Privacy Policy

Version dated 15 September 2026

This Privacy Policy describes how personal data of users of the LE RITUEL ROUGE website, available at https://lerituelrouge.com/, is collected, processed, stored and protected.

This Policy has been prepared in accordance with the laws of the Russian Federation governing personal data, including Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.

1. General provisions

The personal data operator is:

This Policy applies to personal data provided by users when visiting the website, purchasing tickets, completing forms, contacting the Organiser or using other functions of the website.

Personal data is processed only where there is a lawful basis for such processing and only to the extent necessary for the relevant purpose.

2. Personal data we may process

Depending on the functions used on the website, the following information may be processed:

• first name and surname of the guest;
• telephone number;
• e-mail address;
• information relating to an order and purchased ticket;
• selected seat and ticket category;
• order number and electronic ticket identifier;
• electronic ticket QR code;
• payment status information;
• the content of communications sent to us;
• IP address;
• browser and device information;
• operating system information;
• cookies and similar technical identifiers;
• referral source;
• information about pages viewed and actions performed on the website.

3. Purposes of processing

3.1. Ticket purchase and fulfilment of the order

Personal data may be used for:

• processing a ticket order;
• reserving the selected seat;
• identifying the order;
• confirming payment;
• generating an electronic ticket;
• generating and validating a QR code;
• providing admission to the event;
• sending information directly related to the purchased ticket or event attendance.

3.2. Communication with guests

Contact information may be used to respond to questions concerning tickets, seat selection, payment, attendance, refunds and other organisational matters.

3.3. Website operation and security

Technical information may be processed to ensure the proper functioning of the website and ticketing system, diagnose technical errors, protect the website and prevent unlawful or fraudulent use.

3.4. Analytics

The website may use web analytics services, including Yandex Metrica, to understand website traffic, referral sources, interaction with website pages and the effectiveness of advertising campaigns.

Cookies, technical identifiers and information about user interactions with the website may be processed for these purposes.

3.5. Marketing communications

Promotional messages, information about future events and other marketing communications are sent only where the required consent has been obtained from the user.

A user may withdraw consent to such communications at any time.

4. Legal grounds for processing

Depending on the circumstances, personal data may be processed on one or more of the following legal grounds:

• entering into and performing a contract to which the user is a party;
• actions taken by the user in connection with purchasing a ticket and entering into a contract;
• the user’s consent where such consent is required;
• compliance with obligations imposed on the Operator by the laws of the Russian Federation;
• other legal grounds provided by applicable legislation.

5. Ticket purchase and payment

When purchasing a ticket, the user selects an available seat and provides the information required to process the order.

Payment is made through the bank acquiring service or payment service provider connected to the website.

Bank card details are entered directly by the user into the secure payment interface provided by the relevant bank or payment service provider.

The LE RITUEL ROUGE website is not designed to independently store full bank card details.

After successful payment is confirmed, the ticketing system may generate an electronic ticket and a unique QR code used to verify the guest’s right to attend the event.

6. Disclosure to third parties

The Operator does not sell users’ personal data.

Certain information may be shared with organisations and service providers where this is necessary to operate the website or fulfil a ticket order, including:

• banks and payment service providers;
• e-mail and communications service providers;
• hosting providers;
• technical contractors supporting the website and ticketing infrastructure;
• web analytics providers;
• public authorities where disclosure is required by Russian law.

Only the amount of information reasonably necessary for the relevant purpose is disclosed.

7. Storage of personal data

Personal data is retained only for as long as is necessary for the purposes for which it was processed, unless a longer period is required by Russian law or contract.

When the purpose of processing has been achieved, personal data is deleted or destroyed unless another lawful basis exists for its continued storage or processing.

Where personal data of citizens of the Russian Federation is collected through the internet, the Operator complies with the applicable requirements of Russian legislation regarding the processing and storage of such data.

8. Protection of personal data

The Operator takes reasonable organisational and technical measures to protect personal data against unlawful or accidental:

• access;
• destruction;
• alteration;
• blocking;
• copying;
• disclosure;
• distribution;
• other unlawful actions.

Access to personal data is limited to the extent necessary to perform the relevant functions.

9. Cookies

The website may use cookies and similar technologies.

Cookies may be used for:

• the operation of website functionality;
• the operation of the ticketing system;
• saving technical preferences;
• website traffic analysis;
• measuring advertising effectiveness.

Users may restrict or delete cookies through their browser settings. Certain website functions may not operate correctly where cookies are disabled.

10. Your rights

Subject to applicable Russian law, users may:

• request information about the processing of their personal data;
• request correction of inaccurate or outdated information;
• request blocking or deletion of personal data where there is a lawful basis to do so;
• withdraw previously provided consent;
• unsubscribe from marketing communications;
• contact the Operator regarding the processing of personal data;
• exercise other rights provided by the laws of the Russian Federation.

Requests may be sent to:

info@malakogroup.com

The request should contain sufficient information to allow the Operator to identify the personal data to which the request relates.

11. Withdrawal of consent

Where processing is based on the user’s consent, such consent may be withdrawn by contacting the Operator.

Following receipt of the withdrawal, the Operator will stop processing the relevant personal data where required by law, unless another lawful basis exists for continued processing.

12. Personal data of minors

LE RITUEL ROUGE events are intended for guests aged 18 and over. The website is not intended for the independent submission of personal data by children without the involvement of their legal representatives.

Where an event is subject to an age restriction, the relevant information will be stated on the event page or in the attendance rules.

13. Changes to this Privacy Policy

The Operator may update this Privacy Policy where legislation, website functionality, payment methods or the services used by the project change.

The current version of this Privacy Policy is published on this page.