Privacy policy
In effect from 20.8.2026 · updated 3.9.2026
1. Data controller
Tankarin Saaripalvelut avoin yhtiö (Business ID 2782203-9), Kumpulantie 46, 11130 Riihimäki, Finland. Contact for data-protection matters: tankarinkahvila@gmail.com or 041 545 3432.
For a single-vehicle rental operation a dedicated data protection officer is not required (the conditions of GDPR Article 37 are not met).
2. What data we process
In connection with a booking request we collect: first and last name, email address, phone number, and optionally a free-form message. We also record a timestamp of when you accepted the rental and cancellation terms. Date of birth, the driving licence's issue date, the driving licence number, or a second driver's details are not asked for on the form — the driving licence and age are checked in person at pickup.
We do not collect: user accounts, passwords, payment card details, or marketing consents. Nothing is ever paid on the site, so payment data is not processed either.
In the server's and reverse proxy's technical security logs, the IP address is stored in readable form for detecting attacks and for fail2ban blocking; the logs are protected by access controls and rotated after at most 30 days.
3. Cookies and other data stored in the browser
The site uses Google Analytics 4 for visitor analytics, but ONLY if you consent to it in the cookie notice — without your consent, no request is ever sent to Google and no Google cookie is ever set. You can change your choice at any time via the "Cookie settings" link at the bottom of the page; declining also deletes any Google cookies already set. There are no other marketing or tracking cookies (e.g. Meta/Facebook Pixel) on the site — this has been verified directly from the source code, not merely asserted.
The table below lists everything that may be stored in your browser, or that your browser may send to a third party, while using the site.
| Name | Type | Purpose | Duration | Legal basis |
|---|---|---|---|---|
| Cookie choice (localStorage) | Browser localStorage, first-party, entire site | Remembers whether you accepted or declined Google Analytics, so the notice doesn't show on every page load. | Until you clear your browser's stored data, or the content of this notice changes materially. | A functional memory aid, not tracking — does not require consent. |
| _ga, and cookies starting with _ga_ (Google Analytics 4) | Browser cookie, set by a third party (Google Ireland Limited) | Counts visitors and statistics about site usage. Only set if you accept in the cookie notice. | Up to about 2 years (the default set by Google's gtag.js library). | Consent (opt-in) — never set without your acceptance. |
| tiles.openfreemap.org | Third-party network request (not a cookie set by this site) | Loads the map tiles for the location map on the Contact and Pickup & return pages. Your browser connects directly to OpenFreeMap, which then sees your IP address and your browser's technical details as part of the ordinary network request. Your booking or contact details are not sent to it. | Not under this site's control — the duration is not known, since the request goes directly to OpenFreeMap's server. | Not strictly necessary for booking itself (the map is an added convenience) — which is why it is listed here separately. |
4. Purpose and legal basis for processing
We process data to prepare and perform the rental agreement (confirming the booking and communicating to arrange pickup). The driving licence and age are checked in person at pickup, and no data about them is collected or stored through this system.
Voucher data arising from a booking must also be retained under the Accounting Act — this is an independent legal basis, separate from the contract, and this data cannot be deleted on request before the statutory period has ended.
5. Retention period
Personal data of a confirmed or completed booking: 6 years from the end of the calendar year in which the booking ended (Accounting Act, chapter 2, section 10).
Personal data of an unconfirmed, rejected, expired, or fully refunded request: 90 days, since no invoice remains in force in that case.
Technical server log containing raw IP addresses: at most 30 days.
Once the retention period has ended, data linked to an individual is automatically deleted by a task run once a day.
6. Rights of the data subject
Right of access: you can see the key details of your booking with your management code at varaaretkipaku.fi/varaukseni. You can obtain all data stored about you by requesting it from the data controller.
Rectification: if there is an error in your data, contact us using the details above — an automated self-service correction is not yet available.
Erasure: data from a fully refunded cancellation can be deleted on request immediately. Data from a confirmed and completed booking cannot be deleted before the retention period required by the Accounting Act has ended, since this is a statutory obligation.
Portability: not yet implemented as a self-service feature — request your data using the contact details above.
7. Disclosure of data
We do not sell or disclose data for marketing purposes. Because invoicing is handled outside this system, the lessee's data also ends up in an invoicing or accounting program — its data protection and retention are governed by that service's own privacy notice.
The map view uses OpenFreeMap's map tiles. When you open the map, your browser connects to the tiles.openfreemap.org service, which then receives the ordinary technical details of a network request, such as your IP address. Booking or contact details are not sent to the map service.
8. Right to lodge a complaint
If you consider that your personal data has been processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).