PRIVACY POLICY

This privacy policy provides information exclusively about the customer register of Uhkua Oy's Johku store (Uhkua Oy’s) and the principles of data processing.

We may update our privacy practices and this privacy policy from time to time. We recommend reviewing our privacy practices regularly.

  1. Data Controller

 Uhkua Oy
Suurlahdentie 3189
+358 40 744 7631
asta@uhkua.fi
Business ID: 3271081-6

  1. Contact Person for Register Matters

 Asta Aalto
Uhkua Oy
+358 40 744 7631
asta@uhkua.fi

  1. Name of the Register

Customer register of Uhkua Oy's online store

  1. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the contract formed when a customer orders products and/or services from Uhkua Oy’s online store. The purpose of the register is to facilitate online commerce via Uhkua Oy’s online store, including transmitting order details, billing information, payment confirmations, and processing information between Uhkua Oy and the customer. Additionally, the register is collected to enable customer service interactions, maintain customer relationships, and conduct electronic marketing communications when the customer has given consent.

Uhkua Oy does not store any orders or related information concerning products from other merchants in its customer register.

The data is not used for automated decision-making. Data may be used for profiling. 

  1. Register Data Content

The register may contain the following information:

  • First and last name

  • Address

  • City

  • Country

  • Phone number

  • Email address

  • Personal identity number (for private billing customers)

  • Order source page

For business customers, the register may also include:

  • Company name

  • Business ID

  • E-invoice address

  • Intermediary ID

  • Reference

  • Mark

Additionally, customers may voluntarily provide further information they deem relevant in the additional information field.

Data Retention Period: Data is retained as long as a valid agreement and/or consent exists between the user and Uhkua Oy.

Data may be stored longer when required by legal obligations such as accounting and consumer trade regulations.

  1. Regular Data Sources

Data is collected through electronic forms in the Johku online service. Customers personally enter their information when placing an order in Uhkua Oy’s Johku online store.

 

  1. Regular Data Disclosures and Transfers Outside the EU/EEA

Data is not disclosed to third parties and remains solely with the data controller. However, data may be technically processed outside the EU or the European Economic Area (EEA).

 

  1. Principles of Register Protection

Care is taken in processing the register, and data processed through information systems is appropriately protected. When register data is stored on internet servers, both physical and digital security measures are implemented.

The data controller ensures that stored data, access rights to servers, and other critical personal data security measures are handled confidentially and only by employees whose job descriptions require it.

Electronically Stored Data

The register is stored in the Johku service, and Aptual Commerce Oy is the data processor. Only the data controller and the technical maintenance personnel of Aptual Commerce Oy have access to the complete register data.

For more information on Johku’s data protection principles: johku.fi/en/privacy-policy

Manual Data

As a general rule, printed versions of register data are avoided. If register data is printed, it is stored in a locked space accessible only to the data controller.

 

  1. Right to Access and How to Exercise It

Every individual in the register has the right to inspect their stored data and request corrections to any incorrect or incomplete information. This right is automated via the Johku system used by Uhkua Oy.

Johku communicates with users about the processing of their personal data through the Oma Johku service in confirmation messages. These messages contain a link to Oma Johku.

In Oma Johku, users can:

  • View and edit their stored data.

  • Download their data in a structured format for transfer to another system.

  • Manage their own data and agreements.

Oma Johku can be accessed anytime at johku.com/customer.

Oma Johku also provides an option to terminate the Oma Johku agreement and delete data from the service. After termination, all automated personal data management functions cease. Users must then manage their data (inspection, correction, right to be forgotten, restriction, right to data portability) directly with Uhkua Oy in writing.

Uhkua Oy may request identity verification if necessary. Requests will be processed within the timeframe stipulated by the GDPR (typically within one month).

Using the Oma Johku service is free of charge.

 

  1. Other Rights Related to Data Processing

Individuals in the register have the right to request the deletion of their personal data (“right to be forgotten”). They also have other GDPR rights, such as restricting data processing in certain situations.

However, please note that data stored in Uhkua Oy’s customer register is always generated when a customer purchases products and/or services. Consequently, Uhkua Oy is also legally bound by accounting and tax regulations that require the retention of certain data.

Requests should be sent in writing to the data controller. Identity verification may be required. The data controller will respond to the customer within the time frame stipulated by the GDPR (typically within one month).

  1. Cookies

This website uses cookies. A small file is sent to the browser and stored on the computer's hard drive. Both session cookies (which close when the browser is closed) and persistent cookies (which remain stored) are used. The purpose of cookies is to enhance the user experience on the website.

If the user is a registered customer, cookies manage login and access to pages intended for registered users only. Cookies can also track user interests to improve service usability. Most internet browsers automatically accept cookies, but they can be disabled in browser settings, which may limit website functionality.

Advertising cookies may be used to optimize the advertising experience for users. Some third-party vendors, including Google, may also use cookies or web beacons (1-pixel image files) to improve advertising experiences.

Data collected through cookies and web beacons does not include personal information, and online activities cannot be linked to a specific individual.

Last updated: February 16, 2025