Privacy Policy

Nurminen Logistics Group (Nurminen Logistics Oyj, Nurminen Logistics Services Oy and North Rail Oy) (“Nurminen“) respects and is committed to protect privacy. The purpose of this privacy policy (“Privacy Policy“) is to help you understand what personal data we collect and how we collect and process this information.

We process personal data under this Privacy Policy and in accordance with the applicable legislation, including the EU General Data Protection Regulation (2016/679; “GDPR“) and national data protection laws (“Data Protection Law“).

This Privacy Policy describes how we process the personal data of our clients and our clients’ contact persons as well as the personal data of our other contracting partners and similar contacts in connection with the management of our business operations, fulfilment of our contractual obligations, marketing, cookies used on our websites and fulfilment of our statutory obligations concerning, inter alia, insider information.

What data we collect and where is the data collected from?

We primarily collect personal data directly from you. We also obtain information based on your customer relationship or other factual connection through the use of different channels, for example through the channels listed below:

We collect and process inter alia the following data:

For what purposes is the data collected?

Nurminen processes its clients’, its clients contact persons’ and other similar contacts’ personal data for the purposes described in this Privacy Policy. One or more of the following purposes for processing of data may apply depending on the specific situation:

Nurminen will only process personal data for the purposes for which it was collected (for example for order management, marketing our services or for recruitment purposes) as described in this Privacy Policy. Personal data will only be available to employees holding a position that requires them to process the personal data to perform their work.

The legal basis for processing personal data is Nurminen’s legitimate interest to process the personal data of its own customers’ and other partners’ contact persons for the management and maintenance of contractual relations and for marketing.

How is the data processed and retained?

We have a legal obligation to ensure that your information is kept accurate and up to date. We invite you to assist us to comply with this obligation by ensuring that you inform us of any changes to your information.

We retain your personal data only for as long as it is necessary for that particular purpose or for fulfilling our statutory obligation. We comply with statutory retention times and our internal retention time policies in our operations.

Nurminen has taken appropriate technical and organizational measures to protect your privacy and to ensure that only authorized persons are given access to the personal data. Nurminen also has internal policies in place for minimizing the risks related to processing of personal data.

Is data transferred to third parties?

Your personal data may be transferred to third parties authorized by Nurminen which process personal data (data processors) for the provision of services to Nurminen and for the purposes described in this Privacy Policy. Only personal data that is necessary to provide services to Nurminen will be transferred to third parties. Nurminen also requires that all such third parties follow Nurminen’s instructions (including written data processor agreements) and Data Protection Law, and must implement appropriate technical and organizational measures for the protection of your personal data.

We may also disclose and process your personal data within the limits set by the Data Protection Law for protecting our legitimate interests (for example in civil and criminal legal proceedings).

Your personal data is not transferred to or disclosed outside the EU/EEA.

What are your rights?

We have a legal obligation to execute your rights and choices listed below:

If you have any complaints about how we process your personal data, or would like further information, please contact us at

Complaint to Data Protection Authority

You also have a right to file a complaint with a national supervisory authority if you feel that Nurminen has violated Data Protection Law when processing personal data. The contact information of the Data Protection Ombudsman:

Office of the Data Protection Ombudsman
P.O. Box 800
Tel.: +358 29 56 66700 (exchange)

Contact us

Nurminen is the controller of your personal data for the purposes described above. You can find our contact information from