Privacy

Controller

The controller responsible for data processing is 1More UG (haftungsbeschränkt). You can find the address and further contact details in the imprint. You can contact us at any time by e-mail for privacy-related matters.

Hosting and Server Log Files

When you visit our website, the web server automatically logs certain data in order to deliver the site and maintain security. Depending on configuration, this data may include the date and time of access, your IP address, the hostname of the accessing device, the referring page, the pages accessed, the request status, the amount of data transferred, and information about browser type, browser version, and operating system. This temporary storage is necessary for operation of the website and system security. The legal basis is Art. 6 para. 1 lit. f GDPR. The data is deleted as soon as it is no longer required for these purposes, usually after a few days at the latest.

Our website is hosted by an external service provider that processes this data as a processor on our behalf.

Cookies and Stored Preferences

This website does not set cookies. Preferences that you choose yourself are kept in the local storage of your browser so that they remain for your next visit: the language you chose and whether prices are shown for personal or business customers. Your answer to the question about the extended visit statistics is kept there as well, for twelve months (see “Visit Statistics”). If you choose a plan in the customer portal, this selection (plan, quantity and, where applicable, a voucher code) is kept for at most one day so that it survives signing in; it is removed after the purchase. The customer portal, the area for signed-in customers, keeps your sign-in in the session storage of your browser tab so that you stay signed in; it is removed when you sign out or close the tab.

This storage is strictly necessary to provide the functions you request and to respect your choice (Section 25 (2) no. 2 TDDDG). The stored information is not used for tracking or advertising. You can delete it at any time through your browser settings.

Visit Statistics

To understand how many people visit this website, how they find us and which pages they read, we count visits with a counter of our own. It runs on the same web hosting as the website; no third-party analytics service is involved and no cookies are set. The counting has two stages: without your consent we count only with the information that arises anyway when a page is requested. We record more only if you choose “Allow” in the notice at the bottom of the screen.

Basic counting: with each page view, the page sends the counter the page viewed (without the parameters of the address), whether the view starts a visit, the name of the website you came from (only the host name such as www.google.com, not the full address), campaign details from the link (utm parameters) where present, the language of the page, the version of the website and whether you have consented. From the information your browser sends with every request, the counter takes your preferred language and derives the type of device (phone, tablet, computer) and the operating system from the browser identification (user agent); it does not store the browser identification itself. For the basic counting the website does not query any properties of your device such as the time zone or a touchscreen and stores nothing on your device. The legal basis is our legitimate interest in designing our websites and our offer to meet demand and in measuring the effectiveness of our advertising (Art. 6 para. 1 lit. f GDPR).

Extended statistics with your consent: if you choose “Allow”, the page also sends the time zone of your device and whether it has a touchscreen, and it reports how many seconds the page was visible (at most 30 minutes). The counter derives the country from the time zone and does not store the time zone itself; the touchscreen tells an iPad from a Mac. Your consent already applies to the page on which you give it. The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 para. 1 lit. a GDPR). It is voluntary; if you decline, this has no disadvantage for your use of the website. You can change your choice at any time through “Privacy settings” at the end of every page and thereby withdraw a consent with effect for the future. After twelve months we ask again.

For each page view, only the day and the full hour without minutes or seconds, the page, whether the view starts a visit, the channel (for example Google, Instagram or direct) with the host name of the referring site, the campaign details, the type of device, operating system, the languages, the version of the website and whether you have consented are stored, with your consent also the country and the time spent on the page, in each case under a random identifier that refers to this one view only. The counter does not store your IP address and forms no identifier that recognises you across pages or visits; if you come back later, it counts as a new visit.

So that we can see which channel leads to accounts and purchases, the links into the customer portal carry the channel of the visit in their address. The customer portal reports to the counter when an account has been confirmed or a purchase completed, for a purchase with plan, quantity, invoice amount and currency, in each case with the language and, where known, the channel, the campaign details and the landing page. This report contains neither your name nor your e-mail address, customer, order or invoice number and is not linked to your customer account; our customer and licensing server does not receive the channel. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f GDPR).

We evaluate the information only in summary by day, for example as the number of visits per channel or country; from the share of views with consent we estimate country and time spent for all views. Our internal management system fetches the daily figures over a protected connection. The stored entries are deleted after 25 months.

You can object to the basic counting at any time. If your browser sends the Global Privacy Control (GPC) signal, the website does not count your visits at all, does not ask for consent and does not pass a channel on to the customer portal. Because the counter does not recognise you, we cannot exclude you from the basic counting in any other way; a content blocker in your browser that blocks requests to stagecockpit.app/api/visit.php works as well.

Fonts

The fonts used on this website are hosted on our own server. Your browser does not connect to Google or other third parties to load them, and no data is transmitted to third parties for this purpose.

