You have not yet saved any cruises to your favourite list.
Find your cruise now
Privacy Notice of Hapag-Lloyd Cruises, a TUI Cruises GmbH company
Hapag-Lloyd Cruises is pleased about your visit to our website as well as about your interest in our company and our products. We take the protection of your personal data very seriously and would like you to know how and for what purpose your data will be saved or used.
The data controller is Hapag-Lloyd Cruises, a TUI Cruises GmbH company (referred to in this Notice as “we” or “us”).
We are committed to doing the right thing when it comes to how we collect, use and protect your personal data. Your privacy matters to us, so please do take the time to read our Privacy Notice which explains:
We have tried to keep this Notice as simple as possible, but if you are not familiar with terms such as data controller, special categories of personal data, then read about these and some others in Key terms.
When you register for any of our services, you may provide us with:
When you browse our websites or use our mobile apps, we may collect:
When you buy our trips in our travel agencies or online, we may collect:
When you contact us or we contact you or you take part in promotions, competitions, surveys or questionnaires about our services, we may collect:
Other sources of personal data
Personal data you provide about other individuals
We use your personal data in a variety of ways, as explained below.
To provide the products and services you request
We need to process your personal data so that we can manage your account or booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for. In detail, these are the following purposes in particular:
To manage and improve our products, services and day-to-day operations
In detail, these are the following purposes in particular:
To personalise your experience
We want to ensure that marketing communications relating to our products and services, and those of our suppliers and retail partners, including online advertising, are relevant to your interests. In detail, these are the following purposes in particular:
To make contact and interact with you
We want to provide you, as our customer, with even better support. In detail, these are the following purposes in particular:
We do not sell your personal data to third parties.
From time to time we may send you relevant offers and news about our products and services in a number of ways, including by email. We may also send you information about other companies’ products and services that we believe may be of interest to you. We will only do this if you previously agreed to receive these marketing communications.
When you book or register with us we will ask if you would like to receive marketing communications. You can change your marketing preferences online, over the phone, using the ‘unsubscribe’ link in our marketing emails or by writing to us (e.g. email) at any time.
You may still receive service-related communications from us. For example, confirming bookings you make with us and providing important information about the use of our products or services.
Within the scope of our offer, we offer you the possibility at various points to be informed by us about interesting offers and news in various ways. Provided that you have given your express consent or that the requirements according to § 7 para. 3 UWG (Act against Unfair Competition, Germany) are fulfilled, we will use your email address and any additional voluntary personal details to send you our newsletter on a regular basis. When registering for a newsletter, you may be given the opportunity to provide additional information about yourself, for example if you would like to receive a birthday surprise. We will then process and use the data you provide for these purposes.
If you are no longer interested in receiving certain information or offers in the future or if you no longer wish to receive the information/offers via a certain channel, please inform us by email to datenschutz(at)hl-cruises.com. The unsubscribe function for the newsletter (opt-out link) is also integrated at the end of each email. We will then comply with your request immediately.
In order to provide our online services securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers they manage) the online services can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.
The data processed within the framework of the provision of the hosting services may include all information relating to the users of our online services that is collected in the course of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online services to browsers, and all entries made within our online services or from websites.
Collection of Access Data and Log Files: We, ourselves or our web hosting provider, collect data on the basis of each access to the server (so-called server log files). Server log files may include the address and name of the web pages and files accessed, the date and time of access, data volumes transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a general rule, IP addresses and the requesting provider.
The server log files can be used for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and to ensure the stability and optimal load balancing of the servers.
Processed data types:
Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
Data subjects:
Users (e.g. website visitors, users of online services).
Legal Basis:
Legitimate Interests (Article 6 (1) (f) GDPR).
We like to hear your views to help us to improve our products and services, so we may contact you for market research purposes. You always have the choice about whether to take part or continue in our market research.
We collect your passport or ID card on our cruises so that we can fulfil all visa as well as entry and exit requirements for the countries visited. We would like to inform you about the data protection aspects relating to this.
What are the legal grounds and purpose of processing?
The legal grounds for the collection of your passport/ID card are the fulfilment of the contractual obligations from the cruise contract concluded with you in accordance with point (b) of Article 6(1) of the GDPR. The identity documents will be collected by our trained staff on board, stored securely and returned to you at the end of the cruise. The purpose of this is to fulfil the visa as well as entry and exit requirements of destination ports and thereby facilitate your entry and exit.
How long is my data stored?
We will keep your identity document safe until the end of your cruise. If it is no longer necessary for us to keep your document during a cruise, it will be returned to you sooner. We do not keep any copies of your passport/ID card.
Who will receive my data?
We show your identity document to the port authorities responsible for entry and exit procedures during your cruise. Trained personnel are always present.
Will my data be shared with third countries (outside of the European Economic Area)?
Identity documents are presented to the port authorities for processing at each port we visit on our cruises.
Is the provision of my data mandatory?
