PRIVACY POLICY

🌲 A gentle note about your data  🌲

When you step into our world, whether it’s a book, a course, or a forest retreat, your trust matters.

We collect only the information that is necessary to serve you: to process your order, to stay in touch when needed, and to offer you meaningful content if you have chosen to receive it.

Your data is handled with care, respect, and in accordance with EU data protection laws.
We do not sell your information or use it for anything unrelated to your experience with us.

You always have the right to access, update, or request deletion of your data.

If you have any questions, you are warmly welcome to contact us.

🌲🌲🌲

If you would like to understand more about how your data is handled, you can find the full details below.

PRIVACY POLICY IN DETAIL

In this Privacy Policy, we describe how customer data is processed in the online store of Juniperus Metsämatkat Ky.

We may update this Privacy Policy from time to time. We recommend reviewing it regularly.

1. Data Controller

Juniperus Metsämatkat Ky
Hytöläntie 140
50670 Otava
Finland

Phone: +358 45 322 0969
Email: mirja.nylander@metsakellinta.fi
Business ID: 1570850-3

2. Contact Person for Data Protection Matters

Mirja Nylander
Juniperus Metsämatkat Ky

Phone: +358 45 322 0969
Email: mirja.nylander@metsakellinta.fi

3. Name of the Register

Customer Register of the Juniperus Metsämatkat Ky Online Store

4. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is a contract formed when the customer purchases products and/or services from the online store.

The purpose of the register is to enable online transactions, including:

  • processing orders

  • handling billing information

  • confirming payments

  • managing deliveries and services

In addition, personal data is processed for:

  • customer service communication

  • maintaining the customer relationship

  • electronic marketing, where the customer has given consent

Juniperus Metsämatkat Ky does not store or process data related to purchases made from other merchants.

Personal data is not used for automated decision-making. Data may be used for profiling.

5. Data Content of the Register

The register may include the following personal data:

  • First and last name

  • Address

  • City

  • Country

  • Phone number

  • Email address

  • Personal identity number (for private invoicing customers, if required)

  • Order source (website)

For business customers, additional data may include:

  • Company name

  • Business ID

  • E-invoicing address

  • Intermediary ID

  • Reference information

Customers may also provide additional information voluntarily in free-text fields.

Data Retention

Personal data is stored as long as the contractual relationship or consent remains valid.

Data may be retained longer where required by law, such as accounting or consumer protection obligations.

6. Regular Sources of Data

Data is collected via electronic forms in the Johku online service.

Customers provide their data themselves when placing an order.

7. Data Disclosure and Transfers Outside the EU/EEA

Personal data is not regularly disclosed to third parties.

Data may be technically processed outside the EU or EEA.

8. Data Protection Principles

Personal data is processed with due care and protected appropriately.

When data is stored on internet servers, both physical and digital security measures are applied.

Access to personal data is restricted to:

  • the data controller

  • technical personnel of the service provider (Aptual Commerce Oy)

Electronically Stored Data

The register is stored in the Johku service, operated by Aptual Commerce Oy.

Only authorized personnel have access to the data.

More information: johku.fi/fi/tietosuoja

Manual Data

As a rule, data is not stored in printed form.

If printed, documents are stored securely and accessible only to the data controller.

9. Right of Access and Correction

Individuals have the right to:

  • access their personal data

  • request correction of inaccurate or incomplete data

This is primarily managed through the My Johku service.

Customers receive a link to My Johku in order confirmations.

In My Johku, users can:

  • review their data

  • correct their data

  • download their data in a structured format

Service available at: johku.com/customer

Users may also request deletion of their My Johku account.

After terminating My Johku, requests must be made directly to the data controller in writing.

The data controller may request proof of identity.

Requests are handled within the timeframe defined by GDPR (typically within one month).

10. Other Rights Related to Personal Data

Individuals have the right to request:

  • deletion of their data ("right to be forgotten")

  • restriction of processing in certain situations

However, data related to purchases must be retained as required by accounting and tax legislation.

Requests must be submitted in writing to the data controller.

11. Cookies

This website uses cookies.

Cookies are small files stored on the user’s device to improve the user experience.

Both session cookies (temporary) and persistent cookies are used.

Cookies may be used to:

  • manage login sessions

  • improve usability

  • analyze user interests

Browsers usually accept cookies automatically, but users can disable them in their settings. This may affect site functionality.

Advertising Cookies

Advertising cookies may be used to optimize the user experience.

Third-party providers, including Google, may use cookies or web beacons.

Data Collected via Cookies

Information collected through cookies does not contain personal data and cannot be linked to an individual.

Created: April 18, 2026