privacy policy​

PRIVACY NOTICES

I. WHO IS RESPONSIBLE FOR DATA PROCESSING?

Responsible in the meaning of GDPR
Limehome GmbH
Rosenheimerstr. 143 a-d
81671 Munich Germany

Contact details of the data protection officer:
PROLIANCE GmbH / datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
Email: [email protected]

II. WHAT DATA DO WE PROCESS?

We process your personal data when you book one of our accommodations, provide us with information via a contact form on our website or contact us in any other way.

In detail, this can be the following data:

• Data about your stays booked with Limehome GmbH
• Data required to book one of our accommodations (billing address, arrival and departure, mobile phone number, e-mail address)
• Data used for identity verification (name, telephone number, e-mail address, place of residence, nationality, date of birth, ID card number, images of ID documents, portrait photo and digital signature)
• Data for payment processing (credit card data, account data and other payment information, IP address)
• Data we receive when redeeming coupons (coupons redeemed, date and place of redemption)
• Data about your location (if you have allowed the collection of location data in your device settings)
• Data that you provide to us when subscribing to the Limehome newsletter (e.g. e-mail address, title, first name, last name, postal code)
• Data that we need to prove your consent to receiving the Limehome newsletter (IP address and time stamp of the newsletter order and the click on the link in the confirmation e-mail, declarations of consent submitted)
• Data that you provide to us via a web form or otherwise when you contact our customer service
• Data that you provide to us when you apply for a job or send us an unsolicited application (personal data, data on training, data on previous professional experience, cover letter, curriculum vitae, portrait photo, certificates)
• Data you enter when creating a user account or joining our Limeloyalty program (name, email address, postal address)
• If you agree to the statistical collection of data using cookies, we will also save data on your use of our website based on a pseudonym

Access to and storage of information in terminal equipment

By using our website, access to information (e.g. IP address) or storage of information (e.g. cookies) in your terminal equipment may occur. This access or storage may involve further processing of personal data pursuant to the GDPR.

In cases where such access to information or such storage of information is strictly necessary for the technically error-free delivery of our services, this is done on the basis of §25 para. 1 s. 1, para. 2 no. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our website), this will only be carried out on the basis of § 25 para. 1 TTDSG with your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.

For more information on the processing of your personal data and the relevant legal basis in this context, please refer to the following sections on the specific processing activities on our website.

a. Processing of bookings via limehome website

To book via the limehome website, you must provide your name, e-mail address, telephone number, address and payment details. These are required to provide the desired service. The legal basis for the processing of your data is Art. 6 (1) (b) GDPR. Your data will be deleted when they are no longer required to carry out the contract. Please note that even after the conclusion of the contract, it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations.

b. Processing of bookings via online travel agencies

If you book through online travel agencies, such as Booking.com, Airbnb and other platforms, it is also necessary to provide your name, address and, optionally, payment details and contact options. These are required to provide the desired service. The legal basis for the processing of your data is Art. 6 (1) (b) GDPR. Your data will be deleted when they are no longer required to carry out the contract. Please note that even after the conclusion of the contract, it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations.

c. Payment handling

Your confidential credit card data will not be saved by limehome, but forwarded directly to the payment service provider. The payment is processed by our partner Adyen BV, Simon Carmiggelstraat 6 – 50, 1011 DJ Amsterdam. To prevent and detect fraud, we transmit your IP address to our partner Adyen NV. All data is transmitted in encrypted form.

d. Registration for LimeLoyalty & Newsletter

You can register with us to join the LimeLoyalty Program or our newsletter. During registration and setup, we collect and use the following personal data:

• Salutation, first name, last name
• E-mail address
• Date & time of your registration

In order to validate your e-mail address, we will send you an e-mail after registration in which you must click on the link to activate your account (double opt-in process).

Mandatory information that is necessary for the purpose of registration is marked with an asterisk marked as such. In addition, you can provide voluntary information (e.g. telephone number). Your user account gives you the opportunity to access additional areas of our website and the offers you have purchased.

In the case of consent, the legal basis for data processing is Article 6 (1) (a) GDPR.
Article 6 (1) (b) GDPR, provided that the processing is necessary to provide the desired services is required. Your data will be deleted as soon as the user account on our website
is deleted and provided that there are no statutory retention requirements. A change and/or deletion of your user account, including the data you have provided, you can usually do this directly in your user account after logging in or by sending a corresponding message to the responsible person named at the beginning.

In addition, you can unsubscribe from your newsletter subscription at any time using the unsubscribe link in every newsletter email.

We work with Braze, Inc., 330 W 34th Street, 18th Floor, New York, NY 10001, USA to handle communication in connection with the newsletter and LimeLoyalty program. Your data will be stored in Germany and Ireland.

