Privacy Policy
1. Name and contact details of the person responsible for processing and the company data protection officer
This privacy policy applies to data processing by the following:
Responsible:
Inter-Connect GmbH
Arnulfstr. 31
80636 Munich
The external Data Protection Officer Stefan Haugg can be contacted using
email: [email protected] or phone: +49 821 570 877 92
2. Collection and storage of personal data, how these data are used and for what purpose
a) When visiting the website
When you open our website www.carnivalcruiseline.bg/sk/cz/pl/hu/ro the browser used on your device automatically sends information to our website's server. This information is saved temporarily in a so-called log file. The following information is recorded without you having to take any action and saved until it is deleted automatically:
- IP address
- Date and time of query
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (actual page)
- Access status/HTTP status code
- Volume of data transferred
- Website from which the request arrived
- Browser type and version
- Operating system and its interface
- Language and version of the browser software
- Name of opened website
- Report of successful opening
These data are processed by us for the following purposes:
- To ensure that the connection to the website is established smoothly,
- To ensure that our website is easy to use,
- To evaluate system security and stability and
- For other administrative purposes.
The legal basis for processing these data is provided by Art. 6 para. 1 sentence 1 letter f of the German General Data Protection Regulation [DSGVO]. Our justified interest is shown from the purposes for data collection listed above. We never use the data we collect for the purpose of drawing conclusions about you.
We also use cookies and analysis services when you visit our website. Further details of this are provided in No. 5 and 6 of this privacy policy.
b) If you register for our newsletter
By giving your consent, you can subscribe to our newsletter in which we tell you about current offers in which you may be interested. The goods and services purchased are listed in the declaration of consent.
We use the so-called double opt-in method for registering for our newsletter. This means that after your registration, we send you an email to the registered email address in which we ask you for confirmation that you would like to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and deleted automatically after one month. Furthermore, we save your IP addresses and the times of the registration and confirmation. The aim of this is to verify your registration and enable any possible abuse of your personal data to be investigated.
The mandatory information we require to send you the newsletter is your email address and your forename and surname. If we receive your confirmation, we save your email address and your forename and surname so that we can send you the newsletter. The legal basis for this is provided by Art. 6 para. 1 sentence 1 letter a of the DSGVO.
You can cancel your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can cancel by clicking on the link provided in every newsletter email, by sending an email to [email protected] or by sending a message to the contact details listed in the legal information.
c) If you use our contact form/callback form
In the event that you have questions of any type, we offer you the facility to contact us using a form available on the website. If you complete this form, you must enter a valid email address so that we know who has sent us the query so that we can reply to it. Other details can be provided on a voluntary basis.
Data processing for the purposes of making contact with us takes place as described in Art. 6 para. 1 sentence 1 letter a of the DSGVO on the basis of your voluntary consent.
The personal data collected by us for using the contact form will be automatically deleted after we have dealt with your query.
d) If you use our form to register for a tour of a ship
We are delighted to offer you the opportunity to book a tour of a ship using the form provided on the website. To do so, you must enter your title, forename and surname, street/house number, postcode, town, country, telephone number, mobile phone number, email address, nationality, passport number, date of birth, date of issue, valid until date and place of issue so that we know who has sent us the query so that we can reply to it. These data are specified by shipping companies for security reasons. Other details can be provided on a voluntary basis.
Data processing for the purposes of requesting a tour of a ship with us takes place as described in Art. 6 para. 1 sentence 1 letter a of the DSGVO on the basis of your voluntary consent.
The personal data collected by us for using the query form will be automatically deleted after we have dealt with your query.
3. Disclosure of data
Your personal data will not be disclosed to third parties other than for the reasons listed below.
We only disclose your personal data to third parties if:
- It is permitted under law and required under Art. 6 para. 1 sentence 1 letter b of the DSGVO for completing contracts with you,
- In the event that there is a statutory obligation to disclose the data under Art. 6 para. 1 sentence 1 letter c of the DSGVO,
- Disclosure under Art. 6 para. 1 sentence 1 letter f of the DSGVO is required to lodge, exercise or defend legal claims and there are no grounds to assume that you have a primary interest in the non-disclosure of your data which merits protection, or
- You have declared your express consent under Art. 6 para. 1 sentence 1 letter a of the DSGVO.
If you book a cruise with Carnival Cruise Line, your data will be disclosed to the head office in the United States of America (Carnival Cruise Line, Carnival Place, 3655 NW 87th Avenue, Miami, FL 33178).
If you pay your cruise via credit card, your data will be disclosed to our Payment Service Provider Concardis (Concardis GmbH, Helfmann-Park 7, 65760 Eschborn, Germany).
4. Unsolicited applications
You are welcome to send us unsolicited applications. Please ensure that you use the requisite level of security when selecting the method of transmission to us. Sending an email without suitable encryption is not recommended since your data can be read and used by unauthorised persons without any great effort en route. If you wish to send us an encrypted email with your application documents, please only use the email address [email protected].
5. Cookies
We use cookies on our site. These are small files which your browser automatically creates and which are saved on your device (laptop, tablet, smartphone or the like) when you visit our site. Cookies do not harm your device, they do not contain any viruses, Trojans or other malware.
The cookie contains information generated on the basis of the specific device used. This does not mean, however, that we obtain any direct information about your identity.
On the one hand, the use of cookies makes the use of our offering a more pleasant experience for you. This is why we use so-called session cookies to identify that you have already visited some pages on our website. These will be automatically deleted when you leave our site.
Furthermore, we also use temporary cookies to improve user-friendliness. These are saved on your device for a specific, defined period of time. If you revisit our site to use our services, the system will automatically detect that you have already been to the site and what entries and settings you made so that you do not have to enter them again.
On the other hand, we use cookies to record the statistics about the use of our website and to evaluate the improvement of our offering for you (see No. 6). These cookies enable us to automatically detect that you have already visited us if you revisit our site. These cookies are deleted automatically after a defined period of time.
The data processed by cookies are required for the specified purposes of maintaining our justified interests and those of third parties under Art. 6 para. 1 sentence 1 letter f of the DSGVO.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are saved to your computer or a prompt will appear every time before a new cookie is generated. However, completely disabling cookies may mean that you cannot use all the functions of our website.
Additional cookie use
We also use third party cookies (cookies from the following third party providers) for the purposes of advertising:
Company |
Aim |
Link to additional information |
Adlicious |
Advertising |
https://adlicious.me/de/datenschutz.shtml |
Affilnet |
Advertising |
6. Analysis tools
a) Tracking tools
The racking measures listed below and used by us are based on para. 1 sentence 1 letter f of the DSGVO. The tracking measures we use are designed to ensure that our website is fit for purpose and can undergo continuous improvement. On the other hand, we use tracking measures to record the statistics about the use of our website and to evaluate the improvement of our offering for you. These interests are regarded as justified in the sense of the regulation named above.
The relevant data processing purposes and data categories are shown in the various tracking tools.
b) Google Analytics
For the purposes of ensuring that our website is fit for purpose and can undergo continuous improvement, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter known as "Google"). Pseudonymised user profiles are created in this respect and cookies (see No. 4) are used. The information generated by the cookie about your use of this website such as
- Browser type/version,
- Operating system used,
- Referrer URL (the site you visited previously),
- Host name of the accessing computer (IP address),
- Time of the server query,
is transferred to a Google server in the USA where it is saved. The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services linked to website use and internet use for the purposes of market research and ensuring that these websites are fit for use. This information may also be transferred to third parties if this is required by law or if the third parties have been engaged to process the data. In no circumstances will your IP address be combined with other data by Google. The IP addresses are anonymised so that they cannot be identified (IP masking).
You may refuse the installation of cookies by selecting the appropriate settings on your browser software, however please note that if you do this you may not be able to use the full functionality of this website.
You may also prevent the data generated by the cookie and relating to your website use (including your IP address) and this data being processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent recording by Google Analytics by clicking on this link. This sets an opt-out cookie which prevents the future recording of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and will be filed on your device. If you delete the cookies in this browser, you will have to reset the opt-out cookie.
Further information about data protection relating to Google Analytics is available in the Google Analytics help section
(https://support.google.com/analytics/answer/6004245?hl=de).
c) Google Adwords conversion tracking
We also use Google conversion tracking to record the statistics relating to the use of our website and to improve our website for you. This means that Google Adwords sets a cookie (see number 5) on your computer if you navigated to our website from a Google advertisement.
These cookies become invalid after 30 days and are not used for personal identification. If the user visits certain pages on the website of the Adwords customer and the cookie has not yet expired, Google and the customer can detect that the user has clicked on the advertisement and has been forwarded to this page.
Each Adwords customer receives a different cookie. This means that cookies cannot be traced using the websites of Adwords customers. The information obtained using the conversion cookie is used to generate conversion statistics for Adwords customers who have decided to use conversion tracking. Adwords customers are notified of the total number of users who have clicked on the advertisement and have been forwarded to the page featuring a conversion tracking tag. However, they do not receive any information which enables them to identify users in person.
If you do not wish to partake in the tracking process, you can also refuse the setting of a cookie required for this purpose – for example, using a browser setting which generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser so that cookies from the domain "www.googleadservices.com" are blocked. Google's privacy policy for conversion tracking can be found here:
(https://services.google.com/sitestats/de.html)
7. Operation of our external fan pages (social networks)
In the following we inform you about the handling of your personal data, especially through the use of our social network presences and offers.
Please check carefully which personal data you share with us via social networks. For example, as long as you are logged into your personal account and visit our profile at the respective provider, the provider can assign this directly to your profile. You are thus clearly identifiable to the provider.
Your visit history can thereby be used by the provider to create a profile about you. We expressly point out that the providers store the data of their users (e.g. personal information, IP address, etc.) and may also use this data for business purposes.
