top of page

​

Pupelo Rights & Brands Oy Ltd. Privacy Notice

​

Effective from 1 July 2025

​

1. Introduction

Pupelo Rights & Brands Oy Ltd (“Pupelo”, “we” or “the company”) is committed to protecting the privacy of our users and customers – both young adventurers and their guardians.

This Privacy Notice explains:

​

  • what personal data we collect through our website (pupelo.fi), webshop, social media channels (YouTube, Instagram, TikTok, Facebook), and possible mobile apps;

  • how and why we process this data;

  • what rights and choices you have; and

  • how you can contact us.

 

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

​

2. Data Controller

The data controller is Pupelo Rights & Brands Oy Ltd, Business ID 3286429-2.
Our registered office is at Mannerheimintie 42, 00260 Helsinki, Finland.
For all privacy-related inquiries, you can contact us at: toimisto@aagfinland.com

 

3. What personal data do we collect?

We may collect the following types of personal data:

  • Contact information, such as your name, email address, delivery address, and phone number.

  • Order details, including the products you purchase, your chosen payment method, and delivery preferences.

  • Usage data, such as your IP address, browser type, pages viewed, and interactions with our site.

  • Social media data, such as your public username, profile picture, likes, and comments when interacting with us on platforms like YouTube or Instagram.

  • Children’s data, such as a first name, nickname, drawing, or audio/video clip, submitted to contests – always with verified parental consent.

  • Communication data, such as messages, feedback, and support inquiries sent to us.

 

4. Why do we process your data, and what is the legal basis?

We process personal data for the following purposes:

  • To process and deliver webshop orders, based on a contractual relationship.

  • To handle customer service and feedback, based on our legitimate interest.

  • To send newsletters and marketing communications, based on your consent.

  • To improve our site and services using analytics, based on our legitimate interest.

  • To run contests and campaigns, based on your consent or a contract.

  • To comply with legal obligations such as accounting and tax requirements.

  • To manage children’s content submissions (e.g. fan art), based on verified parental consent.

 

5. Cookies and similar technologies

We use cookies to enhance functionality, personalise your experience, and measure campaign effectiveness.
You can accept or reject non-essential cookies via our cookie banner. For more details, visit: pupelo.fi/cookie-policy.

 

6. Sharing of personal data

We only share personal data when necessary and with trusted parties, including:

  • Service providers who help us with operations like payments, deliveries, or email services – always under strict contracts.

  • Authorities, when legally required.

  • Strategic partners, such as animation studios – only with your explicit consent.

 

We do not sell personal data to third parties.

 

7. International data transfers

If any of our service providers are located outside the EU or EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses, to protect your data.

 

8. How we protect your data

We use a range of measures to keep your data secure, including:

  • Encrypted data transmission (HTTPS)

  • Access restrictions for our staff

  • Regular backups and security audits

  • Binding contracts with our service providers

 

9. Children’s Privacy

Our stories are designed for children, but webshop purchases, newsletter sign-ups and analytics tools are intended for use by parents or guardians.

We only collect a child’s personal data – such as name, drawing, or video – with explicit parental consent and only for the stated purpose (e.g. to publish a contest entry).

Parents can request the deletion of their child’s data at any time by contacting us at privacy@pupelo.fi.

 

10. Data retention

We retain personal data only for as long as necessary for the stated purposes or as required by law (e.g. bookkeeping laws require retention for 6–10 years).

You can withdraw your marketing consent at any time, and we will delete your data within a reasonable period (usually within 30 days).

 

11. Your rights

You have the following rights regarding your personal data:

  • The right to access the data we hold about you.

  • The right to correct inaccurate or outdated data.

  • The right to request the deletion of your data (“right to be forgotten”).

  • The right to restrict the processing of your data.

  • The right to data portability.

  • The right to object to processing, for example, in connection with marketing.

  • The right to withdraw your consent at any time.

 

To exercise your rights, email us at privacy@pupelo.fi.
If you are unsatisfied with our response, you have the right to file a complaint with the Finnish Data Protection Authority.

 

12. Updates to this Privacy Notice

We may update this Privacy Notice from time to time.
Significant changes will be communicated via our website or, if necessary, by email.

This version was published on 1 July 2025. Previous versions are archived.

 

13. Contact

Pupelo Rights & Brands Oy Ltd
Mannerheimintie 42
00260 Helsinki, Finland
toimisto@aagfinland.com

 

bottom of page