Legal information
Privacy policy
How Limetree Legal processes personal data when you use the public website, contact us, or access the SaaS dashboard.
Controller
The controller responsible for processing personal data is Limetree Legal UG (haftungsbeschränkt), Mühlenkamp 31, 22301 Hamburg, Germany.
You can contact us about privacy matters at support@limetreelegal.de.
Website and communication data
When you visit this website, we may process technical access data such as IP address, browser and device information, requested pages, timestamps, referrer URLs, and security logs. This is necessary to deliver the website, keep it secure, and diagnose technical issues.
If you contact us, we process the information you provide, such as your name, email address, organization, and message. We use this data to answer your request and to document business communication where necessary.
SaaS account and workspace data
When you use the Limetree Legal dashboard, we may process account details, organization memberships, authentication events, product settings, user actions, uploaded files, trademark matters, research inputs, filing preparation data, portfolio records, monitoring settings, and related workflow data.
We process this information to provide the SaaS, manage organizations and permissions, operate trademark workflows, secure accounts, improve reliability, and meet contractual or statutory obligations.
Legal bases
Where the GDPR applies, processing is based on performance of a contract or pre-contractual steps, compliance with legal obligations, legitimate interests such as security, service operation and business communication, or consent where we ask for it.
Our legitimate interests include providing and improving the service, protecting accounts and infrastructure, preventing misuse, communicating with customers and prospects, and documenting business operations.
Cookies and local preferences
We use technically necessary cookies and similar storage to provide core functions such as authentication, security, session handling, and language selection. The language selector stores the selected locale in the NEXT_LOCALE cookie.
Where we use optional analytics, marketing, or tracking technologies, we ask for consent where required and process the related data on the basis of that consent. You can withdraw consent with effect for the future where such choices are offered.
Service providers and recipients
We may use carefully selected service providers for hosting, infrastructure, authentication, email delivery, databases, storage, logging, security, support, and product operations. These providers process data only as instructed by us where they act as processors.
Personal data may also be disclosed where required by law, to enforce contractual rights, to protect the security of the service, or as part of business administration with professional advisers.
International transfers
Where service providers process personal data outside the European Economic Area, we use appropriate safeguards required by data protection law, such as EU standard contractual clauses or adequacy decisions.
Details may depend on the providers used for the relevant customer workspace and service configuration.
Retention
We keep personal data only for as long as necessary for the purposes described in this policy, including providing the service, handling requests, preserving security logs, and complying with legal retention obligations.
Workspace and matter data are generally retained while the relevant account or organization is active and then deleted or anonymized according to contractual, statutory, and operational requirements.
Your rights
Under the GDPR, you may have rights to information, access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.
To exercise your rights, contact us at support@limetreelegal.de. We may need information to verify your identity and understand the scope of your request.
Supervisory authority and updates
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
We may update this privacy policy when our services, processing activities, or legal requirements change. The version published on this website applies.