Privacy policy

1. Data controller

OPUS is the controller of personal data processing relating to its website, prospects, clients and service users.

When local authorities use OPUS software, client authorities remain the controllers of data processing carried out in their applications. OPUS then acts as a technical processor under the applicable data protection regulations.

Data protection contact: contact@opus.nc

2. Data collected

We collect the following categories of data:

• Contact form: name, email, local authority, message
• User accounts: name, email, organization
• Operational data: information about burial rights, deceased persons and burial-right holders, including names, addresses and contact details

3. Purposes of processing

• Responding to enquiries and demonstration requests
• Managing user accounts and authentication
• Cemetery administration on behalf of local authorities
• Generating official administrative documents
• Tracing actions involving personal data through an audit log

4. Legal basis

• Consent: contact form
• Performance of a contract: account and SaaS platform management
• Legal obligation: retention of administrative records
• Legitimate interest: security and service improvement

5. Retention periods

• Contact data: 3 years after the last exchange
• User accounts: contract duration plus 1 year
• Funerary data: duration of the burial right, plus archiving in accordance with legal obligations
• Audit logs: 5 years

6. Data recipients

Data is accessible only to:

• authorized staff of client local authorities;
• authorized platform users;
• authorized OPUS administrators;
• technical providers strictly necessary to operate the service, including hosting, authentication, backup, messaging and security.

No data is sold or passed to third parties for commercial purposes.

7. Data hosting

Data is hosted by professional cloud providers following recognized standards for security, availability and data protection.

Further information about hosting and security measures can be provided to client local authorities on request.

8. International transfers

Some technical providers used by OPUS may be located, or operate infrastructure, outside the European Union.

Where such transfers are necessary, OPUS ensures that appropriate safeguards apply in accordance with the applicable data protection regulations.

9. Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: request restriction of processing

To exercise these rights, contact us at contact@opus.nc.

10. Cookies

The website uses technical cookies needed for the platform to function properly. A consent banner allows you to accept or refuse non-essential cookies. Your choice is stored locally on your device.

11. Security

We implement appropriate technical and organizational measures to protect your data: encrypted communications (HTTPS), role-based access controls (RLS), secure authentication and logging of actions involving sensitive data.

12. Confidentiality commitment

Operational data entrusted by local authorities through their use of OPUS software remains their exclusive property.

OPUS does not reuse this data for commercial purposes, advertising, external statistics or training artificial intelligence models.

Data is processed only to operate, maintain and secure the subscribed services.

13. Updates

This privacy policy may be updated. The date of the latest modification is shown below.

Last updated: 27/10/2026