In some countries (e.g. Singapore), the authorities require the collection of identity documents. In other countries, this is a service we provide to make the process as pleasant for you as possible. You do not usually need to be present in person when we present your passport/ID card to the authorities early in the morning or late at night. However, as official regulations change and we are therefore unable to guarantee the actual organisation of your booked cruise, we collect the identity documents of our guests as a matter of course. We therefore ask that you discuss with our service team prior to the start of the cruise the possibility of keeping your identity document with you.
Will automated decision-making, including profiling, take place?
Automated decision-making, including profiling, will not take place.
In order to provide products or services requested by you we may share personal data with suppliers of your travel arrangements, including airlines, hotels and transport companies.
We also work with carefully selected suppliers that carry out certain functions on our behalf. For example, companies that help us with IT services, storing and combining data, marketing, market research, processing payments and delivering products and services. We may need to share personal data to establish, exercise or defend our legal rights; this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk.
When we share personal data with other organisations we require them to keep it safe, and they must not use your personal data for their own marketing purposes.
We only share the minimum personal data that enable our suppliers and retail partners to provide their services to you and us.
For the purposes of performing the travel contract concluded with you, we transmit your personal data to, among others, the above-mentioned recipients in countries outside of the jurisdiction of European data protection laws for which the European Commission has determined that there is not an appropriate level of data protection. In particular, this transmission is carried out for the preparation of the cruise and is required due to local legal requirements to register passengers upon docking in ports. Some separate data protection agreements contracts exist with service providers who support us in carrying out the cruise. You can request copies of any existing data protection contracts from our data protection officer.
So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate.
Some countries will only permit travel if you provide your advance passenger data (for example Caricom API Data and US Secure Flight Data). These requirements may differ depending on your destination and you are advised to check. Even if not mandatory, we may assist where appropriate.
We may share the minimum personal data necessary with other public authorities if the law says we must, or we are legally allowed to do so.
For the purposes of performing the travel contract concluded with you, we transmit your personal data to, among others, the above-mentioned recipients in countries outside of the jurisdiction of European data protection laws for which the European Commission has determined that there is not an appropriate level of data protection. In particular, this transmission is carried out for the preparation of the cruise and is required due to local legal requirements to register passengers upon docking in ports.
Since 01 November 2021, tour operators are obliged to be partners of the Deutscher Reisesicherungsfonds GmbH for insolvency insurance. In the event of a clain the Deutscher Reisesicherungsfond requires all essential information about your trip in order to perform its duties. Therefore, we would like to inform you in the course of this data privacy notice what personal data we transmit to the Deutscher Reisesicherungsfond in the event of a claim:
Your data will be sent to:
Deutscher Reisesicherungsfonds GmbH
Sächsische Straße 1
10707 Berlin
E-Mail: kontakt(at)drsf.reise
www.drsf.reise
Deutscher Reisesicherungsfonds GmbH is an independent data controller according to the General Data Protection Regulation of the European Union (GDPR). Information on the collection and processing of personal data in accordance with Art. 14 of the General Data Protection Regulation (GDPR) of Deutscher Reisesicherungsfonds GmbH (available in German language only).
You have the right to information, correction, erasure or restriction of processing, data portability and objection to the processing of personal data concerning you. You also have the right to complain to a data protection authority. However, if you have questions or complaints, we ask that you first contact our corporate data protection officer at datenschutz@hl-cruises.com.
In the event that you have consented to us processing your personal data, you can withdraw this consent at any time. The processing of your data prior to the time you withdraw consent will remain lawful even if you do withdraw consent. If you would like to withdraw your consent, please write to kundendaten@hl-cruises.com and provide your customer number. Please note that, in the event of a withdrawal of your consent, processing may still be possible under certain circumstances on a legal basis, for example if this is necessary to fulfil a legal obligation or if there is a legitimate interest in further processing.
We know how important it is to protect and manage your personal data. We take appropriate security measures to help protect your personal data from accidental loss and from unauthorised access, use, alteration and disclosure.
The security of your data also depends on you. For example, where we have given you or where you have chosen a password for access to certain services, you are responsible for keeping this password confidential.
The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by organisations operating outside the EEA who work for us or for one of our suppliers. We put in place appropriate protections to make sure your personal data remains adequately protected and that it is treated in line with this Notice. These protections include, but are not limited to, appropriate contract clauses, such as standard contract clauses approved by the European Commission, and appropriate security measures.
We will retain your personal data for only as long as it is necessary for the uses set out in this Privacy Notice and/or to meet legal and regulatory requirements. After this period, we will securely erase personal data. If data is needed after this period for analytical, historical or other legitimate business purposes, we will take appropriate measures to anonymise this data.
Cookies are small data files that allow a website to collect and store a range of data on your desktop computer, laptop or mobile device. Cookies help us to provide important features and functionality on our websites and mobile apps, and we use them to improve your customer experience. Please see our separate Cookie Notice.
Our may contain links to websites operated by other organisations that have their own privacy notices. Please make sure you read the terms and conditions and privacy notice carefully before providing any personal data on another organisation’s website as we do not accept any responsibility or liability for websites of other organisations.
