Privacy Policy

Who we are

Lime helps businesses all over the Nordics and Northern Europe to become better at customer care. The company develops and sells digital products for “Customer Relationship Management”, development and management of customer relationships. Lime was founded in 1990 and has offices in Lund, Stockholm, Gothenburg, Oslo, Copenhagen, Helsinki, Utrecht, Cologne and Gävle. Lime has more than 60,000 users including everything from sole traders to large organizations.

Processing of your personal data

In the table below, you can find information about our processing of your personal data. We describe the purpose of the processing, i.e., why we process your personal data. For each purpose, we also specify which categories of personal data we may process to achieve the purpose, the legal basis for the processing, and for how long we will process the data.

Purpose	Categories of personal data	Legal basis	Deletion period
To provide or receive services and/or products under our service agreement with you as a customer, our agreement with you as a third-party vendor or consultant, or under other contractual relations we have entered into with you or the company you represent.	Contact information, such as name and email address. Information regarding your work title and place of employment. Billing information. Information about your or our purchase. Content you have uploaded such as photos and videos (for example recruitment or support tickets). Your unique user information such as login ID, username and password. Traffic information as provided by your web browser such as browser type, device, language and IP address. Your behavior and movement on our website and in our products. Email behavior such as which emails from us you open, when you read them and how. Information regarding support and complaints.	Fulfillment of the agreement with you or the company/organization you represent.	During the contract period and the following twelve months.
To comply with applicable legislation, such as accounting legislation.	Billing information. Information regarding the agreement between us.	Legal obligation.	Seven years.
To safeguard and protect the legal interests of Lime.	Contact information, such as name and email address. Information regarding your work title and place of employment. Correspondence. Information regarding the agreement between us.	Lime bases such processing of your personal data on the legitimate interest of Lime to protect and assert its rights in the event of a dispute.	The personal data will be processed until the legal process is completed, if applicable.
To be able to administer secure visits to our offices.	Name. Your vehicle’s registration number. Video and photos of you as recorded on our premises.	Lime bases such processing on our legitimate interest to register visitors to our offices, and to conduct camera surveillance. You can read more on our surveillance in our Camera surveillance policy.	One week.
To be able to market our services and/or products as well as our business through channels such as mailings, website, special offers, and via social media.	Contact information such as name and email address. Information regarding your work title and place of employment. Information about the agreement between us. Information about your device, such as IP address, when you visit our website. Any social media usernames.	For such processing of your personal data, we use the legal basis of legitimate interest, where our legitimate interest is to be able to market our services/products and our business.	Twelve months after the end of the latest contract period.
To be able to administer and participate in webinars, workshops, trainings, and other events.	Contact details. Credit information. Video and photo. Information regarding health, for example if you register your food preferences or if you need any assistance regarding accessibility.	For such processing of your personal data, we use the legal basis of legitimate interest, where our legitimate interest is to be able to carry out webinars and events. If necessary, we base our processing on your consent.	During the event and the following twelve months. If we base our processing solely on your consent, we will stop further processing if your consent is withdrawn.
To enable general customer and supplier care (quality work, surveys, statistics, market and customer/supplier analysis, as well as business, method, and product development).	Information about your contact with us. Survey responses. Postal address.	For such processing of your personal data, we use the legal basis of legitimate interest, where our legitimate interest is to be able to develop our business.	Ten years from the date of completion of the assignment.

We only process personal data that is necessary to achieve the purposes stated above and only for the time necessary to achieve those purposes. Exactly which personal data we process about you depends on how you as a customer or supplier have interacted with us and which of our services and/or products we provide to you or the company you represent, or which of your services and/or products you provide to us.

To enable Lime to comply with the legal obligations arising from applicable legislation or to safeguard our legal interest, we may keep the personal data for a longer period than stated above. However, personal data is never processed longer than necessary or legally required for each purpose.

How will we collect personal data?

Lime collects in general personal data directly from you. In some cases, we also collect personal data about you if your company is a customer of Lime.

We use cookies and other tracking technologies when you use our websites, our products and interact with us per email to optimize your user experience. To learn more about our use of cookies, please see our Cookie Policy.

