Compliance with the EU Data Act by Spacewell Energy
- Context and Overall Commitment
- Raw Data Access Tools
- Technical Description of Download Methods
- Other Obligations Arising from the Data Act
- Jurisdiction to which the Spacewell Energy platform is subject
- International transfers
- Switching Fees and EarlyTermination Penalties
1. Context and Overall Commitment
The European Union’s Data Act is a new horizontal regulation designed to enhance the data economy and ensure a competitive data market. Essentially, this law establishes access and usage rights over data generated by connected products and related services, although, as far as Spacewell Energy is concerned,enables organizations to switch cloud service providers (SaaS, PaaS, IaaS) seamlessly and without technical or contractual barriers, as well as access to raw data. Among its objectives, the Data Act seeks to ensure that users (whether consumers or businesses) have greater control over the data they generate and that they can access, share, and reuse that data for their own benefit. At the same time, it introduces measures to increase fairness and competition in the cloud market, protecting companies against abusive contractual clauses imposed by dominant providers and fostering interoperability that allows the free flow of data among different data‑processing services. (The Data Act was published in December 2023 and will apply from 12 September 2025.)
Spacewell Energy (formerly known as the DEXMA platform) recognizes the importance and scope of the Data Act for its cloud‑based energy‑management service. As a SaaS provider that stores and processes its customers’ energy data, Spacewell Energy is firmly committed to complying with all obligations imposed by this regulation from technical, organizational, and legal standpoints. In practice, this means implementing the tools and processes necessary to ensure that the customer owns their data and can access it freely, facilitating data portability and switching (changing provider) whenever requested, and ensuring fair and transparent contractual conditions. Internally, Spacewell Energy has established a Data Act adaptation plan that covers technical measures (for example, enabling platform mechanisms for accessing and transferring data in open formats), organizational measures (procedures to handle data‑access requests and support users in migrating to other services), and legal measures (review of contractual clauses, data policies, and guarantees against abuse). All of this reflects Spacewell Energy’s proactive commitment to ensuring compliance with the Data Act and the protection of its customers’ data rights.
2. Raw Data Access Tools
With the aim of empowering customers over their data, Spacewell Energy provides various tools for accessing the raw readings stored on the platform. These tools allow customers to obtain all original energy data collected by the platform, either manually through the interface or automatically via integrations:
Export to Excel from the platform
The Spacewell Energy (Dexma) interface offers, within its analysis modules, a straightforward function for exporting raw data to Excel. For example, from screens such as Consumption or Advanced Analysis, the user can download the data displayed (graphs and tables) to an Excel file with a single click on the Export to Excel option. This manual export option provides the customer with a structured file containing their readings (for example, energy consumption by time interval), ready to be used outside the platform.
Automated access via the public API
Additionally, Spacewell Energy offers a public REST API that allows customers to programmatically access their data. Through this API, a customer (or a third party authorized by them) can systematically extract all raw device readings, integrating them with other applications or storing them locally. The API uses an authentication mechanism based on a unique security token per application/account to secure access. Once this token is obtained (by previously registering an application on the platform), the customer can make HTTPS requests to the various data endpoints to query their readings. For example, there is a main readings endpoint that allows retrieval of all data from a given device and parameter within a specific time range (see the technical section below).
Spacewell provides detailed documentation for this public API on its developer portal, including the full list of available endpoints for data extraction/insertion and step‑by‑step usage guides. Thanks to this API, customers can automate data downloads (for example, set up periodic synchronizations of raw readings), which is a recommended best practice to maximize data portability.
References:
Bulk Account Setup Export
In addition to energy‑consumption readings, Spacewell Energy offers a specific feature to export the structural configuration of the account in bulk. This option, accessible from the administration menu (Settings → Preferences → Bulk Account Setup), generates an Excel file that includes all the customer’s active configuration: locations, connected devices, supply points, and energy contracts.
