PRIVACY POLICY

In this privacy policy, we provide information solely on the customer register of the Johku online store of Rita Wellness Oy and the principles of processing its data.

We may occasionally change our privacy practices and this privacy policy. We recommend that you regularly review our privacy policy.

  1. CONTROLLER

    [Rita Wellness Oy / Itärajan Helmi]
    [Pähkinätie 8 A 20, 01710 Vantaa]
    [+358 44 744 4070]
    [info@riittaokkonen.com]
    [2794212-9]

  2. PERSON RESPONSIBLE FOR REGISTER MATTERS AND/OR CONTACT PERSON [Riitta Okkonen]
    [Rita Wellness Oy / Itärajan Helmi]
    [+358 44 744 4070]
    [info@riittaokkonen.com]

  3. NAME OF THE REGISTER Customer register of Rita Wellness Oy's / Itärajan Helmi's online store

  4. LEGAL BASIS AND PURPOSE OF PROCESSING PERSONAL DATA / USE OF REGISTER The legal basis for the processing of personal data is a contract that is concluded when the customer orders products and/or services from the online store of Rita Wellness Oy (Itärajan Helmi), in accordance with the General Data Protection Regulation of the EU. The purpose of the register is to enable online trading through Rita Wellness Oy's (Itärajan Helmi) online store, such as transmitting order information, billing information, payment confirmation information, or processing information between Rita Wellness Oy and the customer. In addition, the register is collected to enable customer service contacts, maintain customer relationships, and carry out electronic marketing communications when the customer has given their consent.

Rita Wellness Oy does not in any way store orders made by customers with other merchants or related information in its customer register.

The information is not used for automated decision-making. The information can be used for profiling.

  1. CONTENT OF THE REGISTERED DATA

    First and last name

Address

Postal code

Country

Phone number

Email address

Social security number (for private billing customers)

The source page of the order

In addition, for companies, the following are registered:

Company name

Business ID

E-invoice address

Intermediary ID

Reference

Brand

In addition, in the process, the customer is provided with the opportunity to freely provide any other relevant information they may consider necessary.

DATA RETENTION PERIOD

The data is stored for as long as the user and Rita Wellness Oy (Itärajan Helmi) have a valid mutual agreement and/or consent.

Data may be stored longer to the extent necessary to fulfill obligations imposed by applicable law, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

  1. REGULAR SOURCES OF INFORMATION Information is collected through electronic forms on the Johku online service. Customers enter the information personally when ordering from Rita Wellness Oy's (Itärajan Helmi) Johku online store.

  2. REGULAR DISCLOSURES OF INFORMATION AND TRANSFER OF INFORMATION OUTSIDE THE EU OR THE EUROPEAN ECONOMIC AREA Information is not disclosed separately and remains solely with the data controller. Information may be processed technically outside the EU or the European Economic Area.

  3. PRINCIPLES OF REGISTER PROTECTION Carefulness is observed in the processing of the register, and the information processed by means of information systems is appropriately protected. When registry information is stored on Internet servers, the physical and digital security of the equipment is appropriately taken care of. The data controller ensures that stored information, server access rights and other information critical to the security of personal data are treated confidentially and only by employees whose job description includes such treatment.

ELECTRONICALLY STORED INFORMATION

The register is located in the Johku service, and the data processor is Aptual Commerce Oy. Only the data controller and the technical maintenance personnel of Aptual Commerce Oy have access to complete registry information.

For more information on the data protection principles of the Johku service, visit johku.fi/en/privacy-policy.

MANUAL MATERIAL

As a default, we avoid printing the information stored in the register as manual material. If manual material is printed from the register in some situations, it will be kept in a locked area, and only the controller of the register has access to the material.

  1. RIGHT TO INSPECT AND EXERCISING THE RIGHT TO INSPECT

Everyone who is included in the register has the right to inspect the information recorded about them and correct any incorrect or incomplete information. This right is automated by the Johku system used by Rita Wellness Oy (Itärajan Helmi) in the following way:

Johku communicates with the user through the My Johku service, confirming the processing of their personal data in connection with messages from the merchant. The messages include a link to the My Johku service.

In My Johku, the user can review the information recorded about them and, if necessary, make corrections. The service also has functionality that allows the user to download their information in a structured format for transfer to another system. The My Johku service can be accessed at any time at johku.com/customer.

My Johku also offers the option to terminate the My Johku agreement and delete the information from My Johku. If the user stops using My Johku and terminates their agreement with Johku, all automated functions related to managing their own information will cease. After the termination of the agreement, the user must manage their own information (inspection, correction, right to be forgotten, restriction, right to transfer to another system) in writing directly with Rita Wellness Ltd (Itärajan Helmi). Rita Wellness Oy (Itärajan Helmi) may request proof of identity from the requester if necessary. Rita Wellness Oy (Itärajan Helmi) will respond to a written request within the time frame specified in the EU data protection regulation (generally within one month).

The use of the My Johku service is free of charge.

  1. OTHER RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA

Individuals in the register have the right to request the removal of their personal data from the register ("right to be forgotten"). Individuals also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of their personal data in certain situations.

It should be noted, however, that the data stored in the customer register of Rita Wellness Oy (Itärajan Helmi) are always generated when a customer purchases products and/or services. In this case, Rita Wellness Oy (Itärajan Helmi) is also bound by the obligations of accounting and tax legislation to retain the data.

Requests should be sent in writing to the data controller. The data controller may request the requester to verify their identity if necessary. The data controller will respond to the requester in accordance with the time frame set out in the EU General Data Protection Regulation (usually within one month).

  1. COOKIES

This site uses cookies. The site sends a small file to the browser, which is saved on the hard drive of your computer. Both temporary session cookies, which close when you shut your internet browser, and permanent cookies, which are saved on the hard drive of your computer, are used. The purpose of the cookie is to improve the user experience on the site. If you are a registered user, the cookie also manages login and access to pages that are intended only for registered users. Cookies can be used to track and analyze user interests and to affect the usability of the service. Internet browsers typically accept cookies automatically. If necessary, the use of cookies can be disabled in the browser settings, which will result in some functionalities being removed.

Advertising cookies can be used to help optimize the advertising experience for the user of the service. Some third-party suppliers, including Google, may also use cookies or web beacons (1-pixel image files) to enhance the advertising experience.

The information collected through cookies and web beacons does not contain user personal information. Online activities cannot be linked to a specific person through this information.

Created: April 7th, 2023