Privacy policy

1. Who is responsible?

Biber Solar, Patrick Biber
Hermann Hiltbrunner-Weg 24, 8713 Uerikon, Switzerland
Email: contact@biber.solar

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP).

2. Visiting the websites

When you open one of our pages, the web server writes a technical log: IP address, time, requested address, status code and browser identifier. We need it to detect faults and attacks. The log is overwritten automatically, usually after a few weeks, and is not analysed to identify people.

homi.solar and biber.solar set no cookies. Fonts, images and scripts are served from our own server; no data is sent to Google, Facebook or similar services when you open a page.

3. Web analytics (Umami)

On homi.solar and biber.solar we count visits with Umami, a web analytics tool that we run ourselves on our server. It shows us which pages are read, where visitors come from (e.g. a search engine or a link) and whether the sign-up form is used – never who you are.

• No cookies, nothing is stored on your device.
• Your IP address is not stored. When counting, it is only used to determine the country.
• We store: page requested, referring page, country, device type, operating system, browser, screen size, language and individual actions (e.g. «sign-up sent»). Visits are grouped using an identifier that changes daily; recognising you across days is not possible.
• The data never leaves our server and is deleted after 25 months.
• If «Do Not Track» is enabled in your browser, you are not counted.
• Pages with a login (customer accounts, app) have no web analytics.

4. Sign-up and enquiries via homi.solar

With the sign-up form you send us your name, email address and, optionally, phone number, town, your role (e.g. private, business, investor), details of your devices and a message. We store this on our server and receive it by email so we can contact you and prepare your homi.

We do not pass the details on. We delete them as soon as they are no longer needed, at the latest two years after the last contact – unless you become a customer (then section 6 applies) – or earlier at your request.

5. Negative price alert by email

For the free alert we store your email address and the time of your confirmation. You only receive alerts once you click the link in the confirmation email (double opt-in). Every alert contains an unsubscribe link; after that we delete your address.

6. Customer account and app

This applies to all homi pages with a login, now and in future – every address name.homi.solar and home.biber.solar.

Sign-in

• The email address of everyone with access to a homi.
• Sign-in code by email: valid for 15 minutes, only held encrypted (as a checksum) and only in memory.
• Passkey (sign-in with fingerprint or face recognition): we only store the public key and the name of the device. Fingerprint, face and private key stay on your device.
• Session cookie «__Host-homi»: technically necessary to keep you signed in. For this we store a checksum of the cookie, the time of last use and the browser identifier. Valid for 180 days, deleted when you sign out.
• home.biber.solar is additionally protected by a password that your browser stores.

Energy data

homi reads your system's measurements (solar output, consumption, grid import and export, and on request battery, heat pump, charging station or smart plugs) and combines them with tariffs, market prices and weather data. The values are stored in 10-minute steps and kept for 5 years so you can see histories, reports and analyses. When homi switches devices (e.g. the inverter or a plug), it logs the time, the action and what triggered it. For the energy advisor, homi estimates from your total consumption which appliances run when (e.g. heater, hob, dishwasher), using the list of appliances you provide. This estimate is computed only on your homi server and is not passed on.

Notifications

• Push notifications from the app: we store your device's delivery address, the encryption keys, the browser identifier and the topics you chose. You can unsubscribe in the app at any time.
• Emails (sign-in codes, weekly report, notices) to the addresses on file.

Retention

We keep account data for as long as your homi exists. When the contract ends, we delete it within 30 days; encrypted backups are then overwritten in the normal cycle. On request you receive your energy data as a file beforehand.

7. Third-party services

• Email delivery: Proton AG, Geneva (Switzerland).
• Push notifications are delivered via your browser's service (Google, Apple, Mozilla or Microsoft, partly in the USA). The content is end-to-end encrypted; these services only see that a message is going to your device.
• Weather data for the solar forecast is requested by our server from Open-Meteo. Only the approximate coordinates and orientation of the system are sent, no name and no address.
• Market prices, exchange rates and reference market prices are loaded by our server from Energy-Charts (Fraunhofer ISE), the Swiss National Bank and the Swiss Federal Office of Energy. No data about you is sent.

Beyond that, we only pass on personal data if the law requires us to.

8. Security

All connections are encrypted (HTTPS). The server is located in Switzerland, backups are encrypted and also stay in Switzerland. Only Patrick Biber has access to the data.

9. Your rights

You can request information about your data at any time, have it corrected or deleted, withdraw consent and ask for your data in a common format. Just write to contact@biber.solar. If you are not satisfied with our answer, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

If our services change, we update this policy. The version published here applies.