PP – Privacy Policy
Last updated: July, 2026
This Privacy & Cookies Policy explains how ISI (Czech), s.r.o. processes personal data and uses cookies and similar technologies in connection with yager.eventbroadcasting.eu (the “Website”). It applies to visitors, event viewers and audio listeners who access content through the Website.
1. Data Controller
2. Personal Data We Process
Depending on how you use the Website, we may process:
- your email address, used as your event-access account identifier;
- a system-generated username, password hash, user role and access period associated with your account;
- authentication and session data required to keep you signed in;
- the event, video or audio content to which your account has been granted access;
- IP address, browser and device information, request date and time, requested URL, technical response data and security log information;
- failed-login and temporary lockout information, including the attempted account identifier, IP address, time and login endpoint;
- language preference;
- technical browser-storage information needed to operate the interface, remember language, manage a session, display pop-ups correctly and test browser capabilities;
- communications you send to technical support.
We do not use this information to create advertising profiles or to track you across unrelated websites.
3. Where the data comes from
Tickets are sold by independent ticketing platforms. Registration does not take place on this Website.
Your email address is initially provided when you purchase a ticket from the relevant ticket seller. An authorised representative of ISI (Czech), s.r.o. then imports the email address into the Website solely to create your temporary event-access account and send or enable delivery of your individual access credentials.
The ticket seller’s own processing, payment services and communications are governed by that ticket seller’s privacy information. This Policy covers processing performed through this Website.
Technical data such as IP address, device information and security events is collected directly when your browser or device communicates with the Website.
4. Purposes and legal bases
We process personal data for the following purposes:
Providing event access
We create and operate a temporary user account, authenticate access, display the authorised event or replay and provide technical support. The legal basis is Article 6(1)(b) GDPR, because the processing is necessary to provide the event-access service associated with your ticket.
Website operation and security
We process connection data, IP addresses, server logs, failed-login information and temporary lockouts to maintain the Website, prevent misuse, diagnose faults and protect accounts, content and infrastructure. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and abuse-resistant operation of the Website and protection of licensed event content.
Compliance with legal obligations and legal claims
Where necessary, data may be retained or disclosed to comply with a binding legal obligation, respond to a lawful request, or establish, exercise or defend legal claims. The legal bases are Articles 6(1)(c) and 6(1)(f) GDPR, as applicable.
We do not rely on consent for strictly necessary cookies or storage technologies. They are required to provide the Website, authentication, security and the language or interface functionality requested by the user.
5. How long we keep data
Event-access accounts and their email addresses are deleted automatically:
- immediately after the live event ends, if no replay is offered; or
- immediately after the authorised replay period ends.
There are no routine exceptions to this deletion process.
The Website is backed up daily at midnight. Backups are retained on a rolling basis for 7 days. A deleted account may therefore remain temporarily in an access-restricted backup until that backup is automatically overwritten. If a backup is restored, expired accounts are deleted again automatically or are removed promptly by the authorised administrator before normal service is resumed. Backups are used only for disaster recovery and are not used to restore expired access.
Authentication cookies expire automatically as described in Section 8 or when you sign out. The temporary Audioglossa hand-off cookie expires after 5 minutes.
Security and server-log data is kept only for as long as reasonably necessary to investigate abuse, maintain security and resolve technical incidents, after which it is deleted or overwritten in accordance with the applicable hosting and security-log rotation settings. Data may be kept longer only where necessary for a legal obligation or the establishment, exercise or defence of legal claims.
Support correspondence is retained only for as long as necessary to resolve the request and any directly related dispute or legal obligation.
6. Recipients and service providers
We do not sell or rent personal data. Data may be made available only where necessary to:
- authorised personnel of ISI (Czech), s.r.o.;
- the authorised Website administrator and technical service providers;
- the Website hosting and infrastructure provider;
- Audioglossa infrastructure used to authenticate and deliver audio or video streams;
- Vimeo, where a Vimeo-hosted video is embedded on an authorised event page;
- Google, when externally hosted Google Fonts are requested;
- jsDelivr, where the Website loads the HLS.js playback library from its content-delivery network;
- public authorities, courts or professional advisers where disclosure is legally required or necessary for legal claims.
These recipients receive only the information needed for their relevant function. Connection to an external resource generally discloses at least the visitor’s IP address, request time, browser or device information and the requested resource URL to the service providing that resource.
7. International data transfers
The primary Website account and event-access data is hosted in the European Union.
Some external providers, including Google, Vimeo and globally distributed content-delivery networks, may process connection data outside the European Economic Area. Where such a transfer occurs, it must be based on an applicable adequacy decision, approved contractual safeguards such as the European Commission’s Standard Contractual Clauses, or another transfer mechanism permitted by Chapter V GDPR.
