Privacy Notice

Carnival Corporation Ltd. PRIVACY NOTICE

Last Updated: 09/01/2026

PDF VERSION

We recognize that your privacy is important.  Your choice to share information with us is an important part of how we provide a world-class travel experience.  We’ve developed this Privacy Notice to explain how your personal information is collected, used, stored, processed, transferred, and disclosed by Carnival Corporation Ltd, both online and in the real world.  

Our Services.  This Privacy Notice applies to our websites and applications, including CarnivalCorp.com and any other website, mobile application, or other online service that links to this Notice (collectively, our “Sites”) and describes how we collect, use and process your personal information in connection with our Sites, marketing and promotional activities and your interactions with us before, during and after one of our travel experiences (collectively with our Sites, our “Services”). 

Please note that this privacy notice does not apply to our processing of information about employees, crew, contractors or our vendor contacts.

By providing us with your personal information or otherwise using our Services, you acknowledge that you have read, understood and agree to the terms of this Privacy Notice and our Terms of Service.

Click on the links below to jump to each section:

1. WHO WE ARE
2. HOW WE COLLECT AND USE YOUR INFORMATION
3. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING
4. HOW WE SHARE YOUR INFORMATION
5. CHOICES ABOUT YOUR INFORMATION
6. CHILDREN’S PRIVACY
7. REGION-SPECIFIC DISCLOSURES
8. HOW WE PROTECT YOUR INFORMATION
9. TSA SECURE FLIGHT NOTICE
10. LINKS TO THIRD-PARTY SERVICES
11. CHANGES TO OUR PRIVACY NOTICE
12. QUESTIONS? COMMENTS? CONTACT US

WHO WE ARE

Carnival Corporation Ltd, for simplicity, when we refer to “[CARNIVAL CORPORATION ]”, “we”, “us” or “our” in this Privacy Notice, we refer to Carnival Corporation Ltd and its affiliates. When you use our Services or otherwise interact with us, you may be interacting with Carnival Corporation Ltd.  or one of its affiliates. The entity that you interact with will be the controller of your personal information, meaning they determine and are responsible for how your personal information is used. 

You can also contact our Data Protection Officer for each brand: 

Aida: datenschutz@aida.de

Carnival: Privacy@Carnival.com 

Costa: Privacy@Costa.it

Cunard: Privacy@CarnivalUKgroup.com

Holland America: Privacy@HollandAmerica.com

P&O Cruises: Privacy@CarnivalUKgroup.com

Princess: Privacy@PrincessCruises.com

Seabourn: Privacy@Seabourn.com

HOW WE COLLECT AND USE YOUR INFORMATION

We collect personal information in various ways, for example, when you visit our online sites and services, book travel, create an account, enjoy our travel experiences while on a voyage, communicate with us or otherwise engage with our Services. All of the information collected through our Services may be combined to provide a seamless, personalized experience, regardless of how you interact with us. 

Keep reading to learn more about how we collect personal information you provide to us directly, information we collect through your use of the Services or your travel experience, and information we receive through third parties, and the purposes for which we use your information. 

If you provide information about others when you submit a booking or enquiry, such as if you are booking on behalf of several travelers or making a booking as a gift, you should ensure that you have their permission to provide their information to us and that they are aware of how we will use it.

1. Information we collect when you make a booking or otherwise contact us.  

• REGISTRATION & PROFILE. If you sign up for an account or fill out your traveler profile, we collect information like your name and contact details (including communications preferences). We use this information to manage your account, provide services, communicate with you (including to send personalized marketing), offer rewards and our loyalty program, and help with customer support. Calls we make to you or that you make to us may be placed or answered by human and automated callers, and recorded, transcribed and analyzed (including using artificial intelligence) for training and monitoring purposes.

• TRAVEL BOOKINGS & ORDERS.  If you book travel or order products with us, we collect information like your name, contact details, payment info, credits, discounts and voucher codes, participation in membership programs, information about the products and services you purchase, passport or other travel documentation details, travel itinerary and preferences and any health-related information you share. We use this information to process your order, ship any purchased products, book your travel plans, validate your identity and ability to travel, allow you to manage your bookings and travel via your account and communicate with you and your travel companions about your itinerary. We use your payment info and information about the products and services you purchase to fulfil your purchase, detect fraud and to comply with any anti-money laundering obligations we may have, as well as to investigate and resolve chargebacks or disputed transactions. We may also collect information regarding any criminal offences or court orders and notices concerning you. We collect this information to ensure the safety and security of others onboard in accordance with the applicable brand’s Terms of Service. In some cases, information we collect may require us to, or give us the right to, deny booking or boarding to guests in order to ensure the safety and security of our staff and guests onboard.  

• INQUIRIES & COMMUNICATIONS. If you contact us to request information like an itinerary, deck plan, brochure, or video, or otherwise communicate with us (including via calls to our customer service call center or live chat), or if we contact you, we collect your name, contact details, and any other information you include in your message or relevant to our interaction. Your call may be received or placed by a human or automated caller, and we may record, analyze and transcribe calls made to our customer service call center (including using artificial intelligence) for training and monitoring purposes. We use this information to respond to your questions, help you communicate with us and other guests, provide the information you requested, train and monitor our customer service staff, improve our services, and grow our business. 

• SURVEYS, FOCUS GROUPS & SWEEPSTAKES.  If you take part in a promotion, fill out a survey, participate in a focus group or enter a contest, we collect your name, contact details, and any other information you provide. We use this information to manage the relevant survey, contest, focus group or sweepstake, communicate with you about the survey, contest, focus group or sweepstake, do market research, improve our marketing, and identify ways in which we can improve and grow our business. If you provide feedback during or after you have travelled with us in response to a satisfaction survey, we may invite you to post this feedback as a public review. Please refer to the relevant review platform’s privacy notice for information about how they use any personal information you provide.

• REFERRALS. When you participate in our referral program, we collect information including name, contact information, details of referrals you have made or received on the Service and any credits you receive as part of the program. We use this information to operate our referral program and to reward participation in the program.

In addition to the uses described above, we may collect and use personal information for the following purposes:

• To analyze, research, investigate, and improve the use of our Services and interactions with our guests.
• To identify your preferences and interests in order to provide you with a personalized experience of our Services, inform our, and our partners’ personalised advertising activities and personalize our communications (including marketing communications) with you.
• To prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services, and to comply with legal requirements, obligations and other governmental demands, as well as investigate and resolve disputes and security issues and to enforce the applicable brand’s Terms of Service and any other contracts you have entered into with us.

You may provide personal information for yourself and those traveling with you.  By providing us with the travel or contact information of any third party, you confirm that you have the authority to do so on their behalf and have provided them with the information set out in this Privacy Notice.  The personal information of each person whose personal information is linked to the same travel itinerary may be accessible by all others included in that same itinerary.

