privacy policy

Yard is committed to protecting the privacy and personal data of its users, clients and participants, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and all applicable legislation.

1. Data Controller

Yard is the entity responsible for the processing of personal data collected through its website, ticketing platforms, social media, contact forms, newsletters or other commercial interactions.

2. Personal Data Collected

The following data may be collected, among others:

  • First and last name
  • Email address
  • Gender and age
  • Telephone contact
  • Billing information
  • Information related to ticket purchases or event participation
  • Browsing data (cookies, IP address, approximate location)

3. Purpose of Data Processing

Personal data is processed for the following purposes:

  • Processing purchases and managing tickets;
  • Communicating relevant information regarding events, changes or logistics;
  • Sending promotional communications and newsletters, subject to consent;
  • Statistical analysis and improvement of the digital experience;
  • Compliance with legal obligations.

4. Legal Basis

The processing of personal data is based on:

  • The data subject’s consent;
  • The performance of a contract or pre-contractual steps;
  • Compliance with legal obligations;
  • Yard’s legitimate interests, namely for security, institutional communication and service improvement purposes.

5. Data Sharing with Third Parties

Yard may share personal data only with partner entities strictly necessary for the provision of services (e.g. ticketing platforms, payment systems, email marketing or invoicing services), ensuring that all such entities comply with the GDPR.

Personal data will not be transferred to third parties for commercial purposes without the prior and explicit consent of the data subject.

6. Data Retention

Personal data will be retained only for the period necessary to fulfil the purposes for which it was collected or for the duration required by law.

7. Data Subject Rights

Under applicable legislation, the data subject has the right to:

  • Access, rectify or delete their personal data;
  • Request restriction of or object to data processing;
  • Request data portability;
  • Withdraw consent, where applicable;
  • Lodge a complaint with the Portuguese Data Protection Authority (CNPD).

8. Information Security

Yard implements appropriate technical and organisational measures to ensure the security and confidentiality of personal data.

9. Cookies

The Yard website uses essential and non-essential cookies to ensure proper operation, personalise content and analyse traffic.

Users may manage cookie preferences through their browser settings or via the cookie management system available on the website.

10. Changes to the Privacy Policy

Yard reserves the right to update this Privacy Policy whenever necessary. The current version will always be available on the website.