Basically, we operate the pages and profiles in order to be able to contact customers, interested parties and employees as well as potential employees better and more conveniently. The past has shown that our activities beyond the online presence in form of a website lead to a significantly higher market penetration and thus contact opportunities. For this reason, activities in social networks are an essential factor for our business success. For the use of the services, we therefore refer to an explicit legitimate interest on our part (Article 6(1)(f)). When you use our profile pages in the respective social networks, in addition to the personal data that you yourself passed on to the provider when you created your access, usage data is collected. As a rule the respective provider creates a personalised usage profile. However, this is not within our sphere of influence. Our activity only enables the provider to record that you have been interested in our company and that you may like our contributions. Apart from the tracking carried out by the provider without our sphere of influence, there are therefore knowingly no factors which would restrict your fundamental rights and freedoms and which would counteract our legitimate interest in using the services mentioned. In the case of the aforementioned tracking (recording and evaluation of your user behavior by the provider), we hope for a prompt clarification and creation of legal certainty.
Under the following link you can efficiently configure your browser to counteract the unwanted recording of your user behaviour, but probably not completely:
http://www.youronlinechoices.com
Further information on data processing as well as on the responsible office of the provider can be found under the following links.
Facebook
Responsible office of Facebook: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Facebook pages on the basis of an agreement on joint processing of personal data
Privacy policy: https://www.facebook.com/about/privacy/,
Opt-Out: https://www.facebook.com/settings?tab=ads
Google/ YouTube
Responsible office of Google: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Privacy policy: https://policies.google.com/privacy,
Opt-out: https://adssettings.google.com/authenticated,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram
Responsible office of Instagram: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.
Twitter
Responsible office: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Privacy policy: https://twitter.com/de/privacy
Opt-out: https://twitter.com/personalization,
Pinterest
Responsible office of Pinterest: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA
Privacy policy/ Opt-out: https://about.pinterest.com/de/privacy-policy
LinkedIn
Responsible office of Linkedin: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy ,
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Xing
Responsible office of XING: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany
Privacy policy/ Opt-out: https://privacy.xing.com/de/datenschutzerklaerung
8. Data subject rights
You have the following rights:
- Under Art. 15 of the DSGVO, you can request information about your personal data which we have processed. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned duration of storage, the existence of a right to correct, delete, restrict processing or object, the existence of a right to complain, the origin of your data if they were not collected from our site and the existence of automated decision making including profiling and, if applicable, meaningful information about its details;
- Under Art. 16 of the DSGVO, to request the immediate correction of incorrect or the completion of your personal data we have saved;
- Under Art. 17 of the DSGVO, to request the deletion of your personal data we have saved unless its processing is required to exercise the right of freedom of expression and information to meet a legal obligation, public interest or to lodge, exercise or defend legal claims;
- Under Art. 18 of the DSGVO, to request a restriction on the processing of your personal data if you dispute that the data is correct or its processing is illegal but you refuse its deletion and we no longer require the data but you require it to lodge, exercise or defend legal claims or you have objected to its processing under Art. 21 of the DSGVO;
- Under Art. 20 of the DSGVO, to request your personal data which you have made available to us in a structured, conventional, machine-readable format or for the data to be sent to another responsible party;
- Under Art. 7 para. 3 of the DSGVO, to revoke the consent you have issued to us at any time. This will mean that we must no longer continue with the data processing work based on this consent in the future and
- Under Art. 77 of the DSGVO, complain to a supervisory authority. Generally, for this purpose, you can contact the supervisory authority in force at your normal place of residence or employment or our registered office.
9. Right of objection
If your personal data are processed on the basis of justified interests as described in Art. 6 para. 1 sentence 1 letter f of the DSGVO, you are entitled to object to the processing of your personal data under Art. 21 of the DSGVO if you do so for reasons resulting from your specific situation or your objection is against direct marketing. In the latter case, you have a general right of objection which will be implemented by us without you having to quote a specific situation.
If you wish to exercise your right of revocation or objection, simply send an email to [email protected] or [email protected].
10. Data security
During your website visit, we use the widespread SSL (Secure Socket Layer) method together with the highest encryption level supported by your browser. Generally, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can detect whether a specific page on our website is transmitted in encrypted form by the closed image of the key or lock symbol in the bottom status bar of your browser.
We also use suitable technical and organisational security measures to protect your data from accidental or malicious manipulation, partial or complete loss, destruction and to prevent unauthorised access by third parties. Our security measures are improved on an ongoing basis as technological development advances.
11. Topicality and amendment of this privacy policy
This privacy policy is currently in force and was issued in January 2020.
It may be necessary to amend this privacy policy due to the development of our website and offerings through it or on the basis of amended statutory or official specifications. You can open and print our latest privacy policy at any time from our website at www.carnivalcruiseline.bg/sk/cz/pl/hu/ro