1. Controller
The controller of the register is Jouka Oy (Business ID 1813678-2)
Contact person for register matters:
Peter Lillqvist
+358 40 583 7021
peter.lillqvist(at)jouka.fi
Jouka Oy
Somerotie 4
33470 Ylöjärvi, Finland
2. Register name
The register name is:
a) Jouka Oy customer register
b) Jouka Oy marketing and communications register
3. Basis and purpose for processing personal data
Personal data is processed for purposes related to managing, administering and developing customer relationships, providing and delivering services, as well as for invoicing and service development purposes. Personal data is also processed for the purposes of handling possible complaints and other claims.
In addition, personal data is processed for communication directed at customers, such as information and news purposes, and marketing, including direct marketing and electronic direct marketing purposes.
The customer has the right to prohibit direct marketing directed at them.
The controller processes data themselves and also uses subcontractors acting on behalf of and on behalf of the controller for processing personal data.
4. Personal data to be recorded in the register
The register includes the following personal data of all registered individuals by default:
a) Basic information and contact information of the person:
- Jouka Oy Customer Register: first name, last name, address, phone number, company, business ID, email address.
- Jouka Oy Marketing and Communications Register: company name, first name, last name, email address, phone number.
b) Information about the person’s company or other organization and the person’s position or job title in the respective company or organization.
c) The person’s direct marketing permissions and prohibitions.
5. Registered person’s rights
The registered person has the following rights, and requests to exercise these rights should be addressed to info(at)jouka.fi.
a) Right of inspection
The registered person has the right to check the personal data we have recorded.
b) Right to correction of information
The registered person may request the correction of inaccurate or incomplete information concerning them.
c) Right to object
The registered person has the right to object to the processing of their personal data if they believe that their personal data has been processed unlawfully.
d) Right to prohibit direct marketing
The registered person has the right to prohibit the use of their data for direct marketing purposes.
e) Right to erasure
The registered person has the right to request the erasure of their personal data if the processing of such data is no longer necessary. We will process the request for erasure and either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the controller may have a legal or other right not to delete the requested data. The controller is obliged to retain accounting material for the period specified in the Accounting Act (Chapter 2, Section 10)(10 years). Therefore, accounting material cannot be deleted before the expiration of the retention period.
f) Right to withdraw consent
If the processing of personal data concerning the registered person is based solely on their consent and not, for example, on membership or customer relationship, the registered person may withdraw their consent.
The registered person has the right to appeal to the Data Protection Ombudsman. The registered person has the right to request that we restrict the processing of disputed data until the matter is resolved.
g) Right to make a complaint
The registered person has the right to make a complaint to the Data Protection commissioner if they feel that we are violating current data protection legislation when processing personal data. Contact information for the Data Protection commissioner: https://tietosuoja.fi/en/contact-information
6. Regular sources of information
Personal data is collected when establishing a customer relationship. This is based on the legitimate interest of the data controller. Personal data is collected from the data subject themselves in connection with campaigns, feedback, and newsletters. Personal data about potential customers is collected from public sources for marketing purposes.
In addition, cookies anonymously collect information about the use of websites.
Customer information is regularly obtained from:
- the customer themselves when the customer relationship is established
- the customer themselves through an online form
- potential customers and stakeholders from public sources.
7. Regular data disclosures
Information is not generally disclosed for marketing purposes outside of Jouka Oy.
8. Retention period of personal data
We only retain personal data for as long as necessary to fulfill the processing purposes defined in this privacy policy. We dispose of removed, outdated, and unnecessary data in an appropriate manner upon request.
- Customer personal data is generally processed for as long as the customer relationship is in force or in accordance with the Accounting Act.
- A registered user can unsubscribe from our newsletter list through a link in each marketing email we send.
- A registered user can request to be removed from our marketing list.
9. Personal data processors
Personal data is processed by the data controller and their employees. We may also partially outsource the processing of personal data to a third party, in which case we ensure through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately. The use of registers is protected by user-specific usernames, passwords and access rights.
10. Transfer of data outside the EU
Personal data from the customer register or marketing and communication register is not transferred outside the EU or the European Economic Area.
11. Automated decision-making and profiling
We do not use personal data for automated decision-making or profiling.