data in the register as manual material. If, in some situations, manual material is printed from the register, the material is stored in a locked location and only the data controller has access to the material.  

9. Right of Access and the Implementation of the Right of Access

Every person in the register has the right to inspect the data stored in the register and to correct any incorrect or incomplete data. This right is automated by the Johku system used by Suomen Latu Kiilopää as follows: Johku communicates with the user via the Oma Johku service about the processing of their personal data in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service. In Oma Johku, the user can check the data stored about them and make any necessary corrections. The service also has a function that allows the user to download the data in a structured format for transferring data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer [poistettu virheellinen URL-osoite]. Oma Johku also offers the possibility to terminate the Oma Johku agreement and delete the data from Oma Johku. If the user stops using Oma Johku and terminates their agreement with Johku, all automatic functionalities related to the management of their own data will cease. After the termination of the agreement, the user must manage their own data (inspection, correction, right to be forgotten, restriction, right to data portability) in writing directly with Suomen Latu Kiilopää. Suomen Latu Kiilopää may, if necessary, ask the person making the request to prove their identity. Suomen Latu Kiilopää will respond to a written request within the time specified in the EU General Data Protection Regulation (usually within one month). The use of the Oma Johku service is free of charge.  

Oma Johku:

Oma Johku service communicates with the user about the processing of their personal data in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service.  

In Oma Johku, the user can:

  • Check the data stored about them: Users have the right to access their personal data and verify its accuracy.  

  • Make necessary corrections: Users can correct any errors in their personal data.

  • Download their data: Users can download their personal data in a structured format for portability.

  • Terminate their Oma Johku account: Users have the right to erase their personal data by terminating their Oma Johku account.

After terminating the Oma Johku account, users must manage their data rights (access, rectification, erasure, restriction, data portability) by submitting a written request directly to Suomen Latu Kiilopää.

10. Other rights related to the processing of personal data:

In addition to the right to access and rectify personal data, individuals have other rights under the GDPR, including:

  • Right to erasure: Individuals have the right to request the deletion of their personal data under certain circumstances.

  • Right to restriction of processing: Individuals have the right to request the restriction of processing of their personal data under certain circumstances.  

  • Right to data portability: Individuals have the right to receive their personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.  

  • Right to object: Individuals have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on legitimate interests.  

Please note that:  

  • The data stored in Suomen Latu Kiilopää's customer register is generated when a customer purchases products or services. Therefore, Suomen Latu ry is also bound by the obligations imposed by accounting and tax legislation regarding the retention of data.

  • Requests regarding these rights should be sent in writing to the data controller. The data controller may, if necessary, ask the requester to prove their identity. The data controller will respond to a written request within the time specified in the GDPR (usually within one month).

11. Cookies

This website uses cookies. A cookie is a small file that the site sends to your browser, which is then stored on your computer's hard drive. We use both session cookies, which expire when you close your browser, and persistent cookies, which are stored on your computer's hard drive. The purpose of cookies is to improve your user experience on the site.

  • Session cookies: These cookies are used to maintain your session while you browse the website.

  • Persistent cookies: These cookies are used to remember your preferences, such as your language settings.

  • Advertising cookies: These cookies are used to tailor advertising to your interests.

You can control the use of cookies through your browser settings. However, please note that disabling cookies may affect the functionality of the website.