1. Controller and contact

The controller responsible for the processing of personal data on this website is:

Loxone Electronics GmbH
Smart Home 1
4154 Kollerschlag
Austria
Phone: +43 7287 7070 0
Email: [email protected]

Data Protection Officer:
Florian Wöss
Email: [email protected]

2. General information on data processing

We only process personal data of our users to the extent necessary to provide a functional website as well as our content and services. This privacy policy explains which data we process, for which purposes, on which legal basis and for how long.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws, in particular the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

Depending on the purpose, processing is based on:
– your consent (Art. 6(1)(a) GDPR)
– the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
– a legal obligation (Art. 6(1)(c) GDPR)
– our legitimate interests (Art. 6(1)(f) GDPR)

3. Hosting and infrastructure

Our website is hosted by Host Europe. In addition, we use Cloudflare exclusively for content delivery (CDN) and security purposes (no analytics).

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure and reliable website).

4. Server log files

Each time our website is accessed, the following data is stored:
– IP address
– date and time of access
– user agent (browser information)

This data is stored to ensure the functionality and IT security of the website and for error analysis.
Retention period: up to 365 days (depending on log size).

Legal basis: Art. 6(1)(f) GDPR.

5. Cookies and consent management

We use cookies and similar technologies to provide a user-friendly website and tailored content.

Categories of cookies:
– Necessary cookies: required for the website to work properly, e.g. page navigation and access to secure areas.
– Preference cookies: store information that changes how the website behaves or looks, e.g. your preferred language.
– Statistics cookies: collect information about how the website is used, e.g. the most visited pages, to improve the user experience.
– Marketing cookies: used to show you relevant advertising based on your behaviour.

We use the Complianz Privacy Suite to manage cookies. When you first visit our website, you can choose which cookies you allow. Your choices are logged and stored. You can change or withdraw your consent at any time via the “Manage consent” button on our website. Details about the cookies we use can be found in our Cookie Policy.

Legal basis: necessary cookies – Art. 6(1)(f) GDPR; all other cookies – your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021.

6. Analytics and marketing tools

With your consent, we use the following tools and technologies to analyse user behaviour and to deliver advertising:
– Google Analytics 4 (see section 7)
– Google Ads conversion tracking and remarketing (see section 7)
– Google Tag Manager (see section 7)
– Microsoft Clarity (heatmaps, session recording)
– Microsoft Advertising
– Meta Pixel (Facebook/Instagram ads)
– Dealfront and Leadfeeder (company identification and lead generation)
– Zoho (CRM and website tracking)
– Stape.io (server-side tracking proxy)
– Zapier (data transfer between our systems)

Meta Pixel: With the Meta Pixel we can show you advertising on Facebook, Instagram and the Meta Audience Network based on your visits to our website (Custom Audiences), measure actions such as submitting a contact form or reaching the checkout of our webshop, and have Meta create similar target groups (Lookalike Audiences). Meta is jointly responsible with us for the collection and transfer of data via the pixel. You can manage your advertising settings in your Meta account.

Legal basis: your consent under Art. 6(1)(a) GDPR (via the cookie banner). You can withdraw your consent at any time with effect for the future. For transfers to the USA, see section 15.

7. Google services

We use Google Analytics 4, Google Ads (conversion tracking and remarketing) and Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). These services only run with your consent via our cookie banner (Google Consent Mode). Google and other third-party vendors use cookies to analyse the use of our website and to show you ads on other websites based on your previous visits to our website. For this purpose, usage data such as pages visited, device and browser information and your approximate location are transmitted to Google, including to Google LLC in the USA.

Google Analytics 4: helps us understand how our website is used. Your IP address is only used to determine your approximate location and is not stored. Cookies: _ga, _ga_<ID>, retention up to 2 years.
Google Ads: measures the success of our ads and shows ads to visitors of our website on Google and its partner websites (remarketing).
Google Tag Manager: manages our tags. It does not set its own cookies, but may transmit technical data such as your IP address to Google.

How Google uses this data: policies.google.com/technologies/partner-sites
Google Privacy Policy: policies.google.com/privacy
Deactivate personalised advertising: myadcenter.google.com
Prevent Google Analytics: browser add-on

Legal basis: Art. 6(1)(a) GDPR. Cookie retention: up to 2 years.