2. Information we collect when you travel with us.

When you take part in the Services aboard one of our ships or at one of our properties, we collect information about your visit, including information about your interactions with our staff, programming and with the technology-enhanced features of our ships and hotels.  

There are a few different types of vacation experiences where we may collect and use your information.

• PASSENGER INFORMATION. We will collect your name, address, date of birth and passport or other ID details. Where required, we may also collect information about any visas or other travel authorizations you hold. We use this information, together with information about your itinerary and travel arrangements, to verify your identity, grant you access to our vessels and comply with our obligations under applicable immigration law, including verifying eligibility to travel and reporting advanced passenger information to appropriate authorities. We may collect information about medical conditions, dietary restrictions, disabilities or special assistance needs in order to ensure that we can meet any medical, dietary and mobility assistance needs. We may also collect information regarding any criminal offences or court orders and notices concerning you. We may use information regarding medical conditions, disabilities, special assistance needs and criminal offences to ensure your safety and security and those of others onboard in accordance with the applicable brand’s Terms of Service. In some cases, this information may require us to, or give us the right to, deny boarding to guests in order to ensure their safety and security and those of our staff and other guests onboard.  

• AMENITIES, EXCURSIONS & ADD-ON SERVICES.  If you use our amenities, attend excursions or buy things or Services on board, we collect your name, contact information, account details, onboard credit information, travel details, payment info (including how you pay) and purchase information. For some services, we may also need your health information. If you use your Shipboard card to use our amenities, attend excursions or buy things or Services on board, we will also collect information regarding the date / time you use your Shipboard card and your connected account information. We use this information to process your purchase, for fraud prevention and to satisfy anti-money laundering requirements, to manage your Services, communicate with you and your travel companions.
  

• HEALTH AND SAFETY INCIDENTS AND HEALTH SCREENINGS.  If you get injured, fall ill, or are involved in an incident while traveling with us, we collect your name, health information, and details about what happened. We may conduct health screenings and access your medical records following a health and safety incident you are involved in. We may also check for symptoms of illnesses like COVID-19 using temperature checks, questionnaires, and tissue samples. We use this information to take care of everyone’s medical and safety needs, keep records, investigate incidents, provide assistance, protect everyone’s rights, for security and public health reasons, prevent fraud, and to improve the safety of our Services.

• OTHER INCIDENTS. For your own safety and to protect our passengers and staff as well as Carnival Corporation’s rights and interests, we collect information relevant to certain incidents on our vessels, such as incidents of alleged criminal activity. If you are involved in an incident while traveling with us, we collect information such as your name, age, travel documentation, details of relevant incidents, (where relevant) video footage and photos and records of our actions taken. This may include information related to actual or suspected criminal offences. We use this information for keeping records, investigating incidents and protecting our, and our passengers’ and crews’ rights, security and interests and to prevent fraud. 

• PHOTO & VIDEO FOOTAGE.  We take a security photo of you for when you board our ships. We also have CCTV cameras on board that record continuously in public areas, and some of our security staff are also equipped with body-worn cameras. Photographers and camera crews may also take photos and videos for guests to buy or for our promotions. If you don’t want to be filmed or photographed, let the person with the camera know, but we can’t guarantee you won’t appear in some shots. We use this information for promotions, keeping records, investigating incidents, protecting everyone’s rights, security, public health, preventing fraud, and improving our Services. We may use facial recognition on your security photo to help with boarding and exiting the ship and to identify any fraud or security risks to us, our staff and other guests onboard. We may use this information to check against lists of individuals with restrictions on their travel onboard our Services. We also use facial recognition to link photos and videos taken on board to you for easier ordering. After your trip, you can still access your photos and videos through a third-party photo library service. We delete facial recognition data after the trip, but keep linked photos for up to two years so you can buy them later.

• GAMING, SPORTS BETTING AND CASINO.  If you use our Casinos or gaming arcades, bet on sporting events or join bingo sessions or our online games, we collect your name, contact information, account (including Casino wallet), age, Shipboard card information, travel details, and gaming or betting activity. This includes the games you play, how long you play, your results, how much you bet, and your winnings. We use this information to publicize your wins onboard, check your identity and age, see if you qualify for promotions, and communicate with you. We also use it to create win/loss statements, process and pay your winnings, do credit checks, process credit lines, follow legal rules, and to prevent and investigate fraud. Where you perform a credit card cash advance or use a kiosk with ATM functionality, we use information including your name, contact information, payment info, government identifier and date of birth to facilitate this transaction, to follow legal rules and to prevent and investigate fraud. Note: Casino sites may only be available in international waters or where allowed by law.

• MEDALLIONCLASS™.  On MedallionClass™ ships and at certain destinations, we collect information from your Medallion® wearable device and related OCEAN® websites and apps, including MedallionClass™, PlayOcean®, and Ocean® Casino ( together with MedallionClass™ ships and destinations, the “MedallionClass™ Services”), and from your use of the Medallion® from your purchases and interactions with our Services . The Medallion® tracks your location and movements on the ship or resort using sensors. It doesn’t use GPS, so it can’t find your precise geolocation. The Medallion® is linked to your personal information from your registration and traveler profile. We use this information to provide personalized services during your vacation. For example, we can find you on the ship, help you find family members, deliver Services like food to your location, and send you relevant messages, and customize the Services. We also use it to keep everyone safe, conduct contact tracing, and investigate issues. Additionally, we use this data to improve our services and understand guest behavior. When you make purchases using the Medallion®, we use your information to complete the transaction, prevent fraud, and improve our marketing.

• WIFI AND ONBOARD MOBILE APPS.  Where you sign up for and use WiFi or our apps onboard our vessels, we may collect account, age and login information to authenticate you and grant you access to online services, as well as profile details to display to and facilitate communication with other travelers. If you use one of our apps, with your permission, we will collect content from the device you use to access our online Services, such as photos from your device camera roll and camera and the contacts from your address book.  We use this information to enable you to share photos and video you take during your travel with us or to communicate with your contacts.  You can change your permissions anytime through your mobile device. We will also collect and process information about the actions you take on our apps, such as details of bookings, your payment info, your preferences, interaction history, messaging history and content, onboard account information and feedback, in order to provide you with the relevant features of the app, process your purchase, for fraud prevention and to satisfy anti-money laundering requirements and investigate any complaints or claims. 

• WEDDINGS AND OTHER EVENTS. We collect and process information relevant to weddings and other events you participate in onboard. This may include your name, contact information, nationality and marital status. We use this information to host the event you participate in, maintain legal records and comply with our legal obligations. 

