Privacy Policy

1. Who we are

The controller of personal data processed through WULFLUND.com is:

DRAKKARIA s.r.o.
Neklanova 145/14
128 00 Prague 2
Czech Republic

Company ID: 03602524
VAT ID: CZ03602524

The company is registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 233356.

E-mail: shop@wulflund.com
Phone: +420 777 948 705

As a company established in the European Union, we process personal data in accordance with the GDPR. Depending on where you live, additional rights under your local privacy laws may also apply.

2. What data we process and why

We process only the personal data necessary to operate our online store, process orders, communicate with customers, comply with legal obligations and, where applicable, perform analytics and marketing.

When you place an order or create an account, we may process:

• your name and contact details,
• billing and shipping address,
• order details and order history,
• payment and shipping information,
• communication related to your order.

We use this information primarily to process orders, receive payments, deliver goods, issue accounting documents, handle returns and process complaints.

The main legal bases for this processing are the performance of a contract and compliance with our legal obligations.

3. Payments

Depending on the payment method you choose, we provide the necessary information to the relevant payment provider or bank.

Our payment providers may include:

• Stripe,
• PayPal,
• participating banks.

Full payment card details are normally processed directly by the payment provider. WULFLUND generally receives only the information required to confirm and process the payment.

4. Shipping and customs

We provide shipping companies with the information necessary to deliver your order, particularly:

• your name,
• shipping address,
• telephone number and e-mail address,
• information required to deliver and track the shipment.

The shipping company used may vary depending on the destination country and type of shipment.

For international shipments, we may also provide the information required for customs clearance to carriers, customs brokers, postal operators or public authorities.

We only provide information necessary to process and deliver the shipment.

5. Customer communication

If you contact us by e-mail, telephone or through a contact form, we process the information you provide in order to respond to your request.

We retain communication for as long as necessary to deal with your request and, where appropriate, to protect your or our legal rights.

6. Newsletter and marketing communications

We use Ecomail, operated by ECOMAIL.CZ, s.r.o., to send newsletters and marketing communications. Ecomail processes the contact information required to send messages and manage delivery and unsubscribing on our behalf.

If you subscribe to our newsletter, we use your e-mail address on the basis of your consent.

Where permitted by applicable law, we may also use an e-mail address obtained in connection with a previous purchase to inform existing customers about our own similar products, new products or related offers without requiring separate consent.

We only do this where applicable law allows it and where the customer has not objected to such use.

You can stop receiving marketing communications at any time, free of charge:

• by using the unsubscribe link included in every marketing e-mail,
• by contacting us at shop@wulflund.com.

After unsubscribing, we may retain your e-mail address on a suppression list to ensure that no further marketing messages are sent to you.

Messages necessary to process an order, payment, shipment, return or complaint are not marketing communications.

Where individual tracking of newsletter opens or clicks requires consent under applicable law, such tracking is only carried out after the required consent has been obtained.

7. Technical data and website security

When you visit our website, certain technical information may be processed automatically, including:

• IP address,
• date and time of access,
• pages visited,
• browser type,
• device and operating system,
• technical and security information.

We use this information to operate and secure the website, detect misuse and resolve technical problems.

Our e-commerce platform and related technical services are provided by Simplia.

We may use Google reCAPTCHA to protect forms and the website against automated abuse.

8. Cookies, analytics and advertising

We use essential cookies required for functions such as the shopping cart, login and privacy settings.

Optional analytics and marketing technologies are used on the basis of your consent where consent is required. You can change or withdraw your choice at any time through Cookie Settings on our website.

We may use the following services:

Google Analytics 4

Google Analytics helps us understand website traffic and how visitors use our store, including page visits, interactions and completed purchases.

Microsoft Clarity

Microsoft Clarity helps us identify usability problems. It may process information such as clicks, scrolling, mouse movements and technical information about a website visit.

Sensitive personal and payment information should not be included in these recordings.

Meta Pixel

Meta Pixel helps us measure the effectiveness of advertising on Facebook and Instagram.

It may record events such as viewing a product, adding an item to the cart, starting checkout or completing a purchase.

9. Who receives personal data

We only provide personal data to parties that need it for a specific purpose. These may include:

• providers of our e-commerce platform, hosting and technical services,
• payment providers and banks,
• shipping companies, postal operators and customs service providers,
• Ecomail for newsletter distribution,
• accounting and tax service providers,
• analytics and advertising providers where the appropriate consent has been given,
• customs, tax, law-enforcement or other public authorities where required by law.

We do not provide customer databases to third parties for them to use for their own unrelated direct marketing.

10. International data transfers

Because WULFLUND.com operates worldwide, personal data may be processed or transferred outside the European Economic Area.

This may happen, for example:

• when an order is shipped to a country outside the EEA,
• when international payment or technology providers are used,
• when certain services provided by Google, Microsoft, Meta, Stripe, PayPal or other providers involve processing outside the EEA.

Where GDPR requires specific safeguards for such transfers, we rely on an applicable legal mechanism, such as an adequacy decision or approved Standard Contractual Clauses.

For deliveries outside the EEA, information necessary to fulfil your order may also be transferred to the destination country because this is necessary to perform the contract with you.

EU rules require appropriate safeguards when personal data is transferred from the EEA to third countries, including mechanisms such as adequacy decisions and Standard Contractual Clauses.

11. How long we keep personal data

We retain personal data only for as long as necessary for the relevant purpose.

• Order, accounting and tax records are retained for the period required by law, generally up to 10 years.
• Customer account information is retained until the account is deleted, unless certain information must be retained by law.
• Newsletter information is retained until you unsubscribe or withdraw your consent.
• We may retain information about an unsubscribe request to ensure that no further marketing messages are sent.
• Customer communication is retained for as long as necessary to deal with the matter and possible legal claims.
• Technical, analytics and marketing data are retained according to their purpose, the settings of the relevant services and your consent.

12. Legal bases for processing

Depending on the purpose, we process personal data:

• because it is necessary to enter into or perform a contract with you,
• because we are required to do so by law,
• on the basis of our legitimate interests, particularly in operating a secure online store, providing customer support, protecting our rights and, where permitted by law, communicating with existing customers,
• on the basis of your consent, particularly for optional newsletters, analytics and marketing technologies where consent is required.

You may withdraw your consent at any time with effect for the future.

13. Your rights

Depending on the applicable law, you may have the right to:

• obtain information about the personal data we process about you,
• request correction of inaccurate information,
• request deletion of your personal data,
• request restriction of processing,
• object to processing based on legitimate interests,
• object at any time to processing for direct marketing,
• withdraw your consent,
• request data portability where applicable,
• lodge a complaint with a data protection authority.

To exercise your rights, contact us at shop@wulflund.com.

Where necessary to protect your personal data, we may ask you to provide reasonable proof of identity.

If the privacy laws of your country provide additional rights that apply to our processing, you may exercise those rights as provided by the relevant law.

14. Supervisory authority

As DRAKKARIA s.r.o. is established and primarily manages its personal data processing in the Czech Republic, our lead data protection authority is:

Office for Personal Data Protection
(Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

E-mail: posta@uoou.gov.cz

If you live in another EU or EEA country, you may also lodge a complaint with the data protection authority in your country.

Customers outside the EEA may also have the right to contact the relevant privacy or data protection authority in their country where applicable.

15. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects for customers.

With your consent where required, analytics and advertising services may create audience groups or interest profiles. These systems do not independently decide whether we accept or reject your order.

16. Changes to this Privacy Policy

We may update this Privacy Policy when our services, processing activities or legal requirements change.

Effective from 22 September 2026.