GLOBAL CASINO OPERATIONS PRIVACY SUMMARY
Last Updated: 08/04/23
HOW WE COLLECT AND USE YOUR INFORMATION
We collect many categories of personal information. The categories we collect may include: Contact and profile information; comments and suggestions, chat and opinions; Payment and transaction information; Location information; Information provided by social networks; Information provided by third parties; Information about fraudulent or criminal activity related to your account.
This information is collected from you in many ways, which are described in the full Privacy Notice. A few examples include:
We use personal information to facilitate your vacation and our other Services, to fulfill your requests, process transactions and contact you; to send you personalized advertising and promotional content and materials; to analyze and improve our Services and our business; and for other reasons described more fully in our Privacy Notice below.
If you are travelling on an Ocean Medallion Class® vessel, we collect information about your use of OCEAN® services, including our applications, websites, and the on-board interactive features during your trip. Please see the MedallionClass™ sections of our Privacy Notice for more information.
To learn more about the information we collect and how we use it, see our full Privacy Notice.
HOW WE SHARE YOUR INFORMATION
We share information in a variety of circumstances to provide our services, respond to your requests, improve your experience, and otherwise conduct our business. For example, we may share information:
CHOICES ABOUT YOUR INFORMATION
We want you to understand your choices regarding how we may process your personal information. Depending on how you use the Service, these choices may include the following:
Please be sure to check the full Privacy Notice for more information about your choices.
REGION-SPECIFIC DISCLOSURES
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:
– If you are a resident of the State of California, Colorado, Connecticut, Utah, or Virginia in the United States, please visit the U.S. State Privacy Rights section for more information.
– If you are a resident of the State of Nevada in the United States, please visit the Nevada Privacy Rights section for more information.
– If you are located in the European Economic Area, Switzerland and the UK (“EEA”), please visit the European Privacy Rights section for more information.
– If you are located in Brazil, please visit the Brazil Privacy Rights section for more information.
– If you are located in the People’s Republic of China (excluding Hong Kong, Macau and Taiwan), please visit the China Privacy Rights section for more information.
QUESTIONS?
For more questions about our Privacy Notice, please feel free to email us at dpo@carnival.com.
CARNIVAL PRIVACY NOTICE
Carnival Corporation and Carnival plc (“Carnival,” “we,” “our,” or “us”) is a division of Carnival Corporation & plc. Carnival Cruise Line includes 1972 Productions Inc., 6348 Equipment L.L.C, A.C.N. 098 290 834 Pty. Ltd., A.J. Juneau Dock LLC, Adventure Island Ltd., AIDA Kundencenter GmbH, AIDAradio GmbH, Alaska Hotel Properties LLC, Air-Sea Holiday GmbH, Barcelona Cruise Terminal SLU, Bay Island Cruise Port S.A., Belize Cruise Terminal Limited, Carnival (UK) Limited, Carnival Bahamas FC Limited, Carnival Bahamas Holdings Limited, Carnival Corporation & plc Asia Pte. Ltd., Carnival Corporation Hong Kong Limited, Carnival Corporation Korea Ltd., Carnival Corporation Ports Group Japan KK, Carnival Finance LLC, Carnival Grand Bahama Investment Limited, Carnival Investments Limited, Carnival Japan Inc., Carnival License Holdings Limited, Carnival Maritime GmbH, Carnival North America LLC, Carnival Port Holdings Limited, Carnival Ports Inc., Carnival Support Services India Private Limited, Carnival Technical Services (UK) Limited, Carnival Technical Services Finland Limited, Carnival Technical Services GmbH, Carnival Vanuatu Limited, CC U.S. Ventures Inc., CCL Gifts LLC, Costa Crociere PTE Ltd, Costa Crociere S.p.A., Costa Crociere S.A., Costa Cruise Lines Inc., Costa Cruise Lines UK Limited, Costa Cruises Customer Service S.L.U., Costa Cruises Shipping Services (Shanghai) Company Limited, Costa Cruises Travel Agency (Shanghai) Co. Ltd., Costa Cruises Turkey Turizm Gelisim A.S., Costa Cruzeiros Agencia Maritima e