Information on receiving, opening and clicking on links in the emails is provided to us by Braze.

e. Lime Loyalty Program

To operate the loyalty program, we store a list of bookings for which you have collected points, as well as a transaction list of all redemptions of points and a reference for what you have redeemed the points (e.g. a booking with limehome or purchase of a voucher).

The legal basis for the processing of your data is Art. 6 (1) (b) GDPR.

f. Advertising

In addition to processing your data to handle bookings, we also use your data for advertising purposes, as described in more detail below. You can object to the processing of your data for advertising purposes at any time. An informal notification to the contact details specified under Section I is sufficient.

• Direct mail via email
  Depending on your consent, we will use the e-mail address you provided in connection with a booking for direct advertising for our own similar offers. You will receive these product recommendations regardless of whether you have subscribed to our newsletter. In this way, we want to send you information about goods and services from our range that may be of interest to you based on the bookings you have made on our website. If you do not wish to receive these product recommendations, you can object to this at any time. An informal message to the contact details specified under Section I is sufficient. Alternatively, you can also use the unsubscribe link contained in every e-mail. The legal basis for the data processing described is Art. 6 (1) (a) of GDPR (balancing of interests, based on Limehome’s interest in advertising to existing customers) and Section 7 Para. 3 Act against Unfair Competition (processing of your e-mail address for direct mail).
• Mail advertising
  Depending on your consent, we use the billing address you provide when you place an order on our website for direct advertising of our own offers. You will receive this mail advertising regardless of whether you have subscribed to our newsletter. In this way we want to send you information about goods and services from our range that may interest you based on the orders you have placed in our online shop so far. If you do not wish to receive this mailing, you can object to this at any time. An informal message to the contact details specified under Section I is sufficient. The legal basis for the data processing described is Art. 6 (1) (a) GDPR (Balancing of interests, based on Limehome’s and customers’ interest in advertising to existing customers).
• Personalization of the advertising approach
  Depending on your consent, we want to send you advertising that is based on your individual interests. To do this, we analyze your data and try to select products, services and campaigns that suit you exactly when designing the advertising approach. To do this, we evaluate your data in order to define specific target groups and tailor the advertising approach to the respective target group. Your data enables us to address you personally by name. The legal basis for the data processing described is Article 6 (1) (a) of the General Data Protection Regulation
• Affiliate network
  We work with the affiliate network “Webgains”. When using participating websites, you can book your next trip by clicking on links to the limehome website. During this process, Webgains provides us with a campaign ID that does not allow any conclusions to be drawn about individual users.

g. Website analysis/tracking

Depending on your consent, we create pseudonymous usage profiles with the help of Google Analytics & Hotjar in order to design our website to meet your needs. The website analysis tools mentioned use cookies. These enable an analysis of the use of the website by you. Your IP address will only be processed in an anonymous form. The website analysis tools evaluate your use of the website for us and compile reports on website activity. You can object to the creation of pseudonymous usage profiles at any time. The legal basis for the data processing described is Art. 6 (1) (f) of the GDPR (balancing of interests, based on Limehome’s interest in measuring and analyzing the use of its websites).

h. Contact form

You can contact us via our web form, by e-mail, by post and by telephone. We process your data in order to answer your inquiry and, if necessary, to send you the desired information material. Your data can be transmitted to the office responsible for your request. The legal basis for the data processing described is Art. 6 (1) (f) of the GDPR (pre-contractual measure, fulfillment of contract or balancing of interests, based on Limehome’s interest in answering inquiries from customers and other persons).

i. Job application

On our website you have the option of applying online via e-mail for an advertised position or submitting an unsolicited application. Your data and the file attachments sent with it will be received by the HR department and forwarded to the specialist department responsible for the advertised position or to the persons entrusted with handling the application process. Everyone involved treats your application documents with due care and confidentiality. The legal basis for the data processing described is Art. 6 (1) (b) of the General Data Protection Regulation and Section 26 Para. 1 Sentence 1 BDSG (decision on the establishment of an employment relationship).

j. Web server logs

When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit on our site, the date and duration of the visit, the identification data of the browser used to ensure the security of our IT systems and operating system type as well as the website from which you are visiting us. The legal basis for the data processing described is Art. 6 (1) (f) of the General Data Protection Regulation (balancing of interests, based on Limehome’s interest in ensuring the security of IT systems).

k. Social Networks & Fan Pages

Social networks (e.g. Facebook & Instagram) are linked on our website. After clicking on the integrated text/image link, you will be forwarded to the website of the respective provider. User information is only transferred to the respective provider after forwarding. Information on the handling of your personal data when using these websites can be found in the respective data protection regulations of the providers you use.

