Legal documents

Service & terms

• Service Agreement — platform service terms, fees, liability limitation, termination
• Terms of Service — general rules for using the website and the service
• Imprint & Contact — operator details, contact information

Data protection

• Privacy Policy — processing purposes, legal bases, data subject rights (GDPR Art. 13–14)
• Cookie & Tracking Policy — types of cookies used and how they are managed
• AI Sub-processors — statement on automated decision-making (GDPR Art. 22)
• Incident Response & Data Subject Requests — DSAR guidance, notification obligations, deadlines
• Staff Data Processing Information — GDPR Art. 13/14 notice for salon staff: legal basis, retention, data subject rights

Compliance

• Sub-processor list — engaged providers, data transfer safeguards (SCC, DPF)
• Retention & deletion policy — per-data-category retention schedule, automated deletion
• Data Processing Agreement (DPA) — full GDPR Art. 28 data processing agreement for providers
• Security & privacy — infrastructure, encryption, access management, GDPR summary
• Licensing & open source — open-source components used in Bokko

Earlier versions (archive)

The public archive lists at most the two most recent previous versions per document, ordered deterministically by effective date and version. Older versions that were actually released and accepted remain preserved in an internal evidence archive, not in the landing repository and not in the public list. Only English archive files are listed here; for Hungarian archived versions, please refer to the Hungarian legal index.

• Cookie & Tracking Policy (EN) — 2026-06-22 (r3)
• Cookie & Tracking Policy (EN) — 2026-06-22 (r4)
• Data Processing Agreement (EN) — 2026-07-11 (r3)
• Data Processing Agreement (EN) — 2026-07-23 (r4)
• Imprint & Contact (EN) — 2026-04-23 (r2)
• Incident Response Notice (EN) — 2026-04-04 (v1)
• Privacy Policy (EN) — 2026-07-11 (r12)
• Privacy Policy (EN) — 2026-07-14 (r13)
• Retention & Deletion Policy (EN) — 2026-04-21 (v1)
• Retention & Deletion Policy (EN) — 2026-07-01 (r2)
• Service Agreement (EN) — 2026-06-01 (v1)
• Service Agreement (EN) — 2026-06-21 (r4)
• Sub-processor list (EN) — 2026-05-10 (v1)
• Sub-processor list (EN) — 2026-07-23 (r2)
• Terms of Service (EN) — 2026-05-21 (r2)
• Terms of Service (EN) — 2026-07-19 (r3)

Downloadable documents

The templates below are optional — acceptance of the DPA and the TOMs is by default granted through accepting the Service Agreement in the dashboard (click-wrap, GDPR Art. 28 contract). A bilaterally signed copy is only required on explicit request; in that case, please reach out at support@bokko.app.

• Data Processing Agreement (DPA) — printable template — fillable, can be saved as a signed PDF (optional)
• Technical and Organisational Measures (TOMs) — printable — for GDPR Art. 32, audit and enterprise onboarding purposes