Back to home

Legal

Privacy Policy

Datenschutzerklärung · limelabs.io, alpcrun.ch, scale.alpcrun.ch, ai.alpcrun.ch and torhaus.ai

Last updated: 24 August 2026

1. Controller

The controller responsible for data processing on the websites covered by this policy, within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR), is:

Company
Lime Labs GmbH
Address
Am Graspoint 17, 83026 Rosenheim, Germany
Represented by
Peter Winter, Geschäftsführer
Phone
+49 (8031) 887-1015, Mon to Fri, 9:00 to 18:00
Email
hi@limelabs.io

Full company details are set out in our Imprint.

2. What this policy covers

This policy explains what personal data we process when you visit our websites, why we process it, and what rights you have. It covers all five of the sites we operate:

  • limelabs.io, our company website
  • alpcrun.ch, the ALPCRUN.CH platform website
  • scale.alpcrun.ch, the ALPCRUN.CH HPC website
  • ai.alpcrun.ch, the ALPCRUN.CH AI website
  • torhaus.ai, the TORHAUS.AI website, in English and German

Lime Labs GmbH, named in section 1, is the controller for all five. Our NIGHTRAIN mobile app is covered by a separate privacy policy.

These are informational and product websites. There is no user account system, no comment function, and no newsletter, and we deliberately keep data collection to the minimum needed to operate them. Where the sites differ, this policy says which site it is describing.

Beyond the analytics service described in section 5, our websites load no third party resources. Typefaces are either already installed on your device or served from our own servers, so no external font service receives your IP address.

Three of the sites carry a short form, described in section 6: an early access registration on ai.alpcrun.ch, and a demo request on scale.alpcrun.ch and on torhaus.ai. limelabs.io and alpcrun.ch have no form at all.

3. Data processed when you visit our sites

When you open any of these websites, your browser necessarily transmits technical data to our hosting provider, which records it in server log files. This data includes:

  • your IP address
  • the date and time of the request
  • the page or file requested
  • the amount of data transferred and the HTTP status code
  • the referring page, if any
  • your browser type and version, and your operating system

Purpose and legal basis: this data is required to deliver the website to you, to keep it stable and secure, and to detect and investigate misuse. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. This data is not merged with other data sources and is not used to identify individual visitors.

Hosting: all five websites are hosted by Hetzner Online GmbH on servers in Germany, and Hetzner processes the server log data described above on our behalf. We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR. Further information is available in the Hetzner privacy policy.

4. Cookies and local storage

Our websites set no cookies by default. Nothing is stored on your device unless you actively choose to allow analytics.

If you make a choice in our consent banner, we store that choice so that we do not have to ask again on every page. It records your decision and when you made it, nothing more: it holds no identifier, and it is never passed to any third party. Where it is kept depends on the site:

  • On limelabs.io, in your browser's local storage, under the name ll.consent.analytics. It stays in your browser and is never sent to our server.
  • On alpcrun.ch, scale.alpcrun.ch and ai.alpcrun.ch, in a cookie named alpcrunch_consent, valid for six months, with a copy in local storage as a fallback for browsers that block cookies. The cookie is set for alpcrun.ch as a whole, so that answering once covers all three of those sites rather than being asked three times. Being a cookie, it is sent back to our own server with each request to those sites, where it serves only to remember your choice.
  • On torhaus.ai, in a cookie named torhaus_consent, valid for six months, again with a local storage fallback. torhaus.ai is a separate domain from alpcrun.ch, so it keeps its own answer and asking there does not affect the other sites. That site also remembers which language you chose, in a cookie named torhaus_lang, which holds nothing but en or de.

Storing your decision is strictly necessary to provide the choice you asked for, so it does not itself require consent (§ 25(2) no. 2 TDDDG). You can clear it at any time by clearing your browser's site data, or change it using the controls in section 5.

If you do allow analytics, Google Analytics additionally sets the cookies described in section 5. If you later withdraw your consent, analytics stops immediately and we expire those cookies.

5. Web analytics

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We run three measurement properties: G-0F31NSPH3E for limelabs.io, G-L635HJ9NNZ for alpcrun.ch, scale.alpcrun.ch and ai.alpcrun.ch, and G-8MS5M7W7BR for torhaus.ai.

Nothing loads without consent. On each of our sites, the Google Analytics script is not requested and no analytics cookies are set unless you have given your explicit consent. If you decline, or simply ignore the banner, no connection to Google is made.

Where you do consent, Google Analytics uses cookies to help us understand how the site is used in aggregate, for example which pages are viewed and how visitors find us. We use this only to improve the site. Google Analytics 4 does not log or store IP addresses. Your IP address is used transiently to derive an approximate location and is then discarded, so the measurement data cannot be traced back to you. We do not use Google Analytics for advertising, remarketing, or cross site tracking.

On scale.alpcrun.ch, ai.alpcrun.ch and torhaus.ai, and only where you have allowed analytics, we also record an event when a demo request or an early access registration is submitted successfully, so that we can count how many we receive. That event carries none of the details you entered in the form.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time with effect for the future. Withdrawing is as easy as giving consent.

