ENDE
Schedule a first call

Privacy policy

Last updated: October 2026

This policy explains which personal data is processed when you visit this website, for what purpose and on what legal basis. In short: we use no cookies, store nothing in your browser, use no analytics or tracking services and embed no content from third parties.

1. Controller

Amaryllis Advisory
Katharina Mueller
Wartburgstrasse 74
65929 Frankfurt am Main
Germany

Email: hello@amaryllis-advisory.com

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. Hosting and server log data

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes data that your browser transmits:

  • IP address,
  • date and time of the request,
  • the page or file requested,
  • the previously visited page (referrer),
  • browser and operating system,
  • amount of data transferred and the status of the request.

This data is needed to deliver the website and to keep it secure and stable, for example to detect and prevent attacks. It is not combined with other data sources. The legal basis is our legitimate interest in delivering the website securely and without errors (Art. 6(1)(f) GDPR). Vercel keeps this data only for as long as these purposes require.

Vercel processes the data on our behalf; we have a data processing agreement with Vercel (Art. 28 GDPR). Data may be transferred to the USA in the process. Vercel is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). In addition, the agreement includes the EU Standard Contractual Clauses. More information can be found in Vercel's privacy notice.

3. No cookies, no browser storage, no tracking

This website sets no cookies and stores no other information in your browser, such as in local or session storage. We use no analytics, statistics or marketing services. Consent under Section 25 of the German TDDDG is therefore not required.

4. Fonts, images and video

Fonts, images and the video are loaded exclusively from our own server. No content from Google, YouTube, social networks or other third parties is embedded.

5. Contact by email and via the contact form

When you write to us, we process the details you provide (such as your name, email address, organisation and message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Providing your details is voluntary, but without them we cannot reply to you.

The contact form currently does not transmit any data itself. It opens your email program with a prepared message. We only receive your details by email once you send that message.

[Placeholder for the form service: Once a form service is used, add the provider, its location, the data processing agreement and, where applicable, the transfer to third countries here.]

Our emails are processed by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS (Art. 28 GDPR).

We delete your enquiry once it has been dealt with, unless statutory retention obligations apply, for example for business correspondence under commercial and tax law (generally six or ten years).

6. Links to LinkedIn

We link to the LinkedIn profiles of our co-founders. These are plain links: no data is transmitted to LinkedIn when you visit our website. Only when you click a link are you taken to LinkedIn, where LinkedIn's privacy policy applies.

7. Encryption

This website uses TLS encryption, recognisable by "https://" in your browser's address bar.

8. Your rights

You have the right to

  • access the data we hold about you (Art. 15 GDPR),
  • have inaccurate data corrected (Art. 16 GDPR),
  • have your data erased (Art. 17 GDPR),
  • restrict processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR).

Where you have given consent to processing, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to hello@amaryllis-advisory.com is all it takes.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 31 63, 65021 Wiesbaden, Germany, datenschutz.hessen.de.

We do not use automated decision-making, including profiling.

9. Information for people in Switzerland

Where the Swiss Federal Act on Data Protection (FADP) applies, the information above applies accordingly. Personal data may be transferred to Vercel in the USA. Vercel is certified under the Swiss-U.S. Data Privacy Framework; since 15 September 2024 the Swiss Federal Council has recognised an adequate level of data protection for companies certified in this way. You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.

10. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.