Privacy Policy

This privacy policy provides information exclusively regarding the customer register of the JK Tokka Johku store and the principles governing the processing of data within it.

We may update our privacy practices and this privacy policy from time to time. We therefore recommend reviewing our privacy practices regularly.

1. Data Controller

Living with reindeer tours
Ivalontie 1938
99660 Kersilö
+358407151073
jenni.kaaretkoski@hotmail.com
2766301-5

2. Person responsible for the register and/or contact person

Jenni Kaaretkoski
+358407151073
jenni.kaaretkoski@hotmail.com
2766301-5

3. Name of the register

Living with reindeer tours online store customer register

4. Legal basis and purpose of personal data processing / purpose of the register

The legal basis for processing personal data, in accordance with the EU General Data Protection Regulation (GDPR), is the contract established when a customer orders products and/or services from the Living with reindeer tours online store. The purpose of the register is to facilitate online commerce via the Living with reindeer tours online store, such as the exchange of order details, billing information, payment confirmations, or processing-related data between Living with reindeer tours and the customer. In addition, the register is maintained to facilitate contacts required for customer service, to manage the customer relationship, and for electronic marketing communications where the customer has provided their consent.

Living with reindeer tours does not in any way store orders placed for products from other merchants or related information in its customer register.

The data is not used for automated decision-making. The data may be used for profiling.

5. Data content of the register

  • First name and surname

  • Address

  • City/Town

  • Country

  • Phone number

  • Email address

  • Personal identity code (private invoicing customer)

  • Order source page

For companies, the following additional information is registered:

  • Company name

  • Business ID

  • E-invoice address

  • Intermediary ID

  • Reference

  • Reference mark

Additionally, an "additional information" field allows the customer to provide other information they deem relevant.

Data retention period

Data is retained for as long as there is a valid agreement and/or consent between the user and Living with reindeer tours.

Data may be retained for a longer period to the extent necessary to fulfill obligations imposed by applicable legislation—such as responsibilities related to accounting and consumer sales—and to demonstrate compliance with such obligations.

6. Regular sources of data

Data is collected via electronic forms on the Johku online service. Customers enter the information personally when placing orders in Living with reindeer tours Johku online store.

7. Regular disclosure of data and transfer of data outside the EU or the European Economic Area

Data is not disclosed to third parties and remains solely with the data controller. Data may be technically processed outside the EU or the European Economic Area.

8. Principles of data protection

Due care is exercised in processing the register, and data processed via information systems is appropriately protected. When registry data is stored on internet servers, appropriate measures are taken to ensure the physical and digital security of the hardware. The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose job duties require such access.

Electronically stored data

The register is hosted on the Johku service, and Aptual Commerce Oy acts as the data processor. Access to the full registry data is restricted to the data controller and the technical maintenance personnel of Aptual Commerce Oy. For more information on the Johku service’s data protection principles, please visit: johku.fi/fi/tietosuoja

Manual records

As a general rule, we avoid printing data contained in the register as manual records. If manual records are printed from the register in certain situations, the material is stored in a locked space, and only the data controller has access to it.

9. Right of access and exercising the right of access

Every person included in the register has the right to review the data stored about them in the register and to correct any erroneous or incomplete information. The Johku system used by JK Tokka automates this right in the following manner:

Johku communicates with the user regarding the processing of their personal data via the "Oma Johku" service, in conjunction with the merchant's confirmation messages. These messages contain a link to the Oma Johku service.

In Oma Johku, the user can review the data stored about them and make corrections if necessary. The service also includes a feature that allows the user to download their data in a structured format for transfer between systems. The Oma Johku service can be accessed at any time at johku.com/customer.

Oma Johku also offers the option to terminate the Oma Johku agreement and delete data from Oma Johku. If the user stops using Oma Johku and terminates their agreement with Johku, all automated functions related to managing their personal data will cease. Following the termination of the agreement, the user must manage their personal data (review, correction, right to be forgotten, restriction of processing, data portability) by contacting JK Tokka directly in writing. JK Tokka may, if necessary, request the person making the request to verify their identity. JK Tokka responds to a written request within the timeframe stipulated by the EU General Data Protection Regulation (as a general rule, within one month).

Use of the Oma Johku service is free of charge.

10. Other rights related to the processing of personal data

A data subject has the right to request the deletion of their personal data from the register (the "right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation (GDPR), such as the right to restrict the processing of personal data in certain situations.

However, please note that data stored in Living with reindeer tours customer register is generated when a customer purchases products and/or services. Consequently, Living with reindeer tours is also bound by obligations regarding data retention imposed by accounting and tax legislation.

Requests must be submitted in writing to the data controller. If necessary, the data controller may ask the person to verify their identity. The data controller will respond to the customer within the timeframe stipulated by the GDPR (generally within one month).

11. Cookies

This website uses cookies. The site sends a small file to the browser, which is stored on the computer's hard drive. Both (temporary) session cookies, which expire when you close your web browser, and persistent cookies, which remain stored on the computer hard drive, are used. The purpose of the cookie is to improve user experience on the site. If you are a registered user, the cookie also manages your login and access to pages intended exclusively for registered users. Cookies allow for tracking and analysis of user interests, thereby influencing the usability of the service. Internet browsers generally accept cookies automatically. If desired, the use of cookies can be disabled in the browser settings, although this may result in the loss of certain functionalities.

Advertising cookies may be used to help optimize the advertising experience for the service user. Some third-party providers, including Google, may also use cookies or web beacons (1-pixel image files) to enhance the advertising experience.

Data collected via cookies and web beacons does not include the user's personal data. Online activities cannot be linked to a specific individual through this data.

Created: 10 September 2026