Privacy policy

📅 Last updated : December 7, 2025

1. Introduction

This privacy policy describes how ALPANET S.A.S.U. collects, uses, retains and protects your personal data in the context of site usage Tap2Star.fr and its associated services.

By accessing the Tap2Star.fr website or using our services, you accept this policy.

2. Data controller

The data controller is:

📮 ALPANET S.A.S.U.

446 route de Plisson

72120 Val d'Étangson, France

📩 Contact form

3. Data collected

We collect the following data, depending on your use of the site or services:

Identity data : last name, first name, email
Connection data : IP address, logs, browser, operating system
Usage data : activated products, NFC/QR scans, preferences
Technical data : cookies, session identifiers, language

💡 Tap2Star.fr does not collect banking data. Payments are made via secure third-party platforms (Amazon, etc.).

4. Processing purposes

Your personal data is processed for:

Manage your user account and activated products
Provide NFC/QR code redirection services
Ensure the security of services and data
Send technical notifications (activation, modifications)
Respond to your requests via support
Establish anonymous usage statistics (Matomo)
Comply with our legal and regulatory obligations

5. Legal basis for processing

The processing carried out is based on:

The execution of a contract (e.g.: managing your customer account, product activation)
Your consent (e.g.: sending newsletters, non-essential cookies)
Our legitimate interest (e.g.: service improvement, security, statistics)
A legal obligation (e.g.: log retention, archiving)

6. Retention period

Your data is kept:

For the duration of your account usage
Then 3 years after your last activity (inactive account)
Technical logs: 12 months maximum
Product activation data: product lifetime

7. Data recipients

Data is accessible only to authorized ALPANET personnel or its technical subcontractors, namely for:

Web hosting
Sending emails (notifications)
Technical support

All our subcontractors comply with the GDPR and are subject to confidentiality obligations.

8. Data hosting

All personal data from Tap2Star.fr is hosted exclusively on servers located in Europe, in data centers compliant with GDPR requirements.

🇪🇺 Guaranteed European hosting
Your data never leaves the European Union.

9. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

Right of access : obtain a copy of your data
Right to rectification : correct your inaccurate data
Right to erasure : delete your data
Right to restriction : limit the processing of your data
Right to object : object to processing
Right to portability : retrieve your data in a structured format
Right to withdraw consent : withdraw your consent at any time

You can exercise these rights at any time via the contact form or by mail to the headquarters address.

10. Security

ALPANET implements all reasonable technical and organizational measures to guarantee the security, confidentiality and integrity of your data:

HTTPS encryption (TLS/SSL)
Passwords hashed with bcrypt
Regular encrypted backups
Access control and strong authentication
Protection against CSRF attacks
Monitoring and secure logs

11. Cookies

We use cookies to:

The proper functioning of the site
Measure audience anonymously
Improve your user experience

By default, we use tools self-hosted (such as Matomo) in respect of your privacy, in line with our commitment to European digital sovereignty.

To learn more, consult our Cookie policy.

12. Complaint

If you believe your rights are not being respected, you can file a complaint with the CNIL (National Commission for Information Technology and Civil Liberties):

👉 https://www.cnil.fr