We may also collect personal data about you from other sources such as partners, social media platforms or third-party data aggregators.

When asked to provide personal data to us, you can choose not to do so. If you choose not to provide us with personal data that is necessary for us to fulfil our commitments to you, it may lead to us being unable to fulfil such commitments.

Please note that when using the e-mail client extensions (Outlook and Gmail add-in), we collect the name and e-mail address of each user on our servers. However, no email transactions or e-mail attachments are saved on our servers. The e-mail content is stored in the users Lime CRM/Lime Go application when the user explicitly performs the action to do so. No information is stored without the user’s consent.

Your rights

You are entitled to receive information regarding our processing of your personal data. Below is a summary of the rights that you can exercise by contacting us.

Right to access

You have the right to request information about the processing of your personal data, free of charge. You also have the right to receive a copy of the personal data we process about you. This request should be made in writing to us, with a clarification of which information you wish to access. We will respond to your request as soon as we can. If we cannot meet your request for access to the information you are requesting, we will provide a justification for this. The copy of your personal data will be sent to your registered address, unless otherwise agreed with you in writing.

Right to rectification

The main responsibility for ensuring that the personal data we process is correct lies with Lime as the data controller. If you inform us that the personal data you have provided is no longer correct, we will promptly correct, block, or delete such personal data.

Right to erasure

You have the right to request that Lime deletes your personal data without undue delay. Personal data shall be deleted in the following cases:

• If the personal data is no longer necessary for the purpose for which it was collected;
• if you have withdrawn your consent and the processing is based solely on consent as a legal basis;
• if the processing is for direct marketing purposes and you object to the processing of your personal data for this purpose;
• if you object to the processing of your personal data based on a legitimate interest and your interest outweighs ours;
• if your personal data has not been processed in accordance with applicable data protection legislation; or
• if deletion is required to comply with a legal obligation.

There may be obligations that prevent us from immediately deleting all of your personal data. These obligations are imposed by applicable legislation, such as accounting regulations. If certain personal data cannot be deleted due to legislation, we will inform you of this and ensure that the personal data can only be used for the purpose of fulfilling such obligations and not for any other purposes.

Right to restriction

You have the right to request that Lime temporarily restrict the processing of your personal data. Such a restriction may be requested in the following cases:

• If you believe that the personal data we have about you is not correct and that you have requested correction in connection with that;
• when the processing carried out regarding your personal data is not in compliance with applicable data protection legislation, but you still do not want your personal data to be deleted but instead restricted; and
• when we no longer need your personal data for the purposes of our processing but we need it to establish, assert or defend a legal claim.

If you object to the processing of your personal data, the use of the personal data may be restricted while an investigation is being conducted. When restricting your personal data, Lime will only store your personal data and will seek your consent for any further processing.

Right to data portability

You have the right to request that, in the event we process your personal data with your consent or to fulfil a contractual obligation with you, we provide all personal data that we process regarding you and that is processed in an automated manner, in a machine-readable format. This can, for example, be an Excel file or a CSV file. If technically possible, you also have the right to request that we transfer your personal data to another data controller.

Right to object

You have the right to object to our processing of your personal data if the processing is based on our legitimate interest. In these cases, Lime will ask you to specify which processing you object to. If you object to any processing, we will only continue processing your personal data if we have legitimate interests that outweigh your interests. We will always inform you of this.

Right to withdraw consent

If we process your personal data based on your consent, you have the right to withdraw your consent at any time. To withdraw your consent, you can contact us using the contact information below.

Right to submit a complaint

If you have a complaint regarding Lime’s processing of personal data, you can contact us at support@lime.tech, or the supervisory authority in the member state where you have your place of residence or where the alleged breach has been conducted to file a complaint. The current supervisory authority in Sweden is the Swedish Authority for Privacy Protection. Their contact details are the following:

Webpage: https://www.imy.se/en/

Phone: 08-657 61 00

E-mail: imy@imy.se

How we share your personal data

Lime may share your personal data with third parties. Your personal data is only shared with trusted third parties, such as authorities and partners, and Lime will never sell your personal data to anyone else. The sharing of your personal data with third parties is based on the same purposes and legal bases as they were collected for. Lime takes technical and organizational measures to ensure that your personal data is handled in a safe and secure measure. When necessary, Lime enters into a data processing agreement and take other appropriate measures to ensure that your personal data is processed securely. Below are the categories of recipients with whom your personal data may be shared.

