Privacy policy

Last updated: 8 October 2026

Wolf Group DOO Bijeljina respects your privacy. This policy explains how we process personal data when you visit our website at www.wolfdoo.com, submit an enquiry or communicate with us.

1. Who is responsible for your data

The data controller is:

Wolf Group DOO Bijeljina
Glavna 101, Batković, Bijeljina
Bosnia and Herzegovina
Email: company@wolfdoo.com

You can contact us at this address with privacy questions or requests to exercise your rights.

2. What personal data we process

When you contact us, we process the information you provide: your name, email address, telephone number if supplied, company name, message content and any attachments.

If your enquiry concerns our products, tastings, events or business cooperation, we also process the information needed to respond to that enquiry.

When you visit the website, its server and associated technical services may process your IP address, browser and device information, access times, pages visited and technical error information.

We obtain data directly from you or through the operation of the website. Please do not provide sensitive information or information about other people that is unnecessary for your enquiry.

3. Why we process data and our legal bases

We process personal data for the following purposes:

• Responding to enquiries and business communications: based on our legitimate interest in communicating with interested individuals and business contacts.
• Preparing an offer or arranging a service at your request: to take steps before entering into a contract, or to perform a contract where you are a party to it.
• Maintaining and protecting the website: based on our legitimate interest in keeping it operational, resolving errors and preventing misuse.
• Complying with legal obligations and requests from competent authorities: where we are legally required to do so.
• Protecting legal interests: where necessary to establish, exercise or defend legal claims.
• Sending promotional communications, if you subscribe: based on your consent.

When relying on legitimate interests, we assess them against your rights and freedoms.

Submitting an enquiry does not subscribe you to promotional communications. Providing enquiry information is voluntary, but without the necessary contact details or other information we may be unable to respond or prepare the requested offer.

4. Cookies and similar technologies

Cookies are small files that a website may store on your device. Similar technologies may remember preferences, analyse visits or display content provided by other service providers.

We use strictly necessary technologies to the extent required to operate the website or provide a function you have expressly requested. Analytics and marketing technologies, if used, are activated only after you consent.

You can refuse or subsequently withdraw consent without losing access to the website’s basic content. Continuing to browse does not constitute consent.

This website does not set cookies and does not use analytics or marketing technologies. Fonts and the map are part of the website and are not loaded from other providers’ servers. Links to Instagram and Google Maps take you to those providers’ websites only when you open them; their privacy policies apply there.

Our hosting provider, Cloudflare, may set a strictly necessary cookie (__cf_bm, 30-minute lifetime) to protect the website against automated traffic. This cookie is not used for tracking and does not require consent.

If we introduce technologies that require consent in the future, we will update this section and ask for consent before using them.

5. Who may receive your data

We restrict access to authorised individuals and service providers who need the data to perform their tasks. These may include providers of hosting, website maintenance, email and other technical services.

Where providers process data on our behalf, they act under our instructions and appropriate contractual data protection obligations.

We may disclose data to professional advisers or competent authorities where an appropriate legal basis exists.

6. International data transfers

Using certain technical services may involve storing data or allowing access to it outside Bosnia and Herzegovina. Any such transfer must have an appropriate legal basis and safeguards under applicable law.

Data is transferred outside Bosnia and Herzegovina in the following cases:

• Cloudflare, Inc. (USA) — website hosting; processes technical visit data (IP address, browser information) to deliver and protect the website.
• Formspree, Inc. (USA) — receiving messages sent through the contact form and forwarding them to our business email address.
• Namecheap, Inc. (USA) — business email, where we keep our correspondence.

These transfers are based on data processing agreements that form part of these providers’ terms of service and include standard contractual clauses on data protection. You can request a copy of the safeguards applied at company@wolfdoo.com.

7. How long we retain data

We retain personal data for as long as required for the relevant purpose:

• enquiry information while handling the enquiry and necessary follow-up communications;
• contractual and business records for the applicable statutory retention periods;
• information needed for legal claims for the relevant limitation periods or duration of proceedings;
• promotional communication data until consent is withdrawn or the purpose ends.

After you unsubscribe, we may retain a minimal record to respect your choice or demonstrate the lawfulness of previous processing.

Specific periods:

• Messages received through the contact form are deleted from our Formspree account no later than 30 days after receipt; further correspondence takes place by email.
• Enquiries that do not lead to a business relationship are deleted 24 months after the last communication.
• Technical visit records are kept by our hosting provider under its own policies; we do not keep our own server logs or backups containing visitors’ personal data.

When the applicable retention period ends, we delete the data or irreversibly anonymise it.

8. Your rights

Subject to the conditions established by law, you may request access to your personal data, rectification, erasure, restriction of processing and data portability.

You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time, after which we will no longer use your data for that purpose.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.

You also have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

Send requests to company@wolfdoo.com. We respond without undue delay and no later than 30 days after receipt. Where the law permits an extension of a further 60 days, we will notify you within the initial period and explain the reasons. If we have reasonable doubts about the requester’s identity, we may request only the additional information needed to confirm it.

9. Complaints to the supervisory authority

If you believe that our processing infringes your rights, you may lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina:

Dubrovačka 6, 71000 Sarajevo
Email: azlpinfo@azlp.ba
Website: azlp.ba

You do not have to contact us before lodging a complaint. You also have the right to seek a judicial remedy.

10. Security and policy updates

We apply technical and organisational measures appropriate to the processing, including restricting access to personal data and protecting it against unauthorised access, loss and disclosure.

We update this policy when our processing practices or relevant laws change. The current version is published on this page with its revision date. Where new processing requires consent, we will request it separately.