Worried about your personal data? So are we!
When you register to Vapaus, you’re required to provide your email address, name, address and social security number. Here’s a little more information about why we need those details and what we do with them. 🤓
Email address requirement
Perhaps the most obvious need is your work email address or the email address you have communicated to your employer. This will be used to identify you as their employee and give you access to the bike benefit. ✌🏻
Additionally, a valid email address is always needed for you to login to the system and receive service notifications or emails from our customer service team.
Home address requirement
Vapaus provides a paid service, which makes us liable for providing compliant invoices.
The Finnish law requires for this your full name as well as your home address, which is why we require those right at the time of registration. We want to make sure we are able to provide you the service in a timely manner as soon as you’re ready to order your bike.
Social security number requirement
We need to use strong authentication to make sure we can identify you as a person. Strong authentication helps us make sure that no one misuses the system to order several bikes, and it is a legal requirement in the case of debt collection.
We use a secure system called Nets to verify your identity, and it is also Nets who sends us all the the information we need about your identify.
Rest assured that your social security number is only available to you and limited personnel and will only be used in the above-mentioned litigation cases.
Other requirements
- Depending on your employer, you may need to also provide your cost centre and/or your employee ID. This information is used by your employer to report the benefit to payroll as well as manage invoices.
- If your contract includes monthly recurring payments, you will be asked to provide a valid payment method before confirming your bike order.
- If you wish to make it easier to contact you or retrieve access to your account (for example when changing employers), you can add a phone number as well as additional email addresses. This however is never a requirement from Vapaus.
We care about security
Security is a priority for Vapaus, and that naturally also applies to your personal data. We’re following best practices recommended by GDPR (and common sense!) and access to the data in monitored and documented in our permissions system.
Our servers are located in Finland with backups in other EU countries to protect us against major incidents. All our servers are in virtual private networks (VPN) behind a firewall, making us completely in control of who can access them. In general, we constantly improve our practices keeping security at the core.
We promise not to use your data on any other way than providing or improving our service but should you anyways want to be forgotten, you can always request the deletion of your personal data from our team.