OpenSolar Pty Ltd User Terms and Conditions and Privacy Policy




User Terms and Conditions

This Agreement was last modified on 18 July 2023.

These User Terms and Conditions describes the terms and conditions which you accept by using the OpenSolar Site or the OpenSolar Services. We have incorporated by reference some linked information. The capitalised words in these User Terms and Conditions have the meanings set out in Schedule 1 of these User Terms and Conditions.

1. Scope

Before using the OpenSolar Site and the OpenSolar Services, you must read and accept all of the terms in, and linked to, these User Terms and Conditions and should review all OpenSolar Site policies, as amended from time to time. By accepting these User Terms and Conditions as you access our OpenSolar Site, you agree that these User Terms and Conditions will apply whenever you use the OpenSolar Site, or when you use the tools we make available to interact with the OpenSolar Site. Some OpenSolar Sites and OpenSolar Services may have additional or other terms that we provide to you when you use those services. If you do not want to agree to these User Terms and Conditions, you must not access or use our OpenSolar Site.

2. Overview

The OpenSolar Site is an online venue where Users can share information, products and services primarily related to distributed energy. Users may include professional installers of distributed energy systems, providers of services to those installers and distributed energy customers.

By accessing the OpenSolar Site, you agree to the terms set out in this Agreement. We may amend these User Terms and Conditions and any linked information from time to time by posting amended terms on the OpenSolar Site. We will use reasonable endeavours to notify you if there amendments that may have a material adverse effect on your use of the OpenSolar Site or the OpenSolar Services, however for completeness we encourage you to check our website periodically to ensure you are aware of our current User Terms and Conditions. Any changes to the dispute resolution provisions set out in clause 28 (Law and Forum for Legal Disputes) will not apply to any disputes for which the parties have actual notice of on or before the date the change is posted on the OpenSolar Site. Your continued use of the OpenSolar Site following the posting of revised User Terms and Conditions means that you accept and agree to the changes.

We are not a party to any contractual agreements between Users of the OpenSolar Site, we merely facilitate connections, and the provision of goods, services and solutions between Users.

We may, from time to time, and without notice, change or add to the OpenSolar Services or the OpenSolar Site or the information, products or services described in it. We may seek feedback, comments and suggestions from Users and third parties in relation to the OpenSolar Site and the OpenSolar Services and we may modify or change certain features of the OpenSolar Site and the OpenSolar Services based on that feedback. Our goal is to improve the OpenSolar Site and the OpenSolar Services through User feedback and comments, however, we do not undertake to keep the OpenSolar Site updated. We are not liable to you or anyone else if any error occurs in the information on the OpenSolar Site or if that information is not current.

3. Eligibility

You will not use the OpenSolar Site if you:

  1. are not able to form legally binding contracts (for example, if you are under the age of consent under the laws of Australia or in your jurisdiction);

  2. a person barred from receiving and rendering services under the laws of Australia or other applicable jurisdiction; or

  3. are suspended from using the OpenSolar Site.

Users must have an Account. All User Accounts are associated with individuals. First time users will be required to create their login credentials. A User must not share their login credentials and any relevant passwords with any other person (including any other User). The individual associated with the Account will be held responsible for all actions taken by the Account, without limitation.

All Users may be subject to the user verification procedures.

Users may be affiliated to or connected with a business or company on the OpenSolar Site, and may provide business or company details which are associated with the User’s Account. This business or company will be treated as an Associated Business associated with that User for the purposes of managing customer information. Users acknowledge and agree that where a business or company details are associated with their Account as an Associated Business, this Agreement is a contract with the User as an individual (not the business or company) and Users remain solely responsible for all activity undertaken in respect of their Account.

Where a User enters customer information and any data connected with that customer onto the OpenSolar Site, and that User is engaged as an employee or contractor with an Associated Business, that User will need to comply with its existing contractual obligations between it and its employer or client which is the Associated Business (including any obligations with respect to maintaining the confidentiality of customer lists and customer details and complying with the Associated Business' obligations as a data controller of that customer information (where applicable)).

We may, at our absolute discretion, refuse to register or cancel the registration of any person or entity as a User.

You cannot transfer or assign any rights or obligations you have under this Agreement without prior written consent.

We may designate certain User Accounts as ‘administrator’ accounts for a business account where Users provide business or a company details. The ‘administrator’ accounts are set up to assist with administration only, and we do not accept any responsibility or liability for verifying that ‘administrator’ accounts are granted to Users with the legal right to make decisions on behalf of a business or company. We may ask for additional information where a User requests an ‘administrator’ account. Only an ‘administrator’ account may release or disclose any customer details or information to another User in accordance with the relevant contractual terms between such Users.

You acknowledge that certain information you provide to register with this OpenSolar Site or otherwise, including, but not limited to, through the use of any interactive features on the OpenSolar Site, is governed by our  Privacy Policy (which also sets out our obligations where we are the Controller of that data).

4. Using OpenSolar

As a User, you may communicate with and share information with other Users of the OpenSolar Site. You control how you share your information and communicate with other Users and OpenSolar shall facilitate the sharing of such information and communications but shall not be responsible for the content of any such communications or transmissions.

While using the OpenSolar Site, you will not attempt to or otherwise do any of the following:

  1. post content or items in inappropriate categories or areas on our OpenSolar Sites and services;

  2. infringe any laws, third party rights or our policies,

  3. fail to deliver payment for services delivered to you;

  4. fail to deliver User Services purchased from you;

  5. undertake or facilitate or assist any other person to undertake any Robotic Process Automation with respect to any of the information set out on the OpenSolar Site (including any User Content);

  6. circumvent or manipulate our fee structure, the billing process, or fees owed to OpenSolar;

  7. post false, inaccurate, misleading, deceptive, defamatory or offensive content (including personal information);

  8. take any action that may undermine the feedback or reputation systems (such as displaying, importing or exporting feedback information or using it for purposes unrelated to the OpenSolar Site);

  9. transfer your OpenSolar Account (including feedback) and any login credentials to another party without our consent;

  10. distribute or post spam, unsolicited, or bulk electronic communications, chain letters, or pyramid schemes;

  11. distribute viruses or any other technologies that may harm OpenSolar, the OpenSolar Site, or the interests or property of OpenSolar Users (including their Intellectual Property Rights, privacy and publicity rights) or is unlawful, threatening, abusive, defamatory, invasive of privacy, vulgar, obscene, profane or which may harass or cause distress or inconvenience to, or incite hatred of, any person;

  12. download and aggregate content from our website without our express written permission, "frame", "mirror" or otherwise incorporate any part of the OpenSolar Site into any other without our prior written authorisation;

  13. attempt to modify, translate, adapt, edit, decompile, disassemble, or reverse engineer any software programs used by us in connection with the OpenSolar Site;

  14. copy, modify or distribute rights or content from the OpenSolar Site or OpenSolar’s copyrights and trademarks; or

  15. harvest or otherwise collect information about Users, including email addresses, without their consent.

You acknowledge and agree that the OpenSolar Site is only an online venue where Users can share information, products and services. Where Users use the OpenSolar Site’s tools to assist in any of the design, review, acceptance and use of any and all User Services, Users must rely on their own skill, knowledge and qualifications to design, review, accept or use any of these User Services as required in accordance with the User Contract (or any other agreement between those persons buying the products or services and those persons selling the products or services), as well as all laws and regulations in the jurisdiction in which the User is providing or performing the User Services.

You acknowledge and agree that any tools, calculators, design platforms, results and output produced by the OpenSolar Site are estimates only, and that we do not guarantee that these estimates will match actual measurements taken at a given site. Visualisations of systems and components on the OpenSolar Site are indicative only. We do not guarantee the accuracy or suitability of any engineering designs or plan-sets or customer proposals produced by the OpenSolar Sites.

We make no representation, promise, guarantee, condition, warranty or other term about any financial forecasts, cost savings or energy consumption savings of any engineering designs or plan-sets or customer proposals produced by the OpenSolar Site.

You agree and acknowledge that the OpenSolar Site and the OpenSolar Services are provided on an "as is" and "as available" basis at any given time without any warranties or conditions of any kind, whether express, implied, statutory or otherwise, and may be substantially modified, withdrawn limited or restricted at any time. Although we may use commercially reasonable efforts to do so, we are under no obligation to provide technical support with regards to the OpenSolar Site or the OpenSolar Services, and we provide no assurance that any specific errors or performance issues in the OpenSolar Site or the OpenSolar Services will be corrected. We provide no assurance, condition, warranty or other term in relation to the availability or ability to store any data or information (including User Content) which you may upload to the OpenSolar Site, or to the amount of data that you may store on any User Account on the OpenSolar Site. You acknowledge that the services which we offer as part of the OpenSolar Services may change from time to time and agree that we will not be liable to you for any damage, loss or liability arising from such a change in the OpenSolar Services. In no event will we be liable to you for any damage whatsoever arising out of the use of or inability to use the OpenSolar Site or the OpenSolar Services.

A User may not be directly or indirectly engaged or be concerned or interested in any business which could reasonably be regarded as a market competitor of OpenSolar. This applies to a User acting:

(a) either alone or in partnership or association with another person;

(b) as a principal, agent, representative, director, officer or employee;

(c) as a member, shareholder or holder of any other security;

(d) as a trustee of or as a consultant or adviser to any person; or

(e) in any other capacity.

Each User acknowledges and agrees that OpenSolar has considerable and recognised goodwill in the conduct of its business and developing the OpenSolar Site, and the restraints imposed in this clause is fair and reasonable and no more than is reasonably necessary to protect this goodwill.

OpenSolar may at any time suspend or cancel a User’s account if it suspects that a User might be in breach of this clause.

Information on the OpenSolar Site may contain general information about legal, financial and other matters. The information is not advice, and should not be treated as such. You must not rely on the information on the OpenSolar Site as an alternative to professional advice. If you have specific questions about any matter you should consult a professional adviser.

We provide unmonitored access to third party content, including User feedback and articles with original content and opinions (or links to such third party content). We only act as a portal and have no liability based on, or related to, third party content on the OpenSolar Site, whether arising under the laws of copyright or other intellectual property, defamation, libel, privacy, obscenity, or any other legal discipline.

5. Additional Services and Fees

You may from time to time during the term of these User Terms and Conditions elect to acquire Additional Services from us. We may charge fees for these Additional Services which we offer to you and you elect to acquire.

For any Additional Services, a Service Agreement will set out:

  1. the services and deliverables (including any specifications for the services and deliverables) to be supplied by us to you;

  2. the start date for the Service Agreement and any applicable term during which the services will be provided;

  3. the fees payable for any services and the payment terms for those fees (set out in the respective Fee Schedule); and

  4. any additional terms or conditions applicable to the services and deliverables.

You will have an opportunity to review and accept the Service Agreement and the Fees Schedule, and by agreeing to the Service Agreement and the Fees Schedule, you agree to pay the fees set out in those documents. When you click ‘agree’ or otherwise accept a Service Agreement and a Fees Schedule it will be incorporated into and governed by the terms of these User Terms and Conditions.

Each Service Agreement will commence at the time that you click ‘agree’ or otherwise accept a Service Agreement and will continue for the term set out in that Service Agreement. To avoid doubt, a Service Agreement cannot exceed the term of these User Terms and Conditions.

