Privacy policy.

01What this policy covers

This policy covers the borrowandback.com website only.

The data processed inside the Bob app (your account, your messages, your groups, your loans) is a separate matter, described in the privacy policy shown when you sign up in the app. This website has access to none of it.

02Data controller

BOB BORROW & BACK, SAS, 52 chemin de la Closerie des Lilas (VC 217), 83500 La Seyne-sur-Mer, France. Contact: contact@borrowandback.com.

03What this site does not do

• no account, no sign-up, no password
• no third-party measurement tool, no Google Analytics or equivalent: audience measurement, if you accept it, is done by our own server
• no advertising network, no tracking pixel
• no social media button that loads by itself
• no sale or transfer of data to third parties
• no profiling, no automated decision-making

04Server logs

Like any server, the one serving this site records the requests it receives. Each line holds the IP address, the date and time, the page requested, the response code, the declared browser and the referring page where there is one.

• Purpose: keeping the site running, diagnosing faults, detecting abuse and attacks.
• Legal basis: the legitimate interest in the security and availability of the service (Article 6(1)(f) GDPR).
• Retention: logs rotate across three 20 MB files, the oldest being deleted as they fill. In practice, a few days to a few weeks depending on traffic.
• Recipients: nobody beyond the publisher and its hosting provider.

05The contact form

The form on the contact page sends nothing to this server. It prepares a message in your own mail software, which you send yourself. Until you send it, nothing leaves your device.

Once received, your message is kept for as long as it takes to handle your request, then three years from the last exchange, in line with the French data protection authority's guidance on managing contacts.

06The interview video

The home page features an interview hosted on YouTube. It is not loaded when the page opens. What you see is an image served by this server; Google's player is only inserted when you click it, and on the youtube-nocookie.com domain.

Before that click, Google receives nothing. Afterwards, playback is governed by Google's terms, and Google may set its own trackers.

07What is kept in your browser

Until you have accepted anything, the site uses no cookies. If you accept audience measurement, a bob-visiteur cookie is set: it holds only a random number, which keeps the same visit from being counted twice and says nothing about you.

The measurement records the pages read and the buttons or links clicked. It never records the content of a form field. The lines go into this server's log and are passed to nobody.

Two preferences are also kept in your browser's local storage and are sent nowhere.

The detail is on the cookie policy.

08Your rights

You have the right to access, rectify, erase, restrict, object to and port the data concerning you (Articles 15 to 22 GDPR). To exercise them, write to contact@borrowandback.com.

If the answer does not satisfy you, you may lodge a complaint with the French data protection authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr, or with the supervisory authority of your own country.

09Transfers outside the European Union

The server is in Germany. No data from this site is transferred outside the European Union, unless you start the video yourself, which then puts you in touch with Google.

10Changes

This policy may change. The date it was last updated is at the top of this page.