Privacy Policy

Last updated: 15th January 2026

Introduction

Loxentra AG ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains what data we collect, how we use your information, and your rights regarding your personal data when you use our website and services.

Data Controller Information

The data controller for your personal information is Loxentra AG, a company registered in Austria with registration number FN618254a. Our registered office is located at Landstraßer Hauptstraße 55, 5057 Salzburg, Austria.

Data We Collect

The data collection we perform includes various types of information depending on how you interact with our website and services:

• Contact Information: When you contact us or request consultation services, we collect your name, email address, phone number, company name, and any other information you provide in your inquiry.
• Technical Data: We automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, operating system, and pages visited.
• Cookies and Tracking Data: We use cookies and similar technologies to collect information about your browsing behaviour and preferences. For detailed information, please see our Cookie Policy.
• Communication Records: We maintain records of our communications with you, including emails, phone calls, and consultation sessions.

How We Use Your Information

We use of your data is based on legitimate business interests and, where required, your explicit consent. The purposes for which we process your personal information include:

• Responding to your inquiries and providing requested information about our services
• Delivering consultation services and personalised recommendations
• Improving our website functionality and user experience
• Sending you relevant updates about our services (with your consent)
• Complying with legal obligations and regulatory requirements
• Protecting our legitimate business interests and preventing fraud

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner or by visiting our Cookie Policy page.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Legitimate Interests: To operate our business, provide services, and improve our offerings
• Consent: For marketing communications and non-essential cookies
• Contractual Performance: To deliver services you have requested
• Legal Compliance: To comply with applicable laws and regulations

Data Sharing and Third Parties

We do not sell your personal information to third parties. We may share your data with trusted service providers who assist us in operating our website and delivering our services, including:

• Website hosting and technical infrastructure providers
• Email communication services
• Analytics providers (such as Google Analytics)
• Legal and professional advisors when necessary

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Contact information and communication records are typically retained for up to 7 years for business and legal compliance purposes. Technical data and cookies are retained for shorter periods as specified in our Cookie Policy.

Your Rights

Under GDPR and applicable privacy laws, your rights include:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request limitation of processing in specific situations
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing where applicable

International Data Transfers

As we operate primarily within the European Union, your data is generally processed within the EU/EEA. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our services are intended for business users and we do not knowingly collect personal information from children under 16 years of age. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please reach out to us:

Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe your data protection rights have been violated. You can contact them at www.dsb.gv.at or by post at Barichgasse 40-42, 1030 Vienna, Austria.