Skip to main content

Legal notice

Publisher

Company name: Keroberos

Legal form: SASU (Simplified Joint Stock Company, France)

Share capital: 1500 €

Registered address: 58 rue de Monceau CS 48756 75380 Paris CEDEX 08

SIREN: 919 968 776

RCS: Paris

VAT number: FR66919968776

Publication director: Xavier Legout

Contact: contact@keroberosgroup.com

Hosting

Provider: OVH SAS

Address: 2 rue Kellermann, 59100 Roubaix, France

Phone: +33 9 72 10 10 07

Data center: Gravelines, France

Intellectual property

All content on this site (text, images, graphics, logo) is the exclusive property of Keroberos unless otherwise stated. Any reproduction, distribution, or use without prior written authorisation is prohibited.

Personal data

Controller

Keroberos SASU is the controller of the personal data collected on this site. For any question related to this policy, contact contact@keroberosgroup.com.

Data Protection Officer

Keroberos has not appointed a Data Protection Officer, as its processing activities do not meet the criteria set out in GDPR Article 37. For any data-related request, contact contact@keroberosgroup.com.

What we collect and why

We process two categories of personal data:

  • Contact form submissions: name, email address, and message content. The legal basis is pre-contractual measures at your request (GDPR Article 6.1.b) when your message relates to a potential project, quote, or collaboration, or our legitimate interest in responding to inquiries about our services (GDPR Article 6.1.f) for other messages. We use this data solely to respond to you.
  • Server logs: IP address, user agent, requested URL, timestamp, and HTTP status code. The legal basis is our legitimate interest in protecting the site against abuse and attacks (GDPR Article 6.1.f).

Is providing this data mandatory?

Providing personal data through the contact form is voluntary. However, without the information we request, we cannot respond to your enquiry. Server log collection is automatic and does not require any action on your part.

Automated decision-making

We do not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects concerning you.

How long we keep it

  • Contact form submissions: 45 days from the date of submission, after which they are automatically deleted.
  • Server logs: 12 months from collection.

Who has access

Your data is accessed only by Keroberos staff with a legitimate need. We do not sell, rent, or share your data with third parties for marketing purposes.

The only data processor involved is our hosting provider, OVH SAS (Gravelines, France), which stores and processes server data on our instructions under a Data Processing Agreement compliant with GDPR Article 28.

Where your data is stored

All data is hosted within the European Union, specifically at OVH's Gravelines datacenter in France. No data is transferred outside the EU.

Security measures

We apply appropriate technical and organisational measures to protect your personal data, including HTTPS encryption for all site traffic, restricted administrative access, regular security updates, and encrypted daily backups. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and inform you without undue delay, in accordance with GDPR Articles 33 and 34.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:

  • Access: obtain a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data.
  • Restriction: limit how we process your data.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on our legitimate interest.
  • Withdraw consent: at any time, for data we process on the basis of your consent.

To exercise any of these rights, contact contact@keroberosgroup.com. We respond within 30 days.

Right to lodge a complaint

If you believe your rights are not respected, you may file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. www.cnil.fr

Cookies

This site uses only essential cookies required for basic site functionality (session cookies for the administration interface). No advertising, tracking, or analytics cookies are set. No consent banner is required because only essential cookies are used. The only additional client-side storage is a theme preference (light/dark mode) saved in your browser's localStorage, which never leaves your device.

If non-essential cookies are introduced later (for example, privacy-friendly analytics), this page will be updated and a consent mechanism will be added before activation.

Changes to this policy

This policy may be updated to reflect changes in the site, the services, or applicable regulations. The date below indicates when the most recent version was published.

Last updated: April 20, 2026