Privacy Policy

§ 1 General Information

In this Privacy Policy, you will find detailed information about what happens to your personal data when you visit our website https://www.amber-growth.de. Any data that allows you to be personally identified is personal data. When processing your data, we strictly adhere to legal requirements, in particular the General Data Protection Regulation (“GDPR”). It is very important to us that your visit to our website is completely secure.

§ 2 Responsible Body

Under data protection law, responsibility for the collection and processing of personal data on this website lies with:

  • Company Name: Amber Growth UG (haftungsbeschränkt)
  • Street, House Number, ZIP Code, City: Siedlerweg 1 B, 01468 Moritzburg
  • Country: Germany
  • Email: underconstruction

§ 3 Making Contact

When you contact us, including via email, the data transmitted in the process – including your contact information – will be stored in order to process your inquiry and to be available for any follow-up questions. This data will not be disclosed to third parties without your express consent. The processing of your personal data is carried out exclusively on the basis of your consent granted in accordance with Article 6(1)(a) of the GDPR. You have the right to withdraw this consent at any time and without providing a reason. An informal email to us is sufficient for the withdrawal. The lawfulness of the data processing carried out prior to the revocation is not affected by the revocation.

We will store the data you provide until you request that we delete it, revoke your consent to its storage, or the need for data storage no longer applies. Statutory retention periods remain unaffected by this.

§ 4 Use and Disclosure of Data

We assure you that personal data you provide to us, for example via email (such as your name, address, or email address), will not be sold to third parties or otherwise used for commercial purposes. Your data is processed exclusively for the purpose of corresponding with you and to fulfill the purpose for which you provided us with the data.

The data automatically collected when you visit our website is used exclusively for the purposes mentioned above. The data will not be used for any other purpose.

The protection of your personal data is important to us. We therefore do not, as a general rule, disclose your data to third parties unless there is a legal obligation to do so or you have given us your express consent.

§ 5 Encryption (SSL/TLS)

Our website uses SSL or TLS encryption to ensure the security and protection of the transmission of confidential content. This applies in particular to requests that you, as a visitor to the site, send to us as the website operator. An encrypted connection can be recognized by “https://” in the address bar of your browser, as well as by the padlock icon in your browser’s address bar.

Enabling SSL or TLS encryption ensures that the data you send to us cannot be read by unauthorized third parties.

§ 6 Retention Period

The personal data you provide to us via our website will be stored only for as long as is necessary to fulfill the respective purpose of data processing. However, in accordance with commercial and tax law retention requirements, certain data may be stored for up to 10 years.

§ 7 Your Privacy Rights

As a data subject, you have the following rights with respect to your personal data vis-à-vis the data controller, in accordance with the applicable legal provisions:

A. Right of Withdrawal

Many data processing activities are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw that consent at any time with future effect, in accordance with Article 7(3) of the GDPR. The lawfulness of data processing that took place up until the withdrawal based on your consent remains unaffected. The storage of data for billing and accounting purposes is not affected by such a revocation.

B. Right to Information

Pursuant to Article 15 of the GDPR, you have the right to request confirmation from us as to whether we are processing your personal data. If this is the case, you have the right to access this data, including the purposes of processing, the categories of data processed, the recipients or categories of recipients to whom the data has been or will be disclosed, the planned retention period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodge a complaint with a supervisory authority, the origin of the data if it was not collected directly from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, as well as the significance and intended effects of such processing on you, and your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries.

C. Right to Rectification

You have the right, at any time, pursuant to Article 16 of the GDPR, to request that we correct any inaccurate personal data concerning you and/or complete any incomplete data.

D. Right to Erasure

You have the right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data if any of the following grounds apply:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent, which served as the legal basis for the processing pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Article 21(1) of the GDPR and there are no compelling legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
  • The personal data has been processed unlawfully.
  • We are required to erase the personal data due to a legal obligation under Union law or the law of the Member State to which we are subject.
  • The personal data was collected in connection with the provision of information society services pursuant to Article 8(1) of the GDPR.