You may terminate the Additional Services as set out in the terms of the respective Service Agreement, and you will be liable for Fees due and owing, as set out in the respective Service Agreement.

6. Taxes

You are responsible for paying any taxes, including any goods and services or value added taxes, which may be applicable depending on the jurisdiction of the User Services provided. OpenSolar does not bear any responsibility for the correct calculation, presentation or payment, of any taxes related to User Services or any other transactions for goods or services undertaken between Users. We may be required, under the laws of the jurisdiction of the services provided, to retain certain amounts in relation to taxes payable under the laws of that jurisdiction.

Certain Users who are either registered or required to be registered for GST may be required to charge GST to Australian consumers on certain User Services. You acknowledge that you must comply with your taxation obligations in your jurisdiction.

7. Promotion

If as a User are using the site for commercial purposes and you upload Company Description Information about your company, for example business name, logo, images or other generally available media to the OpenSolar Site, we may display this to other Users on the OpenSolar Site and in other marketing materials, in relation to the provision of the OpenSolar Services and the OpenSolar Site. To the extent required by applicable law we will obtain your consent to share this information. When you upload Company Description Information to the OpenSolar Site, that data or information may be visible to other Users and to members of the public.

8. Content and Information

If you as a User upload or create content (including any contact details, engineering designs, processes, techniques, customer proposals, including where these are created or displayed on the OpenSolar Site) or any data, information, documentation, energy data, pricing data, material, designs, drawings, reports, notes, calculations, specifications, photographs, audio-visual materials, recordings, manuals, tools and anything else in a material form (which, for the avoidance of doubt includes information stored in an electronic form) on the OpenSolar Site (User Content) you grant us a worldwide, perpetual, irrevocable, royalty-free, sublicensable (through multiple tiers) right to exercise any and all copyright, trademark, publicity, and database rights (but no other rights) you have in the User Content, in any media known now or in the future, for the purpose of providing the OpenSolar Services and the OpenSolar Site.

With regard to the sharing of information:

  1. if User Content contains personal information, the use of that personal information will be governed by applicable privacy laws and to the extent we are a Controller in respect of this data, the processing is also governed by our  Privacy Policy; and

  2. if User Content contains business-sensitive competitive information, which includes pricing information, data on a User’s use of products (or their customer’s use of products), customer data, business process information (such as the ‘Tag’ and ‘Action’ information created by Users) and case study data: a. We will take all reasonable steps to protect any information we regard as confidential or ‘market sensitive’, acting reasonably at all times; b. This business-sensitive competitive information will always be anonymized if we share it with a third party or other Users on the OpenSolar Site, unless it is in the normal course of business between Users to share such data in using the OpenSolar Services (for example where a User purchases products or services from another User and OpenSolar shares that sales information with the User who is selling the services); and c. In an anonymized form we may share this kind of information with third parties and other Users for the purpose of offering Users information, services, offers or analytical data which Users may find useful, or to inform third parties about the markets we serve. Nothing in this clause shall operate to limit our rights to use Protected Data in accordance with clause 9(l) of these User Terms and Conditions.

You may decide you want to share this information with other Users or third parties on a case by case basis (such as sharing case study data on your business profile page or sending a customer a sales proposal).

If you as a User are a member or employee or otherwise affiliated to an Associated Business and use the OpenSolar Site and Services to enter customer information, we will not contact those customers without the express permission of a User either directly from the User or from the Associated Business, other than in the normal course of providing OpenSolar Services (for example when our Site facilitates the emailing of proposals designed by the User to their customers). Customer information entered by a User will be assigned to the Associated Business selected by that User and that customer information will not be shared with any other competitive Associated Business, without the express permission from a User from the relevant Associated Business.

We may use the information we collect about you, or any of your customers or clients, (including any User Content and personal information) as is reasonably necessary to operate the OpenSolar Site and provide the OpenSolar Services and for the purposes described in our  Privacy Policy including for the purpose of performing analysis, tailoring information, developing and offering services that we may offer to you from time to time, providing updates, providing newsletters or feedback to Users.

You acknowledge and agree that:

  1. we act only as a forum for the online distribution and publication of User Content. We make no warranty that User Content is made available on the OpenSolar Site. We have the right (but not the obligation) to take any action deemed appropriate by us with respect to your User Content;

  2. we have no responsibility or liability for the deletion or failure to store any User Content, whether or not the content was actually made available on the OpenSolar Site; and

  3. we may reject, approve or modify your User Content at our sole discretion to the extent we consider, in our sole discretion, that such content breaches the representations and warranties below.

You represent and warrant that your User Content:

  1. will not infringe upon or misappropriate any copyright, patent, trademark, trade secret, or other intellectual property right or proprietary right or right of publicity or privacy of any person;

  2. will not violate any applicable federal, provincial, local, or international law or regulation;

  3. will not be defamatory or trade libellous;

  4. will not be obscene;

  5. will not be harmful to our reputation or goodwill;

  6. will not include incomplete, false or inaccurate information about User or any other individual;

  7. will not contain any viruses or other computer programming routines that are intended to damage, detrimentally interfere with, surreptitiously intercept or expropriate any system, data or personal information; and

  8. will not be in breach of these terms or the terms of any OpenSolar site policies.

In the event that:

  1. this Agreement is terminated or comes to an end;

  2. you close your Account; or

  3. we close your Account;

we may continue to use the information we have previously collected or obtained (including any User Content) from the start of this Agreement until the end of this Agreement or the closure of your Account in accordance with these User Terms and Conditions. We may need to retain some of your personal information and, if applicable, your customer’s personal information, to satisfy regulatory requirements and our own external obligations. Closing your account does not necessarily delete or remove all of the information we hold.

9. Data Processing

If you, as a User, provide us with access to or upload any User Content to the OpenSolar Site which belongs to a third-party, customer or client (for example, where you input their data or information in order to assist you to design a process or product for them using the OpenSolar Site), you represent and warrant that:

(i) where required under Data Protection Legislation, you have obtained consent (or otherwise have a valid legal basis for the processing of that User Content under applicable Data Protection Legislation)  from your third-party, customer or client to upload that User Content to the OpenSolar Site;

(ii) you have explained to them how that User Content may be used pursuant to this Agreement; and

(iii) you are authorised by your third-party, customer or client to use, disclose or otherwise process that User Content and have done so in accordance with Data Protection Legislation. You acknowledge and agree that we may transfer your personal information to a related body corporate or any other third party and your personal information may be transferred outside of your jurisdiction (please refer to the OpenSolar  Privacy Policy for further information on where we transfer your personal information in our capacity as a Controller). To the extent applicable, we will ensure that appropriate safeguards are implemented in accordance with Data Protection Legislation before we transfer your personal information.

EU/EEA and UK Data Privacy Provisions

IF YOU ARE BASED IN THE EUROPEAN UNION (EU) / EUROPEAN ECONOMIC AREA (EEA)  OR UNITED KINGDOM (UK), THE FOLLOWING WILL APPLY TO YOUR USE OF THE OPENSOLAR SITE, ANY USER SERVICES, OR OPENSOLAR SERVICES:

In operating the OpenSolar Site, OpenSolar will act as a Processor in respect of the Protected Data contained in any User Content (where that Protected Data relates to a customer or client of a User). We Process that Protected Data on behalf of the User (or, where applicable, the Associated Business of the User) that provided the relevant User Content. However, there are certain circumstances where we will act as a separate and independent Controller in respect of Personal Data in User Content (eg, User Account Data). Further details on our data Processing in our capacity as a Controller are set out in our  Privacy Policy.

To the extent that you in your capacity as a separate and independent Controller are established in the UK or the EU/EEA, in respect of the transfer of the Protected Data from you to OpenSolar (in OpenSolar's capacity as a separate and independent Controller) in Australia or any other non-adequate third country, OpenSolar will adhere to, and be bound by, the requirements as 'data importer', and you will adhere to, and be bound by, the requirements as 'data exporter' set forth in the Controller to Controller-applicable terms in: (1) the standard contractual clauses referenced in Schedule 2 (Standard Contractual Clauses) in the case of transfers of Protected Data from the EU/EEA; or (2) the International Data Transfer Agreement as referenced in Schedule 3 (International Data Transfer Agreement) in the case of transfers of Protected Data from the UK.  

Processor Terms

The following clauses apply only in respect of, and to the extent that: (i) you act as a Controller of Protected Data under Data Protection Legislation; and (ii) we are a Processor in the course of our provision of the OpenSolar Site and OpenSolar Services to you:

(a) each of us shall comply with our obligations under Data Protection Legislation and agree that the subject matter, nature, purpose, and duration of Processing of Protected Data and the applicable types of Protected Data and the categories of Data Subjects are as set out in the table in this clause 9 below (which may be updated from time to time by OpenSolar); in this regard, you acknowledge and agree that OpenSolar will act as a Processor with respect to its Processing of Protected Data in accordance with this clause 9,and will act as a Controller of Personal Data as specified above in this clause 9. Subject to clause 9(k), you hereby grant OpenSolar an irrevocable, perpetual, non-exclusive, non-transferable, non-sublicensable, license to use your Intellectual Property in the User Content and in the Protected Data for the purposes described in this clause 9.

(b) OpenSolar shall:

  1. Process the Protected Data in accordance with your written instructions for such purpose (which, we and you agree, shall be as set out in these terms and any other agreement we may enter into), (the "Processing Instructions"); and

  2. promptly inform you of any requirement under applicable law that would require OpenSolar to Process the Protected Data other than in accordance with the Processing Instructions, or if your instructions do not comply with Data Protection Legislation, unless that law prohibits such notification on important grounds of public interest;

(c) you hereby authorise OpenSolar to appoint the sub-processors ("Sub-Processors") listed in the table in this clause 9 below (which may be updated from time to time by OpenSolar). OpenSolar shall inform you by providing a notice of the appointment of any new Sub-Processor, including details of the Processing to be undertaken by the Sub-Processor, without undue delay and at the latest, 10 business days before engaging a new Sub-Processor. If within 10 business days of receiving the notice, you raise any reasonable objections to the proposed appointment, OpenSolar shall not appoint (or disclose any Protected Data to) that proposed Sub-Processor until reasonable steps have been taken to address the objections raised by you and until you have been provided with a reasonable written explanation of the steps taken. OpenSolar shall appoint the Sub-Processor under a binding written contract ("Processor Contract") which imposes data protection obligations that are no less onerous as those contained in these terms on the Sub-Processor. For the avoidance of doubt, OpenSolar shall not be subject to such restrictions regarding its appointment of Processors to the extent it is acting in its capacity as a Controller;

(d) OpenSolar shall:

  1. promptly on request from you give details of any Processor Contract to you (provided OpenSolar shall not be required to disclose any information subject to obligations of confidentiality); and

  2. promptly enter into discussions with you regarding the possibility that OpenSolar ceases to use a Sub-Processor to Process Protected Data where you reasonably request that the Sub-Processor stops Processing Protected Data for security reasons or concerns about the Sub-Processor’s ability to carry out the Processing in compliance with Data Protection Legislation or these terms;

(e) OpenSolar shall:

  1. ensure that personnel Processing Protected Data on behalf of OpenSolar have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; and

  2. take reasonable steps to ensure the reliability of the personnel Processing Protected Data on behalf of OpenSolar;

(f) OpenSolar shall put in place and maintain appropriate technical and organisational measures to assist you with your obligations to respond to any requests made by Data Subjects exercising their rights under Data Protection Legislation ("Data Subject Requests") and shall promptly refer any such request it receives to you;

(g) OpenSolar shall provide reasonable assistance and information to you to ensure compliance with your obligations under Data Protection Legislation with respect to:

  1. security of Processing;

  2. notification by you of Data Breaches to the supervisory authority and/or Data Subjects (as applicable); and

  3. data protection impact assessments and prior consultation with a supervisory authority regarding high risk Processing;

(h) To the extent that you in your capacity as a Controller are established in the UK or the EU/EEA, in respect of the transfer of the Protected Data from you to OpenSolar (in OpenSolar's capacity as a Processor) in Australia or any other non-adequate third country, OpenSolar will adhere to, and be bound by, the requirements as 'data importer', and you will adhere to, and be bound by, the requirements as 'data exporter' set forth in the Controller to Processor-applicable terms in: (1) the standard contractual clauses referenced in Schedule 2 (Standard Contractual Clauses) in the case of transfers of Protected Data from the EU/EEA; or (2) the International Data Transfer Agreement as referenced in Schedule 3 (International Data Transfer Agreement) in the case of transfers of Protected Data from the UK.