Turismo Ltda., Costa International B.V., Costa Kreuzfahrten GmbH, Cozumel Cruise Terminal S.A. de C.V., Cruise Ships Catering & Services International N.V., Cruise Terminal Services S.A de C.V., Cruiseport Curacao C.V., CSMART Real Estate B.V., CSMART Real Estate C.V., CSSC Carnival (Shanghai) Cruise Shipping Limited, CSSC Carnival Italy Cruise Investment S.r.L., D.R. Cruise Port Ltd., F.P.M. SAS, F.P.P. SAS, Fleet Maritime Services (Bermuda) Limited, Fleet Maritime Services Holdings (Bermuda) Limited, Fleet Maritime Services International Limited, Gibs Inc, Global Experience Innovators Inc, Global Casino Operations, Global Fine Arts Inc, Global Shipping Service (Shanghai) Co. Ltd., Grand Cruise Shipping Unipessoal LdA, Grand Turk Cruise Center Ltd, GXI LLC, HAL Antillen N.V., HAL Beheer B.V., HAL Maritime Ltd., HAL Nederland N.V., HAL Properties Limited, HAL Services B.V., Holding Division Iberocruceros SLU, Holland America Line Inc., Holland America Line N.V., Holland America Line Paymaster of Washington LLC, Holland America Line U.S.A. Inc., HSE Hamberg School of Entertainment GmbH, Ibero Cruzeiros Ltda., Ibercruceros SLU, Information Assistance Corporation, International Cruise Services S.A. de C.V., International Leisure Travel Inc., International Maritime Recruitment Agency S.A. de C.V., Milestone N.V., Navitrans S.R.L., Ocean Bahamas Innovation Ltd., Ocean Medallion Fulfilment Ltd., Odds on Gaming Corporation, Operadora Catalina S.r.L., P&O Princess American Holdings, P&O Princess Cruises International Limited, P&O Princess Cruises Pension Trustee Limited, P&O Properties (California) Inc., P&O Travel Limited, Piccapietra Finance S.r.L., Prestige Cruises Management S.A.M., Prestige Cruises N.V., Princess Bermuda Holdings LTD., Princess Cays Ltd., Princess Cruise Corporation Inc., Princess Cruise Lines Ltd., Princess Cruises and Tours Inc., Princess U.S. Holdings Inc., RCT Maintenance & Related Services S.A., RCT Pilots & Related Services S.A., RCT Security & Related Services S.A., Roatan Cruise Terminal S.A. de C.V., Royal Hyway Tours Inc., Santa Cruz Terminal S.L., Seabourn Cruise Line Limited, SeaVacations Limited, SeaVacations UK Limited, Shanghai Coast Cruise Consulting Co. Lda., Ship Care (Bahamas) Limited, Sitmar Cruises Inc., Spanish Cruise Services N.V., Sunshine Shipping Corporation Ltd., T&T International Inc., Tour Alaska LLC, Transnational Services Corporation, Trident Insurance Company Ltd., Welcome Travel Group S.p.A., West Sicily Gate S.r.L., Westmark Hotels of Canada Ltd., Westmark Hotels Inc, Westours Motor Coaches LLC, World Leading Cruise Management (Shanghai) Co. Ltd. We recognize that your privacy is important. Your choice to share information with us is an important part of how we provide a world-class travel experience. We’ve developed this Privacy Notice to explain how your personal information is collected, used, stored, processed, transferred and disclosed by Global Casino Operations, both online and in the real world.
Our Services. This Privacy Notice applies to our websites and applications, including Oceanplayersclub.com, Oceancasinojobs.com, and any other website, mobile application, or other online service that links to this Notice (collectively, our “Sites”) and describes how we collect, use and process your personal information in connection with our Sites, marketing and promotional activities and your interactions with us before, during and after one of our vacation experiences (collectively with our Sites, our “Services”).
Please note that this privacy notice does not apply to our processing of information about employees, crew, contractors or our vendor contacts.
By providing us with your personal information or otherwise using our Services, you acknowledge that you have read, understood and agree to the terms of this Privacy Notice and our Terms of Service.
Click on the links below to jump to each section:
HOW WE COLLECT AND USE YOUR INFORMATION
We collect personal information in various ways, for example, when you visit our online sites and services, book travel, create an account, enjoy our vacation experiences while on a voyage, communicate with us or otherwise engage with our Services. All of the information collected through our Services may be combined to provide a seamless, personalized experience, regardless of how you interact with us.
