1.GENERAL PROVISIONS

1.1. This Privacy Policy ("Policy") is established in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and outlines the procedures for processing personal data collected and processed by Lime Consulting LLC, hereinafter referred to as the "Operator", via the website limeico.com ("Website") within the scope of online services.
1.2. The objective of this Policy is to ensure the protection of rights and freedoms of users and customers ("Data Subjects") concerning the processing of their personal data. Data Subjects provide these details voluntarily while using the Website and its Services. This Policy is designed to not contain any conditions that restrict the rights and freedoms of Data Subjects, and any contract or consent should not be contingent upon the inaction of the Data Subject.
1.3. This Policy is applicable to all data received via the Website.
1.4. To comply with the GDPR, this Policy is made freely accessible on the Operator's Website and at each point where personal data is collected.
1.5. Adherence to this Policy is a fundamental prerequisite for the Operator's processing of personal data.
1.6. The Operator assumes the provided personal data is accurate and current, relying on Data Subjects to supply truthful and sufficient personal information at registration and to keep it updated. The Operator commits to taking appropriate measures to rectify or delete inaccurate or incomplete personal data.
1.7. The Operator processes only personal data that is necessary for the declared purposes of processing. The scope and content of processed data are commensurate with these purposes, and excess data processing is not permitted.
1.8. The Operator processes personal data solely of individuals who have reached the age of 18 years.
1.9. The Operator does not process special categories of personal data, including biometric data, in accordance with GDPR regulations.
1.10. Personal data is stored only for the duration necessary for the processing purposes and is deleted or anonymized upon fulfillment of these purposes, or when it is no longer necessary to achieve these purposes, unless otherwise mandated by applicable laws.
1.11. If a Data Subject disagrees with any terms of this Policy, they should cease the use of the Website and its Services immediately.

2. MAIN TERMS AND DEFINITIONS

• Site User: A legally competent individual who utilizes the Site and its Services.
• Customer: A legally competent individual who has accepted the terms of service on the Site.
• Site: The web page located at limeico.com.
• Service: Functions of the Site, the access to which is provided to the User/Customer.

3. PROCESSING OF PERSONAL DATA
3.1. The following personal data of Users/Customers are processed when using the Site:

• Full name;
• Phone number;
• Email address;
• Telegram messenger account;
• WhatsApp messenger account;
• Data collected via cookies and similar tracking technologies (e.g., Google Analytics).

The above data is collectively referred to as "Personal Data" in this Policy.
3.2. Personal data is processed both manually and by automated means, in compliance with GDPR.
3.3. Processing activities include collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
3.4. The Operator ensures that personal data is not made publicly available or disclosed to unauthorized parties.
3.5. The Operator processes personal data only when provided by the User/Customer through specified forms on the Site, ensuring transparency and adherence to GDPR principles.
4. LEGAL BASIS FOR PROCESSING PERSONAL DATA
4.1. The legal basis for processing personal data under GDPR includes:

• Compliance with a legal obligation to which the Operator is subject;
• Performance of a contract to which the Data Subject is party;
• Protection of vital interests of the Data Subject;
• Consent explicitly given by the Data Subject for one or more specific purposes;
• Legitimate interests pursued by the Operator.

4.2. GDPR compliance ensures that personal data is processed lawfully, fairly, and in a transparent manner.
4.3. The Data Subjects whose personal data are processed include:

• Users of the Site;
• Customers engaging with the services provided via the Site.

5. PURPOSES OF COLLECTION AND PROCESSING OF PERSONAL DATA
5.1. Personal data processing is strictly limited to achieving specific, predefined, and lawful purposes. Any processing incompatible with the initial purposes of data collection is not permitted under GDPR.
5.2. Only personal data relevant to and necessary for the stated processing purposes are processed, adhering to the data minimization principle of GDPR.
5.3. Procedure for data deletion: Upon achieving the data processing purpose or when other lawful grounds arise (e.g., withdrawal of consent), personal data will be securely erased. The responsible data officer will carry out this deletion and document it with a data destruction record, in compliance with GDPR requirements.
6. ABOUT COOKIE TECHNOLOGY:
6.1. Cookies are small text files placed on the User's device by the Site's server. They may contain personal data or anonymous technical information. Under GDPR, Users have the right to control the use of cookies, including rejecting or restricting them. Refusal or restriction may affect Site functionality. Users must ensure their device settings appropriately manage cookies to balance functionality and data privacy.
6.2. Types of cookies used and their purposes:

• Technical Cookies: Necessary for Site functionality, identifying user equipment and software for optimal performance.
• Preference Cookies: Store user preferences like language and site appearance settings.
• Email Newsletter Cookies: Manage subscription to email newsletters and relevant notifications.
• Statistical/Analytical Cookies: Collect and analyze data on site usage for improvement purposes.
• Behavioral Cookies: Track user interactions for error identification and feature testing.
• Form Cookies: Remember user inputs in various forms for future interactions.
• Third-Party and Advertising Cookies: Used for personalized advertising based on user behavior and preferences.

