OPERATOR DETAILS
Operator: Limited Liability Company «Mirage» (LLC «Mirage»)
TIN (INN) 1655386300 · PSRN (OGRN) 1171690042006 · KPP 165501001
Registered address: 5 Moskovskaya St., Kazan, Republic of Tatarstan, 420111, Russia
Contact: info@mirage-hotel.ru
1.1. This Privacy Policy (the “Policy”) sets out how personal data of individuals (“Data Subjects”) using the website https://mirage-hotel.ru (the “Website”) is processed and protected, and applies to all information the Operator may obtain about a Data Subject while they use the Website.
1.2. The personal data operator is Limited Liability Company «Mirage» (LLC «Mirage»), TIN 1655386300, PSRN 1171690042006, address: 5 Moskovskaya St., Kazan, Republic of Tatarstan, 420111 (the “Operator”).
1.3. The Policy has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and other Russian legislation on personal data.
1.4. The Policy applies to all language versions of the Website (Russian, English and Chinese) and to its subdomains, unless a separate document is published there.
2.1. Personal data — any information relating to a directly or indirectly identified or identifiable individual (the Data Subject).
2.2. Processing of personal data — any operation or set of operations performed on personal data (collection, recording, storage, use, transfer, deletion, etc.).
2.3. Operator — the entity organising and carrying out the processing of personal data (specified in clause 1.2).
2.4. Cookie — a small piece of data stored by the browser on the Data Subject’s device.
3.1. The Operator processes personal data of the following categories of Data Subjects: visitors to the Website; persons who have submitted an enquiry through the Website forms; job applicants; persons making a reservation or a venue hire request.
3.2. Through the feedback form (“Contacts” section): name, telephone number, e-mail address, message text.
3.3. Through the review form (“Leave a review” section): name, telephone number, review text, rating, and a photograph if the Data Subject has attached one.
3.4. Through the job application form: name, telephone number and the CV file, which may contain other personal data provided by the Data Subject.
3.5. Through the venue hire request form: the data provided by the Data Subject in the request (name, contact details, event details).
3.6. When booking through the online reservation module: the data required for the reservation (name, contact details, dates, order details).
3.7. When visiting the Website the following is processed automatically: IP address, cookie data, browser and device information, date and time of access, information about actions on the Website (via web analytics services).
3.8. The Operator does not process special categories of personal data (racial or ethnic origin, health, sex life, etc.) or biometric personal data.
3.9. When using the assistant chat built into the online reservation module, the information the Data Subject provides in the conversation is processed: the text of the messages and the data stated in them (for example, name, intended stay dates, contact details).
3.10. The Website forms are not intended to be completed by minors on their own. Where a reservation states information about minors accommodated together with the Customer (name, age), it is processed solely to arrange the accommodation; consent to such processing is given by a parent or other legal representative.
4.1. Handling enquiries received through the Website forms and replying to the Data Subject.
4.2. Reviewing job applications and contacting applicants.
4.3. Arranging and performing reservations and venue hire requests.
4.4. Improving the Website and analysing traffic and usability (web analytics in anonymised or aggregated form).
4.5. Ensuring the operation and security of the Website and preventing fraud.
5.1. Consent of the Data Subject to the processing of their personal data (clause 1, part 1, Article 6 of Federal Law No. 152-FZ) — when completing and submitting the Website forms and when accepting the cookie terms.
5.2. Performance of a contract to which the Data Subject is a party, or steps taken to conclude it (clause 5, part 1, Article 6 of Federal Law No. 152-FZ) — for reservations and requests.
5.3. Exercise of the rights and legitimate interests of the Operator (clause 7, part 1, Article 6 of Federal Law No. 152-FZ) — to ensure the operation and security of the Website, to an extent that does not infringe the rights of Data Subjects.
6.1. Processing is carried out with the consent of the Data Subject unless otherwise provided by law, both with and without the use of automation.
6.2. The Operator does not take decisions producing legal effects for the Data Subject solely on the basis of automated processing.
6.3. Processing and retention periods:
6.3.1. For individuals who have submitted enquiries, cooperation requests or job applications through the Website or by e-mail, processing continues until the interaction on the matter ends, and in any event no later than 30 (thirty) days after the enquiry has been considered and decided upon. Destruction is carried out in accordance with part 4, Article 21 of Federal Law No. 152-FZ.
