Privacy Policy

Last updated: 9 October 2026

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Federico Bresciani
Lochnerstraße 12–14
50674 Cologne
Germany
Email: info@federicobresciani.com
Website: https://federicobresciani.com

For questions regarding data protection or to exercise your rights under the General Data Protection Regulation (GDPR), please contact me using the email address above.

2. General Information

The protection of your personal data is important to me.

This Privacy Policy explains how personal data is collected, processed and stored when you visit this website, use the contact form or communicate with me by email.

Personal data refers to any information relating to an identified or identifiable natural person.

Personal data is processed only where a valid legal basis exists, in accordance with the GDPR and applicable German data protection legislation.

3. Website Hosting and Server Logs

This website is hosted by:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur, Germany

When you visit this website, IONOS processes technical information necessary to deliver the website and maintain its security and functionality.

This information may include:

• IP address
• Date and time of access
• Requested pages and files
• Browser type and version
• Operating system and device type
• Referring webpage (referrer URL)

Processing is carried out under Article 6(1)(f) GDPR, based on my legitimate interest in ensuring the secure, reliable and technically stable operation of this website.

According to IONOS, IP addresses are anonymized for its Webhosting visitor statistics, and standard Webhosting visitor data is retained for eight weeks.

A Data Processing Agreement pursuant to Article 28 GDPR forms part of the contractual arrangements with IONOS.

Further information: IONOS Data Protection.

4. IONOS WebAnalytics

This website uses IONOS WebAnalytics to obtain statistical information about website usage and improve its performance.

According to IONOS, the service analyses technical access information, including requested pages, access times, browser and device information, referrer URLs and anonymized IP-address information.

IONOS states that WebAnalytics does not use cookies and that IP addresses are anonymized after transmission.

The website's technical inspection identified no separate client-side analytics script or tracking pixel. The statistical analysis therefore appears to rely on server-side access data.

Where personal data is processed, the legal basis relied upon is Article 6(1)(f) GDPR. My legitimate interest is understanding how the website is used and improving its technical performance and reliability.

No Google Analytics, Meta Pixel or advertising-tracking services are used.

Further information: IONOS WebAnalytics.

5. Contact Form and Email Communication

When you contact me through the contact form or by email, I process the information you provide to handle and respond to your inquiry.

This may include your name, email address, message content and any additional information you voluntarily provide.

Contact-form messages are transmitted using the SMTP service of:

Proton AG
Route de la Galaise 32
1228 Plan-les-Ouates, Switzerland

Messages are received and stored through Proton Mail.

The contact form is processed on the website's server and does not maintain a separate database of submitted names, email addresses or message contents.

Where your inquiry concerns the preparation or performance of a contract with you, processing is based on Article 6(1)(b) GDPR.

For other inquiries, processing is based on Article 6(1)(f) GDPR, reflecting my legitimate interest in responding to correspondence and professional inquiries.

Providing your information is voluntary. However, a valid contact address and sufficient information about your inquiry are necessary for me to respond.

Further information: Proton Privacy Policy.

6. Protection Against Spam and Misuse

The contact form uses technical measures to prevent spam, excessive submissions and misuse, including server-side validation, a honeypot field and rate limiting.

For rate limiting, a cryptographic identifier derived from the visitor's IP address is temporarily stored together with submission timestamps.

These identifiers are used exclusively to limit excessive form submissions.

A maximum of five submissions per identifier is permitted within a ten-minute period.

Expired records are removed when subsequent form submissions occur and through an automated hourly cleanup process.

Under normal operation, these records are therefore retained for no longer than approximately 70 minutes.

The identifiers are treated as pseudonymized personal data rather than assumed to be fully anonymous.

The legal basis is Article 6(1)(f) GDPR, reflecting my legitimate interest in protecting the website and its communication systems against abuse.

7. Retention of Correspondence

Personal data submitted through the contact form or by email is retained only for as long as necessary for the purpose of the correspondence, subject to applicable legal obligations.

The following retention principles apply:

• General inquiries: Normally deleted within 12 months of the last communication if no ongoing professional relationship exists.
• Professional inquiries and potential collaborations: May be retained for up to 24 months after the last relevant communication, where justified by a continuing professional purpose.
• Contracts and legally relevant correspondence: May be retained for longer where required by statutory obligations or necessary for the establishment, exercise or defence of legal claims.

Stored correspondence is reviewed periodically and deleted when no longer necessary.

8. Adobe Fonts

This website uses Adobe Fonts, a web-font service provided by Adobe, to ensure a consistent typographic presentation.

The fonts are loaded directly from Adobe's servers through an external CSS stylesheet.

When you access this website, your browser establishes a connection with Adobe's infrastructure. Technical information, including your IP address and information associated with the font request, is transmitted to Adobe.

According to Adobe, its web-font delivery service does not use cookies, and IP addresses received for font delivery are not stored.

Adobe may process technical information relating to font delivery, licensing compliance and royalty calculations.

The legal basis relied upon is Article 6(1)(f) GDPR. My legitimate interest is maintaining the website's consistent visual design and professional presentation.

Adobe may process information outside the European Economic Area. Adobe describes international data-transfer safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses, where applicable.

Further information: Adobe Fonts Privacy Information.

9. Cookies and Similar Technologies

This website does not currently use tracking cookies, advertising cookies or analytics cookies.

Its own functionality does not require persistent identifiers in localStorage or sessionStorage.

According to their respective providers, IONOS WebAnalytics and Adobe Fonts do not use cookies for the services described above.

The absence of cookies does not mean that no personal data is processed. Technical information may still be transmitted when accessing the website, loading external fonts or using the contact form.

10. External Links

This website contains links to external websites, including orchestras, concert venues, festivals and social media profiles.

These are ordinary hyperlinks. External websites are not automatically loaded merely because a link appears on this website.

When you follow an external link, the destination website may process personal data according to its own privacy policy.

11. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Proton AG is established in Switzerland, which benefits from an adequacy decision by the European Commission pursuant to Article 45 GDPR.

Adobe may process information internationally, including in the United States. Adobe describes applicable transfer safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses where relevant.

The specific safeguards depend on the service provider and processing activity.

12. Your Rights Under GDPR

Subject to the conditions and limitations established by applicable law, you have the following rights:

• Access: Article 15 GDPR
• Rectification: Article 16 GDPR
• Erasure: Article 17 GDPR
• Restriction of processing: Article 18 GDPR
• Data portability: Article 20 GDPR, where applicable
• Objection to processing: Article 21 GDPR
• Withdrawal of consent: Article 7(3) GDPR, where processing is based on consent

Where processing is based on legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

In that case, processing will cease unless compelling legitimate grounds override your interests, rights and freedoms, or processing is necessary for the establishment, exercise or defence of legal claims.

To exercise your rights, please contact: info@federicobresciani.com

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.

The supervisory authority responsible for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Website: https://www.ldi.nrw.de/

You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

14. Data Security

Appropriate technical and organizational measures are used to protect personal data against unauthorized access, loss, misuse or alteration.

These include encrypted website connections, protected server-side SMTP credentials, server-side form validation and measures against automated abuse.

No method of electronic communication or storage can guarantee absolute security.

15. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in the website's functionality, service providers, data-processing practices or applicable legal requirements.

The current version is published on this page.

Last updated: 9 October 2026