a. Companies of our group
Depending on the country where the booking is made from, and to provide you with specific services, we share information about you with the companies of our group. All companies are processing the personal data in compliance with the GDPR.
Depending on the country where the booking is made from, your personal data could be processed by one of the companies of our group, acting as data processors upon instructions from the data controller. The companies of the MSC Cruises group that process personal data of European passengers are: MSC Cruises S.A., MSC Crociere S.p.A., MSC Cruise Management UK Ltd, MSC Cruises UK Ltd, MSC Food & Beverage Division Spa, MSC Kreuzfahrten AG, MSC Cruises Belgium NV, MSC Cruises Scandinavia AB, MSC Kreuzfahrten (Austria) GmbH, MSC Netherlands B.V., MSC Cruises Ltd – Cyprus, Mediterranean Shipping Cruises Cruceros Sau and MSC Kreuzfahrten GmbH.
In limited cases, the above mentioned companies could act as data controllers in relation to a specific data processing activity (for example, when competitions are organized and handled at local level). In such cases, we will provide you with a separate privacy information notice in relation to that specific activity.
Personal data of passengers in the EU is not usually shared with companies of our group that are located outside of Europe. However, should data need to be transferred to a non-EU/EEA country, MSC Cruises will adopts relevant safeguards to ensure that the transfer is carried out in compliance with the applicable privacy legislation, in particular the provisions of the GDPR.
b. Commercial partners
Some services that you book with us are provided by our commercial partners. For example, some shore excursions or experiences may be provided by local tour guides that have been carefully selected by MSC Cruises for their knowledge and experience. We need to communicate your name to such partners in order to provide you with the service you booked.
In such cases, we only communicate the data that is strictly necessary and we have agreements in place with our commercial partners to ensure that the data we communicate to them is used only for specific purposes related to the fulfilment of your request.
Our commercial partners operate in the following industries:
Thus, personal data of are transferred to a non-EU/EEA country if the commercial partner is based outside the EU/EEA. MSC Cruises adopts relevant safeguards to ensure that the transfer is carried out in compliance with the applicable privacy legislation, in particular the provisions of the GDPR, either by signing a specific contract with the commercial partner or by signing appropriate safeguards as approved by the European Commission, as the case may be.
c. Data sharing with port agents and authorities
As a travel operator, we need to share some information about our passengers with local port agents and authorities for immigration purposes. The sharing of data with these agents and authorities can trigger the transfer of data outside the EU/EEA if these entities are based abroad, outside the EU/EEA. These data are shared and transferred based on the legal obligation that MSC Cruises has in relation to the provision of information to the relevant authorities, and only the strictly necessary data is communicated.
The GDPR provides for enhanced rights and MSC Cruises is committed to giving you the appropriate control of your own personal data.
In particular, you have the following rights in connection to your personal data:
a. The right to access your personal data and obtain specific information about how we process it, in accordance with Article 15 GDPR; please be aware that you can only exercise this right in relation to your own data or to the data of a minor or another vulnerable person, where you have provided such data as a holder of parental authority or legal responsibility. MSC Cruises reserves the right to ask for proof of identity, as well as to refuse to provide the personal data if the identity or relevant connection to the data subject cannot be proven.
b. The right to rectify your personal data, in accordance with Article 16 GDPR, including by means of providing a supplementary statement.
c. The right to obtain the erasure of personal data concerning you, in accordance with Article 17 GDPR, unless the data are necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by Union or Member State law to which MSC Cruises is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9.2 as well as Article 9.3 GDPR; or for the establishment, exercise or defence of legal claims.
d. The right to obtain the restriction of the processing of your personal data. In accordance with Article 18 GDPR, this right may be exercised in the following cases:
e. The right to data portability. In accordance with Article 20 GDPR, you may exercise this right in those cases where the processing is based on your consent or on your contractual relationship with MSC Cruises S.A. or one of the companies of our group, and the processing is carried out by automated means.
f. The right to object, at any time, to the processing of the personal data concerning you. In accordance with Article 21 GDPR, you may exercise this right where the processing is based on the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or where the processing is based on our legitimate interests.
g. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you. In accordance with Article 22 GDPR, you may exercise this right unless the processing is necessary for entering into, or performance of, a contract between you and MSC Cruises S.A. or one of the companies of our group; or is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or if the processing is based on the your explicit consent.
h. The right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to him or her infringes this Regulation, in accordance with Article 77 GDPR.
Please find the list of all European Data Protection Supervisory Authorities at the following link: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
To exercise your data subject rights, please write an email to firstname.lastname@example.org. Requests may also be sent in writing to MSC Cruises S.A., Avenue Eugène-Pittard 40, Geneva, Switzerland; in that case, please specify “For the Attention of the Data Protection Officer” on the envelope.
Cookies are small text files sent by websites to users’ browsers for the purpose of automatic authentication, session tracking and storing of specific information regarding users.
There are essentially three types of cookies used on this website:
Cookie functions can be disabled via the appropriate page made available by the EDAA (European Interactive Digital Advertising Alliance) http://www.youronlinechoices.com/ or by checking the "Privacy" settings of your Internet Browser.
Please note that disabling cookies may impair the correct functioning of the certain website sections.
MSC Cruises S.A. and the companies of the MSC Cruises group are fully committed to ensuring that your privacy is respected at all times and that the personal data processing put in place is compliant with the applicable data protection legislation.
If you have any doubts or questions about the data processing carried out by us or by one of the companies of our group, please contact us using our contact details provided in section 1 of this notice.
MSC Cruises (Australia) Pty Limited
Suite 532, 5 Lime Street
King Street Wharf
Sydney NSW 2000
P +612 8076 1000