• CHILDCARE AND YOUTH SERVICES. We collect and process information about children and young people to enable them to take part in our youth clubs and childcare programs, to keep them safe, and to communicate with their parents or guardians. This may include your name and age, parent contact details, emergency contacts, medical requirements, program preferences, attendance information, and limited images. Participation is voluntary and subject to parental consent where appropriate. The information is used only to provide those services and to meet our child safety obligations. 

In addition to the uses described above, we may collect and use personal information for the following purposes:

• To analyze, research, investigate and improve the use of our Services and interactions with our guests.
• To identify your preferences and interests in order to provide you with a personalized experience of our Services, inform our, and our partners’ personalised advertising activities and personalize our communications (including marketing communications) with you.
• To prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services, and to comply with legal requirements, obligations and other governmental demands, as well as investigate and resolve disputes and security issues and to enforce the applicable brand’s Terms of Service and any other contracts you have entered into with us.

3. When You Use Our Online Services.  

When you visit our Sites or use our Services (including our apps and onboard WiFi), read our emails, or otherwise engage with us through a computer or mobile device (including via live chat), we and our third party partners automatically collect information you provide to us and information about how you access and use the Service and information about the device you use to access the Service. 

We typically collect this information through a variety of tracking technologies, including cookies, Flash objects, web beacons, embedded scripts, APIs and mobile software development kits (SDKs), location-identifying technologies, and similar technology (collectively, “tracking technologies”), and we may use third party services and technologies to collect this information. Information we collect automatically about you may be combined with other personal information we collect directly or receive from other sources.

Specifically, we and our third-party partners may use tracking technologies to automatically collect information, including: 

• HOW YOU ACCESS THE SERVICE. Information about the site you came from and the site you go when leaving our Sites, how frequently you access the Service, when and whether you open emails or click the links contained in emails, your location when you access or interact with our Service, whether you access the Service from multiple devices and other actions you take on the Service.

• HOW YOU USE THE SERVICE. Information about the pages you visit, the links you click, the ads you view and click on, videos you watch, purchase information and your checkout process, and other similar actions. We may also use third-party tools to collect information you provide to us or information about how you use the Service and may record your mouse movements, scrolling, clicks and keystroke activity on our Sites and other browsing behavior. These tools may also record information you enter when you interact with our Service or engage in chat features through our Service. 

• DEVICE INFORMATION. Information about your IP address, browser type, internet service provider, platform type, device type/model/manufacturer, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account (including, e.g., a persistent device identifier or an Ad ID), and other such information.

• ANALYTICS INFORMATION. We may collect analytics data, or use third party analytics tools, to help us measure traffic and usage trends for the Service and to understand more about the demographics and behaviors of our users. 

The information we collect automatically helps us improve your experience. We use it to make our websites and services better and more personalized for you. For example, we can:

• Remember your information so you don’t have to enter it again.
• Provide custom content and information.
• Identify and contact you on different devices.
• Check how well our services and offers are working.
• Analyze how you use our services.
• Fix technical problems.
• Detect and prevent fraud or harmful activities.
• Plan and enhance our services.
  

We and our third-party partners may collect information through tracking technologies for personalized advertising purposes. See “About Our Ads” to learn more, including about how to control the use of tracking technologies.

4. Information From Third-Party Sources.

We may receive personal information about you from other users and travelers or our business partners and service providers and combine this information with other information we have.

• AFFILIATES.  We may receive information about you collected by other Carnival Corporation companies, businesses, Carnival Corporation s and affiliated entities in our family of companies, so that information you provide to one brand may be used by us to personalize and better provide you Services and communicate with you. They may also share with us information that helps us identify fraud and security risks.   
  
• SINGLE SIGN-ON.  We use single sign-on so you can log in using a third-party platform like Facebook or Google. When you do this, these services confirm your identity and may share some of your personal information with us, like your name and email. We use this information to authenticate you to grant you access to your account, communicate with you, and to identify target audiences for our online and social media marketing. The information we get depends on the third-party’s policies and your privacy settings on their platform. To learn more, check the privacy policy of the third-party platform you use.

• INSURERS. We may obtain information about you from insurers relating to claims that you make. This may include any information relevant to your claim, including medical information and records. We use this information for the purposes of establishing, exercising or defending legal rights.
  
• SERVICE PROVIDERS & PARTNERS.  Sometimes, we get personal information about you from our service providers and partners. This includes marketing partners, companies that verify your identity or address, process payments, check credit, financial partners or those that offer excursions, activities or co-branded apps, products and services. We use this information to confirm your identity, age, and address, follow legal rules, offer you promotions and deals, prevent fraud, protect rights, improve our marketing, manage our loyalty program, and provide our Services.
  
• OTHER USERS AND TRAVELERS.   We may obtain information about you from other users (for example, friends and family who have booked Services on your behalf or as a gift), travelers who are traveling with you or who have traveled with you, as well as your emergency contacts. This may include information about medical conditions, dietary restrictions, disabilities or special assistance needs and any criminal offences or court orders and notices concerning you. We use this information to book your travel itinerary, communicate with you and those traveling with you about the Services, to support public health initiatives, to administer the Services, operate our referral program, for the purpose for which it was provided to us, to ensure the safety and security of others onboard in accordance with the applicable brand’s Terms of Service. In some cases, this information may require us to, or give us the right to, deny booking or boarding to guests in order to ensure the safety and security of our staff and guests onboard.  

• TRAVEL AGENTS.  If you book travel through a travel agent, they may send us your personal information, including health details. We use this information to complete your booking, communicate with you and your travel companions, analyze trends, improve our business, and make your travel better. The travel agent may keep a copy of this information and must protect it properly. The travel agent is responsible for how they handle your data. Please check their privacy notice for more details.

• PUBLICLY AVAILABLE INFORMATION.  We may also collect information about you that is publicly available.  For example, we may collect information you publicly post or tag us in on social media sites, such as Facebook or Google, elsewhere online, and information contained in public records databases.  We will use this information to conduct market research, verify your identity, prevent fraud, and improve our Services. 

• LAW ENFORCEMENT. We may, from time to time, receive information from law enforcement about our guests, such as information about prior criminal convictions or court orders that either restrict the guest’s ability to travel or require additional security measures on our part to ensure the safety and security of others onboard in accordance with the applicable brand’s Terms of Service. In some cases, this information may require us to, or give us the right to, deny boarding to such guests in order to ensure the safety and security of our staff and other guests onboard. 
  
  

In addition to the uses described above, we may collect and use personal information for the following purposes:

• To create, maintain, improve, and operate the Services.
• To personalize your user experience.
• To personalize our, and our partners’ advertising activities. 
• To communicate with you to provide technical or administrative support.
• To conduct, manage, and grow our organization.
• To analyze, research, investigate and improve the use of our Services and interactions with our guests.
• To prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services, and to comply with legal requirements, obligations and other governmental demands.
• To investigate and resolve disputes and security issues and to enforce the applicable brand’s Terms of Service and any other contracts you have entered into with us.
• For any other lawful, legitimate business purpose.

ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

We may use artificial intelligence (“AI”) and other automated technologies to help us provide, improve, secure, and personalize our products and services. This may include processing personal information contained in your bookings, communications, customer service interactions, preferences, transactions, and use of our websites, apps, and services.

We may use AI to:

• support customer service and communications, including transcription, summarization, and interaction analysis;
• personalize content, recommendations, and marketing;
• detect and prevent fraud, security threats, and other misuse;
• conduct analytics, forecasting, and service improvement; and
• improve the performance, quality, and efficiency of our products, services, and business operations.

We may also use information processed through AI systems to develop, test, monitor, and improve our technologies, products, and services, in accordance with applicable law.

Where appropriate, AI-assisted processing is subject to human oversight.  

HOW WE SHARE YOUR INFORMATION

We may share your personal information in the instances described below.  For further information on your choices regarding your information, see the “Choices About Your Information” section below.

We may share your personal information in the following ways: 

• AFFILIATES.  We may share personal information with our other Carnival Corporation companies, businesses, Carnival Corporation s and affiliated entities in our family of companies, who may use your personal information in the manner described in this Privacy Notice. Please visit our website to learn more about the different Carnival Corporation s in the Carnival Corporation family of companies, including how to contact each with privacy related inquiries.

• SERVICE PROVIDERS.  We share information with third party vendors and service providers that perform services for or on our behalf, which may include identifying and serving targeted advertisements, providing mailing or email services, survey or feedback collection services, tax and accounting services, product fulfillment, payments processing, photo sharing, data processing and enhancement services, medical and health purposes, fraud prevention, web hosting, analytic services, or other online functionality, subject to appropriate contractual terms protecting the confidentiality and use of such data. We may integrate your data across service provider platforms to support CRM, personalized interactions and advertising, insight generation, predictive modelling, and attribution analysis. 

• PROMOTIONAL PARTNERS.  We may share limited personal information with third parties with whom we partner to provide promotions, excursions, activities, contests, and sweepstakes, or other promotional activities.  The partner will usually be identified by name in our promotion, contest, or sweepstakes communication. 

• WITH AMENITIES, ADD-ON SERVICES AND TRAVEL AND EXCURSION PARTNERS. Some onboard products and services, excursions and other activities are provided by other companies, or you may book a travel through multiple operators, such as a travel agent or airline. We may share personal identifiers and similar information before, during and after your cruise to facilitate your travel activities, provide your requested services, and provide a seamless service to our guests. 

• AT YOUR REQUEST.  With your consent or at your direction, we may share your information with your friends and family through the Services or on various social media networks, or with third parties to whom you direct us to share information, such as excursion partners, medical providers or your travel agent.  If you post a product review on our website or a comment on our social media sites, the information you provide may be displayed on publicly online for others to view.

• MARKETING AND STRATEGIC BUSINESS PARTNERS: We may share some of your data with our marketing and business partners. They might use this information to send you emails about products or services you might like. You can choose to opt-in or opt-out of this sharing, depending on the laws where you live.

• CORPORATE TRANSACTIONS: Personal information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of any or all of our assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by an affiliate or third party, or in the event of a bankruptcy or related or similar proceedings.

• FOR HEALTH AND SAFETY REASONS:  Your health and safety is important to us. We may share personal information with third parties or individuals if we reasonably believe in good faith that such action is necessary to protect the personal safety or health of our guests, crew, family members or other individuals. For more information on how we may collect and use your health data, please see the applicable brand’s Consumer Health Data Privacy Policy.

• TRAVEL INDUSTRY ORGANISATIONS AND REGULATORY BODIES: we may share information with industry and regulatory bodies where required by law or under the rules of an industry scheme that we participate in, such as industry bodies and associations that provide financial protection and repatriation schemes for guests in the event that a travel operator fails. 

• LAW ENFORCEMENT, GOVERNMENT AUTHORITIES, REGULATORS AND FOR SAFETY OR LEGAL REASONS: We may share your personal information with third partiethrs if required by law or if we believe it’s necessary to:
  • Follow the laws where we operate.
  • Respond to requests from law enforcement, government authorities, courts, or legal processes.
  • Enforce our Terms or protect the security of our services.
  • Protect the rights, property, or safety of us, our guests, online visitors, or others.
    

We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you. 

All the above categories exclude text messaging originator opt-in data and consent, which will not be shared with any third parties, except as follows: (1) sharing with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, and who will not use such information for their own purposes; (2) if we believe disclosure is required by any applicable law, rule, or regulation, or is necessary to comply with law enforcement or other legal process; (3) if you consent to our sharing of such information; or (4) sharing that is otherwise allowed by law and is in accordance with carrier terms and conditions.

CHOICES ABOUT YOUR INFORMATION

PROFILE ACCESS & SHARING SETTINGS.  You may access and update your profile information, such as your username, address, or billing information, and may change some of your data sharing preferences on your account page.  

GEOLOCATION & DEVICE CONTENT. You may control location tracking by adjusting your location services options on the “Settings” app on your mobile device.  We may continue to approximate your location based on your IP address when you access the Services through a computer or device. If you would like to update your device content access permissions, such as permissions to access your camera or address book, you can do so in the “Settings” app on your mobile device.

MEDALLIONCLASS™.  To avoid the collection of your position and movement data collected, do not use the Medallion®.  You may contact the staff on board the ship to request a card to access your guest room and pay for on board transactions in lieu of the Medallion®.  The sensors will still be able to detect your on-board position when you use the card to access your room, make a payment, or take a photo, but the card cannot be read by the long-range sensors to track movement data around the ship.  Some features of the MedallionClass™ Services will not be available to you if you do not use the Medallion®.

MARKETING MESSAGES.  You can stop receiving promotional email communications from us by following the “unsubscribe” instructions provided in such communications.  We make every effort to promptly process all unsubscribe requests.  You will still receive Service-related communications, including account verification, transactional communications, changes/updates to features of the Services, and technical and security notices.

AVAILABLE PRIVACY RIGHTS.  In accordance with the applicable jurisdictional laws, you may have the following rights over our processing of your personal information.  We may not be able to modify or delete your information in all circumstances.  

• RIGHT TO KNOW whether we are processing any personal information about you and certain personalized details about the personal information we have about you.

• RIGHT TO ACCESS to the personal information we have collected about you and obtain a copy.

• RIGHT TO CORRECT inaccuracies in your personal information.