8. Customer account and webshop orders

To shop with us, you need a customer account. For your order, we process your name, address, email address and payment details. We use your email address to confirm your order, to communicate with you and to identify you when you log in.

Your data is only passed on to third parties if this is necessary to perform the contract (e.g. to shipping and payment service providers) or if you have consented. Our service providers may only use the data to perform their tasks. Our employees and service providers are bound to confidentiality.

Legal basis: Art. 6(1)(b) GDPR; Art. 6(1)(c) GDPR for statutory retention obligations under tax and commercial law.

9. Forms and communication

We offer various forms (contact, partner enquiry, support, feedback, job application). The following data may be requested:
– first name, last name
– email address
– phone number
– postcode
– country
– status (e.g. prospect, partner)

Purpose: processing your enquiry, customer communication, partner support. After submitting a form, we may send you a confirmation email. This does not subscribe you to a newsletter.

Find a Partner: If you use our “Find a Partner” feature, we automatically forward your contact details to the Loxone Partner you selected so that they can contact you.

Recipients: data may be transferred to our Zoho CRM via Zapier and Mailworx. We have concluded a data processing agreement with Zoho Corporation.

Legal basis: Art. 6(1)(b) GDPR (contract or pre-contractual measures), Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interest in efficient processing).

10. Newsletter and direct marketing

We use Mailworx to send our newsletters. You subscribe using the double opt-in procedure: we only send you newsletters after you have confirmed your subscription via the link in our confirmation email. You can unsubscribe at any time via the link in every newsletter or by contacting us.

We may also inform existing customers about our own similar products and services. You can object to the use of your data for advertising purposes at any time, free of charge (Art. 21(2) GDPR).

Retention period: until you unsubscribe or object.
Legal basis: Art. 6(1)(a) GDPR (newsletter); Art. 6(1)(f) GDPR (direct marketing to existing customers).

11. Job applications

Applications can be submitted via a form or by email. The data you submit is used exclusively to process the application procedure.

Retention period: 6 months after the end of the application procedure, unless longer storage is required by law or you have expressly consented to it.

Legal basis: Art. 6(1)(b) GDPR; Art. 6(1)(a) GDPR where you consent to longer storage.

12. External content

We embed content from third-party providers (e.g. YouTube, Vimeo, Google Maps, social media feeds). When such content is loaded, data such as your IP address and browser information is transmitted to the respective provider.

Legal basis: Art. 6(1)(a) GDPR (consent via the cookie banner).

13. Login and partner areas

For access to protected areas (e.g. Partner Portal, Exosphere, Config download), we process your email address and password. In addition, log data (e.g. IP address, login times) is stored to prevent misuse.

Legal basis: Art. 6(1)(b) and (f) GDPR.

14. Retention periods

– Server logs: up to 365 days
– Form data: until processing is complete or transferred to our CRM
– CRM data: as long as the customer relationship is active or statutory retention obligations apply
– Order data: for the duration of statutory retention obligations under tax and commercial law
– Job applications: 6 months
– Newsletter: until consent is withdrawn
– Google cookies: up to 2 years

15. International data transfers

When we use analytics, marketing and CRM tools (Google, Meta, Microsoft, Zoho), data may be transferred to countries outside the EU/EEA, in particular the USA and India.

Transfers are based on the adequacy decision for the EU-US Data Privacy Framework, where the recipient is certified, or otherwise on the EU Standard Contractual Clauses (SCCs).

16. Your rights

You have the right to:
– access your data (Art. 15 GDPR)
– rectification (Art. 16 GDPR)
– erasure (Art. 17 GDPR)
– restriction of processing (Art. 18 GDPR)
– data portability (Art. 20 GDPR)
– object to processing (Art. 21 GDPR)
– withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please contact us at [email protected] or our Data Protection Officer at [email protected].

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence or place of work. Our lead supervisory authority is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at.

17. Security

We use technical and organisational measures to protect personal data, including:
– SSL/TLS encryption
– multi-factor authentication (MFA)
– access controls
– VPN and key-pair authentication for critical systems

18. Changes to this privacy policy

This privacy policy was last updated in October 2026. We reserve the right to amend it to reflect legal or technical developments. You can always find the current version on this page.