Privacy policy

📅 Last updated : December 7, 2025

1. Introduction

This privacy policy describes how ALPANET S.A.S.U. collects, uses, retains and protects your personal data in the context of site usage Tap2Star.com and its associated services.

By accessing the Tap2Star.com website or using our services, you accept this policy.

2. Data controller

The data controller is:

📮 ALPANET S.A.S.U.

446 route de Plisson

72120 Val d'Étangson, France

📩 Contact form

3. Data collected

We collect the following data, depending on your use of the site or services:

  • Identity data : last name, first name, email
  • Connection data : IP address, logs, browser, operating system
  • Usage data : activated products, NFC/QR scans, preferences
  • Technical data : cookies, session identifiers, language

💡 Tap2Star.com does not collect banking data. Payments are made via secure third-party platforms (Amazon, etc.).

4. Processing purposes

Your personal data is processed for:

  • Manage your user account and activated products
  • Provide NFC/QR code redirection services
  • Ensure the security of services and data
  • Send technical notifications (activation, modifications)
  • Respond to your requests via support
  • Establish anonymous usage statistics (Matomo)
  • Comply with our legal and regulatory obligations

5. Legal basis for processing

The processing carried out is based on:

  • The execution of a contract (e.g.: managing your customer account, product activation)
  • Your consent (e.g.: sending newsletters, non-essential cookies)
  • Our legitimate interest (e.g.: service improvement, security, statistics)
  • A legal obligation (e.g.: log retention, archiving)

6. Retention period

Your data is kept:

  • For the duration of your account usage
  • Then 3 years after your last activity (inactive account)
  • Technical logs: 12 months maximum
  • Product activation data: product lifetime

7. Data recipients

Data is accessible only to authorized ALPANET personnel or its technical subcontractors, namely for:

  • Web hosting
  • Sending emails (notifications)
  • Technical support

All our subcontractors comply with the GDPR and are subject to confidentiality obligations.

8. Data hosting

All personal data from Tap2Star.com is hosted exclusively on servers located in Europe, in data centers compliant with GDPR requirements.

🇪🇺 Guaranteed European hosting
Your data never leaves the European Union.

9. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access : obtain a copy of your data
  • Right to rectification : correct your inaccurate data
  • Right to erasure : delete your data
  • Right to restriction : limit the processing of your data
  • Right to object : object to processing
  • Right to portability : retrieve your data in a structured format
  • Right to withdraw consent : withdraw your consent at any time

You can exercise these rights at any time via the contact form or by mail to the headquarters address.

10. Security

ALPANET implements all reasonable technical and organizational measures to guarantee the security, confidentiality and integrity of your data:

  • HTTPS encryption (TLS/SSL)
  • Passwords hashed with bcrypt
  • Regular encrypted backups
  • Access control and strong authentication
  • Protection against CSRF attacks
  • Monitoring and secure logs

11. Cookies

We use cookies to:

  • The proper functioning of the site
  • Measure audience anonymously
  • Improve your user experience

By default, we use tools self-hosted (such as Matomo) in respect of your privacy, in line with our commitment to European digital sovereignty.

To learn more, consult our Cookie policy.

12. Complaint

If you believe your rights are not being respected, you can file a complaint with the CNIL (National Commission for Information Technology and Civil Liberties):

👉 https://www.cnil.fr