Privacy Policy

‍Last updated: September 2026

1. Data Controller

Data Controller: Maksymilian Ireneusz Woźnica, trading under the brand WOLFGREX.

· NIF: X6(…)3T [PENDINDG]

· Professional address: wolfgrex@wolfgrex.com

2. Scope

This Privacy Policy explains how WOLFGREX processes personal data collected through wolfgrex.com and related website functionality. It is primarily based on the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Spanish data-protection legislation. Additional rules may apply where WOLFGREX specifically targets users in other jurisdictions.

3. Data We May Collect

· Identification and contact details, such as name, email address, telephone number and other information voluntarily provided through forms.

· Order and transaction information where online purchasing is available.

· Delivery information necessary to fulfil an order.

· Information supplied for customer support, complaints, returns or withdrawal requests.

· Newsletter subscription information and communication preferences.

· Professional information voluntarily supplied for collaboration opportunities, including CVs, portfolios and professional profiles.

· Technical information generated through use of the website, subject to the applicable cookie and analytics settings.

4. Purposes and Legal Bases

Online purchases and fulfilment

To process orders, arrange payment, delivery, customer support, returns and related administration. The principal legal bases are performance of a contract and compliance with legal obligations, as applicable.

Payments

Payment information may be processed by the payment provider selected for the website. WOLFGREX will not request or retain payment-card information beyond what is necessary and permitted for the relevant transaction and service.

Accounting and legal obligations

Certain information may be retained to comply with tax, accounting, consumer-protection and other legal obligations.

Contact requests

Information submitted through contact forms may be processed to respond to the request, provide information or take steps requested by the individual. Depending on the circumstances, the legal basis may be consent, pre-contractual measures or legitimate interest.

Newsletter

Newsletter communications are sent only where the user has provided the required consent or another lawful basis applies. Newsletter consent is kept separate from consent or acknowledgement relating to other website functions.

Professional collaborations

Information submitted for professional collaboration opportunities may be processed to evaluate and respond to the enquiry and, where appropriate, maintain relevant professional records.

5. CVs and Portfolios

If you voluntarily submit a CV, portfolio or professional profile, WOLFGREX will process that information for the purpose for which it was submitted. Applicants should avoid including unnecessary sensitive or unrelated personal information.

6. Service Providers

WOLFGREX may use external service providers to operate the website and fulfil requested services, including website hosting, professional email, payment processing, shipping and logistics, analytics and newsletter delivery where applicable. Providers receive only the information necessary for their relevant function and are subject to appropriate contractual and legal safeguards.

Current technology providers include Squarespace for website services and Google Workspace for professional email and related productivity services. Specific payment, newsletter and other providers will be identified or documented as they are activated.

7. International Transfers

Some service providers may process personal data outside the European Economic Area. Where this occurs, WOLFGREX will use an appropriate transfer mechanism required by applicable data-protection law, such as an adequacy decision, standard contractual clauses or another lawful safeguard.

8. Retention

Personal data is retained only for as long as necessary for the relevant purpose and, where applicable, for the periods required to comply with legal, tax, accounting, contractual or dispute-related obligations. Data processed on the basis of consent will generally be retained until consent is withdrawn, unless another lawful basis or legal obligation justifies continued retention.

9. Your Rights

Subject to applicable law, individuals may have rights to access, rectify, erase, restrict processing, object to processing, data portability and withdraw consent where processing is based on consent.

Requests may be sent to legal@wolfgrex.com. Individuals may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

10. Security

WOLFGREX applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No online system can be guaranteed to be completely secure.

11. Children

The website is not addressed to individuals under the age of 14. Under Spanish data-protection law, the processing of personal data of a child below this age requires the consent of a parent or legal guardian. WOLFGREX does not knowingly collect personal data from children under 14 and, if it becomes aware that it has done so, will take reasonable steps to delete such data. Where a user accesses the website from a jurisdiction with a different applicable age threshold, that threshold will apply instead.

12. Cookies and Analytics

The website uses necessary technologies required for operation. Non-essential analytics, preference or marketing technologies, where used, are subject to the applicable consent mechanism. Squarespace Analytics is currently used. Google Analytics may be introduced in the future and this policy and the cookie settings will be updated as necessary.

13. Changes

WOLFGREX may update this Privacy Policy when its processing activities, technology or legal requirements change. The latest version will be published on the website.