The Blob Company
LEGAL

Privacy policy

How this website handles personal data

Controller and scope

The controller is THE BLOB COMPANY (TBC), SASU, 22 route du Fousseret, 31370 Labastide-Clermont, France — matthieu.gallego@the-blob-company.com — +33 6 13 58 40 19.

This policy covers this website only. Other services mentioned or linked on the website, such as Powerland Map, are governed by their own policies.

Purposes and legal bases

We process personal data for the following purposes:

  • Answering your enquiries sent by email or phone and, where you ask for it, taking pre-contractual steps — legal basis: steps taken at your request before entering into a contract, or our legitimate interest in conducting professional exchanges
  • Protecting confidential documents and the security of the website, including access checks and limiting repeated password attempts — legal basis: our legitimate interest in securing the website and its documents
  • Internal visit statistics to understand how the website is used — legal basis: our legitimate interest in understanding the website's audience

Visit statistics

Each page view is recorded in the website's own database, except in the administration area. A record contains:

  • a random visit identifier generated in your browser and kept for the current tab
  • the page path and title
  • the full referring address when your browser sends it (up to 500 characters), its domain and a traffic source category
  • a device category (desktop, tablet or mobile) derived from your browser's user agent, which is not stored itself
  • the date and time of the view and the time spent on the page, capped at one hour

Protected documents and security

The password you enter is checked on the server. It is not stored in browser storage or in the session cookie. The cookie records only the access authorisation and expires after 12 hours.

To limit repeated password attempts, our code uses your IP address only in server memory, for a 10-minute window, without writing it to the database. Our hosting providers may process IP addresses and technical data in their own operation of the service.

Contact

The website has no active public form collecting data. Contact links open your own email application or phone. Emails you send are received and kept in our professional email service, Google Workspace.

Recipients

Your data is accessible only to authorised people at The Blob Company and to the service providers needed to run the website and our communications. This website does not transmit your data to commercial partners.

Third-party content and external links

When a page loads logos or map tiles from a third party, your browser connects directly to that provider, which receives your IP address and technical request data. Links to external websites are governed by the policies of those websites.

Transfers outside the European Economic Area

Some providers are located or process data outside the European Economic Area, notably in the United States. Lovable's data processing agreement provides for standard contractual clauses or other safeguards depending on the case: https://lovable.dev/data-processing-agreement

You may ask us for more information about these safeguards, or a copy of them, using the contact details above.

Retention

  • Access session cookies: 12 hours
  • Password attempt counter: 10 minutes, in server memory
  • Random visit identifier: until the browser tab is closed
  • Language preference: until you clear it from your browser
  • Visit statistics are currently kept in the database until they are deleted by the administrator. No automatic deletion is configured at this time.
  • Correspondence: for as long as needed to handle your request and the professional relationship, then, depending on its nature, for as long as required by legal retention obligations or to establish or defend legal claims

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing and, where applicable, to data portability. To exercise these rights, write to matthieu.gallego@the-blob-company.com or to the registered office address above.

You may also lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr/fr/plaintes

Last updated

13 October 2026