Privacy Policy

Privacy Policy

Nurminen Logistics Group (Nurminen Logistics Oyj, Nurminen Logistics Services Oy and North Rail Oy) (“Nurminen“) respects and is committed to protect privacy. The purpose of this privacy policy (“Privacy Policy“) is to help you understand what personal data we collect and how we collect and process this information.

We process personal data under this Privacy Policy and in accordance with the applicable legislation, including the EU General Data Protection Regulation (2016/679; “GDPR“) and national data protection laws (“Data Protection Law“).

This Privacy Policy describes how we process the personal data of our clients and our clients’ contact persons as well as the personal data of our other contracting partners and similar contacts in connection with the management of our business operations, fulfilment of our contractual obligations, marketing, cookies used on our websites and fulfilment of our statutory obligations concerning, inter alia, insider information.

What data we collect and where is the data collected from?

We primarily collect personal data directly from you. We also obtain information based on your customer relationship or other factual connection through the use of different channels, for example through the channels listed below:

Our website

We collect information for example via quote requests, order forms for notices and contact forms. Through our website www.nurminenlogistics.com it is possible to order notices and newsletters and submit for example job applications for job searching.

Cookies

We may obtain information about the use of our website by utilizing cookies. The purpose of using cookies is to ease the use of our website. When you visit our website, we may collect information related to your computer, IP address, operating system and browser type, for example, for statistical purposes or for management of our website. The information we collect is mainly composed of data that does not enable connecting separate information to a specific user.

Third party service providers

We may also collect, store and update your personal data from public data sources and via other possible partners (for example data controllers offering address information, updating registries or other similar services).

We collect and process inter alia the following data:

  • Contact information: forename and surname, title, company name (business ID), address, phone number, email address, company website.
  • Data related to customer relationship or other contractual relation: billing information and transaction, identification and technical information, such as cookies. In addition, the following data of occasional private customers may be processed: purchase and customer relationship history, customer relationship, transaction, order and service information (such as product, purchase, price, benefit, offer, delivery, billing, customer satisfaction, reclamation and other necessary information).
  • Data related to marketing: consents to marketing or marketing bans, usage and transaction information from communication in different services and channels and service and content usage.
  • Data related to recruitment process: information related to recruitment process such as name, address, date of birth, email address, phone number, photo as well as education and employment history.
  • The personal data of insiders: first name and surname, identification number, date of birth (in respect of a foreign person), function of the insider and reason for being insider, telephone number and address of the insider.

For what purposes is the data collected?

Nurminen processes its clients’, its clients contact persons’ and other similar contacts’ personal data for the purposes described in this Privacy Policy. One or more of the following purposes for processing of data may apply depending on the specific situation:

  • Providing services and fulfilling contracts: We may process your personal data for providing the service you have requested, for fulfilling other requests received from you (such as quote request or other contact request), for handling your order and for fulfilling, maintaining, developing and analyzing the contractual relations between you and Nurminen, and for necessary identification and data protection measures.
  • Planning, development, maintenance and monitoring of Nurminen’s business operations: Your personal data may be processed for planning, development, maintenance and monitoring of different parts of Nurminen’s business operations.
  • Management and maintenance of customer and contact relationships: We may process your data for communication and providing information about our services and other matters regarding our company, and for targeted service, communication, inquiry and other similar actions.
  • Marketing and other communications: We may process your personal data for corporate communications, providing information about topical issues and events, direct marketing and other equivalent addressed communication.
  • Recruiting: We may also process your personal data for carrying out the recruitment process and providing information on the status and results of the recruitment process.
  • Fulfilling statutory obligations: Nurminen has a statutory obligation to have insider lists of its insiders. Nurminen processes the personal data of insiders in connection with complying with statutory obligations concerning insider information.

Nurminen will only process personal data for the purposes for which it was collected as described in this Privacy Policy. Personal data will only be available to employees holding a position that requires them to process the personal data to perform their work.

The legal basis for processing personal data is Nurminen’s legitimate interest to process the personal data of its own customers’ and other partners’ contact persons for the management and maintenance of contractual relations and for marketing.

How is the data processed and retained?

We have a legal obligation to ensure that your information is kept accurate and up to date. We invite you to assist us to comply with this obligation by informing us of any changes to your information.

We retain your personal data only for as long as it is necessary for that particular purpose or for fulfilling our statutory obligation. We comply with statutory retention times and our internal retention time policies.

Nurminen has taken appropriate technical and organizational measures to protect your privacy and to ensure that only authorized persons are given access to personal data. Internal policies are in place to minimize risks related to processing.

Is data transferred to third parties?

Your personal data may be transferred to third parties authorized by Nurminen which process personal data (data processors) for the provision of services and for the purposes described in this Privacy Policy. Only necessary personal data will be transferred.

Nurminen requires that such third parties follow Nurminen’s instructions and Data Protection Law, and implement appropriate technical and organizational measures.

We may also disclose personal data within the limits set by Data Protection Law for protecting our legitimate interests (for example in civil and criminal legal proceedings).

Your personal data is not transferred to or disclosed outside the EU/EEA.

What are your rights?

  • Right to access and rectification: You have the right to be informed whether personal data about you is processed and to access such data. You may request correction of inaccurate or incomplete data.
  • Right to object: You may object to processing based on legitimate interest unless compelling legitimate grounds override your interests.
  • Right to erasure: You may request deletion of personal data where applicable.
  • Right to data portability: You may receive your data in a structured, commonly used and machine-readable format and request transfer to another controller where technically feasible.
  • Right to withdraw consent: You may withdraw consent at any time where processing is based on consent.
  • Opt-out from marketing: You may opt out of future marketing communications at any time.

If you have any complaints or would like further information, please contact us at [email protected].

Complaint to Data Protection Authority

You also have the right to file a complaint with a national supervisory authority:

Office of the Data Protection Ombudsman
P.O. Box 800
00521 HELSINKI
FINLAND
Email: [email protected]
Tel.: +358 29 56 66700 (exchange)
www.tietosuoja.fi

Contact us

Nurminen is the controller of your personal data for the purposes described above. You can find our contact information here.