GDPR

Privacy Policy

1. Controller

Sole Trader: Juha-Pekka Vuorela

Business ID: 2825611-2

Email: junnu@junnu.fi

2. Name of the Register

Customer and Marketing Register

3. Contact Person Responsible for the Register

Juha-Pekka Vuorela

4. Data Subjects

Customers and contact persons, potential customers, users of website forms

5. Purpose of Processing Personal Data

Personal data is used for maintaining, managing, and developing customer relationships and potential customer relationships, for the execution of contracts, for business development, and for marketing purposes.

6. Legal Basis for Processing

Legitimate interest of the controller

7. Data Content of the Register

Only data relevant to the intended purpose is collected. The register may include the following information necessary for communication, customer relationship management, or targeted marketing:

  • Name and job title

  • Contact details, including email address

  • Demographic information such as postal code, user preferences, and interests

  • Other information related to consumer research and/or offers

8. Data Retention Period

Personal data is retained as long as necessary for fulfilling contracts with the customer or for developing customer service. As a rule, personal data is used for marketing purposes for two (2) years. Continued interest in marketing communications may extend the retention period.

You may unsubscribe from our email marketing list at any time via the unsubscribe link included in every marketing email or by contacting junnu@junnu.fi.

9. Regular Sources of Data

Data is collected directly from individuals during website visits, through personal or digital interaction, from registers within the limits permitted by law, and possibly via marketing automation tools. Data is also collected through the Google Analytics analytics service.

10. Regular Disclosures and Transfers Outside the EU or EEA

Data is not regularly disclosed to third parties. Data may be published to the extent agreed upon with the customer.

11. Principles of Data Protection

Due care is taken in processing the register, and data processed through information systems is appropriately protected. The controller ensures that stored data, access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose duties require such access.

12. Right of Access and Right to Rectification

Every data subject has the right to access their personal data stored in the register and to request correction of inaccurate or incomplete data. Requests must be submitted in writing (e.g., by email) to the controller. The controller may request proof of identity if necessary. The controller will respond within the timeframe set by the GDPR (generally within one month).

13. Other Rights Related to the Processing of Personal Data

Data subjects have the right to request the deletion of their personal data from the register (“right to be forgotten”).

They also have other rights under the GDPR, such as restricting the processing of personal data in certain situations. Requests must be submitted in writing (e.g., by email) to the controller. The controller may request proof of identity if necessary and will respond within the timeframe set by the GDPR (generally within one month).

Data subjects have the right at any time to object to the use of their data for direct marketing purposes. Personal data is never sold to third parties for direct marketing.

We use online advertising services such as Facebook, Instagram, and Google. These companies do not receive your personal data. Such advertising is not direct marketing but is based on cookies. See section “Use of Cookies” for more information.

14. Use of Cookies

A cookie is a small file temporarily stored in the user’s browser that enables the website to recognize the user and remember their preferences. The use of cookies is standard practice on websites. If you wish, you can disable cookies through your browser settings. Disabling cookies may affect your user experience.

Third-party cookies – Google Analytics

Our website uses Google Analytics to monitor and analyze website usage. Google collects data on user behavior, city-level location, age groups, technology used, and interests (where available). This data is not stored by us but is transmitted directly to Google Analytics, where it is accessible only to us.

The data collected by Google Analytics is fully anonymous and cannot be linked to an individual user, exact location, postal address, or IP address.

If you wish to prevent Google Analytics from collecting data about your browsing behavior, you can do so by installing the Google Analytics Opt-out Browser Add-on.