Dear visitors, thank you for visiting our website. We want you to feel safe and comfortable while using it. Protecting your privacy is very important to us. The following privacy policy is intended to inform you about how we collect, use and disclose personal data.

Data Controller

Rhetoric Excellence – Dr Frank Lorenz
Frank Lorenz
Fehmarner Str. 17
04159 Leipzig
lorenz@rhetoric-excellence.de

Usage Data

In order to improve the quality and functionality of our website and for the purposes of criminal prosecution where necessary, we store statistical data relating to individual access to our pages. This data record consists of

• the page from which the file was requested,
• the name of the file,
• the date and time of the request,
• the volume of data transferred,
• the access status (file transferred, file not found),
• a description of the type of web browser used,
• the IP address of the requesting computer.

 The legal basis for this data processing is Article 6(1)(f) UK GDPR / GDPR (legitimate interests of the controller).

The reasons stated above also constitute the legitimate interest for data processing pursuant to Article 6(1)(f) GDPR.

Cookies

We use cookies to improve user navigation. The use of cookies makes it easier for users to use websites. Certain pages cannot be accessed, or cannot be accessed properly, without them. These reasons also constitute the legitimate interest for this data processing pursuant to Article 6(1)(f) GDPR (the use of cookies for analytical purposes is addressed separately). Common browsers provide settings that allow cookies to be blocked. You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies, or to activate the automatic deletion of cookies when the browser is closed. If you make such settings, it cannot be guaranteed that you will be able to access all functions of this website without restrictions.

Your Rights as a User

a) Right to Confirmation
Every data subject has the right to obtain confirmation as to whether personal data concerning them is being processed.

b) Right of Access (Art. 15 GDPR)
Every data subject has the right to obtain, free of charge, information about the personal data stored about them and a copy of that information.

c) Right to Rectification (Art. 16 GDPR)
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.

d) Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR)
Every data subject has the right to request the immediate deletion of personal data concerning them, provided that one of the legally prescribed grounds applies and processing is not required.

e) Right to Restriction of Processing (Art. 18 GDPR)
Every data subject has the right to request the restriction of processing where one of the legally prescribed grounds applies.

f) Right to Data Portability (Art. 20 GDPR)
Every data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance, where processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising the right to data portability pursuant to Article 20(1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.

g) Right to Withdraw Consent under Data Protection Law (Art. 13 GDPR)
Every data subject has the right to withdraw consent to the processing of personal data at any time where processing is based on Article 6(1)(a) or Article 9(2)(a) GDPR, without affecting the lawfulness of processing based on consent before its withdrawal.

h) Right to Object (Art. 21 GDPR)
Every data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them which is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions. Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

i) Automated Individual Decision-Making, Including Profiling (Art. 22 GDPR)
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision

• (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller; or
• (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
• (3) is based on the data subject’s explicit consent.

In the cases referred to in (1) and (3), appropriate measures shall be implemented to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.

Period for Which Personal Data Is Stored

The criterion for determining the storage period of personal data is the respective statutory retention period. After expiry of that period, the relevant data is routinely deleted, provided that it is no longer required for the performance or initiation of a contract.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. This is the state data protection commissioner of the federal state in which our company is based. A list of data protection authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Privacy policy created using the interactive template for a privacy policy by 123recht.de – translated into English.