Privacy Policy
GUGGUU CUSTOMER DATA PRIVACY POLICY
Modified 13.10.2025
In this policy, we explain the purposes for which we process personal data and what rights you have regarding the processing of your personal data. This privacy policy covers all information collected through our website or related services, as well as information collected when you contact our customer service by email or through our website.
By continuing to use the Website and our services, you accept this Privacy Policy.
-
Data controller
Gugguu Oy ("Gugguu" or "we")
Business ID: 2508855-5
Pikkaraisentie 8, 90230 Oulu
customer@gugguu.com
www.gugguu.com
Tel: +358444101736
2. Contact information for matters concerning the register
Gugguu Customer Service
customer@gugguu.com
Phone: +358444101736
Address: Muuraintie 5A1, 33950 Pirkkala
3. Purpose and legal basis of personal data processing
The processing of personal data is based on the data controller's legitimate interest (described in more detail in section 4), contractual relationship, and/or compliance with the data controller's legal obligation. The processing of personal data may also be based on the data subject's consent, which then forms the legal basis for processing as applicable. The data controller has a legitimate interest in conducting proper, justified, and lawful sales and marketing activities, including related customer profiling.
4. Description of collected data
Gugguu processes personal data within the limits permitted by law for managing and developing customer relationships. Primarily, we collect personal data in our online store.
Personal data processed in the register may be used for the following purposes:
Orders
We need personal data for processing orders for delivery and for customer communication related to orders (for example, order and delivery confirmation). Additionally, the data may be used for invoicing and collection measures as well as handling possible complaints. We do not store any payment information other than the payment method and prices for possible refunds.
Offering and marketing of products
We may process personal and shopping cart data as well as purchase history for customer profiling to target offers, benefits, marketing actions, and customer communications to be relevant to the customer. Personal data is also processed when sending newsletters/SMS, participating in competitions and lotteries, or other marketing activities.
Customer account
If you have created a customer account on our website, we use your personal data to manage the account so that you can view your order history, create wish lists, and save your shopping cart. Address information is also saved for future orders; address information can be changed or deleted either by the customer or by Guggu.
Loyalty program
If you have created when you have a customer account on our website, you are automatically also a loyalty program member. We use your personal data to manage the account so that you can collect marshmallows, track your order history and reward history as well as manage your personal settings, such as marketing consent. We also use your personal data to identify you as a loyalty customer in our stores and to track your purchases and earned loyalty benefits.
Product and service development and anonymized reporting
We process personal data to improve our current products and services and to develop new ones. In this context, we may link the feedback provided and messages left to our customer service to the user account.
We use responses from consumer research and consumer surveys to analyze our customers' preferences, expectations, and opinions about our products, websites, and services.
We use anonymized data for reporting purposes. Anonymized data cannot be used to identify individuals; instead, we use this data to analyze the achievement of commercial objectives. Such data includes, for example, the total number of visitors to our website and the duration of visits.
Customer service
Our customer service processes your personal data when you contact it through any channel. We may combine the data collected by customer service with other personal data, such as purchase history. This allows us to provide the most personalized and efficient service possible.
Detection and prevention of illegal activity
In some cases, we may be required to disclose your information, including personal data, under law or regulations, such as in connection with legal proceedings. We may also disclose your information based on a subpoena, court order, or other legal process, or during a police investigation or at the request of an authority.
5. Automatically collected personal data
When you place an order or visit our website, we automatically collect information about your visit. Some of this information may be classified as personal data. Such information includes:
- browser used, operating system, device model, IP address, connection time and connection duration
- logged-in customer's user account identifiers and registration date
- location data (including Wi-Fi access point information)
- websites through which gugguu.com was accessed
- data related to online behavior on our website (for example, clicks and navigation on the page, used search terms)
- cookies and other identifiers
- language
- marketing information: benefits and campaigns and their usage
- purchase history at the individual product level and shopping cart data
- additionally, data of customers subscribing to electronic newsletters/SMS are collected for managing newsletter subscriptions and other matters related to customer communications.
- other information collected based on your consent
6. Directly collected personal data
Directly collected data refers to information you provide to us yourself as a customer, for example when placing an order or contacting our customer service. Directly collected data includes:
- Purchaser's contact details (name, email address, phone number, postal address, and possibly other voluntarily provided personal data such as company or date of birth)
- If the recipient of the order is different from the purchaser, the recipient's name and postal address
- Information on marketing consents and prohibitions
- Message history with our customer service via chat, Facebook, website contact form, or email
- Contact details provided when participating in various raffles and competitions
7. Disclosure of personal data to others
Your personal data may be disclosed to Gugguu's partners within the limits permitted by law, to the extent necessary for providing our services. Third parties include data processors and only those third parties approved by Gugguu, through whom we offer our services and further improve the customer experience. When using subcontractors or third parties, we ensure that they process personal data in accordance with data protection regulations.
