Privacy policy.

2. Contact person for privacy matters

In all matters concerning the processing of personal data, rights of the data subject or cookies, you can directly reach out to our privacy representative:

Ab Juup Oy / Privacy
Email: info@juup.fi
Phone: +358 40 737 1571

3. Name of the register

Ab Juup Oy customer, order, contact and web service register.

4. Purposes and legal bases for processing personal data

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) only for predefined, legitimate purposes:

• Order processing and delivery (Performance of contract, GDPR Art. 6(1)(b)): Receiving orders, manufacturing products, sharing delivery addresses with logistics partners, invoicing and tracking payments, and managing warranties.
• Customer service and communication (Legitimate interest, GDPR Art. 6(1)(f)): Responding to quotation requests, stove sizing guidance, installation advice and customer relationship management.
• Legal obligations (GDPR Art. 6(1)(c)): Fulfilling accounting and tax obligations and statutory seller liability under consumer protection laws.
• Site development and marketing (Consent, GDPR Art. 6(1)(a)): Website analytics (Google Analytics) and measuring marketing effectiveness (Meta Pixel) are always based on explicit cookie consent.

5. Categories of personal data processed

We process only data strictly necessary for the intended purpose, which may include:

You can change your cookie preferences at any time from the Cookie Settings link at the bottom of the page or the action box above. You can also block cookies in your browser settings.

7. Regular disclosures and recipients of data

We do not sell, rent or disclose your personal data to third parties for independent marketing. We share data only with trusted partners necessary to provide our services:

• Logistics and transport companies: For order deliveries (e.g. recipient name, address and phone number for delivery notice).
• Payment processors and banks: For secure payment verification and handling.
• Financial management and accounting: To fulfill statutory bookkeeping requirements.
• Analytics and marketing partners: Google and Meta in accordance with your consent.
• Authorities: When required by statutory obligations.

8. Data transfers outside the EU/EEA

Data is primarily processed on servers within the EU and EEA. When using international service providers (such as Google or Meta), data may be transferred outside the EU/EEA. Transfers always adhere to applicable privacy legislation, such as the EU-U.S. Data Privacy Framework or European Commission Standard Contractual Clauses (SCC).

9. Data retention periods

We retain personal data only as long as necessary for the purposes outlined in this policy or required by law:

• Order and warranty data: For the duration of the customer relationship, product warranty (5 years) and statutory seller liability period.
• Accounting material: 6–10 years from the end of the financial year as required by Finnish accounting law.
• Contacts and quotation requests: For the duration of inquiry processing and quote validity.
• Cookie data and consents: Cookie consent choices are saved for 12 months.

10. Data security and protection

We protect personal data diligently through appropriate technical and organizational measures. Traffic between the website and visitors is encrypted with strong SSL/TLS (HTTPS). Electronic databases and servers are located in secure data centers accessible only by authorized personnel whose duties require data processing. All staff and partners are bound by confidentiality.

11. Rights of the data subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request confirmation whether we process personal data about you and receive a copy of that data.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure (right to be forgotten): You can request erasure of your data unless we have a statutory obligation (e.g. bookkeeping) to retain it.
• Right to restriction of processing and objection: You can in certain situations object to processing or request restriction.
• Right to withdraw consent: You can withdraw your cookie or marketing consent at any time.
• Right to data portability: You can request data you provided in a machine-readable format.
• Right to lodge a complaint: If you believe your data processing violates privacy laws, you can file a complaint with the Office of the Data Protection Ombudsman (www.tietosuoja.fi).

12. Exercising your rights

You can exercise your rights by sending a written request via email to info@juup.fi or by mail to Ab Juup Oy, Varsakuja 10, 20380 Turku, Finland.

We respond to requests without undue delay and at the latest within one month of receipt. If needed, we may ask you to verify your identity before processing the request.

13. Changes to this privacy policy

We continuously develop our website and services and may update this privacy policy from time to time. Changes take effect upon publication on our website.