Privacy policy
Last updated: November 2026
We take the protection of your personal data seriously. We process your data solely on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This policy explains which data we process when you visit sanocyn.com, for what purpose, on what legal basis and for how long.
1. Controller
Loxotec GmbH
Porzellangasse 43/4, 1090 Vienna, Austria
Email: office@loxotec.com
You can reach us at this address with any questions about data protection. No data protection officer has been appointed, as the legal requirements for doing so are not met.
2. Hosting and server log files
The website is hosted by World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, 4020 Linz, Austria. The host processes data on our behalf (processor under Art. 28 GDPR) on servers in Austria.
When you access the website, the following data are stored in server log files for technical reasons: IP address, date and time of access, page or file requested, amount of data transferred, status code, referring page, and browser and operating system.
- Purpose: delivering the website, ensuring stability and security, defending against attacks.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and error-free operation of the website).
- Retention: log files are stored only for as long as necessary for these purposes and are then deleted automatically. They are not combined with other data or analysed for advertising purposes.
- Abuse prevention: to prevent automated mass submissions to forms and login, we briefly store a pseudonymised check value (hash) of your IP address with the time of the request. It is deleted after 24 hours at the latest (Art. 6(1)(f) GDPR).
The connection to the website is encrypted with TLS (indicated by “https://”).
3. No analytics or advertising services, no third-party content
We do not use analytics, tracking or advertising services (such as Google Analytics or social media plugins). Fonts, images and scripts are loaded exclusively from our own server; no data are transferred to third parties.
4. Cookies
We do not set any cookies on the public pages.
Only when you log in to the Professionals area do we set a technically necessary session cookie (“sanocyn_fb”). It contains a random identifier that keeps you logged in during your visit and is deleted when you log out or close your browser. This cookie is strictly necessary for the service you have explicitly requested and is therefore permitted without consent under Section 165(3) TKG 2021. The legal basis for the associated processing is Art. 6(1)(b) GDPR.
5. Contact form, starter set and partner enquiries
If you contact us using a form or by email, we process the information you provide. Depending on the form, this is: name, email address, phone number, subject and message; for the starter set also practice, address, country, registration number, practice focus and preferred wholesaler; for partner enquiries company, contact person, position, country, website and details of your sales network.
- Purpose: handling your enquiry, sending the starter set, initiating a business relationship.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
- Transmission: the information is sent to us by email (starter set and general enquiries to office@sanocyn.com, partner enquiries to ml@loxotec.com). The form data are not stored on the website. The email mailboxes are operated by our host World4You in Austria. To send the starter set, we pass your name, practice and address to the parcel or postal service we use.
- Retention: we keep your enquiry for as long as necessary to handle it; enquiries that do not lead to a business relationship are deleted no later than twelve months after they have been dealt with. If a business relationship results, statutory retention obligations apply (in particular seven years under Section 132 BAO and Section 212 UGB).
The confirmation of your professional entitlement for the starter set ensures that we supply the products to professionals only.
6. Professionals area for veterinarians
Registration is required for the protected Professionals area. We process: first and last name, practice or clinic, country, registration or licence number, email address, your password (stored only as a cryptographic hash), your language setting, the time of your confirmations, the times of registration, approval and last login, and internal review notes by our team.
- Purpose: verifying your professional entitlement, managing your access and providing professional content (e.g. safety data sheets, studies, webinar recordings) that may only be made available to professionals.
- Verification: our team checks your details manually, in particular against the publicly available registers of the relevant veterinary chamber. No automated decision-making takes place.
- Legal basis: Art. 6(1)(b) GDPR (user relationship for the Professionals area).
- Emails: we only send you messages necessary for access (confirmation of your email address, acknowledgement of receipt, result of the review, password reset). We do not send a newsletter.
- Retention: approved accounts are stored until you request deletion. Unconfirmed registrations are deleted after 30 days, declined registrations six months after the decision.
You can have your account deleted at any time by emailing office@loxotec.com.
7. Recipients and transfers to third countries
Your data are accessible only to the Loxotec GmbH staff responsible for the respective processing, to our host as processor and, for the starter set, to the shipping company. Data are passed on to third parties only with your consent or where we are legally obliged to do so. If you name a preferred wholesaler, we will only contact them after consulting you. No data are transferred to countries outside the EU or EEA.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 6(1)(f) GDPR). Where you have given us consent, you may withdraw it at any time with effect for the future.
To exercise these rights, contact office@loxotec.com. We will respond within one month.
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
9. Obligation to provide data
Providing the data marked as mandatory is necessary to handle your enquiry or to grant access to the Professionals area. Without these details we cannot process your enquiry or grant you access.
10. Changes
We will update this privacy policy if the website or legal requirements change. The version published here applies.