Privacy Policy

In this privacy policy, we inform exclusively about KJ-Experience's Johku online store customer register and its data processing principles.

We may occasionally change our privacy practices and this privacy policy. Therefore, we recommend regularly reviewing our privacy practices.

1. Data Controller

KJ-Experience
Jokijärventie 193
+358 44 997 6887
info@kj-experience.com
Business ID: 1518570-6

2. Contact Person for Data Protection Matters

Kari Järvinen
KJ-Experience
+358 44 997 6887
kari.jarvinen@kj-experience.com

3. Name of the Register

KJ-Experience's online store customer register

4. Legal Basis and Purpose of Data Processing

The legal basis for processing personal data under the EU General Data Protection Regulation is the contract formed when the customer orders products and/or services from KJ-Experience's online store. The purpose of the register is to enable online trading through KJ-Experience's online store, such as transmitting order details, billing information, payment confirmation details, or processing information between KJ-Experience and the customer. Additionally, the register is collected to facilitate customer service communications, maintain customer relationships, and for electronic marketing communications when the customer has given consent.

KJ-Experience does not store orders or related information for products from other merchants in its customer register.

Data is not used for automated decision-making. Data may be used for profiling.

5. Content of the Register

  • First and last name

  • Address

  • Postal code

  • Country

  • Phone number

  • Email address

  • Personal identification number (for private billing customers)

  • Source page of the order

For companies, the following information is also registered:

  • Company name

  • Business ID

  • E-invoice address

  • Operator ID

  • Reference

  • Brand

Additionally, in the process's additional information field, the customer has the opportunity to provide other information they consider relevant.

Data Retention Period

Data is retained as long as there is a valid mutual agreement and/or consent between the user and KJ-Experience.

Data may be retained longer if necessary to fulfill obligations imposed by applicable legislation, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

6. Regular Sources of Data

Data is collected through electronic forms in the Johku online service. Customers enter the data personally when ordering from KJ-Experience's Johku online store.

7. Regular Disclosures of Data and Transfers of Data Outside the EU or the European Economic Area

Data is not disclosed separately and remains solely with the data controller. Data may be processed technically outside the EU or the European Economic Area.

8. Principles of Register Protection

The processing of the register is conducted with care, and data handled through information systems is appropriately protected. When register data is stored on internet servers, both the physical and digital security of the hardware are properly maintained. The data controller ensures that stored data, as well as server access rights and other information critical to the security of personal data, are handled confidentially and only by employees whose job description includes such tasks.

Electronically Stored Data

The register is located in the Johku service, and the data processor is Aptual Commerce Oy. Complete register data can only be accessed by the data controller and Aptual Commerce Oy's technical maintenance personnel.

For more information on Johku service's privacy principles: johku.fi/fi/tietosuoja

Manual Material

As a rule, we avoid printing the data in the register as manual material. If, in some situations, manual material is printed from the register, it is stored in a locked space, and only the data controller has access to the material.

9. Right of Access and Implementation of the Right of Access

Every individual in the register has the right to check the data stored about them and to correct any incorrect or incomplete information. This right is automated by KJ-Experience's Johku system as follows:

Johku communicates to the user about the processing of their personal data through the merchant's confirmation messages. The messages contain a link to the "Oma Johku" service.

In "Oma Johku," the user can check the data stored about them and, if necessary, make corrections. The service also has a functionality that allows the user to download the data in a structured format for transferring the data to another system. "Oma Johku" can be accessed at any time at johku.com/customer.

"Oma Johku" also offers the possibility to terminate the "Oma Johku" agreement and delete the data from "Oma Johku." If the user ends the use of "Oma Johku" and terminates the agreement with Johku, all automatic functionalities related to managing their data cease. After the termination of the agreement, the user must manage their data (checking, correction, right to be forgotten, restriction, right to transfer data to another system) in writing directly with KJ-Experience. KJ-Experience may, if necessary, request the person making the request to prove their identity. KJ-Experience responds to the written request within the time frame set by the EU General Data Protection Regulation (generally within a month).

The use of "Oma Johku" service is free of charge.

10. Other Rights Related to the Processing of Personal Data

Individuals in the register have the right to request the deletion of their personal data from the register ("right to be forgotten"). Registered individuals also have other rights under the EU General Data Protection Regulation, such as the restriction of data processing in certain situations.

However, it should be noted that the data stored in KJ-Experience's customer register is always generated when the customer purchases products and/or services. In this case, KJ-Experience is also bound by obligations imposed by accounting and tax legislation regarding the retention of the data.

Requests should be sent in writing to the data controller. The data controller may, if necessary, request the person making the request to prove their identity. The data controller responds to the customer within the time frame set by the EU General Data Protection Regulation (generally within a month).

13. Cookies

This website uses cookies. The site sends a small file to the browser, which is saved to the computer's hard drive. Both temporary session cookies, which close when you close the internet browser, and permanent cookies, which are saved to the computer's hard drive, are used. The purpose of the cookie is to improve the user experience on the site. If you are a registered user, the cookie also manages login and access to pages intended only for registered users. Cookies can be used to track and examine the user's interests and thus affect the usability of the service. Internet browsers generally accept cookies automatically. If necessary, the use of cookies can be disabled in the browser settings, in which case some functionalities will be removed.

Advertising cookies may be used to help optimize the advertising experience for the user. Some third-party providers, including Google, may also use cookies or web beacons (1-pixel image files) to enhance the advertising experience.

Prepared: 01.07.2026