Because your browser keeps each site's settings separately, the choice is made per site. The button below manages your choice for limelabs.io. For alpcrun.ch, scale.alpcrun.ch and ai.alpcrun.ch, use the Analytics settings control in the footer of any of them, which covers all three at once. torhaus.ai has the same control in its own footer, covering that site alone.

Independently of the above, you can prevent Google Analytics across all websites by installing the Google Analytics opt-out browser add-on. Further information on how Google processes data is available in the Google Privacy Policy.

6. Early access and demo request forms

On ai.alpcrun.ch you can register your interest in early access to ALPCRUN.CH AI, and on scale.alpcrun.ch and torhaus.ai you can ask us for a demo. The three forms are the same and ask for:

  • your first name (required) and your last name (optional)
  • your work email address (required)
  • your industry, chosen from a fixed list (required)
  • your phone number and your company (both optional)

The form also carries a field that is hidden from you and is only ever filled in by automated submissions. We use it to discard spam, on the basis of our legitimate interest in the security of our systems under Art. 6(1)(f) GDPR, as recognized in Recital 49 GDPR.

Purpose: to get in touch with you about whichever you asked for, early access or a demo, and nothing else. We do not add you to a mailing list, we send no advertising, and we do not sell or share your details.

Legal basis: Art. 6(1)(b) GDPR, because you are asking us to take steps before entering into a contract. You can ask us to delete your details at any time by writing to info@alpcrun.ch for the ALPCRUN.CH sites, or to info@torhaus.ai for torhaus.ai.

Providing this data is voluntary. It is required neither by law nor by contract. The only consequence of not providing it is that we cannot get back to you.

Where it goes: the form is submitted to our own server, and your registration is held in our own customer system, which we run ourselves on the infrastructure described in section 3. It is not passed to any external CRM, mailing tool, or advertising service.

Retention: we keep an enquiry for as long as we are still in contact about it and a business relationship may realistically follow. If nothing comes of it, we delete it at the latest 24 months after our last contact with you, and sooner if you ask. Where a contract does follow, the correspondence becomes part of our business records, which German commercial and tax law requires us to keep for six or ten years, during which it is restricted to that purpose.

7. When you contact us

If you contact us by email or telephone, whether at hi@limelabs.io for Lime Labs, at info@alpcrun.ch for ALPCRUN.CH, or at info@torhaus.ai for TORHAUS.AI, we process the details you give us, such as your name, your contact details, and the content of your message, in order to deal with your inquiry.

Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to a contract or to steps taken before entering into one, otherwise our legitimate interest in responding to inquiries under Art. 6(1)(f) GDPR.

We keep this correspondence for as long as needed to handle your request and to answer any follow up questions. Where German commercial and tax law requires it, business correspondence is retained for the statutory periods of six or ten years, during which the data is restricted to that purpose.

Please note that email is not an inherently secure medium. If your inquiry is confidential, please ask us for a secure channel.

8. Transfers outside the European Union

Hosting takes place within the European Union, so visiting our sites transfers no personal data to a third country.

The single exception is the analytics service described in section 5, and only if you consent to it. Google Ireland Limited may pass data to Google LLC in the United States. Such transfers are safeguarded either by an adequacy decision of the European Commission, including the EU-US Data Privacy Framework where the recipient is certified under it, or by the European Commission's Standard Contractual Clauses together with supplementary measures. If you decline analytics, no such transfer takes place.

9. Your rights

You have the following rights in respect of the personal data we hold about you:

  • Access (Art. 15 GDPR): to obtain confirmation of whether we process your data, and a copy of it.
  • Rectification (Art. 16 GDPR): to have inaccurate data corrected and incomplete data completed.
  • Erasure (Art. 17 GDPR): to have your data deleted, where no legal retention obligation applies.
  • Restriction (Art. 18 GDPR): to have processing limited in certain circumstances.
  • Data portability (Art. 20 GDPR): to receive data you provided in a structured, commonly used, machine readable format.
  • Objection (Art. 21 GDPR): to object, on grounds relating to your particular situation, to processing based on our legitimate interests.
  • Withdrawal of consent (Art. 7(3) GDPR): to withdraw any consent at any time with effect for the future, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to hi@limelabs.io. We do not charge for this and we will respond within the statutory time limits.

10. Right to complain to a supervisory authority

If you believe we have processed your data unlawfully, you may lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany

11. Encryption

Our sites are served over HTTPS using TLS encryption, so the content transmitted between your browser and the server cannot be read by third parties in transit. You can recognize an encrypted connection by the lock symbol in your browser's address bar.

12. Automated decision making

We do not use automated decision making, including profiling, within the meaning of Art. 22 GDPR.

13. Changes to this policy

We may update this policy when our sites change or when the legal position requires it. The version published on this page always applies, and the date at the top shows when it was last revised.