Privacy Policy

This Privacy Policy explains the customer register for Rib Saimaa’s website and Johku store and the principles for processing data within the register.

We may occasionally update our privacy practices and this Privacy Policy. Therefore, we recommend reviewing our Privacy Policy regularly.

1. Data Controller

H.M. Väisänen / Rib Saimaa
Haapamäentie 8, 33400 Tampere, Finland
Website: ribsaimaa.fi
Email: info@ribsaimaa.fi
Phone: +358405558250
Business ID: 2321398-1

2. Contact Person for Register Matters

Heikki Väisänen
Email: info@ribsaimaa.fi
Phone: +358405558250

3. Register Name

Rib Saimaa Online Store Customer Register

4. Legal Basis and Purpose of Data Processing

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the agreement formed when a customer orders products or services from Rib Saimaa's online store.

The register is used to facilitate online commerce through Rib Saimaa’s online store, such as the transmission of order details, invoicing information, payment confirmations, or processing details between Rib Saimaa and the customer.

Additionally, the register supports customer service, maintaining customer relationships, and electronic marketing communications when the customer has provided consent.

Rib Saimaa does not store information about orders or details related to products from other merchants.

Data is not used for automated decision-making but may be used for profiling.

5. Register Contents

The following personal data may be collected:

  • First and last name

  • Address

  • City and postal code

  • Country

  • Phone number

  • Email address

  • Personal ID number (for private invoicing customers)

  • Order source page

For companies:

  • Company name

  • Business ID

  • E-invoice address

  • Intermediary ID

  • Reference

  • Mark

Additional Information:
A free-form field is provided for the customer to include other relevant details.

Data Retention Period:
Data is retained for as long as there is an active agreement or consent between the user and Rib Saimaa. Data may be retained longer when required by law, such as for accounting or consumer trade obligations.

6. Regular Data Sources

Data is collected via electronic forms in the Johku online service. Customers input their information directly when placing orders.

7. Data Transfers and Processing Outside the EU/EEA

Data is not disclosed to third parties and remains with the data controller. Data may be technically processed outside the EU/EEA.

8. Data Protection Principles

The register is handled carefully, and electronic systems used for processing are appropriately secured. When data is stored on internet servers, physical and digital security of the servers is ensured. Access to stored data and critical information is limited to authorized personnel.

Electronically Stored Data:
The register is hosted in the Johku platform, operated by Aptual Commerce Oy. Only the data controller and Aptual Commerce Oy's technical maintenance personnel have access to complete register data.

More information about Johku’s privacy principles: johku.fi/fi/tietosuoja.

Manual Data:
Manual data is avoided. If manual records are created, they are stored securely in a locked space, accessible only to the data controller.

9. Right to Access and Exercise of Access Rights

Individuals have the right to access their data and request corrections to inaccurate or incomplete information. The Johku system automates this process via the “Oma Johku” service:

  • Users receive a link to Oma Johku in confirmation messages from Johku.

  • In Oma Johku, users can access and correct their stored data, download data in a structured format, and manage their information.

The Oma Johku service is free and accessible at johku.com/customer.

If a user terminates their agreement with Oma Johku, they must handle further requests directly with Rib Saimaa in writing. The data controller may require identity verification before processing such requests.

10. Other Rights Related to Data Processing

Individuals have the right to request the deletion of their personal data (“right to be forgotten”) and other rights under the GDPR, such as the restriction of data processing.

Note: Data created when a customer purchases products/services must be retained as required by accounting and tax laws.

Requests must be sent in writing to the data controller. Rib Saimaa will respond within the timeframe specified by the GDPR (typically within one month).

11. Cookies

This website uses cookies. Cookies are small files sent to your browser and stored on your device. Both session cookies (temporary) and persistent cookies (stored on your device) are used to enhance your browsing experience.

Cookies may manage login information for registered users and track preferences to improve the service.

Advertising cookies may optimize ad experiences. Some third-party providers, including Google, may use cookies or web beacons to enhance ad services.

Data collected via cookies and web beacons does not include personal information and cannot be used to identify individuals.

Most browsers accept cookies automatically. You can disable cookies in your browser settings, but this may limit some functionalities.

Prepared on: January 16, 2025