To deliver an excellent customer experience and provide our services, we may need to transfer personal data to a third-party service provider's server or resources located outside the EU or its economic area. In such cases, we ensure that appropriate contractual measures are applied to the transfer of personal data (for example, commitment to the European Commission's standard contractual clauses), that the transfer has a proper legal basis, and that the processing meets the confidentiality requirements imposed by law.
Third parties to whom it is necessary for us to disclose information for order processing are listed below. Additionally, third parties we use for marketing, website development, and analysis are listed below. This privacy policy covers the use of your data solely by Guggu; please also review the privacy statements of our partners.
- Shipping companies: Posti, Matkahuolto, GLS, DHL and EMS.
- Payment service providers: Checkout Finland, PayPal, Klarna
- E-commerce system and order processing: Shopify, Storia
- Customer service system and chat service provider: Gorgias
- Marketing and newsletter: Klaviyo
- SMS Marketing and loyalty program: Yotpo
- Others: Facebook, Instagram, Google, Adtraction,
8. Cookies
A cookie is a short piece of text or a file that a website sends to your browser. It helps the site remember your visit details, such as the language you selected and other settings. Cookies make your next visit easier and make the site smoother for you. Cookies play an important role regarding the site's content.
Gugguu uses Shopify as the technical platform for its online store, which utilizes cookies. Cookies are used, for example, to count page visitors, enhance, and develop the site's functionality.
You can read more about the use of cookies on the Shopify e-commerce platform here.
9. Personal data on social media
Gugguu's social media sites such as Facebook, Instagram, Pinterest, Twitter, and YouTube are public, and the registers formed on these sites contain information that the registered user has made public themselves, such as name, reviews, page likes and shares, and comments. We are in no way responsible for the personal data of users registered on social media sites or for their protection.
When you interact with us via social media, we may collect, store, and retain automatically collected data about your use of these channels. For example, if you press the Like button on our social media pages or tag your friend in our post, we record this information. This information is most likely non-identifiable data, but there may be data linked to a person depending on your browser settings on the respective channel.
The content you publish on social media is data you have made public yourself, which depending on the content can be linked to you. We collect, store, and use this content and other information you have published on our social media channels. We may also use information you have allowed the social media channel to share with us or that is shareable according to your user settings on these sites.
10. Retention & retention period of personal data
The register is stored electronically and protected appropriately from outsiders with firewalls, passwords, and other technically accepted security measures in the field of information security. Only identified employees of the data controller and companies acting on its behalf or account may have access to the personal data contained in the register with the access rights granted by the data controller. All employees who have access to personal data are bound by confidentiality.
Gugguu retains your personal data as long as the retention of personal data is necessary to fulfill the purposes specified in section 4 of the privacy policy. Gugguu may retain some personal data longer than mentioned above to the extent that retention is required by law, for example, to fulfill obligations related to accounting or consumer trade and to demonstrate their proper fulfillment.
11. Rights of the Website User Regarding Personal Data
The customer has the right to inspect what information about them is stored in the register. The inspection request must be sent in writing to the data controller using the contact details provided in section 2 of the privacy policy. The inspection request can also be made in person at the address mentioned above. When making the inspection request in person, the customer must have an identity document with them. Gugguu responds to information inspection requests in writing.
If there are errors in the customer's data, the customer can submit a correction request to the data controller to rectify the error. The customer has the right at any time to prohibit the use of their data for direct marketing or market and opinion research by notifying the data controller. Prohibiting direct marketing is also possible from the customer's own account or by following the removal instructions in the marketing message.
The customer has the right to delete personal data processed by Gugguu at any time, except in the following situations: the customer has an open case with customer service; the customer has an open order that has not yet been fully delivered; the customer is suspected of misuse of our services or has misused our services within the last four years; the customer has an unpaid debt to Gugguu regardless of the payment method; if the customer has made purchases in the online store, we must retain the personal data related to the purchase based on accounting regulations.
The customer has the right to file a complaint with the competent supervisory authority if they believe that Gugguu has not complied with applicable data protection regulations in its operations. The competent supervisory authority for matters related to the processing of the customer's personal data is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).
12. Children's Personal Data
Through the online store, we only accept orders from persons who are at least 18 years old, so we do not knowingly collect children's personal data through our website.
13. Changes to the Privacy Policy
Gugguu reserves the right to change this privacy policy. The latest version of the privacy policy is always available on this page with the publication date. If the changes in the updated policy are significant, we will notify them in a visible manner at the beginning of the policy and on the Gugguu.com homepage.