Privacy policy

1. Who we are

This Privacy Policy applies to the following domains:

https://yes-css.ba – official website of the Cyber Security Summit conference
https://yes-css.eventio.app – platform for registration and ticket purchase

Data Controller:
e-Transformation Association
Džemala Bijedića 162/2
71000 Sarajevo, Bosnia and Herzegovina
📧 hello@e-transformacija.ba

Data Protection Contact:
📧 hello@e-transformacija.ba

2. What data we collect and why

We only collect data necessary for:

enabling conference registratio
managing accommodation reservations
communicating with the organizer
processing ticket purchases
fulfilling legal obligations and ensuring system security.

2.1. Contact form (yes-css.ba)

Fields: Full name, Email, Message
Purpose: Responding to inquiries and occasional updates on the Association’s activities.
Legal basis: User consent via checkbox.

2.2. Accommodation reservation form (yes-css.ba)

Fields: First name, Last name, Phone number, Email, Arrival and departure dates, Room type
Purpose: Internal record of reservations and sharing with hotel partners to complete bookings.
Legal basis: User consent via checkbox.

2.3. Registration for legal entities (yes-css.eventio.app)

Company data: Name, Address, Country, Email, Phone, Company ID, VAT ID
Participant data: First name, Last name, Email, Phone (multiple participants per company)
Purpose: Managing registrations, sending event information, statistics, invoicing.
Legal basis: User consent via checkbox.

2.4. Registration for individuals (yes-css.eventio.app)

Fields: First name, Last name, Address, Country, Email, Phone, Company/Organization (optional)
Purpose: Same as for legal entities.
Legal basis: User consent via checkbox.

2.5. Data sharing with sponsors

If the user gives explicit and voluntary consent, personal data (name, email) may be shared with event sponsors for promotional communication purposes.

3. Cookies and third-party tools

By using our website, you agree to the use of cookies in accordance with our Cookie Policy.

We use the following tools:

Google Analytics – traffic analysis
Google Tag Manager – tag management
Facebook Pixel – conversion tracking and remarketing
YouTube embed – video display (cookies loaded only with consent)

For more information: see Cookie Policy

4. Who we share your data with

We do not sell your personal data to third parties. We share data only:

with hotels for the purpose of completing reservations,
with sponsors, only with prior consent,
with competent authorities when required by law.

All third parties we share data with are bound by Data Processing Agreements (DPA) in compliance with the GDPR.

5. How long we retain your data

Contact form data: up to 3 years
Registration and reservation data: up to 3 years
Cookie and analytics data: up to 26 months (Google Analytics default)

Data is deleted upon user request or automatically after the retention period expires.

6. Your rights

In accordance with the GDPR, you have the right to:

request access to and a copy of your data,
correct inaccurate data,
request deletion (“right to be forgotten”),
restrict processing,
object to processing,
exercise the right to data portability,
withdraw your consent at any time.

Contact for exercising rights:
📧 hello@e-transformacija.ba
⏱️ We will respond within 30 days.

7. Data security

We implement technical and organizational measures to protect your data, including:

HTTPS encryption
Restricted access to data
Regular data backups
Ongoing system maintenance

8. Data breach procedures

In case of a breach:

We will log the incident internally,
Notify the relevant supervisory authority within 72 hours (if required),
Inform affected users if there is a high risk to their rights and freedoms.

9. User consent

All forms that collect personal data include checkboxes that enable:

providing explicit consent for processing,
providing separate consent for data sharing with sponsors.

Without consent, data will not be processed. Consent may be withdrawn at any time.

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. All changes will be posted on this page. We recommend that you review it periodically.

This Privacy Policy was last modified on June 11, 2025.

📍 By using the websites yes-css.ba and yes-css.eventio.app, you confirm that you have read, understood, and accepted this Privacy Policy.