Back to home

Legal

Privacy Policy

Datenschutzerklärung

Last updated: 7 August 2026

1. Controller

The controller responsible for data processing on this website within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:

Company
Lime Labs GmbH
Address
Am Graspoint 17, 83026 Rosenheim, Germany
Represented by
Peter Winter, Geschäftsführer
Phone
+49 (8031) 887-1015, Mon to Fri, 9:00 to 18:00
Email
hi@limelabs.io

Full company details are set out in our Imprint.

2. What this policy covers

This policy explains what personal data we process when you visit limelabs.io, why we process it, and what rights you have. It applies to this website only. Our NIGHTRAIN mobile app is covered by a separate privacy policy.

This is a small informational website. There is no user account system, no comment function, no newsletter, and no contact form. We deliberately keep data collection to the minimum needed to operate the site.

Beyond the analytics service described in section 5, this website loads no third party resources. Fonts are rendered from the fonts already installed on your device, so no external font service receives your IP address.

3. Data processed when you visit this site

When you open this website, your browser necessarily transmits technical data to our hosting provider, which records it in server log files. This data includes:

  • your IP address
  • the date and time of the request
  • the page or file requested
  • the amount of data transferred and the HTTP status code
  • the referring page, if any
  • your browser type and version, and your operating system

Purpose and legal basis: this data is required to deliver the website to you, to keep it stable and secure, and to detect and investigate misuse. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. This data is not merged with other data sources and is not used to identify individual visitors.

Hosting: this website is hosted by Hetzner Online GmbH, which processes the server log data described above on our behalf. We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR. Further information is available in the Hetzner privacy policy.

4. Cookies and local storage

This website sets no cookies by default. Nothing is stored on your device unless you actively choose to allow analytics.

If you make a choice in our consent banner, we store that choice in your browser's local storage so that we do not have to ask again on every page. This entry contains only your decision and its date. It holds no identifier and is never transmitted to us or to any third party. You can clear it at any time by clearing your browser's site data, or by using the control in section 5.

5. Web analytics

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Nothing loads without consent. The Google Analytics script is not requested and no analytics cookies are set unless you have given your explicit consent. If you decline, or simply ignore the banner, no connection to Google is made.

Where you do consent, Google Analytics uses cookies to help us understand how the site is used in aggregate, for example which pages are viewed and how visitors find us. We use this only to improve the site. Google Analytics 4 does not log or store IP addresses. Your IP address is used transiently to derive an approximate location and is then discarded, so the measurement data cannot be traced back to you. We do not use Google Analytics for advertising, remarketing, or cross site tracking.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time with effect for the future. Withdrawing is as easy as giving consent:

Independently of the above, you can prevent Google Analytics across all websites by installing the Google Analytics opt-out browser add-on. Further information on how Google processes data is available in the Google Privacy Policy.

6. When you contact us

If you contact us by email or telephone, we process the details you give us, such as your name, your contact details, and the content of your message, in order to deal with your enquiry.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or to steps taken before entering into one, otherwise our legitimate interest in responding to enquiries under Art. 6(1)(f) GDPR.

We keep this correspondence for as long as needed to handle your request and to answer any follow up questions. Where German commercial and tax law requires it, business correspondence is retained for the statutory periods of six or ten years, during which the data is restricted to that purpose.

Please note that email is not an inherently secure medium. If your enquiry is confidential, please ask us for a secure channel.

7. Transfers outside the European Union

Hosting takes place within the European Union, so simply visiting this site transfers no personal data to a third country.

The single exception is the analytics service described in section 5, and only if you consent to it. Google Ireland Limited may pass data to Google LLC in the United States. Such transfers are safeguarded either by an adequacy decision of the European Commission, including the EU-US Data Privacy Framework where the recipient is certified under it, or by the European Commission's Standard Contractual Clauses together with supplementary measures. If you decline analytics, no such transfer takes place.

8. Your rights

You have the following rights in respect of the personal data we hold about you:

  • Access (Art. 15 GDPR): to obtain confirmation of whether we process your data, and a copy of it.
  • Rectification (Art. 16 GDPR): to have inaccurate data corrected and incomplete data completed.
  • Erasure (Art. 17 GDPR): to have your data deleted, where no legal retention obligation applies.
  • Restriction (Art. 18 GDPR): to have processing limited in certain circumstances.
  • Data portability (Art. 20 GDPR): to receive data you provided in a structured, commonly used, machine readable format.
  • Objection (Art. 21 GDPR): to object, on grounds relating to your particular situation, to processing based on our legitimate interests.
  • Withdrawal of consent (Art. 7(3) GDPR): to withdraw any consent at any time with effect for the future, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to hi@limelabs.io. We do not charge for this and we will respond within the statutory time limits.

9. Right to complain to a supervisory authority

If you believe we have processed your data unlawfully, you may lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany

10. Encryption

This site is served over HTTPS using TLS encryption, so the content transmitted between your browser and the server cannot be read by third parties in transit. You can recognize an encrypted connection by the lock symbol in your browser's address bar.

11. Automated decision making

We do not use automated decision making, including profiling, within the meaning of Art. 22 GDPR.

12. Changes to this policy

We may update this policy when the site changes or when the legal position requires it. The version published on this page always applies, and the date at the top shows when it was last revised.