Privacy Policy

 
PRIVACY INFORMATION NOTICE

pursuant to Articles 13 and 14 of the Regulation (EU) 2016/679

The MSC Foundation collects and process information, including some personal information, about its users/visitors. The personal data processing is carried out in accordance with the principles of the Regulation (EU) 2016/679 (the General Data Protection Regulation, hereafter “GDPR”).

Categories of personal data processed

During the process for user creation and collecting the donations, data subjects are required to provide their full name, email and postal address, mobile phone and date of birth.

Additionally, to perform the payments, the credit card details are also needed to conclude the donation agreement

Users have the option to agree to the terms of service and to read the present privacy policy as well as opt in to receive information (newsletter) from the MSC Foundation.

If organizations decide to become a partner, in addition to the information mentioned above, users will require to provide the name of the organization and the representative’s job title.

Finally, users can utilize the contact us adding the reason for contacting and the message they want to send across.

Purpose of Data Processing

We process personal data within this website to inform the public about the commitment and mission of the MSC Foundation for a better planet, to show and promote the MSC Foundation projects and the related causes (marine protection, helping communities, emergency relief, etc.) and to collect donation for the projects where the foundations is engaged.

The data processed is required to conclude the donation agreements and to identify the users within the website, that is, within the scope of contract fulfilment and performance, we process the data that you provide to us upon formation of the contract or in the course of the contractual relationship.

If you have provided us with your consent to process data, we do so for the purposes informed hereby.

The consent that you have provided may be revoked at any time.

Do I have to give you my data?

In the context of the donation (contractual relationship), you must provide the personal data that is necessary for the performance and fulfilment of the contract. Failure to provide the data would result in the impossibility to conclude the donation.

The same applies to the newsletter, becoming a partner and contacting us as we need a minimum set of information to individualize users and manage the website functionalities.

Cookies
Technical cookies

Required for navigation within the site and to use some of its functions (e.g. timing the display of certain pages in so-called “pop-up” mode etc.).

Statistical cookies (Google Analytics)

Supplied and managed by Google to provide a statistical analysis of access to the website. The information is solely collected anonymously and in aggregate form and no personal user data is retained. You can decide not to use Google Analytics cookies by following the instructions at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Profiling cookies

Supplied and managed by third parties to generate specific advertising messages based on browsing habits and the interests of individual users. These cookies do not, however, use sensitive user data. This Website currently uses Google Doubleclick cookies. For more information, including information to opt out from the cookie, please click the following link: http://www.google.com/policies/technologies/ads/

Cookie opt-out

Cookie functions can be disabled via the appropriate page made available by the EDAA (European Interactive Digital Advertising Alliance) http://www.youronlinechoices.com/ or by checking the "Privacy" settings of your Internet Browser.

Please note that disabling cookies may impair the correct functioning of the certain website sections.

Data retention

In accordance with Article 5.1(e) GDPR, the personal data that we collect is kept in a form which permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are collected and processed in each specific case, and in any case not longer than as specified by the relevant applicable laws.

We have defined a Corporate Data Retention Policy that specifies the time frame for data processing at the end of which all copies of the personal data are either destroyed or anonymised using adequate techniques that do not permit the re-identification of the data subject.

Data subject rights

MSC Cruises have appointed a Data Protection Officer (DPO) and appropriate means to process Data Subject Requests (DSRs), which can be reached in this link.

In accordance with articles 15-22 of the GDPR, the data subject has, at any time, the right to:

  • Obtain access to his/her personal data;
  • Request the rectification or deletion of personal data or the restriction of data processing;
  • Oppose the treatment of personal data;
  • Receive his/her personal data in a structured format of common use and readable by an automatic device;
  • File a complaint with the relevant data protection authority (taking into account the place of residence of the data subject or the place of supplying of the services), in accordance with article 77 of GDPR, if he/she believes that the processing of personal data is in violation of the GDPR.

Notwithstanding the right of the data subject to oppose the processing of some or all of his/her personal data, the Data Controllers reserve the right to evaluate the request, which will not be accepted in case the legitimate reasons of the Data Controllers prevail over the rights and interests of the data subject.

If you have any questions about this Privacy Notice and how we treat your data, please contact dpo@msccruises.com