Thank you for your interest in the social media profiles of Hapag-Lloyd Cruises, provided by TUI Cruises GmbH.
We have the following social network channels:
Please note that by registering for the social networks, you also agree to the privacy policies of the networks in question that also apply to services such as our profiles.
Data processing and intended purpose
We take the protection of your personal data on the social networks very seriously and want you to be aware of how and why your data are stored or used.
Personal data include your name, date of birth, e-mail address and phone number. We and the companies operating on our behalf only collect and process the personal data concerning you that we obtain from you through our social media channels for the purposes of communication and only insofar as necessary for the purposes of our profiles. Specifically, we process data in the following instances:
We will erase these data after the end of the communication. The storage periods of the networks might deviate from this. The personal data you transmit to us through direct messages and contact forms will not be disclosed to third parties by us.
Please note that other users can see what you post on our profiles and how you interact with our pages, i.e. what posts you share or “Like” and so on.
If we post links to third-party websites, this privacy policy does not apply to those links.
Addendum: data processing on Facebook
Your personal data will be collected if you visit our Facebook page. If you are logged in, the data will be your Facebook profile data. In any case, the data will include your IP address and browser information.
The data will be processed by Facebook and by us as joint controllers. The data are processed on the basis of point (f), Article 6, paragraph 1, of the European General Data Protection Regulation (GDPR; our legitimate business and communicative interests in the provision of an information and communication channel on social media, in this case Facebook).
Integration of LinkedIn
Functions of the LinkedIn service are integrated on our pages. These functions are offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. If you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile by clicking on the LinkedIn button. This allows LinkedIn to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information on this can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
2-Click Solution
For some external content, including maps from OpenStreetMap, videos from YouTube and social media content, e.g. from Instagram and Facebook, we use a so-called 2-click solution to link the transmission of data to your consent. This means that external content from these providers is only loaded if you have agreed to the cookies in the „OpenStreetMap“ or „YouTube“ section or explicitly consented to the transmission before you use the service provided by these providers. If you have not (yet) consented to cookies in the „OpenStreetMap“ or „YouTube“ section, you will be shown a corresponding consent dialogue before this external content is displayed so that you can decide for yourself whether data should be transmitted to the relevant provider.
You have a right to ask for a copy of the personal data we hold about you. You can write to us asking for a copy of other personal data we hold about you.
Please include any details to help us identify and locate your personal data. Where we can provide data access, we will do so free of charge except where further copies are requested in which case we may charge a reasonable fee based on administrative costs.
We want to make sure that the personal data we hold about you is accurate and up to date. If any of the details we hold are incorrect, please let us know.
You can also ask for your personal data to be rectified or erased, to object to the processing of your personal data and, where technically feasible, to ask for personal data you provided to be transmitted to another organisation.
We will update or erase your data, unless we have to keep it for legitimate business or legal purposes.
You can also contact us if you have a complaint about how we collect, store or use your personal data. We aim to resolve complaints but if you are dissatisfied with our response, you may complain to the local data protection authority https://www.datenschutz-hamburg.de/.
Please submit your request or complaint in writing to the Legal Department/Data Protection Officer:
Hapag-Lloyd Cruises, a TUI Cruises GmbH company, Datenschutz, Heidenkampsweg 58, 20097 Hamburg
E-Mail: datenschutz@hl-cruises.com
Please note that we may ask you to verify your identity before we can act on your request or complaint. We may also ask you for more information to help ensure that you are authorised to make such a request or complaint when you contact us on behalf of someone else.
We will only collect and use your personal data if at least one of the following conditions applies:
Example: Booking
You give us permission to process your personal data when you book a trip.
Example: To provide the products and services you request
We need to process your personal data so that we can manage your booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for.
Example: Sharing personal data with regulatory authorities
So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate.
Example: In an emergency
Your insurance company, their agents and medical staff may exchange relevant personal data and special categories of personal data with us in circumstances where we/they need to act on your behalf or in the interest of other customers or in an emergency.
Example: Security operations
We may use personal data to respond to and to manage security operations, accidents or other similar incidents, including medical and insurance purposes.
Example: To personalise your experience
We may use your personal data to better understand your interests so that we can try to predict what other products, services and information you might be most interested in. This enables us to tailor our communications to make them more relevant and interesting for you.
Where we need to process special categories of personal data, for example health data for medical reasons, we will only do so if one or more additional conditions apply. For example, we have your explicit consent; it is necessary to protect the vital interests of you or another individual and you are physically or legally incapable of giving consent; it is necessary to establish, exercise or defend legal claims; it is necessary for reasons of substantial public interest.
This Notice replaces all previous versions. We may change the Notice at any time so please check it regularly on our website(s) for any updates. If the changes are significant, we will provide a prominent notice on our website(s) including, if we believe it is appropriate, electronic notification of Privacy Notice changes.
Last update: Dezember 2024
Data controller: The data controller determines the purpose and manner in which personal data is used.
European Economic Area (EEA): EU Member States plus Norway, Iceland and Lichtenstein.
Online advertising: Marketing messages that you may see on the internet.
Special categories of personal data: This are categories of personal data revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data, biometric data for the purpose of uniquely identifying a natural person; health data; and data concerning a natural person’s sex life or sexual orientation.
Caricom API Data: Some or all of the Caricom states have entered into an agreement with the USA whereby advance passenger data, required by and provided to Caricom states for border security purposes, will be passed to the USA Department for Homeland Security for processing on behalf of those Caricom states. Please see the Caricom website Caricom webseitef or more details.
US Secure flight Data:The Transportation Security Administration (TSA) requires you to provide your full name, date of birth and gender for the purpose of watch list screening. You may also provide your Redress Number, if available. Failure to provide details may result in denial of transport or denial of authority to enter the boarding area. TSA may share information you provide with law enforcement or intelligence agencies or others under its published system of records notice. Please see the TSA webseite for more details.
Cookie-notice
Cookies are small data files that allow a website or a mobile app to collect and store a range of data on your desktop computer, laptop or mobile device. Cookies help us to provide important features and functionality on our websites and mobile apps, and we use them to improve your customer experience. With our permission, cookies may be placed on our websites and mobile apps by other organisations. For example, we use cookies to do the following:
To improve the way our websites and mobile apps work
Cookies allow us to assess and improve the way our websites and mobile apps work so that we can personalise your experience and allow you to use many of their useful features. For example, cookies help us to keep track of what you are booking as you move through each stage of the booking process; they help us to remember your preferences such as recent searches or shortlisted holidays, and the contents of your online shopping basket.
To improve the performance of our websites and mobile apps
Cookies can help us to understand how our websites and mobile apps are being used, for example, by telling us if you get an error messages as you browse, to test different designs of our website and mobile app pages. Website analytics, including Google Analytics, provides information about the number of visitors to our website and mobile apps, which parts of our website and mobile apps are most popular and if there are any trends such as one specific page being viewed mostly by people in a particular country. These cookies help us to improve your experience.
To deliver relevant online advertising
We use cookies to help us deliver online advertising that we believe is most relevant to you on our websites, mobile apps and other organisations’ websites. For example, these cookies help us to suggest flights from your nearest airport, holidays in destinations you have shown interest in or products you might like.
These cookies may collect data about your online behaviour, such as your IP address, the website you arrived from and information about your purchase history or the content of your shopping basket.
This means that you may see our adverts on our websites, mobile apps and on other organisations’ websites. You may also see adverts for other organisations on our websites and mobile apps.
To help us to deliver online advertising that is relevant to you, we may also combine data we collect through cookies in the browser of your devices with other data that we have collected.
To measure the effectiveness of our marketing communications, including online advertising
Cookies can tell us if you have seen a specific advert, and how long it has been since you have seen it. This information allows us to measure the effectiveness of our online advertising campaigns and control the number of times you are shown an advert so it does not become too repetitive. We also use cookies to measure the effectiveness of our marketing communications, for example by telling us if you have opened a marketing email that we have sent you.
We process personal data for the purposes of online marketing, which may include in particular the marketing of advertising space or the display of advertising and other content (collectively referred to as "Content") based on the potential interests of users and the measurement of their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (so-called "cookie") or similar procedure in which the relevant user information for the display of the aforementioned content is stored. This information may include, for example, content viewed, websites visited, online networks used, communication partners and technical information such as the browser used, computer system used and information on usage times. If users have consented to the collection of their sideline data, these can also be processed.
The IP addresses of the users are also stored. However, we use provided IP masking procedures (i.e. pseudonymisation by shortening the IP address) to ensure the protection of the user's by using a pseudonym. In general, within the framework of the online marketing process, no clear user data (such as e-mail addresses or names) is secured, but pseudonyms. This means that we, as well as the providers of online marketing procedures, do not know the actual identity of the users, but only the information stored in their profiles.
The information in the profiles is usually stored in the cookies or similar memorizing procedures. These cookies can later, generally also on other websites that use the same online marketing technology, be read and analyzed for purposes of content display, as well as supplemented with other data and stored on the server of the online marketing technology provider.
Exceptionally, clear data can be assigned to the profiles. This is the case, for example, if the users are members of a social network whose online marketing technology we use and the network links the profiles of the users in the aforementioned data. Please note that users may enter into additional agreements with the social network providers or other service providers, e.g. by consenting as part of a registration process.
As a matter of principle, we only gain access to summarised information about the performance of our advertisements. However, within the framework of so-called conversion measurement, we can check which of our online marketing processes have led to a so-called conversion, i.e. to the conclusion of a contract with us. The conversion measurement is used alone for the performance analysis of our marketing activities.
Unless otherwise stated, we kindly ask you to consider that cookies used will be stored for a period of two years.
