GDPR

Privacy policy

We are committed to protecting your personal data. This page explains what data we collect, why we collect it, and how you can exercise your rights.

Last update: May 2026 - Applies to all TeamBlender platform users.

1. Data controller

2. Data collected

Depending on your platform usage, we may collect:

  • Account data: name, email, encrypted password, role (manager, HR, participant)
  • Session data: session name, selected challenges, activity results, team composition
  • Navigation data: IP address, browser type, visited pages (if analytics enabled)
  • Contact data: messages sent through the contact form

We do not collect sensitive data under GDPR Article 9 (ethnic origin, political opinions, health data, etc.).

3. Processing purposes

  • User account management and authentication
  • Organization and facilitation of team sessions
  • Session-related notifications (invites, confirmations)
  • Contact request handling
  • Platform improvement and usage analytics (if enabled)
  • Compliance with legal and accounting obligations

4. Legal basis

  • Contract performancefor account management and feature access
  • Legitimate interestfor platform improvement and fraud prevention
  • Consentfor marketing communications or analytics activation
  • Legal obligationfor accounting and tax retention obligations

5. Retention period

  • Active account data: duration of contractual relation + 3 years
  • Session data: 12 months after session end
  • Contact data: 3 years from last interaction
  • Navigation data: 13 months maximum (if analytics enabled)
  • Accounting data: 10 years (legal obligation)

After these periods, your data is deleted or anonymized.

6. Data recipients

Your data is never sold. It may be shared with:

  • Hosting provider: [NOM HÉBERGEUR] — for secure data hosting
  • Email provider: Brevo (Sendinblue) — for transactional notifications
  • Payment provider: Stripe — for subscription processing (no banking data stored on our servers)
  • Competent authorities: only upon legal request

All providers are contractually bound by strict confidentiality obligations and, whenever possible, host data in Europe.

7. Your rights

Under GDPR, you have the following rights. To exercise them, contact us at contact@teamblender.io.

Right of accessGet a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete data
Right to erasureRequest deletion of your data
Right to portabilityReceive your data in a structured format
Right to objectObject to specific processing activities
Right to restrictionTemporarily restrict a processing activity

8. Cookies

TeamBlender only uses strictly necessary cookies for platform operation (session, authentication). No third-party advertising cookie is set without your explicit consent.

9. Complaint

If you believe your rights are not respected, you can submit a complaint to the CNIL www.cnil.fr

10. Changes

We reserve the right to modify this policy at any time. The last update date is shown at the top of the page. By continuing to use TeamBlender after a change, you accept the updated policy.

See also: Legal notice