Privacy Policy

Updated 27.3.2026

This privacy policy describes how Joen Erikoiskaluste Oy collects, processes and protects the personal data of its customers and online service users in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

Joen Erikoiskaluste Oy (3318593-7)
Ukkolantie 11, 80130 Joensuu

Contact information for matters concerning the register
Jarkko Kauhanen, 0400 909 007, jarkko@jekoy.fi

2. Name of the register and data subjects

Name of the register: Life4Van customer and marketing register

The register processes information about online service users, customers, partners and persons who have provided their contact information themselves, for example in connection with a request for quotation or newsletter subscription.

3. Purpose and legal basis for processing personal data

Personal data is processed for the following purposes:

• Processing orders, deliveries and payments and executing assignments
• Managing customer relationships and responding to contacts
• Preparing offers and developing business
• Invoicing, collection and fulfilling accounting obligations

The legal basis for processing is:

• Agreement: A transaction or order between a customer and a company.
• Statutory obligation: For example, the requirements of the Accounting Act.
• Legitimate interest: Maintaining customer relationships and direct marketing.
• Consent: For example, subscribing to a newsletter or accepting non-essential cookies. The individual also has the right to withdraw consent.

4. Personal data processed

We only collect information that is necessary for the purpose of use:

• Basic information: Name, address, telephone number, email address.
• Order and contract information: Products ordered (e.g. selections made through the configurator), delivery method, payment information, order history and complaints.
• Technical information: Information collected from the use of the website (e.g. IP address, browser information and cookies).

We do not use the information for automated decision-making or profiling.

5. Regular data sources

The data is obtained from the registered person himself/herself via website forms, use of the configurator, e-mail or telephone conversations.

6. Data disclosure and transfers outside the EU/EEA

The data is not sold or disclosed to third parties for marketing purposes. However, the data may be disclosed regularly to partners acting on behalf of the company for the implementation of the contract (e.g. transport companies, payment agents, accounting firms and IT system service providers).

Personal data is generally not transferred outside the EU, but as the data is primarily stored and processed electronically, some of our service providers may be located in countries outside the EU. In this case, we ensure that the data transfer takes place with adequate safeguards required by law.

7. Data retention period

Personal data is only stored for as long as it is necessary to achieve the purposes specified in this statement. The data contained in the accounting records are stored for the period required by the Accounting Act (generally 6 years). Customer and order information is retained for the period required by the warranty and liability for defects.

8. Principles of register protection

We respect the confidentiality of your information. Electronically processed information is located on servers protected by firewalls and passwords. The physical and digital security of the equipment is appropriately taken care of. Only those company employees and subcontractors whose work tasks require it have access to the information.

9. Rights of the data subject

According to the GDPR, the data subject has the right to:

• Check what information about him or her is stored in the register.
• Request the correction of incorrect information or the completion of incomplete information.
• Demand the restriction of the processing of your personal data in situations in accordance with applicable data protection legislation.
• Request the deletion of your data ("right to be forgotten"), unless legislation (e.g. the Accounting Act) obliges you to retain the data.
• Object to the processing of your data for direct marketing.
• Withdraw your consent at any time.
• Make a complaint to the Data Protection Ombudsman (www.tietosuoja.fi) if the data subject believes that the processing of personal data the data protection regulation is violated.

The data subject may exercise his or her rights by contacting the contact person of the data controller.

10. Cookies

Our website and configurator use cookies to improve the user experience, maintain sessions and collect analytics information. Necessary cookies are automatically loaded to ensure the functionality of the service. Non-necessary cookies (e.g. marketing and analytics) are only used with the consent given by the user, which can be managed in the cookie settings of the website.