(i) OpenSolar shall, on your request, provide you with access to the Protected Data. OpenSolar shall allow for and contribute to audits, including inspections, carried out by or on behalf of you to determine OpenSolar’s compliance with its obligations under Data Protection Legislation and this Clause, subject to you giving OpenSolar reasonable prior notice of such audit and/or inspection, and ensuring that any auditor is subject to binding obligations of confidentiality;

(j) in respect of any Data Breach related to the Processing of Protected Data, OpenSolar shall notify you of the breach without undue delay and provide you with all details relating to the Data Breach at regular intervals and as are available to OpenSolar from time to time; and

(k) OpenSolar shall without delay, at your written request, either securely delete or return all the Protected Data to you in hardcopy or electronic form (as decided by you) after the end of the provision of the OpenSolar site and OpenSolar Services and securely delete existing copies (unless storage of any Protected Data is required by applicable law, and if so OpenSolar shall notify you of this); and

(l) Notwithstanding the above clauses (a-k) you authorise OpenSolar to Process the Protected Data, including to de-identify and anonymise the Protected Data ("Anonymised Data"), for OpenSolar's own use in improving OpenSolar's services (including in connection with the ability of the OpenSolar Site to better tailor recommendations to specific projects or certain of your customers) and to conduct market and project analytics, trend analysis, data insights and forecasts, and market research and insights creation, including to make any such analytics, insight or research available to third parties, provided that OpenSolar shall:

  1. ensure that such Processing is carried out in compliance with Data Protection Legislation; and

  2. not use any Anonymized Data or Protected Data to carry out any direct marketing in connection with OpenSolar's own services unless the User has provided consent in accordance with Data Protection Legislation.

Subject matter of Processing:

The Processing of Protected Data by OpenSolar to provide the OpenSolar Site and OpenSolar Services to you.

Duration of the Processing:

Duration of the Processing is related to the term of this Agreement, or until such time that you ask for the return or deletion of the Protected Data.

Nature and purpose of the Processing:

The Protected Data is provided by you to OpenSolar so that OpenSolar may carry out its obligations under this Agreement and provide the OpenSolar Site and OpenSolar Services as agreed between us, under this Agreement.

Type of Personal Data:

  1. B2B: Client Data, including names of your employees, email address and contact number, job role, details relating to your project's specifications; and your forecasts;


  1. B2C: User’s customers' data including name, email address, address (including latitude and longitude), phone number and details of the customer's project (e.g. solar panels system design, pictures of and notes relating to the customer property, pricing and other commercial information) and limited payment details (e.g. a graphic copy of a signature, a partially redacted card number and confirmation when payment has been made), roof type, house parcel identifier, number of stories, cellular coverages, electricity meter number, electricity connection specification, IP address and type of web browser on which the transaction occurred; and


  1. B2C: Energy usage data including energy levels of User’s customers relating to active projects utility tariff information, saving information and data relating to comparisons against other energy sources.

Categories of Data Subjects:

Users (where the User is a natural person) and Users' employees, contractors and other personnel and customers (including prospective customers).

Approved Sub-Processors

Amazon (provides Amazon Web Services hosting), Google (provides Google Cloud Platform, Google Maps and Google Workspace) and Sentry (provides software support, maintenance and related services).

10. Feedback and Reviews

You acknowledge and agree that some Users may be subject to feedback, reviews and ratings given by other Users, and that that feedback, reviews and ratings may be displayed and be visible by other Users on the OpenSolar Site.

You acknowledge that you transfer copyright of any feedback or reviews you leave consisting of comments and any rating(s) (e.g. quality, communication etc.) together with any composite rating by us. You acknowledge that such feedback and reviews belong solely to us, notwithstanding that we permit you to use it on the OpenSolar Site while you remain a User. You must not use, or deal with, such feedback and reviews in any way inconsistent with our policies as posted on the OpenSolar Site from time to time without our prior written permission.

You may not do (or omit to do) anything that may undermine the integrity of the OpenSolar feedback system. We are entitled to suspend or terminate your Account or remove any User feedback or reviews at any time if we, in our sole and absolute discretion, are concerned by any feedback about you, or your feedback rating or where we believe our feedback system may be subverted.

Our feedback ratings belong to us and may not be used for any purpose other than facilitating the provision of User Services via the OpenSolar Site. You may not use your User feedback (including, but not limited to, marketing or exporting your any or all of your composite rating(s) or feedback comments) in any real or virtual venue other than a website operated by OpenSolar or its related entities, without our written permission.

11. Advertising

Unless otherwise agreed with us, you must not advertise an external website, product or service on the OpenSolar Site.

We may display advertisements or promotions on the OpenSolar Site. You acknowledge and agree that we shall not be responsible for any loss or damage of any kind incurred by you as a result of the presence of such advertisements or promotions or any subsequent dealings with third parties. Furthermore, you acknowledge and agree that content of any advertisements or promotions may be protected by copyrights, trademarks, service marks, patents or other intellectual property or proprietary rights and laws. Unless expressly authorised by OpenSolar or third party right holders, you agree not to modify, sell, distribute, appropriate or create derivative works based on such advertisement or promotions.

To the extent reasonably possible, communication with other Users in relation to services and transactions facilitated through the OpenSolar Site should be conducted through the OpenSolar Site.

We may read all correspondence posted to the OpenSolar Site and download or access, and test (if necessary), all uploaded files, programs and websites related to your use of the OpenSolar Site for the purpose of investigating fraud, regulatory compliance, risk management and other related purposes.

12. User Services

Upon a User accepting any User Services offered by another User on the OpenSolar Site, or any purchase of goods or services by one User from another User, those Users will be deemed to have entered into a User Contract under which one User agrees to purchase, and another User agrees to deliver the User Services (as relevant). We are not a party to the User Contract. You agree not to enter into any contractual provisions in conflict with the User Terms and Conditions.

You are solely responsible for ensuring that you comply with your obligations to other Users (including, but not limited to, any confidentiality obligations). If you do not, you may become liable to that User. You must ensure that you are aware of any domestic laws (including common law), international laws, statutes, ordinances and regulations relevant to you as a User, or in any other uses you make of the OpenSolar Site.

Each User acknowledges and agrees that it will obtain and maintain at its own expense all licenses, consents, permits or certificates required for the performance of the respective User Services, including any such licenses, consents, permits or certificates required by the laws of the jurisdiction in which the User is providing or performing the User Services. We may require Users to provide documentary evidence of such current valid licenses, consents, permits or certificates, however we do not review, approve, recommend or verify any of the credentials, licences or statements of capability of any User.

If another User breaches any obligation to you, you are solely responsible for enforcing any rights that you may have. For the avoidance of doubt, we have no responsibility for enforcing any rights under a User Contract.

Depending on their jurisdiction, Users may have rights under statutory warranties that cannot lawfully be excluded. Nothing in these User Terms and Conditions is intended to override a right that by applicable law may not be excluded. Nothing in these User Terms and Conditions is intended to violate any laws relating to unfair contracts. To the extent that any component of these User Terms and Conditions is in conflict with inalienable rights under local laws, all parties intend for this agreement to be read down only insofar as to be in compliance with such local laws and no further.

Nothing in these User Terms and Conditions creates a partnership, joint venture, agency or employment relationship between OpenSolar and any User. Nothing in these User Terms and Conditions shall in any way be construed as forming a joint venture, partnership or an employer-employee relationship between OpenSolar and any User.

13. Closing Accounts, suspension and limits

We may close, suspend or limit your access to your Account at any time without reason. Without limiting the foregoing, we may close, suspend or limit your access to your Account:

  1. if we determine that you have breached, or are acting in breach of, these User Terms and Conditions;

  2. if we determine that you have infringed legal rights or applicable laws (resulting in actual or potential claims), including infringing Intellectual Property Rights;

  3. if we determine that you have engaged, or are engaging, in fraudulent, or illegal activities;

  4. you do not respond to any account verification requests;

  5. your Account is inactive or has not been logged into for a period of time;

  6. to manage any risk of loss to us, a User, or any other person; or

  7. for other reasons. If we close your Account due to your breach of these User Terms and Conditions, you may also become liable for certain fees as described in these User Terms and Conditions.

Without limiting our other remedies, to the extent you have breached these User Terms and Conditions, you must pay us all fees owed to us and reimburse us for all losses and costs (including any and all of our employee time) and reasonable expenses (including legal fees) related to investigating such breach and collecting such fees.

You acknowledge and agree that:

  1. the damages that we will sustain as a result of your breach of these User Terms and Conditions will be substantial and will potentially include (without limitation) fines and other related expenses imposed on us by our payment processors and Users and that those damages may be extremely difficult and impracticable to ascertain; and

  2. if you breach these User Terms and Conditions, we may take legal action against you to recover losses.

In the event that we close, limit or suspend your Account, you will have no claim whatsoever against us in respect of any such suspension, termination or closure of your Account.

You may close your Account at any time.

14. Other Disputes With Users

You acknowledge and agree that in the event that a dispute arises between you and another User in relation to any User Services, that you will first attempt to resolve any differences that you have in relation to such User Services, including in relation to the quality of the services provided.

In relation to disputes with any other Users of the OpenSolar Site, you agree to release and indemnify OpenSolar, its officers, employees, agents and successors from any and all claims, demands, and damages, actual and consequential, of every kind and nature, known and unknown, suspected or unsuspected, disclosed or undisclosed, arising out of or in any way related to such disputes or the OpenSolar Services.

15. Disputes With Us

If a dispute arises between you and OpenSolar, our goal is to address your concerns immediately and, if we are unable to do so to your satisfaction, to provide you with a means of resolving the dispute quickly. We strongly encourage you to first contact us directly to seek a resolution by emailing us at info@opensolar.com. You agree that if you have a concern, issue or complaint with the OpenSolar Site or the OpenSolar Services, you will advise us of such concern, issue or complaint and provide us with a reasonable opportunity to reply (which in any event will be no less than 5 business days) and that you will not publish any material in any public forum or advise any third party of such an issue, concern or complaint prior to following this process.

