Privacy Policy
Last updated: 18 August 2026
This page describes what objexlabs.com actually does with data: what the site stores on your device, what our server records, what happens when you write to us, and how the LUMA-6CH waiting list works. Every line below describes the site as it runs today.
Data controller
OBJEX LABS S.R.L., registered office at Via Saverio Pintabona 8, 90123 Palermo (PA), Italy. VAT IT07280720827. Contact: info@objexlabs.com, certified email (PEC) objexlabs@pec.it.
What this site stores on your device
The site sets no cookies. It keeps exactly two values in your browser's local storage, and both stay on your device:
- objex_cookie_consent: your answer to the cookie banner. It expires after about six months, then the banner asks again.
- objex-lang: the language you chose (English or Italian), so the site remembers it on your next visit.
Neither value identifies you, and neither is sent anywhere. Fonts, images and scripts are all served from objexlabs.com: while you browse this site, your browser never contacts a third party.
Server logs
Our web server records standard technical data for every request: IP address, browser identifier, the page requested, and a timestamp. These logs exist for security and diagnostics (detecting abuse, debugging errors) and are processed on the basis of our legitimate interest (art. 6(1)(f) GDPR). They are rotated by the hosting provider approximately every 24 hours and are not archived, analysed for behaviour, or used to build profiles. We run no analytics software on this site: no page-view counters, no visitor statistics, no third-party scripts.
If you write to us
The site has no contact form. If you write to info@objexlabs.com or objexlabs@pec.it, we process what you send us (your address and message content) to answer you and, where requested, manage a potential business relationship. The legal basis is our legitimate interest in answering correspondence (art. 6(1)(f) GDPR) and, where your request precedes a contract, art. 6(1)(b) GDPR. Our ordinary mailbox currently has no single automatic deletion deadline. We review messages and delete those no longer needed; messages connected with negotiations, contracts, administrative obligations or possible disputes remain for the periods required by law or necessary to protect our rights. You may ask us at any time for information or erasure where no legal obligation or overriding reason requires retention.
LUMA-6CH waiting list
This section describes, specifically, the processing connected to the LUMA-6CH waiting-list signup form. It complements the general policy above; for the waiting list, where the two differ, this section prevails.
Data controller
OBJEX LABS S.R.L., registered office at Via Saverio Pintabona 8, 90123 Palermo (PA), Italy. VAT IT07280720827. Contact: info@objexlabs.com, certified email (PEC) objexlabs@pec.it.
What we collect
- Your email address (required).
- Project answers: user type, country, installation environment, lighting types and expected quantity (required), plus the system currently used and project timing (optional). We ask them to assess the market, product priorities and commercial demand in aggregate; they are not used to build individual profiles. We ask for the country, not an address: shipping, when it happens, is handled at order time.
- The interface language, so we write to you in Italian or English.
- If you reach the LUMA page directly through a campaign link, the UTM parameters in that URL (source, medium, campaign, content and term) and the landing-page path. They are associated with the signup to measure, in aggregate, which campaigns generate confirmed addresses. The site uses no cookies, advertising identifiers, Google Click ID, fingerprinting or browser storage for this attribution, and discards malformed values.
- Proof of consent: date and time of signup and of confirmation, the version of the consent text you accepted, and the IP address and browser identifier (user agent) recorded when the form was submitted.
By data-minimization choice we collect no name, no phone number and no company data.
Purpose and legal basis
The data is used to manage the waiting list, write to you about it, including the opening of pre-orders, and assess campaign effectiveness in aggregate through confirmed signups. Legal basis: your consent (art. 6(1)(a) GDPR), given through the required checkbox on the form. A second, separate and optional checkbox covers occasional updates about other OBJEX LABS products: leaving it unticked has no effect on your signup.
The signup uses double opt-in: no address becomes active until you confirm it yourself, by pressing the button on the page reached from the confirmation email. Unconfirmed signups are deleted automatically after 30 days.
Where the data lives and who processes it for us
The list is stored in a database we own, hosted in the European Union. For email delivery we use Brevo (Brevo SAS, France) as data processor under a data processing agreement (DPA); confirmed contacts are synchronized with Brevo to send waiting-list communications. Brevo may use the subprocessors and transfer mechanisms identified in its contractual documentation and DPA, so we do not claim that every processing operation always remains physically within the European Union. Our emails contain no tracking pixel and no rewritten links: open and click tracking is disabled. They contain one image, our logo, served from our servers: if your email client loads it, the request reaches our server logs like any site visit, and we do not use it to measure whether or when you open an email. The file is identical for everyone and cannot distinguish one recipient from another. While browsing the site, your browser does not communicate with Brevo. We do not sell or share these data for advertising.
Retention
- Unconfirmed signups: deleted 30 days after the request.
- Confirmed signups: until the waiting list closes (once pre-orders are underway) or until you unsubscribe; with the optional updates consent, until you withdraw it.
- Unsubscribe records: kept for 12 months as proof of the consent's lifecycle, then irreversibly anonymized.
Your rights
You can leave the list at any time, on your own: use the removal form or the link in the emails you receive; the removal is confirmed by email, so nobody else can remove you on your behalf. You also have the right to access your data, rectify it, erase it, receive it in a portable format, restrict or object to the processing, and to lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali). To exercise these rights, write to info@objexlabs.com.
Your rights
For every processing described on this page you have the rights the GDPR provides: access, rectification, erasure, restriction, objection and, where it applies, data portability, plus the right to lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali, gpdp.it). Write to info@objexlabs.com and we answer within the terms the regulation sets. For the waiting list, the fastest route is the self-service removal described above.
Changes to this policy
When this policy changes, the new text is published on this page with an updated date at the top. If a change touches the waiting-list consent wording, the recorded consent version changes with it: what you agreed to stays provable.