The categories of personal information we collect can include:
Personal identifiers such as your name, email address, mailing address, phone number, date of birth or similar identifiers.
Customer records such as your identification documents, payment information (credit or debit card or other financial information).
Commercial information such as your travel history, account data, participation in a loyalty or rewards program, information about the products or services purchased or considered.
Health or medical information such as health monitoring information, accessibility information, care in one of our shipboard clinics, medications, allergies or other medical accommodation needs.
Sensory information such as photos and videos of you and audio recordings of phone calls between you and us, where permitted by law.
Biometric information, including facial identifiers that can recognize you from photos and video.
Preferences you provide to us or generated through your use of the Services, including inferences we may make based on our experience with you.
Internet, network and device information from the browser or device you use to access our Services, which could include your IP address, device ID, cookie identifiers, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and or clickstream data.
Geolocation data including precise geolocation data from your browser or device or inferred based on your IP address.
Professional information if you submit a job application or in connection with your role as a travel partner or agent.
Background check information that we may receive from third-party sources, such as criminal and sex offender registry information.
Keep reading to learn more about how we collect personal information you provide to us directly, information we collect through your use of the Services or your travel experience, and information we receive through third parties, and the purposes for which we use your information..
You may provide personal information for yourself and those traveling with you. By providing us with the travel or contact information of any third party, you confirm that you have the authority to do so on their behalf and have provided them with the information set out in this Privacy Notice. The personal information of each person whose personal information is linked to the same travel itinerary may be accessible by all others included in that same itinerary.
When you take part in the Services aboard one of our ships or at one of our properties, we collect information about your visit, including information about your interactions with our staff, programming and with the technology-enhanced features of our ships and hotels.
There are a few different types of vacation experiences where we may collect and use your information:
When you visit our Sites or use our Services, read our emails, or otherwise engage with us through a computer or mobile device, we and our third party partners automatically collect information you provide to us and information about how you access and use the Service and information about the device you use to access the Service.
We typically collect this information through a variety of tracking technologies, including cookies, Flash objects, web beacons, embedded scripts, APIs and mobile software development kits (SDKs), location-identifying technologies, and similar technology (collectively, “tracking technologies”), and we may use third party services and technologies to collect this information. Information we collect automatically about you may be combined with other personal information we collect directly or receive from other sources.
Specifically, we and our third party partners may use tracking technologies to automatically collect commercial information, preferences, and internet, network and device information, including:
All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our Sites and Services, and improve the effectiveness of our Service, offers, advertising, communications and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Sites; (b) provide custom, personalized content, and information; (c) identify and contact you across multiple devices; (d) provide and monitor the effectiveness of our Service; (e) perform analytics and detect usage patterns on our Service; (f) diagnose or fix technology problems; (g) detect or prevent fraud or other harmful activities, and (h) otherwise to plan for and enhance our Service.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note, however, that disabling our cookies may mean that you will not be able to take full advantage of our Services.
Deleting cookies or controlling cookies through browser settings does not delete non-cookie tracking technologies such as Flash objects and HTMP5 Local Storage Objects (LSOs). To manage Flash cookie settings and preferences, you must use the settings manager on Adobe’s website or by clicking here.If you choose to delete Flash objects from our Service, then you may not be able to access and use all or part of the Service or benefit from the information and services offered.
We and our third party partners may collect information through tracking technologies for personalized advertising purposes. See “About Our Ads” to learn more.
We may receive personal information about you from other users or our business partners and service providers and combine this information with other information we have.
In addition to the uses described above, we may collect and use personal information for the following purposes:
HOW WE SHARE YOUR INFORMATION
We may share your personal information in the instances described below. For further information on your choices regarding your information, see the “Choices About Your Information” section below.
We may share your personal information in the following ways:
We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you.
All the above categories exclude text messaging originator opt-in data and consent, which will not be shared with any third parties, except as follows: (1) sharing with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, and who will not use such information for their own purposes; (2) if we believe disclosure is required by any applicable law, rule, or regulation, or is necessary to comply with law enforcement or other legal process; (3) if you consent to our sharing of such information; or (4) sharing that is otherwise allowed by law and is in accordance with carrier terms and conditions.