If a dispute arises in connection with this Agreement, a party to the dispute must give to the other party or parties to the dispute notice specifying the dispute and requiring its resolution under this clause 17 (Notice of Dispute). The parties must use reasonable endeavours to negotiate with a view to resolving the dispute within two (2) weeks of the date of the Notice of Dispute. If the dispute is not able to be resolved following this process of dispute resolution, either party may take such further legal action or commence proceedings in relation to the dispute or claim as they determine is appropriate.

All claims you bring against OpenSolar must be resolved in accordance with the terms of this Agreement. All claims filed or brought contrary to this Agreement shall be considered improperly filed and a breach of this Agreement. Should you file a claim contrary to the terms of this Agreement, OpenSolar may recover its legal fees and costs (including the cost of the use of in-house lawyers and paralegals), provided that OpenSolar has notified you in writing of the improperly filed claim, and you have failed to promptly withdraw the claim.

You agree that you will not pursue any claims arising under these User Terms and Conditions on a class or other representative basis and will not seek to coordinate or consolidate any arbitration or action hereunder with any other proceeding.

If any proceeding by or against you is commenced under any provision of any bankruptcy or insolvency law, OpenSolar will be entitled to recover all reasonable costs or expenses (including reasonable legal fees and expenses) incurred in connection with the enforcement of this Agreement.

16. Severability and waiver

This Agreement supersedes any other agreement between you and the Company. If any part of this document is found to be unenforceable, that part will be limited to the minimum extent necessary so that this document will otherwise remain in full force and effect. Our failure to enforce any part of this document is not a waiver of any of our rights to later enforce that or any other part of this document.

Our failure to act with respect to an anticipated or actual breach by you or others does not waive our right to act with respect to subsequent or similar breaches. Nothing in this clause shall exclude or restrict your liability arising out of fraud or fraudulent misrepresentation. We may assign, novate or transfer any of our rights and obligations under this document from time to time. In the event of any assignment, novation or transfer you will remain bound by this Agreement.

17. Access and Interference

You agree that you will not use any robot, spider, scraper or other automated means to access the OpenSolar Site via any means, for any purpose without our express written permission. Additionally, you agree that you will not:

  1. take any action that imposes or may impose (in our sole discretion, exercised reasonably) an unreasonable or disproportionately large load on our infrastructure;

  2. interfere with, damage, manipulate, disrupt, disable, modify, overburden, or impair any device, software system or network connected to or used (by you or us) in relation to the OpenSolar Site or your Account, or assist any other person to do any of these things, or take any action that imposes, or may impose, in our discretion, an unreasonable or disproportionately large load on our infrastructure;

  3. copy, reproduce, modify, create derivative works from, distribute, or publicly display any content (except for your information) from the websites without the prior express written permission of OpenSolar and the appropriate third party, as applicable;

  4. interfere or attempt to interfere with the proper working of the OpenSolar Sites, services or tools, or any activities conducted on or with the OpenSolar Sites, services or tools; or

  5. bypass our robot exclusion headers or other measures we may use to prevent or restrict access to the OpenSolar Site.

18. Termination

We will use commercially reasonable efforts to notify you if at any time we need shut down or suspend the OpenSolar Sites or the OpenSolar Services for any reason. We are under no obligation to continue to operate or provide access to the OpenSolar Sites or the OpenSolar Services.

We may terminate these User Terms and Conditions and any Service Agreement with you at any time by giving you two days’ notice in writing, unless otherwise set out in a Service Agreement.

Without prejudice to any other rights at general law or contained in this Agreement, we may immediately terminate this Agreement by notice in writing to you upon the occurrence of one or more of the following events:

  1. you commit a breach of the terms of these User Terms and Conditions or any Service Agreement;

  2. you cease or threaten to cease to carry on business;

  3. you fail to meet your debts as they fall due;

  4. an administrator is appointed or a resolution is passed or any steps are taken to appoint, or to pass a resolution to appoint, an administrator to you;

  5. a receiver, a receiver and manager, official manager, trustee, administrator or similar officer is appointed over your assets or undertakings; or

  6. you enter into or resolve to enter any arrangement, composition or comprise with, or assignment for the benefit of your creditors or any class of them other than for the purpose of amalgamation or reconstruction.

19. Indemnity

You will defend, indemnify, and hold us (and our officers, directors, agents, subsidiaries, joint venturers and employees) harmless from and against:

  1. any claim or demand, including legal fees and costs, made against us by any third party; and

  2. all liabilities, damages, costs, losses and expenses suffered or incurred by OpenSolar,

due to or arising out of your breach of this Agreement, or your infringement of any law or the rights of a third party in the course of using the OpenSolar Site and OpenSolar Services.

In addition, we can apply any funds in your Account or amounts due and owing to you against any liabilities you owe to us or loss suffered by us as a result of your non-performance or breach of these User Terms and Conditions.

Without prejudice to any other rights or remedies that we may have, you acknowledge and agree that damages alone would not be an adequate remedy for any breach of the terms of this Agreement by you. Accordingly, we shall be entitled to the remedies of injunction, specific performance or other equitable relief for any threatened or actual breach of the terms of this Agreement.

20. Security

You must immediately notify us upon becoming aware of any unauthorised access or any other security breach to the OpenSolar Site, your Account, the OpenSolar Services or any User information and do everything possible to mitigate the unauthorised access or security breach (including preserving evidence and notifying appropriate authorities). Your User Account is yours only, and you must not share your password with others. You are solely responsible for securing your password. We will not be liable for any loss or damage arising from unauthorised access of your account resulting from your failure to secure your password.

21. No Warranty as to Each User’s Purported Identity

We cannot and do not confirm each User’s purported identity on the OpenSolar Site. We may provide information about a User, such as a strength or risk score, geographical location, or third party background check or verification of identity or credentials. However, such information is based in part on data that a User submits and we provide such information solely for the convenience of Users and the provision of such information is not an introduction, endorsement or recommendation by us.

22. No Warranties

The OpenSolar Site is a dynamic site. As such, information on the OpenSolar Site will change frequently. It is possible that some information could be considered offensive, harmful, inaccurate or misleading or mislabelled or deceptively labelled accidentally by us or accidentally or purposefully by a third party.

We provide applications and certain functionality on our OpenSolar Site to assist Users.

Our Services, the OpenSolar Site and all content on it are provided on an ‘as is’, ‘with all faults’ and ‘as available’ basis and without conditions, warranties, representations or other terms of any kind either express or implied. Without limiting the foregoing, we make no representation, condition, or warranty about:

  1. the OpenSolar Site or any User Services or OpenSolar Services;

  2. the accuracy, reliability, availability, veracity, timeliness or content of the OpenSolar Site or any User Services or OpenSolar Services;

  3. whether the OpenSolar Site or User Services or OpenSolar Services will be up-to-date, uninterrupted, secure, error-free or non-misleading;

  4. the quality or fitness for purpose of the User Services or any goods supplied by one User to another User, or whether any User Services will be rendered with due care and skill;

  5. whether defects in the OpenSolar Site will be corrected;

  6. whether the OpenSolar Site, the User Services or the OpenSolar Services or any data, content or material will be backed up or whether business continuity arrangements are in place in respect of the OpenSolar Site, User Services or OpenSolar Services;

  7. any third party agreements or any guarantee of business gained by you through the OpenSolar Site, User Services or OpenSolar Services or us; or

  8. the OpenSolar Site, User Services or OpenSolar Services or infrastructure on which they are based, being error or malicious code free, secure, confidential or performing at any particular standard or having any particular function.

To every extent permitted by law, we specifically disclaim any implied conditions, warranties, representations, or other terms as to title, merchantability, fitness for a particular purpose, hidden defects, quality, suitability and non-infringement.

IF YOU ARE BASED IN THE U.S. OR CANADA, THE FOLLOWING SHALL APPLY TO YOUR USE OF THE OPENSOLAR SITE, ANY USER SERVICES, OR OPENSOLAR SERVICES:

TO THE FULLEST EXTENT PROVIDED BY U.S. OR CANADIAN LAW (AS APPLICABLE), WE WILL NOT BE LIABLE FOR ANY LOSS OR DAMAGE CAUSED BY A DISTRIBUTED DENIAL-OF-SERVICE ATTACK, VIRUSES, OR OTHER TECHNOLOGICALLY HARMFUL MATERIAL THAT MAY INFECT YOUR COMPUTER EQUIPMENT, COMPUTER PROGRAMS, DATA, OR OTHER PROPRIETARY MATERIAL DUE TO YOUR USE OF THE OPENSOLAR SITE OR ANY SERVICES OR ITEMS OBTAINED THROUGH THE OPENSOLAR SITE OR TO YOUR DOWNLOADING OF ANY MATERIAL POSTED ON IT, OR ON ANY WEBSITE LINKED TO IT.

YOUR USE OF THE OPENSOLAR SITE, ITS CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE OPENSOLAR SITE IS AT YOUR OWN RISK. THE OPENSOLAR SITE, ITS CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE OPENSOLAR SITE ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. NEITHER WE NOR ANY PERSON ASSOCIATED WITH US MAKES ANY WARRANTY OR REPRESENTATION WITH RESPECT TO THE COMPLETENESS, SECURITY, RELIABILITY, QUALITY, ACCURACY, OR AVAILABILITY OF THE OPENSOLAR SITE. WITHOUT LIMITING THE FOREGOING, NEITHER WE NOR ANYONE ASSOCIATED WITH US REPRESENTS OR WARRANTS THAT THE OPENSOLAR SITE, ITS CONTENT, OR ANY SERVICES OR ITEMS OBTAINED THROUGH THE OPENSOLAR SITE WILL BE ACCURATE, RELIABLE, ERROR-FREE, OR UNINTERRUPTED, THAT DEFECTS WILL BE CORRECTED, THAT OUR OPENSOLAR SITE OR THE SERVER THAT MAKES IT AVAILABLE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS, OR THAT THE OPENSOLAR SITE OR ANY SERVICES OR ITEMS OBTAINED THROUGH THE OPENSOLAR SITE WILL OTHERWISE MEET YOUR NEEDS OR EXPECTATIONS.

TO THE FULLEST EXTENT PROVIDED BY LAW, WE HEREBY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR PARTICULAR PURPOSE. THE FOREGOING DOES NOT AFFECT ANY WARRANTIES THAT CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW.

23. Limitation of Liability

In no event shall we, our related entities, our affiliates or staff be liable, whether in contract, warranty, tort (including negligence), breach of statutory duty, or any other form of liability, for:

  1. any indirect, special, incidental or consequential loss or damage that may be incurred by you;

  2. any loss of income, business or profits (whether direct or indirect) that may be incurred by you;

  3. any claim, damage, or loss which may be incurred by you as a result of any of your transactions involving the OpenSolar Site.

The limitations on our liability to you above shall apply, even if foreseeable and whether or not we, our related entities, our affiliates or staff have been advised of the possibility of such loss or damage arising.

Notwithstanding the above provisions, nothing in these User Terms and Conditions is intended to limit or exclude any liability on the part of us and our affiliates and related entities where and to the extent that applicable law prohibits such exclusion or limitation including, without limitation, those within the Competition and Consumer Act 2010 (Cth) and relevant state fair trading legislation, as well as, if you are in the EU, liability for death or personal injury caused by our negligence or the negligence of our and our affiliates’ employees, agents or subcontractors and for fraud or fraudulent misrepresentation.