Information on legal basis:
If we ask users for their consent (e.g. in the context of a so-called "cookie banner consent"), the legal basis for processing data for online marketing purposes is this consent. Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online services. In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Services and service providers being used
OneTrust
Hapag-Lloyd Cruises uses OneTrust, OneTrust Technology Limited, 82 St John Street, London, England, EC 1m 4JN, as a consent management tool. This tool ensures that we can manage your consent on the website for the use of tracking technologies, for example. This involves processing your IP address, browser ID and information about the consent you have given. If consent is given, further information such as country, browser and device type will be processed. The legal basis for this is the implementation of Section 25 (1) TDDDG. The cookie remains stored for a period of one year. You can find OneTrust's privacy policy here: https://www.onetrust.com/privacy-notice/
Google Tag Manager
Google Tag Manager is a web tag management solution that allows us to manage website tags through a single interface (including Google Analytics and other Google marketing services in our online services). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, reference is made to the information below regarding Google services.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy. Learn more about how Google processes personal information: business.safety.google/privacy
Google Analytics
Google Analytics, a web analytics service provided by the third-party provider Google Ireland Limited (a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland), is used for the purposes of designing the website to meet requirements, measuring reach, analyzing the general usage behavior of users on the website and optimizing economic operations. Google Analytics uses so-called “cookies”. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored on servers of Google.
The use of Google Analytics is the joint responsibility of Google and the website operator. An agreement on data processing has been concluded with Google for this purpose, which currently assigns full responsibility to both parties for the processing assigned to them. Google merges your usage data with usage data collected elsewhere and uses the resulting profiles to display personalized advertising and to provide analyses. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
The data processed by Google includes your device settings and device data, the exact usage times of individual elements of this site and thus your usage behaviour. Further information on the use of data by Google, setting and objection options can be found on the Google websites: https://business.safety.google/privacy (“Processing of personal data by Google”); policies.google.com/technologies/partner-sites;(‘Data use by Google when you use our partners’ websites or apps") policies.google.com/technologies/ads („Technologies and principles / Advertising“) adssettings.google.com/authenticated; („Settings for advertising“)
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout.
Please note that the use of the browser plugin is limited to the respective browser and also to the respective computer and may not be deactivated or deleted after installation in order to maintain the deactivation of Google Analytics. Google's privacy policy can be viewed at https://policies.google.com/privacy.
Google Remarketing
To generate interest-based online advertising, the websites use remarketing with Google Analytics and Google signals. Our adverts are placed on websites by third parties, including Google. We and third parties, including Google Ireland Limited (a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland), use first-party cookies (e.g. Google Analytics cookies) in combination with third-party cookies (e.g. DoubleClick cookies) to target, optimise and serve ads based on a user's past visits to our website. We use Google Analytics reports on performance by demographics and interests. We use the data obtained from interest-based advertising from Google and visitor data from third-party providers (e.g. age, gender, interests, cross-device) in Google Analytics for marketing purposes and to continuously improve our offering. The legal basis is your consent, Art. 6 para. 1 lit. a GDPR. Google Remarketing is assigned to the category ‘Third-party services’. You can also object to the use of Google Remarketing directly to the service provider by preventing the setting of cookies by Google and/or Doubleclick or by using Google's opt-out options.
Learn more about how Google processes personal information: business.safety.google/privacy
You can find more information about advertising from Google here: https://policies.google.com/technologies/ads.
You can also configure and prevent remarketing by Google via this website: https://myadcenter.google.com/personalizationoff.
Google Ads and Conversion Tracking
We use the “Google Ads" online marketing method to place ads on the Google advertising network (e.g., in search results, videos, websites, etc.) so that they are displayed to users who have an alleged interest in the ads. We also measure the conversion of the ads. However, we only know the anonymous total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we ourselves do not receive any information that can be used to identify users.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: marketingplatform.google.com; Privacy Policy: policies.google.com/privacy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): Privacy noticehttps://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Further information on how Google processes personal data: business.safety.google/privacy
Microsoft Advertising (formerly Bing Ads)
We use Microsoft Advertising to serve ads to Bing and other Microsoft advertising partners so that they are displayed to users who have a presumed interest in the ads. We also measure the conversion of the ads. However, we only learn the total number of anonymous users who clicked on our ads and were redirected to a page with a conversion tracking tag. We do not receive any information that can be used to identify users.
Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Website: about.ads.microsoft.com/de-de; Privacy Policy: privacy.microsoft.com/de-de/privacystatement; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): www.privacyshield.gov/participant; Opt-Out: https://choice.microsoft.com/de-DE/opt-out
Exactag GmbH
We use the services of Exactag (Exactag GmbH, Wanheimer, Straße 68, D-40468 Düsseldorf) on our website. Exactag GmbH ("Exactag") collects, processes and stores data on this website and its subpages for reach measurement, statistical analysis and business cost optimisation.
The data is collected with the consent of the user on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 sentence 1 TTDSG. Exactag uses cookies as a technology to collect the data.
Would you like to object to data processing?
