Privacy Policy

1. General provisions

1.1. This Privacy Policy has been prepared in accordance with Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006, and other applicable regulations of the Russian Federation in the field of personal data processing and protection.

1.2. This Policy applies to all information that OOO “Sochinyay Mechty” may receive about users of the website https://thedreamerscafe.ru/en/, hereinafter referred to as the “Website”.

1.3. By using the Website, filling in booking, feedback or order forms, sending messages to the Operator by email, phone, messengers or other communication channels, the user provides personal data for processing for the purposes specified in this Policy.

1.4. This Policy does not replace a separate consent to the processing of personal data. Where such consent is required by law, it is provided separately from other documents, user agreements, offers and confirmations.

2. Personal Data Operator

3. Personal data that may be processed

3.1. The Operator processes only personal data that is necessary for the stated purposes of processing and that is provided by the user voluntarily or automatically transmitted when using the Website.

3.2. The Operator does not request special categories of personal data related to race or nationality, political views, religious or philosophical beliefs, health, private life, nor does it request biometric personal data.

3.3. If the user voluntarily provides excessive information in a message, the Operator processes it only to the extent necessary to review the request or deletes it if there is no need to process it.

4. Purposes of personal data processing

4.1. The Operator processes users’ personal data for the following purposes:

• processing requests, messages and feedback from users;
• booking tables and contacting users regarding their bookings;
• processing orders, inquiries and customer feedback;
• providing information about the cafe, menu, events, promotions and services;
• preparing, concluding and performing contracts, agreements and other documents, where applicable;
• confirming payments, processing refunds, accounting and other mandatory documents, where applicable;
• sending informational and advertising messages, subject to the user’s separate consent where required;
• improving the quality, usability and performance of the Website;
• ensuring Website security and preventing technical failures or misuse;
• complying with obligations established by the laws of the Russian Federation.

4.2. Personal data is not processed for purposes incompatible with the purposes for which it was collected.

5. Legal grounds for processing

5.1. The legal grounds for processing personal data include:

• the user’s consent to personal data processing;
• the need to process data in order to conclude or perform a contract with the user;
• the Operator’s compliance with obligations established by Russian law;
• the Operator’s legitimate interests, provided that the rights and freedoms of the user are not violated.

5.2. The user’s consent to personal data processing must be freely given, specific, informed, conscious and unambiguous.

5.3. For Website forms, consent may be expressed by ticking a separate checkbox next to the consent text, submitting a form after reviewing the relevant documents, or by other actions that confirm the fact of consent.

5.4. Consent to receive advertising, informational or marketing messages is obtained separately from consent required for processing a request, booking or contract performance.

6. Cookies, analytics and technical data

6.1. The Website may use cookies and similar technologies to ensure proper operation of pages, save user preferences, analyze traffic and improve the quality of the Website.

6.2. Cookies may be technical, analytical or marketing cookies. Technical cookies are necessary for the proper operation of the Website. Analytical and marketing cookies are used only where applicable and permitted by law.

6.3. The Website may use Yandex Metrica and other web analytics services that allow the Operator to analyze user actions on the Website in an anonymized or pseudonymized form.

6.4. The user may restrict or disable cookies in the browser settings. If cookies are disabled, some Website functions may not operate correctly.

6.5. On the first visit to the Website, the user may be shown a cookie notice with the option to accept or decline optional cookies.

7. Transfer of personal data to third parties

7.1. The Operator does not sell users’ personal data and does not transfer it to third parties for independent use for purposes unrelated to this Policy.

7.2. Personal data may be transferred to third parties only where necessary to achieve the purposes of processing, perform a contract, operate the Website, provide services to the user, comply with legal requirements or where the user has given separate consent.

7.3. Such third parties may include:

• hosting providers and Website technical support providers;
• email, telephony, messenger and CRM services;
• payment services, banks and other organizations involved in payment processing, where applicable;
• accounting, legal and other contractors, where necessary to fulfill the Operator’s obligations;
• web analytics and statistics services;
• government authorities in cases established by the laws of the Russian Federation.

7.4. Persons entrusted with processing personal data are required to ensure confidentiality and security of personal data.

8. Storage, localization and protection of personal data

8.1. The Operator stores personal data no longer than required by the purposes of processing, unless a longer storage period is established by Russian law, contract or user consent.

8.2. When collecting personal data of citizens of the Russian Federation, the Operator ensures recording, systematization, accumulation, storage, clarification and retrieval of such data using databases located in the Russian Federation, where required by applicable law.

8.3. The Operator takes necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution and other unlawful actions.

8.4. Such protective measures may include:

• restricting access to personal data;
• using a secure HTTPS connection;
• controlling access to the Website administration areas;
• backing up and updating software;
• using security tools against unauthorized access;
• monitoring actions of persons who have access to personal data.

8.5. Personal data is deleted or anonymized when the purposes of processing are achieved, when consent is withdrawn, when unlawful processing is identified, or upon occurrence of other grounds established by Russian law.

9. User rights

9.1. The user has the right to:

• receive information about the processing of their personal data;
• request clarification, blocking or deletion of personal data if it is incomplete, outdated, inaccurate, unlawfully obtained or no longer necessary for the stated purpose of processing;
• withdraw consent to personal data processing;
• request termination of personal data processing;
• appeal the Operator’s actions or omissions to the authorized body for the protection of personal data subjects’ rights or to a court;
• exercise other rights provided by the laws of the Russian Federation.

9.2. To exercise their rights, the user may send a request to: thedreamerscafe@gmail.com.

9.3. The request should preferably include the user’s name, contact details, the nature of the request and information that allows the Operator to identify the user as a personal data subject.

9.4. The Operator reviews user requests and provides responses within the time limits established by Russian law.

10. Final provisions

10.1. This Policy remains in effect until replaced by a new version.

10.2. The Operator may update this Policy if legislation changes, if the list of services used changes, or if the procedure for processing personal data or the structure of the Website changes.

10.3. A new version of the Policy comes into force from the moment it is published on the Website, unless otherwise stated in the new version.

10.4. The current version of the Policy is publicly available at: https://thedreamerscafe.ru/en/privacy/.