Privacy Policy

In this privacy policy, we only inform you about Ylhäisten tila Oy's Johku store customer register and its data processing principles.

We may change our data protection practices and this privacy policy from time to time. We therefore recommend that you review our privacy practices regularly.

1. Registrar

Ylhäisten tila Oy
Sauvontie 108-2, 21510 Hevonpää
0503436411
elina@ylhaistentila.fi
Y-tunnus: 3127996-4

2. Person responsible for registry matters and/or contact person

Elina Lindberg
Ylhäisten tila Oy
0503436411
elina@ylhaistentila.fi

3. Register name

Ylhäisten tila Oy's online store customer register

4. Legal basis and purpose of processing personal data / purpose of use of the register

The legal basis for the processing of personal data under the EU General Data Protection Regulation is a contract that is created when a customer orders products and/or services from Ylhäisten tila Oy's online store. The purpose of the register is to enable online trading using Ylhäisten tila Oy's online store, such as the transmission of order information, billing information, payment confirmation information or processing information between Ylhäisten tila Oy and the customer. In addition, the register is collected to enable customer service-required contacts, to maintain the customer relationship and for electronic marketing communications when the customer has given their consent.

Ylhäisten tila Oy does not store orders made for other merchants' products or related information in its customer register in any way.

The data is not used for automated decision-making. The data may be used for profiling.

5. Data content of the register

  • First and last name

  • Address

  • Postal code

  • Country

  • Telephone number

  • Email address

  • Personal ID (private billing customer)

  • Order source page

  • For companies, the following is also registered:

  • Company name

  • Business ID

  • Online billing address

  • Intermediary ID

  • Reference

  • Mark

In addition, additional information about the process in the field is offered to the customer, who is also given the opportunity to freely provide other information they deem relevant.

Data retention period

The data will be stored as long as the user and Ylhäisten tila Oy have a valid mutual agreement and/or consent.

The data may be stored longer to the extent necessary to fulfill the obligations set by applicable legislation, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

6. Regular data sources

The data is collected using electronic forms in the Johku online service. Customers enter the data personally when ordering from Ylhäisten tila Oy's Johku online store.

7. Regular data transfers and data transfers outside the EU or the European Economic Area

The data will not be separately disclosed and will remain solely with the controller. The data may technically be processed outside the EU or the European Economic Area.

8. Principles of register protection

The register is handled with care and the data processed by the information systems are protected appropriately. When the register data is stored on Internet servers, the physical and digital security of their equipment is appropriately ensured. The controller ensures that the stored data, as well as the access rights to the servers and other information critical to the security of personal data, are handled confidentially and only by employees whose job description requires it.

Electronically stored information

The register is located in the Johku service and the data processor is Aptual Commerce Oy. Only the controller and Aptual Commerce Oy's technical maintenance staff have access to the complete register data.

More about the Johku service's data protection principles: johku.fi/fi/tietosuoja

Manual material

As a matter of principle, we avoid printing out the information in the register as manual material. If in some situations manual material is printed out from the register, the material is kept in a locked state and only the registrar has access to the material.

9. Right of inspection and implementation of the right of inspection

Every person in the register has the right to check their data stored in the register and to correct any incorrect or incomplete data. This right is automated by the Johku system used by Ylhäisten tila Oy in the following way:

Johku communicates to the user via the Oma Johku service about the processing of their personal data in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service.

In Oma Johku, the user can check the data stored about themselves and make corrections to them if necessary. The service also has functionality that allows the user to download data in a structured format for transferring data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer.

Oma Johku also offers the possibility to terminate the Oma Johku agreement and delete data from Oma Johku. If the user stops using Oma Johku and terminates their agreement with Johku, all automated functionalities related to the management of their own data will cease. After the end of the agreement, the user must manage their own data (review, rectification, right to be forgotten, restriction, right to transfer from one system to another) in writing directly with Ylhäisten tila Oy. Ylhäisten tila Oy may, if necessary, ask the requester to prove their identity. Ylhäisten tila Oy will respond to the written request within the time period stipulated in the EU Data Protection Regulation (generally within one month).

The use of the Oma Johku service is free of charge.

10. Other rights related to the processing of personal data

A person in the register has the right to request that personal data concerning him or her be deleted from the register ("right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain situations.

However, it is worth noting that the information stored in Ylhäisten tila Oy's customer register is always created when a customer purchases products and/or services. In this case, Ylhäisten tila Oy is also bound by the obligations set by accounting and tax legislation regarding the retention of the material.

Requests must be sent in writing to the controller. The controller may, if necessary, ask the person making the request to prove their identity. The controller will respond to the customer within the time period set out in the EU General Data Protection Regulation (generally within one month).

11. Cookies

This website uses cookies. The website sends a small file to your browser that is stored on your computer's hard drive. Both (temporary) session cookies, which are deleted when you close your internet browser, and permanent cookies, which are stored on your computer's hard drive. The purpose of a cookie is to improve your user experience on the website. If you are a registered user, the cookie also manages your login and access to pages that are only intended for registered users. Cookies can be used to track and view the user's interests and thereby influence the usability of the service. Internet browsers generally accept cookies automatically. If necessary, you can disable the use of cookies in your browser settings, which will remove some of the functionality.

Advertising cookies can be used to help optimize the advertising experience for the user of the service. Some third-party vendors, including Google, may also use cookies or web beacons (a 1-pixel image file) to improve your ad experience.

The information collected through cookies and web beacons does not contain any personal information about you. It does not allow you to associate your online activities with a specific individual.

Updated: 26.3.2025