Privacy policy

CUSTOMER REGISTER PRIVACY NOTICE

Pura Nordic is committed to respecting and protecting the privacy of its Customers and to processing personal data in accordance with applicable data protection legislation and good data protection practices. The purpose of this Privacy Notice is to inform the Customer how Pura Nordic collects, uses, and protects personal data, and what rights and choices the Customer has regarding the processing of their personal data.

Pura Nordic operates the online store www.puranordic.eu. "Service" refers to any service provided by Pura Nordic, such as the online store www.puranordic.eu, the newsletter, or any other service offered by Pura Nordic. "Customer" refers to a person using the Pura Nordic Service.

Pura Nordic complies with applicable Finnish legislation and the European Union General Data Protection Regulation (GDPR) when processing personal data. This Privacy Notice applies when the Customer uses Pura Nordic's Services. If the Customer does not accept the terms of this Privacy Notice, the Customer may not use the Services, as the provision of the Service requires the processing of personal data.

Data Controller and Contact Details

Register name: Greenme Nordic Ltd Oy (trading as: Pura Nordic)
Business ID: 3295111-8
VAT number: FI32951118
Address: Killivuorenkatu 25 G, 20900 Turku, Finland
Contact for personal data and privacy matters: info@puranordic.eu

 

THIRD-PARTY SERVICES

Pura Nordic uses third-party services, such as Google services, to improve the functioning of its website, analytics, and advertising. These services allow us to provide our Customers with a better user experience and more tailored content.
For more information on Google's privacy practices and terms of use, please visit: Google Privacy & Terms.

 

PURPOSE OF PROCESSING PERSONAL DATA

Conducting retail business requires the processing of personal data. The customer register includes, for example, the processing of personal data needed for an online store customer account, the processing, receipt, and delivery of orders, and the preparation of invoices. Pura Nordic only processes data that is necessary and appropriate for its business operations.

The purposes for which personal data is used include:

• Managing, maintaining, and developing the customer relationship, and customer communication;
• Providing, offering, developing, and ensuring the quality of the Service;
• Developing the business;
• Sales and marketing, direct marketing, and marketing targeting;
• Market research, customer satisfaction surveys, and product reviews;
• Monitoring and analyzing the use of the Service in order to better understand customer needs and to provide personalized Services;
• Profiling customers for the purposes of marketing targeting and developing the Service;
• Fulfilling obligations based on law and the requirements and instructions of authorities;
• Ensuring the security of the Service;
• Preventing and detecting misuse and fraud;
• Resolving faults and disruptions;
• Risk management and training purposes.

 

SOURCES OF PERSONAL DATA AND UPDATING

Pura Nordic primarily collects personal data directly from the Customer, which the Customer provides when registering as a user of the Service or when using the Service — for example, when purchasing goods from the online store www.puranordic.eu by entering contact details in the shopping cart, by subscribing to the newsletter, or by otherwise contacting Pura Nordic.

Pura Nordic may also receive data from its business partners, such as freight or financing companies, and, within the limits permitted by law, from other service providers, such as credit reference agencies, or from registers maintained by authorities, such as the Finnish Digital and Population Data Services Agency (DVV).

 

CATEGORIES OF PERSONAL DATA PROCESSED

Pura Nordic processes the following categories of personal data:

• Basic information: name, contact details (postal address, email address, phone number), user IDs;
• Payment and payment method information;
• Consents and prohibitions relating to the processing of personal data;
• Areas of interest;
• Customer event data: events and tasks related to managing the customer relationship;
• Customer communications: messages and records in which the Customer is a party;
• Other information based on consent, as specified in more detail at the time consent is requested;
• Service usage data: purchase history, billing, credit, and payment information, shopping cart data, product warranty information, delivery information (such as delivery method and delivery address), and product reviews;
• Behavioral data: monitoring of the Customer's online behavior and use of the Service through cookies and similar technologies; the data collected may include the browsing channel, browser, device, device or cookie identifier, IP address, session identifier, session time and duration, and log data.

 

LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is processed on the basis of the agreement between Pura Nordic and the Customer, the customer relationship, the use of the Service, Pura Nordic's legitimate interest, the consent given by the Customer, or the law.

In all of the above situations, Pura Nordic processes personal and traffic data only to the extent required by the purpose of the processing, and always takes into account the protection of its customers' privacy in the processing of personal data.

 

DISCLOSURE AND TRANSFER OF PERSONAL DATA

Necessary personal data is disclosed to Pura Nordic's business partners for delivery, sales, and marketing purposes, or to a financing company in connection with a payment decision. Pura Nordic uses partner services for analysis and personalization. Pura Nordic may share Service usage data with partners for the purpose of making targeted offers.

