Privacy Policy

Introduction

With the following data protection declaration we would like to inform you about the types of personal data (hereinafter also referred to as “data”) we process, for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites prepareapp.de and docs.prepareapp.de, in the prepare software, as well as within external online presences, such as our social media profiles (hereinafter also referred to collectively as “online offer”).

The terms used are not gender-specific.

State: 11.09.2026

Contents Overview

Responsible Person

prefocus GmbH

Pücklerstr. 23
10997 Berlin
Germany

Managing directors: Tilman Schumacher & Tobias Heydthausen

E-Mail address: mail@prepareapp.de

Imprint: Legal Information

Contact Data Protection Officer

mail@prepareapp.de

Overview of the Processing Operations

The following overview summarises the types of data processed and the purposes of their processing, and refers to the data subjects.

Types of Data Processed

  • Inventory data (e.g. names)
  • Contact details (e.g. e-mail addresses)
  • Content data (e.g. messages sent via the contact form)
  • Contract data (e.g. license key, license variant, subscription status)
  • Payment data (processed only by our reseller Lemon Squeezy)
  • Meta/communication data (e.g. device information, IP addresses)
  • Usage data (e.g. pages visited, access times, log files of the software)

Categories of Data Subjects

  • Customers and users of the prepare software
  • Interested parties
  • Communication partners
  • Users of our websites

Purpose of the Processing

  • Provision of our online offer and user-friendliness
  • Provision of contractual services and customer service
  • Checking licenses of the software
  • Error analysis and support
  • Contact requests and communication
  • Reach measurement (anonymous access statistics)
  • Security measures

In the following, we provide the legal basis of the General Data Protection Regulation (GDPR), on the basis of which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence and domicile.

  • Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR) – The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes.
  • Contract performance and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Legal obligation (Art. 6 para. 1 sentence 1 lit. c. GDPR) – The processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) – The processing is necessary in order to protect the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

Security Measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection commensurate with the risk.

SSL encryption (https): To protect your data transmitted via our online offer and by the prepare software, we use SSL/TLS encryption. You can recognize such encrypted connections by the prefix https:// in the address line of your browser.

Transmission and Disclosure of Personal Data

In the course of our processing of personal data, it may happen that the data is transferred to or disclosed to other bodies or companies. The recipients of this data are in particular our reseller Lemon Squeezy (see Sale of prepare and Customer Data) and providers of IT services. In such cases we observe the legal requirements and in particular conclude appropriate contracts or agreements with the recipients of your data which serve to protect your data.

Processing of Data in Third Countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if the processing takes place in the context of the use of services of third parties, this will only take place in accordance with the legal requirements (Art. 44 to 49 GDPR). This means: there is an adequacy decision of the EU Commission (e.g. for companies certified under the EU-US Data Privacy Framework), or the transfer is based on standard contractual clauses of the EU Commission, or you have expressly consented, or the transfer is necessary for the performance of a contract.

Data is transferred to the USA in particular when you purchase prepare via Lemon Squeezy, LLC and when the software checks your license (see below), as well as when you use the social networks and YouTube videos described below. The safeguards used by the respective provider are described in their privacy policies.

Cookies and Local Storage

Our websites do not use cookies for tracking or marketing. Our web analytics (Umami) works without cookies. The website may store technical settings, such as the selected colour theme (light/dark), in your browser’s local storage. This data does not leave your device.

When you go to the checkout or the customer portal, you leave our website. Lemon Squeezy may then use cookies according to its own privacy policy.

  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR), § 25 para. 2 TDDDG for technically necessary storage.

Sale of prepare and Customer Data

We sell prepare via our online reseller Lemon Squeezy, which acts as merchant of record. Lemon Squeezy processes the order, payment, invoicing, taxes, subscriptions and license keys. When you order, you enter your data (e.g. name, e-mail address, billing address and payment details) directly at Lemon Squeezy. We do not receive any account or credit card details, but only the information needed to provide the software and support, e.g. your name, e-mail address, license key, license variant and the status of your subscription.

We process this data to fulfil our contractual obligations, to provide support and to secure our rights. We delete the data after the statutory retention periods have expired (for tax purposes usually 10 years), unless it is still needed for an active license.

