Legal information
Privacy
Updated 3 October 2026
What data we process, why and for how long. We ask only for what we need to prepare your proposal.
Data controller
- Controller
- Hair Salons Concept S.L.
- Tax ID (CIF)
- B67598847
- Registered address
- C/ Sant Roc, 25 · 08503 Gurb (Barcelona)
- Contact
- info@mokkay.com
Hair Salons Concept S.L. presents its products under the trade name Mokkay. We have not appointed a data protection officer because we are not required to do so; any privacy query reaches us through the same contact channel.
Contact form
- Data
- Name, salon name, city, email, telephone (if you give it), number of stations, your message and the piece and finish selection you bring from the configurator.
- Purpose
- To handle your enquiry, prepare the proposal for your salon and communicate with you about it.
- Legal basis
- Your consent, which you give by ticking the box on the form (Art. 6.1.a GDPR). You may withdraw it whenever you wish, without affecting processing carried out before.
- Retention
- While we handle your enquiry and, if we do not end up working together, up to 12 months from the last contact. If you become a client, the periods required by commercial and tax law.
- Source of the data
- You provide the data yourself. If you enter another person's data, make sure you are entitled to do so.
The fields marked as required are needed for us to reply; without them we cannot handle the enquiry. We do not store your IP address with the enquiry. To curb mass submissions, we count it temporarily and in memory, without storing it.
We do not make automated decisions or build profiles with this data, and we do not use it to send you advertising.
Assistant
When available, the website's assistant answers questions about the pieces using the information in the data sheets. To do so, the text you type is sent to OpenAI, which acts as data processor: it generates the answer on our behalf and does not use these conversations to train its models. It may keep them for up to 30 days to detect abuse, under the terms of its business service.
- Purpose
- To answer what you ask.
- Legal basis
- Your own request when you write in the assistant (Art. 6.1.b GDPR, steps taken at your request).
- Retention
- We do not keep the conversations: we only count how much the assistant is used, without its content. To limit abuse, we count requests per connection using an irreversible digest of the IP address that is deleted automatically within a few hours.
Do not enter personal data in the assistant. If you would like us to prepare a proposal, use the contact form.
Recipients and processors
We do not share your data with third parties, except where required by law. To run the website we rely on providers that process data on our behalf, under a data processing agreement and solely to provide their service:
- Cloudflare: website hosting, the enquiries database, internal email notification, cookieless analytics and anti-bot checks.
- OpenAI: generating the assistant's answers, when it is available.
International transfers
Cloudflare and OpenAI are companies headquartered in the United States, so some data may be processed outside the European Economic Area. Those transfers rely on the EU–US Data Privacy Framework, to which both companies have signed up, and on the standard contractual clauses approved by the European Commission, as appropriate safeguards (Arts. 45 and 46 GDPR).
Your rights
You may ask us at any time, regarding your data, for:
- Access: to know whether we process it and obtain a copy.
- Rectification of any data that is inaccurate.
- Erasure when it is no longer needed or you withdraw your consent.
- Objection to and restriction of processing.
- Portability: to receive it in a structured format.
- Withdrawal of the consent you gave, without affecting processing carried out before.
Write to us at info@mokkay.com, marked “Data protection”, saying which right you wish to exercise. We will reply within one month. If we have doubts about your identity, we may ask you for what is needed to confirm it.
If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es, C/ Jorge Juan 6, 28001 Madrid).
Security and changes
The website only works over an encrypted connection (HTTPS), and access to enquiries is limited to the people at Hair Salons Concept S.L. who handle them. We apply technical and organisational measures appropriate to the risk.
If we change this policy you will see it here, with the update date at the top. If the change affects how we process data we already hold, we will tell you.