This is a report on the processing of personal data in accordance with the EU General Data Protection Regulation (679/2016).


Koko Forest Oy
Business ID: 3328227-8
Address: Karavaanikatu 4, 00980 Helsinki – Finland

Contacts regarding data protection matters

In all questions related to the processing of personal data and in situations related to exercising one’s own rights, the data subject must contact the controller in writing by sending an email to the customer service at

The name of the personal register

KOKO Forest customer and marketing register

Personal data to be processed

The registrar collects only such personal data from the registrants that are relevant and necessary for the purposes described in this privacy statement.

The following information is processed about the registered:

– First name
– Last name
– Company
– Email
– Phone number
– Forest property code or similar information

Rights of the registrant 

The right to access personal data

The registered person has the right to receive confirmation as to whether personal data concerning him or her is being processed, and if processed, the right to receive a copy of his or her personal data.

Right to rectification of data

The registered person has the right to request that inaccurate and incorrect personal data concerning him be corrected. The registered person also has the right to have incomplete personal information completed by submitting the necessary additional information.

The right to delete data

The registrant has the right to request the deletion of personal data concerning himself, if

  1. personal data are no longer needed for the purposes for which they were collected; or
  2. personal data has been processed illegally.

The right to restrict processing

The registrant has the right to restrict the processing of personal data concerning himself, if

  1. the data subject denies the accuracy of his personal data;
  2. the processing is against the law, and the data subject objects to the deletion of his personal data and instead demands the restriction of their use; or
  3. the controller no longer needs the personal data for the original purposes of the processing, but the data subject needs them to prepare, present or defend a legal claim.

The right to transfer data from one system to another

The registered person has the right to receive the personal data concerning him and that he has provided himself in a structured, commonly used and machine-readable format and the right to transfer the data in question to another controller.

The right to file a complaint with the supervisory authority

The national supervisory authority for personal data matters is the Office of the Data Protection Commissioner operating in conjunction with the Ministry of Justice. You have the right to submit your case to the supervisory authority if you believe that the processing of your personal data violates the relevant legislation.