In this privacy statement, we exclusively inform about Yritys Oy's Johku-kaupa customer register and its data processing principles.
We may change our data protection policies and this privacy statement from time to time. We recommend that you familiarize yourself with our privacy practices regularly.
Royal Line Oy
Pohjoisranta 4, 00170 Helsinki
0207 118 333
Business ID: 0656029-5
2. Person responsible for registry matters and/or contact person
Royal Line Oy
050 388 8033
3. Register name
Royal Line Oy's online store customer register
4. Legal basis and purpose of personal data processing / purpose of use of the register
According to the EU General Data Protection Regulation, the legal basis for processing personal data is a contract that is created when the customer orders products and/or services from Royal Line Oy's online store. The purpose of the register is to enable online trading using Royal Line Oy's online store, such as the transmission of order information, invoicing information, payment confirmation information or processing information between Royal Line Oy and the customer. In addition to this, the register is collected to enable the contacts required by customer service, to maintain the customer relationship and for electronic marketing communications when the customer has given his consent.
Royal Line Oy does not in any way store orders made for products of other merchants or related information in its customer register.
The information is not used for automated decision-making. The data can be used for profiling.
5. Data content of the register
- First and last name
- Postal number
- Country of origin
- Telephone number
- Email address
- Personal identification number (private invoicing customer)
- Order source page
The following companies are also registered:
- Name of the company
- Business ID
- Online billing address
- Broker ID
In addition, the customer is offered the opportunity to provide additional information about the process in the field in a free form as well as other information he deems appropriate.
Data retention period
Data will be stored as long as the user and Royal Line Oy have a valid mutual agreement and/or consent.
Information can be stored longer to the extent that it is necessary to implement the obligations set by the current legislation, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.
6. Regular sources of information
The information is collected using the electronic forms of the Johku online service. Customers enter the information personally when ordering from Royal Line Oy's Johku online store.
7. Regular data transfers and data transfer outside the EU or the European Economic Area
The information is not passed on separately and remains only with the controller. Data can technically be processed outside the EU or the European Economic Area.
8. Principles of registry protection
Care is taken when processing the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.
Electronically stored information
The register is located in the Johku service and the data processor is Aptual Commerce Oy. Only the controller and Aptual Commerce Oy's technical maintenance staff can access complete register data.
More about the data protection principles of the Johku service: johku.fi/fi/tietosvoja
Basically, we avoid printing the information in the register as manual material. If, in some situations, manual material is printed from the register, the material is kept in a locked state and only the registrar has access to the material.
9. Right of inspection and implementation of the right of inspection
Every person in the register has the right to check their information stored in the register and to correct any incorrect or incomplete information. This right is automated by the Johku system used by Royal Line Oy in the following way:
Johku communicates to the user with the Oma Johku service about the processing of their personal data in connection with the merchant's confirmation messages. The messages contain a link to the Oma Johku service.
In Oma Johku, the user can check the information stored about himself and make corrections if necessary. The service also has functionality that allows the user to download data in a structured format to transfer data from one system to another. The Oma Johku service can be accessed at any time at johku.com/customer.
Oma Johku also offers the option to terminate the Oma Johku contract and delete data from Oma Johku. If the user stops using Oma Johku and terminates his contract with Johku, all automatic functions related to managing his own data will cease. After the end of the agreement, the user must manage his own data (checking, correction, right to be forgotten, restriction, right to transfer from one system to another) in writing directly with Royal Line Oy. Royal Line Oy may, if necessary, ask the applicant to prove his identity. Royal Line Oy responds to a written request within the time stipulated in the EU data protection regulation (generally within a month).
The use of the Oma Johku service is free of charge.
10. Other rights related to the processing of personal data
A person in the register has the right to request the removal of personal data about him from the register ("the right to be forgotten"). Those registered also have other rights according to the EU's General Data Protection Regulation, such as limiting the processing of personal data in certain situations.
However, it should be noted that the information stored in Royal Line Oy's customer register is always created when the customer buys products and/or services. In this case, Royal Line Oy is also bound by the obligations set by accounting and tax legislation regarding the storage of material.
Requests must be sent in writing to the controller. If necessary, the registrar can ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).
The data collected with the help of cookies and web trackers do not contain the user's personal data. Activities carried out online cannot be linked to a specific person.