Privacy Policy – OpenTop

 

Last updated: 12 October 2026

 

This English version is provided for information purposes only. In the event of any discrepancy, the French version shall prevail.

 

This policy explains how OpenTop collects and uses your personal data when you use the website opentop.fr or place an order, in accordance with Regulation (EU) 2016/679 (GDPR) and amended French Law No. 78-17 of 6 January 1978 (the "Informatique et Libertés" Act).

 

1. Data Controller

 

Nicolas CHAVRIER, sole trader (entrepreneur individuel) operating under the trade name OpenTop, SIREN 891735276, 9 rue de la cascade, 38300 Bourgoin-Jallieu, France.

E-mail: opentopshop@gmail.com – Telephone: +33 6 45 74 42 45.

 

2. Data Collected

 

– Identity and contact data: last name, first name, postal address, e-mail address, telephone number.

– Order data: products purchased, amounts, order history, delivery and billing addresses, communications with customer service.

– Account data: username and password (stored in encrypted form by Wix; OpenTop has no access to it).

– Payment data: processed directly by the payment providers. OpenTop never has access to your bank card numbers.

– Technical data: IP address, browser type, pages viewed, connection logs.

 

Mandatory form fields are marked with an asterisk. Without this information, the order cannot be processed. Simply browsing the website does not require any personal data, apart from technical data.

 

3. Purposes, Legal Bases and Retention Periods

 

– Order management, delivery, customer service and warranties: processing based on performance of the contract; data retained for the duration of the business relationship, then 5 years (limitation period).

 

– Invoices and accounting records: processing based on a legal obligation; retained for 10 years (Article L123-22 of the French Commercial Code).

 

– Customer account: processing based on performance of the contract; retained until the account is deleted, or 3 years after the last contact.

 

– Newsletter and commercial offers: processing based on consent, or on legitimate interest for products similar to those already purchased (Article L34-5 of the French Postal and Electronic Communications Code); retained 3 years after the last contact, or until unsubscription.

 

– Payment fraud prevention: processing based on legitimate interest; retained for as long as necessary for the transaction.

 

– Website security and connection logs (IP address): processing based on legitimate interest and a legal obligation; retained for a maximum of 1 year.

 

– Audience measurement: processing based on consent (see Article 9); cookies retained for a maximum of 13 months, related statistics for a maximum of 25 months.

 

At the end of these periods, data is deleted or anonymised.

 

4. Newsletter and Marketing

 

You only receive OpenTop's newsletter if you have agreed to it by ticking the box provided. If you are already a customer, OpenTop may send you e-mail offers for products similar to those you have purchased, unless you objected when your e-mail address was collected.

 

You can unsubscribe at any time, free of charge, using the link in each e-mail or by writing to opentopshop@gmail.com.

 

5. Recipients

 

Your data is intended for OpenTop. It is never sold or rented. It is shared only with the service providers necessary for the business, acting on OpenTop's behalf:

 

– website hosting and online shop: Wix;

– payment: Stripe, PayPal;

– delivery: La Poste, Chronopost and other carriers selected when ordering;

– e-mail: Google (Gmail);

– automation and drafting-assistance tools for customer service replies: Make, Anthropic.

 

Your data may also be disclosed to administrative or judicial authorities where required by law.

 

6. Transfers Outside the European Union

 

Some service providers (notably Wix, PayPal, Google, Make, Anthropic) may process data outside the European Union, in particular in the United States. Such transfers are governed by a European Commission adequacy decision (including the EU–US Data Privacy Framework) or by the European Commission's standard contractual clauses. You can obtain a copy of these safeguards by writing to opentopshop@gmail.com.

 

7. Security

 

OpenTop implements appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), restricted access, service providers offering security guarantees. In the event of a data breach presenting a risk to you, OpenTop notifies the CNIL (French data protection authority) and, where necessary, the persons concerned, under the conditions laid down by the GDPR.

 

8. Your Rights

 

You have the following rights regarding your data:

– right of access and rectification;

– right to erasure;

– right to restriction of processing;

– right to object, in particular to direct marketing, at any time and without giving reasons;

– right to data portability;

– right to withdraw your consent at any time, without affecting processing already carried out;

– right to set instructions regarding your data after your death.

 

To exercise these rights, write to opentopshop@gmail.com or by post to the address given in Article 1. Proof of identity may be requested if there is reasonable doubt as to your identity. OpenTop responds within one month, which may be extended by two months if the request is complex.

 

If you believe your rights have not been respected, you may lodge a complaint with the CNIL: www.cnil.fr – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. If you reside in another EU country, you may also contact your national data protection authority.

 

9. Cookies

 

A cookie is a small file placed on your device when you visit the website.

 

– Strictly necessary cookies (basket, account login, security, remembering your cookie choices): these are essential for the website to function and do not require your consent.

– Audience measurement and advertising cookies: these are only placed after your consent, obtained via the banner displayed on your first visit. Refusing is as easy as accepting.

 

You can change or withdraw your consent at any time via the "Cookie settings" link in the footer. You can also delete cookies from your browser settings. Cookies subject to consent have a maximum lifespan of 13 months; your choice is requested again at least every 13 months.

 

Refusing non-essential cookies does not prevent you from using the website or placing an order.

 

10. Minors

 

The website is intended for adults. A minor may only place an order with the permission of their legal representative.

 

11. Changes to this Policy

 

OpenTop may amend this policy, in particular to reflect changes in the law or in service providers. The date of the last update is shown at the top of this page. In the event of a significant change, customers with an account are informed by e-mail.