Privacy Policy

This policy covers the pages under /wien and /vienna on web25.io. It explains what data Web25 s. r. o. processes, why, and what rights you have.

Last updated: 29 October 2026

1. Controller

Web25 s. r. o.
Obchodná 538/70, 811 06 Bratislava, Slovakia
Company ID 55581676, VAT ID SK2122037401
Email: support@web25.io

2. What data we process

  • Enquiry form: name, email, company, phone, your website, the option you chose and your message. Plus the language version of the page.
  • Only if you allow ad cookies: the Google ad click ID (gclid, gbraid or wbraid) and the UTM parameters from the ad link, plus the page you landed on.
  • Messages: what you send us on WhatsApp or by email, with your phone number or email address.
  • Server logs: technical data such as IP address, browser and pages visited, which our host Vercel keeps for security.
  • Your cookie choice: stored in your browser's local storage.

3. Purposes and legal bases

  • Answering your enquiry and preparing a quote: Art. 6(1)(b) GDPR (steps before a contract).
  • Running and securing the site, keeping records of our communication: Art. 6(1)(f) GDPR (legitimate interest).
  • Measuring Google ads: only with your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time.
  • Invoices and accounting: Art. 6(1)(c) GDPR (legal duties under Slovak accounting law).

4. Recipients

We don't sell data. We share it only with these providers and partners:

  • Pabbly Connect: forwards the enquiry form to our internal records.
  • Google (Workspace: Sheets, Meet, Calendar): internal records, video calls and meetings.
  • Vercel: hosts this website.
  • Google Ads (Google Ireland Limited): only with your consent; Google acts as a separate controller.
  • WhatsApp Ireland Limited: if you message us on WhatsApp.
  • Stripe: card and SEPA Direct Debit payments.

5. Transfers outside the EU

Some of these providers also process data outside the EU/EEA. They rely on adequacy decisions of the European Commission (e.g. the EU-US Data Privacy Framework) or on standard contractual clauses as appropriate safeguards under Art. 46 GDPR.

6. How long we keep data

We keep enquiries as long as needed to answer them and for our records, usually no longer than 3 years after our last contact, unless the law requires longer.

Data about the ad you came from stays in your browser only until the end of your visit (sessionStorage). If you send an enquiry, we keep it with the enquiry. We keep invoices as long as Slovak accounting law requires.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. You can withdraw consent at any time. Write to us at support@web25.io.

You can complain to a data protection authority, in particular the authority of the country where you live or work (in Austria, the Datenschutzbehörde, dsb.gv.at), or the Slovak authority (Úrad na ochranu osobných údajov Slovenskej republiky).

8. Cookies

On your first visit, the cookie banner asks what you allow:

  • Necessary: always on. Stores, for example, your cookie choice.
  • Analytics: Not in use yet. If we add it, only with your consent.
  • Advertising: Measures whether you came from a Google ad and helps tailor ads to your visit. Off by default. On only if you choose “Accept all” or switch it on in “Settings”.

We use Google Consent Mode v2 in basic mode: without your consent the Google Ads tag is not loaded, and your browser sends no data to Google Ads. With consent, Google Ads sets the _gcl_au cookie on our domain (90 days).

You can change or withdraw your choice at any time through “Cookie settings” in the footer. When you withdraw, we delete the _gcl cookies.

9. Changes and contact

If we change this policy, we update the date at the top. Questions go to support@web25.io.