Privacy statement

In this privacy statement, we only inform you about the customer register of Vuokatti Booking Oy's online store and its data processing principles.

We may change our data protection policies and this privacy statement from time to time. We recommend that you familiarize yourself with our privacy policy regularly.

1. Registrar

Vuokatti Booking Oy
Pilkkitie 5, 88600 Sotkamo
+358 400 229995
info@vuokattibooking.fi
3385916-1

2. Person responsible for registry matters and/or contact person

Mari Pitkänen
Vuokatti Booking Oy
+358 407392477
info@vuokattibooking.fi

3. Registry name

Vuokatti Booking Oy's online store customer register

4. Legal basis and purpose of processing personal data / purpose of use of the register

According to the EU General Data Protection Regulation, the legal basis for the processing of personal data is an agreement that is created when the customer orders products and/or services from Vuokatti Booking Oy's online store. The purpose of the register is to enable online trading using Vuokatti Booking Oy's online store, such as the transmission of order information, billing information, payment confirmation information or processing information between Vuokatti Booking Oy and the customer. In addition to this, the register is collected to enable contacts required by customer service, to maintain customer relations and for electronic marketing communications when the customer has given his consent.

Vuokatti Booking Oy does not store in its customer register orders made for other merchants' products or related information in any way.

The information is not used for automated decision-making. The data can be used for profiling.

5. Data content of the register

• First and last name

• Address

• Post office

• Country

• Phone number

• Email address

• Personal ID (private invoicing customer)

• Order source page

Companies are additionally registered:

• Company name

• Y ID

• Online billing address

• Broker ID

• Reference

• Brand

In addition to additional information about the process in the field, the customer is offered the opportunity to freely provide other information they deem appropriate.

Data retention period

Data will be stored as long as the user and Vuokatti Booking Oy have a valid mutual agreement and/or consent.

Information can be stored longer to the extent that it is necessary to fulfill the obligations set by the current legislation, such as, for example, accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

6. Regular data sources

The information is collected using the electronic forms of the Dataflow online service. Customers enter the information personally when ordering from Vuokatti Booking Oy's Dataflow online store.

7. Regular data transfers and data transfers outside the EU or the European Economic Area

The information is not passed on separately and remains only with the controller. Data can technically be processed outside the EU or the European Economic Area.

8. Registry protection principles

Diligence is observed in the processing of the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The controller ensures that stored data, server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

Electronically stored data

The register is located in the Johku service and the data processor is Aptual Commerce Oy. Only the controller and Aptual Commerce Oy's technical maintenance staff can access complete register data.

More about the data protection principles of the Johku service: johku.fi/fi/tietosuoja

Manual material

Basically, we avoid printing the information in the register as manual material. If in some situations manual material is printed from the register, the material is kept in a locked state and only the controller has access to the material.

9. Right of inspection and implementation of the right of inspection

Every person in the register has the right to check their information stored in the register and to correct any incorrect or incomplete information. This right is automated by the Johku system used by Vuokatti Booking Oy in the following way:

Johku communicates to the user with the Oma Johku service about the processing of their personal data in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service.

In Oma Johku, the user can check the information stored about himself and make corrections if necessary. The service also has functionality that allows the user to download data in a structured format to transfer data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer.

Oma Johku also offers the option to terminate the Oma Johku contract and delete information from Oma Johku. If the user stops using Oma Johku and terminates his contract with Johku, all automatic functions related to managing his own data will cease. After the end of the agreement, the user must manage his own data (checking, correction, right to be forgotten, restriction, right to transfer from one system to another) in writing directly with Vuokatti Booking Oy. Vuokatti Booking Oy can ask the requester to prove their identity if necessary. Vuokatti Booking Oy will respond to a written request within the time stipulated in the EU data protection regulation (generally within a month).

Using the Oma Johku service is free of charge.

10. Other rights related to the processing of personal data

A person in the register has the right to request the removal of personal data about him from the register ("the right to be forgotten"). Those registered also have other rights according to the EU's General Data Protection Regulation, such as limiting the processing of personal data in certain situations.

However, it is worth noting that the information stored in Vuokatti Booking Oy's customer register is always created when the customer buys products and/or services. In this case, Vuokatti Booking Oy is also bound by the obligations set by accounting and tax legislation regarding the storage of material.

Requests must be sent in writing to the controller. If necessary, the registrar may ask the requester to prove his identity. The controller will respond to the customer within the time stipulated in the EU data protection regulation (generally within a month).

11. Cookies

This website uses cookies. The website sends a small file to the browser, which is saved on the computer's hard drive. Both (temporary) session ID cookies are used, which close when you close the Internet browser, and permanent cookies, which are stored on the computer's hard drive. The purpose of the cookie is to improve the user experience on the site. If you are a registered user, the cookie also manages login and access to pages that are only intended for registered users. Cookies can be used to track and view the user's interests and thereby influence the usability of the service. Internet browsers generally accept cookies automatically. If necessary, the use of cookies can be turned off in the browser settings, in which case some of the functionalities will be removed.

Advertising cookies can be used to help optimize the advertising experience for the service user. Some third-party vendors, including Google, may also use cookies or web beacons (a 1-pixel image file) to improve the advertising experience.

The information collected with the help of cookies and web trackers does not contain the user's personal information. Activities carried out online cannot be linked to a specific person with it.

Compiled: 3/10/2023