Privacy notice
This notice explains which personal data cobotmove.com processes, why, on what legal basis, who receives them, how long we keep them, and what your rights are.
1. Who is responsible
The controller of your personal data is ELintegration, the sole proprietorship (eenmanszaak) of Eli Lievens, Pannestraat 50, 9000 Gent, Belgium, enterprise number 0809.026.223.
For any question about your data, or to use your rights, write to [email protected].
2. What we process, and why
2.1 Your account
- Data
- Your email address, your password (stored only as a hash), your display name, and the dates you signed up and signed in.
- Why
- So that you can sign in, share programs, download, buy packs and see your licences.
- Legal basis
- The contract with you: the account you asked for (GDPR, article 6(1)(b)).
- How long
- Until you ask us to delete your account. Order data are kept longer (2.5).
2.2 Programs you share
- Data
- Your display name and bio, which are shown publicly next to your programs, and the texts, files and images you upload.
- Why
- To publish your programs in the catalogue.
- Legal basis
- The contract with you (article 6(1)(b)).
- How long
- Until you delete the program, or your account.
2.3 Free downloads
- Data
- Which listing you downloaded, your account, the time, and that you accepted the safety terms.
- Why
- To keep a record that the safety terms were accepted, and to count downloads.
- Legal basis
- Our legitimate interest in that record and those counts (article 6(1)(f)).
- How long
- As long as the listing exists. When your account is deleted, the record no longer points to you.
2.4 Integration requests
- Data
- Your name, email address, company, the robot brand, your message, and the listing it concerns.
- Why
- To answer your request.
- Legal basis
- Steps you ask us to take before a contract (article 6(1)(b)).
- How long
- Until your request has been handled. Then we delete it.
2.5 Orders
- Data
- Your account and email address; your name and billing address as you enter them on Stripe's payment page; your country; whether you buy as a business or as a consumer; your VAT number, if you give one; the robot serial number; Stripe's reference numbers for the payment and the invoice; the amounts and the VAT; the invoice number; the version of the terms of sale and licence; and your acknowledgement about the right of withdrawal.
- Why
- To carry out the sale, to invoice it, to keep our accounts and VAT records, and to handle withdrawals, refunds and after-sales.
- Legal basis
- The contract with you (article 6(1)(b)), and our legal obligations for accounting and VAT records (article 6(1)(c)).
- How long
- For the legal retention period of accounting and VAT records: seven years, counted from 1 January of the year after the purchase.
2.6 Your licence and your copy of the pack
- Data
- The robot serial number, the state of the licence and the time of activation. Your copy of the pack carries your robot serial number and your order id (the watermark, section 9 of the terms).
- Why
- To limit the licence to one robot, to build and deliver your copy, to let you download it again, and to trace a copy that leaks.
- Legal basis
- The contract with you (article 6(1)(b)). Tracing a leaked copy: our legitimate interest in protecting our programme (article 6(1)(f)).
- How long
- As long as the order (2.5).
2.7 Downloads of paid packs
- Data
- Which licence, the time, and the version of the pack. No IP address.
- Why
- To show when the supply of a pack began, which ends the consumer's right of withdrawal (section 8 of the terms), and to enforce the licence.
- Legal basis
- Our legitimate interest in that proof and in enforcing the licence (article 6(1)(f)).
- How long
- As long as the order (2.5).
2.8 Emails with us
- Data
- Your email address and what you write to us, such as an after-sales request with its order, product and serial number.
- Why
- To answer you, to solve serial problems, and to make quotations for paid support.
- Legal basis
- The contract with you, or steps you ask us to take before a contract (article 6(1)(b)).
- How long
- As long as your request and its follow-up need it. Emails about an order are kept as long as the order (2.5).
2.9 Visiting the site
- Data
- The technical data every browser sends, such as your IP address, your browser and the page you ask for.
- Why
- To deliver the pages to you and to protect the site against abuse. Cloudflare carries the traffic between your browser and our server.
- Legal basis
- Our legitimate interest in a working and secure site (article 6(1)(f)).
- How long
- Only as long as needed to deliver the site and to investigate abuse.
The site runs no analytics and no advertising. When a page opens, it loads nothing from third parties.
2.10 Storage in your browser
The site keeps your sign-in session in your browser's local storage, so that you stay signed in, and it remembers whether you chose the list or the card view of the catalogue. During a purchase, it keeps for the browser tab which licences you already had, to recognise the new one when you return from Stripe. This storage is strictly necessary for what you ask the site to do, so it needs no consent, and the site shows no cookie banner. The site sets no tracking or advertising cookies. Stripe's payment page is Stripe's own site, where Stripe's cookie policy applies.
3. Who receives your data
- Stripe, our payment service. Stripe processes the payment data (your name, email address, billing address, card details and VAT number) to take the payment, to calculate the VAT and to issue the invoice, on our behalf. Stripe also processes data as a controller for its own purposes, such as fraud prevention and its legal duties as a payment institution. Stripe's privacy policy explains this. We never see your card number.
- Cloudflare, Inc., which carries the traffic between your browser and our server, on our behalf.
- Accountable SA (Belgium), our invoicing software, on our behalf. It sends the structured electronic invoices to businesses registered for VAT in Belgium, through the Peppol network.
- Google (Google Workspace), which hosts our mailbox [email protected] and sends our emails to you, such as order confirmations and our answers, on our behalf.
- Combell (Belgium), the email provider of our domain elintegration.be, whose mail server sends the email you receive when you ask to reset your password, on our behalf.
- Public authorities, such as the tax and VAT authorities, when the law requires it.
The site, its database, its sign-in service (Supabase) and our payment service's server run on ELintegration's own server in Belgium. No hosting company processes your data. We do not sell your data, and we send no marketing emails.
4. Transfers outside the European Economic Area
Stripe, Cloudflare and Google belong to groups based in the United States, so your data may be transferred there. All three are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023, and all three also use the European Commission's standard contractual clauses. Accountable states that its remote technical support may occasionally work from outside the EEA, under the standard contractual clauses.
5. How long we keep your data
- Account and shared programs: until you delete them or ask us to.
- Orders, licences, downloads of paid packs and emails about an order: seven years, counted from 1 January of the year after the purchase (the legal retention period of accounting and VAT records).
- Records of free downloads: as long as the listing exists.
- Integration requests: until they have been handled.
- Backups: our server keeps copies of its database for about eight weeks (a daily copy for two weeks, then one copy a week). Data that are deleted disappear from the backups when the last copy that holds them is removed.
6. Your rights
You can ask us:
- for access to your data, and a copy;
- to correct data that are wrong or incomplete;
- to erase your data;
- to restrict the processing;
- for the data you gave us for the contract, in a machine-readable format (portability).
You can also object at any time, on grounds relating to your situation, to processing that rests on our legitimate interest.
Some rights have limits. For example, we cannot erase order data that the law requires us to keep. Write to [email protected]. We answer within one month, and we may ask you to show that the request is yours.
7. Complaints
You can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium, +32 2 274 48 00, [email protected], www.dataprotectionauthority.be. The Authority accepts complaints in Dutch, French or German, and asks you to contact us first. You can also turn to the data protection authority of the country where you live or work.
8. Data you must give
To buy a pack, you need an account, the data that Stripe's payment page asks for, and the serial number of your robot arm to activate the licence. Without them, we cannot sell or supply the pack. We make no automated decisions about you and do no profiling.
9. Changes to this notice
We update this notice when our processing changes. The date at the top shows the version.