To the extent that we are able to limit the remedies available under these User Terms and Conditions, we expressly limit our liability for breach of a non-excludable condition, warranty, representation or other term implied by virtue of any legislation to the following remedies (the choice of which is to be at our sole discretion) to the supply of the OpenSolar services again or the payment of the cost of having the OpenSolar services supplied again.

IF YOU ARE BASED IN THE U.S., THE FOLLOWING SHALL APPLY TO YOUR USE OF THE OPENSOLAR SITE OR OPENSOLAR SERVICES:

TO THE FULLEST EXTENT PROVIDED BY LAW, IN NO EVENT WILL WE, OUR AFFILIATES, OR THEIR LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS, OR DIRECTORS BE LIABLE FOR DAMAGES OF ANY KIND, UNDER ANY LEGAL THEORY, ARISING OUT OF OR IN CONNECTION WITH YOUR USE, OR INABILITY TO USE, THE OPENSOLAR SITE, ANY WEBSITES LINKED TO IT, ANY CONTENT ON THE OPENSOLAR SITE OR SUCH OTHER WEBSITES, INCLUDING ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO, PERSONAL INJURY, PAIN AND SUFFERING, EMOTIONAL DISTRESS, LOSS OF REVENUE, LOSS OF PROFITS, LOSS OF BUSINESS OR ANTICIPATED SAVINGS, LOSS OF USE, LOSS OF GOODWILL, LOSS OF DATA, AND WHETHER CAUSED BY TORT (INCLUDING NEGLIGENCE), BREACH OF CONTRACT, OR OTHERWISE, EVEN IF FORESEEABLE.

THE FOREGOING DOES NOT AFFECT ANY LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW.

IF YOU ARE BASED IN CANADA, THE FOLLOWING SHALL APPLY TO YOUR USE OF THE OPENSOLAR SITE OR OPENSOLAR SERVICES:

UNDER NO CIRCUMSTANCE WILL WE, OUR AFFILIATES AND THEIR RESPECTIVE DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, OR SERVICE PROVIDERS BE LIABLE FOR NEGLIGENCE, GROSS NEGLIGENCE, NEGLIGENT MISREPRESENTATION, FUNDAMENTAL BREACH, DAMAGES OF ANY KIND, UNDER ANY LEGAL THEORY, INCLUDING ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO, PERSONAL INJURY, PAIN AND SUFFERING, EMOTIONAL DISTRESS, LOSS OF REVENUE, LOSS OF PROFITS, LOSS OF BUSINESS OR ANTICIPATED SAVINGS, LOSS OF USE, LOSS OF GOODWILL, LOSS OF DATA, AND WHETHER CAUSED BY TORT (INCLUDING NEGLIGENCE), BREACH OF CONTRACT, BREACH OF PRIVACY OR OTHERWISE, EVEN IF THE PARTY WAS ALLEGEDLY ADVISED OR HAD REASON TO KNOW, ARISING OUT OF OR IN CONNECTION WITH YOUR USE, OR INABILITY TO USE, RELIANCE ON, THE OPENSOLAR SITE, ANY LINKED WEBSITES OR SUCH OTHER THIRD PARTY WEBSITES, NOR ANY SITE CONTENT, MATERIALS, POSTING OR INFORMATION THEREON.

THE FOREGOING DOES NOT AFFECT ANY LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW.

24. Legal Limitations

As some jurisdictions do not allow some of the exclusions or limitations as established above, some of these exclusions or limitations may not apply to you. In that event, the liability will be limited as far as legally possible under the applicable legislation. We may plead these User Terms and Conditions in bar to any claim, action, proceeding or suit brought by you, against us for any matter arising out of any transaction or otherwise in respect of these User Terms and Conditions.

You and we agree that you and we will only be permitted to bring claims against the other only on an individual basis and not as a plaintiff or class member in any purported class or representative action or proceeding. Unless both you and we agree otherwise, the arbitrator may not consolidate or join more than one person’s or party’s claims and may not otherwise preside over any form of a consolidated, representative, or class proceeding. In addition, the arbitrator may award relief (including monetary, injunctive, and declaratory relief) only in favour of the individual party seeking relief and only to the extent necessary to provide relief necessitated by that party’s individual claim(s). Any relief awarded cannot affect other Users.

25. Notices

Legal notices can be served to the email address, phone number, address or other contact details you provide to OpenSolar during the registration process. Notice will be deemed given immediately after we send an email or SMS/MMS to you, unless we are notified that the email address or phone number is invalid or that the email/SMS/MMS has not been delivered. Alternatively, we may give you legal notice by mail to any address provided by you during the registration process. In such case, notice will be deemed given two days after the date of mailing.

Any notices to OpenSolar must be given by registered ordinary post (or if posted to or from a place outside Australia, by registered airmail).

26. Law and Forum for Legal Disputes

This Agreement will be governed in all respects by the laws of New South Wales, Australia. We encourage you to try and resolve disputes using certified mediation (such as online dispute resolution processes). If a dispute cannot be resolved then you and OpenSolar irrevocably submit to the non-exclusive jurisdiction of the courts of New South Wales, Australia.

27. Interpretation

Headings are for reference purposes only and in no way define, limit, construe or describe the scope or extent of such clause.

This Agreement is made up of these User Terms and Conditions and the Service Agreement(s) (including each respective Fee Schedule applicable to that Service Agreement). The Service Agreement overrides the provisions of these User Terms and Conditions in the event of any inconsistency.

28. Additional Terms

It is important to read and understand all our policies as they provide the rules for using the OpenSolar Site. In addition there may be specific policies or rules that apply, and it is your responsibility to check our pages and policies to make sure you comply. Our policies, including all policies referenced in them, are part of this Agreement and provide additional terms and conditions related to specific services offered on our OpenSolar Sites.

The policies that apply to the OpenSolar Site may be changed from time to time. Changes take effect when we post them on the OpenSolar Site. When using particular services on the OpenSolar Site, you are subject to any posted policies or rules applicable to services you use through the OpenSolar Site, which may be posted from time to time. All such policies or rules are incorporated into these User Terms and Conditions.

29. General

This Agreement contains the entire understanding and agreement between you and OpenSolar. The following Clauses survive any termination of this Agreement: clause 4 Using OpenSolar, clause 5 Additional Services and Fees (with respect to fees owed for our services), clause 8 Content, clause 9 Data Processing, clause 10 Feedback and Reviews, clause 12 Ownership and Use of Information, clause 16 Other Disputes with Users, clause 17 Disputes With Us, clause 18 Severability and Waiver, clause 21 Indemnity, clause 24 No Warranties, clause 25 Limitation of Liability, clause 26 Legal Limitations, clause 28 Law and Forum for Legal Disputes, clause 29 Interpretation and this clause 31 General.


Terms and Conditions - Schedule 1

In these User Terms and Conditions:

Account means the user account used to access the OpenSolar Site.

Additional Services means any services provided by us to you set out in Item 3 of Schedule 2 of the relevant Service Agreement.

Agreement means:

(a) these User Terms and Conditions; and

(b) any Service Agreement and any Fee Schedule which you accept;

and all the terms of those documents, including any schedule or annexure to them.

Associated Business means a business or company that a User shares a ‘connection’ with or is affiliated to through the OpenSolar Site, for example where that User is an employee of or provides services to as a contractor of that business or company.

Canada Data Protection Law means the ‘’‘Personal Information Protection and Electronic Documents Act’‘’, S.C. 2000, c. 5, the ‘’‘Personal Information Protection Act’‘’, R.S.A. 2003, c. P-6.5, the ‘’‘Personal Information Protection Act’‘’, R.S.B.C. 2003, c. 63 and an Act respecting the protection of personal information in the private sector, CQLR, c. P-39.1

Company Description Information means information which is generally publicly available about a company, such as company name, logo, business images and contact details.

Controller has the meaning set out in the GDPR.

Data Breach means a breach of security leading to the accidental, unauthorised or unlawful destruction, loss, alteration, or disclosure, or access, of or to any Protected Data.

Data Subject means an identified or identifiable natural person.

Data Subject Requests has the meaning given to that term in clause 9.

DPA means the UK Data Protection Act 2018.

Data Protection Legislation means all relevant and applicable data protection laws and regulations, including, where applicable and without limitation, the Privacy Act 1988 (Cth), EU Data Protection Law, the DPA, and Canada Data Protection Law.

EU Data Protection Law shall mean: (i) the GDPR, and any equivalent or replacement law in any Member State and all and any regulations made under those acts or regulations; (ii) any binding guidelines, recommendations, best practice opinions, directions, decisions, and codes of conduct issued, adopted or approved by the European Commission, the European Data Protection Board, and/or any supervisory authority or data protection authority from time to time in relation to the GDPR; and (iii) any judgments of any relevant court of law relating to the processing of Personal Data, data privacy, and data security.

Fees means the fees or price for the Additional Services as set out in a Fees Schedule in respect of the relevant Service Agreement. Fees Schedule means Schedule A of a Services Agreement which sets out the fees payable by you for the services set out in that Services Agreement.

GDPR means the EU General Data Protection Regulation ((EU) 2016/679)) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, save in respect of Processing carried out in the United Kingdom where it shall mean Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018.

GST means Australian goods and services tax regime as defined under the A New Tax System (Goods and Services Tax) Act 1999 (Cth).

Intellectual Property means without limitation, patents, copyright and related rights, registered designs, registered and unregistered trademarks and service marks, business names and domain names, goodwill and the right to sue for passing off or unfair competition, designs, computer software, databases, know-how and trade secrets.

Intellectual Property Rights means any and all intellectual property rights, existing worldwide and the subject matter of such rights, including:

(a) patents, copyright and neighbouring and related rights, moral rights, rights in circuit layouts (or similar rights), registered designs, registered and unregistered trademarks and service marks, business names and domain names, rights in get-up, goodwill and the right to sue for passing off or unfair competition, rights in design, rights in computer software, database rights, rights to use, and protect the confidentiality of, confidential information (including know-how and trade secrets) and all other intellectual property rights; and

(b) any application or right to apply for registration and including all applications and rights to apply for and be granted, renewals or extensions of, and rights to claim priority from, such rights and all similar or equivalent rights or forms of protection which subsist or will subsist now or in the future in any part of the world, of any of the rights referred to in paragraph (a),

whether or not such rights are registered or capable of being registered and whether existing under any laws, at common law or in equity.

Member State shall mean a country that is a member of the European Union or of the European Economic Area.

Robotic Process Automation means the use of robotic or automated processes to elicit or determine client login details for access to secure online platforms by automated software- based processes, artificial intelligence, synthetic users, bots or screen scrapers to enable them to:

(a) view or extract any data;

(b) create derivative data;

(c) store data; or

(d) execute code-based or web-based actions or translations.

OpenSolar, we, our, company; or us means OpenSolar Pty Ltd ACN 621 679 632.

OpenSolar Services means all services provided by us, and includes the Additional Services.

OpenSolar Site means the existing and future websites operated by OpenSolar and available at www.opensolar.com and any of its regional or other domains or properties, and includes any related OpenSolar service, tool or application, specifically including mobile web, any iOS App and any Android App, or other access mechanism.

