Privacy Policy

When you join the lit family, you entrust us with your data, and we are committed to managing it to the best of our ability. For this reason, we have drafted this privacy policy so that you will always know what data we collect, how it will be used, and how we will protect it. In case you need clarification, you can contact us at info@itslitbox.com.

Owner of the Data Processing: Helios Domotics S.r.l.
eMail address of Data Controller: info@itslitbox.com

Types of Data Collected

Among the Personal Data collected by this Application, either independently or through third parties, are: Tracking Tools; session duration; mouse movements; Usage Data; last name; email; first name.

Full details on each type of data collected are provided in the dedicated sections of this Privacy Policy or through specific informational texts displayed prior to the collection of such data. Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Application. Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to provide them, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation. Users in doubt about which Data are mandatory are encouraged to contact the Data Controller.

The possible use of Cookies - or other tracking tools - by this Application or the owners of third party services used by this Application, where not otherwise specified, has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and warrants that he or she has the right to communicate or disseminate it, releasing the Owner from any liability to third parties.

Method and place of processing of collected Data

Mode of treatment

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other parties such as those who work with us, any organization that supports our services that you use, our payment processors, Credit Reference Agencies, and Analytical, Know Your Customer (KYC) and Information Security Service Providers may have access to the Data.

They may also be appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.

Legal basis for processing

The Owner processes Personal Data related to the User if one of the following conditions exists:

  • the User has given consent for one or more specific purposes; Note: In some jurisdictions, the Data Controller may be authorized to process Personal Data without the need for the User's consent or another of the legal bases specified below, as long as the User does not object ("opt-out") to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
  • processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
  • processing is necessary to fulfill a legal obligation to which the Controller is subject;
  • the processing is necessary for the performance of a task of public interest or the exercise of public authority vested in the Controller;
  • processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.
  • However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.

Location

The Data are processed at the Holder's operational offices and at any other location where the parties involved in the processing are located. For more information, please contact the Data Controller. The User's Personal Data may be transferred to a country other than the country where the User is located. To obtain more information about the location of the processing, the User may refer to the section on Personal Data processing details.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization under public international law or formed by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.

L’Utente può verificare se abbia luogo uno dei trasferimenti appena descritti, esaminando la sezione di questo documento relativa ai dettagli sul trattamento di Dati Personali o chiedere informazioni al Titolare contattandolo agli estremi riportati in apertura.

Conservation period

Data are processed and kept for the time required by the purposes for which they were collected.

So:

  • Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of that contract is completed.
  • Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.

When processing is based on the User's consent, the Controller may retain Personal Data longer until that consent is revoked. In addition, the Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of this period the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

Purposes of the Processing of Collected Data

User Data is collected to enable the Owner to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes: Heat mapping and session logging, Statistics, Accessing accounts on third party services, Tag management, Viewing content from external platforms, and Contacting the User.

To obtain detailed information on the purposes of processing and the Personal Data processed for each purpose, the User may refer to the section "Personal Data Processing Details."

Facebook permissions required by this Application

This Application may require certain Facebook permissions that allow it to perform actions with the User's Facebook account and collect information, including Personal Data, from it. This service allows this Application to connect with the User's account on the social network Facebook, provided by Facebook Inc.

For more information on the following permits, please refer to the Facebookprivacy policy.

The required permits are as follows:

Background information

The basic information of the User registered on Facebook which normally includes the following Data: id, name, image, gender and language of location and, in some cases Facebook "Friends". If the User has made additional Data publicly available, the same will be available.

Access to private data

Allows access to private data of the User and friends

Details of the processing of Personal Data

Personal Data are collected for the following purposes and using the following services:

  • Accesso agli account su servizi terzi
    • Accesso all’account Facebook
      Permessi: Accesso ai dati privati
  • Contattare l’Utente
    • Modulo di contatto
      Personal datas: surname; name; mail
  • Mailing list o newsletter
    Dati Personali: cognome; nome; mail
  • Tag manager

    • Google Tag Manager
      Personal Data: Usage Data; Tracking Tools
  • Heat mapping and session recording
    • Microsoft Clarity
      Personal Data: session duration; mouse movements; Tracking Tools
  • Statistics
    • Google Analytics e Google Analytics con IP anonimizzato
      Personal Data: Usage Data; Tracking Tools
  • Displaying content from external platforms
    • Google Fonts
      Personal Data: Usage Data; Tracking Tools

User Rights

Current European privacy regulations (General Data Protection Regulation) give you the following rights with respect to your data:

  1. Right of access: you have the right to obtain information regarding the type of processing concretely carried out on your data; any third parties to whom it has been communicated and the manner in which it is stored. You may also request a copy for which you will be required to reimburse any costs incurred for compliance.
  2. Right of rectification: you have the right to request and obtain rectification of data if they have been transcribed or reported inaccurately or incompletely.
  3. Right to data deletion: you have the right to request and obtain the deletion of the personal data you have provided.
  4. diritto alla limitazione al trattamento dei dati: l’utente ha il diritto di richiedere ed ottenere la limitazione parziale e/o cancellazione parziale dei dati.
  5. Right to portability: you have the right to receive personal data in a format commonly used for automated transmission in order to be able to send it to another party.
  6. Right to object to processing: the user has the right to object at any time to the processing of personal data and request its termination. If the processing is no longer necessary or the opposition is well-founded, Helios Domotics S.r.l. will give a positive response to the request. We would like to remind you that this right does not exist in case the user has provided the data in order to conclude an agreement or to perform services resulting from an agreement already in place with the company.
  7. The user has the right to partially and/or fully revoke the consent previously given to use.

Details of the right to object

When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or in pursuit of a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are advised that if their Data were processed for direct marketing purposes, they may object to the processing without providing any reasons. To find out whether the Data Controller processes Data with direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise rights

To exercise the User's rights, Users may address a request to the contact details of the Controller indicated in this document. Requests are filed free of charge and processed by the Holder as soon as possible, in any case within one month.

Cookie Policy

This Application makes use of Tracking Tools. To learn more, the User can consult the Cookie Policy.

More information about the treatment

Litigation defense

The User's Personal Data may be used by the Owner in legal proceedings or in the preparatory stages to its possible establishment for the defense against abuse in the use of this

Application or related Services by the User. The User declares that he/she is aware that the Data Controller may be obliged to disclose the Data by order of public authorities.

Specific disclosures

Upon the User's request, in addition to the information contained in this Privacy Policy, this Application may provide the User with additional and contextual disclosures regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services used by it may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User IP address.

Information not included in this Policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Risposta alle richieste “Do Not Track”

Questa Applicazione non supporta le richieste “Do Not Track”. Per scoprire se gli eventuali servizi di terze parti utilizzati le supportino, l’Utente è invitato a consultare le rispettive Privacy Policy.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, if possible, on this Application as well as, if technically and legally feasible, by sending a notification to Users through one of the contact details it has. Therefore, please consult this page frequently, referring to the date of last modification indicated at the bottom.

If the changes affect processing whose legal basis is consent, the Owner will re-collect the User's consent, if necessary.

Last update: 27 ottobre 2022