Pura Nordic uses subcontractors and service providers in connection with its IT operations, order processing, deliveries, and customer service, who process personal data on the company's behalf. Such services include, for example:

• The Shopify e-commerce platform, which processes the online store's customer and order data;
• The Revoq service, which processes customer data (such as name, email address, and order number) in connection with managing orders and customer service;
• Google services (such as Google Analytics and Google Ads), used for analyzing the use of the Service and for marketing targeting;
• Meta services (Facebook and Instagram advertising), used for marketing targeting and tracking advertising performance;
• The Omnisend service, used for email and SMS marketing (such as newsletters and order confirmations), which processes the Customer's contact details (such as name, email address, and phone number) for this purpose;
• Posti, PostNord, and Matkahuolto, which process the contact and delivery information needed for deliveries (such as name, address, and phone number) in order to deliver orders to the Customer.

 

The use of personal data is limited to the specific task agreed in the contract. Pura Nordic has concluded Data Processing Agreements (DPAs) in accordance with the GDPR with its subcontractors to the extent required by applicable law, and ensures that personal data is processed in accordance with the law and this Privacy Notice.

Pura Nordic only uses reliable parties as business partners and subcontractors. The business partners or subcontractors that process personal data are mainly located within the EU or the EEA. In some cases, however, partners may be located outside the EU or the EEA, in which case personal data is transferred to third countries. Pura Nordic ensures appropriate safeguards in connection with such transfers and uses transfer mechanisms approved by the European Commission in its agreements, such as Standard Contractual Clauses (SCCs).

Personal data may also be disclosed to a third party with whom the Customer has given consent to interact, for example in connection with a specific campaign. Personal data may also be disclosed in connection with legal proceedings or at the request of an authority, on the basis of applicable law or a decision by an authority.

Personal data may be disclosed to a third party if Pura Nordic is involved in a business transaction (such as a sale of business, merger, or demerger) in which the business containing the personal data is transferred to a new entity.

 

RETENTION PERIODS FOR PERSONAL DATA

Pura Nordic retains the Customer's personal data for as long as is necessary to fulfil the purposes described in this Privacy Notice. Obligations arising from accounting and consumer protection legislation require that certain personal data be retained even after the customer relationship has ended. Pura Nordic takes reasonable measures to ensure that personal data that is incompatible with, outdated for, or inaccurate in relation to the purpose of the processing is not retained.

 

PROTECTION OF PERSONAL DATA AND DATA SECURITY

The secure storage and protection of personal data is extremely important to Pura Nordic. Particular attention is paid to protecting personal data. Pura Nordic complies with applicable legislation and regulations in the processing and design of personal data handling.

Pura Nordic ensures that the personal data collected is protected against unauthorized processing, destruction, loss, damage, and unauthorized access. The company takes into account the risks related to the processing of personal data for privacy and for the business, as well as the technical possibilities available and the various threat factors.

Access to the data in the register is restricted to those who need it. Personal data is processed by Pura Nordic's own trained employees, whose job duties require it. Employees are obligated to process personal data confidentially, securely, and in accordance with applicable legislation and the instructions given.

The data security of Pura Nordic's Service, online store, servers, and information systems is of a high standard, and they are protected against data breaches and denial-of-service attacks. The company takes care of the security of its personnel, internal processes, and premises in order to protect personal data, and seeks to prevent and detect any unauthorized access to the data.

 

CUSTOMER RIGHTS AND CHOICES

A Customer registered with the Service has the opportunity to influence the use of their personal data and the marketing directed at them. The Customer can make choices regarding marketing on the Service's own pages. The Service is continuously developed, so its functions may be changed, added, or removed.

A Customer whose personal data has been recorded is referred to as a data subject. As a data subject, the Customer has the following rights:

• The right to obtain confirmation as to whether or not Pura Nordic is processing personal data concerning them;
• The right to access their data and review it, and the right to obtain a copy of the personal data concerning them;
• The right to request rectification or erasure of their data (the right to be forgotten);
• The right to demand restriction of processing or to object to it;
• The right to receive the personal data they have provided in a structured, commonly used, and machine-readable format, and the right to transmit that data to another data controller (the right to data portability), to the extent that the processing is based on consent or a contract and is carried out by automated means;
• The right to withdraw consent at any time, where the processing is based on a specific consent given by the Customer.

 

If the Customer believes that there are deficiencies in the processing of personal data, or suspects that Pura Nordic has acted unlawfully, the Customer has the right to lodge a complaint at info@puranordic.eu. Pura Nordic is committed to conducting its business responsibly and to correcting any deficiencies. The Customer also has the right to lodge a complaint with the competent supervisory authority (in Finland, the Office of the Data Protection Ombudsman).

 

CHANGES TO THE PRIVACY NOTICE

Due to the development and changes in the Service, as well as changes in legislation, this Privacy Notice may change. For the reasons mentioned above, the Privacy Notice is updated as necessary.

The latest version of the Privacy Notice is always available on the Service, and Pura Nordic encourages Customers to review it regularly.

This Privacy Notice was last updated on 18 June 2026.