Privacy Policy

How we protect and handle your data

Introduction

At Blast Paris, we place great importance on protecting your privacy. This privacy policy explains how we collect, use, share and protect your personal information when you use our website and services.

By using our website and services, you accept the practices described in this privacy policy. If you do not agree with this policy, please do not use our site or services.

Important note: This privacy policy complies with the European Union's General Data Protection Regulation (GDPR), the Digital Services Act (DSA), the AI Act of 2024 and other applicable data protection laws of 2025.

Information We Collect

Information You Provide to Us

We collect information that you provide directly to us, including:

  • Identification information (name, email address)
  • Professional information (company name)
  • Communication information (messages you send us through our contact forms)
  • Appointment information (dates and times selected through our Calendly booking system)

Information Collected Automatically

When you visit our website, we automatically collect certain information, including:

  • Technical information (IP address, browser type, device used, operating system)
  • Navigation information (pages visited, time spent on each page, links clicked)
  • Performance information (loading times, errors encountered)
  • Cookies and similar technologies (see our cookie section below)

How We Use Your Information

We use the information we collect for the following purposes:

Purpose Legal Basis Retention Period
Providing and improving our services Contract performance, legitimate interest Duration of business relationship + 3 years
Communicating with you Contract performance, legitimate interest Duration of business relationship + 3 years
Personalizing your experience Consent, legitimate interest 13 months (cookies)
Analyzing website usage Legitimate interest 26 months (analytical data)
Marketing and business prospecting Consent Until consent withdrawal or 3 years after last contact
Complying with legal obligations Legal obligation According to applicable legal requirements

Cookies and Similar Technologies

Our site uses cookies and similar technologies to improve your experience, analyze traffic and personalize content. Cookies are small text files stored on your device when you visit our site.

Types of Cookies We Use

  • Essential cookies: Necessary for the functioning of the site (always active)
  • Analytical cookies: Help us understand how visitors interact with our site
  • Functional cookies: Allow us to remember your preferences and choices
  • Marketing cookies: Used to offer you relevant advertisements

Cookie Management

You can manage your cookie preferences via our cookie banner or by changing your browser settings. Please note that disabling certain cookies may affect the functionality of our site.

Sharing Your Information

We do not sell your personal data to third parties. We may share your information in the following circumstances:

Service Providers

We work with third-party service providers who help us operate our site and provide our services. These providers have access to your information only to perform tasks on our behalf and are required not to disclose or use it for other purposes.

Business Partners

With your consent, we may share your information with our business partners to offer you certain products, services, or promotions.

Legal Obligations

We may disclose your information if required by law or in response to valid legal requests (such as a court order or subpoena).

Business Transfers

If Blast Paris is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We take the security of your personal data very seriously and implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

These measures include:

  • Encryption of sensitive data
  • HTTPS protocols for all communications
  • Strict access controls for our employees
  • Regular security audits
  • Training our staff on data security practices

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your Data Protection Rights

In accordance with the GDPR, Digital Services Act, AI Act of 2024 and other applicable data protection laws of 2025, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request the correction of inaccurate or incomplete data.
  • Right to erasure: You can request the deletion of your personal data in certain circumstances.
  • Right to restriction of processing: You can request the limitation of processing of your data in certain circumstances.
  • Right to data portability: You can request the transfer of your data to another data controller in a structured, commonly used and machine-readable format.
  • Enhanced portability rights (2025): You can request the direct transfer of your complete user profile and all associated data between service providers.
  • Right to object: You can object to the processing of your data for direct marketing purposes or based on our legitimate interests.
  • Right to withdraw consent: When processing is based on your consent, you can withdraw it at any time.
  • Right to human review: You have the right to request human review of decisions made solely by automated processing, including AI systems, that significantly affect you.
  • Right to AI transparency: You have the right to know when you are interacting with AI systems and how your data is used to train or improve these systems.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month.

If you believe that our processing of your personal data infringes data protection legislation, you have the right to lodge a complaint with the competent supervisory authority, including the European Data Protection Board (EDPB), the Information Commissioner's Office (ICO) in the UK, or the Commission Nationale de l'Informatique et des Libertés (CNIL) in France.

Changes to Our Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to regularly review this page to stay informed about our privacy practices.

In case of significant changes, we will inform you by email or by a prominent notice on our website before the changes take effect.

Contact Us

If you have any questions about this privacy policy or our data protection practices, please contact us:

Blast Paris

Email: contact@blast.paris

Last updated: August 29, 2025

Return to homepage