Privacy Policy

1. Controller

2. Overview of processing activities

The following overview summarises the types of data processed and the purposes of their processing, and refers to the data subjects concerned.

Types of data processed

• Master data (e.g. names, addresses)
• Contact data (e.g. email addresses)
• Content data (e.g. video and audio data during live transmissions)
• Access credentials (e.g. stream keys of target platforms when multistreaming)
• Usage data (e.g. pages visited, access times)
• Meta/communication data (e.g. device information, IP addresses)

3. Legal bases

Below is an overview of the legal bases of the GDPR on which we process personal data:

• Consent (Art. 6 (1) (a) GDPR) – The data subject has given consent to the processing.
• Performance of a contract (Art. 6 (1) (b) GDPR) – Processing is necessary for the performance of a contract.
• Legitimate interests (Art. 6 (1) (f) GDPR) – Processing is necessary to safeguard legitimate interests.

4. Provision of the online service and web hosting

We process users' data in order to provide our online services. For this purpose, we process the user's IP address, which is necessary to transmit the content and functions of our online services to the user's browser or device.

Hosting with Hetzner

The website and streaming services are operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner. Processing takes place exclusively on servers in Germany.

When you visit our website, the server automatically creates so-called server log files, which your browser transmits automatically. These contain:

• IP address of the requesting computer
• Date and time of the request
• Address of the page accessed (URL)
• Previously visited page (referrer URL)
• Browser and operating system used
• Amount of data transferred

This data is collected exclusively to ensure trouble-free operation and to improve our service. This data is not merged with other data sources. Server log files are stored for a maximum of 14 days and then deleted automatically.

Legal basis: Legitimate interests (Art. 6 (1) (f) GDPR).

5. Contacting us

When you contact us by email, the information you provide is processed for the purpose of handling the enquiry in accordance with Art. 6 (1) (b) GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended and no further retention obligation exists.

6. Use of the apps

LiveShow Creator app family

Our apps (LiveShow Creator, LiveShow Director, LiveShow Monitor, LiveShow Camera, LiveShow Reporter, LiveShow Screen) process data required for the operation of the respective app functions. The apps connect directly within the user's local network (Wi-Fi); video and audio of the local production only leave the local network in the cases described below (live streaming, remote guests, multistreaming).

Camera and microphone access

The apps access the device's camera and microphone to enable video and audio recording as well as live streaming. This data is processed locally on the device and is only transmitted to the platforms selected by the user during active streaming. Processing is based on the user's consent (Art. 6 (1) (a) GDPR).

Remote guests (LiveShow Reporter)

When using the remote-guest feature, video and audio data of the connected guest and the production's return feed are transmitted in real time via our streaming server (stream.liveshowcreator.com, operated at Hetzner in Germany). The transmission is transport-encrypted. The transmitted video and audio data is not permanently stored on the server; it is only processed for the duration of the live connection. Connection data (IP address, session code, device information) is also processed to establish the connection.

Legal basis: Performance of a contract (Art. 6 (1) (b) GDPR) vis-à-vis the user; the producing user obtains the consent of connected guests (Art. 6 (1) (a) GDPR).

Multistreaming (relay server)

When multistreaming, the live stream is forwarded via our relay server (operated at Hetzner in Germany) to the target platforms selected by the user (e.g. YouTube, Twitch, Facebook, Instagram, TikTok). For this purpose, the server processes the stream keys of the target platforms provided by the user as well as the stream data itself. Stream keys are processed exclusively to set up and carry out the transmission and are not stored longer than necessary for this purpose. The operators of the target platforms are responsible for the processing of data on those platforms; the privacy policies of the respective platform apply.

Legal basis: Performance of a contract (Art. 6 (1) (b) GDPR).

Accsoon (camera accessory integration)

Data processing is based on your consent (Art. 6 (1) (a) GDPR).

Apple services

Our apps use Apple frameworks and services (e.g. ARKit, in-app purchases via the App Store, iCloud Drive for syncing shows and media). The processing of this data is subject to Apple's privacy policies. Further information is available at apple.com/privacy.

7. Cookies and storage technologies

Our website currently does not use cookies, tracking tools or other storage technologies beyond the measures necessary for technical operation.

Should this change in the future, we will update this privacy policy accordingly and, where required, obtain your consent pursuant to § 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

8. Your rights as a data subject

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR) – You have the right to obtain information about your stored personal data.
• Right to rectification (Art. 16 GDPR) – You may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) – You may request the deletion of your data, provided no statutory retention obligations exist.
• Right to restriction (Art. 18 GDPR) – You may request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR) – You have the right to receive your data in a common format.
• Right to object (Art. 21 GDPR) – You may object to the processing of your data at any time.
• Right to withdraw consent (Art. 7 (3) GDPR) – You may withdraw consent you have given at any time.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.

This English translation is provided for convenience. The German version of this privacy policy is authoritative.