CHOICES ABOUT YOUR INFORMATION
PROFILE ACCESS & SHARING SETTINGS. You may access and update your profile information, such as your user name, address, or billing information, and may change some of your data sharing preferences on your account page.
GEOLOCATION & DEVICE CONTENT. You may control location tracking by adjusting your location services options on the “Settings” app on your mobile device. We may continue to approximate your location based on your IP address when you access the Services through a computer or device. If you would like to update your device content access permissions, such as permissions to access your camera or address book, you can do so in the “Settings” app on your mobile device.
MEDALLIONCLASS™. To avoid the collection of your position and movement data collected, do not use the Medallion®. You may contact the staff on board the ship to request a card to access your guest room and pay for on board transactions in lieu of the Medallion®. The sensors will still be able to detect your on board position when you use the card to access your room, make a payment, or take a photo, but the card cannot be read by the long-range sensors to track movement data around the ship. Some features of the MedallionClass™ Services will not be available to you if you do not use the Medallion®.
PROMOTIONAL MESSAGES. You can stop receiving promotional email communications from us by following the “unsubscribe” instructions provided in such communications. We make every effort to promptly process all unsubscribe requests. You may still receive Service-related communications, including account verification, transactional communications, changes/updates to features of the Services, and technical and security notices.
ACCESSING, CORRECTING OR DELETING YOUR INFORMATION. In accordance with the applicable jurisdictional laws, you may have the right to request to access, correct, or delete your personal information, or remove your name or comments from our website or publicly displayed content. We may not be able to modify or delete your information in all circumstances.
o Emailing dpo@carnival.com with sufficient information to identify you and your request,
o Filling out our Request Form, or
o Calling 1-855-845-2599
We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account.
In certain circumstances, we may decline a request to exercise the requests described above, particularly where we are unable to verify your identity. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
ABOUT OUR ADS. We participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your browsing history. To learn more about our advertising practices and your choices relating to advertising, please see the About Our Ads notice for more information.
COVID-19 NOTICE
In response to the global coronavirus pandemic and to protect against the risks of other communicable illness, all guests may be required to undergo health screenings and we will collect additional information recommended by public health authorities or other government agencies or to otherwise demonstrate our guests’ ongoing health and fitness to travel, including:
We collect and use this information because:
Contact Tracing through OceanOrbit™ Contract Tracing System. To help mitigate and manage the potential spread of COVID-19 or other global pandemic illnesses, we use wearable device technology to identify individuals who may have been exposed to COVID-19 and to rapidly detect potential secondary cases that may arise after transmission from an infected individual. The OceanOrbit™ device is a wearable portable electronic device that collects data as guests and crew interact with one another in public and in private areas by broadcasting and recording the presence and proximity of other OceanOrbit™ devices. The OceanOrbit™ system collects time stamps, duration of contact and frequency of contacts. The raw data is associated with the device ID number but will be correlated with guest or crew personal information in the event that contract tracing is called for. On MedallionClass™ ships, we may use on board contact data collected in connection with the Medallion®, rather than the OceanOrbit™ system, which will be linked to your personal information in the same manner as all other OCEAN® data. As part of our contract tracing efforts, we take reasonable precautions to respect our Guests’ privacy and confidentiality by communicating contact exposure information in a manner that is not personally identifiable. However, information about you may be disclosed in a manner that could allow the recipient to determine your identity. For example, if we determine that it is necessary to disclose to a guest that she was in contact with an individual who tested positive for COVID-19 for a period of 1-2 hours on a particular date, that guest may be able to ascertain the likely identity of the unnamed individual based on her personal experience.
We may disclose your personal information, contacts and health information with third parties or individuals to attend to your medical and safety needs and those of our guests and crew; to comply with legal and regulatory requirements; to facilitate public health response initiaves; to conduct contract tracing of individuals who are exposed to or test positive for COVID-19 or other communicable illness while staying with us; or if we reasonably believe that such disclosure is necessary to inform your health care or to protect the personal safety or health of our guests, crew, or other individuals. For example, we may disclose personal identifiers and health or medical information to our personnel and contractors, port agents and authorities, government officials, health agencies or any other individual or institution as reasonably needed to support public health initiatives, comply with our legal or regulatory obligations, attend to your medical and safety needs, facilitate investigations and remedies, track and mitigate risks of communicable illness including COVID-19, and to protect the rights, health and safety of our guests, crew, and others.