In order to ensure exclusion from data processing, a cookie can be set in your browser as an alternative to the lack of consent in the data protection settings. This cookie is called "optout" and is set by "exactag.com". It may not be deleted as long as you object to the data processing. If you wish to object to this data processing for the future, please click on this link https://exactag.com/optout-confirmation/
Exactag GmbH - Attribution Push
We use the attribution push function of Exactag (Exactag GmbH, Wanheimer, Straße 68, D-40468 Düsseldorf). Attribution results are transmitted to selected technology and advertising partners in order to optimise marketing measures directly in the respective partner systems. Only pseudonymised data is transmitted. In addition, the transmission takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. No data will be passed on without your consent.
Flockler
Our websites use technologies from Flockler, Rautantienkatu 21 B, 33100, Tampere, Finland, to provide you with prepared social media content. The user's IP address is temporarily stored in the AWS cloud or Cloudfront used by Flockler in order to avoid abusive requests. The data is collected on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 para. 1 sentence 1 TDDDG. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie consent tool provided on the website. Your data will not be transferred to third countries. The AWS services (Cloudspace) used by Flockler are located in Germany or within the European Union.
Meta
The digital marketing social teams work with third-party provider Meta to run advertising campaigns - both for brands and paid activities - on Meta's social networks, including Facebook and Instagram. Meta event tracking allows the marketing team to measure and optimize the effectiveness of their campaigns and adjust spending and targeting accordingly.
Meta-Pixel
Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. Together with the third-party provider Meta, we are responsible for the processing of your personal data in the context of the processing of your personal data on our online offer via Meta Pixel. You can access the main contents of the agreement at any time at the following link: www.facebook.com/legal/controller_addendum. In particular, it regulates which security measures Meta must observe (https://www.facebook.com/legal/terms/data_security_terms) and how data subjects' rights can be asserted against Meta.
Meta processes your personal data on the basis of your consent via the Meta pixel to create campaign reports, track conversions, click events and targeted advertising outside our websites (retargeting) using HTTP headers (including IP address, device and browser characteristics, URL, referrer URL, your person), pixel-specific data (including pixel ID and Facebook cookie), click behavior, optional values (e.g. conversions, page type), form field names (such as "email", "address", "quantity" for the purchase of a product or service). We do not receive any personal data from you from Meta, only anonymized campaign reports about the website target group and ad performance. You can opt out of receiving interest-based ads from Meta by changing your advertising preferences on the Facebook website. You can find more information at: www.facebook.com/policy.
Newsletter
see https://www.hl-cruises.com/legal/privacy-notice (Marketing communications)
Shariff
We use the privacy-secure "Shariff" buttons. "Shariff" was developed to provide more privacy on the net and to replace the usual "share" buttons of social networks. It is not the browser of the user, but the server on which this online offer is located, which establishes a connection with the server of the respective social media platforms and queries, for example, the number of Likes, etc.. The user remains anonymous. More information about the Shariff project can be found at the developers of the magazine c't: www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html. Service provider: Heise Medien GmbH & Co. KG, Karl-Wiechert-Allee 10, 30625 Hannover, Germany; Website: www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html; Privacy Policy: www.heise.de/Datenschutzerklaerung-der-Heise-Medien-GmbH-Co-KG-4860.html
Telebalance
Our websites use cookies/advertising IDs from EssenceMediacom Germany GmbH, Völklinger Straße 33, 40221 Düsseldorf, Germany, for advertising purposes. Cookies, beacons, pixels, tags, mobile SDKs and other non-cookie technologies may be used to collect information related to a browser or mobile device.
We have integrated services from EssenceMediacom Germany GmbH, with whom we have a data processing agreement.
Data collection is carried out with the user's consent on the basis of Art. 6 (1) lit. a GDPR, § 25 (1) sentence 1 TDDDG. EssenceMediacom Germany GmbH uses cookies as a technology to collect the data. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the cookie consent tool provided on the website. For the transfer of data to third countries, the provider refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.
Further information on EssenceMediacom Germany GmbH's targeting technology, the privacy policy and opt-out options can be found at: https://www.essencemediacom.com/pages/privacy-policy
OpenStreetMap
We integrate the maps of the ‘OpenStreetMap’ service, which are offered on the basis of the Open Data Commons Open Database Licence (ODbL) by the OpenStreetMap Foundation (OSMF). The user data is used by OpenStreetMap exclusively for the purpose of displaying the map functions and for caching the selected settings. This data may include, in particular, users' IP addresses and location data, which, however, are not collected without their consent (usually as part of the settings of their end devices or browsers); service provider: OpenStreetMap Foundation (OSMF); Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.openstreetmap.de. Privacy Policy: https://osmfoundation.org/wiki/Privacy_Policy.
Change your cookie settings at Hapag-Lloyd Cruises
Sie können außerdem Ihre Browser-Einstellungen nutzen, um neue Cookies zu akzeptieren oder abzulehnen, und bestehende Cookies zu löschen. Sie können Ihren Browser auch so einstellen, dass er Sie jedes Mal benachrichtigt, wenn neue Cookies auf Ihrem Computer oder einem anderen Gerät gespeichert werden. Ausführlichere Informationen darüber, wie Sie Cookies verwalten können, finden Sie auf den Webseiten All About Cookies und Your Online Choices.
