Privacy Policy
Last updated: 12 August 2026
This page describes what objexlabs.com actually does with data: what the site stores on your device, what our server records, what happens when you write to us, and how the LUMA-6CH waiting list works. Every line below describes the site as it runs today.
Data controller
OBJEX LABS S.R.L., Palermo (PA), Italy. VAT IT07280720827. Contact: info@objexlabs.com, certified email (PEC) objexlabs@pec.it.
What this site stores on your device
The site sets no cookies. It keeps exactly two values in your browser's local storage, and both stay on your device:
- objex_cookie_consent: your answer to the cookie banner. It expires after about six months, then the banner asks again.
- objex-lang: the language you chose (English or Italian), so the site remembers it on your next visit.
Neither value identifies you, and neither is sent anywhere. Fonts, images and scripts are all served from objexlabs.com: while you browse this site, your browser never contacts a third party.
Server logs
Our web server records standard technical data for every request: IP address, browser identifier, the page requested, and a timestamp. These logs exist for security and diagnostics (detecting abuse, debugging errors) and are processed on the basis of our legitimate interest (art. 6(1)(f) GDPR). They are rotated by the hosting provider approximately every 24 hours and are not archived, analysed for behaviour, or used to build profiles. We run no analytics software on this site: no page-view counters, no visitor statistics, no third-party scripts.
If you write to us
The site has no contact form. If you write to info@objexlabs.com or objexlabs@pec.it, we process what you send us (your address and the content of the message) for one purpose: answering you. Legal basis: our legitimate interest in responding to correspondence (art. 6(1)(f) GDPR). Messages are kept for as long as the conversation needs, then as ordinary business correspondence.
LUMA-6CH waiting list
This section describes, specifically, the processing connected to the LUMA-6CH waiting-list signup form. It complements the general policy above; for the waiting list, where the two differ, this section prevails.
Data controller
OBJEX LABS S.R.L., Palermo (PA), Italy. VAT IT07280720827. Contact: info@objexlabs.com, certified email (PEC) objexlabs@pec.it.
What we collect
- Your email address (required).
- Four aggregate answers: which type of user you are (private, installer, system integrator, other), the country where you will install the unit, the kind of place you will install it in (indoors, outdoors near the house, detached structures) and whether the installation already uses KNX or DALI. We ask them for our certification work and for the assessments that feed the final industrialization of the product: they tell us which market it has, where it will ship and how to build it; they are not used to build individual profiles. We ask for the country, not for an address: shipping, when it happens, is handled at order time.
- The interface language, so we write to you in Italian or English.
- Proof of consent: date and time of signup and of confirmation, the version of the consent text you accepted, and the IP address and browser identifier (user agent) recorded when the form was submitted.
By data-minimization choice we collect no name, no phone number and no company data.
Purpose and legal basis
The data is used exclusively to manage the waiting list and write to you about it, including the opening of pre-orders. Legal basis: your consent (art. 6(1)(a) GDPR), given through the required checkbox on the form. A second, separate and optional checkbox covers occasional updates about other OBJEX LABS products: leaving it unticked has no effect on your signup.
The signup uses double opt-in: no address becomes active until you confirm it yourself, by pressing the button on the page reached from the confirmation email. Unconfirmed signups are deleted automatically after 30 days.
Where the data lives and who processes it for us
The list is stored in a database we own, hosted in the European Union. For email delivery only, we use Brevo (Brevo SAS, France, EU servers) as data processor, under a data processing agreement (DPA); confirmed contacts are synced to Brevo to send the list's communications. Our emails contain no tracking pixel and no rewritten links: open and click tracking is disabled. They contain a single image, our logo, served from our own servers: if your mail program loads it, that is a request which lands in the server log like any visit to the site, and we do not use it to measure whether or when you open our emails. The file is one and the same for everyone, so it cannot tell one recipient from another. On this site, your browser never talks to Brevo or to any other third party. No data leaves the European Union and nothing is sold or shared for advertising.
Retention
- Unconfirmed signups: deleted 30 days after the request.
- Confirmed signups: until the waiting list closes (once pre-orders are underway) or until you unsubscribe; with the optional updates consent, until you withdraw it.
- Unsubscribe records: kept for 12 months as proof of the consent's lifecycle, then irreversibly anonymized.
Your rights
You can leave the list at any time, on your own: use the removal form or the link in the emails you receive; the removal is confirmed by email, so nobody else can remove you on your behalf. You also have the right to access your data, rectify it, erase it, receive it in a portable format, restrict or object to the processing, and to lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali). To exercise these rights, write to info@objexlabs.com.
Your rights
For every processing described on this page you have the rights the GDPR provides: access, rectification, erasure, restriction, objection and, where it applies, data portability, plus the right to lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali, gpdp.it). Write to info@objexlabs.com and we answer within the terms the regulation sets. For the waiting list, the fastest route is the self-service removal described above.
Changes to this policy
When this policy changes, the new text is published on this page with an updated date at the top. If a change touches the waiting-list consent wording, the recorded consent version changes with it: what you agreed to stays provable.