Privacy policy
1. Data Controller
Roiske | Summer Adventure Center / Roiske | Arctic Sauna Retreat
Ounasjoen itäpuolentie 21
96900 Rovaniemi
FINLAND
+358 40 502 2500
info@roiskeelle.fi
Midnight Sun Wake Oy
Business ID: 2886325-4
2. Contact Person for Register Matters
Midnight Sun Wake Oy
+358 40 502 2500
info@roiskeelle.fi
3. Name of the Register
Midnight Sun Wake Oy online store customer register
4. Legal Basis and Purpose of Processing Personal Data
In accordance with the EU General Data Protection Regulation (GDPR), the legal basis for processing personal data is the contract concluded when a customer orders products and/or services from the Midnight Sun Wake Oy online store.
The purpose of the register is to enable e-commerce operations, such as transmitting information related to orders, invoicing, payment confirmations, and order processing between Midnight Sun Wake Oy and the customer.
In addition, the data is used for:
-
Providing customer service
-
Maintaining the customer relationship
-
Electronic marketing communications, subject to the customer's consent
Midnight Sun Wake Oy does not store orders or data related to the products of other merchants in its customer register.
The data is not used for automated decision-making. The data may be used for profiling.
5. Data Content of the Register
The following data may be stored in the register:
-
First name and last name
-
Phone number
-
Email address
-
The source page of the order
For corporate customers, the following additional data may be stored:
-
Company name
-
Business ID
-
E-invoicing address
-
Intermediary ID (Broker code)
-
Reference
-
Reference tag / Label
In addition, the customer has the opportunity to provide other information they deem necessary in the additional information field.
Data Retention Period
Data is retained for as long as the customer and Midnight Sun Wake Oy have a valid contract and/or customer relationship, or based on the consent provided by the customer.
Data may be retained longer to the extent required by applicable law, for example, to fulfill obligations related to accounting and consumer protection legislation.
6. Regular Sources of Data
Data is collected via the electronic forms of the Johku online service. Customers enter the information themselves when placing orders in the Midnight Sun Wake Oy online store.
7. Disclosures and Transfers of Data Outside the EU or EEA
Data will not be disclosed to third parties without a legal basis. However, data may be technically processed outside the European Union or the European Economic Area within the systems of service providers.
8. Principles of Register Protection
Due diligence is exercised in the processing of personal data, and the data is appropriately protected using technical and organizational measures.
When register data is stored on internet servers, the physical and digital security of the hardware is appropriately ensured. The controller ensures that stored data is accessed and processed only by employees whose job responsibilities require it.
Electronically Stored Data
The register is located within the Johku service, where Aptual Commerce Oy acts as the data processor.
Access to the complete register data is limited strictly to the controller and the technical maintenance staff of Aptual Commerce Oy.
More information about the privacy policy of the Johku service:
https://johku.fi/fi/tietosuoja
Manual Material
As a rule, we avoid printing register data onto paper. If, in exceptional cases, data is printed, the material is kept in a locked space, and only the controller has access to it.
9. Right of Access and Right to Rectification
The data subject has the right to inspect the data concerning themselves and to request the rectification of inaccurate or incomplete data.
Midnight Sun Wake Oy uses the Johku system, through which customers can manage their data via the Oma Johku ("My Johku") service.
Confirmation emails include a link to the Oma Johku service, where the user can:
-
View their stored data
-
Correct their data
-
Download their data in a portable format
The Oma Johku service can be found at:
The user can also terminate their Oma Johku agreement and request the removal of their data from the service. Following this, the management of data will take place in writing directly with Midnight Sun Wake Oy.
If necessary, Midnight Sun Wake Oy may request verification of identity before processing the request. Requests will be answered within the time frame stipulated by the EU GDPR, generally within one month.
The use of the Oma Johku service is free of charge.
10. Other Rights Related to the Processing of Personal Data
The data subject has the right to request the erasure of their personal data ("the right to be forgotten") as well as the right to request the restriction of processing in accordance with the EU General Data Protection Regulation.
However, please note that Midnight Sun Wake Oy is bound by obligations under accounting and tax legislation to retain data when the data relates to the purchase of products or services.
Requests must be submitted in writing to the controller. The controller may request verification of identity if necessary.
11. Cookies
This website uses cookies.
A cookie is a small file that a website saves on the user's browser. We use both session cookies, which are deleted after closing the browser, and persistent cookies, which remain on the device for a longer period.
Cookies can be used to:
-
Improve user experience
-
Enable logging in
-
Analyze website traffic and usage
-
Develop the functionality of the service
-
Target marketing
Browsers usually accept cookies automatically, but the user can block the use of cookies through their browser settings if they wish. In this case, some functionalities of the website may not work properly.
Third-party service providers, such as Google, may use cookies and web beacons to target and measure advertising.
The data collected via cookies does not generally contain personal data and cannot be directly linked to an individual.
Prepared: May 25, 2026