Suppliers and subcontractors: Lime use third-party suppliers to manage parts of its business, for example companies that performs internal business functions such as data analysis, email transmission, database management or data hosting. Lime may share personal data with these suppliers when they perform services on behalf of Lime.  Lime uses some third-party software to assess the validity of your email address, in order to avoid and reduce spam. Lime might share your email address with such third -party software. Lime Go’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Banks, pension administrators, and other companies that Lime collaborates with: Lime also shares your personal data with other independent data controllers such as the Swedish Tax Agency, banks, insurance companies, pension companies, credit card companies, and travel agencies. These recipients are independent data controllers for their processing of your personal data.

Companies within the group of companies: Lime may share your personal data with other companies within our group of companies, if it is necessary to fulfil the purposes stated in this information.

Social media: Lime uses social media. When using social media, your personal data is collected and processed by these companies. Kindly see each company’s privacy policy for more information.

Courts, authorities, and other public bodies: Lime will also disclose your personal data if required by law, government decision or court order, or if we, as a company, reasonably believe that the disclosure is necessary to protect Lime’s rights.

When may we transfer your personal data to countries outside the EU/EEA?

As a main rule, Lime only processes your personal data within the EU/EEA. Sometimes however, we may share your personal data with a party in a country outside the EU/EEA. In such a third country, the GDPR does not apply. This means that you do not automatically have the same rights and protection for your personal data as the GDPR guarantees. We protect your personal data by either basing the transfer on an adequacy decision by the European Commission or by taking on appropriate security measures, such as entering into the European Commission’s standard contractual clauses in combination with organizational and technical protective measures, to ensure that your personal data continue to be protected during and after the transfer. You can read more about which countries are considered to offer an adequate level of data protection on the European Commission’s website here. You can find more information regarding the standard contractual clauses here.

We conduct a risk assessment before any transfer takes place, and we implement technical and organizational protection measures to ensure an appropriate level of protection. We transfer as little personal data as possible and anonymize the personal data before the transfer, whenever possible. For more information on which protective measures we take on in individual cases, please contact us.

The following recipients outside the EU/EEA might receive your personal data:

Suppliers and subcontractors: We may share your personal data with suppliers and subcontractors located outside the EU/EEA. For example, this may include providers of IT services. The countries to which transfers can be made will depend on the circumstances of the individual case. For more information, please send an email to support@lime.tech.

Companies which Lime collaborates with: We may share your personal data with partners which are located outside the EU/EEA. The countries to which transfers can be made will depend on the circumstances of the individual case. For more information, please send an email to support@lime.tech. 

Social media: When you visit, appear on, or otherwise use Lime’s social media channels, your personal data is also collected and processed by the company that owns the social media platform. In connection with these companies receiving personal data through Lime’s channels, the personal data may be transferred to, among other places, the United States.

Facebook and Instagram: By using the services, your personal data is processed by Meta Platforms Ireland Ltd. You can read more about the processing of personal data here.

You can read more about Meta’s transfers to third countries and the standard contractual clauses here.

LinkedIn: By using the services, your personal data is processed by Microsoft Corporation. You can read more about Microsoft’s processing of personal data here and more about their transfers to third countries here.

TikTok: By using the services, your personal data is processed by TikTok Technology Limited and TikTok Information Technologies UK Limited. You can read more about the processing of personal data and the transfers to third countries here.

YouTube: By using the services, your personal data is processed by Google LLC. You can read more about the processing of personal data and the transfers to third countries here.

X (formerly Twitter): By using the services, your personal data is processed by X Corp. You can read more about the processing of personal data and the transfers to third countries here.

Changes to this privacy policy

This document will be continually monitored and will be subject to an annual review. The document owner is responsible for annual review. In case of recurring critical incidents there may be additional reviews.

How to contact us

Please feel free to contact us if you have any questions about our privacy policy:

Email to support@lime.tech

For further contact information visit our web site www.lime-technologies.com.