Today, I was helping someone to set up their new TV box (powered by Android TV, yay...) and mobile broadband router from the Swedish ISP called Tele2.
The 5G router is branded as a Huawei router, with the model number "5G CPE 5". However. The actual manufacturer is ZOWEE Technology (Heyuan) Co., Ltd.
To be able to use router, you're forced to accept a terms of service agreement.
The terms of service agreement includes these parts:
In order to effectively operate and improve the Services (including but not limited to fraud prevention, risk assessment, investigation and customer support), we reserve the right to review your content at any time to verify compliance with this Agreement. If your content is found to be in violation of this Agreement, we have the right to modify and/or remove your content at any time without notice.
In plain words:
- They log metadata passing through your router.
- They can disable your router without explanation.
Validation, interpretation, updating, performance and dispute resolution of this Agreement shall be governed by the laws of the People's Republic of China, without regard to its conflict of law rules.
No GDPR jurisdiction? HELLO? We're in the EU!
Also. Let's not forget that Chinese law allows state access to corporate data under national security legislation.
And!
Let's not forget about what were missing here:
- The agreement mentioned a "privacy policy", but did not include one.
- No definition of personal data.
- No data minimization clause, which is usually a core privacy principle (at least under GDPR).
- No mention of retention limits, like how long they keep private data and all.
- No third-party sharing restrictions. Which means that they could (and probably will) share and sell your data to partners and authorities (beyond legal requirements)
- No mention of deletion rights, no right to see what data exists, no right to request deletion and no right to opt out.
The only re,medy they gave you in the entire agreement was this sad part:
Your sole remedy is to stop using the Services
I'm honestly speechless.
