Privacy Policy

This privacy policy only provides information about the customer register of Vuokatti Booking Oy's online store and the principles for processing its data.

We may change our data protection practices and this privacy policy from time to time. We therefore recommend that you review our data protection practices regularly.

1. Data controller

Vuokatti Booking Oy
Pilkkitie 5, 88600 Sotkamo
+358 400 229995
info@vuokattibooking.fi
3385916-1

2. Person responsible for registration matters and/or contact person

Mari Pitkänen
Vuokatti Booking Oy
+358 407392477
info@vuokattibooking.fi

3. Name of the register

Vuokatti Booking Oy's online store customer register

4. Legal basis and purpose of processing personal data / purpose of use of the register

The legal basis for processing personal data in accordance with the EU General Data Protection Regulation is a contract that is created when the customer orders products and/or services from Vuokatti Booking Oy's online store. The purpose of the register is to enable online trading using Vuokatti Booking Oy's online store, such as the transmission of order information, billing information, payment confirmation information or processing information between Vuokatti Booking Oy and the customer. In addition, the register is collected to enable customer service contacts, to maintain the customer relationship and for electronic marketing communications when the customer has given their consent to this.

Vuokatti Booking Oy does not in any way store orders made for other merchants' products or related information in its customer register.

The information is not used for automated decision-making. The information may be used for profiling.

5. Data content of the register

• First and last name

• Address

• Postal code

• Country

• Telephone number

• Email address

• Personal identification number (private billing customer)

• Order source page

For companies, the following is also registered:

• Company name

• Business ID

• Online billing address

• Intermediary ID

• Reference

• Mark

In addition to additional information about the process, the customer is offered the opportunity to freely provide other information they deem appropriate.

Data retention period

Data is retained as long as the user and Vuokatti Booking Oy have a valid mutual agreement and/or consent.

Data may be retained longer to the extent necessary for the purposes set out in applicable legislation. to fulfill obligations, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

6. Regular data sources

The data is collected using electronic forms in the Dataflow online service. Customers enter the data personally when ordering from Vuokatti Booking Oy's Dataflow online store.

7. Regular data transfers and data transfers outside the EU or the European Economic Area

The data is not separately transferred and remains with the data controller only. The data can be technically processed outside the EU or the European Economic Area.

8. Principles of data protection

The data is processed with care and the data processed using information systems is protected appropriately. When register data is stored on Internet servers, the physical and digital security of their hardware is appropriately taken care of. The registrar ensures that the stored data, as well as the server access rights and other information critical to the security of personal data, are handled confidentially and only by employees whose job description requires it.

Electronically stored data

The register is located in the Johku service and the data processor is Aptual Commerce Oy. Only the registrar and Aptual Commerce Oy's technical maintenance personnel can access the complete register data.

More about the Johku service's data protection principles: johku.fi/fi/tietosuoja

Manual material

As a matter of principle, we avoid printing out the information in the register as manual material. If in some situations manual material is printed out from the register, the material is kept in a locked state and only the registrar has access to the material.

9. Right of inspection and exercise of the right of inspection

Every person in the register has the right to check their data stored in the register and to correct any incorrect or incomplete information. This right is automated by the Johku system used by Vuokatti Booking Oy in the following way:

Johku communicates to the user about the processing of their personal data via the Oma Johku service in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service.

In Oma Johku, the user can check the information stored about themselves and make corrections to it if necessary. The service also has functionality that allows the user to download the data in a structured format for transferring data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer.

Oma Johku also offers the possibility to terminate the Oma Johku agreement and delete data from Oma Johku. If the user stops using Oma Johku and terminates their agreement with Johku, all automated functionalities related to the management of their own data will cease. After the end of the agreement, the user must manage their own data (review, rectification, right to be forgotten, restriction, right to transfer from one system to another) in writing directly with Vuokatti Booking Oy. Vuokatti Booking Oy may, if necessary, ask the requester to prove their identity. Vuokatti Booking Oy will respond to the written request within the time period stipulated in the EU Data Protection Regulation (generally within one month).

The use of the Oma Johku service is free of charge.

10. Other rights related to the processing of personal data

A person in the register has the right to request that personal data concerning them be deleted from the register ("right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain situations.

However, it is worth noting that the information stored in Vuokatti Booking Oy's customer register is always created when a customer purchases products and/or services. In this case, Vuokatti Booking Oy is also bound by the obligations set by accounting and tax legislation regarding the retention of the material.

Requests must be sent in writing to the controller. If necessary, the controller may ask the requester to prove their identity. The controller will respond to the customer within the time period set out in the EU General Data Protection Regulation (generally within one month).

11. Cookies

This website uses cookies. The website sends a small file to the browser, which is stored on the computer's hard drive. Both (temporary) session cookies, which are closed when you close your Internet browser, and permanent cookies, which are stored on your computer's hard drive, are used. The purpose of a cookie is to improve the user experience on the site. If you are a registered user, the cookie also manages login and access to pages that are intended only for registered users. Cookies can be used to track and view the user's interests and thereby influence the usability of the service. Internet browsers generally accept cookies automatically. If necessary, the use of cookies can be disabled in the browser settings, which will remove some of the functionality.

Advertising cookies can be used to help optimize the advertising experience for the user of the service. Some third-party vendors, including Google, may also use cookies or web beacons (a 1-pixel image file) to improve your ad experience.

The information collected through cookies and web beacons does not contain any personal information about you. It does not allow you to associate your online activities with a specific individual.

Created: 3.10.2023