This text edition alone does not activate an order. Actual availability is shown at entry. Before messages are accepted, you select your role, give the limited test instructions and deliberately accept the agreement. The personal TXT copy contains the order, target scope and acceptance time.
1. Provider, order and acceptance
Wolf-Agents, proprietor Eduard Wolf, Vorderhainberg 21, 94496 Ortenburg, Germany; info@wolf-agents.com; +49 151 46533415. The operator and contact person is Eduard Wolf. This agreement concerns only the individually identified private test email order. There is no price, subscription, automatic renewal or account. The interface language does not restrict eligibility by residence or nationality. The order is concluded when acceptance succeeds and its identifier is issued. Before messages can be received, the access code must also be deliberately saved and confirmed. Without confirmation that the code has been saved, the pending order ends after no more than ten minutes. The public domain assessment remains a separate order.
1a. Supported orders and recipients in the initial eligibility profile
Personal private tests are exclusively non-business self-tests using a new, minimal-content message of your own through a sending route you are authorised to use; the assessment is only for the person carrying out the test. An employer-related, client-related or mixed business purpose belongs in the business route. Do not forward correspondence or deliberately include other people's personal identifiers. Private use does not exempt the provider from its data protection duties. At launch, business orders are accepted for ordinary operational IT tests by private organisations. The relevant factors are the actual receiving establishments and the activities assigned to this order, rather than merely a postal or representative address, nationality or browser IP address. Authorised employees do not become a separate establishment merely because they travel abroad. Separate service providers or group companies with direct B5, code or email access are, however, separate recipients and must be declared. Other unnamed entities do not receive direct access. For an order placed by a service provider, the client becomes an additional B5 recipient only if it has its own direct access; the service provider is separately responsible for any later delivery of files to the client. Supported recipients are those in the EEA and the covered ordinary business cases in Andorra, Argentina, Guernsey, the Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and the United Kingdom. Brazil, the Faroe Islands, Israel, Japan and the Republic of Korea are supported only within the additional territorial, entity and purpose restrictions of their adequacy decisions displayed for the actual circumstances. Mixed or excluded special purposes are not covered merely by describing them as an IT test. The specific recipient details and the version and basis determined from them on the server appear in the acceptance copy; the declaration is not an official identity or legal verification. US Data Privacy Framework cases without an active entity and scope check, Canadian PIPEDA cases that cannot be reliably classified, public authority or special-purpose cases, and other cases requiring standard contractual clauses or individual instruments are currently not accepted. No client standard contractual clauses are offered or accepted. This is a limit of this test email function, not a general country or IP restriction on the website. The public scanners remain independently available. If a required basis ceases to apply, the affected intake, processing and return may be specifically suspended; deletion, rights and original deadlines remain in place.
2. Limited service and test instructions
The customer instructs only the receipt of new, minimal-content test messages from a sending route they are authorised to use, limited transport, SPF, DKIM and DMARC assessment, and private fixed report revisions with PDF, DOCX and CSV output. The target and any expressly included subdomains appear in the acceptance copy. There is no continuous monitoring, mailbox login, campaign, existing correspondence, attachments, secrets, special categories of personal data or unrestricted third-party client content. The customer ensures that they have the necessary authority, that affected senders receive the necessary information and that the test message is permissible. Contact confirmation or a domain assessment proves neither domain ownership nor authority to act. The complete received test bytes, technical header values, sending server IP address, domain and selector values, and times are processed briefly. Data subjects are the instructed senders and, where applicable, people identified in permissible technical headers. Persistent findings do not contain a store of subjects, bodies or attachments. Required public DNS questions may reach authoritative operators worldwide: technically permitted names and query types are sent using the shared server IP address, without a contact address, order identifier or copy of the email bytes. Names may themselves be personal data. Personal SPF macros and reverse DNS for the individual sending server IP address are not queried externally in the guest profile; affected assessments remain incomplete. These specific test instructions are not blanket consent to data processing or third-country transfers.
3. Access, deadlines, return and deletion
After confirmation that the code has been saved, the order ends no later than 30 days after this activation, at the displayed fixed time. New measurements, revisions, recovery and downloads do not extend it. Raw bytes are deleted immediately after a terminal finding, and no later than one hour after receipt, and are not backed up. A session and alias remain valid for no more than 24 hours and never beyond the original end of the order. Further measurements do not change fixed revisions. Data is returned through private downloads within the deadline; it is deleted afterwards. Early deletion is possible. Encrypted backups of derived data last no longer than seven days after creation and retain their original expiry. The separate current revocation control remains for no more than eight days after the original end of the order. A restore must not reopen revoked access. Copies held by your own email or DNS providers and files you download yourself are separate. Anyone with the code can manage the order. Additional recovery through a confirmed email address is optional. The business instruction contact does not automatically become a recovery or newsletter contact. To attribute the order, we securely store the role, necessary party and contact details, declaration, version, acceptance time and target binding until deletion of the order or its original deadline. The impersonal text edition is retained. You must save your personal copy yourself; this does not create a permanent contract archive.