Personal Data has the meaning given to it in the GDPR.

Processing has the meaning given to it under the GDPR, and "Process" and "Processed" shall be construed accordingly.

Processing Instructions has the meaning given to that term in clause 9.

Processor has the meaning set out in the GDPR.

Processor Contract has the meaning given to that term in clause 9.

Protected Data means Personal Data received from or on behalf of you, or otherwise obtained or created by OpenSolar in connection with the performance of OpenSolar’s obligations and/or the exercise of OpenSolar's rights under this Agreement, including information relating to Users' customers that are uploaded to, or hosted on, the OpenSolar Site in connection with the provision of services but excluding User Account Data.

Service Agreement means an agreement for services that we will provide you on the terms (and subject to the Fees, timetable, specifications and related matters) set out in a form substantially similar to that set out at Schedule 1.

Sub-Processor has the meaning set out in clause 9.

User Account Data means a User's email address, log-in details and information used by OpenSolar in providing the User access to the OpenSolar Site together with that User's account usage information and history on the OpenSolar Site.

User, you or yourmeans an individual who visits or uses the OpenSolar Site.

User Content has the meaning set out in clause 8.

User Contract means the contractual provisions accepted by the Users who have agreed to buy or sell goods or services from one another, to the extent not inconsistent with the User Terms and Conditions;

User Services means all services, products and goods provided by a User to another User.


Terms and Conditions - Schedule 2

Standard Contractual Clauses (for transfers of personal data from the EU/EEA to non-adequate third countries)

Pursuant to clause 9 of this Agreement, the standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council approved by the European Commission (C(2021) 3972 final dated 4 June 2021) (the "SCCs") and available at  https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en (or such other URL as may be made available by the European Commission from time-to-time) shall apply to transfers of Personal Data by Clients established in the EU/EEA to OpenSolar entities in non-adequate third countries.  The SCCs are hereby incorporated into this Agreement by this reference and are hereby deemed to be completed and to apply as set forth below in this Schedule.  


The SCCs are hereby deemed to be completed as follows:

  1. where OpenSolar is acting as a Controller, Module One (Transfer controller to controller) shall apply;

  2. where OpenSolar is acting as a Processor, Module Two (Transfer controller to processor) shall apply;

  3. in Clause 7 (Optional), the optional docking clause shall apply;

  4. where Module Two (Transfer controller to processor) applies, Clause 9 (Use of sub-processors), Option 2 (General written authorisation) shall apply, and the time period for prior notice of Sub-processor changes shall be at least ten (10) calendar days in advance of such change;

  5. in Clause 11 (Redress), the optional language shall not apply;

  6. in Clause 13 (Supervision), the competent supervisory authority shall be the supervisory authority with responsibility for ensuring compliance by the data exporters with the GDPR as regards the data transfer (unless one of the other sub-clauses in Clause 13(a) applies in which case the relevant supervisory authority shall be as indicated in the relevant sub-clause. 

  7. in Clause 17 (Governing law), Option 1 shall apply, and the EU SCCs shall be governed by the laws of Ireland;

  8. in Clause 18(b) (Choice of forum and jurisdiction), disputes shall be resolved before the courts of Ireland;  

  9. Annex I of the EU SCCs shall be deemed completed with the information set out in Annex 1 (Data Processing Description) of this Schedule;

  10. Annex II of the EU SCCs shall be deemed completed with the information set out in Annex 2 (Technical and Organisational Security Measures) of this Schedule; and

  11. where Module Two (Transfer controller to processor) applies, Annex III of the EU SCCs does need to be completed because the parties have selected Clause 9 (Use of sub-processors), Option 2 (General written authorisation). 


ANNEX I TO SCHEDULE 2

DATA PROCESSING DESCRIPTION

A. LIST OF PARTIES

Data exporter(s) [Identity and contact details of the data exporter(s) and, where applicable, of its/their data protection officer and/or representative in the European Union]

The OpenSolar Client who is transferring personal data to OpenSolar for the purposes of receiving and taking the benefit of the OpenSolar Site and the OpenSolar Services. 

The name, address and contact information of the Client shall be as provided to OpenSolar when registering to use the OpenSolar Site or otherwise provided to OpenSolar in connection with the Client's use of the OpenSolar Services, as may be updated by the Client from time-to-time.

The SCCs form an integral part of the Agreement (ie, the OpenSolar Pty Ltd User Terms and Conditions and Privacy Policy) between the data exporter (ie, the Client) and the data importer (ie, OpenSolar) governing the Client's use of the OpenSolar Site and OpenSolar Services and accordingly becomes effective at the same time that the Agreement enters into effect.  

Role: Controller.

Data importer(s) [Identity and contact details of the data importer(s), including any contact person with responsibility for data protection]

OpenSolar Pty Ltd.
Level 1/477 Pitt Street
Haymarket NSW 2000
Australia

Contact: Andrew Birch, Privacy Officer. Email:  privacy@opensolar.com

Role: Controller and processor.

The SCCs form an integral part of the Agreement (ie, the OpenSolar Pty Ltd User Terms and Conditions and Privacy Policy) between the data exporter (ie, the Client) and the data importer (ie, OpenSolar) governing the Client's use of the OpenSolar Site and OpenSolar Services and accordingly becomes effective at the same time that the Agreement enters into effect.  

B. DESCRIPTION OF TRANSFER

Categories of data subjects whose personal data is transferred

Categories of personal data transferred

In the context of OpenSolar acting as a controller:

In the context of OpenSolar acting as a processor:

  1. B2B: Client Data, including names of your employees, email address and contact number, job role, details relating to your project's specifications; and your forecasts;

  2. B2C: User’s customers' data including name, email address, address (including latitude and longitude), phone number and details of the customer's project (e.g. solar panels system design, pictures of and notes relating to the customer property, pricing and other commercial information) and limited payment details (e.g. a graphic copy of a signature, a partially redacted card number and confirmation when payment has been made), roof type, house parcel identifier, number of stories, cellular coverages, electricity meter number, electricity connection specification, IP address and type of web browser on which the transaction occurred; and

  3. B2C: Energy usage data including energy levels of User’s customers relating to active projects utility tariff information, saving information and data relating to comparisons against other energy sources.

Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures.

None.

The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis).

Continuous basis.

Nature of the processing

As set forth above and below.

Purpose(s) of the data transfer and further processing

The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period

For the duration of the Agreement between the parties into which these SCCs are incorporated and thereafter for any longer period to the extent required by applicable law.

For transfers to (sub-) processors, also specify subject matter, nature and duration of the processing

To the data importer's service providers who provide data storage, web-hosting services, and software support, maintenance and related services during the term of this Agreement.

C. COMPETENT SUPERVISORY AUTHORITY

Identify the competent supervisory authority/ies in accordance with Clause 13

Ireland (Data Protection Commission) 

ANNEX II TO SCHEDULE 2

TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA


As specified in Schedule 4 (Technical & Organisational Security Measures (TOM)) of this Agreement). 



Terms and Conditions - Schedule 3 

International Data Transfer Agreement (for transfers of personal data from the UK to non-adequate third countries)


Pursuant to clause 9 of this Agreement (which constitutes the "Linked Agreement" for purposes of the Tables below), the International Data Transfer Agreement issued by the Information Commissioner (version A1.0, in force 21 March 2022) (the "IDTA") and available at https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/ (or such other URL as may be made available by the Information Commissioner from time-to-time) shall apply to transfers of Personal Data by Clients established in the UK to OpenSolar entities in non-adequate third countries.  The IDTA is hereby incorporated into this Linked Agreement by this reference.  Part 1 (Tables), 2 (Extra Protection Clauses) and 3 (Commercial Clauses) of the IDTA are hereby deemed to be completed and to apply as set forth below in this Schedule.  Part 4 (Mandatory Clauses) of the IDTA shall apply unmodified as set forth in the IDTA.   

Part 1: Tables

Table 1: Parties and signatures

Start date


The Parties

Exporter (who sends the Restricted Transfer)

Importer (who receives the Restricted Transfer)

Parties’ details

The Client who is transferring Protected Data to OpenSolar for the purposes of receiving and taking the benefit of the OpenSolar Site and the OpenSolar Services. 

The name, address and contact information of the Client shall be as provided to OpenSolar when registering to use the OpenSolar Site or otherwise provided to OpenSolar in connection with the Client's use of the OpenSolar Services, as may be updated by the Client from time-to-time.   

OpenSolar Pty Ltd.

Level 1/477 Pitt Street

Haymarket NSW 2000

Australia

Key Contact

The name, address and contact information of the Client's key contact shall be as provided to OpenSolar when registering to use the OpenSolar Site or otherwise provided to OpenSolar in connection with the Client's use of the OpenSolar Services, as may be updated by the Client from time-to-time.   

Full Name: Andrew Birch

Position: Privacy Officer

Email: privacy@opensolar.com

Importer Data Subject Contact


Full Name: Andrew Birch

Position: Privacy Officer

Email: privacy@opensolar.com

Signatures confirming each Party agrees to be bound by this IDTA

This IDTA forms an integral part of the Linked Agreement between the Exporter (ie, the Client) and the Importer (ie, OpenSolar) governing the Client's use of the OpenSolar Site and OpenSolar Services and accordingly becomes effective at the same time that the Linked Agreement enters into effect.  

Table 2: Transfer Details 

UK country's law that governs the IDTA:

England and Wales


Primary place for legal claims to be made by the Parties

England and Wales


The status of the Exporter

In relation to the Processing of the Transferred Data:

Exporter is a Controller 

The status of the Importer

In relation to the Processing of the Transferred Data:

Importer is a Controller and

Importer is the Exporter’s Processor

Whether UK GDPR applies to the Importer

UK GDPR does apply to the Importer’s Processing of the Transferred Data

Linked Agreement


This IDTA forms an integral part of the Agreement (ie, the OpenSolar Pty Ltd User Terms and Conditions and Privacy Policy) between the Exporter (ie, the Client) and the Importer (ie, OpenSolar) governing the Client's use of the OpenSolar Site and OpenSolar Services and accordingly becomes effective at the same time that the Agreement enters into effect.  

Term

The Importer may Process the Transferred Data for the period for which the Linked Agreement is in force.

Ending the IDTA before the end of the Term

The Parties cannot end the IDTA before the end of the Term unless there is a breach of the IDTA or the Parties agree in writing.

Ending the IDTA when the Approved IDTA changes

Which Parties may end the IDTA as set out in Section 29.2:

neither Party.

Can the Importer make further transfers of the Transferred Data?

The Importer MAY transfer on the Transferred Data to another organisation or person (who is a different legal entity) in accordance with Section 16.1 (Transferring on the Transferred Data).

Specific restrictions when the Importer may transfer on the Transferred Data

The Importer MAY ONLY forward the Transferred Data in accordance with Section 16.1: 

there are no specific restrictions.

Review Dates 

The Parties must review the Security Requirements at least each time there is a change to the Transferred Data, Purposes, Importer Information, TRA or risk assessment.

