Data in HARDWARIO Cloud

This page gives the information that the Data Act (Regulation (EU) 2023/2854, Articles 26 and 28) requires from a provider of a data processing service, for HARDWARIO Cloud at https://hardwario.cloud. The contractual terms are the HARDWARIO Cloud Terms of Service HLN.261009.02 (clause 6) and the Data Processing Agreement HLN.261009.03.

Data location and jurisdiction

HARDWARIO Cloud and its backups run on servers of DigitalOcean, LLC in its data centre in Frankfurt am Main, Germany. The infrastructure is subject to the law of the European Union and of Germany. DigitalOcean, LLC is a company of the United States of America. The service is provided by HARDWARIO a.s., Liberec, Czech Republic, under Czech law.

HARDWARIO backs up the service weekly and keeps each backup for 4 weeks, in the same data centre.

Access by public authorities outside the EU

To prevent access to customer data by public authorities of a country outside the European Union that would conflict with European Union or Member State law, HARDWARIO:

• processes customer data only in the European Union,
• discloses customer data to a public authority of a country outside the European Union only where an applicable legal ground under European Union or Member State law requires it, such as an international agreement on mutual legal assistance,
• examines each such request for its lawfulness and discloses no more than the request lawfully requires,
• informs the customer of the request before complying with it, unless that would undermine the purpose of a lawful investigation.

Data you can export

Each category below can be exported at any time through the REST API, by the customer’s own API keys; the paths are relative to /v2/spaces/{space_id}. On request (ask@hardwario.com) HARDWARIO provides a complete export of all categories in JSON or CSV within 30 days, free of charge.

Not exportable, because it is HARDWARIO’s trade secret or would put the security of the service at risk: operational logs, monitoring and security data, and the source code and internal configuration of the service.

Data structures, formats and standards

Switching to another service

1. Notice. Give notice of termination by e-mail to ask@hardwario.com (the notice period is one month) and say whether you are switching to another provider, moving the data to your own infrastructure, or want the data erased.
2. Export. Export the data through the API at any time, or ask for the complete export in JSON or CSV.
3. Transitional period. After the notice period, a transitional period of 30 days follows, which you can extend once. The service keeps running and HARDWARIO assists you and the new provider.
4. Retrieval. After the transitional period you have 30 days of read-only access to retrieve your data.
5. Erasure. HARDWARIO then erases your data within a further 30 days; backups are overwritten within their 4-week cycle. On request HARDWARIO confirms the erasure in writing.

HARDWARIO charges nothing for switching, data export or erasure.

Known limitations. Device messages are kept for 12 months unless the order states a different period, so older messages can no longer be exported. Devices send their data to HARDWARIO Cloud over the FLAP protocol. For devices to report to another service, that service must implement this publicly documented protocol, or the devices need a firmware or configuration that targets the new service.

Sub-processors

Current list of the sub-processors under the Data Processing Agreement HLN.261009.03 (clause 6). HARDWARIO announces an intended change by e-mail to the account owners at least 30 days in advance.

Signing in with a Google or Microsoft account is a service of Google and Microsoft, which act as separate controllers, not as sub-processors.

Contact

Requests for export, switching or erasure, and questions about this page: ask@hardwario.com.