PRIVACY POLICY (GDPR)
Effective from: 01/10/2026
Site publisher : OPNEO
GDPR contact : rgpd@opneo.fr
1. Data controller
The personal data collected on the site www.openo.fr is processed by the company OPNEO, represented by its legal representative. For any questions regarding the management of your personal data, you can write to: rgpd@opneo.fr .
2. Personal data collected
As part of the use of the site and subscribing to our offers (service provisions, SaaS subscriptions, purchases of PDF and PowerPoint files), we collect the following categories of data:
Identity and contact data: name, first name, email address, phone number, company name, postal and billing address.
Transaction and payment data: order details, purchase history, invoices. (Bank data is processed in an encrypted manner directly by our secure payment providers and is never stored on our servers).
Connection and usage data (SaaS): login credentials, IP addresses, service access logs.
Browsing data (Cookies): IP address, browser type, pages viewed.
3. Purposes and legal bases of processing
Purpose of processing | Data concerned | Legal basis (GDPR) |
|---|---|---|
Order management and billing (Services, SaaS, PDF, PPTX) | Identity, contact, billing data | Contract execution (Art. 6.1.b) |
Provision of access to the SaaS software and customer support | Identifiers, login logs, email | Contract execution (Art. 6.1.b) |
Sending download links (PDF & PowerPoint files) | Email address, order history | Contract execution (Art. 6.1.b) |
Accounting and legal obligations | Invoices, transaction history | Legal obligation (Art. 6.1.c) |
Sending newsletters or updates | Email address | Consent / Legitimate interest B2B |
Audience measurement and site improvement | Cookies, browsing data | Consent (Cookies) |
4. Recipients and data processors
Your personal data is strictly confidential and reserved for the internal use of the company OPNEO. They may be transmitted to our technical subcontractors only within the strict framework of the execution of our services :
Website and database host : Odoo S.A. (Belgium, European Union).
Secure payment providers : Stripe / PayPal / Odoo Payments (encrypted transaction processing).
Transactional email sending services : Integrated Odoo sending servers.
No personal data is sold, rented or transferred to third parties for commercial purposes.
5. Data retention period
Customer data (business relationship) : retained for the duration of the contract, then for 3 years from the last contact for prospecting purposes.
Accounting documents and invoices : retained for 10 years in accordance with legal obligations (Commercial Code).
SaaS service connection logs : retained for 12 months.
Cookies : retained for a maximum period of 13 months.
6. Your rights (Data Protection and Freedoms)
In accordance with the General Data Protection Regulation (GDPR) and the Data Protection and Freedoms Act, you have the following rights :
Right of access and rectification : to consult and correct your personal information.
Right to erasure (“right to be forgotten”) : to request the deletion of your data within the limits set by law.
Right to object and restrict : to object to processing or limit its scope.
Right to portability : to retrieve your data in a reusable format.
To exercise these rights, you can send your request to : rgpd@opneo.fr .
If you believe your rights are not being respected, you can file a complaint with the CNIL (National Commission on Informatics and Liberties) on cnil.fr.
7. Data Security
The company OPNEO implements appropriate technical and organisational measures (SSL/TLS encryption, secure access) to protect your data against any unauthorised access, loss or alteration.
8. Cookies
During your first visit, a banner allows you to accept, configure or refuse the placement of non-essential cookies. You can modify your preferences at any time from the bottom of the site page.