Legal centre
Who sells, under which rules, with which data and what recourse. Designed to stay readable when printed or saved as PDF.
Privacy notice
Which data the seller processes, why, for how long, and what it does not process: your robot's images and sound.
Controller and contact
MOLDEREZ-CONSULT SRL, trading as MEO Safety, is the controller for the site, orders, invoicing, customer service and the newsletter. Postal address: Square Valère Gille 13/5, 1050 Ixelles, Belgium. Privacy contact: gilles.capelluto@molderez-consult.be. Appointing a data protection officer is not mandatory for our activity; the address above remains the single contact point for any question about your data.
What the seller processes and what it does not
The robot you buy is configured and used by you in the manufacturer's app. The images, sound, recordings on microSD card or in the cloud, the face-recognition profiles and the conversations with the voice assistant do not pass through this site and are not accessible to MEO Safety. For that data, the controller is you, for your household use, and the manufacturer Enabot for the app and the cloud. The section on international transfers and the Responsible home use page set this out.
Data, purposes, legal bases and retention
- Name, email, delivery address: performance of the sales contract (Article 6.1.b GDPR). Kept for the contract term, then archived with the invoice.
- Basket and session: site operation (legitimate interest). Thirty days after last access.
- Invoice and payment reference: payment, refunds, accounting and VAT obligation (legal obligation). Ten years from 1 January following issue.
- Customer-service messages: handling the request (contract and legitimate interest). Case duration, then two years.
- Newsletter: information sends (consent). Until withdrawal, with a minimal objection record.
- Technical and security logs: reliability and fraud prevention (legitimate interest). Twelve months.
- Proof of the cookie choice: demonstrating consent (legal obligation). Twelve months.
Recipients and processors
- OVHcloud (Gravelines, France, EU/EEA): hosting of the application, database and backups.
- Mollie B.V. (Netherlands, EU/EEA): payment processing.
- bpost (Belgium, EU/EEA): carriage and parcel tracking.
Each processor is bound by a contract compliant with Article 28 of the GDPR. We do not sell your data and do not use it for advertising profiling.
International data transfers
Running the shop requires no transfer of personal data outside the European Union. Should a non-EU provider be added, its exact entity, the transfer mechanism and the transfer impact assessment would be published here before it goes live.
However, as soon as you use the manufacturer's app and cloud services, your data may be transferred to China, where Enabot is established. China does not benefit from an adequacy decision of the European Commission. Such transfers require appropriate safeguards, for example standard contractual clauses together with a transfer impact assessment, as the Court of Justice recalled in the Schrems II judgment. MEO Safety is not the exporter of that data; we invite you to read Enabot's privacy policy and, if you wish, to limit cloud use, which remains optional in favour of local recording on a microSD card.
Camera, audio and biometric data
The products are mobile cameras with a microphone, night vision and two-way audio. The EBO Max and EBO X models offer face recognition, and some assistants voice recognition: this is biometric data, a special category protected by Article 9 of the GDPR. Processing it requires a strengthened basis, in practice the consent of the people concerned. Strictly personal and household use benefits from an exemption, but that exemption disappears as soon as you film third parties outside the family circle or public space. See the Responsible home use page.
Your rights
You may request access, correction, erasure, restriction and portability of your data, and object to processing based on legitimate interest. Objection to direct marketing is absolute and unconditional. You may withdraw your consent at any time, without affecting the lawfulness of earlier processing. Requests go to gilles.capelluto@molderez-consult.be; we may verify your identity before replying.
A complaint may be lodged with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels (autoriteprotectiondonnees.be), without prejudice to a judicial remedy.
Minors, security and changes
The site is not aimed at minors and does not open independent accounts for them. We protect your data through encryption in transit, Argon2id password hashing, CSRF protection on all write operations, admin access logging, multi-factor authentication for privileged accounts, vulnerability handling and an incident procedure, including notifying a breach to the Authority within 72 hours where the law requires. No service can promise perfect security. This notice may be updated; the applicable version is dated and retained.