oppn.

GDPR

Last updated: 16 October 2026

This page states, article by article, how Oppn complies with Regulation (EU) 2016/679 (GDPR). The full detail of what is collected is in the Privacy Policy.

Controller (Art. 4 §7, Art. 13)

Alexandre Ehrlich EI — SIRET 99300094200017, TVA FR45993000942
3 Rue des Arquebusiers, 67000 Strasbourg, France
Legal representative: Alexandre Ehrlich
Contact: mail@oppn.net
No data protection officer is required for this activity.

Legal bases (Art. 6)

  • Art. 6 §1 b — running the account, the badge generator, the gateway redirects and the statistics you use.
  • Art. 6 §1 f — legitimate interest in securing the service, preventing abuse and publishing aggregate click counts.
  • Art. 6 §1 a — consent for the audience measurement script, loaded only when its identifier is configured.
  • Art. 6 §1 c — legal obligations we must meet as a French business.

Your rights (Art. 15–22, Art. 12)

  • Access a copy of your data (Art. 15)
  • Have incorrect data corrected (Art. 16)
  • Have data erased (Art. 17)
  • Restrict processing (Art. 18)
  • Receive your data in a portable format (Art. 20)
  • Object to processing (Art. 21)

Exercise them at mail@oppn.net. We answer within one month (Art. 12 §3). You can also complain to the CNIL.

Minimisation and retention (Art. 5 §1 c, Art. 5 §1 e)

Only the fields needed for the statistics are kept: no full IP address, no advertising identifier, no browsing history. Click rows are deleted with their link; account data is deleted when the account is closed.

Sub-processors (Art. 28)

PlanetHoster (4416 Louis-B.-Mayer Street, Laval, Quebec, H7P 0G1, Canada, www.planethoster.com) hosts the service, and the authentication and storage services operated for this project process account data on our behalf under their own data processing terms.

Transfers outside the EU (Art. 44–49)

Part of the infrastructure is hosted in Canada. That transfer relies on the safeguards provided by the applicable data processing terms and the European Commission’s standard contractual clauses.

Security and breaches (Art. 32–34)

HTTPS everywhere, hashed passwords, access limited to what is needed. If a breach is likely to affect your rights, we notify the CNIL within 72 hours and you as soon as reasonably possible (Art. 33–34).

No automated decisions (Art. 22)

No profiling and no automated decision producing legal effects is applied through Oppn.