Ok as i see from your Network topology HEX will be the router…
Here is a nice article http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 that talks about VLANs and how you can configure them.
The first example Router - Switch is enough so that you understand what you can do, it is totally simple…
However, HEX POE does not support Bridge Hardware offload allong with VLANs, only CRS3xx series do, so am not sure if it would be best to follow the VLAN switching for devices with built in switch chip https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching#Other_devices_with_built-in_switch_chip instead of the Bridge VLAN Filtering as described in the above article…