• RIGHT TO REQUEST DELETION of personal information we have collected from you. However, if we are obligated by law to retain your personal information for a longer period of time, or it is technically unfeasible to erase your personal information, we will retain your personal information with necessary security protection measures and will not otherwise process your personal information.

• RIGHT TO RESTRICTION of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information.

• RIGHT TO OBJECT. You have the right to object to any processing justified by legitimate interests based on grounds relating to your particular situation at any time. Should you decide to object to the processing of your personal information, we will stop processing personal information concerning you, unless we can demonstrate compelling reasons for continuing to process your personal information that override your interests, rights and freedoms or in the case that we establish, exercise, or defend our legal claims. You can object to direct marketing activities at any time for any reason whatsoever.

• RIGHT TO DATA PORTABILITY and to obtain a copy of your personal information in a structured, commonly used and machine-readable format. 

• RIGHT TO WITHDRAW CONSENT. The withdrawal of your consent does not affect the lawfulness of our use of your personal information before your withdrawal. If you want to withdraw your consent with regard to receiving promotional communications, you can unsubscribe through the method described in each promotional message. 

• RIGHT TO LIMIT USE AND DISCLOSURE OF SENSITIVE INFORMATION for purposes other than the primary purpose for which such sensitive information was collected. This right may result in our need to get your prior consent to process your sensitive information.

• RIGHT TO OPT OUT OF PERSONAL INFORMATION SALES that involve third parties accessing your personal information in exchange for some compensation, such as improvements to their services, like better personalization in advertising.
  • Nevada Residents. Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of potential future sales of certain covered information that a website operator has collected or will collect about the resident. 
  • “Shine The Light” Law.  California’s “Shine the Light” law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. It is company policy that we do not disclose personal information to third parties for their direct marketing purposes if a consumer has exercised their right to opt out.  To opt out, please follow the instructions for opting out of targeted advertising and personal information sales (below).  

• RIGHT TO OPT OUT OF USE OR SHARING PERSONAL INFORMATION FOR TARGETED ADVERTISING, which may still result in your receipt of our advertising online based on the context of the ad placement, and not on the use of your personal information.

You may also have the right to be free of retaliatory or discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our Services or engage with you.

We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account.  

In certain circumstances, we may decline a request to exercise the requests described above, particularly where we are unable to verify your identity.  If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.

Please note that we can only process privacy rights requests for personal information processed by the applicable brand you interacted with. If you have interacted with another brand in our family of companies or any other third party, you will have to contact that brand or third party to exercise your privacy rights.

To access, modify or delete your personal information, please visit the applicable brand’s website.

• [Emailing privacy@Carnival.com or the applicable brand with sufficient information to identify you and your request,
• Calling the applicable brand’s toll-free number 

To submit a request to opt-out of targeted advertising or personal information sales or sharing for targeted advertising, you must take both of the following steps: 

• For cookie-based sales and targeted advertising opt-outs: please click the “Your Privacy Choices” link located in the footer of the webpage to adjust your cookie preferences or visit our website with a legally-recognized global preferences signal such as the Global Privacy Control (GPC) enabled. Please note that these opt outs are browser-specific. You must reset your preferences if you clear cookies or use a different browser or device. 

• For non-cookie-based sales and targeted advertising opt-outs: please submit a request using the relevant brand’s Do not Sell or Share My Personal Information Form to be added to their suppression list.
  

Appeals.  Depending on your residency and subject to certain limitations and exceptions, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.

Minors.  If you want to submit a privacy request on behalf of your minor child, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., that you are the child’s legal guardian or authorized representative).

ABOUT OUR ADS

We participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your browsing history 

We allow third-party advertising networks, social media companies, and other services to collect information about how you use our Sites. They use this information to show you ads on our Sites, other websites, apps, and devices you use. This information is usually collected through tracking technologies that recognize your device and gather details like what you click on, your browser type, the time and date you visited, your device ID, rough location, and other data.

We may share a common account identifier (like a hashed email or user ID) with third-party partners who use tracking technologies to find potential marketing audiences. These partners may use this information and combine it with data they collect or get from other sources, both online and offline. This helps them recognize you on different devices and platforms, like computers, mobile devices, and smart TVs. We and our partners use this information to show you ads and personalized content that match your interests, and to provide services like reporting, attribution, analytics, and market research.

MANAGING TRACKING TECHNOLOGIES. Our Services let you adjust your tracking preferences where required by law. For example, if our Sites have a cookie preferences tool, you can use it to change your settings for certain tracking technologies on that specific Site, device, and browser. You will need to do this for each device and browser you use.

If there isn’t a cookie preference tool, you can use third-party tools to limit tracking. For example, most browsers let you change settings to limit tracking technologies, most email providers let you stop automatic image downloads that may contain tracking technologies, and many devices let you change settings to limit tracking in apps. Blocking tracking technologies might affect how well our Services work, and some features might not work at all. You might need to update your preferences on multiple devices or browsers. We don’t control these third-party tools and aren’t responsible if they don’t work as expected.

MANAGING AD PREFERENCES. In addition to taking the steps set forth in the Managing Tracking Technologies section above, you may be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising opt-out programs. For example:

• SOCIAL MEDIA ADVERTISING. Certain social media platforms provide individuals the option to turn off targeted advertising for the entire platform (such as certain social media platforms). Please refer to your platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs. You may learn more about advertising preferences by clicking on the links provided below. Please note that these links are provided for your convenience only and we do not control the content or features that may be available on these third-party services.

• Facebook. To learn more about your advertising preferences on Facebook Companies, click here.
• LinkedIn. To learn more about advertising preferences on LinkedIn, click here.
• Pinterest. To learn more about personalization and data, click here.
• Snapchat. To learn more about advertising and interest preferences, click here.
• Twitter. To learn more about privacy controls for personalized ads on Twitter, click here.
• TikTok. To learn more about ads and your data on TikTok, click here.
  

• MOBILE ADVERTISING. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt out of interest-based ads” (Android). The Digital Advertising Alliance also offers a tool for opting out of the collection of cross-app data on a mobile device for interest-based advertising. To exercise choices for the companies participating in this tool, download the AppChoices app.You may be able to limit the use of location data for advertising purposes by adjusting your location services settings on your mobile device. 

• INDUSTRY OPT-OUTS. To learn about interest-based advertising and how you may be able to opt out of some interest-based advertising, you may wish to visit the Network Advertising Initiative’s online resourcesor the DAA’s resources.
  • Residents of Canada may visit the Your Ad Choices Website
  • Residents of the United Kingdom may visit the Your Online Choices Website
  • Residents of the European Union may visit the Your Online Choices Website

Please note that opting out of receiving interest-based advertising through the NAI’s and DAA’s online resources will only opt-out a user from receiving interest-based ads on that specific browser or device, but the user may still receive interest-based ads on his or her other devices. You must perform the opt-out on each browser or device you use. We may work with some tracking technology partners that do not participate in the DAA or NAI self-regulatory programs and these opt-outs will not have any effect on those partner activities.