This right may be restricted under the following circumstances if the processing is necessary:

  • to comply with a legal obligation that requires the processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority;
  • o comply with a legal obligation that requires processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR;
  • for archiving purposes, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR that are in the public interest, provided that the protection of the data subject’s rights would render the purposes of such processing impossible or seriously impair them; or
  • for the establishment, exercise, or defense of legal claims.

If we have made your personal data public and are obligated to delete it in accordance with the preceding provisions, we will take reasonable measures, including technical measures, taking into account available technology and implementation costs, to notify the data controllers processing such data that you, as the data subject, have requested the deletion of all links to your personal data or of copies or replicas of such data.

E. Right to Restriction of Processing

Pursuant to Article 18 of the GDPR, you have the right to request the restriction of processing (blocking) of your personal data. To exercise this right, you may contact us at any time. You can find our contact information in the legal notice. You may request restriction of processing in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
  • If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
  • If you have lodged an objection under Article 21(1) of the GDPR, a balancing of your interests against ours must be conducted. As long as it has not yet been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.

Once the processing of your personal data has been restricted, it may generally only be processed with your consent. Exceptions apply in certain cases defined by law, such as to assert legal claims or to protect public interests.

F. Right to Be Informed

If you exercise your right to rectification, erasure, or restriction of processing of your personal data, we are required under Article 19 GDPR, we are obligated to inform all recipients to whom the data has been disclosed of this. This does not apply if the notification proves impossible or involves a disproportionate effort. Upon your request, we will inform you of the recipients of your data.

G. Protection Against Automated Decision-Making (Profiling)

Pursuant to Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated
processing, including profiling, that produces legal effects concerning you or similarly
significantly affects you.

This does not apply if the decision

  • is necessary for the conclusion or performance of a contract between you and us,
  • is permitted under Union or Member State law to which the controller is subject, and such law provides for appropriate safeguards to protect your rights, freedoms, and legitimate interests, or
  • is based on your explicit consent.

However, decisions in the cases listed under the points listed above may not be based on special categories of personal data within the meaning of Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

In the cases listed above, we will take appropriate measures to protect your rights and freedoms as well as your legitimate interests. This includes, at a minimum, the right to request human intervention by the controller, to present your own point of view, and to challenge the decision.

H. Right to Data Portability

If the processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and is carried out using automated means, you have the right under Article 20 of the GDPR to receive the data you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another controller or to request that we transmit it to another controller, provided this is technically feasible.

I. Right to Object

If we process your personal data based on a balancing of interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on such processing. You can find the applicable legal basis for the processing in this Privacy Policy. In the event of an objection, we will no longer process your personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection pursuant to Article 21(1) of the GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object to such processing at any time; this also applies to profiling, provided it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Article 21(2) of the GDPR).

With regard to the use of information society services, notwithstanding Directive 2002/58/EC, you have the option to exercise your right to object using automated means, in accordance with technical specifications.

J. Right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR

In the event of violations of the provisions of the GDPR, data subjects have the right to lodge a complaint with a competent supervisory authority. The complaint may be lodged, in particular, in the Member State where the data subject has his or her habitual residence, place of work, or where the alleged infringement occurred. The right to lodge a complaint under this provision is without prejudice to any other administrative or judicial remedies.

Our regulatory authority is:

Der Sächsische Datenschutzbeauftragte

Postfach 11 01 32

01330 Dresden

Devrientstraße 5

01067 Dresden

GERMANY

Phone: 03 51 / 85471-101

Email: saechsdsb[at]slt.sachsen.de

Web: https://www.saechsdsb.de/

§ 8 Validity and Amendments to This Privacy Policy

This Privacy Policy takes effect on July 9, 2026. We reserve the right to amend this Policy as necessary and in compliance with applicable data protection laws. This may be necessary, for example, to meet new legal requirements or to reflect changes to our website or new services offered through our website. The most current version of the Privacy Policy, available at the time of your visit to our website, is binding. In the event of changes to this Privacy Policy, we will publish them on this page to fully inform you about what personal data we collect, how we process it, and under what conditions we may disclose it.

Media & Icons Used

The following images, photos, and similar data were used on the website: