1. General Provisions
This personal data processing policy is drawn up in accordance with the requirements of the Law of Ukraine dated 13.02.2022 No. 2297-VI "On Personal Data Protection" and defines the procedure for processing personal data and the measures taken to ensure its security.
1.1. The Operator considers the protection of human and civil rights and freedoms — especially the right to privacy and personal and family confidentiality — to be a key priority in the execution of its activities.
1.2. This Policy (hereinafter referred to as the “Policy”) applies to all information that the Operator may collect regarding visitors to the website https://citymirage.net.

2. Key Terms Used in This Policy
2.1. Automated processing of personal data — the use of computer technology to process personal data.
2.2. Blocking of personal data — a temporary halt in the processing of personal data (unless further processing is necessary for clarification).
2.3. Website — a collection of graphic, informational, software, and database elements available at https://citymirage.net.
2.4. Personal data information system — a system consisting of databases and IT tools used to process personal data.
2.5. Anonymization of personal data — actions that render it impossible to identify a user without additional information.
2.6. Personal data processing — any action or set of actions carried out on personal data with or without the use of automation tools, including collection, recording, structuring, storage, updating, retrieval, use, transfer (distribution, access), anonymization, blocking, deletion, or destruction.
2.7. Operator — a legal entity, individual, or authority that determines the purpose and method of personal data processing and performs it independently or with others.
2.8. Personal data — any information that directly or indirectly relates to a specific or identifiable user of https://citymirage.net.
2.9. User — any visitor to the website https://citymirage.net.
2.10. Provision of personal data — an action intended to disclose data to a specific individual or group.
2.11. Distribution of personal data — making personal data available to an unspecified audience, including by publication or online access.
2.12. Cross-border transfer of personal data — transferring personal data to another country, foreign authority, or legal/individual entity.
2.13. Destruction of personal data — any action that leads to the irreversible elimination of personal data with no possibility of restoration.

3. Types of Personal Data Processed by the Operator
3.1. Full name (first, middle, last)
3.2. Phone number
3.3. Email address
3.4. The website also collects and processes anonymized data (including cookies) via web analytics services such as Yandex.Metrica, Google Analytics, and others.
3.5. All of the above is collectively referred to as Personal Data in this Policy.

4. Purpose of Personal Data Processing
4.1. The purpose of processing the User’s personal data is to initiate, perform, and terminate civil law agreements; provide access to services, information, and/or materials on the website https://citymirage.net; and clarify order details.
4.2. City Mirage is also authorized to send Users updates about products, services, promotions, and events. Users may opt out at any time by sending an email to privacy@citymirage.net with the subject “Unsubscribe from updates and special offers.”
4.3. Anonymized data collected via analytics tools is used to track User activity and improve the website’s content and usability.

5. Legal Grounds for Personal Data Processing
5.1. City Mirage processes personal data only when the User voluntarily submits it via forms on the website https://citymirage.net. By submitting their data, the User agrees to the terms of this Policy.
5.2. City Mirage processes anonymized data in cases where it is allowed by the browser settings (e.g., cookies, JavaScript enabled).

6. Procedure for Collecting, Storing, Transferring, and Processing Personal Data
Personal data protection is ensured by legal, technical, and organizational measures required by applicable data protection regulations.
6.1. City Mirage guarantees the safety of personal data and takes all necessary measures to prevent unauthorized access.
6.2. Personal data will not be shared with third parties unless required by applicable law.
6.3. If the User wishes to correct inaccurate personal data, they may do so by contacting privacy@citymirage.net with the subject “Update of Personal Data.”
6.4. Personal data may be processed for an indefinite period. The User may withdraw consent at any time by emailing privacy@citymirage.net with the subject “Withdrawal of Consent to Personal Data Processing.”

7. Cross-Border Transfer of Personal Data
7.1. Before transferring data to another country, City Mirage ensures that the destination country provides sufficient legal protection for personal data subjects.
7.2. If such protection is not guaranteed, cross-border transfers will only be carried out with the User’s written consent or when required to fulfill a contract.

8. Final Provisions
8.1. Users may contact City Mirage with any questions about personal data processing by emailing privacy@citymirage.net.
8.2. Any updates to this Policy will be published in this document. This Policy remains valid until replaced by a new version.
8.3. The current version of the Policy is always available at: https://citymirage.net/privacy