Dr. Florian BreslerAgency quality

Privacy

This privacy policy informs you which personal data are processed when you visit florian-bresler.com, for which purposes and on which legal basis, and which rights you have.

1. Controller

Dr. Florian Bresler
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: [email protected]

No data protection officer has been appointed because there is no legal obligation to do so.

2. The most important points in brief

  • This website is an informational personal profile. It has no user accounts, no newsletter, no advertising and no shop.
  • The website is delivered via Cloudflare. We do not use analytics scripts, analytics cookies or other tracking tools.
  • Fonts are loaded from our own server; there is no connection to third-party font services.
  • Videos from YouTube are loaded only when you actively click “Play”. Before that, no connection to YouTube or Google is established.
  • Contact is possible by email.
  • Links to other websites (for example drflorianbresler.com, florianbresler.com and RePEc) are simple links. Data are transmitted to these providers only when you click a link and open their page.

3. Hosting, delivery and server logs (Cloudflare)

This website is delivered via the infrastructure of Cloudflare: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare operates a worldwide network of data centers (content delivery network) and protects the website against attacks.

With every request, Cloudflare processes technically necessary data, in particular:

  • IP address of the requesting device,
  • date and time of the request,
  • requested address (URL) and amount of data transferred,
  • referrer URL (the page visited before, if transmitted),
  • browser type, operating system and device type (user agent),
  • HTTP status code and information on the encrypted connection.

Purpose: delivery of the website, ensuring stability and security, defense against attacks and misuse.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in a secure, fast and error-free provision of the website. The processing is necessary for this because the website can neither be delivered nor protected against attacks without these connection data (cf. Recital 49 GDPR). Your interests do not override because only the data technically necessary for the request are generated and these are not used for advertising or profiling. Insofar as information is read from your end device, this is permitted without consent under Section 25(2) no. 2 TDDDG because it is strictly necessary for the website you requested.

Storage period: Cloudflare does not store HTTP request logs by default, and we have not set up any log storage. For the security and traffic overview in our Cloudflare account, Cloudflare evaluates a sample of requests (including IP addresses); these data are available there for the past 31 days. Beyond that, Cloudflare processes the data only as long as necessary for the stated purposes and deletes them afterwards; Cloudflare does not state a fixed period for this. We do not combine these data with other data sources.

To protect against automated attacks, Cloudflare may in individual cases display a security check in the browser. After the check is passed, Cloudflare sets the technically necessary cookie “cf_clearance” so that the check does not have to be repeated; by default it is valid for 30 minutes. The legal basis for storage on the end device is Section 25(2) no. 2 TDDDG, for further processing Art. 6(1)(f) GDPR.

Data processing agreement: Cloudflare processes the data as a processor on the basis of a data processing agreement under Art. 28 GDPR.

Transfer to the USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Should the certification lapse, Cloudflare has additionally agreed EU standard contractual clauses (Art. 46(2)(c) GDPR).

4. Embedded YouTube videos (loaded only after a click)

On the video pages we show videos published on YouTube. When you open such a page, you first see only a preview tile delivered from our own server. In this state, no connection to YouTube or Google is established.

Only when you click the “Play” button does your browser load the YouTube player in the so-called enhanced privacy mode from www.youtube-nocookie.com. For users in the European Economic Area, the provider of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

After your click, the following in particular are transmitted to Google: your IP address, date and time, the address of the page on which the video is embedded, information on browser, operating system and device, and your interactions with the video. Google may use cookies or comparable technologies (for example local storage) in your browser. If you are logged in to a Google account at the same time, Google may assign the request to your account. We have no influence on this processing by Google.

Legal basis: your consent, which you give by clicking “Play” (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Your selection is not stored; with every new page view the video is again loaded only after a click. You can withdraw your consent at any time with effect for the future by stopping playback and leaving or reloading the page. You can delete cookies already set by Google in your browser settings.

Transfer to the USA: Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

Further information: Google's privacy policy at https://policies.google.com/privacy.

5. Contact by email

If you write to [email protected], we process your sender address, the content of your message, date and time, and the technical headers of the email.

Purpose: handling and answering your message.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering messages); insofar as your message aims at concluding a contract, Art. 6(1)(b) GDPR.

Email service: The mailbox [email protected] is operated via iCloud Mail. For customers in the European Economic Area, the provider is Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Incoming and outgoing emails are stored on Apple servers. Apple may also use servers of third-party providers for this. We use iCloud Mail on the basis of the iCloud terms of use; Apple processes the data according to its privacy policy. According to Apple, personal data are generally stored with Apple Inc. in the USA. Apple Inc. is not certified under the EU-U.S. Data Privacy Framework; according to Apple, the transfer to the USA is based on standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR).

Storage period: We delete messages once your request has been dealt with, at the latest six months after the last message on the matter, unless a legal obligation requires longer retention.

Obligation to provide data: Providing your data is voluntary. Without an email address, however, we cannot reply to you.

6. Documents for download

Academic articles as PDF are not provided on this website; the PDF link leads to drflorianbresler.com, where the privacy policy of drflorianbresler.com applies to the processing there.

8. Data security

The connection to this website is encrypted throughout via TLS; your browser is instructed to use encrypted connections exclusively (HSTS). There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

9. Your rights

You have the following rights against us with regard to your personal data:

  • right of access (Art. 15 GDPR),
  • right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to withdraw consent given, with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Insofar as we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to [email protected] or to the postal address given above is sufficient.

10. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de (online complaint: https://www.lda.bayern.de/de/beschwerde.html)

11. Changes to this privacy policy

We adapt this privacy policy when the website or the services used change. The version published here at the time applies.