Privacy policy

This Privacy Policy sets out the rules for the processing of personal data by TUUL UG in connection with the use of websites and applications developed by TUUL, including the Lexedit application.

1. Data controller

The data controller is:

TUUL UG Marlene-Dietrich-Allee 15 14482 Potsdam Germany

Contact e-mail: info@tuul.ai

This privacy policy also applies to the Lexedit application, which is a product developed and made available by TUUL.

2. Scope of data processed

Depending on how you use TUUL’s services and applications, the following data may be processed:

2.1. Technical and operational data • IP address, • date and time of access, • browser and operating system information, • server logs and data necessary to ensure system security.

2.2. Contact data • e-mail address, • content of correspondence sent to TUUL.

2.3. Data processed in the Lexedit application When using the Lexedit application, data contained in documents uploaded, submitted or entered by the user may be processed, including personal data where such data is present in the documents. The scope and nature of such data depends solely on the content of the documents provided by the user.

3. Purposes and legal bases for processing

Personal data is processed for the following purposes:

• provision of services and functionality of the Lexedit application (Art. 6(1)(b) GDPR),

• ensuring the security of IT systems and preventing misuse (Art. 6(1)(f) GDPR),

• conducting correspondence and handling enquiries (Art. 6(1)(f) GDPR),

• fulfilment of legal obligations incumbent on the controller (Art. 6(1)(c) GDPR).

4. Local processing and anonymisation (Lexedit)

The Lexedit application is designed to allow local processing of data on the user’s device, in particular for the anonymisation of documents before further analysis.

Where processing is carried out locally, data is not transmitted to TUUL’s infrastructure or to third parties at the anonymisation stage.

5. Use of artificial intelligence tools

The Lexedit application may use tools based on artificial intelligence for the analysis, comparison or suggestion of changes to documents.

User data is not used to train artificial intelligence models.

The scope of data transmitted to AI tools and the manner in which it is processed depends on the application configuration and mode of operation selected, including offline mode.

6. Recipients of data and processors

Personal data may be processed by entities acting on behalf of TUUL, in particular providers of:

• hosting infrastructure, • IT and system maintenance services, • analytics and security tools, • artificial intelligence tools.

Such entities process data only on the basis of data processing agreements and in accordance with the controller’s instructions.

7. Transfer of data outside the EU/EEA

The hosting infrastructure used by TUUL for the Lexedit application is located within the European Union.

Where AI tools are used that are supplied by entities based outside the European Economic Area, data may be transferred outside the EU only with appropriate legal safeguards in place, in particular standard contractual clauses (SCCs), in accordance with applicable GDPR provisions.

8. Data retention

Personal data is retained for as long as necessary to achieve the purposes for which it was collected, in particular:

• user account data – for the duration of the contract and after its termination for the period required by law,

• documents processed in the Lexedit application – only for as long as necessary to perform the application’s functions or in accordance with the configuration chosen by the user,

• contact data – for the duration of the correspondence and the limitation period for any claims.

9. Rights of data subjects

Data subjects have the right to:

• access their data, • rectification, • erasure, • restriction of processing, • data portability, • object to processing, • withdraw consent at any time (where processing is based on consent).

You also have the right to lodge a complaint with a competent supervisory authority.

10. Cookies

TUUL’s websites use cookies that are necessary for the proper functioning of the site and to ensure security. Further details can be found in the Cookie Policy.

11. Automated decision-making

Lexedit does not make decisions that have legal effects on the user solely by automated means within the meaning of Article 22 of the GDPR.

12. Contact and policy changes

For matters relating to data protection, you can contact us at: info@tuul.ai.

This privacy policy may be updated. The current version applies from the date of its publication.