6.3. Regulation of cookie use:

• Cookies managed by the Operator are processed according to GDPR compliance and this Policy.
• Cookies managed by third parties are subject to their own privacy policies and this Policy.

6.4. Analytics Tools: The Site uses tools like Yandex Metrica or Google Analytics for analytics purposes, under their respective privacy policies and GDPR guidelines.

7. CONDITIONS AND TERMS OF PROCESSING OF PERSONAL DATA
7.1. The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary for compliance with the requirements of the General Data Protection Regulation (GDPR).
7.2. The Operator ensures the security of personal data and takes all feasible measures to prevent unauthorized access to or disclosure of personal data.
7.3. In case of inaccuracies in personal data, the User/Customer should inform the Operator of the incorrect personal data at the email address info@limeico.com for necessary updates.

8. MAIN RIGHTS AND OBLIGATIONS OF THE OPERATOR AND USER/CUSTOMER
8.1. The Operator has the right to:
8.1.1. Independently determine and implement measures necessary and sufficient for compliance with GDPR, including data protection and privacy obligations.
8.1.2. Entrust the processing of personal data to a third party, based on a contract, ensuring that this third party complies with GDPR requirements. The personal data subject, by accepting/agreeing to this Privacy Policy, consents to the transfer and/or processing of personal data by a third party, as necessary for the Operator to fulfill its contractual obligations, in compliance with GDPR.
8.1.3. Continue processing personal data after the expiration of consent, in cases where processing does not require consent under GDPR.
8.2. The Operator is obliged to:
8.2.1. Process personal data in accordance with GDPR regulations.
8.2.2. Provide Users, upon their request, with information regarding the processing of their personal data.
8.3. The Operator must:
8.3.2. Use the obtained information exclusively for the purposes outlined in this Policy.
8.3.3. Maintain the confidentiality of personal data and not disclose it to third parties or distribute it without the User/Customer's consent.
8.3.4. Implement legal, organizational, and technical measures to ensure the confidentiality and security of User/Customer personal data as per standard business practices.
8.3.5. Block personal data related to the User/Customer upon receiving a request or notice of inaccuracies, for verification purposes, in accordance with GDPR.
8.3.6. Update personal data promptly upon verification of its inaccuracy.

9. MEASURES FOR FULFILLING THE OPERATOR'S OBLIGATIONS IN ENSURING THE SECURITY OF PERSONAL DATA DURING THEIR PROCESSING
The Operator adopts necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, dissemination, and other unauthorized actions. These measures include:

• Identifying threats to the security of personal data during their processing under GDPR guidelines.
• Implementing policies and procedures that regulate the processing and protection of personal data as per GDPR.
• Storing personal data in secure conditions to prevent unauthorized access, in compliance with GDPR.
• Assessing potential harm to individuals in case of data breaches and conducting internal control and audits to ensure GDPR compliance.

10. FINAL PROVISIONS
10.1. Users/Customers can obtain clarifications on issues concerning the processing of their personal data and request written information on the processing of their personal data. Such requests should be directed to the Operator via email at info@limeico.com, including relevant personal and identification details. The Operator responds to these inquiries within ten working days in the format in which the request was made.
10.2. The Operator reserves the right to amend this Policy. Changes take effect from the moment the updated Policy is published on the Operator's website. Previous versions of the Policy are accessible in the archive indicated in the Policy.
10.3. The Operator informs Users/Customers who have consented to the Policy about any changes to the Policy, ensuring that the consent for the processing of personal data remains specific, informed, explicit, and unambiguous.
10.4. The jurisdiction for consent and the execution of this Policy is the location of the Operator, and the applicable law for relations between the Operator and Users/Customers is the law of the European Union. Disputes are resolved in accordance with EU law, irrespective of the User/Customer's location.
10.5. The current version of the Policy is available on the website.
10.6. Last updated: 03.12.2023
OPERATOR INFORMATION
Lime Consulting LLC
Email: info@limeico.com