Privacy Policy

In this privacy policy, we provide information solely about the customer register of the Johku online shop of Mikkeli Development Company Miksei Ltd and the principles for processing personal data.

We may update our data protection practices and this privacy policy from time to time. We recommend reviewing our privacy practices regularly.

Data Controller
Mikkeli Development Company Miksei Ltd
Maaherrankatu 9–11, FI-50100 Mikkeli, Finland
Tel: +358 44 794 5669
Email: matkailu@mikkeli.fi
Business ID: 0600598-8

Contact Person for Data Protection Matters
Hanna Airas
Mikkeli Development Company Miksei Ltd
Tel: +358 50 329 6560
Email: hanna.airas@mikseimikkeli.fi

Name of the Register
Customer Register of the Mikkeli Development Company Miksei Ltd Online Store

Legal Basis and Purpose of Processing Personal Data
The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is a contract formed when the customer orders products and/or services from the online store of Mikkeli Development Company Miksei Ltd.

The purpose of the register is to enable e-commerce transactions via the online store, including the processing and transmission of order details, billing information, payment confirmations, and other related data between the company and the customer. In addition, the data is used to facilitate customer service communication, maintain customer relationships, and send electronic marketing communications where the customer has given consent.

Mikkeli Development Company Miksei Ltd does not store in its customer register any orders or related data concerning products sold by other merchants.

The data is not used for automated decision-making. Data may be used for profiling purposes.

Data Content of the Register
The register may include the following personal data:

  • First and last name

  • Address

  • City

  • Country

  • Phone number

  • Email address

  • Source page of the order

For business customers, the following information may also be recorded:

  • Company name

  • Business ID

  • E-invoicing address

  • Intermediary ID

  • Reference

  • Mark

In addition, the customer may provide other relevant information voluntarily in a free-text field during the ordering process.

Data Retention Period
Personal data is retained for as long as there is a valid contractual relationship and/or consent between the customer and Mikkeli Development Company Miksei Ltd.

Data may be retained for a longer period where required to comply with legal obligations, such as accounting or consumer protection requirements.

Regular Sources of Data
Data is collected through electronic forms in the Johku online service. Customers provide the data themselves when placing orders in the online store.

Disclosure of Data and Transfers Outside the EU/EEA
Personal data is not regularly disclosed to third parties and remains under the control of the data controller. However, data may be technically processed outside the European Union or the European Economic Area.

Principles of Data Protection
Personal data is processed with due care and protected appropriately through technical and organizational measures. When data is stored on internet servers, both physical and digital security are ensured.

Access to personal data is restricted to those employees whose duties require such access, and all data is handled confidentially.

Electronically Stored Data
The register is maintained within the Johku service, and the data processor is Aptual Commerce Ltd. Full access to the register is limited to the data controller and the technical maintenance personnel of Aptual Commerce Ltd.

Further information on Johku’s data protection practices is available at: johku.fi/fi/tietosuoja

Manual Data
As a rule, data in the register is not printed or stored in manual form. If printed in exceptional cases, such material is stored securely in locked facilities and accessible only to the data controller.

Right of Access and Implementation
Every individual in the register has the right to access their personal data and to request correction of inaccurate or incomplete information.

This right is facilitated through the Johku system as follows:
Johku communicates with users via the “My Johku” service in connection with order confirmations. Messages include a link to the service.

Through My Johku, users can review their stored data and make corrections if necessary. The service also allows users to download their data in a structured format for transfer to another system. The service is available at johku.com/customer.

Users may also terminate their My Johku agreement and request deletion of their data. After termination, automatic data management features are no longer available, and the user must submit requests directly in writing to Mikkeli Development Company Miksei Ltd.

The data controller may request proof of identity before processing such requests. Requests are handled within the time limits set by the GDPR, typically within one month.

The My Johku service is free of charge.

Other Rights Related to Personal Data Processing
Individuals have the right to request the deletion of their personal data (“right to be forgotten”) and to request restriction of processing in accordance with the GDPR.

Please note that personal data in the customer register is generated when a customer purchases products and/or services. Therefore, the company is also subject to legal obligations, such as accounting and tax legislation, which may require data retention.

Requests must be submitted in writing to the data controller. The controller may request verification of identity and will respond within the time limits set by the GDPR (generally within one month).

Cookies
This website uses cookies. A cookie is a small file sent to the browser and stored on the user’s device. Both session cookies (which expire when the browser is closed) and persistent cookies (which remain on the device) are used.

Cookies are used to improve user experience. For registered users, cookies also manage login sessions and access to restricted areas. Cookies may be used to analyze user interests and improve service usability.

Web browsers generally accept cookies automatically, but users can disable them in browser settings. Disabling cookies may affect the functionality of the website.

Advertising cookies may be used to optimize the advertising experience. Third-party providers, including Google, may use cookies or web beacons (small image files) for this purpose.

Information collected through cookies and web beacons does not include personally identifiable information and cannot be linked to a specific individual.

Created: March 24, 2026