CHILDREN’S PRIVACY
Though Carnival Cruise Line provides fun for families of all ages, most of our online Services are not intended to be used by children, nor do we have actual knowledge that children are using these online Services. When we intend to collect personal information from children online, we take additional steps to protect their privacy, including:
If you believe that we might have inadvertently collected information from a child without appropriate parental consent, please contact us at dpo@carnival.com so that we may delete the information as soon as possible.
Where we collect personal information about children (for instance, information provided by a parent or legal guardian, travel agent or other travel partner), we process such information in a manner consistent with applicable laws protecting the privacy of children’s data.
REGION-SPECIFIC DISCLOSURES
This section applies to you if you are a resident of the state of California, Colorado, Connecticut, Utah, or Virginia, and provides additional information about our personal information processing practices relating to individual residents of these states.
COLLECTION AND USE OF PERSONAL INFORMATION. In the last 12 months, we have collected all of the categories of personal information described in our Privacy Notice. To learn more about the types of personal information we collect, the sources from which we collect it, and the purposes for which we use this information, please refer to How We Collect and Use Your Information of the Privacy Notice.
Sensitive Information. Some of the categories of personal information described in our Privacy Notice may be classified as “sensitive” under certain U.S. state privacy laws (“sensitive information”), including social security number, driver’s license number, and passport number; payment card number plus expiration date and security code (CVV), and financial account number and routing number; information concerning your health; biometric information for the purposes of uniquely identifying guests; your username and password; personal information collected from a child; and precise geolocation data. We use this sensitive information for the purposes set forth in the How We Collect and Use Your Information section of our Privacy Notice to the extent necessary for the operation of our Services, to enter into and perform a contract with you, to comply with legal and regulatory requirements, to protect the life or physical safety of anyone or as otherwise permissible for our own internal purposes consistent with law.
Deidentified Information. We may at times receive, or process personal information to create, deidentified data that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law.
DISCLOSURE OF PERSONAL INFORMATION. We share personal information with third parties for business purposes or we may sell your personal information to third parties, subject to your right to opt out of those sales. The categories of third parties to whom we sell or disclose your personal information for a business purpose include: (i) other brands and affiliates in our family of companies; (ii) our service providers; (iii) marketing and strategic partners; (iv) promotional partners; (v) ad networks and advertising partners; (vi) analytics providers; (vii) social networks; and (viii) government authorities. To learn more about how we disclose data to third parties, please refer to How We Share Your Information of the Privacy Notice.
Unless you have exercised your Right to Opt Out of personal information sales, we may sell personal information to third parties for monetary or other valuable consideration. The third parties to whom we sell personal information may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties.
In the previous 12 months, we have disclosed the all of the categories of personal information we collect to third parties for a business purpose.
In the previous 12 months, we have sold the following categories of personal information to third parties: (i) Personal Identifiers; (ii) Commercial Information; (iii) Preferences; (iv) Internet, network and device information.
We do not sell sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising. However, depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit, or withdraw your consent for, our processing of sensitive information (as described in the Your Rights and Choices section below), except for where the processing of your sensitive information is necessary to provide you the services or otherwise required by law.
YOUR RIGHTS AND CHOICES. Depending on your state of residence, and subject to certain legal limitations and exceptions, you may be able to exercise the following rights:
You also have the right to be free of retaliatory or discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner.
How to Exercise your Rights. You may submit a request to exercise your privacy rights through one of the mechanisms described below. We will need to verify your identity and confirm your state of residence before processing your request, which may require us to request additional personal information from you or require you to log into your account, if you have one. These rights may not be available to all U.S. residents. We will process your request in accordance with applicable state law. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
Please note that we can only process privacy rights requests for personal information processed by Carnival Cruise Line. If you have interacted with another brand in our family of companies or any other third party, you will have to contact that brand or third party to exercise your California Consumer Requests.
To access, modify or delete your personal information, please submit a request by:
To submit a request to opt-out of personal information sales, please submit a request using our Do Not Sell or Share My Personal Informationform to be added to our suppression list.
