Mirage Festival
Privacy Policy
Mirage Festival (hereinafter “the Festival”) is organized by Lesbright Co., Ltd. (Tax ID: 60454971, hereinafter “the Organizer”). We value your personal data protection and have established this Privacy Policy (hereinafter “this Policy”) in accordance with Taiwan’s Personal Data Protection Act (PDPA) and applicable regulations. Please read the following carefully to understand how we collect, process, and use your personal data.
1. Scope of
Application
This Policy applies to personal data you provide or that is collected when you interact with the Organizer through the following channels:
- Mirage Festival official website
- Official social media accounts (Instagram, Facebook, LINE, etc.)
- Online ticketing and merchandise platforms
- On-site services at the Festival
This Policy does not apply to third-party websites linked from our website, nor to individuals not authorized or managed by the Organizer.
2. Purposes of Collection
The Organizer collects your personal data pursuant to Article 19 of the PDPA for the following specific purposes:
- Contract Performance: Processing ticket orders, merchandise purchases, and returns/exchanges
- Customer Service: Responding to your inquiries, complaints, and feedback
- Event Operations: Entry verification, crowd management, emergency contact, and security
- Marketing: With your consent, sending event information, promotions, and newsletters
- Legal Compliance: Cooperating with regulatory authorities or judicial proceedings as required by law
- Statistical Analysis: Internal service improvement and experience optimization (de-identified)
Important: Consent for marketing communications is obtained separately from data collection necessary for contract performance. You may purchase tickets without subscribing to marketing communications.
3. Categories of Personal Data Collected
Depending on the context, we may collect the following categories:
Basic Identification Data
- Name, email address, phone number, mailing address
- Date of birth, gender (only when necessary, e.g., age verification)
Transaction Data
- Purchase records, order numbers, payment methods (the Organizer does not store complete credit card numbers)
- Delivery address, shipping information
Website Usage Data
- IP address, browser type, access time, browsing and click records
- Device information, operating system, referral source
On-Site Data
- Entry verification records (ticket barcode / QR Code scans)
- On-site activity participation records
- Emergency contact information (only if voluntarily provided)
4. Methods of Collection
We collect your personal data through the following methods:
- Directly from You: Ticket purchases, member registration, form submissions, customer service inquiries, surveys, or promotional events
- Automatic Collection: When you browse our website, servers automatically record your IP address, browser information, access time, and browsing records
- Third-Party Sources: Data obtained through partner ticketing platforms or publicly available information from social media platforms
5. Processing and Use of Personal Data
Your personal data will be processed and used within the scope of the aforementioned purposes. The period, region, recipients, and methods are as follows:
- Period: From the date of collection until the purpose ceases to exist, plus any legally required retention period (see Section 6)
- Region: Primarily within the Republic of China (Taiwan); may be transferred to regions where service providers are located when necessary (see Section 14)
- Recipients: The Organizer, partner ticketing platforms, payment processors, logistics providers, partner brands, and authorities with legal authority
- Methods: Electronic data transmission, paper processing, telephone communication
Statistical data and reports are de-identified and do not involve any specific individual’s personal data.
6. Data Retention Period
We retain your personal data according to the following principles:
- Transaction Records: Retained for 5 years as required by tax and commercial accounting regulations
- Member Accounts: Until you request deletion or 3 years after your last login
- Marketing Consent Records: Deleted within a reasonable period after you withdraw consent
- Browsing Records: Retained for a maximum of 2 years
After the purpose ceases to exist, we will delete or de-identify your personal data within a reasonable period.
7. Sharing Personal Data with Third Parties
The Organizer will never provide, exchange, rent, or sell your personal data to any individual, group, private enterprise, or government agency, except in the following circumstances:
- With your written or electronic consent
- As required by law
- To protect your life, body, liberty, or property from imminent danger
- In cooperation with government agencies or academic institutions for statistical or academic research in the public interest, where data has been processed to prevent identification of specific individuals
- When your behavior on the website violates the terms of service or may harm the rights of others, and disclosure is necessary for identification, contact, or legal action
- When it benefits your interests
Outsourced Processing: When the Organizer engages vendors to assist in collecting, processing, or using your personal data, we will exercise due diligence in supervising such vendors and require them to sign confidentiality agreements.
8. Cookies and Tracking Technologies
To provide a better service experience, our website uses cookies and similar tracking technologies. The types and purposes are as follows:
Essential Cookies
Ensure basic website functionality (e.g., shopping cart, login status). These cannot be disabled.
Analytics Cookies
Help us understand website usage (e.g., Google Analytics) to improve service quality.
Marketing Cookies
Used to deliver relevant advertisements and measure advertising effectiveness (e.g., Meta Pixel, LINE Tag).
You may refuse or manage cookies through your browser settings. Disabling cookies may cause some website features to function improperly.
9. On-Site Special Provisions
Photography and Videography
Official photographers and videography teams will be operating at the Festival. By entering the venue, you acknowledge and agree that:
- Your image may be captured and used for Mirage Festival official marketing, social media, website, and partner media coverage
- CCTV surveillance systems are installed at the venue as a necessary measure for venue security
If you do not wish your image to be used for marketing purposes, please contact the on-site service desk before or during the event.
Entry Verification and Identification Technology
The Festival may employ electronic tickets, QR Codes, or wristband technology for entry verification. Such technology is used solely for:
- Confirming your entry eligibility
- Maintaining event safety and crowd management
Entry verification data will be deleted within 30 days after the event concludes.
10. Data Security Measures
The Organizer implements security measures pursuant to Article 27 of the PDPA, including but not limited to:
- Servers are equipped with firewalls, intrusion detection, and antivirus systems
- SSL/TLS encryption technology is used for data transmission
- Only authorized personnel may access your personal data
- All personnel handling data have signed confidentiality agreements and are subject to legal sanctions for violations
- Regular data security audits are conducted
11. Your Rights
Pursuant to Article 3 of the PDPA, you have the following rights regarding your personal data:
- Inquire or request access to your personal data
- Request copies (reasonable fees may apply)
- Request supplementation or correction of your personal data
- Request cessation of collection, processing, or use of your personal data
- Request deletion of your personal data
You may exercise these rights through the contact information provided at the end of this Policy. We will respond within 30 days of receiving your request.
12. Protection of Minors
The Festival may have age restrictions. Persons under 18 years of age should use this website and provide personal data only with the consent of their parents or guardians. The Organizer will not knowingly collect personal data from children under 14 years of age.
13. Marketing Communications and Opt-Out
With your consent, we may send you Mirage Festival-related information via email, SMS, LINE, or other channels.
You may opt out at any time by:
- Clicking the “Unsubscribe” link in our emails
- Replying “Unsubscribe” to LINE messages
- Contacting us via LINE Official Account (@mirage.tw) or email
After you opt out, we will immediately cease marketing use. However, transactional notifications directly related to your orders or services (e.g., shipping notices, ticket confirmations) are not affected.
14. Cross-Border Data Transfers
Your personal data is primarily stored within the Republic of China (Taiwan). If it is necessary to transfer data outside of Taiwan due to the use of cloud services, third-party tools (e.g., Google Analytics, payment services), or international cooperation, we will ensure that the receiving party maintains adequate personal data protection standards and process such transfers in accordance with Article 21 of the PDPA.
15. Consequences of Not Providing Personal Data
You are free to choose whether to provide personal data. However, if you decline to provide data necessary for contract performance, it may result in:
- Inability to complete ticket or merchandise purchases
- Inability to use certain website features (e.g., member area)
- Inability to participate in specific events or promotions