This tool is especially useful for internal audit processes, configuration replication, structural analysis, or migration to another service provider. Being in Excel format, the data are easily reusable and allow the customer to comprehensively review their configuration in a portable, machine‑readable format.
Reference:
Help article on bulk configuration
Methods to obtain API access tokens
To interact with the Spacewell Energy public API, customers must obtain a permanent access token (x‑dexcell‑token), which acts as a secure, authorized credential for each registered account or application. There are two main methods to generate this token, depending on the required access level:
Through the Access Token App (read‑only):
- Customers can install the Access Token app directly from the platform’s App Market.
- Once installed, the token can be copied by going to Settings → Access Token.
- This token allows making read‑only GET calls to the API endpoints to retrieve energy data without developing a custom app.
By registering a custom application (read and write):
- Users with administrator permissions can register a custom application from the developer portal.
- During the installation process (handshake), the platform returns the permanent access token (x‑dexcell‑token).
- This option permits both reading and writing or configuration operations through the v3 API.
Both methods are fully documented in the developer guide and ensure that advanced users and external integrators alike can securely connect their systems in accordance with regulations.
References:
Guide to obtain a token with an application
3. Technical Description of Download Methods
Below is a brief description of the main methods for downloading or extracting raw data, both from the graphical interface and via the API, with some technical details of their operation:
Export from the Interface (Excel)
Navigation to the analysis section: The user must enter one of the Spacewell Energy analysis modules where the data they wish to export are shown. There they can select the device or group of devices, the measurement parameter (for example, active energy, temperature, etc.), and the date range they wish to query, as well as the data resolution/frequency (for example, hourly, daily, monthly, etc.).
Export to Excel option: Once the desired information is displayed on screen (in the form of a graph and/or data table), the user clicks the “Export to Excel” icon that appears in the analysis block. This action automatically generates an Excel file containing all raw data for the selected period, devices, and parameters. For example, in the Analysis module the export option allows downloading the graph and the summary table displayed in a .xlsx file. Likewise, on the Consumption screen there is an option to export the raw energy‑consumption data to a spreadsheet, which includes the numerical values for each time interval along with their timestamps.
File content and format: The downloaded Excel file typically contains a table with date/time columns and the measured parameter values for each selected device. The data are presented in a structured, readable manner using a common format (spreadsheet) that the customer can open with standard applications (Excel, Google Sheets, etc.) for further analysis or to import into other systems. This open, machine‑readable format meets the Data Act requirement to provide data in commonly used formats that facilitate reuse.
Bulk export from Bulk Account Setup
Access and operation: From Settings → Preferences → Bulk Account Setup, users can download an Excel file with the entire structural configuration of their account: locations, devices, data channels, contracts, supplies, etc. This functionality not only allows an audit or general query of the account structure but also facilitates migration or consolidation processes in other systems.
Generated file format: The file contains multiple sheets breaking down the different components configured within the account. This comprehensive visibility enables users to have an exact copy of their configuration, which is especially useful to prepare migration to another provider without loss of context or dependencies.
Automated Access via the Public API
Obtaining credentials (token): To use the Spacewell Energy API, requests must first be authenticated. The platform follows a token‑based authorization scheme: each customer (account) can register an “application” in Spacewell Energy, which generates a permanent access token (x‑dexcell‑token) associated with their account (support.dexma.com). This token acts as a secure credential and must be included in the headers of every API request to authorize it.
There are two ways to obtain this token:
- Access Token App: The user installs the app from the Apps Market, goes to Settings → Access Token, and copies the displayed token. This token allows authentication for read‑only GET calls.
- Custom registered application: The usual procedure involves registering as a developer, creating the application on the portal (by a user with SuperAdmin permissions for the account) and installing the application in the account to receive the security token. All this is done only once; thereafter the obtained token serves for all data queries. (The online technical documentation details the step‑by‑step process for registering and installing applications.)