Table 3: Transferred Data

Transferred Data


The personal data to be sent to the Importer under this IDTA consists of:

In the context of OpenSolar acting as a Controller:

  • Contact information of officers, directors, employees and other personnel of the Client, including family name, given names, business email addresses, business street addresses, telephone numbers, accreditations; and passport or other identity information where needed for KYC/AML purposes and such other personal data as specified in OpenSolar's  Privacy Policy

In the context of OpenSolar acting as a Processor:

  1. B2B: Client data, including names of your employees, email address and contact number, job role, details relating to your project's specifications; and your forecasts;


  1. B2C: User’s customers' data including name, email address, address (including latitude and longitude), phone number and details of the customer's project (e.g. solar panels system design, pictures of and notes relating to the customer property, pricing and other commercial information) and limited payment details (e.g. a graphic copy of a signature, a partially redacted card number and confirmation when payment has been made), roof type, house parcel identifier, number of stories, cellular coverages, electricity meter number, electricity connection specification, IP address and type of web browser on which the transaction occurred; and


  1. B2C: Energy usage data including energy levels of User’s customers relating to active projects utility tariff information, saving information and data relating to comparisons against other energy sources.

The categories of Transferred Data will update automatically if the information is updated in the Linked Agreement referred to. 

Special Categories of Personal Data and criminal convictions and offences

The Transferred Data does not includes any special categories of personal data or data relating to criminal convictions or offences.   


Relevant Data Subjects

The Data Subjects of the Transferred Data are:

  • The Client's officers, directors, employees and other personnel.

  • The Client's customers and prospective customers. 

The categories of Data Subjects will update automatically if the information is updated in the Linked Agreement referred to. 

Purpose

The Importer may Process the Transferred Data for the following purposes: 

  • to operate, maintain, manage and provide the OpenSolar Site and OpenSolar Services; 

  • to manage the relationship with the Client; 

  • for the purposes set out in OpenSolar's  Privacy Policy; and  

  • for any other purposes which are compatible with the purposes set out above.

The purposes will update automatically if the information is updated in the Linked Agreement referred to. 

Table 4: Security Requirements

Security of Transmission

As specified in Schedule 4 (Technical & Organisational Security Measures (TOM)) of the Linked Agreement. 

Security of Storage

As specified in Schedule 4 (Technical & Organisational Security Measures (TOM)) of the Linked Agreement.

Security of Processing

As specified in Schedule 4 (Technical & Organisational Security Measures (TOM)) of the Linked Agreement.

Organisational security measures

As specified in Schedule 4 (Technical & Organisational Security Measures (TOM)) of the Linked Agreement.

Technical security minimum requirements

As specified in Schedule 4 (Technical & Organisational Security Measures (TOM)) of the Linked Agreement.

Updates to the Security Requirements

The Security Requirements will update automatically if the information is updated in Schedule 4 Technical & Organisational Security Measures (TOM) of the Linked Agreement. 

Part 2: Extra Protection Clauses

Extra Protection Clauses:

None. 

(i) Extra technical security protections

None.

(ii) Extra organisational protections

None.

(iii) Extra contractual protections

None. 

Part 3: Commercial Clauses

Commercial Clauses

As specified in the Linked Agreement. 


Schedule 4

Technical & Organisational Security Measures (TOM)

1. Confidentiality

a. Access control to premises and facilities

To ensure access control to premises and facilities the following technical and organizational measures are implemented where appropriate:

  • Access control systems, e.g. access cards

  • Access controls (i.e. dual authentication) for information processing facilities

  • Key Issuance procedures

  • Door locking (electric door openers etc.)

  • Surveillance facilities, e.g. alarm system, video/CCTV monitor

  • Visitor/Guest access procedures

  • Timely revocation of building access for terminated/resigned employees

b. Access control

To ensure access control to data processing systems the following technical and organizational measures are implemented where appropriate:

  • Password procedures (including minimum complexity requirements)

  • Access procedures to grant access to systems/applications

  • Unique username and password per user

  • Revocation procedures for terminated/resigned employees

  • Network restrictions and security processes to prevent misuse of systems

  • Differentiated access rights

c. Segregation control

To ensure segregation of processing of data collected for different purposes the following technical and organizational measures are implemented where appropriate:

Measures to provide for separate processing (storage, amendment, deletion, transmission) of data for different purposes:

  • Data Segregation controls (least privilege, limitation of use, data segregation based on classification of data)

  • Environment Segregation controls (production/testing)

d. Disclosure control

To prevent data from being read, copied, altered or deleted by unauthorized parties during the transmission thereof or during the transport or recording of data the following technical and organizational measures are implemented: where appropriate

  • Transmission controls for physical movement of data based on sensitivity of data

  • Transmission controls for electronic movement of data based on sensitivity of data

  • Disclosure controls for pseudonymizing and/or encrypting at rest are based on the sensitivity of the data. Disclosure controls include, but are not limited to, data masking, tokenization and scrambling.

2. Integrity

a. Input control

To ensure input control regarding data processing systems the following technical and organizational measures are implemented where appropriate:

  • Processes for managing the entry, change, or deletion of information

  • Processes for ensuring input controls are auditable

3. Availability and Resilience

a. Availability control

To ensure availability of data processing systems the following technical and organizational measures are implemented where appropriate:

  • Backup procedures

  • Business continuity/disaster recovery procedures and testing of procedures

  • Uninterruptible power supply (UPS) controls

  • Data restoration

4. Procedure for regular tests, assessments and evaluations

a. Periodic assessment of TOMs

To ensure the effectiveness of technical and organizational measures the following testing, assessment and evaluation measures are implemented where appropriate:

  • Periodic internal reviews.

  • Additional internal and external assessments conducted, coordinated or facilitated by the Information Security team.





Privacy Notice (Privacy Policy)

This Notice last changed on 30 November 2022.

Who we are

OpenSolar Pty Ltd. ("OpenSolar", "we" or "us") always respects your privacy and values the trust you place in us when you share your personal information with us.

This Privacy Notice ("Notice") sets out how we collect, hold, use, disclose and otherwise process your personal information, why and with what legal reasoning we process it, with whom and for what purposes we share it, the rights to which you may be entitled and your choices about our use of your personal information.

This Notice covers our use of personal information when we provide services to you or your organisation, engage you to provide services to us, when you browse our website, you log-in to our platform or our mobile application, or otherwise interact with us (collectively, the "Services"). If any of these apply to you, please read this Notice carefully. Except as specified in the next paragraph below, OpenSolar is the data controller in respect of the personal information that it collects, uses and otherwise processes as described in this Notice.

This Notice does not cover any information that is stored on our platform or mobile application by the installer with whom you are contracting for your solar project. In operating the platform and mobile application OpenSolar will be a data processor in respect of the personal information that is stored by the installer or you. The installer will be the data controller in respect of that personal information. You should therefore ensure that you read your installer's privacy notice carefully. 

We will display this Notice or the links to this Notice on the  Website.

When we refer to "you" in this Notice, this includes you and/or your organisation.

OpenSolar's contact details are as follows:

Address: Level 1/477 Pitt Street Haymarket NSW 2000, Australia

If you have questions, please contact the Privacy & Security Officer at:

E-mail: privacy@opensolar.com

Post: Level 1/477 Pitt Street Haymarket NSW 2000, Australia

Children

We do not knowingly collect information from children under the age of 18 and our Services are not aimed at them. If you are under the age of 18, you may not submit any personal information to us or register for the Services and if you want to use our Services, please rely on a parent or guardian to assist you.

1. Data collection and usage

We will collect store and use your personal information:

  1. to conduct our business;

  2. to allow access to and to use our Website;

  3. to allow you to register your interest or engage us in receiving our Services or so that we may receive services from you;

  4. If you are a user, to allow you to log-in and access our Services;

  5. to allow access to and use of our mobile application ("App");

  6. to meet our legal obligations;

  7. to fulfil any purpose we make known to you when we collect your personal information; and

  8. to fulfil other purposes set out in more detail in this section.

We have identified below the types of information we may collect or receive, how we will use it and why we will use it.

  1. Account registration and operation: in order to create an account to access the Services, to take the benefit of our Services or for us to operate our Services we will ask you (or a third party on your behalf) to provide certain information which may include: your email address, password, name of organisation and country location (collectively referred to as "Account Information"). We use Account Information to set you up as a user of our Services, to grant you access to our Services, to encourage you or others to use the platform, to provide technical assistance where required, to manage our relationships with you and other third parties in relation to the Services and to conduct analytics of usage of the Services (e.g. to assess how many times you visit certain pages on our platform, to obtain feedback, and to understand how you use our Services so that we can improve our Services). We are a data controller in respect of Account Information used for these purposes. The installer with whom you are contracting with for your solar project will be a data controller in respect of any other personal information you provide in the course of the provision of the services to you which may be stored on our Services.

  2. Operating the Website: we use business contact information and device information to ensure our website continues to operate efficiently and in order to understand how we could improve our Website and our Services. We generally do this by using cookies. Further information is set out in our  Cookie Policy.

  3. Responding to requests: in order to submit a request on our Services we will ask you to provide your email address and information relating to your request. We use this data in order to correspond with you and respond to your request.

  4. Data insight, trend analysis and forecasting: subject to applicable laws, we may anonymise, aggregate or otherwise de-identify your personal information (in a way that it is no longer possible to identify you) to carry out data and trend analysis regarding solar energy projects and demand and to share data regarding the solar and energy market with third parties for the purposes of product and service development.

  5. Engaging you to provide services to us: we may collect your contact details including your name and your email address in order to engage you to provide services to us or a third party on our behalf.

  6. >Marketing: We use Account Information to send you marketing which we think you may be interested in. Where required by applicable law, we will not send you marketing without first obtaining your consent.

  7. Connecting you with third parties: If you choose to provide us with your name and contact details in order to allow us to connect you with service providers, we will share your data with any service providers who we consider may be able to provide you with the services you require.

  8. Recruitment: we will collect the information you provide to us as part of any recruitment process (e.g. information contained in your CV, a copy of your ID, and information contained in our interview notes) to assess whether you are suitable for a role with us.

2. Legal bases for data processing

For the processing of your personal information, OpenSolar needs a lawful basis. The lawful basis for our processing depends on the purposes of the processing. Whenever we collect or otherwise process your personal information, we do so on the following legal bases:

  1. Where required by law, your consent to such collection and processing (for example, we may need your consent in order to process your personal information for direct marketing activities or when using technology such as cookies);

  2. Out of necessity for the performance of a contract with you, such as your agreement to our Service Agreement, our User Terms and Conditions and other agreements;

  3. For the purposes of our legitimate business interests provided that, in each circumstance, we will weigh the necessity of our processing for the purpose against your privacy and confidentiality interests, including taking into account your reasonable expectations, the impact of processing, and any safeguards which are or could be put in place. In all circumstances, we will limit such processing for our legitimate business interest to what is necessary for its purposes. Where we process personal information on the basis that the processing is necessary for the purposes of our legitimate business interests, such interests include:

    1. the promotion of our Services, improvement of your experience when interacting with us;

    2. analysing data obtained through your use of our Services to generate trends, intelligence, insights and analysis that we can share with third parties on an anonymised and aggregated basis;

    3. product development and enhancement, where the processing enables us to enhance, modify, personalize, or otherwise improve our Services and communications for the benefit of our customers, and to better understand how people interact with our Services;

    4. intra-organization transfers for administrative and other legitimate business purposes;

    5. fraud detection and prevention;

    6. defence or establishment of legal claims;

    7. enhancement of our, our employees and third parties' security (including cybersecurity, including improving the security of our network and information systems);

    8. general business operations and diligence (for example, to develop and maintain relationships with vendors, partners and other organizations and dealing with individuals who work for them); and

    9. providing our Services to you.

