Privacy Policy

This privacy policy applies solely to the customer register of the Johku online store of Lakeland Karelia Oy and describes the principles of processing personal data.

We may update our data protection practices and this privacy policy from time to time. We therefore recommend reviewing our privacy practices regularly.

1. Data Controller
Lakeland Karelia Oy
Ollilantie 4a, 5980 Kesälahti, Finland
+358 400 418 933
welcome@lakelandkarelia.fi
Business ID: 3087926-3

2. Person Responsible for the Register / Contact Person
Taina Arvekari
Lakeland Karelia Oy
+358 400 418 933
welcome@lakelandkarelia.fi

3. Name of the Register
Customer register of Lakeland Karelia Oy’s online store

4. Legal Basis and Purpose of Processing Personal Data / Purpose of the Register
The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is a contract formed when a customer orders products and/or services from Lakeland Karelia Oy’s online store.

The purpose of the register is to enable e-commerce via Lakeland Karelia Oy’s online store, including the transfer of order details, billing information, payment confirmations, and processing data between Lakeland Karelia Oy and the customer. In addition, the register is used to enable customer service communication, maintain customer relationships, and for electronic marketing communications when the customer has given consent.

Lakeland Karelia Oy does not store in its customer register any orders or related data concerning products sold by other merchants.

The data is not used for automated decision-making. Data may be used for profiling.

5. Data Content of the Register

  • First and last name

  • Address

  • City

  • Country

  • Phone number

  • Email address

  • Personal identity number (private invoicing customers)

  • Order source page

For companies, the following data is also recorded:

  • Company name

  • Business ID

  • E-invoicing address

  • Intermediary ID

  • Reference

  • Mark

Additionally, the “additional information” field allows customers to provide other relevant information voluntarily.

Data Retention Period
Data is retained as long as there is a valid agreement and/or consent between the user and Lakeland Karelia Oy.

Data may be stored longer where necessary to comply with legal obligations, such as accounting and consumer protection requirements, and to demonstrate compliance.

6. Regular Sources of Information
Data is collected through electronic forms in the Johku online service. Customers enter their data personally when placing an order in Lakeland Karelia Oy’s Johku online store.

7. Disclosure of Data and Transfers Outside the EU/EEA
Data is not disclosed to third parties and remains solely with the data controller. However, data may be technically processed outside the EU or European Economic Area.

8. Principles of Data Protection

Care is taken in processing the register, and data handled via information systems is appropriately protected. When register data is stored on internet servers, both physical and digital security are ensured.

The data controller ensures that stored data, server access rights, and other critical personal data are handled confidentially and only by employees whose duties require it.

Electronically Stored Data
The register is maintained in the Johku service, and the data processor is Aptual Commerce Oy. Full access to the register is limited to the data controller and the technical maintenance staff of Aptual Commerce Oy.

More information on Johku’s data protection: johku.fi/fi/tietosuoja

Manual Material
As a rule, we avoid printing register data into physical format. If printed, the material is stored in a locked space and is accessible only to the data controller.

9. Right of Access and Its Implementation
Every person in the register has the right to access their stored data and correct inaccurate or incomplete information. This is facilitated through the Johku system used by Lakeland Karelia Oy as follows:

Johku communicates data processing information to users via the “My Johku” service in confirmation messages, which include a link to the service.

In My Johku, users can review their stored data and make corrections. The service also allows users to download their data in a structured format for transfer to another system. The service is accessible at any time at johku.com/customer.

My Johku also allows users to terminate their agreement and delete their data. If a user ends their My Johku agreement, automated data management functions cease. After termination, users must manage their data (access, correction, deletion, restriction, transfer) directly with Lakeland Karelia Oy in writing.

Lakeland Karelia Oy may request identity verification and will respond within the timeframe set by the GDPR (generally within one month).

The My Johku service is free of charge.

10. Other Rights Related to Personal Data Processing
Registered individuals have the right to request deletion of their personal data (“right to be forgotten”) and other rights under the GDPR, such as restriction of processing in certain situations.

However, it should be noted that data in Lakeland Karelia Oy’s customer register is created when a customer purchases products and/or services. In such cases, the company is also bound by legal obligations related to accounting and taxation.

Requests must be submitted in writing to the data controller. Identity verification may be required. Responses are provided within the GDPR timeframe (generally within one month).

11. Cookies
This website uses cookies. A cookie is a small file sent to the user’s browser and stored on the computer’s hard drive. Both session cookies (temporary, deleted when the browser is closed) and persistent cookies (stored on the hard drive) are used.

Cookies are used to improve the user experience. For registered users, cookies also manage login and access to restricted pages. Cookies help track user interests and improve service usability.

Web browsers generally accept cookies automatically. Users can disable cookies in browser settings, although this may affect functionality.

Advertising cookies may be used to optimize the advertising experience. Some third-party providers, including Google, may use cookies or web beacons (1-pixel image files).

Information collected via cookies and web beacons does not include personal data and cannot be linked to an individual.

Created: April 11, 2021