Additionally, as is common practice among companies that operate online, we permit third party advertising networks, social media companies and other third party businesses collect and disclose personal information (including preferences, rough geolocation, commercial information and internet, network and device information) directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us. These third parties use this information for the purposes of serving targeted ads that are more relevant, for ad campaign measurement and analytics, and for fraud detection and reporting and may sell and share that information to other businesses for advertising and other purposes. By visiting here you can opt out from sales of this type of personal information by businesses that participate in the opt-out tool. To make opt-out requests related to mobile apps on your device for businesses participating in the DAA’s CCPA App-based Opt-Out Tool, you can download the appropriate app at www.youradchoices.com/appchoices. To learn more about how third parties collect information through tracking technologies and what other choices you may have in relation to those activities, please see About Our Ads.
Minors. We do not sell or, for the purposes of targeted advertising, share the personal information of consumers we know to be less than 16 years of age. If we wish to do so in the future, we will first seek affirmative authorization from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.
If you are under the age of 18 and you want to remove your name or comments from our website or publicly displayed content, please contact us directly at dpo@carnival.com. We may not be able to modify or delete your information in all circumstances.
If you wish to submit a privacy request on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., that you are the child’s legal guardian or authorized representative).
Authorized Agents. In certain circumstances, you may permit an authorized agent to submit requests on your behalf. The authorized agent must provide a letter signed by you confirming the agent has permission to submit a request on your behalf, or must provide sufficient evidence to show that the authorized agent has been lawfully vested with power of attorney.
For security purposes, we may need to verify your identity and confirm directly with you that you have provided the authorized agent permission to submit the request, and it may take additional time to fulfil agent-submitted requests. We may deny a request in the event we are not able to verify the authorized agent’s authority to act on your behalf. Please note that for privacy and security reasons, we will direct future communications to the data subject on whose behalf the request was made.
Notice of Financial Incentive. Notice of Financial Incentive. We offer various financial incentives. For example, the financial incentives we may provide include:
When you sign up for our email list or create an account, you opt-in to participate in a financial incentive program. Participation in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, you may unsubscribe from our emails (for email-based incentives), close your account (for loyalty and reward program incentives) or submit a request to delete your information. The financial incentives we offer to consumers are reasonable related to the value of the consumer’s data to our business, based on our reasonable but sole determination. We estimate the value of consumers’ personal information by considering the expense incurred by the business related to the collection, storage and retention of consumers’ personal information in the context of the financial incentive program and the expenses related to the provision of the financial incentive.
The terms applicable to each program and other offering are provided at the time an eligible individual is offered an opportunity to participate. Interested individuals can opt-in to these financial incentives by following the instructions presented at the time the offer is made. Participating individuals may withdraw from our programs and other offerings at any time by following the instructions provided in connection with each offering or by contacting us with the information found in the Contact Us section below.
“Shine The Light” Law. California’s “Shine the Light” law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. To opt-out of having your personal information disclosed to third parties for their direct marketing purposes, please click Do Not Sell or Share My Personal Information and provide your contact information to be added to our suppression list.
California Consumer Rights Metrics 2021. The following data reflects the California consumer rights requests that we have processed in the 2021 calendar year (January 2021 – December 2021):
| 2021 California Consumer Rights Requests | # |
| The number of requests to know that the business received, complied with in whole or in part, and denied | 12 |
| The number of requests to delete that the business received, complied with in whole or in part, and denied | 217 |
| The number of requests to opt-out that the business received, complied with in whole or in part, and denied | 678 |
| The median or mean number of days within which the business substantively responded to requests to know, requests to delete, and requests to opt-out. | 1 |
Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. If you are a Nevada resident, you may submit a request to opt out of potential future sales under Nevada law by emailing us at [dpo@carnival.com or completing the Do Not Sell or Share My Personal Information Form. Please include sufficient information for us to identify you in your email, such as information about previous voyages, or, if applicable, your account information. Please note we will take reasonable steps to verify your identity and the authenticity of the request.
This section applies to you if you are a resident of a member state of the European Economic Area, the United Kingdom and Switzerland. The European Data Protection Regulation and corresponding law in the other European States not being member of the European Union requires us to to disclose certain information regarding the personal information we collect about you and your rights in respect of personal information that we hold.
