Privacy policy – jessemajo.fi
1. Data controller
JK-Tuoretalo Oy
Business ID: 2480182-2
Address: Piikivenkuja 4 B-E, 04300 Tuusula, Finland
This privacy policy explains how we collect, use, store and protect personal data on the website jessemajo.fi. The policy complies with the EU General Data Protection Regulation (GDPR) and applicable national legislation.
2. Name of the register
Website register – jessemajo.fi
3. Basis and purpose of processing personal data
We collect and process personal data only on lawful grounds, such as consent under the GDPR, performance of a contract, a legal obligation or the controller's legitimate interest.
Personal data may be processed for the following purposes:
-
handling contacts and enquiries
-
providing the service and managing customer relationships
-
marketing and campaign communications (with consent)
-
analysing and developing use of the website
4. Groups of data subjects
Data may be processed for example about:
-
website users and visitors
-
people who have signed up for the newsletter or campaigns
-
people who have contacted us through the contact form
5. Personal data collected
Depending on how the site is used, we may collect for example:
-
name and contact details (email, phone number)
-
IP address and browser/operating system data
-
data collected through cookies (e.g. site usage and settings)
-
other information you provide yourself in forms
The scope of the data collected depends on which services or features the user uses.
6. Disclosure and transfer of data
Data is generally not disclosed to third parties without your consent, except:
-
to service providers who process data on our behalf under a contract
-
to meet statutory obligations or at the request of authorities
If data is transferred outside the EU/EEA, this is announced separately and an appropriate level of protection is ensured.
7. Data retention
Personal data is retained only for as long as necessary to fulfil the purposes or as required by law. Data based on marketing consent is retained until the consent is withdrawn or the data is no longer up to date.
8. Rights of the data subject
The GDPR gives data subjects rights such as:
-
the right to access your own data
-
the right to have incorrect data corrected
-
the right to erasure (“right to be forgotten”)
-
the right to restrict or object to processing
-
the right to withdraw consent at any time
-
the right to data portability
Requests can be made by email or in another written form using the contact details above.
9. Cookies and tracking
The website uses cookies and other tracking technologies to improve the user experience and analyse site usage. Users can block cookies in their browser settings (this may affect the functioning of some features).
10. Data security
We protect personal data with technical and organisational measures such as:
-
secure connections (HTTPS)
-
encryption and access control
-
regular security audits
11. Changes to this privacy policy
We may update this privacy policy as needed (for example due to changes in legislation or developments in our operations). The updated policy takes effect as soon as it is published on the website.
12. Contact details
All data protection questions and requests concerning your rights should be addressed to:
JK-Tuoretalo Oy
Email: [email protected]