Our main objective is to provide you with a great experience during your cruise. Below you will find the main purposes why your data is processed. Please click on each to find out what categories of data are collected and how we use such data in each case.
a. Providing you with information regarding your requests about our cruises (via website, call center or email)
We need to know your name, contact details as well as the content of your request. Without this data, we cannot provide you with the requested information. We will only use this information to answer your request. In particular, using the different forms on the website you can request to be contacted through different channels (phone, e-mail, SMS, messaging systems, etc.) and we will contact you through the mean you requested or, where indicated, the mean you indicated as preferred. This processing is carried out to take steps at the request of the data subject prior to entering into a contract (Article 6.1(b) GDPR). In addition, and only where you indicate your express and specific consent, we will use your contact details to send you newsletters and marketing communications via email or SMS about our products and services that may interest you. This processing is based on your consent, pursuant to Art. 6.1(a) GDPR), and you canrevoke the consent at any time emailing us using the contact email address provided in section 1 of this notice. In addition, where required by local regulations, phone calls may be recorded for legal purposes and the processing is carried out for compliance with a legal obligation to which the data controller is subject (Article 6.1(c) GDPR). In other cases, if the recording of the call is not mandatory under local laws the calls may be recorded for the protection and reproducibility of verbal commitments if you give your consent to that and they may be connected with other reservation data. The call recordings may also be processed for quality assurance and training purposes based on the legitimate interest of the data controller. If the call is being recorded you will be notified at the beginning of the call.
b. Completing and handling your booking
To travel or stay on-board our ships, you need to provide your name, contact details, date of birth, gender (not always applies) and nationality at booking stage. We also register some information about your cruise choices, such as cabin type and type of cruise experience. We process this data on the basis of our contract with you (Article 6.1(b) GDPR). You also need to provide information about valid travel documents and visas, where applicable. We process this information to comply with regulatory requirements in the ports of call, therefore on the basis of an existing legal obligation (Article 6.1(c) GDPR). During the booking, in some cases, you could communicate data revealing information about your health or even your religious preferences (for example, food preferences that indicate the observance of a specific religion – such as kosher or halal food – or medical conditions requiring special attention on-board – such as disabilities, or celiac disease). We collect this data in our Special Needs form and process it only on the basis of your informed and specific consent (Art. 9.2(a) GDPR). It is not mandatory to provide this data, but please be informed that if you do not provide it, we are unable to accommodate your needs on-board. When you book with a Travel Agency, that Travel Agency will insert the above data into our booking systems, acting as autonomous data controller; the Travel Agency will be responsible for the processing it carries out on your personal data and for taking the adequate data protection measures. Please contact your local Travel Agency for information about how it processes your personal data.
d. Sending you information about similar products and services to the ones you already booked
When you give us your email in the context of booking a cruise with us, we will send you information about products or services that are similar or related to the ones you booked, unless you exercise your right to opt out of receiving marketing communications from us at the time of booking. If you do not wish to receive this kind of information, please select the opt-out box when booking or click the relevant “unsubscribe” link in any of the emails that we sent you. This data processing is carried out on the basis of our legitimate interests in informing you of similar or related products and services that we offer and that may enhance your cruise experience (Article 6.1(f) GDPR). You can obtain information about the balancing test upon request by using the contact email address provided in section 1 of this notice.
e. Handling requests, complaints and comments
We keep track of the comments and complaints that you make on board in order to adequately respond to your requests. We process these data in connection with our provision of services to you, therefore on the basis of the booking contract (Article 6.1(b) GDPR). You have the option of making an anonymous complaint or comment, but please be aware that in such case it will be impossible for us to follow up on the complaint or to provide assistance and support. In addition, we can use the content of the request, complaint or comment to improve our services on board. We limit as much as possible the use of data that may identify you personally in this case. This processing is carried out on the basis of our legitimate interests in developing our services in a way that ensures our guests get a pleasant experience on board, in accordance with Article 6.1(f) GDPR. You can obtain information about the balancing test upon request by using the contact email address provided in section 1 of this notice.
f. Ensuring on-board security
We keep track of the people who are on board at all times in order to be able to handle crisis situations and to ensure everybody’s security throughout the cruise. We therefore record your name, cabin number, picture (taken when you come on board), date of birth, people you are travelling with, port of embarkation, port of disembarkation and information about special needs that may require specific assistance in case of emergencies.
For security reasons, we operate CCTV cameras onboard our ships, including all access points and in all public areas. These CCTV cameras are continuously recording 24 hours a day. We may perform screening of your personal data against publicly available databases to ensure security on board of our ships.
We process these data on the basis of the need to ensure public security and to manage potential crisis situations (Article 6.1(d) GDPR). For security reasons, we operate CCTV cameras onboard our ships, including all access points and in all public areas. These CCTV cameras are continuously recording 24 hours a day. We process these data on the basis of the need to ensure public security and to manage potential crisis situations (Article 6.1(d) GDPR). For this processing, the data controller is MSC Cruise Management (UK) Ltd, 5 Roundwood Avenue, London, and the data processor is MSC Cruises S.A., Avenue Eugène-Pittard 16, Geneva.
g. Additional data processing activities on-board
Some additional information about you may be collected during the cruise on paperback forms, in order to enable you to participate in specific activities (for example, the gym or the Spa) or to handle the request of specific packages (for example, the Romantic Sunset package). The data processed varies depending to the specific activity on board, however, we make sure to only collect the strictly necessary data to achieve the specific purposes. You will be required to complete the form if you want to receive that specific offer/event/package requested and we will process the data on the basis of our contract with you (Article 6.1(b) GDPR). We also process some personal data about you to assign you to a dinner table at one of our main restaurants during the cruise, to make sure that you are able to enjoy your meal without having to look for an adequate table for yourself and the people you are travelling with. To assign the tables, our Maître D’ takes into account elements such as the size of the group you are travelling with, the place where you booked the cruise and your preferred language. You can request a different table at all times by contacting the Maître D’ or the Guest Service on-board. This data processing is conducted on the basis of our legitimate interests in ensuring that all passengers are assigned adequate dinner seating on-board (Article 6.1(f) GDPR). The information collected on board is stored for as long as necessary for each purpose. You can obtain information about the balancing test upon request by using the contact email address provided in section 1 of this notice.
h. Loyalty Program
We may process your loyalty account details through a unique Voyager’s Club ID that contains information about your points balance, account activity, cruiser milestones, and loyalty tier. We create these details for you when you join one of our loyalty programs and update them as you credit bookings and other activity to your loyalty account.
When you play in the onboard casino using your card, we track information of your play and spend in onboard casinos (including how much you spend, loyalty rewards details and gaming pattern). We sometimes use these details to identify guests that may be interested in casino gaming. Alternatively, you can use cash when we would not track your playing information.
i. MSC 360VR App
If you choose to download our mobile application MSC 360VR for an immersive cruise configurator where you can preview the excitement of your next cruise, we will collect your name, surname, date of birth, phone number and email through the app in order to provide you with our catalogue tailored to the selections you make within our app.