Customer Account and Licenses

To use the customer portal and to receive licenses you create an account. We process your e-mail address, your name and, if you choose to give it, your phone number. You sign in with a one-time code that we send to your e-mail address; we do not store a password. Every license has a license key. When you activate the app with a key, we also process information about the device (a device identifier, the device name and platform, and the app version) so that the number of devices per license can be enforced. The licensing service runs on our own server. We also store when a device was activated and when the license was last checked. We use your IP address during activation only briefly to fend off excessive requests; we do not store it.

The legal basis is Art. 6 para. 1 lit. b GDPR (providing your account and licenses). We keep this data as long as your account exists. You can view your data and download it in your account.

When you sign in to the customer portal, we store your IP address and your browser details (user agent) with your session to secure the sign-in. A session expires after 30 days at the latest. The legal basis is Art. 6 para. 1 lit. b and lit. f GDPR.

Each time a sign-in code is requested, we record the e-mail address entered, the product, the time and what happened: whether we sent a code to it, whether the address has no account or a deactivated account (then we send nothing), whether a code was entered correctly or wrongly, and whether a request was refused because of too many attempts. This also applies when someone enters an address that has no account with us. We store neither the code itself nor your IP address. We use these records to answer questions about signing in, for example when a code did not arrive, and to detect and fend off misuse. The legal basis is our legitimate interest in a secure sign-in and in helping you with it (Art. 6 para. 1 lit. f GDPR). The records are deleted after 90 days, and at once if we anonymise your account at your request.

Updates and Diagnostics in the App

The app regularly checks our license server api.1more-connect.com for a new version and loads it from there. Like any web server, it receives your IP address, the app version and the operating system, together with a download token from the license check; it is part of our hosting and logs this as described under "Hosting and Server Log Files". The legal basis is Art. 6 para. 1 lit. b GDPR (keeping the software up to date) and lit. f GDPR (security).

"Send Diagnostics" in the Help menu saves a file with the logs of the app and a short system report on your device. The app sends nothing by itself: only if you attach the file to an e-mail to us do we receive it, and we use it only to resolve your request. Projects and other content you create with the app are stored only on your device.

Purchases, Payment and Invoices

When you buy a license you enter your billing details: company or name, address and, if applicable, your VAT ID. We use them to issue the invoice and to fulfil the contract (Art. 6 para. 1 lit. b GDPR). You can change your billing details in your account at any time; invoices that have already been issued are not changed.

Payments are processed by Stripe. You enter your card or other payment details on the payment page of Stripe; we do not see or store them. Stripe keeps the customer record (name, address, e-mail address, VAT ID) and the invoices for your purchases on our behalf. For the payment itself, fraud prevention and its legal obligations (for example anti-money laundering checks), Stripe is responsible on its own and processes data under its own privacy policy (stripe.com/privacy).

We keep the details of orders and invoices for as long as commercial and tax law requires us to keep them (Art. 6 para. 1 lit. c GDPR).

Before the purchase you accept our terms and the license terms and, as a consumer, agree to the immediate activation of your licenses with the early expiry of your right of withdrawal. With your order we store when you gave your consent and to which version of the texts, so that we can prove the conclusion of the contract (Art. 6 para. 1 lit. b and lit. f GDPR). The consents are included in your data export.

Support Requests

You can send us requests through the support area of the customer portal, for example about bugs, licenses or invoices. For this we store the type, subject and text of your request, a request number and its status. Unless you deselect it, we also store technical details that help us handle the request: your customer number, your plans, the selected device, the reported app version and system, and your browser. If you deselect this, we store only your customer number.

In the app you can report a bug, suggest a feature or contact support through the Help menu. The app sends the request with the license key and the identifier of the device, so that it belongs to the account of the license. With it we store the name and e-mail address that the person at the device enters; we send replies to this address. Unless you deselect it, the app also sends your plans, the app version and the operating system. The app keeps the name and e-mail address on the device for the next request. Every request from the app can be seen by the holder of the account in the customer portal.

You can also write to support@stagecockpit.app. We store the sender's address and name, the subject and the text of your e-mail with your request; if the address belongs to a customer account, the request belongs to that account.

Screenshots that you add in the portal or the app, and attachments of your e-mails, stay in the support mailbox at our provider Hostinger; we open them from there when we handle your request and keep no copy elsewhere. We answer by e-mail from the support mailbox; the conversation is stored with the request. You receive a confirmation of every new request. The legal basis is Art. 6 para. 1 lit. b GDPR and, for the technical details, our legitimate interest in resolving issues quickly (Art. 6 para. 1 lit. f GDPR). Your requests are included in your data export. If you ask us to erase your data, we remove the subject, text, technical details and the texts of the conversation from your requests; the request number remains. The e-mails and screenshots themselves remain in the support mailbox as our correspondence.

