Privacy notice
This notice explains what data we process when you contact us or upload design documentation through our website. Uploaded technical documentation is covered separately because it is the most common concern.
Effective: July 2026
1. Data controller
Data controller
MASSIVE CORPORATION Korlátolt Felelősségű Társaság
1034 Budapest, Beszterce utca 14. ground floor 3, Hungary
Company registration number: 01-09-968180 · Tax number: 23493247-2-41
Privacy contact
Use the website’s contact form and include “data protection” in your message.
Data protection officer
Our activities do not fall within the mandatory cases under Article 37 of the GDPR, so we have not appointed a data protection officer.
2. What data we process and why
2.1 Quote requests and enquiries
When you submit the form, we process the following data: name, email address, phone number, your role, the requested service, the text of your message and whether you requested a callback, if selected.
Purpose
Responding to your enquiry, assessing the task, preparing a quotation and carrying out discussions before entering into a contract.
Legal basis
Article 6(1)(b) GDPR: taking steps at your request before entering into a contract. If the enquiry does not lead to a contract, further retention is based on our legitimate interest under Article 6(1)(f): enabling later contact and retaining a searchable record of enquiries.
Retention period
If no contract is concluded: one year after the enquiry is closed. If a contract is concluded: the retention period applicable to contractual and accounting records, which is eight years under Section 169 of Act C of 2000 on Accounting.
2.2 Uploaded technical documentation
You may attach drawings, models, photographs and documents to the form. Their processing is described in Section 3 below.
2.3 Audience measurement
The website does not use cookies and does not run third-party advertising or profiling scripts.
We measure traffic using Umami. Umami does not place cookies on your device, store a unique identifier or enable recognition across other websites or visits. It produces only aggregated, anonymous statistics such as pages viewed, referral source, device type and country-level location.
We use this information solely to improve the website’s structure and usability. Because it does not identify a natural person, it is not personal data within the meaning of Article 4(1) GDPR.
3. Uploaded design documentation — specific rules
This section is separate because documentation submitted to us is rarely yours alone. It may contain other designers’ copyright and other clients’ trade secrets. We take this seriously.
3.1 Where it is stored
Uploaded files are stored in the European Union using the S3-compatible storage service of bunny.net (BunnyWay d.o.o., Slovenia), which acts as our data processor.
3.2 How long it is stored
Default: 90 days
Uploaded documentation is retained for 90 days from upload and then deleted from storage. This is the period reasonably required to prepare a quotation and make a decision.
If it becomes a project
If the enquiry results in a contract, the documentation moves to the project’s own workspace in kDrive (Infomaniak Network SA, Switzerland) and is then processed under the project’s contractual terms. Switzerland is covered by a European Commission adequacy decision, so the transfer is lawful without additional safeguards.
Who can access it
Only our team members working on the project and, to the extent necessary for delivery, the appointed specialist designers. Our employees and partners are bound by confidentiality.
3.3 Your warranty when uploading
By uploading, you confirm that you are entitled to provide the documentation: either you hold the relevant rights or have the rights holder’s consent. You are responsible for resolving any third-party copyright or trade-secret rights.
This is not a formality. We regularly receive work by other design offices for review and cannot verify whether disclosure was lawful. The person uploading the material bears that responsibility.
3.4 What we publish and what we do not
At most, our references state which building we worked on and the nature of our work. We do not publish drawings, calculations, models, internal documents or quantity data.
If we wish to present more — such as photographs, a detailed technical description or the client’s name — we always obtain prior written permission.
3.5 Non-disclosure agreements
We can sign a separate non-disclosure agreement at any time, including before documentation is shared. Mention this request in your message.
4. Data processors
We use the service providers listed below under contractual safeguards appropriate to the processing.
bunny.net (BunnyWay d.o.o., Slovenia)
File storage and content delivery. Location of processing: European Union.
Infomaniak Network SA (Switzerland)
kDrive project workspace, used only for contracted projects. Switzerland is covered by an adequacy decision.
Hosting and email provider
Website hosting and forwarding enquiries. The provider is identified in the legal notice.
Umami
Anonymous audience measurement. It does not process personal data.
We do not sell or rent your data and do not transfer it to third parties for marketing purposes.
5. Your rights
Under the GDPR, you have the right to:
ask whether we process data concerning you and, if so, obtain access to it (Article 15);
request correction of inaccurate data (Article 16);
request erasure where the relevant conditions apply (Article 17);
request restriction of processing (Article 18);
receive your data in a structured, machine-readable format or have it transferred (data portability, Article 20);
object to processing based on legitimate interests (Article 21).
You can submit a request through the website’s contact form. We respond within one month at the latest. For complex or numerous requests, this period may be extended by two months; we will inform you within the first month.
An important limitation on erasure
If data has become part of contractual or accounting records, we may be unable to erase it fully because of statutory obligations. In that case, we restrict processing and retain the data solely to comply with the applicable retention requirement.
6. Data security
The website is available over an encrypted HTTPS connection. Uploaded files are stored in access-controlled storage. Access is limited to what is necessary and reviewed after projects close.
Absolute security of internet transmission cannot be technically guaranteed. For highly confidential documentation, we recommend agreeing on the transfer method in advance.
7. Remedies
If you believe your rights have been infringed during processing, please contact us first; most questions can be resolved fastest this way.
You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, PO Box 9; naih.hu), or bring proceedings before the court having jurisdiction at your residence or place of stay.
8. Changes to this notice
We update this notice when necessary. The current version is always available on this page with its effective date. If a material change affects an ongoing matter, we will also notify the relevant partners directly.