Building the data request: Once the token is obtained, the customer can make HTTPS GET calls to the API endpoints to obtain raw data. The main endpoint for device readings is:
https://api.dexcell.com/v3/readings
Query parameters are added to this endpoint to define exactly which data are to be extracted. The most important parameters include: device_id (identifier of the device from which to obtain readings), parameter_key (key of the parameter or magnitude to query, for example, EACTIVE for active energy), resolution or desired data frequency (for example, H for hourly data, D for daily, M for monthly, etc.), and start (from) and end (to) time ranges to delimit the data period. For example, a call to obtain daily electric‑consumption readings for a device could be constructed as follows:
GET https://api.dexcell.com/v3/readings?device_id=12345¶meter_key=EACTIVE&operation=DELTA&resolution=D&from=2025-01-01T00:00:00&to=2025-01-31T23:59:59
In this example, device_id=12345 identifies the device; parameter_key=EACTIVE indicates that active‑energy data are requested; operation=DELTA specifies that consumption readings (delta accumulated between readings) are requested; resolution=D asks for daily data; and the from/to range delimits January 2025. The API response would include all daily energy readings for that device in January, with timestamps and numerical values, usually in structured JSON format.
Reception and use of the data: When the request is executed with the correct token, the API returns a set of raw data that the customer can process freely. For example, the JSON response will contain a series of timestamps along with the measured value in each interval of the requested resolution. The customer can then dump this result to their own CSV/Excel file, load it into a database, or integrate it into another application. It is worth noting that the API allows extracting large volumes of data efficiently and with filtering, making it ideal for automating periodic backups of readings or for synchronizing Spacewell Energy data with third‑party systems in near real time. In addition to the general readings endpoint, there are other endpoints for more specific data (for example, electricity costs, location data, etc.), all documented on the developer portal. Taken together, this method guarantees permanent, on‑demand access to raw data, fully satisfying the Data Act’s portability requirements.
More information at:
4. Other Obligations Arising from the Data Act
In addition to providing access to raw data, Spacewell Energy complies with a series of additional obligations derived from the Data Act aimed at ensuring effective portability, cooperation during provider switching, and fairness in its contractual relationships. These obligations and how Spacewell Energy addresses them are summarized below:
Data portability and assistance in switching:
Should a customer decide to migrate their data to another energy‑services provider, Spacewell Energy will provide all necessary tools and technical cooperation to achieve a smooth transition. This includes making all raw data available to the user or the new provider in standard, structured formats as described (via exports or API), as well as providing technical assistance to resolve questions or issues during the migration. Spacewell’s commitment is to eliminate barriers to switching: no technical or contractual limitations are imposed that prevent the customer from taking their data, complying with the principle of free choice of provider promoted by the Data Act. In fact, the regulation requires data‑processing service providers to facilitate switching to another provider or to the end user themselves, actively cooperating in the process, and Spacewell Energy fully adopts this obligation.
Maintaining access during migration:
Spacewell Energy ensures service continuity during the switching process so that the customer can continue accessing their data for the time needed to complete the migration. In practice, if a customer notifies that they are switching platforms, Spacewell will not immediately cut off access to the account but will keep the data available for a reasonable grace period (aligned with regulatory provisions—for example, a transition period of up to 30 days) so that the customer can extract or transfer all their information without undue haste. The possibility of temporary parallel use (parallel run) is even contemplated: the customer could use Spacewell Energy and the new service simultaneously during the transition, ensuring no interruption in operations. This business‑continuity during switching is an explicit obligation under the Data Act, intended to prevent data loss or downtime, and Spacewell complies with it strictly.