Wenn Sie sich dafür entscheiden, einige oder alle Cookies zu deaktivieren, werden Sie von unseren Webseiten unter Umständen nicht den vollständigen Gebrauch machen können. Zum Beispiel könnten Sie eventuell keine Artikel Ihrer Merkliste hinzufügen, nicht zum Buchungsabschluss gehen oder Buchungsdaten einsehen. Sofern wir personalisierte Werbung auf Webseiten anderer Unternehmen zeigen, wird normalerweise das AdChoices-Icon angezeigt. Beim Anklicken dieses Icons wird Ihnen eine spezielle Anleitung darüber bereitgestellt, wie Sie ihre Einstellungen zu Online-Werbung kontrollieren können. Mehr Informationen sind auf der YourAdChoices-Webseite verfügbar.
This Notice replaces all previous versions. We may change the Notice at any time so please check it regularly on our website(s) for any updates. If the changes are significant, we will provide a prominent notice on our website(s) including, if we believe it is appropriate, electronic notification of Cookie Notice changes..
Last update: December 2024
Technisch notwendige Cookies
We require necessary cookies so that you can move through our website and use its functions. Without them, the functioning of our website would be restricted and faulty. You cannot disable necessary cookies.
fe_typo_user
Is set by our website editing system TYPO3. Used to identify a TYPO3 user. Duration: session.
FedAuth
Used by Hapag-Lloyd Cruises to give private and business visitors access to certain content. Duration: Session.
hlkf_agency
Used by Hapag-Lloyd Cruises. Is necessary to deliver tailor-made offers to partner travel agencies. Duration: a few hours.
hlkf_is_agency
Used by Hapag-Lloyd Cruises. Is necessary to deliver tailor-made offers to partner travel agencies. Duration: a few hours.
hlkf_code
Used by Hapag-Lloyd Cruises. Is necessary for catalogue orders to be processed correctly. Duration: a few hours.
hlkf_country
Used by Hapag-Lloyd Cruises to store the country or language version of the website. Is necessary to book a cruise online. Duration: a few hours.
hlkf_currency
Used by Hapag-Lloyd Cruises to store the desired currency. Is necessary to book a trip online. Duration: a few hours.
hlkf_rds_current_tab
Is used by Hapag-Lloyd Cruises to load the desired tab when the page is called up again. If no cookie is set, the standard tab (= overview) is displayed. If the tab was changed, e.g. to "The Ship", "The Ship" will be selected again when the page is reloaded. However, as soon as you close the window completely, the cookies will be deleted again, so that when you visit the page again, you will land on "Overview" again. Duration: a few hours.
hlkf_rds_last_tab
Is used by Hapag-Lloyd Cruises to load the desired tab when the page is called up again. If no cookie is set, the standard tab (= overview) is displayed. If the tab was changed, e.g. to "The Ship", "The Ship" will be selected again when the page is reloaded. However, as soon as you close the window completely, the cookies will be deleted again, so that when you visit the page again, you will land on "Overview" again. Duration: a few hours.
Netmatch_Navigation_Session
Used by Hapag-Lloyd Cruises to facilitate the various steps of the booking process. Duration: 1 day.
OptanonConsent
Is used by OneTrust. Saves which cookies you have agreed to on our website. The cookie contains no personal information. Duration: 1 year.
OptanonAlertBoxClosed
Is used by OneTrust. Contains a timestamp of when the approval was given. Duration: 1 year.
Statistic cookies
Statistics cookies help us to understand how our users interact with our website by collecting information and sending it to our statistics partners.
_dvp
Is set by our Clickstream Data Collector Devolte and used for internal statistics Used to understand visitor behaviour in our booking route to make it even easier to use. Duration: 2 years.
_dvs
This session cookie is set by our Clickstream Data Collector Devolte and used for internal statistics. It is used to understand the behaviour of visitors in our booking route to make it even easier to use. Duration: Session.
Marketing cookies
We use marketing cookies to determine your interests and adapt advertisements to your personal needs. In addition, we use marketing cookies to measure the effectiveness of advertisements.
session_session
Used by Exactag. Contains a self-generated session ID. Duration: session.
exactag_new_uk
Used by Exactag. Contains the Exactag user key in the form of a 32 bit hash value. Duration: 6 months.
exactag_new_user
Used by Exactag. Contains information about user categories such as customer type, whether an order process was started, or the last timestamp. Duration: 6 months.
et_uk
Used by Exactag. Writes a 1st party cookie with the UserID as value. Used when 3rd party cookies are not supported by the browser. Duration: 6 months.
et_gk
Used by Exactag. The GroupKey contains a 32-bit hash value for a group of many users, valid for all campaigns per tracking domain. The cookie serves as a statistical tracking pixel. It contains only anonymized data, which is not considered personal data. Duration: 3 months.
exactag_new_gk
Used by Exactag. Contains a UserID in the form of a 32bit hash value that is used across all campaigns. Duration: 3 months.
tr
Is used by Meta Platforms Ireland Ltd. Meta can use it to display advertising products, for example real-time offers. Duration: session.
fr
Is used by Meta Platforms Ireland Ltd. Meta can use it to provide marketing functionalities. Stores encrypted Meta ID and browser ID. Duration: 90 days.