Note that some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you may need to opt-out again.

• THIRD PARTY PARTNERS. Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide.
  • Google Analytics. We use Google Analytics to recognize you and link the devices you use when you visit our site or Service on your browser or mobile device, log in to your account on our Service, or otherwise engage with us. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google’s site “How Google uses data when you use our partners’ sites or apps” policy. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On, by visiting Google Website.
  • Google Advertising. We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, the DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Service. You may control your advertising preferences or opt out of certain Google advertising products by visiting the Google Ads Preferences Manager or by visiting NAI’s online resources.
  • Adobe Experience Cloud. We may participate in the Adobe Experience Cloud and Adobe Experience Cloud Device Co-Op to better understand how you use our website and apps across the various devices you use, and to deliver tailored promotions. You can learn more about Adobe services and the Adobe Experience Cloud and how you can opt out of Adobe advertising solutions by visiting Adobe’s Website.

CHILDREN’S PRIVACY

Though Carnival Corporation provides fun for families of all ages, most of our online Services are not intended to be used by children, nor do we have actual knowledge that children are using these online Services.  When we intend to collect personal information from children online, we take additional steps to protect their privacy, including:

• notifying and obtaining consent from parents and legal guardians, in accordance with applicable law, 
• limiting our collection of personal information from children to no more than is reasonably necessary to participate in the online activity, and 
• giving parents and legal guardians the ability to access personal information that we have collected from their children and to request the personal information be deleted or modified.  

If you believe that we might have inadvertently collected information from a child without appropriate parental consent, please contact us at privacy@carnival.com so that we may delete the information as soon as possible. 

Where we collect personal information about children (for instance, information provided by a parent or legal guardian, travel agent or other travel partner), we process such information in a manner consistent with applicable laws protecting the privacy of children’s data.  For additional information about our practices regarding the collection of information from children, please read our Children’s Privacy Notice.  

REGION-SPECIFIC DISCLOSURES

1. U.S. CONSUMER HEALTH DATA AND STATE PRIVACY RIGHTS 

If you are in the U.S., our Consumer Health Data Notice contains relevant information regarding how we collect and process your medical and health data. Please read and review our Consumer Health Data Notice in addition to this Privacy Notice. 

In addition to the rights and practices described in this Privacy Notice, this section provides additional information about our personal information processing practices relating to individual residents of the following U.S. states: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. 

COLLECTION AND USE OF PERSONAL INFORMATION.  In the last 12 months, we have collected all of the categories of personal information described in our Privacy Notice.  To learn more about the types of personal information we collect, the sources from which we collect it, and the purposes for which we use this information, please refer to How We Collect and Use Your Information  of the Privacy Notice.

Sensitive Information. Some types of personal information we collect are considered “sensitive” under certain U.S. state privacy laws. This includes things like your social security number, driver’s license number, passport number, payment card details, financial account information, health information, biometric data used for uniquely identifying someone, username and password, information from children, and precise geolocation data. We use this sensitive information for the purposes set forth in the How We Collect and Use Your Information section of our Privacy Notice where needed to run our Services, fulfill contracts with you, follow legal requirements, to protect life and for safety, and for other internal purposes consistent with law. 

We do not sell sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising. However, depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit, or withdraw your consent for, our processing of sensitive information (as described in the Choices about your information section), except for where the processing of your sensitive information is necessary to provide you the services or otherwise required by law.  

Deidentified Information. We may at times receive, or process personal information to create, deidentified data that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law. 

Minors.  We do not sell or, for the purposes of targeted advertising, share the personal information of consumers we know to be less than 18 years of age or other age specified by applicable law in your state of residence. If we wish to do so in the future, we will first seek affirmative authorization from either the minor (where the law allows) or the parent or guardian of a minor less than 13 years of age. 

If you are under the age of 18 and you want to remove your name or comments from our website or publicly displayed content, please contact us directly at privacy@carnival.com.  We may not be able to modify or delete your information in all circumstances. 

Authorized Agents.  In certain circumstances, you may permit an authorized agent to submit requests on your behalf.  The authorized agent must provide a letter signed by you confirming the agent has permission to submit a request on your behalf or must provide sufficient evidence to show that the authorized agent has been lawfully vested with power of attorney.  

For security purposes, we may need to verify your identity and confirm directly with you that you have provided the authorized agent permission to submit the request, and it may take additional time to fulfil agent-submitted requests. We may deny a request in the event we are not able to verify the authorized agent’s authority to act on your behalf.  Please note that for privacy and security reasons, we will direct future communications to the data subject on whose behalf the request was made. 

Notice of Financial Incentive. Notice of Financial Incentive. We offer various financial incentives. For example, the financial incentives we may provide include: 

• Discounts, coupons and special offers via email when you sign up for our email list or create an account. 
• Rewards when you refer a friend who has never sailed or booked with us before. 
• Loyalty programs, where you earn rewards based upon your past travel or spend with us, or through co-branded credit cards.

When you sign up for our email list or create an account, you join a financial incentive program. Joining is optional, and you can leave the program anytime. To opt-out and stop getting incentives, you may unsubscribe from our emails (for email-based incentives), close your account (for loyalty and reward program incentives), or request to delete your information. The incentives we offer are based on the value of your data to our business, based on our sole reasonable determination. We calculate this by considering the costs of collecting, storing, and keeping your data and providing the financial benefit.

The terms for each program are provided when you are invited to join. You can join by following the instructions given at that time. You can leave the program anytime by following the instructions or contacting us using the information in the Contact Us section below.

CALIFORNIA-SPECIFIC INFORMATION.  California law requires us to notify their residents that in the past 12 months, we have collected and disclosed to our business partners the following categories of personal information, as described in detail above in the “How We Collect and Use Your Information” and “How We Share Your Information” sections: personal identifiers, customer records, commercial information, health or medical information, sensory information, biometric information, preferences, internet, network and device information, geolocation data, professional information, and  background check information.

In the previous 12 months, we have sold for monetary or other valuable consideration, or shared for cross-context behavioral advertising purposes, the following categories of personal information to third parties consistent with the information in the “How We Share Your Information” section above: (i) Personal Identifiers; (ii) Commercial Information; (iii) Preferences; (iv) Internet, network and device information.

2. BRAZIL PRIVACY RIGHTS

This section applies to you if your personal information: (i) is processed in the Brazilian territory; or (ii) has been collected in the Brazilian territory. Also, this section applies to you if the purpose of the processing activity is the offer or supply of goods or services within the Brazilian territory.