More information about these providers’ processing is available in their respective privacy notices:
8. Cookies and similar technologies
Cookies are small data files stored by your browser. The Website also uses local storage and session storage for limited technical purposes. The Website does not use Google Analytics, Meta Pixel, advertising cookies or cross-site behavioural tracking.
The exact cookie suffixes may differ because WordPress adds a site-specific hash.
| Name or pattern | Type and provider | Purpose | Typical duration |
|---|---|---|---|
pll_language | First-party cookie; Polylang | Remembers the language of the last page viewed and ensures that the appropriate language version is displayed. | 1 year |
wordpress_logged_in_[hash] | First-party, strictly necessary WordPress cookie | Identifies an authenticated user and maintains access to the authorised frontend content. | Up to 2 days by default, or until logout/browser removal |
wordpress_sec_[hash] / wordpress_[hash] | First-party, strictly necessary WordPress cookies | Secure authentication and protection of the logged-in session. | Up to 2 days by default, or until logout/browser removal |
wordpress_test_cookie | First-party WordPress cookie, where set | Tests whether the browser accepts cookies so that login can function. | Session |
wp-settings-[user ID] and wp-settings-time-[user ID] | First-party WordPress cookies, mainly for authorised administrators | Preserve WordPress interface settings. | Up to 1 year |
m_events_redirect_success | First-party, strictly necessary cookie | Temporarily enables the authorised Audioglossa player hand-off immediately after a successful individual-link login. It is marked HttpOnly and is not available to ordinary page scripts. | 5 minutes |
elementor | First-party local storage | Stores local interface state such as page/session counters and pop-up display state. It is not sent to an advertising or analytics service by the Website. | Until removed by the browser or Website logic |
elementor | First-party session storage | Maintains the active local interface session. | Browser-tab session |
wpEmojiSettingsSupports | First-party session storage | Remembers the result of the browser’s emoji-support test and prevents repeated testing. | Browser-tab session |
The Website may also embed or request the following external resources:
| Service | Purpose | Data potentially received by the provider |
|---|---|---|
| Google Fonts | Delivery of Montserrat, EB Garamond, Roboto and Poppins font files | IP address, browser/device and request information |
| Vimeo player | Delivery and operation of embedded event video | IP address, browser/device, request and playback information; Vimeo may use its own cookies or similar technologies |
| jsDelivr / HLS.js | Delivery of the software library required for adaptive video playback | IP address, browser/device and request information |
| Audioglossa streaming infrastructure | Authentication and delivery of authorised audio/video streams | IP address, browser/device, stream request, short-lived authorisation token and playback-related technical information |
Third-party cookies or storage controlled by an embedded provider may not be readable by the Website’s own JavaScript scanner. Their names and retention periods are determined by the relevant provider and may change.
You can delete or block cookies using your browser settings. Blocking strictly necessary authentication or language cookies may prevent login, authorised playback or correct language selection.
9. Automated decision-making
The Website does not make decisions producing legal or similarly significant effects through automated profiling.
Automated technical rules may temporarily block an IP address or login identifier after repeated unsuccessful login attempts. This is a security measure intended to prevent brute-force attacks. If the event or its viewing period has not ended and you believe access was blocked incorrectly, reply to the email containing your login credentials to contact technical support.
10. Your GDPR rights
Subject to the conditions and limitations in applicable law, you have the right to:
- obtain confirmation whether we process your personal data and request access to it;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data;
- request restriction of processing;
- receive personal data you provided in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller;
- object to processing based on legitimate interests;
- withdraw consent at any time where processing is based on consent, without affecting prior lawful processing;
- lodge a complaint with a competent supervisory authority.
Because event-access accounts are deleted automatically at the end of the applicable access period, we may no longer hold an active account by the time a request is received. Limited information may remain temporarily in rolling backups or security logs as described above.
To exercise your rights, contact help@yager.eventbroadcasting.eu. We may need to verify your identity before acting on a request.
11. Supervisory authority
You may lodge a complaint with the supervisory authority in the EU or EEA country of your habitual residence, place of work or place of the alleged infringement.
The controller’s lead national supervisory authority is:
Office for Personal Data Protection of the Czech Republic Pplk. Sochora 27 170 00 Prague 7 Czech Republic
Email: posta@uoou.gov.cz
Website: https://uoou.gov.cz/en
12. Security
We use appropriate technical and organisational measures designed to protect personal data, including access controls, HTTPS encryption in transit, restricted administration, authentication controls, temporary login lockouts, automated deletion and limited backup retention.
No internet service can guarantee absolute security. Users should keep their individual access email and credentials confidential and should not forward them to other persons.
13. Changes to this Policy
We may update this Privacy & Cookies Policy when the Website, service providers, legal requirements or processing activities change. The latest version and its update date will be published on this page.