  4. Where the processing of your personal information is necessary for compliance with a legal obligation; for example, statutory tax retention periods, response to requests from government agencies (such as courts), customs authorities for customs clearance purposes.

If you would like to have more information about our legitimate interests to process your personal information, please contact us as set out below.

We do not make automated decisions which has significant legal effects regarding you. However, if this changes in the future, we will ensure that such decision making is compliant with the applicable laws and that you are informed of such decision making in line with the applicable laws.

3. Ways we collect your data and sources of data

Your personal information is either (a) provided by you (e.g. via our Website or your use of our Services); or (b) obtained from third parties (such as other users of our Services).

We may collect your personal information if you or your company (if applicable) are supplying products and/or providing Services to us or if we are supplying products and/or providing Services to you or your company.

In addition, we may also collect personal information about you directly and indirectly from activity on the Website. For example, When you visit our websites, platforms and download information from them, our Internet Service Provider (ISP) makes a record of your visit and records the following information: your Internet address; your domain name, if applicable; and the date and time of your visit to the website. Our ISP also collects information such as the pages our users access, the documents they download, links from other sites they follow to reach our site, and the type of browser they use. However, this information is anonymous and is only used for statistical and website development purposes.

In addition, like many organisations, we use "cookies" which are small text files a website can use to recognize repeat users, facilitate the user's ongoing access to and use of the site and to track usage behaviour of, for example, the webpages you visit. Please see our  Cookie Policy for further information.

4. Legal and other requirements

As explained above, some of the personal information we request is required to provide the Services and if it is not provided, we may not be able to provide the relevant Services to you or provide information you have requested from us.

Your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency, or in order to investigate, prevent or take action regarding suspected illegal activities or fraud, to enforce or apply our User Terms and Conditions and other agreements, to protect the rights, property or safety of group companies, customers, clients and others or in the defence of legal claims. We will not delete personal information if relevant to an investigation or a dispute or until applicable law allows for it to be deleted. It will continue to be stored until those issues are fully resolved and it can be lawfully deleted.

Any personal information you supply to us through our Website or use of the Services must be complete and accurate. Please note that we can contact you to verify your personal information, if we need to.

5. How long we keep your information

We will keep your information for as long as it is reasonably necessary and to deal with claims. We will also retain your information as necessary to comply with legal, accounting or reporting requirements.

There are also certain types of information which require to be retained for a certain period by law.

In general terms, the criteria we use to determine the retention periods is as follows:

These criteria may also mean we adjust the period of time we retain the categories of personal information detailed above.

We will remove your personal information if we no longer need it for the purposes set out above.

Please note that the length of time for which your personal information is held on our Services by the installer you have engaged with is determined by that installer as a data controller. Please contact them or see their privacy notice for further details.

Our retention practices in respect of certain personal information are as follows:

Marketing:

Disputes:

Please contact us at on the contact details above for more information on the specific retention periods that apply to your personal information.

6. Information we share

There are certain circumstances where we transfer your personal information to third parties such as our service providers and law enforcement agencies. These are as follows:

Your personal information may be transferred to other third party organisations in certain scenarios:

Your personal information may also be shared if it is made anonymous and/or aggregated, as in such circumstances the information will cease to be personal information.

7. Where your information will be held

The information that we collect from you may be stored at a destination outside the European Union (EU) / European Economic Area (EEA) and/or the United Kingdom (UK), including Australia and/or the US which do not have equivalent data protection laws to those applicable in the EU/EEA or the UK. It may also be processed by staff operating outside the UK and/or the EU/EEA who work for us.

When we transfer your personal information outside the UK and/or the EU/EEA, we will take relevant measures to protect the personal information in accordance with applicable laws and regulations. However, regardless of the differences in the data protection laws and regulations of destination countries to which we transfer personal information, we will require the protection of such personal information at a level not lower than the data protection level of the country in which the personal information was originally collected.

Where required by applicable data protection law, for transfers of personal data from the EU/EEA to non-adequate third countries we will typically use Standard Contractual Clauses (SCCs) as a way to ensure that adequate safeguards are in place. The European Commission has approved the form of SCCs. If you would like to obtain a copy of the Commission-approved SCCs please contact us using the contact details below.

Where required by applicable data protection law, for transfers of personal data from the UK to non-adequate third countries we will typically use the International Data Transfer Agreement (IDTA) as a way to ensure that adequate safeguards are in place.  The Information Commissioner has issued the form of IDTA. If you would like to obtain a copy of the Information Commissioner-issued IDTA please contact us using the contact details below.

8. Your Rights

You have certain rights in relation to your personal information. Some of these rights will only apply in certain circumstances. If you would like to exercise, or discuss, any of these rights, please contact the Privacy & Security Officer on the contact details above.

You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the EU/EEA where you are habitually resident (or in the UK if you live in the UK), where we are based or where an alleged infringement of Data Protection law has taken place.

9. Security

We are committed to keeping your personal information safe. We've got physical, technical and administrative measures in place to prevent unauthorised access or use of your information. Unfortunately, no data transmission over the Internet can be guaranteed to be totally secure, so please keep this in mind when deciding to provide your information to us (personal or non-personal) through our sites and products.

10. Links to third party website

Our Website, Services, marketing communications and other communications may, from time to time, contain links to and from the websites of others including third parties who purchase Services from us.

The personal information that you provide through these websites is not subject to this Notice and the treatment of your personal information by such websites is not our responsibility. If you follow a link to any of these websites, please note that these websites have their own Notices which will set out how your information is collected and processed when visiting those sites. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy notices of entities through which you choose to share.

11. Changes to this Notice

This Notice may be changed from time to time.

If we change anything important about this Notice (the information we collect, how we use it or why) we will highlight those changes at the top of this Notice and provide a prominent link to it for a reasonable length of time following the change.

Once this Notice is posted on our Website, it will automatically come into force. The latest version of this Notice will prevail over all previous versions.

If you would like to access previous versions of this Notice please contact the Privacy & Security Officer.

12. How to contact us

If you would like more information about the way we manage personal information that we hold about you, or are concerned that we may have breached your privacy and wish to make a complaint, please contact us as set out above. We will do our best to resolve your complaint.





Cookie Policy

General Information

This cookie policy describes how we use cookies and similar technologies on our websites and apps.

This cookie policy was last updated on 17th August 2021.

OpenSolar Pty Ltd Ltd. (OpenSolar, we, us, our) uses cookies and similar technologies as described in this cookie policy.

Please review this cookie policy carefully. It describes our use of cookies and similar technologies as well as our use of other methods to collect and share data regarding the usage of our website, mobile sites and mobile apps. For details on our use of data collection methods, please see our Privacy Notice.

Details of our use of cookies and similar technologies and how to control some of these are outlined below.

What are cookies?

A cookie is a small text file that is stored by your browser or app, and allows it to remember information between web pages and browser/app sessions. OpenSolar uses a number of "first party" cookies - generated by the OpenSolar websites and apps – and some "third party" cookies – deployed on our sites by third parties.

We generally only use cookies to remember you when you have logged in and to help us to understand user behaviour within our websites and apps.

Cookies can only store text, which are generally anonymous but may contain any identifiers such as your name or email address.

Cookies are secure – they can only store information that is put there by the browser, which is information the user has entered into the browser or that is included in the page request. They cannot run code. If a website encrypts the information in the cookie, only that website can read the information.

There are two different types of cookies: Session and Persistent. They are used for different things and contain different information.

Session cookies contain information that is used within your current browser session. These cookies are automatically deleted when you close your browser. Nothing from these cookies persists on your device after the time you spend on the website.

Persistent cookies are used to hold information that is used between visits. This data allows websites to recognise that you are a returning customer and react accordingly. Persistent cookies have a lifetime value that is set by the website, which can vary between a few minutes or several years.

For additional information about cookies, please visit:

Why use cookies

Cookies are used by the website to monitor your session as you progress through the website, including to keep track of your journey on the website and whether you've logged in to your user account on the website.

Web analytics cookies, including from our partners Google, allow us to track user interaction within the website. This gives us valuable insights which enable us to improve the website and the products and services we offer.

Turning off and deleting cookies

For our websites and apps that use non-essential cookies or cookies that are not required for the provision of the services you have requested, you can change your cookie settings in your web browser.All web browsers allow you to limit cookie behaviour, turn off cookies or delete them within the settings or options of the browser. The steps to do this are different for each browser, you can find instructions under the Help menu of your browser.

Disabling other types of cookies will also affect the monitoring of your progress through the website, but may not stop the analytics code from recognising your visit.

What do those cookies do?

We have categorized the cookies and tags on the OpenSolar website as follows:

Category Purpose
Strictly necessary cookies Default cookies enable our website to function properly and help us to deliver services associated with running the website. For example, without these cookies, it would be difficult for you to access secure areas of our website.
Optimisation These cookies store information and preferences so that any customisation or personalisation that you have selected is stored for future use.
Analytics These cookies will collection information about how users engage and interact with the website and whether you experience any errors. We collect this information for analytics purposes so that we can better understand how users engage with our website and measure the effectiveness of the features and functionality of the website.
Privacy option cookies These cookies are used to remember your cookie settings between visits to our site, so that our cookie banner and cookie preference centre do not appear every time you visit our site. If you disable these cookies our site will not remember your cookie settings and you may be asked for your cookie preferences again.

So that you have more details, we have set out below information regarding the cookies on the OpenSolar website.

The list below is not an exhaustive list.

Name of cookie Cookie owner Category Purpose Duration Function
Google Analytics Google Inc Analytics Analytics Varies Monitor user activity to improve products and services.
Amplitude Amplitude, Inc Analytics Analytics & Optimization Varies Monitor user activity to improve products and services.
Stripe Stripe
Varies by jurisdiction
Review and manage
Strictly necessary cookies, Optimisation, Analytics Security & Fraud Prevention. Varies Security, Fraud Prevention, Functionality, Authentication, Analytics, Advertising, Preferences.

You acknowledge that where we allow third parties, as identified above, to drop cookies, you should refer to the third party's privacy policy for information on what information they collect and how they use it.

Specifically, we may use Google Analytics ("Analytics Providers") to collect demographic and interest-level information and usage information from users that visit the website, including information about the pages where users enter and exit the website and what pages users view on the website, time spent, browser, operating system, and IP address.

Cookies allow Analytics Providers to recognize a user when a user visits our website and when the user visits other websites. Analytics Providers use the information they collect from our website and other websites to share with us and other website operators’ information about users including age range, gender, geographic regions, general interests, and details about devices used to visit our website and other websites and purchase items.

For more information regarding Google’s use of cookies, and collection and use of information, see the Google Privacy Policy (available at https://policies.google.com/privacy?hl=en). If you would like to opt out of Google Analytics tracking, please visit the Google Analytics Opt-out Browser Add-on (available at https://tools.google.com/dlpage/gaoptout).

Changes to our Cookie Policy

This cookie policy may be updated from time to time.

If we change anything important about this cookie policy we will notify you of the change. You may review the cookie policy by visiting our website and clicking on the Cookie Policy link.