Effective as of: August 19, 2026
This Privacy Policy explains how WP2 OY (hereinafter “Rusty,” “we,” or “the company”) processes personal data when you use the website rusty.ee (hereinafter “the website”).
Our goal is to protect the privacy of our website visitors and customers and to process personal data in accordance with the European Union’s General Data Protection Regulation (GDPR), the Estonian Personal Data Protection Act, and other applicable laws and regulations.
1. Data Controller
The controller of personal data is:
WP2 OY
Registration Number: 3346362-6
Address: Kaisaniemenkatu 3 C, Helsinki 00100
Email: info@rusty.fi
Phone: +372 58 527 204
For questions regarding privacy, please contact us at the email address listed above.
2. What personal information do we collect?
Depending on how you use the website, we may process the following data:
first and last name;
email address;
phone number;
company name and job title;
content of an inquiry or message;
information necessary for processing an order, price quote, or other service;
technical data related to the use of the website, such as IP address, browser type, and device information;
data collected through cookies and similar technologies;
other information that the user voluntarily provides to us.
We do not collect more personal data than is necessary to fulfill a specific purpose.
3. How and for what purposes do we use personal data?
We process personal data primarily for the following purposes:
Responding to Inquiries
If you send us an inquiry via the contact form, email, or another channel, we will use the information you provide to contact you and respond to your inquiry.
Preparing Price Quotes
In the case of a price inquiry or a custom order, we use the information provided to prepare and send a suitable quote.
Services and Products Offered
Personal data may be processed for the purposes of establishing and managing customer relationships, fulfilling orders, providing products and services, and offering customer support.
Ensuring the Website’s Operational Readiness
Technical data may be processed to improve the security, functionality, and user experience of the website.
Analytics and Marketing
If you consent, we may use cookies and similar technologies to analyze website usage, display advertisements, and measure the effectiveness of our marketing activities.
4. Legal Basis for the Processing of Personal Data
We process personal data, depending on the circumstances, on one or more of the following legal bases:
performance of a contract or taking steps prior to entering into a contract—for example, when responding to a customer inquiry or preparing a price quote;
compliance with a legal obligation—for example, fulfilling obligations related to accounting and tax reporting;
legitimate interest—for example, to ensure website security, prevent fraud, or develop our services;
consent—for example, for the use of certain cookies or for direct marketing, if consent is required.
You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing that took place before the withdrawal.
5. Cookies
This website may use cookies and similar technologies.
Cookies are small text files that are stored on a user’s device and help a website function, analyze usage, and improve the user experience.
We use the following categories of cookies as needed:
Essential cookies – for the website to function properly;
Preference cookies – to remember user choices and settings;
Analytical cookies – to collect statistics on website usage;
marketing cookies – to measure and personalize ads and marketing activities.
We use non-essential cookies only if we have obtained the appropriate consent.
Users can change their cookie preferences through the cookie settings displayed on the website.
6. Third Parties
To operate the website or provide services, we may use third-party service providers, such as:
Web hosting and server service providers;
IT and web development service providers;
analytics and statistics services;
advertising and marketing platforms;
email and communication service providers;
payment and accounting service providers;
other service providers whose involvement is necessary for the organization of our operations.
Such service providers may process personal data only in accordance with our instructions and within the limits of applicable data protection requirements.
When we use service providers that involve the transfer of personal data outside the European Economic Area, we implement safeguards in accordance with the GDPR.
7. How long do we retain personal data?
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with our legal obligations.
For example:
We retain customer and contractual data in accordance with our contractual and legal obligations;
We retain inquiry data for as long as necessary to respond to the inquiry and manage a potential customer relationship;
We retain accounting-related data for the period specified by law;
We retain data related to marketing consent until the consent is withdrawn or until retention is no longer necessary.
After the retention period ends, the data is deleted or anonymized.
8. Your Rights
Under the GDPR, you have the right to:
find out what personal data we process about you;
request the correction of your personal data;
request the erasure of your personal data;
request the restriction of the processing of your personal data;
object to the processing of your personal data;
receive your personal data in a structured and machine-readable format, if the right to data portability applies;
withdraw your consent;
lodge a complaint with the data protection supervisory authority.
To exercise your rights, please contact us at [email].
In certain cases, we may have the right or obligation to refuse your request, for example, if retaining the data is necessary to comply with a legal obligation.
9. Direct Marketing
If you have given your consent or if we have another legal basis, we may send you information about our products, services, offers, and news.
You always have the right to opt out of marketing communications. To opt out, you can use the opt-out link included in the marketing communication or contact us.
10. Data Security
We implement appropriate technical and organizational measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
However, absolute security cannot be guaranteed for data transmitted over the Internet.
11. Minors
This website and our services are not intended for minors. We do not knowingly collect personal information from minors without the necessary legal basis to do so.
If we learn that we have collected a minor’s personal data without a valid basis, we will take reasonable measures to delete that data.
12. Changes to the Privacy Policy
We may amend these privacy terms from time to time to reflect changes in our operations, website, the technologies we use, or applicable laws.
The new version will be published on the website, and a new effective date will be added to it.
13. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:
WP2 OY
Registration Number: 3346362-6
Address: Kaisaniemenkatu 3 C, Helsinki 00100
Email: info@rusty.fi
Phone: +372 58 527 204
Last updated: August 19, 2026