C3S
ARTICLE 1: PREAMBLE
This Privacy Policy is intended to inform users of the website:
-
How their personal data is collected. Personal data means any information that can identify a user. This may include, but is not limited to: first and last name, age, postal or email address, location data, or IP address;
-
The rights available to them regarding this data;
-
The identity of the controller responsible for processing personal data collected and processed;
-
The recipients of such personal data;
-
The website’s policy on cookies.
This policy supplements the Legal Notice and the Terms and Conditions of Use available to users at the following address:
ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA
In accordance with Article 5 of Regulation (EU) 2016/679 (GDPR), personal data must be:
-
Processed lawfully, fairly, and transparently in relation to the data subject;
-
Collected for specified, explicit, and legitimate purposes (see Article 3.1 below), and not further processed in a manner incompatible with those purposes;
-
Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
-
Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;
-
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed;
-
Processed in a manner that ensures appropriate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
Processing is lawful only if, and to the extent that, at least one of the following conditions applies:
-
The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
-
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
-
Processing is necessary for compliance with a legal obligation to which the controller is subject;
-
Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
-
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
-
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests, fundamental rights, or freedoms of the data subject, in particular where the data subject is a child.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN USING THE WEBSITE
3.1 Data collected
The personal data collected in the course of our activities includes:
-
For each account: email address; first and last name; postal address; city; postal code; country; IP address; banking details.
-
For companies: VAT number; company registration number.
The collection and processing of such data serves the following purposes:
-
Email address: used for account identification.
-
First and last name: used to identify the customer when creating an account.
-
Postal address, city, postal code, country: used for billing purposes.
-
IP address: used for statistics, security, and server error tracking.
-
Banking details: processed by the payment provider.
3.2 Method of data collection
When you use our website, the following data is automatically collected:
-
No personal data other than that provided during the creation of a user account is collected.
Other personal data is collected when you perform the following operations on the platform:
-
No personal data other than that provided during the creation of a user account is collected.
Data is stored by the data controller under reasonable security conditions, for a duration of up to one (1) year after the last user account activity.
The company may retain certain personal data beyond the above period in order to comply with its legal or regulatory obligations.
3.3 Data hosting
The website https://www.cerbere3s.com is hosted by:
Infomaniak Network SA
Rue Eugène Marziano 25
1227 Les Acacias (GE)
Switzerland
+41 22 820 35
55
3.4 Transmission of data to third parties
Certain personal data strictly necessary for the payment process (such as first name, last name, email address, and banking details) may be transmitted to our partner:
Payment service provider – Mollie, Keizersgracht 126, 1015 CW Amsterdam, The Netherlands.
3.5 Cookie policy
Users are informed that during their visits to the website, one or more cookies may be automatically installed on their browser.
The cookies used by https://www.cerbere3s.com are encrypted and strictly necessary for the website’s operation, particularly for use of the user account. These cookies expire only when the user chooses to delete them, by logging out of their session.
No cookies used by https://www.cerbere3s.com are intended for the sale of personal data, nor do they originate from such use.
By continuing to browse the website, the user consents to the use of these cookies. However, it is possible to disable them at any time in the browser settings.
ARTICLE 4: DATA CONTROLLER
Personal data is collected by C3S, a French simplified joint-stock company (SAS) with share capital of €1,000, registered under number 941480220.
The data controller can be contacted as follows:
-
By post: 1 rue Sainte-Madeleine, 67000 Strasbourg, France
-
By email: contact@cerbere3s.com
ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING
Any user whose personal data is processed may exercise the following rights, pursuant to Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi n°78-17 of 6 January 1978):
-
Right of access, rectification, and erasure of data (Articles 15, 16, and 17 GDPR);
-
Right to data portability (Article 20 GDPR);
-
Right to restriction of processing (Article 18 GDPR) and right to object to processing (Article 21 GDPR);
-
Right not to be subject to a decision based solely on automated processing;
-
Right to determine what happens to one’s data after death;
-
Right to lodge a complaint with the competent supervisory authority (Article 77 GDPR).
To exercise your rights, please send a request to:
-
C3S, 1 rue Sainte-Madeleine, 67000 Strasbourg, France
-
Or by email: contact@cerbere3s.com
In order for the data controller to comply with the request, the user may be required to provide certain information such as full name, email address, and account, personal space, or subscriber number.
For further information on your rights, please visit: www.cnil.fr.
ARTICLE 6: AMENDMENTS TO THE PRIVACY POLICY
The publisher of https://www.cerbere3s.com reserves the right to modify this Privacy Policy at any time in order to ensure compliance with applicable law.
Any modifications will not affect purchases previously made on the website, which remain subject to the policy in effect at the time of purchase, as accepted by the user when validating the purchase.
Users are invited to consult this Policy each time they use our services, without formal prior notification being required.
This Privacy Policy, published on 23/09/2025, was last updated on 23/09/2025.