Zanzo Streaming is the data controller for personal data processed about platform accounts and visitors to our marketing site. Our infrastructure is hosted in the European Union (Frankfurt, Germany).

For festival/conference sites we host, the organiser (our customer) is the controller of their viewers’ data and we act as their processor. Questions about a specific event should go to that organiser.

Contact us at privacy@conferencestreaming.eu.

• → Account data — name, email address, and locale, when you sign up or are invited as an admin.
• → Authentication data — a signed session cookie and one-time login codes.
• → Purchase & billing data — for paid tickets/passes: amount, currency, country, and (for businesses) tax identifiers. Card details are handled directly by Stripe and never reach our servers.
• → Usage & viewing data — talks watched and viewer-hours, used for analytics and for metering plan usage.
• → Technical data — IP address, device/browser type, and server logs, collected to operate and secure the service.
• → Optional analytics — when an organiser enables Google Analytics and you accept analytics cookies.

We use strictly-necessarycookies to keep you signed in and to operate checkout — these don’t require consent. We use analytics cookies (Google Analytics) only after you accept them in the consent banner; until then, no analytics scripts or cookies are loaded.

You can change your choice at any time:

• → Contract (Art. 6(1)(b)) — to create your account, deliver the service, and process purchases.
• → Legal obligation (Art. 6(1)(c)) — to issue invoices and keep accounting records.
• → Legitimate interests (Art. 6(1)(f)) — to secure, maintain, and improve the service.
• → Consent (Art. 6(1)(a)) — for analytics cookies and any optional marketing. You may withdraw consent at any time.

We share data only with processors that help us run the service:

• → Stripe — payment processing and subscription billing.
• → Google Analytics — usage analytics (only with consent).
• → Cloudflare R2 — video and image storage.
• → Neon — our EU-hosted PostgreSQL database.
• → Vercel — application hosting and delivery.
• → Resend — transactional email (login codes, receipts).
• → Számlázz.hu — invoice generation (where applicable).

We never sell your personal data.

We aim to keep data within the EU/EEA. Where a provider processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses to safeguard the transfer.

We keep account data for as long as your account is active and for a reasonable period afterwards. Invoicing and accounting records are retained for the period required by law (typically up to 8 years). Server logs are kept for a short rolling window. Analytics data follows the configured retention of the analytics provider.

Under the GDPR you have the right to:

• → access the personal data we hold about you;
• → rectify inaccurate data;
• → erase your data (“right to be forgotten”);
• → restrict or object to processing;
• → data portability; and
• → withdraw consent at any time, without affecting prior processing.

To exercise any of these, email privacy@conferencestreaming.eu. You also have the right to lodge a complaint with your local data-protection supervisory authority.

The service is not directed at children under 16, and we do not knowingly collect their personal data.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.