• Your Rights. According to the Brazilian General Data Protection Law, Law No. 13.709/18 (“LGPD”), in addition to some of those rights listed above, you may be able to exercise the following rights, at any time upon request:
  • RIGHT TO ANONYMIZATION, BLOCKING OR ELIMINATION of unnecessary or excessive data or of data processed in noncompliance with the provisions of the LGPD;
  • RIGHT TO INFORMATION on:
    • the public and private entities with which the controller carried out the shared use of personal information; and
    • information on the possibility of not providing consent and on the consequences of the denial.

Termination of the Processing. Your personal information shall be eliminated after termination of the processing thereof, within the scope and technical limits of the activities, and conservation thereof shall be authorized for the following purposes:

• compliance with a statutory or regulatory obligation by Carnival Corporation;
• transfer to third parties in accordance with the data processing requirements set forth in the LGPD; or
• exclusive use of the personal information by Carnival Corporation, providing the personal information are anonymized and that the access thereto by third parties will be prohibited by Carnival Corporation.

3. CANADA PRIVACY RIGHTS

This section applies to you if you are a resident of Canada and the personal information we collect from you is subject to Canadian privacy laws.

Location of Processing. We and our respective service providers store and process personal data outside of Canada. The countries to which we transfer personal data may not provide you with the same legal protections you have under federal, provincial and territorial laws of Canada. However, we have implemented appropriate safeguards, including contractual requirements, to secure the transfer of your personal information.

Medallion Class™.  By using the Medallion® and Medallion Class™ Services on MedallionClass™ ships and at certain destinations, you explicitly agree to the collection and use of your personal information to locate you and analyze your preferences and interests for the purposes set out in the section titled “How We Collect Your Personal Information”. You may contact the staff on board the ship to request a card to access your guest room and pay for on board transactions in lieu of the Medallion®.  However, features of the MedallionClass™ Services will not be available to you if you do not use the Medallion®.

4. CHINA PRIVACY RIGHTS

This section applies to you if: (i) your personal information is processed within the territory of the People’s Republic of China (excluding Hong Kong, Macau and Taiwan, the “PRC”), or (ii) you are within the territory of China and your personal information is processed outside of China for the purposes of providing goods or services to you, or analyzing or evaluating your behaviors. PRC law requires us to disclose certain information set forth below.

Processing of Sensitive Personal Information.  Under the PRC law, sensitive personal information includes information regarding such as biometrics, religious beliefs, race, ethnicity, medical health, financial accounts, and location tracking, as well as the personal information of minors under the age of 14 (“Minor(s)”). For example, we may process your sensitive personal information in an incident, for health screenings, or for security purposes. We may process certain of your sensitive personal information only when we have your consent or another legal basis to do so. Where your consent is the legal basis for processing your sensitive personal information (such as related to our MedallionClass™ Services), we will seek your prior consent separately. For more information on our processing of your sensitive personal information, please refer to the How We Collect and Use Your Information section of the Privacy Notice.

Before processing a Minor’s personal information, we will seek consent from their parent or other legal guardian.  For additional information about our practices regarding the collection of information from children, please read our Children’s Privacy Notice.  

Legal Basis for the Processing of Your Personal Information.  Our processing of your personal information as described in the Section “How We Collect and Use Your Information” is based on the following legal grounds:

• Consent: We may need your consent in connection with our promotional activities in particular, such as sending you promotional messages, if you decide to participate in sweepstakes, to deploy certain cookies when you use our online services and where you use certain Services where we collect location information or information about your health or medical conditions. 
  
  If we need your consent, you can choose not to give it or take it back at any time. Withdrawing your consent won’t affect how we used your information before. If you give us consent, we will only use your information for the reasons you agreed to. If you don’t give consent or take it back, we might not be able to provide certain Services. Other than that, saying no or taking back your consent won’t have any negative effects on you.

• Enter into or perform a contract with you: We rely on this legal basis in particular in the following cases:
  • to manage your travel bookings and orders; 
  • to provide you with our Services, e.g., process your on-board purchases of goods or Services, 
  • to communicate with you to provide technical or administrative support, or 
  • to be able to provide our online Services.

• Carry out legal responsibilities or legal obligations: We may be obliged to process personal information to carry out our legal responsibilities or legal obligations, for example where we are required to retain data for tax law or commercial purposes or where we must comply with regulatory requirements regarding public health or gambling.

• Respond to an emergency: We may collect and process your personal information in order to respond to a public health emergency or to protect a natural person’s life, health and property safety in an emergency.

• Reasonably process legitimately published personal information: We may reasonably process your personal information that has been published by you or otherwise has been published legitimately.

Your Rights: In some cases, our ability to uphold privacy rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

Please also note that after an individual passed away, their next of kin may be able to exercise the individual rights of the deceased in accordance with law. 

For further information on how to exercise those rights, you may contact our Data Protection Officer by sending an email to privacy@carnival.com. You also have the right to lodge a complaint with a competent personal information protection authority. 

5. HONG KONG PRIVACY RIGHTS

This section applies to you if any of our Hong Kong entities controls all or any part of the personal information processing in, or from, Hong Kong. 

Your Rights: If you wish to access or correct your personal data, please contact the data protection officer at privacy@carnival.com. If you wish to withdraw your consent to direct marketing, please send a request to us at privacy@carnival.com, or by replying with the heading “unsubscribe” to any direct marketing communication from us.

We reserve the right to charge a reasonable fee to process any personal data access or correction request.

6. INDIA PRIVACY RIGHTS

If you reside in India, the following terms may apply to you as per applicable data protection laws. You may access this Privacy Policy in English or any language specified in the Eighth Schedule of the Constitution of India.

Your Rights: You have the right to access information about your Personal Data, request correction or erasure, withdraw consent where processing is based on consent, and seek grievance redressal in relation to the processing of your Personal Data. You also have the right to nominate an individual who shall, in the event of your death or incapacity, exercise your rights with respect to us processing your Personal Data.

For further information on how to exercise those rights, or if you have any questions, concerns, complaints or grievances regarding our privacy policies or our processing of Personal Data,  you may contact our Data Protection Officer by sending an email to privacy@carnival.com. You also have the right to lodge a complaint with the Data Protection Board of India. 

Minors: We may collect and process the data belonging to minors (children under the age of 18 years) when you voluntarily provide them for the purpose of availing our services, or as applicable law otherwise permits. We will obtain verifiable consent from the parent or lawful guardian, in accordance with applicable law. 

7. INDONESIA PRIVACY RIGHTS

This section applies to you if you are a resident of Indonesia.  Notwithstanding anything contained above to the contrary, we may also process personal information about you in accordance with the Indonesian law.

