Devices manufactured by BleBox – both Wi-Fi controllers and Wi-Fi sensors – generate data covered by EU Regulation 2023/2854 (Data Act).

What data is generated by the devices

• Basic data: device configuration, current device status.
• Sensor data: values recorded by sensors.
• Event data: information about real-world events registered by the device at the user’s request, e.g. exceeding a defined temperature threshold, pressing a button connected to the device.

How much data is generated and how long it is available

• Basic data: generated with every change of state or configuration; available only in real-time.
• Sensor data:
  • when using the manufacturer’s cloud: generated every 5 or 15 minutes; available for one year (most recent in full resolution, older aggregated into hourly values),
  • real-time – available on user request,
  • when integrated with another cloud – frequency and retention depend on the provider.
• Event data: generated for every event defined by the user as a trigger in the device settings. At the user’s request, they may be sent to the manufacturer’s notification system, where they are stored for at least one year. If the user configures sending this data to another system, its retention depends on the chosen provider.

Estimated bandwidth usage when using the manufacturer’s cloud: 20–60 MB/month.

Where the data goes

• To the manufacturer’s cloud – only if the cloud option is enabled (enabled by default, the user can disable it).
• To the mobile application – only during interaction of the device with the app.

How the user can access the data

• Basic data: according to the documentation
  technical.blebox.eu.
• Sensor data:
  • when using the manufacturer’s cloud – via the export option in the mobile application,
  • when using the local network API – according to the documentation
    technical.blebox.eu,
  • through actions defined in the device that send values to external systems.
• Event data: through actions defined in the device that send values to external systems.

Data formats

• Basic data: JSON.
• Sensor data:
  • when using the manufacturer’s cloud – CSV/XLSX + metadata in JSON,
  • when using the local network API – JSON,
  • in the case of actions sending values – raw data.
• Event data: raw data.

Infrastructure and data processing when using the manufacturer’s cloud

• Data processed in the manufacturer’s cloud is stored exclusively on servers located within the European Union.
• Data transmission is encrypted, with user authentication and mutual authentication of servers.
• Infrastructure providers only supply server resources and have no access to the content of the data.
• Data requiring retention is subject to backup mechanisms, ensuring its security and availability. Data available only in real-time is stored in volatile memory.
• Depending on the mobile platform and the manufacturer of the user’s mobile device, part of the data (e.g. related to notifications) may be processed on infrastructure of service providers linked to that platform. In such cases, the data processing location may be outside the European Union. Detailed information about data processing rules is available from the supplier of the mobile device on which the application is running.

Integrations with partner systems

• The manufacturer provides the option of cloud-to-cloud integration with partners (e.g. voice assistant providers).
• Integration is always initiated by the user, who during the process is informed about granting the partner access to their devices.
• Once integration is enabled, data is transferred in real time to the partner chosen by the user.
• The user can terminate the integration at any time from the application menu.

Access and sharing

• The user has full freedom in using and sharing data generated by their devices.
• The manufacturer has access to data only when the manufacturer’s cloud services are used.
• The user can forward data to external systems:
  • Basic data: using the local network API; a reference open-source connector implementation is available at
    github.com/blebox/blebox_uniapi,
    based on the documentation
    technical.blebox.eu.
    Any other implementation based on this documentation can also be used, including the implementation of integration with another cloud provided by an external entity selected by the user on their own.
  • Sensor data:
    • when using the manufacturer’s cloud – export in formats suitable for external systems (CSV, JSON),
    • when using the local network API – same as for basic data,
    • through actions defined in the device that send values to external systems.
  • Event data: through actions defined in the device that send values to external systems.