  • Processed data types: Inventory data (e.g. names), contact data (e.g. e-mail addresses), contract data (e.g. license key, subscription status), payment data (at Lemon Squeezy only).
  • Persons concerned: Customers, interested parties.
  • Purpose of the processing: Provision of contractual services and customer service.
  • Legal basis: Fulfilment of contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), legal obligation (Art. 6 para. 1 sentence 1 lit. c. GDPR).
  • Service provider: Lemon Squeezy, LLC (USA); Website: https://www.lemonsqueezy.com; Privacy policy: https://www.lemonsqueezy.com/privacy.

Use of the prepare Software

The prepare software runs locally on your computer. The show data you import and create (e.g. CAD data, patch, groups, presets) stays on your computer and is only transferred to the lighting consoles in your own network. The software only transmits data to us or our service providers in the following cases:

License check: To activate and validate your license, the software sends your license key and the name of the installation to Lemon Squeezy. Lemon Squeezy returns the license status, the license variant and the name and e-mail address of the customer. This data is stored encrypted on your computer so that the software can be used offline for up to 30 days.

Version check: When the software starts, it asks our server (logserver.prepareapp.de) whether a new version is available. No personal data is transmitted apart from the IP address that is technically required for the connection.

Sending log files: Only if you choose “Send Logfile” in the help menu, the log file of the software is sent to our server together with your e-mail address, license key, software version and operating system. The log file records the use of the software and errors that occurred. It can contain:

  • file and folder paths, which can include the user name of your computer;
  • the names of imported and exported files;
  • details of import errors, e.g. the content of faulty CSV rows;
  • messages from the connection to the lighting console.

We use the log file only to analyse and fix errors, and delete it when it is no longer needed for this purpose.

  • Processed data types: Contract data (e.g. license key, license variant), contact data (e-mail address), meta/communication data (e.g. device information, IP addresses, software version, operating system), usage data (log files).
  • Persons concerned: Customers, users of the software.
  • Purpose of the processing: Provision of contractual services and customer service, security measures, error analysis.
  • Legal bases: Fulfilment of contract (Art. 6 para. 1 sentence 1 lit. b. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Provision of the Online Offer and Web Hosting

In order to provide our online services securely and efficiently, we use web hosting services from whose servers the online services can be accessed. The data processed within the framework of the provision of the hosting offer may include all data relating to the users of our online offer which are generated within the framework of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online offers to browsers.

Fonts: The fonts of our websites are hosted on our own server. No connection to Google or other font providers is made.

E-mail dispatch and hosting: The web hosting services we use also include the sending, receiving and storage of e-mails. For these purposes, the addresses of the recipients and senders as well as other information concerning the sending of e-mails and the contents of the respective e-mails are processed. The aforementioned data may also be processed for the purpose of SPAM detection.

Collection of access data and log files: We ourselves (or our web hosting provider) collect data on every access to the server (so-called server log files). Server log files may include the address and name of the web pages and files accessed, date and time of access, data volume transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files are used for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks), and to ensure the stability of the servers.

  • Processed data types: Content data (e.g. entries in online forms), usage data (e.g. websites visited, access times), meta/communication data (e.g. device information, IP addresses).
  • Persons concerned: Users (e.g. website visitors, users of online services).
  • Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Web Analytics with Umami

To find out which pages of prepareapp.de and docs.prepareapp.de are visited, we use the web analytics software Umami, which we run on our own server. Umami does not use cookies and does not create user profiles. It records, for example, the pages visited, the referring website, the browser, the operating system, the device type and the country, which is derived from the IP address. The IP address itself is not stored. The data is only used in anonymous, summarised form and is not passed on to third parties.

  • Processed data types: Usage data (e.g. pages visited, access times), meta/communication data (e.g. device information).
  • Persons concerned: Users (e.g. website visitors).
  • Purpose of the processing: Reach measurement (anonymous access statistics), improvement of our online offer.
  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Contact

When contacting us (e.g. via the contact form, e-mail, telephone or social media), the data of the inquiring persons will be processed to the extent necessary to answer the contact inquiries and any requested measures. Messages sent via the contact form on our website (name, e-mail address, message) are transmitted to our own server (logserver.prepareapp.de) and forwarded to us from there.

