Privacy Policy

Who we are

ONEvent (onevent.pro) is a private streaming portal operated by StreamTeam. Organizers use it to show conferences, concerts and other events to the people they invite.

For each event, the organizer, usually the company that invited you, decides who may watch. We run the portal and process your data to provide the event for the organizer and to keep the portal secure. If you have questions about why you were invited, please contact the organizer.

Contact: info@onevent.pro

What we collect

• Email address. You enter it to receive a sign-in code, or it comes from your work account. While you watch, your email address is shown as a watermark over the video.
• Work account details. If you sign in with Google, Microsoft or your company’s single sign-on, we receive your name, email address, account identifier and your organization’s identifier from that provider. We never receive your password.
• Guest lists. Email addresses, and names if provided, that the organizer adds to an event.
• Technical data. IP address, browser and device information, and the times you sign in and watch.
• Security log. Sign-ins, refused sign-ins, and the start and end of playback, with email address, IP address and time.
• Organizer accounts. The administrator’s email address and the settings of their authenticator app.

We do not collect payment data, we do not use advertising or analytics trackers, and we do not sell personal data.

Why we use it

• To let you sign in and watch the events you are invited to. We do this to provide the service the organizer has asked for and that you request when you sign in (GDPR Art. 6(1)(b) and (f)).
• To protect events from unauthorized access and redistribution: one device per viewer, the email watermark, limits on sign-in attempts and the security log. This is our and the organizer’s legitimate interest (Art. 6(1)(f)).
• To send you sign-in codes by email.
• To meet legal obligations, where they apply (Art. 6(1)(c)).

Cookies

We use only cookies that the portal needs to work, so we don’t ask for consent:

• wp_session keeps you signed in, for up to 12 hours.
• wp_login links a sign-in code to the browser that requested it, for 10 minutes.
• wp_oidc protects sign-in with Google, Microsoft or company single sign-on while you are redirected, for 10 minutes.
• wp_device recognizes your device for the one-device-per-viewer rule, for up to one year.
• wp_csrf protects forms against requests from other websites, until you close the browser.

If an event is streamed through Vimeo, the Vimeo player may set its own cookies.

Who else receives data

• IONOS SE hosts the portal. Our servers are in Germany.
• eSputnik delivers sign-in code emails and receives your email address and the code.
• Google, Microsoft and Okta (Auth0) handle your sign-in only if you choose to sign in with them.
• Vimeo plays events streamed through Vimeo and receives your IP address and device information.
• Bunny.net may deliver the video of other events and receives your IP address when your device loads the video.

Some of these providers may process data outside the EU and EEA. In that case they rely on safeguards such as the EU Standard Contractual Clauses.

The organizer of an event can see who signed in and watched it: email address, sign-in method, IP address and times.

How long we keep it

• Sign-in codes are valid for 10 minutes, are stored only as hashes and are deleted within an hour after they expire or are used.
• Sign-in sessions end after 12 hours and are then deleted.
• Viewing sessions are deleted 24 hours after they end.
• Backups are made every hour; we keep the last 48 copies, about two days.
• When an organizer deletes an event, its guest list, access rules and logo are deleted.
• Viewer profiles are deleted automatically after 12 months without a sign-in, together with their sign-in methods and viewing history.
• Security log entries are deleted automatically after 12 months.
• We delete data earlier when you or the organizer ask us to, unless we must keep it to protect the portal or comply with the law.

Your rights

You can ask us for access to your data, to correct or delete it, to restrict or object to its processing, and for a copy of it. Write to info@onevent.pro. If your request concerns an organizer’s event, we may pass it on to the organizer. You also have the right to complain to a data protection authority.

Security

Connections are encrypted. Sign-in codes and session identifiers are stored only as hashes. Organizers sign in with an email code and an authenticator app. Video links are signed and expire quickly, and access is logged.

Children

The portal is not intended for children under 16.

Changes

We may update this policy. The date at the top shows the current version.