Last updated: 16 September 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit 25-south.com (the “Website”). We take the protection of your personal data seriously and process it only in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1. Controller
The controller responsible for data processing on this Website is:
Judith Nowak
Schlosssee 313
2522 Oberwaltersdorf
Austria
Email: office@25-south.com
2. What data we collect and why
Contact form and email
If you use our contact form or email us, we collect the data you provide (such as your name, email address and the content of your message). We use this data solely to process and respond to your enquiry. The legal basis is Article 6(1)(b) GDPR (steps taken at your request) and our legitimate interest in answering enquiries under Article 6(1)(f) GDPR. This data is retained only as long as necessary to handle your enquiry and to comply with any legal retention obligations.
Server log files
When you visit the Website, our hosting provider automatically collects and stores information in server log files, which your browser transmits to us. This may include your IP address, browser type and version, operating system, referrer URL, and the date and time of access. This data is used to ensure the security, stability and technical operation of the Website. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
Cookies and website statistics
This Website may use cookies. Cookies that are strictly necessary for the Website to function are set on the basis of our legitimate interest (Article 6(1)(f) GDPR). Cookies that are not strictly necessary — for example, those used for statistics or analytics — are only set with your consent (Article 6(1)(a) GDPR). Visitors from the EU/EEA are shown a cookie consent banner and can accept or decline such cookies; you may withdraw your consent at any time with effect for the future. The Website may collect anonymised or pseudonymised usage statistics (for example page views) to help us understand how the Website is used.
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It uses cookies (including _ga and _ga_*) to help us understand how the Website is used — which pages are read, and how visitors arrive. These cookies are only set after you give consent via the cookie banner (Article 6(1)(a) GDPR); until then, Google Consent Mode keeps analytics storage disabled and no analytics cookies are placed. Data may be transferred to Google LLC in the USA on the basis of appropriate safeguards such as the EU Standard Contractual Clauses. You can withdraw your consent at any time via the cookie settings on this Website. For more information, see Google’s privacy policy at policies.google.com/privacy.
We also use Koko Analytics, a statistics tool that runs on our own web server. It works without cookies and does not store anything on your device. To tell a new page view from a repeat visit, it briefly creates a code from your IP address and browser details, which changes every day and cannot be traced back to you. No data is passed to third parties. The legal basis is our legitimate interest in knowing how many people read the Website (Article 6(1)(f) GDPR).
Embedded content from other websites
Pages on this Website may include embedded content (for example videos, images, maps or social media posts). Embedded content from other websites behaves in the same way as if you had visited the other website directly. These third-party providers may collect data about you, use cookies, and monitor your interaction with the embedded content. We have no control over the data processing carried out by these providers; please refer to their respective privacy policies.
In particular, some articles embed videos from YouTube (Google Ireland Limited). These embeds are blocked until you consent to them: until then a placeholder is shown in place of the video and no data is sent to YouTube.
3. Hosting
This Website is hosted on WordPress.com, a service operated by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, acting as our processor. Data may be transferred to the USA on the basis of appropriate safeguards such as the EU Standard Contractual Clauses. For more information, see Automattic’s privacy policy at automattic.com/privacy.
4. Your rights
Under the GDPR you have the right to request access to your personal data, and to request its rectification, erasure or restriction of processing, as well as the right to data portability and the right to object to processing. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, please contact us at office@25-south.com.
5. Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Austrian supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria — www.dsb.gv.at.
6. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The current version published on this page always applies.