Legal Basis for the Processing of Your Personal Information. Our processing of your personal information as described in the Section “How We Collect and Use Your Information” is based on the following legal grounds:
Where we need your consent, you have the right not to provide consent, or to withdraw it at any time. The withdrawal of your consent does not affect the lawfulness of our use of your personal information before your withdrawal. If you have granted us consent to use your personal information, we will use it only for the purposes specified in the consent declaration. Please note that to the extent our processing is based on your consent and you deny your consent or withdraw it, we may not be able to provide the Service relating thereto. Besides from that, neither the initial denial nor a withdrawal will have any negative consequences for you.
o to manage your travel bookings and orders;
o to provide you with our Services, e.g., process your on-board purchases of goods or Services,
o to communicate with you to provide technical or administrative support, or
o to be able to provide our online Services.
o to conduct customer surveys in order to enhance and optimize your vacation experience;
o to protect our rights and the rights of our guests;to prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services;
o to investigate and resolve disputes and security issues;
o to provide you with personalized Services;
o to communicate with you and reply to your questions or comments submitted to us by any means; and
o to pursue or defend against legal claims.
Where we process your personal information based on our legitimate interests, we will only do so where we have appropriately assessed and balanced our interests against your right to privacy.
Additional Information on How Your Personal Information Is Transferred Globally. In case your personal information is transferred to jurisdictions located outside of the European Economic Area, the United Kingdom or Switzerland, for example, to the United States or any other country where we have operations, we will ensure that appropriate safeguards exist and are taken, such as:
Please be aware that the United States’ laws have not yet been acknowledged as providing for a data protection standard which is adequate to the ones within your jurisdiction.
For more information about the safeguards relating to personal information transfers you may contact our Data Protection Officer by sending an email to dpo@carnival.com.
Your Rights: You are entitled to the following rights in respect of personal information that we hold:
In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
For further information on how to exercise those rights, you may contact our Data Protection Officer by sending an email to dpo@carnival.com or visiting the GDPR Request Form Page. You also have the right to lodge a complaint with the competent data protection supervisory authority. Information about how to contact your local data protection supervisory authority is available here.
This section applies to you if your personal information: (i) is processed in the Brazilian territory; or (ii) has been collected in the Brazilian territory. Also, this section applies to you if the purpose of the processing activity is the offer or supply of goods or services within the Brazilian territory.
o confirmation of the existence of processing;
o access to the personal information;
o correction of incomplete, inaccurate or outdated personal information;
o anonymization, blocking or elimination of unnecessary or excessive data or of data processed in noncompliance with the provisions of the LGPD;
o portability of your personal information to other service providers or suppliers of product, at the express request, and observing our business and industrial secrets;
o elimination of the personal information processed with the consent, except in the events set forth on the topic “Termination of the processing” below;
o information of the public and private entities with which the controller carried out the shared use of personal information;
o information on the possibility of not providing consent and on the consequences of the denial;
o revocation of the consent.
Termination of the Processing. Your personal information shall be eliminated after termination of the processing thereof, within the scope and technical limits of the activities, and conservation thereof shall be authorized for the following purposes:
This section applies to you if: (i) your personal information is processed within the territory of the People’s Republic of China (excluding Hong Kong, Macau and Taiwan, the “PRC”), or (ii) you are within the territory of China and your personal information is processed outside of China for the purposes of providing goods or services to you, or analyzing or evaluating your behaviors. PRC law requires us to disclose certain information set forth below.
Processing of Sensitive Personal Information. Under the PRC law, sensitive personal information includes information regarding such as biometrics, religious beliefs, race, ethnicity, medical health, financial accounts, and location tracking, as well as the personal information of minors under the age of 14 (“Minor(s)”). For example, we may process your sensitive personal information in an incident, for health screenings, or for security purposes. We may process certain of your sensitive personal information only when we have your consent or another legal basis to do so. Where your consent is the legal basis for processing your sensitive personal information (such as related to our MedallionClass™ Services), we will seek your prior consent separately. For more information on our processing of your sensitive personal information, please refer to the How We Collect and Use Your InformationHow We Collect and Use Your Information section of the Privacy Notice.
Before processing a Minor’s personal information, we will seek consent from their parent or other legal guardian.
