Privacy

opusheritage.com is published by OPUS France, which determines the purposes of the processing described below. When a partner local authority or monument owner sends communications to its visitors, that partner and OPUS France act as joint controllers within the meaning of Article 26 GDPR, each responsible for the processing it carries out; the essential terms of this arrangement are available on request. For any question, write to us at contact@opusheritage.com.

We compile strictly anonymous traffic statistics (pages viewed, visit duration, device type, source, approximate geographic area) to improve the site. This measurement works without any cookie or persistent identifier: a non-reversible, daily technical identifier (visitor_day_hash) is derived on the server side and renewed every day, with no cross-day re-identification possible. Your IP address and browser information are used transiently, in memory, then immediately discarded. This traffic data cannot identify you and is used solely for this measurement.

When you create an account, we process your email address and display name, the profile details you provide (age bracket, city and relationship to it, interests, language) and your activity on the network: trail passports and stamps, visits recorded by scanning a QR code on site, reviews you post and places you save. This data gives you access to your account and passport and records your progress across the network.

Where you explicitly consent for a given city or monument, your profile information (email address, display name, age bracket, relationship to the city) and a summary of your activity are made available to the relevant local authority or owner, who may then send you communications about that place: news, events and trails. This consent is collected separately for each partner and you may withdraw it at any time, from your account or via the unsubscribe link in each message; withdrawal ends the corresponding visibility and communications.

Audience measurement relies on the consent exemption provided by the French data protection authority (CNIL) and on the publisher's legitimate interest (Art. 6(1)(f) GDPR). The operation of your account and passport relies on the performance of the service you request (Art. 6(1)(b)). Visibility to partners and the communications they send rely exclusively on your consent (Art. 6(1)(a)), which you may withdraw at any time.

Your account data is kept for as long as your account is active and deleted when it is closed. Traffic data is kept for a maximum of thirteen (13) months, then automatically deleted. Aggregated, anonymous statistics, which cannot identify you, may be kept without a time limit.

Data is processed by OPUS France and its technical hosting providers within the European Union.

In accordance with the GDPR, you have the right to access, rectify, erase, object to and restrict the processing, as well as the right to withdraw your consent at any time. To exercise these rights, write to us at contact@opusheritage.com. You may also lodge a complaint with the French data protection authority (CNIL).