This translation is provided for information only. The Russian version of this document is legally binding.
Version of 14 October 2026.
1. General provisions
1.1. This Personal Data Processing Policy (hereinafter, the “Policy”) has been drawn up in accordance with Federal Law No. 152-FZ “On Personal Data” of 27.07.2006 (hereinafter, the “Personal Data Law”) and sets out the procedure for processing personal data and the measures to ensure its security taken by Mistral Limited Liability Company (hereinafter, the “Operator”).
1.2. The Policy applies to all personal data that the Operator receives from visitors to the website https://regattafortuna.com/ (hereinafter, the “Website”). The Policy does not apply to third-party websites that may be accessed via links from the Website.
1.3. The Policy is a publicly available document and is published on the Website at https://regattafortuna.com/privacy-policy/.
2. Information about the operator
2.1. Mistral Limited Liability Company (Mistral LLC), INN (Taxpayer ID) 7801522273, KPP 781301001, OGRN 1107847193255.
2.2. Address: office 507, premises 6-N, letter A, 15 Kamennoostrovsky Prospekt, St. Petersburg, 197101.
2.3. Email address for enquiries regarding personal data: info@regattafortuna.com, telephone: +7 (985) 210-55-08.
3. Key terms
3.1. Personal data means any information relating directly or indirectly to an identified or identifiable natural person (data subject).
3.2. Processing of personal data means any action or set of actions performed with personal data, with or without the use of automated means, including collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access), depersonalisation, blocking, deletion and destruction.
3.3. User means any person visiting the Website.
3.4. Other terms are used in the meaning established by the Personal Data Law.
4. Purposes, legal grounds and categories of data
4.1. Processing of requests and feedback: consultations on yacht tours, regattas, sailing courses, yacht charter and corporate events, call-backs, booking of places, answers to questions.
Data: name, telephone number, information from the request (the selected event, the Website page from which the request was submitted).
Legal ground: consent of the data subject (Clause 1, Part 1, Article 6 of the Personal Data Law).
4.2. Conclusion and performance of contracts: placing and fulfilling orders in the Website shop, communication regarding orders, delivery; conclusion and performance of contracts for participation in tours and events.
Data: name, telephone number, email address, order contents, delivery address (provided by the User when confirming the order).
Legal ground: conclusion and performance of a contract to which the data subject is a party (Clause 5, Part 1, Article 6 of the Personal Data Law), and consent of the data subject.
4.3. Ensuring the operation of the Website and analytics: correct operation of the Website and its functions, collection of aggregated visit statistics to improve the Website.
Data: cookies, IP address, information about the browser and device, addresses of pages visited, date and time of the visit, referral source.
Legal ground: consent of the data subject. The list of cookies is provided on the “Cookies” page.
4.4. The Operator does not process special categories of personal data (concerning health, race or ethnic origin, political opinions, religious beliefs or intimate life) or biometric personal data.
4.5. The Operator does not send advertising mailings on the basis of data obtained through the Website forms and does not take decisions on the basis of such data that produce legal consequences solely by automated means.
4.6. The Website is not intended for persons under the age of 18. The Operator does not knowingly collect personal data of such persons through the Website.
5. Procedure and conditions of processing
5.1. Processing is carried out with and without the use of automated means. The list of actions: collection, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access) to the persons specified in Section 6, blocking, deletion, destruction.
5.2. Recording, systematisation, accumulation, storage, clarification and retrieval of personal data of citizens of the Russian Federation are carried out using databases located in the territory of the Russian Federation (Part 5, Article 18 of the Personal Data Law).
5.3. No cross-border transfer of personal data is carried out.
5.4. Personal data are stored for no longer than required by the purposes of processing: request data — for no more than 3 years from the date of the last contact; data related to the performance of contracts — for the periods established by the legislation of the Russian Federation (including tax and accounting legislation); cookie data — for the periods specified on the “Cookies” page.
5.5. Upon achievement of the purposes of processing, withdrawal of consent or detection of unlawful processing, personal data are destroyed or depersonalised within the time limits established by Article 21 of the Personal Data Law.
6. Transfer of personal data to third parties
6.1. The Operator does not sell or disclose personal data to third parties, except in cases provided for by the legislation of the Russian Federation and the cases listed in this section.
6.2. The Operator entrusts the processing of personal data to the following persons on the basis of contracts (Part 3, Article 6 of the Personal Data Law):
- YANDEX LLC (INN 7736207543, 16 Lva Tolstogo Street, Moscow, 119021) — the Yandex 360 email service, through which requests from the Website are delivered to the Operator; the Yandex Metrica web analytics service (including Webvisor) — if enabled on the Website; the Yandex Maps service (the map on the “Contacts” page receives the visitor’s IP address and browser information).
6.3. For the delivery of goods, the recipient’s data (name, telephone number, address) are transferred to the selected delivery service (Russian Post JSC, CDEK-Global LLC, Internet Solutions LLC (Ozon)) to the extent necessary for delivery.
6.4. Persons entrusted with processing are obliged to comply with the principles and rules of personal data processing, confidentiality and the protection measures provided for by the Personal Data Law.
7. Security measures
7.1. The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful actions, including:
- appointing a person responsible for organising the processing of personal data;
- restricting access to personal data to those employees who need it to perform their job duties;
- using a secure connection (HTTPS) when transmitting data from the Website, and information security tools;
- carrying out internal control over the compliance of personal data processing with the Personal Data Law and this Policy.
8. Rights of the data subject
8.1. The data subject has the right to:
- obtain information about the processing of their personal data (Part 7, Article 14 of the Personal Data Law);
- demand clarification, blocking or destruction of their personal data if the data are incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
- withdraw consent to the processing of personal data;
- appeal against the actions or omissions of the Operator to the authorised body for the protection of the rights of data subjects (Roskomnadzor) or in court.
8.2. A request or withdrawal of consent shall be sent to the email address info@regattafortuna.com or by post to the Operator’s address specified in Section 2. The request must contain the information provided for by Part 3, Article 14 of the Personal Data Law.
8.3. The Operator responds to a request within 10 working days of its receipt. This period may be extended by no more than 5 working days, with a reasoned notice sent to the data subject.
8.4. In the event of withdrawal of consent, the Operator ceases processing and destroys the personal data within 30 days of the date of receipt of the withdrawal, unless otherwise provided by contract or law (processing may continue where there are grounds specified in Clauses 2–11, Part 1, Article 6 of the Personal Data Law).
9. Cookies
9.1. The Website uses cookies and the browser’s local storage (localStorage). Their composition, purpose and retention periods are set out on the “Cookies” page. The User may disable cookies in the browser settings; in this case some functions of the Website (shopping cart, form submission) may not work correctly.
10. Final provisions
10.1. The Operator has the right to amend the Policy. The new version comes into force upon its publication on the Website, unless otherwise provided by the new version.
10.2. Matters not regulated by the Policy are resolved in accordance with the legislation of the Russian Federation.