To protect the contact form against spam, we use the open-source software ALTCHA, which runs entirely on our own server. Before sending, your browser solves a small computing task (proof of work) that it receives from our server. No cookies are set, no personal data is stored for this purpose and no third-party services are involved. Only the IP address that is technically required for the connection is processed. The legal basis is our legitimate interest in protecting our website against abuse (Art. 6 para. 1 sentence 1 lit. f GDPR).

The answering of contact inquiries within the scope of contractual or pre-contractual relations is carried out in order to fulfil our contractual obligations or to answer (pre)contractual inquiries and otherwise on the basis of the legitimate interest in answering the inquiries.

  • Data types processed: Inventory data (e.g. names), contact data (e.g. e-mail addresses, telephone numbers), content data (e.g. messages), meta/communication data (e.g. IP addresses).
  • Persons concerned: Communication partners, interested parties, customers.
  • Purpose of the processing: Contact requests and communication, management and response to requests.
  • Legal basis: Fulfilment of contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Presence in Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us. Our website only links to these presences; no content of the networks is loaded on our website.

Please note that user data may be processed outside the European Union. Furthermore, user data within social networks is usually processed by the operators for market research and advertising purposes. For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the data protection declarations of the operators of the respective networks. Requests for information and the assertion of data subject rights can be most effectively asserted with the providers. Should you nevertheless require assistance, you can contact us.

  • Data types processed: Inventory data (e.g. names), contact data, content data (e.g. messages, comments), usage data, meta/communication data.
  • Persons concerned: Users of the social networks.
  • Purpose of the processing: Contact requests and communication, information about our offer.
  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Used services and service providers:

Embedded YouTube Videos

On our tutorials page we show videos from YouTube. To reduce the data transmitted, the video player is only loaded from YouTube when you click on a video. However, the preview images of the videos are loaded from YouTube’s servers (i.ytimg.com) when the page is opened, whereby your IP address and technical information about your browser are transmitted to Google. When you start a video, YouTube can also set cookies and process further data according to its privacy policy.

  • Processed data types: Usage data (e.g. pages visited), meta/communication data (e.g. device information, IP addresses).
  • Persons concerned: Users (e.g. website visitors).
  • Purpose of the processing: Provision of our online offer and user-friendliness.
  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR); when you start a video, your consent (Art. 6 para. 1 sentence 1 lit. a. GDPR).
  • Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy policy: https://policies.google.com/privacy.

Deletion of Data

The data processed by us will be deleted in accordance with the legal requirements as soon as the consent given for processing is revoked or other permissions cease to apply (e.g. if the purpose for which the data were processed ceases to apply or if they are not necessary for the purpose).

Unless the data are deleted because they are required for other and legally permissible purposes, their processing is limited to these purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or that must be stored for the purpose of asserting, exercising or defending legal claims.

Amendment and Update of the Privacy Policy

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes make it necessary for you to take action (e.g. to give your consent) or to receive other individual notification.

Rights of Data Subjects

As data subjects, you are entitled to various rights under the GDPR, which result in particular from Art. 15 to 21 GDPR:

  • Right of objection: You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out pursuant to Art. 6 (1) (e) or (f) GDPR.
  • Right of withdrawal for consents: You have the right to revoke your consent at any time.
  • Right of access to information: You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information on such data, as well as further information and a copy of the data in accordance with legal requirements.
  • Right of rectification: In accordance with the law, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
  • Right of deletion and limitation of processing: In accordance with the statutory provisions, you have the right to demand that data concerning you be deleted immediately, or alternatively, in accordance with the statutory provisions, to demand that the processing of the data be restricted.
  • Right to data portability: You have the right, in accordance with legal requirements, to receive data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party.
  • Complaint to the supervisory authority: You also have the right, in accordance with the statutory provisions, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of suspected infringement, if you believe that the processing of personal data concerning you is in breach of the GDPR.

Definitions of Terms

This section provides an overview of the terms used in this privacy policy. Many of the terms are taken from the law and are defined above all in Art. 4 GDPR. The legal definitions are binding. The following explanations are primarily intended to help you understand them.

  • Personal data: “personal data” shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Processing: “Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and covers virtually all handling of data, whether it be collection, analysis, storage, transmission or deletion.
  • Reach measurement: Reach measurement (also known as web analytics) is used to evaluate the flow of visitors to an online offering, e.g. at what time visitors visit a website and which content they are interested in.
  • Responsible person: “Responsible person” shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data.