Legal Basis for the Processing of Your Personal Information. Our processing of your personal information as described in the Section “How We Collect and Use Your Information” is based on the following legal grounds:
Where we need your consent, you have the right not to provide consent, or to withdraw it at any time. The withdrawal of your consent does not affect the lawfulness of our use of your personal information before your withdrawal. If you have granted us consent to use your personal information, we will use it only for the purposes specified in the consent declaration. Please note that to the extent our processing is based on your consent and you deny your consent or withdraw it, we may not be able to provide the Service relating thereto. Besides from that, neither the initial denial nor a withdrawal will have any negative consequences for you.
o to manage your travel bookings and orders;
o to provide you with our Services, e.g., process your on-board purchases of goods or Services,
o to communicate with you to provide technical or administrative support, or
o to be able to provide our online Services.
Your Rights: You are entitled to the following rights in respect of your personal information that we hold:
In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
Please also note that after an individual passed away, their next of kin may be able to exercise the individual rights of the deceased in accordance with law.
For further information on how to exercise those rights, you may contact our Data Protection Officer by sending an email to dpo@carnival.com. You also have the right to lodge a complaint with a competent personal information protection authority.
This section applies to you if you are a resident of Japan, in accordance with the Act of Protection of Personal Information (the “APPI”) of Japan.
Inquiries and Complaints. We shall respond appropriately to requests permitted under the APPI including requests for inquiries and complaints regarding the handling of personal information. Please submit a request in the same way prescribed in “ACCESSING, MODIFYING OR DELETING YOUR INFORMATION”.
HOW WE PROTECT YOUR INFORMATION
We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through our Service. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%.
In the event that any information under our control is compromised as a result of a breach of security, we will take steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps in accordance with applicable laws and regulations.
While we take steps to protect your personal information and keep it secure, you also play a role in protecting your information. You can help to maintain the security of your online and mobile transactions by not sharing your reservation number, username, or password with anyone.
DATA RETENTION. We will only store your personal information for as long as necessary to achieve the purpose of collection as set out in this Privacy Notice in accordance with our data retention policies, unless a longer retention period is required by applicable law. If we are required by applicable law to store your personal information beyond this period (e.g., for tax and commercial law reasons), we will delete the personal information after the end of this storage period.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use and disclosure of your personal information, the purposes for which we process the personal information, and the applicable legal requirements. After the expiry of the aforementioned retention periods, we will delete or anonymize your personal information.
If, after you sign up for our promotional emails, you unsubscribe from receiving our promotional emails, we will delete your personal information from our mailing lists. However, we might store your email address in a blacklist to ensure that you will not receive any further communication.
TSA SECURE FLIGHT NOTICE
The Transportation Security Administration (TSA) requires you to provide your full name, date of birth and gender for the purpose of watch list screening under the authority of 49 U.S.C. section 114, the Intelligence Reform and Terrorism Prevention Act of 2004 and 49 C.F.R. parts 1540 and 1560 for all commercial air travel within, into or out of the United States which is booked on or after August 15, 2009. You may also provide your Redress Number, if available.
If you book commercial air travel within, into or out of the United States in conjunction with your voyage we will request this information from you and forward it to the TSA as required by law. Failure to provide your full name, date of birth, and gender may result in denial of transport or denial of authority to enter the boarding area.
TSA may share information you provide with law enforcement or intelligence agencies or others under its published system of records notice. For more on TSA privacy policies or to review the system of records notice and the privacy impact assessment, please see the TSA Web site at www.tsa.gov.
LINKS TO THIRD-PARTY SERVICES
The Services may contain links to and from third party websites of our business partners, advertisers, and social media sites and our users may post links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third party sites.
CHANGES TO OUR PRIVACY NOTICE
We may modify or update this Privacy Notice from time to time to reflect the changes in our business and practices, and you should review this page periodically. We will update the “Last Updated” date at the top of this page when we post changes to this Notice. If you object to any changes, you may close your account. Continuing to use our Services after we publish changes to this Privacy Notice means that you are consenting to the changes.
COMMENTS? QUESTIONS? CONTACT US
If you have any questions about this Privacy Notice or the website, please Contact Customer Service 1-855-845-2599
Data Protection Officer: dpo@carnival.com
450 Third Ave. W., Seattle WA 98119-4002, ATTN DPO[