_fbp
Is used by Meta Platforms Ireland Ltd . Used by Meta and contains a unique ID. This is used to recognize user behavior and measure the success of Meta advertising measures and to deliver a range of advertising products, such as real-time bids from third-party providers. Duration: 90 days.
datr
is uesd by Meta Platforms Ireland Ltd. Meta can use it for fraud prevention - information about the browsing device. duration: 1 year.
sb
is uesd by Meta Platforms Ireland Ltd. Meta stores browser details and device information. Duration: 1 year.
wd
is uesd by Meta Platforms Ireland Ltd. Meta captures screen resolution. Duration: 1 week.
Third-party services (joint responsibility or third-party providers under their own responsibility)
Hapag-Lloyd Cruises collaborates with third-party companies. These service providers offer services in which data is either used under their own responsibility or under joint responsibility with Hapag-Lloyd Cruises. You can find separate information on this in our data protection information under "Privacy notice / online marketing".
ads/ga audiences
Used by Google Ads. Service used to identify visitors to this website and its statistical twins and to reach external websites with tailored ads.
gtm_page_view
Used for Google Ads Event Tracking. Contains the number of Page Views per Session. Duration: 30 min.
gcl_au / gclxxx
Used by Google Ads. Contains a unique, randomly generated user ID that is used to identify user behavior and measure sales. Duration: 90 days.
test_cookie
Is set by Google Ads in the course of remarketing and sales tracking. Checks if the browser allows the setting of cookies. Duration: Session.
IDE
Is set by Google Ads in the course of remarketing and sales tracking. Contains a randomly generated user ID. Allows Google to recognize visitors to this website on other websites and to display personalized ads to them. Duration: 1 year.
uetsid
Used by Microsoft Ads (formerly Bing Ads). Service to recognize the user and measure the sales of ads at Bing. Duration: Session.
MUID
Used by Microsoft Clarity and triggered by Microsoft Ads (formerly Bing Ads). Stores a unique user ID and is used to recognize user behavior. Duration: 13 months.
MUID
Used by Microsoft Ads (formerly Bing Ads). Stores a unique user ID and is used to identify user behavior and measure revenue. Duration: 1 year.
_clck
Used by Microsoft Clarity and triggered by Microsoft Ads (formerly Bing Ads). Stores the Clarity User ID and settings unique to that website in the browser. This allows the behavior to be associated with the same User ID on revisits. Duration: 1 day.
_clsk
Used by Microsoft Clarity and triggered by Microsoft Ads (formerly Bing Ads). Combines multiple page views from a user into a single Clarity session record. Duration: 1 day.
SM
Used by Microsoft Clarity and triggered by Microsoft Ads (formerly Bing Ads). Used to synchronize the MUID between Microsoft domains. Duration: Session.
SRM_B
Used by Microsoft Clarity and triggered by Microsoft Ads (formerly Bing Ads). Duration: 13 months.
ANONCHK
Used by Microsoft Clarity and triggered by Microsoft Ads (formerly Bing Ads). Contains the information whether the MUID (Microsoft User ID) was passed to the ANID cookie. Microsoft Clarity does not use ANID, so this value is always set to 0. Duration: 1 day.
_dc_gtm_UA-xxxxxxxx
Is used by Google Analytics, which is delivered via the Google Tag Manager. This cookie does not store any user data. It is used to minimize queries to Google. Duration: 1 minute.
_ga
Is used by Google Analytics. Creates a unique, randomly generated user ID that is used to identify the visitor and expires after 2 years. This makes it possible, for example, to recognize returning visitors.
_gat
Is used by Google Analytics. This cookie does not store any user data. It serves to minimize the queries to Google. Duration: 1 minute
_gid
Is used by Google Analytics. Similar to the _ga cookie. Contains a unique, randomly generated user ID that is used to identify user behavior. Duration: 1 day.
_HC_6924
Is set by telebalance. This click cookie stores info about click request ID, client ID, channel ID and expiration date. It is used to determine the conversion/lead attribution.
Duration: 30 days
_HC_v6924
Is set by telebalance. This visit state cookie is used as short-term storage of information about an active session. It is used to match all interactions of a given user to a specific visit.
Duration: 30 minutes
_HC_uu
Is set by telebalance. This unique user cookie is used to match all interactions of a given user to a unique ID across different visits.
Duration: 1 year
_HC_fr
Is set by telebalance. This call minimization cookie shows whether the cross-device tracking parameter was already checked.
Duration: Session
The European Commission provides a platform for the online resolution of consumer disputes under http://ec.europa.eu/consumers/odr/. Hapag-Lloyd Cruises, a TUI cruises GmbH company is currently not participating in this voluntary procedure for alternative dispute resolution, which is why the European online dispute resolution platform cannot be used by our customers.