6.3.2. If a contract is concluded as a result of the enquiry, further processing continues for the entire term of that contract.
6.3.3. After the contractual relationship ends, personal data (including data on the counterparty’s representatives) is kept for 5 (five) years from the date of termination in order to comply with tax and accounting requirements (Article 23 of the Tax Code, Article 29 of Federal Law No. 402-FZ) and for the possible judicial protection of the Operator’s interests within the limitation period (Article 196 of the Civil Code). After that period the data is destroyed or anonymised.
6.3.4. Web analytics data is processed according to the settings of the analytics services used and is stored in anonymised form.
6.4. Access to personal data is granted to authorised employees of the Operator who are obliged to maintain confidentiality.
7.1. The Operator uses third-party services to which personal data of Data Subjects may be transferred to the extent necessary:
— the Yandex.Metrica web analytics service (Yandex LLC, Russian Federation) — data on visits and actions on the Website, including session recording (Webvisor);
— the Callibri feedback service (Russian Federation);
— the Yandex.Maps map service (Yandex LLC, Russian Federation);
— the TravelLine online reservation module (Russian Federation) — reservation data;
— the assistant chat of the TravelLine online reservation module (Russian Federation) — the text of the Data Subject’s messages in the chat;
— the MAX messenger — reviews submitted through the Website form are forwarded to it (name, telephone number, photograph);
— the loyalty programme service (card.teyca.ru, Russian Federation) — the Data Subject follows the link to it on their own initiative; registration and data processing within that service are carried out by its own operator.
7.2. The Website is hosted within the territory of the Russian Federation.
7.3. The Operator ensures that the recording, systematisation, accumulation, storage, updating and retrieval of personal data of citizens of the Russian Federation are carried out using databases located within the territory of the Russian Federation (part 5, Article 18 of Federal Law No. 152-FZ).
7.4. The Operator does not carry out cross-border transfer of personal data. All the services listed in clause 7.1 are located within the territory of the Russian Federation.
8.1. The Website uses cookies to operate, as well as web analytics services. Strictly necessary cookies (including the session identifier) are used for the functioning of the Website.
8.2. Analytics cookies and web analytics services are connected only after the Data Subject’s consent has been obtained through the information banner on the Website. Before consent is given, such services are not loaded.
8.3. The Data Subject may refuse analytics cookies by pressing the corresponding button in the banner, change a previously made choice at any time via the “Cookie settings” link at the bottom of every page of the Website, and also change the cookie settings in their browser.
8.4. Where analytics cookies are refused, the Website’s previously set analytics cookies are deleted and the corresponding services are not loaded.
9.1. The Data Subject has the right to: obtain information about the processing of their personal data; require that data be updated, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose; withdraw consent to processing; appeal against the Operator’s actions to the competent authority (Roskomnadzor) or to a court.
9.2. To exercise these rights the Data Subject sends a request to the Operator at info@mirage-hotel.ru or to the postal address stated in clause 1.2.
9.3. The Operator considers the request within the time limits set by Federal Law No. 152-FZ.
10.1. The Data Subject may withdraw consent to the processing of personal data at any time by sending a written request to the Operator at info@mirage-hotel.ru or to the postal address stated in clause 1.2.
10.2. Upon receipt of the withdrawal the Operator ceases processing and destroys the personal data within the period established by law, except where processing may continue on other lawful grounds.
10.3. Consent to the use of analytics cookies is withdrawn directly on the Website — via the “Cookie settings” link at the bottom of any page; no separate request is required.
11.1. The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful access, destruction, alteration, copying and dissemination.
11.2. Access to processing is restricted to authorised persons; data is transmitted over the network using a secure connection (HTTPS).
12.1. This Policy takes effect from the moment it is published on the Website and remains in force indefinitely until replaced by a new version.
12.2. The Operator may amend the Policy. When amendments are made, the Operator publishes the current version on the Website stating the date of update. Material changes affecting the rights of Data Subjects are additionally communicated.
12.3. The current version of the Policy is permanently available on the Website at https://mirage-hotel.ru/rules/privacy-policy.php.
12.4. Consent to the processing of personal data is executed as a separate document available at https://mirage-hotel.ru/en/rules/consent.php.
12.5. Date of the latest version: 29 September 2026.
This is a translation of the Russian original. In case of any discrepancy, the Russian version at https://mirage-hotel.ru/rules/privacy-policy.php prevails.