Privacy Policy
In this privacy policy, we inform you about the customer register of Minna-Carita’s Johku and the principles of data processing.
The customer register collects information from the online store's customers and individuals who have contacted the company (e.g., via email, phone, events, the website contact form, or social media channels).
We may periodically change our privacy practices and this privacy policy. Therefore, we recommend reviewing our privacy practices regularly.
Data Controller
Minna-Carita's
Minna-Carita Moilanen
Akulahdentie 245, 99800 Ivalo, Finland
+358 40 1522 800
info@minnacaritas.fi
y: 3175760-4
Contact Person for Register Issues
Minna-Carita Moilanen
+358 40 1522 800
info@minnacaritas.fi
Name of the Register
Minna-Carita’s Customer Register
Legal Basis and Purpose of Personal Data Processing / Purpose of the Register
The legal basis for processing personal data under the EU General Data Protection Regulation is the contract that arises when the customer orders products and/or services from Minna-Carita’s online store. The purpose of the register is to enable online commerce through Minna-Carita’s online store, such as transmitting order details, billing information, payment confirmation details, or processing information between the company and the customer. Additionally, the register is used for customer service-related communication, maintaining customer relationships, and electronic marketing communications, provided the customer has given their consent.
The company does not store orders or related data from other merchants' products in its customer register.
The data is not used for automated decision-making. The data may be used for profiling.
Contents of the Register
First and last name
Address
Postal city
Country
Phone number
Email address
Personal identification number (for private billing customers)
Order source page
For companies, the following information is also registered:
Company name
Business ID
E-invoice address
Intermediary ID
Reference
Brand
Additionally, in the "Additional Information" field, customers may provide other information they deem relevant.
Data Retention Period
Data is retained as long as the user and the company have a valid mutual agreement and/or consent.
Data may be retained longer if required to fulfill obligations under applicable legislation, such as accounting and consumer protection responsibilities. The data controller is obligated to retain accounting records for the time specified in accounting law (10 years).
Regular Sources of Information
Data is collected via electronic forms in the Johku online service. Customers enter their data personally when ordering from the company’s Johku online store. Data may also be collected via email, phone, events, the website contact form, or social media channels.
Regular Disclosures of Data and Data Transfers Outside the EU or EEA
Data is not disclosed to third parties and remains solely with the data controller. Data may be processed securely outside the EU or EEA.
Principles of Register Protection
The handling of the register follows strict care, and the data processed through information systems is appropriately secured. When register data is stored on Internet servers, the physical and digital security of the hardware is ensured accordingly. The data controller ensures that stored data, as well as server access rights and other critical security information, is handled confidentially and only by employees whose job it concerns.
Electronically Stored Data
The register is located in the Johku service, and data processing is carried out by Aptual Commerce Oy. Complete register information can only be accessed by the data controller and the technical maintenance staff of Aptual Commerce Oy.
For more information on Johku's privacy practices, please visit: johku.fi/fi/tietosuoja
Manual Data
As a general rule, we avoid printing the data in the register as manual material. If, in some cases, printed manual data is necessary, it will be stored in a locked location, and only the data controller will have access to it.
Right to Inspect and Implement the Inspection Right
Each individual in the register has the right to inspect their stored data and correct any incorrect or incomplete information. This right is automated by Minna-Carita’s Johku system as follows:
Johku communicates with the user via the "Oma Johku" service, which handles personal data processing through merchant confirmation messages. These messages include a link to the "Oma Johku" service.
In the "Oma Johku" service, the user can view the data stored about them and make necessary corrections. The service also includes functionality for downloading data in a structured format for transferring it to another system. The "Oma Johku" service can be accessed at any time at johku.com/customer.
"Oma Johku" also provides the option to cancel the "Oma Johku" contract and delete the data from "Oma Johku." If the user terminates their use of "Oma Johku" and ends the contract with Johku, all automatic functions related to personal data management will cease. After the termination of the contract, the user must manage their data (inspection, correction, right to be forgotten, restriction, right to transfer data to another system) in writing directly with Minna-Carita’s. The company may request the individual to verify their identity if necessary. Minna-Carita’s will respond to written requests within the time specified by the EU General Data Protection Regulation (usually within one month).
Use of the "Oma Johku" service is free of charge.
Other Rights Related to the Processing of Personal Data
Individuals in the register have the right to request the deletion of their personal data from the register ("right to be forgotten"). They also have other rights under the EU General Data Protection Regulation, such as restricting data processing in certain situations.
It is important to note that data stored in Minna-Carita’s customer register is always created when a customer purchases products and/or services. In this case, Minna-Carita’s is also bound by accounting and tax laws regarding the retention of data.
Requests must be submitted in writing to the data controller. The data controller may request the individual to verify their identity if necessary. The data controller will respond to the customer within the time specified by the EU General Data Protection Regulation (usually within one month).
Cookies
This website uses cookies. The website sends a small file to the browser, which is stored on the computer’s hard drive. Both (temporary) session cookies, which close when the browser is closed, and persistent cookies, which remain on the hard drive, are used. The purpose of the cookie is to improve the user experience on the site. If you are a registered user, the cookie also manages the login process and access to pages intended for registered users only. Cookies can track and analyze user interests and improve the usability of the service. Internet browsers generally accept cookies automatically. If needed, cookie usage can be disabled in the browser settings, which may disable certain functionalities.
Advertising cookies may be used to optimize the advertising experience for the user. Some third-party providers, including Google, may also use cookies or web beacons (1-pixel image files) to enhance the advertising experience.
The information collected via cookies and web beacons does not include personal data. Online activities cannot be linked to an individual through this information.
The technically necessary cookies for Johku are listed below:
immortal|basket-storeID
immortal|active-storeID
These are used for managing Johku’s store-specific shopping cart information. They are stored as cookies and in the browser's local storage.
PHPSESSID
Stores the identifier for Johku's active browsing session.
In addition to Johku's own cookies, payment processors used on the site may automatically set their own mandatory cookies as part of the ordering process.
Issued: 1.12.2024