Dr. Florian Bresler – home
Local time Munich
DE
Contact

Privacy policy

This privacy policy explains which personal data are processed when you visit florianbresler.com, for which purposes and on which legal basis, and which rights you have.

1. Controller

Dr. Florian Bresler
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: kontakt@florianbresler.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Summary

  • This website is an informational personal profile. It has no user accounts, no newsletter, no advertising and no shop.
  • The website is delivered via Cloudflare. We do not use any analytics scripts, analytics cookies or other tracking tools.
  • Fonts are loaded from our own server; there is no connection to third-party font services.
  • YouTube videos are only loaded when you actively click “Play”. Before that, no connection to YouTube or Google is made.
  • You can get in touch by email.
  • If you switch the colour scheme or pause the motion, your browser stores this choice locally on your device (localStorage or sessionStorage). It is not transmitted to us; the legal basis for the storage is § 25 (2) no. 2 TDDDG.
  • Links to other websites (for example the English research website drflorianbresler.com or the German website florianbresler.de) are plain links. Data are only transmitted to these providers when you click a link and open their page.

3. Hosting, delivery and server logs (Cloudflare)

This website is delivered via the infrastructure of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare operates a global network of data centres (content delivery network) and protects the website against attacks.

With every request, Cloudflare processes technically necessary data, in particular:

  • the IP address of the requesting device,
  • date and time of the request,
  • the requested address (URL) and the amount of data transferred,
  • the referrer URL (the previously visited page, if transmitted),
  • browser type, operating system and device type (user agent),
  • HTTP status code and information on the encrypted connection.

Purpose: delivering the website, ensuring stability and security, preventing attacks and misuse.

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in providing the website securely, quickly and without errors. The processing is necessary for this because the website can neither be delivered nor protected against attacks without these connection data (cf. Recital 49 GDPR). Your interests do not override ours because only the data technically required for the request are processed and they are not used for advertising or profiling. Where information is read from your device in the process, this is permitted without consent under § 25 (2) no. 2 TDDDG because it is strictly necessary to provide the website you requested.

Retention: By default, Cloudflare does not retain HTTP request logs, and we have not set up any log retention. For the security and traffic overview in our Cloudflare account, Cloudflare evaluates a sample of requests (including IP addresses); this information is available there for the past 31 days. Beyond that, Cloudflare processes the data only for as long as necessary for the purposes stated and then deletes it; Cloudflare does not specify a fixed period for this. We do not combine these data with other data sources.

To protect against automated attacks, Cloudflare may in individual cases display a security check in your browser. Once the check has been passed, Cloudflare sets the technically necessary cookie “cf_clearance” so that the check does not have to be repeated; by default it is valid for 30 minutes. The legal basis for storing it on your device is § 25 (2) no. 2 TDDDG, and for further processing Art. 6 (1) (f) GDPR.

Processing on our behalf: Cloudflare processes the data as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Transfer to the USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer is based on the adequacy decision of the European Commission on the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Should the certification lapse, Cloudflare has additionally agreed to EU standard contractual clauses (Art. 46 (2) (c) GDPR).

4. Embedded YouTube video (loaded only after a click)

The media page shows an excerpt from the münchen.tv talk show “Lejeune – Dr. Florian Bresler”, published on YouTube. When you open the page, you first see only a tile served from our own server. In this state, no connection to YouTube or Google is made.

Only when you click “Play” does your browser load the YouTube player in the privacy-enhanced mode from www.youtube-nocookie.com. For users in the European Economic Area, YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

After your click, the following data in particular are transmitted to Google: your IP address, date and time, the address of the page on which the video is embedded, information about browser, operating system and device, and your interactions with the video. Google may use cookies or similar technologies (for example local storage) in your browser. If you are logged into a Google account at the same time, Google can attribute the request to your account. We have no influence on this processing by Google.

Legal basis: your consent, given by clicking “Play” (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Your choice is not stored; on every new page view, the video again only loads after a click. You can withdraw your consent at any time with effect for the future by stopping playback and leaving or reloading the page. You can delete cookies already set by Google in your browser settings.

Transfer to the USA: Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission on the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

Further information: Google’s privacy policy at https://policies.google.com/privacy (external link).

5. Contact by email

If you write to kontakt@florianbresler.com, we process your sender address, the content of your message, date and time, and the technical headers of the email.

Purpose: handling and answering your message.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in answering messages).

Email service: The mailbox kontakt@florianbresler.com is operated via iCloud Mail. For customers in the European Economic Area, the provider is Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Incoming and sent emails are stored on Apple’s servers. Apple may also use third-party servers for this purpose. We use iCloud Mail on the basis of the iCloud Terms and Conditions; Apple processes the data in accordance with its Privacy Policy (external link). According to Apple, personal data are generally stored by Apple Inc. in the USA. Apple Inc. is not certified under the EU-U.S. Data Privacy Framework; according to Apple, the transfer to the USA is based on the standard contractual clauses of the European Commission (external link) (Art. 46 (2) (c) GDPR).

Retention: we delete messages once your enquiry has been dealt with, at the latest six months after the last message on the matter, unless a legal obligation requires longer retention.

Obligation to provide data: providing your data is voluntary. Without an email address, however, we cannot reply to you.

This website contains links to external websites, for example to the articles and the doctoral research on the English research website drflorianbresler.com and to the German version of individual pages. These are plain links without embedded functions of these providers (“social plugins”). Only when you click a link do you leave this website. The respective provider is responsible for data processing on the target page.

7. Data security

The connection to this website is encrypted throughout via TLS; your browser is instructed to use encrypted connections only (HSTS). There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

8. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR),
  • right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to withdraw consent with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): where we process your data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to kontakt@florianbresler.com or to the postal address above is sufficient.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de (external link)

10. Changes to this privacy policy

We adapt this privacy policy when the website or the services used change. The version published here applies.