Privacy policy

Controller

Menevä Oy (business ID 0711979-2), Panimokatu 2A, 00580 Helsinki, Finland. Privacy contact: varaus@meneva.fi.

What data we process

The booking calendar processes only what is necessary: your name, email address, phone number and your bookings (event, time and booking status). Giving your driver number is optional. Bookings can be made without an account: you get a confirmation email whose link lets you check or cancel your booking later. If you do sign in, login credentials (password and two-factor authentication) are stored in Menevä’s central identity service (Zitadel, Switzerland, covered by the EU adequacy decision) – this service never sees or stores passwords.

Why we process it

The data is used to manage bookings: reserving your spot, sending confirmation and reminder emails, and showing the organizer who is attending. The legal basis is performance of a contract (GDPR 6(1)(b): you make a booking and we fulfil it).

Who receives the data

Data is never sold or shared for marketing. Technical processors: Aiven (database, Helsinki), Zitadel (authentication, Switzerland), Resend (email delivery) and UpCloud (the server the service runs on, Helsinki). Strong identification for the basic training is brokered by Idura ApS (Denmark; the service runs in the EU), see Taxi driver basic training. If you opt in to WhatsApp messages, your phone number and the message contents are also passed to Meta (WhatsApp Business) as a processor. Meta processes data outside the EU as well; the transfer relies on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. You can withdraw WhatsApp messaging at any time by telling the event organizer. The organizer of an event sees the name and email of its participants.

Taxi driver basic training

Teaching days of the basic training are booked with strong identification (Finnish online banking or mobile certificate through the identification broker Idura). We store your verified name. Your personal identity code is used only at the moment of identification to compute a reference and is not stored in the booking calendar. With the reference we check from Menevä Kampus that you have completed the online part, and we tell Kampus the dates of your confirmed theory and practical days so that attendance and completion can be recorded; no other data is passed to Kampus. The training is paid through Stripe when booking the first teaching day (theory or practical): Stripe processes your card details, which are not stored in the booking calendar. If you choose e-invoice as the payment method, we store the invoiced company’s name, business ID, e-invoice address, operator and optional reference, and the organiser sends the invoice. The company can be looked up in TIEKE’s public e-invoice address register. If you pay yourself (invoice to a private person), we store the name on the invoice and a postal address or an e-mail address for the invoice, and the organiser sends the invoice by post or e-mail. Until strong identification is in use, a teaching day can be booked without it: the trainer then checks your identity from a photo ID on the teaching day (no copy is taken), and instead of a reference your e-mail address is given to Menevä Kampus so that the online part and the teaching days are linked to the right person. Stripe and Idura act as processors; Idura processes the identification data within the EU; Stripe also processes data outside the EU, relying on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. The legal basis is contract (GDPR 6(1)(b)) and the training provider’s legal obligation to verify the participant’s identity (GDPR 6(1)(c)).

Training wishes (from 9 November 2026): on the teaching-days page you can tell us where you would like teaching days. We store the town or city, the day you would like and, if you give it, your e-mail address so that we can tell you when days open in your area; your name is not asked. The wishes are used to plan new teaching days and are deleted automatically after 12 months. Giving the e-mail address is voluntary, and the legal basis for using it is your consent (GDPR 6(1)(a)), which you can withdraw at varaus@meneva.fi.

How long we keep it

Booking data is deleted automatically 12 months after the event. Basic-training payment and invoicing records (name, email, phone number, amount, status and payment method, and the invoiced company’s name, business ID, e-invoice address, operator and reference, or a private payer’s name, postal address and invoice e-mail) are kept for 7 years as required by accounting law once the training is paid or invoiced; interrupted card payments and cancelled enrolments are deleted after 12 months. You can request account deletion at varaus@meneva.fi, which also removes your booking history.

Your rights

You have the right to access, rectify and erase your data, and to lodge a complaint with the supervisory authority (tietosuoja.fi). Requests: varaus@meneva.fi.