Privacy Policy

‍Last updated: October 2026

1. Data Controller

Data Controller: Maksymilian Ireneusz Woźnica, trading under the brand WOLFGREX.

2. Scope

This Privacy Policy explains how WOLFGREX processes personal data collected through wolfgrex.com and related website functionality. It is based on the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Spanish data-protection legislation, including Organic Law 3/2018 (LOPDGDD). Additional rules may apply where WOLFGREX specifically targets users in other jurisdictions.

3. Data We May Collect

  • Identification and contact details, such as name, email address, telephone number and other information voluntarily provided through forms.

  • Order and transaction information where online purchasing is available.

  • Delivery information necessary to fulfil an order.

  • Information supplied for customer support, complaints, returns or withdrawal requests.

  • Newsletter subscription information and communication preferences.

  • Professional information voluntarily supplied for collaboration opportunities, including CVs, portfolios and professional profiles.

  • Technical information generated through use of the website, subject to the applicable cookie and analytics settings.

Fields marked as required in a form are necessary to handle your request. If they are not provided, WOLFGREX may be unable to respond or provide the requested service.

4. Purposes and Legal Bases

Online purchases and fulfilment
To process orders, arrange payment, delivery, customer support, returns and related administration. The principal legal bases are performance of a contract and compliance with legal obligations, as applicable.

Payments
Payment information may be processed by the payment provider selected for the website. WOLFGREX will not request or retain payment-card information beyond what is necessary and permitted for the relevant transaction and service.

Accounting and legal obligations
Certain information may be retained to comply with tax, accounting, consumer-protection and other legal obligations.

Contact requests
Information submitted through contact forms may be processed to respond to the request, provide information or take steps requested by the individual. Depending on the circumstances, the legal basis may be consent, pre-contractual measures or legitimate interest.

Newsletter and launch updates
The subscription form collects your email address and, optionally, your first name and location, to send you news, progress updates, early access to WOLFGREX launches and promotional offers. Your name is used to personalise communications and your location to tailor content and plan launch markets. The legal basis is your consent. You can withdraw it at any time by using the unsubscribe link included in every email or by writing to legal@wolfgrex.com. Newsletter consent is kept separate from consent or acknowledgement relating to other website functions.

Professional collaborations
Information submitted for professional collaboration opportunities may be processed to evaluate and respond to the enquiry and, where appropriate, maintain relevant professional records. The legal basis is the application of pre-contractual measures at your request or legitimate interest.

5. CVs and Portfolios
If you voluntarily submit a CV, portfolio or professional profile, WOLFGREX will process that information for the purpose for which it was submitted. Please avoid including unnecessary sensitive or unrelated personal information.

6. Service Providers

WOLFGREX uses external service providers to operate the website and deliver the services you request, including website hosting, forms, newsletter delivery, professional email and, where applicable, payment processing, shipping and logistics, and analytics. Providers receive only the information necessary for their specific function and are subject to appropriate contractual and legal safeguards. Where a provider processes data outside the European Economic Area, the safeguards described in section 7 apply.

Current technology providers are Squarespace, for website services, forms and newsletter delivery, and Google Workspace, for professional email and related productivity services. Payment, shipping and other providers will be identified in this policy as they are activated.

7. International Transfers
Some service providers may process personal data outside the European Economic Area. Where this occurs, WOLFGREX will rely on an appropriate transfer mechanism required by applicable data-protection law, such as an adequacy decision (including the EU–U.S. Data Privacy Framework, where the provider is certified), standard contractual clauses or another lawful safeguard.

8. Retention
Personal data is retained only for as long as necessary for the relevant purpose, and afterwards for the periods required by law:

  • Newsletter: until you unsubscribe or withdraw consent.

  • Contact requests: for the time needed to handle the request and up to 12 months afterwards, unless a contractual relationship follows.

  • Collaboration enquiries, CVs and portfolios: up to 24 months, unless you ask for earlier deletion.

  • Orders and invoices: for the periods required by tax, accounting and consumer-protection legislation (generally up to 6 years for accounting records).

Once these periods end, data is deleted or kept blocked only for the handling of possible legal claims, as required by law.

9. Your Rights
Subject to applicable law, you have the right to access, rectify, erase, restrict processing, object to processing, data portability and to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to legal@wolfgrex.com. WOLFGREX will respond within one month of receipt, which may be extended where permitted by law, and may request information necessary to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or another competent supervisory authority.

10. Automated Decisions
WOLFGREX does not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.

11. Security
WOLFGREX applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No online system can be guaranteed to be completely secure.

12. Children
The website is not addressed to individuals under the age of 14. Under Spanish data-protection law, the processing of personal data of a child below this age requires the consent of a parent or legal guardian. WOLFGREX does not knowingly collect personal data from children under 14 and, if it becomes aware that it has done so, will take reasonable steps to delete such data. Where a user accesses the website from a jurisdiction with a different applicable age threshold, that threshold will apply instead.

13. Cookies and Analytics
The website uses necessary technologies required for its operation. Non-essential analytics, preference or marketing technologies, where used, are subject to your consent, which you can review and change at any time through "Cookie Preferences" at the bottom of every page. Squarespace Analytics is currently used. If Google Analytics or other tools are introduced, this policy and the cookie settings will be updated accordingly.

14. Changes
WOLFGREX may update this Privacy Policy when its processing activities, technology or legal requirements change. The latest version will always be published on this page with its update date.