We use your personal data in a variety of ways, as explained below.
To provide the products and services you request
We need to process your personal data so that we can manage your account or booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for. In detail, these are the following purposes in particular:
- Planning and organisation of the trip you have booked (cruise, shore excursion)
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR) - Transmission to the entrance and exit ports as part of the trip you have booked
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR) - Transmission to hotels and restaurants (possibly to third countries outside the EU)
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR)
(Article 49, paragraph 1, point (b), of the GDPR) - Transmission to airlines (possibly to third countries outside the EU) when you book a travel package to and from departure and arrival points
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR)
(Article 49, paragraph 1, point (b), of the GDPR) - Storage of name, telephone number and relationship for information purposes in case of emergency
Legitimate interests (Article 6, paragraph 1, point (f), of the GDPR)
Legitimate interest in the storage of this data consists in informing your relatives of unforeseen emergencies and, if necessary, in asking questions and initiating and/or coordinating measures in your interest. - Use of telephone numbers, e-mail address and address for the purpose of customer support, i.e. to advise you and answer your questions in connection with your booked cruise
Consent (Article 6, paragraph 1, point (a), of the GDPR)
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR) - Use of address and e-mail address for commercial communication (post and e-mail)
Legitimate interests (Article 6, paragraph 1, point (f), of the GDPR)
The legitimate interest consists in direct advertising for future cruises by sending catalogues and flyers with special cruise offers and/or in the context of an e-mail newsletter. - Processing of relevant data in response to and management of security incidents, disturbances or other similar unforeseen occurrences on board. Among others, these can be of a medical or insurance-related nature.
Processing in order to protect the vital interests of the data subject (Article 6, paragraph 1, point (d), of the GDPR)
Legitimate interests (Article 6, paragraph 1, point (f), of the GDPR)
The legitimate interest consists in being able to react to unforeseen events during the itinerary. - Planning, organisation and support of the legally valid marriage, registered civil union or symbolic promise of marriage you have booked
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR)
To manage and improve our products, services and day-to-day operations
In detail, these are the following purposes in particular:
- We use personal data to manage and improve our products, websites, customer loyalty or recognition programme(s) and other services.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in providing you with an optimal user experience when using our tele-media services. - We monitor how our services are used to help protect your personal data, detect and prevent fraud, other crimes and the misuse of services. This helps us to make sure that you can safely use our services.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in protecting you and your personal data from criminal offences when using our services and recognising and preventing the misuse of services. - We may use personal data to carry out market research and internal research and development, and to develop and improve our product range, services, shops, IT systems, security, know-how and the way we communicate with you.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in developing and improving our product range, services, shops and IT systems, security, expertise and the methods of our communication with you. - We use CCTV images to help maintain the safety of anyone working in or visiting our shops, premises and other buildings, and for the prevention, detection and prosecution of criminal offences. We may also rely on the images to establish, exercise or defend our legal rights.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in identifying and preventing criminal offences and the misuse of services and being able to exercise and assert claims.
To personalise your experience
We want to ensure that marketing communications relating to our products and services, and those of our suppliers and retail partners, including online advertising, are relevant to your interests. In detail, these are the following purposes in particular:
- To do this, we may use your personal data to better understand your interests so that we can try to predict what other products, services and information you might be most interested in.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in enabling us to tailor our communications to make them more relevant and interesting to you. - Looking at your browsing behaviour and purchases helps us to better understand you as a customer.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in enabling us to offer you personalised offers and services. - We may also measure your responses to marketing communications relating to products and services we offer.
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in enabling us to offer you products and services that better meet your needs as a customer. - If you do not want to receive a personalised service from us, you can change your preference online (kundendaten@hl-cruises.com), over the phone or by writing to us at any time. We will update our records as soon as we can.
To make contact and interact with you
We want to provide you, as our customer, with even better support. In detail, these are the following purposes in particular:
- When you contact us, for instance via e-mail, post, telephone or social media, we are permitted to use personal data in order to handle your matter in the best and fastest possible way.
Consent (Article 6, paragraph 1, point (a), of the GDPR)
Processing for the performance of a contract (Article 6, paragraph 1, point (b), of the GDPR) - We need to process your personal data so that we can manage any promotions and competitions you choose to enter, including those we run with our suppliers and retail partners. For example, if you win a prize.
Processing for the performance of a contract (Article 6, paragraph 1, point (f), of the GDPR)
Legitimate interest (Article 6, paragraph 1, point (f), of the GDPR) The legitimate interest consists in enabling us to conduct the promotion and competition as well as notifying you of any winnings. - If we have to process special categories of personal data, for example health-related data for medical reasons, we only do this if one or more additional prerequisites apply: we have your express consent; it is necessary to protect your vital interests or those of another person and you are physically or legally not in a condition to give consent; it is necessary for the justification, assertion or defence of legal claims; it is necessary for reasons of an overriding public interest.
Article 9, paragraph 1, points (a), (c), (f) and (g), of the GDPR - We are permitted to combine the data which we collect when you make a purchase in an online shop with personal data that was collected via our websites and other sources.
Legitimate interests (Article 6, paragraph 1, point (f), of the GDPR)
The legitimate interest consists in helping us better understand you as a customer and being able to provide you with services and marketing communications (including online advertising tailored to your interests).
We do not sell your personal data to third parties.