Privacy
What this site knows about you
Not much. It sets no cookies, has no forms and loads no fonts, videos or scripts from other sites. Here is what does happen when you visit.
Who is responsible
Sebastian Florescu is responsible for this site and for the data described here (the “controller”, in the language of the EU’s General Data Protection Regulation, or GDPR). You can reach me at hello@sebastianflorescu.com.
Hosting
The site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States, and reaches you over an encrypted connection. When your browser asks for a page, Vercel’s servers receive the details every request carries: your IP address, the date and time, the page you asked for, the page that sent you, and your browser and operating system. The site can’t reach your screen without them, and they help protect the servers from abuse. The legal basis is my legitimate interest in running a website that works and stays secure (Art. 6(1)(f) GDPR). How long the logs are kept is up to Vercel, which says it keeps such data only as long as necessary.
Visitor statistics
I use Vercel Web Analytics to see how many people visit and which pages they read. It sets no cookies. For each page view it records the page, the page that sent you, the time, your approximate location (country, region and city), your device type, and your browser and operating system with their versions. To tell one visit from another, it turns your request into a scrambled code (a hash) and throws that code away after 24 hours. The legal basis is my legitimate interest in knowing whether anyone reads the site (Art. 6(1)(f) GDPR).
What I see are totals, not people.
If you write to hello@sebastianflorescu.com, your message passes through Namecheap, Inc., the company that manages this domain, and lands in my personal mailbox at Google. I use it only to reply, and keep it only as long as our conversation needs it, unless the law requires me to keep it longer. The legal basis is my legitimate interest in answering you (Art. 6(1)(f) GDPR).
Data sent to the United States
Vercel, Namecheap and Google are US companies, so the data above leaves the EU. Vercel and Google say they are certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognized as giving adequate protection. Namecheap says it relies on the EU’s standard contractual clauses.
Links to other sites
The site links to LinkedIn, to the book’s own site on Canva and to PubMed. Nothing goes to them until you click, and from then on their privacy policies apply.
There is no profiling, no advertising and no automated decision-making on this site. If that ever changes, this page changes first.