Privacy policy

This is the privacy policy for the akateeminen.com online store, which has been prepared in accordance with the General Data Protection Regulation. The privacy policy applies to the online store produced by Booky.fi Oy for The Academic Bookstore.

Prepared on 24 June 2020.
Updated on 11 November 2025

1. Data controller

Akateeminen Kirjakauppa Oy (Y-tunnus 2699781-4)
Keskuskatu 1
00100 Helsinki

2. Contact person responsible for the register

CFO Åke Wilén
ake.wilen@akateeminen.com

3. Name of the register

Customer and marketing register

4. Purpose of processing personal data

- Customer relationship management
- Identification of registered customers when logging in to www.akateeminen.com
- Brochure and advertisement mailing to those who have approved it
- Investigating the customer profile for business development
- Product availability monitoring services

5. Data content of the register

- Name of the person
- Name of the company/organisation
- Address
- E-mail address
- Telephone number
- Ordered products and their invoicing and payment information

6. Regular sources of information

Personal data is information provided by a registered customer, which the customer can edit and view by logging in to the service at www.akateeminen.com and selecting the "My information" function.

7. Regular disclosures of data

We use our partner Booky.fi Oy (Business ID 2131125-4), who acts as our personal data processor, to process orders and technically maintain the online store.

For the delivery and payment of orders, we also disclose the necessary information to the following partners:
-Payment intermediation: The payment information required to execute the payment transaction is transmitted to the payment service provider selected by the customer.
-Logistics and transport: For the delivery of the order, the customer’s name, address, e-mail address and telephone number are disclosed to the transport company.
-System suppliers: The data is processed in technical systems (such as warehouse management and customer relationship management) whose vendors may have technical access to the data for maintenance purposes.
-Authorities: The data may be disclosed on the basis of a legal requirement.

8. Transfer of data outside the EU and EEA

As a general rule, your personal data is only processed within the EU/EEA. However, due to the use of Google Analytics on the website, analytics data is transferred to the United States.

This transfer is protected by the EU-U.S. Data Privacy Framework approved by the European Commission, which guarantees an adequate level of data protection in the United States.

9. Principles of data protection

All personal data is protected against unauthorised access and accidental or unlawful destruction, alteration, disclosure, transfer or other unlawful processing.

The Academic Bookshop’s customer data is stored on servers maintained by our technical partner and personal data processor, Booky.fi Oy.

We have contractually (DPA) ensured that our processor is responsible for the appropriate technical protection of the data. The data is stored on servers located in Finland that are protected against data breaches and denial-of-service attacks.

The requirements of the EU's General Data Protection Regulation have been taken into account in the processing of personal data. Both we, as the data controller, and our processor, Booky.fi, comply with good data protection practices, such as access control and necessary encryption techniques. All access to personal data is controlled.

10. Right of access, rectification, and erasure of data

Customers have the right to view their own data and their acceptance of marketing letters from their own pages within the Akateeminen.com online store. The customer also has the right to obtain a copy of the personal data concerning them, as well as the right to demand the correction or rectification of the data. The customer also has the right, under certain conditions, to demand the erasure of their personal data ('right to be forgotten').

You can make a request to exercise your rights by contacting our customer service at web@akateeminen.com

We will inform you if we are unable to comply with your request in some respect, such as erasing all data that we are legally obliged (e.g. retention periods under the Accounting Act) or entitled to retain.

11. Other rights related to the processing of personal data

The data subject has the right to prohibit the use of their data for direct marketing.

The data subject also has the right to object to the processing of their personal data if the processing is based on a legitimate interest, as well as the right to request the restriction of the processing of their personal data.

In addition, the data subject has the right to have the personal data they have provided transferred from one system to another.

The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if they consider that their personal data has been processed in violation of data protection legislation.

12. Data retention period

We retain personal data only for the necessary period. The retention period is determined by legal obligations (such as bookkeeping) and the purpose for which the data is used.

We automatically erase or anonymise customer data when there is no longer a basis for their retention. This usually occurs when:

- The retention period of 6 years + the current year, required by the Accounting Act, regarding order and invoicing data, has expired.
- For other customer data, 3 years plus the current year have passed since the last change.
- 12 months for product availability monitoring

A precondition for erasure or anonymisation is that the customer has no open orders. After anonymisation, the data can no longer be linked to a person.

13. Cookies

We use essential cookies to ensure basic functions, such as shopping cart and logging in.

In addition, we use optional cookies for analytics (e.g. visitor tracking) and marketing (e.g. targeted advertising).

You can manage your cookie preferences in the Cookie Management section. You can find it right after the privacy policy or at the bottom of the website.