Privacy policy
This privacy policy concerns solely the customer register of JJ-Service Oy’s Johku online store and outlines how personal data is processed.
JJ-Service Oy may update its data protection practices and this privacy policy from time to time. We recommend reviewing our privacy policy regularly.
1. Data Controller
JJ-Service Oy
Jyrkäntie 1891, 74380 Jyrkkä
+358 50-3531897
info@ruukintupa.fi
2270096-4
2. Contact Person for Register-Related Matters
Henri Jauhiainen
JJ-Service Oy
+358 50-3531897
henkka@ruukintupa.fi
3. Name of the Register
JJ-Service Oy's e-commerce customer register
4. Legal Basis and Purpose of Data Processing
The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the contract established when a customer orders products or services via JJ-Service Oy’s online store.
The purpose of the register is to enable online transactions between JJ-Service Oy and the customer—for example, the transfer of order, billing, payment confirmation, or processing data. The register also supports customer service, the maintenance of customer relationships, and electronic marketing communications where the customer has given explicit consent.
JJ-Service Oy does not store any information or orders related to other merchants or their products.
The data will not be used for automated decision-making. However, the data may be used for profiling.
5. Data Content of the Register
The register may contain the following personal data:
First and last name
Address
Postal code and city
Country
Telephone number
Email address
Personal identity number (for private customers using invoicing)
Order source (referring web page)
For business customers, the following may also be recorded:
Company name
Business ID
E-invoice address
E-invoice operator ID
Reference
Brand
Additionally, customers may voluntarily provide other relevant information in a free-text field.
Data retention period
Personal data is stored as long as there is a valid agreement and/or consent between the user and JJ-Service Oy.
Data may be retained longer when required by applicable laws (e.g. accounting or consumer protection legislation) or for the purpose of demonstrating compliance with such obligations.
6. Regular Sources of Data
Data is collected via electronic forms on the Johku platform. Customers enter their information personally when placing an order in the JJ-Service Oy Johku online store.
7. Regular Disclosures and Transfers Outside the EU/EEA
Personal data is not shared with third parties and remains solely with the controller. Technical processing of data may occur outside the EU or the European Economic Area.
8. Principles of Data Protection
The register is handled with due care, and all data processed through IT systems is appropriately secured. When stored on Internet servers, both physical and digital security measures are in place. Access to stored data, server credentials, and other information critical to the protection of personal data is granted only to authorised employees whose job duties include such processing.
Electronically Stored Data
The register is hosted on the Johku platform and managed by Aptual Commerce Oy. Only JJ-Service Oy and Aptual Commerce Oy’s technical administrators have access to the complete register.
For more details on Johku’s privacy policy, visit: johku.fi/en/privacy.
Manual Data
As a rule, personal data is not printed. If manual records are produced in special cases, they are kept in a locked space and only accessible by the data controller.
9. Right of Access and How to Exercise It
Each individual has the right to access and review their personal data stored in the register and request corrections to any inaccurate or incomplete information. JJ-Service Oy uses the Johku platform, which automates this right as follows:
Users receive a link to the Oma Johku service in merchant confirmation messages. Through Oma Johku, users can view, edit, and download their personal data in a structured format.
Johku informs users of the processing of their personal data through confirmation messages sent by the merchant. These messages contain a link to the My Johku service.
Through Oma Johku, users can view the personal data stored about them, correct any inaccurate information, and download their data in a structured format suitable for transferring to another system. The Oma Johku service is available at any time at johku.com/customer.
Users may also terminate their Oma Johku agreement and delete their data from the service. If a user terminates their Oma Johku contract, all automated data management features are deactivated. From that point on, the user must manage their personal data (e.g. access, correction, erasure, restriction, data portability) directly with JJ-Service Oy in writing. JJ-Service Oy may request proof of identity if necessary. All written requests will be processed within the timeframe specified by the EU General Data Protection Regulation (typically within one month).
Use of the Oma Johku service is free of charge.
10. Other Rights Related to the Processing of Personal Data
Individuals also have the right to request the erasure of their personal data (“right to be forgotten”). In addition, they are entitled to exercise other rights under the EU General Data Protection Regulation, such as restricting the processing of their data in certain circumstances.
However, it is important to note that personal data stored in JJ-Service Oy’s customer register is always created in connection with a purchase of products or services. As such, JJ-Service Oy is also subject to legal obligations—such as those related to accounting and taxation—that may require data retention.
All requests must be submitted in writing to the data controller. JJ-Service Oy may request proof of identity if needed and will respond within the timeframe specified by the GDPR (typically within one month).
11. Cookies
This website uses cookies to enhance the user experience. A cookie is a small text file that is sent to your browser and stored on your device. The site uses two types of cookies: Session cookies, which are temporary and deleted when you close your browser, and persistent cookies, which remain stored on your device even after you leave the site
Cookies help improve your experience on the website by, for example, remembering your preferences. If you are a registered user, cookies also manage your login and access to restricted content. In addition, cookies may be used to monitor user interests and preferences to improve the usability and functionality of the service. Most browsers accept cookies automatically, but you can disable them in your browser settings. Please note that disabling cookies may limit the functionality of certain parts of the site.
Advertising cookies may also be used to help optimise advertising shown to users. Some third-party providers, such as Google, may also use cookies or web beacons (1-pixel image files) to improve the targeting and performance of ads.
The data collected via cookies and web beacons does not contain personally identifiable information and cannot be linked to any specific individual.
Created: 3.6.2025