We operate fan pages on the social networks Facebook and Instagram. Messages and statistics about Likes & Shares are stored there and made available to us. This data is collected and processed by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. We have no influence on the processing of this data.

l. Processing of the identity check in online check-in

As an accommodation provider, we are subject to local laws that require us to verify the identity of our guests

Depending on local regulations, we either only verify the identity of the primary guest or the identity of all guests. We collect the following information:

• Salutation, first name, last name
• Email address & telephone number (voluntary)
• ID type (identity card, passport or similar) and ID number
• Live comparison of your details via photos of ID documents and your face

To handle this process, we use solutions from the following providers:

Chekin Soluciones Digitales, S.L with NIF B21579990
SEON Technologies Kft., Rákóczi street 42, 1072 Budapest

III. Cookies

Our website uses so-called “cookies”. Cookies are small text files that
either temporarily for the duration of a session (session cookies) or permanently
(permanent cookies) are stored on your end device. Session cookies are set after
automatically deleted at the end of your visit. Permanent cookies remain on your end device stored until you delete them yourself or an automatic solution by your
web browser takes place.

Cookies have different functions. Numerous cookies are technically necessary
certain website functions would not work without them (e.g. language settings or login data). Other cookies are used to
Evaluate user behavior or display advertising.

Technically necessary cookies are set on the basis of Art. 6 (1) (f) GDPR saved. We have a legitimate interest in storing cookies technically error-free and optimized provision of our services. Other cookies are only stored with your consent on the basis of Article 6 (1) (a) GDPR. The consent can be revoked at any time for the future. The legal basis can also change from Art. 6 (1) (b) GDPR if the processing is for the performance of a contract, whose contracting party is the data subject, or to carry out pre-contractual work measures are required, which are carried out at the request of the data subject.

Insofar as cookies are used for analysis purposes, we will inform you about this in the context of this data protection declaration separately and obtain consent (see point: website analysis/tracking).

You can set your browser so that you be informed about the setting of cookies,
Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed under the following links for the respective browsers:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

You can also individually manage cookies from many companies and functions used for advertising. To do this, use the appropriate user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/yourad-choices.

Most browsers also offer a so-called “Do Not Track” function. When this feature is turned on, the browser tells ad networks, websites, and applications that you do not want to be “tracked” for behavioral advertising and the like.

Information and instructions on how to edit this function are available from the following links, depending on the provider of your browser:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

In addition, you can prevent the loading of so-called scripts by default. “NoScript” allows the execution of JavaScripts, Java and other plug-ins only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that the functionality of our website may be restricted if cookies are deactivated.

IV. Data transfer and recipients

A transmission of your personal data to third parties generally does not take place, except we have explicitly pointed out in the description of the respective data processing. You have given your express consent in accordance with Art. 6 (1) (a) GDPR
In accordance to Article 6 (1) (f) GDPR, the transfer is required to assert, exercise or defend legal claims or is in our legitimate interest for other reasons and there is no reason to assume that you have an overriding interest worthy of protection the non-disclosure of your data, there is a legal obligation for the transfer according to Article 6 (1) (c) GDPR and this is required in accordance with Article 6 Paragraph (1) (b) GDPR for the processing of contractual relationships with you.

In addition, we use external service providers for the provision of our services and the processing of our services, which we carefully select and provide in writing
commission. These are bound by our instructions and are regularly checked by us. Order processing contracts required under Art. 28 GDPR are concluded before the order is placed. In detail, these are service providers for the area of ​​web hosting, the sending of e-mails and the maintenance and care of our IT systems. Your personal data will under no circumstances be passed on to third parties, even by the service providers working for us.

V. Duration of storage of personal data

The duration of the storage of personal data is based on the relevant statutory retention requirements, e.g. B. from commercial law and tax law. After the respective period has expired, the corresponding data is routinely deleted. If data is required to fulfill or initiate a contract or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you exercise your right of revocation or objection.

VI. YOUR RIGHTS

Below you will find a list of the rights of the data subject to which the data subject is entitled vis-à-vis the person responsible with regard to the processing of your personal data:

• The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right of appeal, the origin of their data, if they were not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details.
• The right, in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us.
• The right, in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or Defense of legal claims is required.
• The right, in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you use them for you need to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR
• The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.
• The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office specified above or, if applicable, that of your usual place of residence or work.
• Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR. You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

VII. Right to object

If your personal data is processed by us on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR, you have the right under Article 21 GDPR to object to the processing of your personal data, provided this is for reasons takes place, which arise from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the need to state a particular situation. If you would like to make use of your right of revocation or objection, an e-mail to [email protected] is sufficient.

VII. Changes to our privacy policy

We reserve the right to update this data protection declaration if necessary, in compliance with the applicable data protection regulations. In this way we can adapt them to current legal requirements and take changes to our services into account, e.g. when introducing new services. The most current version applies to your visit.

Status of this data protection declaration: 01.06.2022