4. Roles and processing on behalf of the customer
The customer determines the test purpose, sending route and permissible content. Wolf-Agents processes the test data provided for that purpose under these documented instructions. For an organisation's order, the named organisation is the party; for direct representation, the represented client is the party. If a service provider places an order as a processor, it also identifies the client acting as controller and confirms that client's specific instructions and permission for further processing by a subprocessor. The confirmed declaration is attributed to this individual order; it is not an official verification of authority to act. No organisation is declared for an exclusively private self-test. The following protective duties apply to the instructed test processing; where Article 28 GDPR applies, they form the agreement required by paragraphs 3 and 4 of that Article. The provider's own purposes for access protection, abuse prevention, contact and minimised operational statistics remain separate under the privacy notice. Wolf-Agents processes data only on documented instructions, including any transfers. If the law requires different processing, the provider informs the customer in advance where legally permitted. If it considers an instruction unlawful, it informs the customer and suspends the affected operation. Only authorised persons bound by confidentiality receive necessary access. Within the actual scope of the service, the provider assists with data subject rights and the duties under Articles 32 to 36 GDPR; it notifies the designated contact of personal data breaches without undue delay. No particular response window or round-the-clock support is promised. For this order, the customer authorises Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, for the existing service host in Nuremberg and necessary encrypted backups of derived data in Germany. For access emails voluntarily requested, Scaleway SAS, 8 rue de la Ville l'Évêque, 75008 Paris, France, is used through TEM in Paris. Raw test email bytes and report files are not sent to the access email provider. The existing data protection duties are imposed on further processors. Additional or replacement subprocessors require new specific authorisation before they are used; this 30-day agreement gives no blanket permission for changes. Authoritative DNS operators do not become processors merely by providing a technical answer. The provider makes necessary evidence available and permits required audits, including agreed inspections by the customer or an appointed auditor; scope and arrangements are agreed through info@wolf-agents.com while protecting other users. Use the same contact for misdirected messages, instructions and rights; do not resend the raw email as a support attachment. At the end of the contract, the customer may choose return by export followed by deletion, or immediate deletion; the stated limited backup and revocation periods remain. Where a specific legal duty requires retention, its affected scope is identified separately.
5. Technical safeguards and limitations
Separate service roles and user IDs, encrypted data and raw storage, mandatory STARTTLS on receipt, internal mTLS/HMAC, socket peer verification, short-lived access, exclusion of private tokens and email content from public logs, separate current revocations, restricted role egress and resource rules, and deadline-based deletion protect the order. Operation uses the existing shared host; a root compromise or host failure may affect public and private services. No dedicated host, high availability, certificate or complete security is promised. Mandatory STARTTLS proves only the final receiving hop. A technically or capacity-limited partial finding is not presented as a passed email test.
6. User rights, liability and termination
The report is a limited snapshot with measurement limitations, not a seal of approval or proof of complete security or legal compliance. Findings and files may be used for your own authorised purposes, within your organisation and with the commissioning client. Sources, measurement time and limitations must remain identifiable; your own changes must be marked. This grants no white-label, resale or general publication rights in protected Wolf-Agents content. Uses permitted by law and rights in your own content remain unaffected. Liability is governed by law. In particular, liability for intent, gross negligence, harm to life, body or health, and mandatory statutory liability remains unlimited. The free service and beta status do not exclude consumer, performance, defect or data protection rights. Further intake may be blocked in cases of specific misuse. This edition does not revoke earlier rights. Changes do not apply retrospectively to orders already accepted.
7. Consumer right of withdrawal
You may withdraw from this contract within fourteen days of its conclusion without giving a reason. To do so, inform the provider named in section 1 by an unambiguous statement, for example by letter or email. Use of the model form is optional. You may also use https://wolf-agents.com/en/legal/withdrawal/; after selecting “Confirm withdrawal”, you immediately receive an acknowledgement that can be saved, including its content, date and time. Sending your statement before the deadline is sufficient. Both parties' performance duties end. There are no payments to refund and no compensation for value is due. After effective termination, you must not continue to use the digital product or make it available to third parties (section 327p of the German Civil Code, BGB); your own content and data protection rights remain unaffected. Terminating a contract does not automatically unsubscribe you from a separate newsletter. The service includes testing and making results available within the promised period. The right of withdrawal expires before the fourteen days have passed only upon complete performance (section 356(5), point 1 BGB); a first download alone is insufficient. No separate contract is created for individual digital downloads. Optional model form: To Wolf-Agents, proprietor Eduard Wolf, Vorderhainberg 21, 94496 Ortenburg, Germany, info@wolf-agents.com. I/We hereby withdraw from the contract for the following service: …; order identifier, if available: …; ordered on/received on: …; name: …; address: …; date: …; signature only on paper: …. Delete as appropriate.
Privacy and further rights: https://wolf-agents.com/en/privacy/#private-testmail Legal notice: https://wolf-agents.com/en/legal/notice/