Withdrawal

As a consumer you can withdraw from a purchase during the withdrawal period in the customer portal using the button “Withdraw from contract” (“Vertrag widerrufen”). For this we store your name, the e-mail address for the confirmation, the order concerned, your optional message, the date and time of receipt, a withdrawal number and our decision on the withdrawal. You immediately receive a confirmation of receipt by e-mail; the Stagecockpit support mailbox receives a notice with the order.

The legal basis is Art. 6 para. 1 lit. c GDPR in conjunction with Section 356a of the German Civil Code (confirmation of receipt) and Art. 6 para. 1 lit. b GDPR (unwinding of the contract). Your withdrawals are included in your data export. If you ask us to erase your data, we remove your name, the e-mail address and your message; the withdrawal number, order, time of receipt and decision remain as proof (Art. 17 para. 3 lit. b and lit. e GDPR).

E-mails from Us

We send the e-mails that are needed to provide the service: sign-in codes, confirmations of your purchases with the invoice, confirmations of and replies to your support requests, confirmations of your withdrawals and, when you change your e-mail address, a code to the new address and a notice to the previous one (Art. 6 para. 1 lit. b GDPR). They are sent through the mail service of our provider Hostinger, which acts as a processor on our behalf.

We send you news and offers about Stagecockpit only if you ticked the optional box when creating your account. You confirm this by entering the code from your first sign-in e-mail. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw it at any time with effect for the future by writing to us.

Recipients and Service Providers

We use the following service providers. We have concluded data processing agreements under Art. 28 GDPR with both of them. We do not sell your data.

1. Hostinger International Ltd., Larnaca, Cyprus: hosting of the website including the visit statistics, of the server for the customer portal and the licensing service, and of the e-mail service. Hostinger processes data as a processor on our behalf.
2. Stripe Payments Europe, Limited, Dublin, Ireland: payments, customer record and invoices. Stripe keeps the customer record and the invoices as a processor on our behalf. For the payment itself, fraud prevention and its legal obligations, Stripe is a controller in its own right.

Some data may be processed outside the European Economic Area, in particular in the United States. Hostinger uses sub-processors based in the United States; these transfers are based on the EU standard contractual clauses. Stripe transfers data to the United States on the basis of the EU-US Data Privacy Framework and the EU standard contractual clauses (Art. 44 et seq. GDPR).

Contact and Business Contacts

If you contact us by e-mail or phone, or if we talk to you, for example on the phone, at a demonstration or at a trade fair, we process the information you give us (for example name, company, role, phone number, e-mail address and the content of the message or conversation) in order to handle your enquiry, provide information or carry out pre-contractual measures. The legal basis is Art. 6 para. 1 lit. b and lit. f GDPR.

We record conversations with prospects and business partners in our customer relationship management system (CRM) so that we can follow and continue them: your contact details and your organisation, when and how we talked, a summary of the conversation, your feedback on Stagecockpit and agreed next steps. The CRM is part of our own customer and licensing server at our provider Hostinger; only authorised people at 1More have access, and it is not evaluated by AI systems. We may take your feedback into our product planning without your name. If you become a customer, we link the entry to your customer account. The legal basis is our legitimate interest in maintaining our business relationships and improving our products (Art. 6 para. 1 lit. f GDPR) and, where a contract with you is concerned, Art. 6 para. 1 lit. b GDPR.

We review entries of people who have not become customers no later than 24 months after the last contact and delete them when there is no longer a reason to keep them. On request we tell you what your entry contains or delete it; if you ask us to erase your customer account, we also delete your entry in the CRM.

We do not send you advertising or newsletters just because you were in contact with us; for that we ask for your separate consent (see “E-mails from Us”). We do not share your data with external partners; data is only passed on to service providers commissioned by us where this is necessary to process your enquiry.

Your Rights

As a data subject, you have the right of access to your processed personal data under Art. 15 GDPR, the right to rectification of inaccurate data or completion of incomplete data under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, and the right to data portability under Art. 20 GDPR.

If you ask us to erase your data, we deactivate your account and remove the personal data that we do not have to keep, such as your name, e-mail address, devices and sign-in. Billing details on orders and invoices stay only for as long as the law requires us to keep them (Art. 17 para. 3 lit. b GDPR).

You also have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on Art. 6 para. 1 lit. f GDPR. If you have given consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg.

Privacy Settings

We do not use cookies, third-party analytics or tracking services, or advertising networks. The notice at the bottom of the screen only asks for your consent to the extended visit statistics; it covers nothing, and you can use this website without answering. You can change your choice at any time through “Privacy settings” at the end of every page. If we introduce additional technologies in the future, we will update this privacy policy accordingly and, where required, obtain your consent.

You can manage stored website data through your browser settings at any time.