Privacy Policy

Data Controller

Controller Name:

Media Masters Management Kft.

Registered Seat:

Hungary, 7431 Juta, Rákóczi Ferenc utca 17.

Mailing Address:

Same as above.

Company Registration Number:

14-09-320596

Tax Number:

32457724-2-14

Email Address:

mediamastersmanagement at gmail.com

Scope

This Privacy Policy explains how personal data is processed when users access and use mmmdocs.

Personal Data Processed

mmmdocs processes account data submitted during registration and login, including username, password, and optionally email address. The application also processes files, folders, upload information, download information, and access-related data needed to provide the document workspace.

Authentication and Local Storage

After login, mmmdocs stores access and refresh tokens in the browser's local storage so the user can remain signed in. The application also stores the selected interface theme in local storage.

Purposes of Processing

Personal data is processed to create and manage user accounts, authenticate users, provide access to files and folders, support file upload and download workflows, maintain workspace permissions, and protect the security of the service.

Legal Bases

Account Management Legal Basis:

Performance of a contract or steps prior to entering into a contract, GDPR Article 6(1)(b).

Authentication Legal Basis:

Performance of a contract, GDPR Article 6(1)(b), and legitimate interest in protecting user accounts and the service, GDPR Article 6(1)(f).

File Storage Legal Basis:

Performance of a contract, GDPR Article 6(1)(b), because storing, organizing, previewing, and downloading files is the core service requested by the user.

Security Legal Basis:

Legitimate interest, GDPR Article 6(1)(f), in maintaining the security, integrity, and availability of the service.

Communication Legal Basis:

Performance of a contract, GDPR Article 6(1)(b), where communication is necessary to provide the service; legitimate interest, GDPR Article 6(1)(f), for service-related support and administrative messages.

Retention Periods

Account Data Retention:

Retained while the user account is active and afterwards only as long as necessary to meet legal obligations, resolve disputes, or handle valid deletion requests.

Uploaded Files Retention:

Retained until the files or their containing folders are deleted, the account is deleted, or a valid deletion request is handled.

Download Records Retention:

Retained while needed to show download history and manage the document workspace, unless deletion is required by law or a valid request.

Server Logs Retention:

Retained only as long as needed for security, troubleshooting, and service operation according to the relevant hosting and infrastructure provider settings.

Deleted Account Data Retention:

Deleted or anonymized after a valid deletion request, except where limited retention is necessary for legal obligations, security, or dispute resolution.

Recipients and Processors

Hosting Provider:

Vercel Inc.

Email Service Provider:

Not currently used by the application.

Analytics Provider:

Not currently used by the application.

Other Processors:

Cloudflare, Inc. for Cloudflare R2 object storage.

Third-Country Transfers:

Personal data may be transferred outside the European Economic Area through Vercel and Cloudflare. Such transfers are handled using the safeguards provided by the relevant service provider.

User Rights

Depending on applicable law, users may request access to their personal data, correction, deletion, restriction of processing, data portability, or object to certain processing activities.

Rights Request Contact:

mediamastersmanagement at gmail.com

Supervisory Authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Supervisory Authority Website:

https://www.naih.hu