Privacy

How we handle the data you give us in the quote form, the newsletter and during our work together.

Effective from 19 October 2026

The controller

Name: 888Studios Kft.
Registered seat: 2330 Dunaharaszti, Rákóczi Ferenc utca 51., Hungary
Company registration number: Cg. 13-09-245507
E-mail: függőben

We are not required to appoint a data protection officer; for any privacy question, contact us at the details above. This notice follows the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 (Infotv.). The Hungarian version is at Adatvédelem.

In short

We only process what you give us, and only for the purpose you gave it for. The site uses no cookies, analytics or advertising trackers. We send a newsletter only to those who signed up and confirmed it with the link we e-mailed them. We never sell data and never pass it on for marketing. We make no automated decisions and do no profiling.

What, why, on what basis and for how long

Quote requests

Data: Name, e-mail address, company (if given), the areas you chose, your budget, your message, and the page and campaign link (UTM parameters) you came from.
Purpose: To answer your request and send you a quote. We send a confirmation to the address you gave.
Legal basis: If you ask on your own behalf (also as a sole trader): steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). If you ask on behalf of a company: our legitimate interest in answering the company’s request (Article 6(1)(f)).
How long: One year from our last exchange if no contract follows; otherwise together with the contract’s data (below).

Data: Your e-mail address, when you signed up and confirmed, and whether you have unsubscribed. We do not track whether a newsletter is opened or which links in it are clicked; the links to the blog only show that the visit came from the newsletter (a UTM parameter), without your name.
Purpose: Sending the newsletter about our new articles (one e-mail per article), and being able to show that the signup came from you.
Legal basis: Your consent (GDPR Article 6(1)(a); Section 6 of Hungarian Act XLVIII of 2008 on commercial advertising). Consent is given in two steps: we send a confirmation e-mail to the address entered in the footer, and only its button puts the address on the list. You may withdraw it at any time, with one click at the foot of every e-mail or by writing to us; withdrawal does not affect the lawfulness of earlier sends.
How long: Until you unsubscribe. If you never press the confirmation button, the address is not added to the list and stays only briefly in the mail service’s delivery log; the abuse limit holds it in memory for at most an hour. After you unsubscribe we keep the address marked as blocked, so that you receive no further newsletters; on request we delete that too.

Quote, contract and correspondence

Data: The names, e-mail addresses, phone numbers and roles of the contracting party and its contacts, our correspondence and the project’s documents.
Purpose: Concluding and performing the contract, and any claims arising from it.
Legal basis: Performance of the contract where you are the party (Article 6(1)(b)); for a company’s contacts, our legitimate interest in keeping in touch (Article 6(1)(f)).
How long: Five years after the contract ends, the general limitation period under the Hungarian Civil Code (Section 6:22).

Invoicing

Data: What an invoice must show: name, address, tax number, the details of the service.
Legal basis: Legal obligation (Article 6(1)(c); Hungarian Act CXXVII of 2007 on VAT and Act C of 2000 on Accounting).
How long: Eight years (Accounting Act, Section 169).

Client portal

Data: Name, e-mail address, company and phone (if given), when you registered and accepted the terms, our messages, the consultations you booked (time, topic, note, call link, any cancellation and its reason), and technical sign-in data (IP address, time, browser). We never see your password: only an irreversible hash of it is stored.
Legal basis: Performance of the portal’s terms of use (Article 6(1)(b)); logging sign-ins, our legitimate interest in protecting accounts (Article 6(1)(f)).
How long: Until the account is deleted, which you may ask for at any time. Messages tied to a contract are kept with the contract’s data.

Technical logs and security

Data: IP address, time of the request, page requested, browser identifier and referring page.
Purpose: Running the site securely, finding errors and filtering abuse (for example automated mass form submissions).
Legal basis: Our legitimate interest in protecting the site and your data (Article 6(1)(f)).
How long: Briefly in our hosting and database providers’ systems, at most 30 days. The form’s abuse limit holds an IP address in memory only, for at most ten minutes.

Where we rely on legitimate interest, you may ask for the outcome of our balancing test and object to the processing.

Do you have to give it

No. Without your name and e-mail address, though, we cannot reply, and invoicing data is required by law. Our services are not offered to anyone under 16.

Who can access it

Within our company, only those whose work requires it. The following providers process data as our processors, under data processing agreements, and only on our instructions:

Vercel Inc.

Address: 440 N Barranca Avenue #4133, Covina, CA 91723, United States
Role: Hosting: serves the website, passes the quote request on to the mail service, and keeps technical logs (IP address, time, page requested).
Location, transfers: USA; certified under the EU–U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision.

Plus Five Five, Inc. (Resend)

Address: United States
Role: E-mail delivery: sends us the quote request and you its confirmation, and the client portal’s e-mails; it holds the newsletter’s subscriber list and sends the newsletters.
Location, transfers: USA; certified under the EU–U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision.

Supabase Pte. Ltd.

Address: 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513
Role: The client portal’s accounts and database (details, messages, bookings).
Location, transfers: The data is stored in London (United Kingdom), covered by the European Commission’s adequacy decision; any access from outside the EEA is covered by the Commission’s standard contractual clauses (GDPR Article 46).

Google Ireland Limited (Gmail)

Address: Gordon House, Barrow Street, Dublin 4, Ireland
Role: The mailbox where quote requests and portal notifications arrive, and from which we reply.
Location, transfers: European Union; any transfer outside the EEA under the provider’s safeguards based on adequacy decisions and standard contractual clauses.

Our accountant handles invoices and accounting records. We disclose data to authorities or courts only where the law requires it.

Security

The site and every connection are encrypted (HTTPS). In the client portal’s database, access rules on every row let each client reach only their own data. Passwords are stored only as irreversible hashes, and access is limited to those who need it.

Your rights

Access: you may ask what data we hold about you and receive a copy (GDPR Article 15).
Rectification: you may have inaccurate data corrected (Article 16).
Erasure: you may have your data erased where it is no longer needed or has no legal basis (Article 17).
Restriction: you may ask us only to store your data while a dispute is resolved (Article 18).
Portability: you may receive the data processed under a contract or your consent in a machine-readable format (Article 20).
Withdrawing consent: you may withdraw your consent to the newsletter at any time, with one click at the foot of every e-mail (Article 7(3)).
Objection: you may object at any time to processing based on legitimate interest (Article 21).

Send your request by e-mail or post. We reply without undue delay and within one month at the latest; where justified we may extend this by two months, and will tell you so in advance. It is free of charge.

Complaints

If you believe we have infringed your rights, please write to us first so we can put it right. You may also lodge a complaint with the supervisory authority of your EU country of residence or work, or with ours:

Name: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
E-mail: ugyfelszolgalat@naih.hu
Website: naih.hu

You may also go to court; in Hungary, before the regional court of your place of residence or stay (Infotv. Section 23).

Cookies

The site sets no cookies. The only thing kept in your browser is the client portal’s session while you are signed in (local storage), which is strictly necessary for the sign-in you asked for and is removed when you sign out. Details in Hungarian: Sütik.

Changes

If our processing changes, we update this notice with the date it takes effect.