Privacy notice

1. Data controller

Lapland Testing Oy / eTaxi Rovaniemi
Business ID 2784754-3
Porraskuja 12, 96900 Saarenkylä, Finland
info@etaxi.one
+358 40 505 6600

2. Personal data we process

• name, phone number, email address and service language
• pickup and destination addresses, travel time, flight number and other journey details
• passenger and luggage counts and service needs provided by the customer
• quote, booking, payment and cancellation information
• customer service messages sent by email, WhatsApp and website forms
• technical log data needed for service security and prevention of misuse
• cookie-free usage statistics such as page viewed, time, language, device category, referring domain, country derived temporarily from the IP address and estimated visitor counts using a daily rotating pseudonymous identifier

3. Purposes and legal bases

• Contract and pre-contractual steps: responding to requests, planning transport, managing bookings and processing payments.
• Legal obligation: retaining information required for accounting, taxation and official obligations.
• Legitimate interests: customer service, service quality, information security, misuse prevention and handling legal claims.
• Consent: only where we separately ask for consent, such as for electronic direct marketing.

4. Sources of personal data

We primarily receive data from the customer. Data may also be provided by a travel agency, hotel, company, person making the booking or another partner acting for the customer.

5. Recipients and service providers

We provide the driver and, where necessary, a transport partner with the information needed to perform the journey. We also use IT, hosting, email, communications, mapping, payment and AI service providers as processors. Data is disclosed to authorities only where required by law.

Where a service provider processes data outside the European Economic Area, we use safeguards required by the GDPR, such as the European Commission’s standard contractual clauses.

6. Use of artificial intelligence

We may use AI to classify messages, structure information and prepare reply drafts. AI does not make automated decisions that produce legal or similarly significant effects for the customer. eTaxi confirms the transport, price and other material decisions.

7. Retention periods

• unconfirmed quote requests and general enquiries: up to 12 months after the last contact
• operational data for completed journeys: normally up to 24 months after the journey
• accounting and payment records: for the period required by law, generally at least 6 years from the end of the year in which the financial year ended
• data may be retained longer where needed for a complaint, legal claim or official matter
• aggregated website usage statistics: up to 24 months
• daily rotating visitor identifiers: up to 48 hours

8. Data security

Access to personal data is limited to people and service providers who need it for their work. We protect systems with access controls, encrypted connections, backups and other appropriate technical and organisational measures.

9. Your rights

Depending on the circumstances, you have the right to access your data, request correction or erasure, restrict or object to processing and receive data you provided in a portable format. You may withdraw consent at any time where processing is based on consent.

Send requests concerning your rights to info@etaxi.one. We respond without undue delay and generally within one month. We may request information needed to verify your identity.

10. Right to lodge a complaint

If you consider the processing of your personal data unlawful, you may lodge a complaint with the Office of the Data Protection Ombudsman in Finland: tietosuoja.fi.

11. Cookies and analytics

The website uses first-party, cookie-free analytics to understand use of the service and improve its content. We count page views, estimated daily visitors, language version, device category, referring domain and visitor country. Processing is based on our legitimate interest in understanding website use and improving the service.

Country is derived from the IP address on our own server. The daily visitor estimate uses a secret key to create a daily rotating pseudonymous identifier from the IP address and broad browser and device categories. The raw IP address and browser string are not stored in the analytics database. The daily identifier is deleted within 48 hours and is not used to follow a visitor across days or pages.

The analytics does not create a persistent visitor identifier or an individual browsing history. Aggregated statistics are not disclosed to advertising platforms. The website does not use analytics or marketing cookies.