Privacy Policy

This privacy policy describes how Arctic Relax Oy collects, uses, and protects personal data in its Johku online store customer register, as well as the principles of data processing.

We may update our privacy practices and this policy from time to time. We recommend reviewing this privacy policy regularly.

1. Data Controller

Arctic Relax Oy
Kuusitie 9, 97700 Ranua, Finland
Tel: +358 405201634
Email: info@arcticrelax.fi
Business ID: 3117356-1

2. Contact Person for Register Matters

Terhi Juutinen
Kuusitie 9, 97700 Ranua, Finland
Tel: +358 405201634
Email: info@arcticrelax.fi

3. Name of the Register

Customer Register of Arctic Relax Oy’s Online Store

4. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the contract that arises when a customer orders products and/or services from Arctic Relax Oy’s online store.

The purpose of the register is to enable online commerce through Arctic Relax Oy’s webshop, including the transmission of order, billing, payment confirmation, and processing information between Arctic Relax Oy and the customer.

In addition, the register is used to facilitate customer service communication, maintain customer relationships, and for electronic marketing communication — only when the customer has given their consent.

Arctic Relax Oy does not store or process any orders or related data from other merchants’ products in its customer register.

No automated decision-making is carried out based on the data. The data may be used for profiling.

5. Data Content of the Register

The register may contain the following information:

  • First and last name

  • Address

  • Postal code and city

  • Country

  • Phone number

  • Email address

  • Personal identification number (for private invoicing customers)

  • Source page of the order

For companies, the following additional information is collected:

  • Company name

  • Business ID

  • E-invoice address

  • Intermediary code

  • Reference

  • Note

Customers may also provide additional information voluntarily in a free-text field if they consider it relevant.

Data Retention Period

Data is retained as long as a valid agreement and/or consent exists between the customer and Arctic Relax Oy.

Data may be stored for a longer period when necessary to fulfill legal obligations (such as bookkeeping and consumer trade responsibilities) or to demonstrate compliance with them.

6. Regular Sources of Data

Data is collected via electronic forms in the Johku online service.
Customers provide their information personally when placing an order in Arctic Relax Oy’s Johku online store.

7. Regular Data Disclosures and Transfer of Data Outside the EU or EEA

Personal data is not disclosed to third parties and remains solely with the data controller.
However, data may be technically processed outside the EU or the European Economic Area.

8. Principles of Register Protection

Care and diligence are applied when processing the register. Data handled via information systems is appropriately protected.

When register data is stored on internet servers, both physical and digital security measures are in place.

The data controller ensures that stored information, server access rights, and other critical data security information are processed confidentially and only by employees whose job duties require access.

Electronically Stored Data

The register is located within the Johku service, and data processing is handled by Aptual Commerce Oy.
Only the data controller and Aptual Commerce Oy’s technical maintenance staff have full access to the register data.

Further details about Johku’s privacy principles: johku.fi/fi/tietosuoja

Manual Material

Printing register data into manual (paper) form is generally avoided.
If printed material is generated, it is stored in a locked facility and accessible only by the data controller.

9. Right of Access and Its Implementation

Every person whose data is stored in the register has the right to access and correct their personal data if it is inaccurate or incomplete.

This right is automated through the Johku system used by Arctic Relax Oy as follows:

Johku communicates with the user through the Oma Johku service in connection with merchant confirmation messages. These messages include a link to the Oma Johku service.

In Oma Johku, the user can review and correct their stored data.
The service also allows the user to download their information in a structured format for data portability.
Oma Johku is accessible at any time via johku.com/customer.

Oma Johku also offers the option to terminate the Oma Johku agreement and delete data from the service.
If a user terminates their Oma Johku agreement, all automated data management functions cease.

After termination, users must manage their data rights (access, correction, erasure, restriction, portability) directly with Arctic Relax Oy in writing.
The company may request proof of identity if necessary. Arctic Relax Oy will respond to written requests within the timeframe set by the GDPR (generally within one month).

Use of the Oma Johku service is free of charge.

10. Other Rights Related to the Processing of Personal Data

Individuals in the register have the right to request deletion of their personal data (“right to be forgotten”).
They also have other rights provided by the GDPR, such as restricting data processing in certain circumstances.

However, it should be noted that data stored in Arctic Relax Oy’s customer register arises when a customer purchases products and/or services.
In such cases, Arctic Relax Oy is bound by accounting and tax legislation that requires retention of certain information.

Requests must be submitted in writing to the data controller.
The controller may request proof of identity if necessary.
The controller will respond within the timeframe set by the GDPR (generally within one month).

13. Cookies

This website uses cookies.
A cookie is a small file sent to the user’s browser and stored on their device. Both temporary session cookies (which expire when the browser is closed) and persistent cookies (which remain on the device) are used.

Cookies are intended to improve the user experience on the website.
If the user is registered, cookies also manage login and access to pages intended for registered users only.

Cookies may be used to track and analyze user interests to enhance service usability.
Web browsers usually accept cookies automatically, but users can disable them in browser settings — though some functions may then be unavailable.

Advertising cookies may be used to optimize the advertising experience for the user.
Some third-party providers, including Google, may also use cookies or web beacons (1-pixel image files) to improve advertising performance.

Data collected through cookies and web beacons does not include personal data, and online activities cannot be linked to a specific individual.

Date of Issue: November 3, 2025