Security and deletion of data post‑migration:
Throughout the data export or transfer process, Spacewell Energy maintains strict security measures to protect data integrity and confidentiality. Any data exchange with the customer or a new provider is conducted through secure channels (for example, authenticated downloads, token‑based API) to prevent unauthorized access. Likewise, once the customer has completed their migration and so requests, Spacewell commits to securely delete the customer’s data from its systems. In this way, the Data Act requirement to delete data once the service ends is fulfilled, avoiding unnecessary retention of user information. It is worth mentioning that until deletion occurs, the customer’s data remain subject to the same security and privacy protections as during the contract term.
Web transparency and fair contractual conditions:
Spacewell Energy maintains a policy of total transparency regarding data‑access and portability capabilities. Likewise, Spacewell has reviewed its contractual clauses (service terms of use) to align them with the Data Act, removing or avoiding any term that could be considered abusive or that could pose an obstacle to data access or portability. The conditions offered to customers concerning data extraction and switching are reasonable and non‑discriminatory: for example, no excessive costs (ideally, none) will be imposed for providing data to the customer or a new provider. Clear policies have also been established, both internally and for customers and partners, that set out Spacewell’s commitments under the Data Act, including prior contractual information about the user’s rights regarding access to their data, portability, and any associated costs (always fair and proportionate). In short, Spacewell Energy ensures a contractual and communicative framework that guarantees transparency, fairness, and trust for users, as required by the regulation.
In conclusion, Spacewell Energy complies with the EU Data Act through a comprehensive approach: it provides its customers with effective means to access and extract their raw data at any time, actively assists in the portability of such data and in possible provider changes, protects information security during these processes, and maintains transparent and fair contracts and policies. With these technical, organizational, and legal measures, Spacewell Energy demonstrates its commitment to respecting and facilitating users’ new digital rights over their data, positioning itself as a platform prepared for and aligned with the principles of the European Data Act.
5. Jurisdiction to which the Spacewell Energy platform is subject
The provider of the Spacewell Energy Platform is Spacewell Spain. The provider is located in Spain, therefore the jurisdiction to which Spacewell Energy is subject is Spanish.
6. International transfers
In order to prevent access or international transfers to public administrations that may conflict with EU law, Spacewell has adopted the technical, organizational, and legal measures detailed below.
Spacewell Energy relies on its ISO 27001:2013certified Information Security Management System (ISMS)—which covers encryption, access control, incident response, and supplier due diligence—to mitigate unauthorized access or international transfers that may conflict with EU law. In addition, we are finalizing a documented Government Data Request Procedure, aligned with Articles 27–32 of the EU Data Act, which will ensure each request is legally reviewed and narrowed or refused when necessary.
In any case, Spacewell has internal security policies that ensure compliance with the security standards of the EU Data Act.
In addition, with regard to data that may be considered personal data, Spacewell has taken the measures detailed in its privacy policy. Likewise, with regard to non-personal data, upon request or decision by any administrative authority of a third country requesting non-personal data, Spacewell will only grant access to such data in one of the following cases:
- There is an international agreement or treaty that allows it.
- The third country explains the reasons and proportionality of the decision or judgment, and the decision or judgment is specific and sufficiently concrete and reasoned in relation to the data requested.
- Where applicable, the recipient's reasoned objection is submitted to a competent court in the third country.
- The competent court of the third country that issued the decision or judgment or reviewed the decision of an administrative authority is empowered, under the law of the third country, to take due account of the relevant legal interests of the provider of the data protected by Union law or by the national law of the relevant Member State.
7. Switching Fees and EarlyTermination Penalties
Spacewell Energy does not impose any fee for switching to another provider, exporting data, or terminating the service early. Early termination is permitted only under the specific circumstances described in the Agreements; however, it entails no financial penalty.
Likewise, the migration of data is free of charge as long as the customer (or the destination provider) performs the export via the standard Excel download or public API channels described above. Should the customer request professional services—such as the development of bespoke middleware, custom integrations, or bulk scripting—those services will be scoped and quoted separately as professional services work. This approach aligns with our partner agreements and with the EU Data Act’s principle of fair, nondiscriminatory access to data