Privacy Policy
This privacy policy describes the customer register of Aavasaksan Veturi Oy’s Johku online store and the principles governing the processing of its data.
We may update our privacy practices and this privacy policy from time to time. We recommend reviewing this policy regularly.
1. Data Controller
Aavasaksan Veturi Oy / Vonka Village
Kilpisjärventie 15
+358 45 216 0803
vonkavillage@vonkavillage.fi
Business ID: FI3151580-8
2. Person Responsible for Register Matters / Contact Person
Johanna Vehkalahti
Aavasaksan Veturi Oy
Kilpisjärventie 15
+358 45 216 0803
vonkavillage@vonkavillage.fi
3. Name of the Register
Customer Register of Aavasaksan Veturi Oy’s Online Store
4. Legal Basis and Purpose of Processing Personal Data
The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the contract that arises when a customer orders products and/or services from Aavasaksan Veturi Oy’s online store.
The purpose of the register is to enable online commerce through Aavasaksan Veturi Oy’s online store — for example, the transmission of order, invoicing, payment confirmation, or processing details between Aavasaksan Veturi Oy and the customer.
Additionally, the register enables customer service communications, maintenance of the customer relationship, and electronic marketing communication when the customer has provided consent.
Aavasaksan Veturi Oy does not store any orders or data related to products sold by other merchants in its customer register.
Data is not used for automated decision-making, but may be used for profiling purposes.
5. Data Content of the Register
The following information may be stored:
First and last name
Address
Postal code and city
Country
Phone number
Email address
Personal identity number (for private invoice customers)
Order source page
For companies:
Company name
Business ID
E-invoice address
Intermediary ID
Reference
Note
The “Additional Information” field allows customers to provide any other relevant voluntary details.
Retention Period:
Data is stored for as long as there is a valid contract and/or consent between the user and Aavasaksan Veturi Oy.
Data may be retained longer if required by applicable legislation (e.g., accounting or consumer trade obligations) or for demonstrating proper compliance with such obligations.
6. Regular Sources of Data
Data is collected through electronic forms in the Johku online service. Customers provide their information personally when placing an order through Aavasaksan Veturi Oy’s Johku online store.
7. Regular Disclosure of Data and Transfers Outside the EU/EEA
Data is not disclosed to third parties and remains solely with the data controller.
However, data may be technically processed outside the European Union or the European Economic Area.
8. Principles of Register Protection
All personal data is handled with due care, and information processed through information systems is adequately protected.
When register data is stored on Internet servers, both physical and digital security of the hardware are appropriately maintained.
The data controller ensures that stored information, access rights, and other critical data security elements are handled confidentially and only by employees whose work duties require access.
Electronically Stored Data:
The register is maintained within the Johku service, and the data processor is Aptual Commerce Oy.
Only the data controller and Aptual Commerce Oy’s technical maintenance staff have access to the complete register data.
For more information on Johku’s privacy principles: johku.fi/fi/tietosuoja
Manual Data:
Printing register data on paper is avoided whenever possible.
If manual material is produced in some cases, it is stored in a locked space, accessible only to the data controller.
9. Right of Access and Implementation of Access Rights
Every individual in the register has the right to review their stored personal data and to correct any inaccurate or incomplete information.
This right is automated through the Johku system used by Aavasaksan Veturi Oy as follows:
Johku communicates with users via the Oma Johku service in connection with confirmation messages sent by the merchant. These messages contain a link to the Oma Johku service.
In Oma Johku, the user can review and correct their stored data. The service also includes functionality allowing the user to download their data in a structured format for transfer to another system.
Oma Johku is available anytime at johku.com/customer.
Oma Johku also allows users to terminate their Oma Johku agreement and delete their data from the service.
If the user ends their Oma Johku contract, all automatic data management features will cease. After termination, users must exercise their data rights (inspection, correction, erasure, restriction, data portability) directly in writing with Aavasaksan Veturi Oy.
The company may request proof of identity when necessary and will respond within the time limits set by the GDPR (generally within one month).
Use of the Oma Johku service is free of charge.
10. Other Rights Related to the Processing of Personal Data
Individuals in the register have the right to request the deletion of their personal data (“right to be forgotten”) and other rights under the GDPR, such as restriction of processing in certain situations.
However, please note that data stored in Aavasaksan Veturi Oy’s customer register originates from customer purchases of products and/or services.
Therefore, Aavasaksan Veturi Oy is also bound by statutory accounting and tax obligations to retain certain data for a specified period.
Requests must be sent in writing to the data controller. The data controller may request proof of identity if necessary and will respond within the time frame specified by the GDPR (generally within one month).
11. Cookies
This website uses cookies.
A cookie is a small text file sent to your browser and stored on your computer’s hard drive.
Both session cookies (temporary, deleted when the browser is closed) and persistent cookies (stored on your hard drive) are used.
The purpose of cookies is to enhance user experience on the website.
If you are a registered user, cookies also manage login and access to pages reserved for registered users.
Cookies can be used to track user interests and improve service usability.
Most browsers accept cookies automatically. You can disable cookies in your browser settings, but some website functionalities may be affected.
Advertising cookies may be used to optimize the advertising experience.
Some third-party providers, including Google, may also use cookies or web beacons (1-pixel image files) to improve advertising relevance.
Information collected through cookies and web beacons does not contain personal data, and online activities cannot be linked to a specific individual.
Update 8.10.2025