Author's picture: Mosaic HeadspaMosaic Headspa3 days ago3 min read

Cookie Policy

Effective: from 1 October 2026 · Last modified: 27 September 2026

1. Who is the data controller?

Big in Japan Kft. (Mosaic Headspa)

  • Registered office: 1023 Budapest, Bécsi út 4. ground floor 1.
  • Company registration number: Cg. 01 09 432415 · Tax number: 32592784-2-41
  • Email: mosaicheadspa@gmail.com · Telephone: +36 20 247 4444
  • Website: www.mosaicheadspa.hu

2. What is a cookie?

A cookie is a small data file that the website stores in the visitor's browser. It enables the site to work (for example, by remembering your settings) and – if you consent – allows us to measure how you use the site and which of our advertisements brought visitors and bookings to us.

Similar technologies are also included: pixels, tags and the browser's local storage.

3. What cookies do we use?

We divide cookies into four categories. We do not ask for consent for strictly necessary cookies, because the site does not work without them. We use the other categories only if you have consented to this in the cookie bar (banner).

3.1. Strictly necessary cookies

These are required for the basic operation and security of the site (for example, login, security checks, remembering your cookie settings). Provider: Wix.com (the website's host).

  • XSRF-TOKEN · Purpose: Security (filtering out forged requests) · Duration: session
  • hs, svSession, bSession · Purpose: The visitor session and the operation of the website · Duration: session – 2 years
  • ssr-caching · Purpose: Caching the page · Duration: a few minutes
  • consent-policy · Purpose: Remembering your cookie settings · Duration: 12 months

3.2. Functional cookies

These are required for convenience features, for example displaying guest reviews (Trustindex).

3.3. Analytics (statistical) cookies

These show how visitors use the site (which pages they view, where they come from) so that we can improve it. We analyse the data in aggregate.

  • Google Analytics 4 · Provider: Google Ireland Ltd. · Cookie: _ga, _ga_* · Duration: 2 years
  • Server-side measurement (own subdomain: stape.mosaicheadspa.hu) · Provider: Stape (data processor) on behalf of Google Analytics · Cookie: FPID · Duration: 2 years

3.4. Marketing (advertising) cookies

With these, we measure which of our advertisements (Google, Facebook/Instagram, TikTok) resulted in a booking or a gift card purchase, and they allow us to show you relevant advertisements.

  • Google Ads conversion tracking and remarketing · Provider: Google Ireland Ltd. · Cookie: _gcl_au, _gcl_aw, _gcl_gs · Duration: 90 days
  • Meta (Facebook / Instagram) pixel · Provider: Meta Platforms Ireland Ltd. · Cookie: _fbp, _fbc · Duration: 90 days
  • TikTok pixel · Provider: TikTok Technology Ltd. · Cookie: _ttp, _tt_enable_cookie · Duration: 13 months
  • Server-side forwarding (stape.mosaicheadspa.hu) · Provider: Stape (data processor) · Cookie: first-party cookies for the above services · Duration: up to 2 years
  • Retention of advertising clicks · Provider: Mosaic Head Spa (first party; set by our server, HttpOnly) · Cookie: mh_lpt · Duration: 30 days · Purpose: retaining the data of the most recent advertising click (platform, campaign tag, click identifier) so that the booking can be linked to the advertisement · Created only with marketing consent; deleted when consent is withdrawn using the “Cookie settings” button
  • Visitor identifier for the touchpoint log · Provider: Mosaic Head Spa (first party; set by our server, HttpOnly) · Cookie: mh_vid · Duration: 30 days (renewed with use) · Purpose: linking several advertising and website touchpoints of a visitor, so that we can see each month which advertisement helped bring about the booking · A random value that contains no personal data; the server stores only its one-way encrypted (hashed) version and does not store the advertising click identifier · Created only with marketing consent; deleted when consent is withdrawn using the “Cookie settings” button

In the case of a booking or gift card purchase – exclusively with your consent – we forward the fact and value of the booking or purchase, as well as your email address and telephone number in one-way encrypted (hashed) form, to Google, Meta and TikTok, so that the advertisement and the booking can be linked. The original email address or telephone number cannot be restored from the encoded data.

4. External sites you move on to

  • Booking: takes place in the Salonic booking system (*.salonic.hu). Salonic's own cookie and data processing rules also apply there.
  • Gift card payment: takes place on the Stripe payment page (buy.stripe.com). Stripe's own cookie and data processing rules also apply there.

The tracking codes of mosaicheadspa.hu may also run on these pages, under the conditions set out above (with consent).

5. Legal basis

  • Strictly necessary cookies: Section 155 (4) of Act C of 2003 on Electronic Communications, and our legitimate interest (Article 6 (1) (f) GDPR).
  • Functional, analytics and marketing cookies: your consent (Article 6 (1) (a) GDPR). Consent is voluntary; if you do not give it, the site can be used in the same way.

6. Data transfers outside the EEA

The parent companies of Google, Meta and TikTok may also process data outside the European Economic Area (for example, in the United States). In such cases, adequate protection is ensured by the standard contractual clauses adopted by the European Commission or by the EU–US Data Privacy Framework.

7. How can you change your settings?

  • You can change or withdraw your consent at any time using the “Cookie settings” button at the bottom of the page. Withdrawal does not affect the lawfulness of prior data processing.
  • You can also delete or block cookies in your browser settings.

8. Your rights and remedies

You may request access to, rectification or erasure of the data relating to you, or restriction of their processing, and you may object to the processing. You can send your request to mosaicheadspa@gmail.com.

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11., www.naih.hu, ugyfelszolgalat@naih.hu), or apply to a court.

You can read more about the processing of personal data in the General Terms and Conditions data protection section.