Privacy Policy

Updated 27.3.2026

This privacy policy describes how Joen Erikoiskaluste Oy collects, processes, and protects the personal data of its customers and online service users in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

Joen Erikoiskaluste Oy (3318593-7)
Ukkolantie 11, 80130 Joensuu

Contact details for register matters
Jarkko Kauhanen, 0400 909 007, jarkko@jekoy.fi

2. Name of the Register and Data Subjects

Register name: Life4Van Customer and Marketing Register

The register processes the data of online service users, customers, partners, and individuals who have voluntarily provided their contact information, for example, when submitting a request for a quote or subscribing to a newsletter.

3. Purpose and Legal Basis for Processing Personal Data

Personal data is processed for the following purposes:

• Processing orders, deliveries, and payments, and fulfilling assignments
• Managing customer relationships and responding to inquiries
• Preparing offers and developing business
• Invoicing, debt collection, and fulfilling accounting obligations

The legal basis for processing is:

• Contract: Sale or order between the customer and the company.
• Legal obligation: For example, requirements of the Accounting Act.
• Legitimate interest: Maintaining customer relationships and direct marketing.
• Consent: For example, subscribing to a newsletter or accepting non-essential cookies. The individual also has the right to withdraw consent.

4. Personal Data Processed

We collect only data necessary for the intended purpose:

• Basic information: Name, address, phone number, email address.
• Order and contract information: Products ordered (e.g., selections made via the configurator), delivery method, payment information, order history, and complaints.
• Technical information: Data collected from website usage (e.g., IP address, browser information, and cookies).

We do not use data for automated decision-making or profiling.

5. Regular Data Sources

Data is obtained from the data subject themselves via website forms, configurator usage, email, or phone conversations.

6. Disclosures and Transfers of Data Outside the EU/EEA

Data is not sold or disclosed to external parties for marketing purposes. However, data may be regularly disclosed to partners acting on behalf of the company for the purpose of fulfilling a contract (e.g., transport companies, payment service providers, accounting firms, and IT system providers).

As a general rule, personal data is not transferred outside the EU, but since data is primarily stored and processed electronically, some of our service providers may be located in countries outside the EU. In such cases, we ensure that data transfer takes place using adequate safeguards required by law.

7. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes defined in this policy. Data included in accounting records is retained for the period required by the Accounting Act (generally 6 years). Customer and order data are retained for the period required by warranty and defect liability.

8. Principles of Register Protection

We respect the confidentiality of your data. Electronically processed data is located on servers protected by firewalls and passwords. Physical and digital data security of the equipment is maintained appropriately. Access to data is restricted to those company employees and subcontractors whose job duties require it.

9. Rights of the Data Subject

In accordance with the GDPR, the data subject has the right to:

• Verify what data concerning them has been stored in the register.
• Request the rectification of inaccurate data or the completion of incomplete data.
• Demand the restriction of the processing of your personal data in situations compliant with applicable data protection legislation.
• Request the erasure of their data ("right to be forgotten"), unless legislation (e.g., the Accounting Act) obliges the retention of data.
• Object to the processing of data for direct marketing.
• Withdraw their consent at any time.
• File a complaint with the Data Protection Ombudsman (www.tietosuoja.fi) if the data subject believes that the processing of personal data violates the Data Protection Regulation.

The data subject can exercise their rights by contacting the controller's contact person.

10. Cookies

Our website and configurator use cookies to improve the user experience, maintain sessions, and collect analytics data. Necessary cookies are automatically loaded to ensure the functionality of the service. Non-essential cookies (e.g., marketing and analytics) are used only with the user's consent, which can be managed from the site's cookie settings.