Privacy Policy

1. Scope

We are pleased about your interest in our SaaS services Vistameet and Liman (hereafter “Services”). The protection of your personal data is important to us. This privacy policy informs you about the type, scope and purposes of processing personal data in connection with our services and contract negotiations or execution.

2. Responsible Party

Controller: GoHunting Deutschland GmbH
Brand: Liman
Address: Speditionstraße 15a, 40221 Düsseldorf, Germany
Data Protection Officer: Dr. Jörg Berthold
Email (privacy):   ·  

• GoHunting Deutschland GmbH is the controller (Art. 4(7) GDPR) for the website, registration, customer accounts, billing and support.
• For collaboration content (audio/video, chat, files, recordings, AI transcripts), GoHunting Deutschland GmbH acts as a processor (Art. 28 GDPR) on behalf of the customer. The DPA is published at DPA .

3. Personal Data

When using our services, we process personal data, in particular technical log data (log files) such as IP address, date and time of access, name and URL of the retrieved file, amount of transmitted data, message about successful retrieval (HTTP response code), browser type and version, user operating system and referrer URL (previously visited page). In addition, we process technically necessary cookies (e.g. session management, language selection) and, during registration and account creation, details such as first and last name, business email address, company name and billing address (if applicable: phone number and VAT identification number). For support requests (email, ticketing system, chat), we process your name and email address, the content of your request and, if applicable, technical diagnostic information (e.g. log excerpts and screenshots).

• Log files: legal basis Art. 6(1)(f) GDPR (legitimate interest in security, stability and abuse prevention, as well as technical functionality and error analysis).
• Registration/account and payment processing: legal basis Art. 6(1)(b) GDPR (performance of contract).
• Support: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (customer support).

4. Purpose of Data Processing

• Technical provision of the services and ensuring system security (error analysis/technical functionality)
• Website visits as well as operation and maintenance of the services
• Registration and administration of customer accounts
• Invoicing and payment processing (including use of payment service providers)
• Providing support and customer service
• Basic functionality via technically necessary cookies (e.g. session management, language selection)

5. Data Storage and Security

Personal data is stored only as long as needed for the respective purpose, plus statutory retention. After that we delete or anonymise it. Backups keep deleted primary data for at most 30 days. The customer, as controller of collaboration content, may require shorter or longer periods where technically feasible and agreed in a DPA or organisation settings. Liman is not a medical archive; healthcare retention rules must be set by the customer.

• Encryption: All data transmissions are carried out via TLS 1.2/1.3; stored data is encrypted (Encryption at Rest)
• Access controls: access to production systems only for authorized personnel with two-factor authentication (2FA)
• ISO 27001-certified data centers with physical security measures
• Regular security checks
• Privacy by default: cameras and microphones are disabled by default when joining a meeting
• Backup and disaster recovery: daily encrypted backups with 30-day retention

6. Your Rights

You have the following rights against GoHunting Deutschland GmbH with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

7. Cookies and Tracking

Our services use exclusively technically necessary cookies. Cookies are small text files stored on your end device. Technically necessary cookies enable basic functions (e.g. session management, language selection) and are processed exclusively server-side for technical service provision. They are exempt from the obligation to obtain consent (§ 25(2) TDDDG). Retention: end of session or a maximum of 365 days.

8. Data disclosure and third-country transfers

Hosting and core operations are in the EU/EEA (including IONOS SE, OVH GmbH, Hetzner Online GmbH). Audio/video meetings run on LiveKit instances we operate on that infrastructure; Matrix chat and identity (Keycloak) are also operated in the EU. AI features (transcription, translation, summaries) are used on the customer’s behalf, typically via OVH or IONOS in European data centres. Customer data is not used to train general AI models. The Art. 28 GDPR DPA is published at liman.com/en/dpa . Public authorities receive data only if required by law or to enforce our own legal claims.

Transfers outside the EU/EEA are not the default, but can occur for optional services. Where they do, appropriate safeguards apply (EU standard contractual clauses under Art. 46 GDPR and, where applicable, the EU-US Data Privacy Framework):

• Stripe (Stripe Payments Europe Ltd. / Stripe, Inc.): payments, invoices, tax. Stripe may act as an independent controller for payment data; where Stripe processes organisation and contact data on GoHunting’s behalf, it acts as a processor. Group companies outside the EU may be involved.
• Microsoft 365 / Graph (optional): If you connect Microsoft accounts, data is processed in your organisation’s Microsoft tenant. Your organisation is typically the controller vis-à-vis Microsoft; their Microsoft contract applies.
• Mobile push (optional): Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM/Google) in the United States, only where push notifications are used.

• Note for meeting participants: The respective meeting organizer is the data protection controller for the communication content within the meeting (audio/video data, chat, shared files, recordings and AI-generated content).
• If you join as a guest, please contact the meeting organizer for information under Art. 13/14 GDPR.
• AI-generated content (transcripts, summaries, translations) is transparently labeled in accordance with Art. 50 EU AI Act.

9. Contact and automated decisions

We do not make automated decisions with legal or similarly significant effects (Art. 22 GDPR). AI features are used solely for support and are transparently labeled.
If you have any questions about data protection or wish to exercise your rights, please contact:   (postal address: GoHunting Deutschland GmbH, Datenschutz, Speditionstraße 15a, 40221 Düsseldorf)