Data specification according to the EU Data Act

Article 3 – Information to users before contract and use

  • Data types: Operational data from devices (e.g., temperature, energy consumption, status codes), current user settings (setpoint, schedule, operating mode), system logs (error codes, update status).
  • Data format: JSON.
  • Amount/frequency: Devices report status every 10 minutes and upon changes; each status update contains approximately 50 data points.
  • Generation: Data is generated automatically in real-time by devices and upon user changes; system logs are created during events (errors, updates, configuration).
  • Storage: Data is stored in Microsoft Azure (region: Northern Europe) with encryption at rest (AES-256) and in transit (TLS 1.2+). Backup is performed in separate EU data centers.
  • Access: Data is exposed via the EbecoConnect app and via REST API, see https://www.ebeco.com/solutions/underfloor-heating/ebeco-open-api. Role-based access control is used.
  • Deletion: Data is automatically deleted upon account deletion or upon request within 30 days.
  • Terms and ownership: Data is owned by the customer. The provider may use data only for operation, support, and improvement. No data is sold or shared with third parties for compensation.

Article 4 – Access to data by users

  • Users have access to their data through the EbecoConnect app and via REST API.
  • Availability: API has 99.7% uptime (monthly) and average response time < 500 ms.
  • Data is updated every 10 minutes or upon changes in the device.
  • Role-based access control is applied.

Article 5 – Access to data for third parties at the user's request

  • Data can be made available via API.
  • Role-based access control ensures that only authorized parties have access.

Article 6 – Rights and limitations for data sharing

  • Data is owned by the customer and may not be sold or shared with third parties for compensation.
  • The provider uses data only for operation, support, and improvement of the service.

Article 9 – Terms and compensation for data sharing between companies

  • No data is sold or shared with third parties for compensation.

Article 33 – Interoperability, interfaces, and service quality

  • Data is made available via REST API with documented access (see link above).
  • API availability 99.7% (measured monthly).
  • Average API response time < 500 ms.

Article 12 – Dispute resolution

  • Disputes arising out of or in connection with this agreement shall be submitted to the courts of Sweden with exclusive jurisdiction.