Privacy Policy

This Privacy Policy provides information solely about the customer register of Nature 360 Finland Oy’s Johku store and the principles of processing its personal data.

We may occasionally update our privacy practices and this Privacy Policy. We recommend reviewing our privacy practices regularly.

1. Data Controller

Nature 360 Finland Oy
Karjatie 13, Finland
Phone: +358 40 688 6264
Email: info@nature360.fi
Business ID: 3574102-8

2. Contact Person for Data Matters

Niko Pietilä
Nature 360 Finland Oy
Phone: +358 40 688 6264
Email: niko.pietila@nature360.fi

3. Name of the Register

Customer register of Nature 360 Finland Oy’s online store (Johku).

4. Legal Basis and Purpose of Processing / Use of the Register

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is the contract formed when a customer orders products and/or services from Nature 360 Finland Oy’s online store.

The purpose of the register is to enable online transactions through the Nature 360 Finland Oy store, such as transmitting order information, invoicing details, payment confirmations, and processing information between Nature 360 Finland Oy and the customer.

Additionally, the register is used to facilitate customer service contacts, maintain customer relationships, and for electronic marketing communications if the customer has given their consent.

Nature 360 Finland Oy does not record orders or related information concerning products from other merchants.

Data is not used for automated decision-making but may be used for profiling.

5. Contents of the Register

  • First and last name

  • Phone number

  • Email address

For businesses, additionally:

  • Company name

  • Business ID

Customers may also voluntarily provide other relevant information.

Data Retention Period:
Data is stored as long as there is a valid contract and/or consent between the user and Nature 360 Finland Oy. Data may be retained longer if required by applicable law (e.g., for accounting or consumer protection obligations).

6. Regular Data Sources

Data is collected via electronic forms in the Johku online service. Customers provide their information personally when placing an order from the Nature 360 Finland Oy Johku store.

7. Regular Disclosures and Data Transfers Outside the EU/EEA

Data is not disclosed to third parties and remains with the data controller only. Data may be technically processed outside the EU or EEA.

8. Principles of Data Protection

  • Data is handled carefully, and information processed using IT systems is protected appropriately.

  • Data stored on Internet servers is physically and digitally secured.

  • The data controller ensures that stored data, server access rights, and other critical personal data are handled confidentially and only by employees whose work duties require it.

Electronically Stored Data:
The register is hosted on the Johku service, with Aptual Commerce Oy acting as the data processor. Only the data controller and technical maintenance staff at Aptual Commerce Oy can access the full register data.
More on Johku’s privacy practices: johku.fi/fi/tietosuoja

Manual Records:
Printing manual copies of the register is generally avoided. If manual records are produced, they are stored in a locked location and accessible only by the data controller.

9. Right of Access and Exercising It

Every individual in the register has the right to review their personal data and correct any inaccurate or incomplete information.

  • The Johku system automates this via the Oma Johku service.

  • Customers receive links to Oma Johku in the merchant’s confirmation emails.

  • In Oma Johku, users can review and correct their data, and download it in a structured format for transfer between systems.

  • Users can terminate their Oma Johku agreement and delete their data.

  • After termination, automated functions stop, and the user must manage their data (access, correction, right to be forgotten, restriction, right to transfer) directly in writing with Nature 360 Finland Oy.

  • Identity verification may be requested. Nature 360 Finland Oy responds within the GDPR timeframe (usually one month).

  • Use of Oma Johku is free of charge.

10. Other Rights Related to Personal Data

Individuals may request deletion of their data from the register (“right to be forgotten”).
Other GDPR rights also apply, including limiting the processing of personal data in certain situations.

Note: Data in the Nature 360 Finland Oy customer register originates from purchases or service orders. Retention obligations under accounting and tax law also apply.

Requests must be submitted in writing to the data controller. Identity verification may be requested. The data controller responds within the GDPR timeframe (usually one month).

11. Cookies

This site uses cookies.

  • Cookies are small files stored on the user’s device to improve the website experience.

  • Session cookies expire when the browser closes; persistent cookies remain on the device.

  • Cookies manage login for registered users and access to restricted pages.

  • Cookies can track user interests and enhance usability.

  • Most browsers accept cookies automatically; they can be disabled in settings, though some functionality may be lost.

Advertising cookies may be used to optimize ad experiences. Some third-party providers, including Google, may also use cookies or web beacons (1x1 pixel files) to improve ads.

Data collected via cookies or web beacons does not contain personal data and cannot identify individual users.

Prepared: 27.01.2026