1. Customer register holder
99300, Muonio, Finland
2. Person responsible for the customer register
3. Customer register name
PuroPuro webshop customer register
4. General legal principle and the personal data collection / customer register justification:
According to the European Union general data protection regulation (Regulation (EU) 2016/679), the juicidal right to handle personal data is an agreement, which comes to be, when a customer orders services and/or products in the PuroPuro webshop. The intent of the registry is to ensure the commerce taking place in the webshop, such as brokering order information, billing information, payment verification or data handling information between PuroPuro and the customer. Additional, the register is being upheld to enable customer contacts and customer relations, and to enable electronic marketing communication in such cases where the customer has allowed this. PuroPuro doesn’t save or keep in the register any data connected to other merchants’ services or products. The collected data will not be applied to any automatized decision-making. The data may be used in customer profiling.
5. Register data content
Family name, first name
Social number (private billing customers)
Source page of the purchase
Register data of a company contains also:
Billing broker ID
Additionally, customer will be given the choice to concede additional information via a webform.
The data will be storaged for as long as the customer and PurPuro have a mutual, valid agreement. The data may be storaged longer whereas necessary in accordance to the law in such areas as book-keeping, retailing and consumer trade responsibilities.
6. Regular data sources
The data will be collected via electronic forms in the Johku ecommerce system. The customers fill in the forms when ordering services/products from PuroPuro Johku ecommerce system.
7. Regular data handover outside EU / EEA
The data resides by the register holder. The data may be technically handled outside EU / EEA.
8. Register data protection
The data will be handled with utmost meticulousness and will be protected accordingly. The data will be held on web servers, which are maintained and protected accordingly. The register holder ensures, that all personal data and access rights will be handled confidentially and only by legitimate staff members.
Electronically saved data: The register is located on the Johku server and the data manager is Actual Commerce Oy. The full register can only be accessed by the register holder and the technical staff at Actual Commerce Oy. Read more about the Johku data protection policies: johku.fi/fi/tietosuoja
Manual data: In principle the data shall not be printed as manual data. Should the data be printed, the data will be held in secured premises and only the register holder holds accessing rights.
9. Verification rights
All persons listed in the register have a right to verify their saved data and correct any misinformation. This right has been automated by the Johku service, maintained by PuroPuro, in the following means:
The Johku service communicates to the customer through My Johku application whenever his/her personal data is being handled. The service sends an automated message, as well as a link, to the My Johku where the customer may verify the data saved. The application also features a data transfer function. The My Johku service can be accessed throughout: johku.com/customer.
The My Johku service also hosts the contract termination feature, including the removal of the data. Should the customer terminate her/his contract with My Johku, all automated features and applications will cease. After the contract termination the customer must manage her/his own data (verification, correction, dismissal, limiting, data transfer) through written communication with PuroPuro. PuroPuro has the responsibility to answer the written communication within one month, as is being determined in the European Union general data protection regulation (GDPR). PuroPuro holds the right for identity control.
The My Johku service is complimentary.
10. Other personal data rights
The customer, whose data is being held in the register, has the right to ask for the removal of her/his data, as well as other rights as determined in the European Union general data protection regulation (GDPR).
It is noteworthy that the PuroPuro customer register data is being created, when a customer purchases/reservates a service/products. Thus PuroPuro is also bound by the Finnish book-keeping and tax legislation to store and conserve the data.
All demands must always be presented to the register holder in written form. The register holder holds the right for an identity verification. The register holder must reply to the written demand within one month, as has been determined in the European Union general data protection regulation (GDPR).
The purpose of a cookie is to upgrade the website user experience. The cookies also manage the login to the site. The cookies enable the data collection of the browsing data and enhance the serviceability. Web browsers are customized to accept cookies automatically, but the feature can be removed in the browser settings, thereby removing also some features on the website.
The data collected by cookies and trackers don’t contain personal data, and the browsing actions can not be traced back to a person.