• Legal Basis for the Processing of Your Personal Information. Our processing of your personal information as described in the Section “How We Collect and Use Your Information” is based on the following legal grounds:
  • Consent: We may need your consent in connection with our promotional activities in particular, such as sending you promotional messages, if you decide to participate in sweepstakes, to deploy certain cookies when you use our online services and where you use certain Services where we collect location information or information about your health or medical conditions. 
    
    If we need your consent, you can choose not to give it or take it back at any time. Withdrawing your consent won’t affect how we used your information before. If you give us consent, we will only use your information for the reasons you agreed to. If you don’t give consent or take it back, we might not be able to provide certain Services. Other than that, saying no or taking back your consent won’t have any negative effects on you.
  • Perform or enter into a contractual relationship with you: We rely on this legal basis in particular in the following cases:
    • to manage your travel bookings and orders; 
    • to provide you with our Services, e.g., process your on-board purchases of goods or Services, 
    • to communicate with you to provide technical or administrative support, or 
    • to be able to provide our online Services.
  • Vital interest: We may need to process personal information to protect your vital interest, for example where there is an incident or you suffered from injury on our ship or our property.
  • Compliance with legal obligations: We may be obliged to process personal information to comply with our legal obligations, for example where we are required to retain data for tax law or commercial purposes or where we must comply with regulatory requirements regarding public health or gambling.
  • Legitimate interests: We may base the processing of your personal information on our legitimate interests where (i) neither of the afore listed legal bases apply and (ii) where the processing of your personal information is necessary for our legitimate interests. Such cases may include the following in particular:
    • to conduct customer surveys in order to enhance and optimize your travel experience;
    • to protect our rights and the rights of our guests; to prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services;
    • to investigate and resolve disputes and security issues;
    • to provide you with personalized Services;
    • to communicate with you and reply to your questions or comments submitted to us by any means; and
    • to pursue or defend against legal claims.

• Sensitive Information: ‘Sensitive information’ includes (i) health data and information, (ii) biometric data, (iii) genetic data, (iv) criminal records, (v) children’s data, (vi) personal financial data, and/or (vii) other data in accordance with the provisions of the laws of the Republic of Indonesia. We use sensitive information for the purposes set forth in the How We Collect and Use Your Information section of our Privacy Notice where needed to run our Services, fulfill contracts with you, follow legal requirements, to protect life and for safety, and for other internal purposes consistent with law.

• Minors: Before processing a Minor’s (i.e., individuals under the age of 18) personal information, we will seek consent from their parent or other legal guardian.

• Data Subject Rights: In addition to the rights aforementioned in “Available Privacy Rights” section, you also have the right to obtain information, terminate processing and to lodge a complaint and compensation.

• Transfers: We may transfer your personal information to countries located outside Indonesia. In transferring personal information out of your country of residence, we will:
  1. Ensure that the country where the transferee is domiciled has a level of personal data protection that is equivalent to or higher than that stipulated in Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (as may be amended from time to time) and its implementing regulations;
  2. In the event that letter a above is not fulfilled, we will ensure that there is adequate and binding personal data protection; or
  3. In the event that letter a and b above are not fulfilled, we will ask for your consent.

• Changes to the Privacy Notice: The provisions regarding “Changes to Our Privacy Notice” below apply, except in cases where it is required by applicable legislation, such as changes to the purpose for processing of personal data, we will ask for your consent before applying the changes, and new changes to the Privacy Notice will take effect from the date of your consent.

• Language: This Privacy Notice is entered into in English language and Indonesian language versions. Both versions of this Privacy Notice are equally authentic and shall be treated as integral and inseparable parts that constitute the Privacy Notice. In the event of any ambiguity, discrepancies or inconsistency between the English language and Indonesian language versions, the English version shall prevail.

8. JAPAN PRIVACY RIGHTS

This section applies to you if you are a resident of Japan, in accordance with the Act of Protection of Personal Information (the “APPI”) of Japan. 

Inquiries and Complaints.  We shall respond appropriately to requests permitted under the APPI including requests for inquiries and complaints regarding the handling of personal information. Please submit a request in the same way prescribed elsewhere in this notice.

9. AUSTRALIA AND NEW ZEALAND PRIVACY RIGHTS

This section applies to you This section applies to you if you are a resident of Australia or New Zealand.  

Your Rights: You have the right to request access to, or correction of, your personal information. If you wish to request access to, or correction of, your personal information, please submit a request in the same way prescribed in “AVAILABLE PRIVACY RIGHTS” section above. If you wish to withdraw your consent to receiving marketing or promotional electronic messages, please do so by using the “unsubscribe” facility in the message itself.

Collection of personal information required or authorized by or under an Australia Law: for the purposes outlined in this policy, we collect personal information as required or authorized by or under Australian laws.

Complaints: if you would like to lodge a privacy complaint, you can contact the data controller at:

Carnival Corporation

3655 NW 87th Avenue, Miami, FL 33178

privacy@carnival.com 

Upon receiving your complaint, your complaint will be investigated and you may be asked to provide further information. We will respond to your complaint with a reasonable time (usually within 30 days). If the matter is more complex or our investigation may take longer, we will let you know. If you are not satisfied with our response to your complaint, you may contact:

• if you are in Australia, the Office of the Australian Information Commissioner (www.oaic.gov.au); or

• if you are in New Zealand, the Privacy Commissioner (www.privacy.org.nz).

10. UK PRIVACY RIGHTS

In addition to the privacy rights set out at “Choices About Your Information” above, if you are in the UK, you also have the right to raise a complaint directly with us regarding the processing of your personal data. 

If you would like to raise a complaint, please privacy@carnivalukgroup.com  

HOW WE PROTECT YOUR INFORMATION

We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through our Service.  However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%.  

In the event that any information under our control is compromised as a result of a breach of security, we will take steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps in accordance with applicable laws and regulations.

While we take steps to protect your personal information and keep it secure, you also play a role in protecting your information. You can help to maintain the security of your online and mobile transactions by not sharing your reservation number, username, or password with anyone.

DATA RETENTION. We will only store your personal information for as long as necessary to achieve the purpose of collection as set out in this Privacy Notice in accordance with our data retention policies, unless a longer retention period is required by applicable law. If we are required by applicable law to store your personal information beyond this period (e.g., for tax and commercial law reasons), we will delete, destroy or deidentify the personal information after the end of this storage period. 

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use and disclosure of your personal information, the purposes for which we process the personal information, and the applicable legal requirements. After the expiry of the aforementioned retention periods, we will delete or anonymize your personal information.

If, after you sign up for our promotional emails, you unsubscribe from receiving our promotional emails, we will delete your personal information from our mailing lists. However, we might store your email address in a blacklist to ensure that you will not receive any further communication.

TSA SECURE FLIGHT NOTICE

The Transportation Security Administration (TSA) requires you to provide your full name, date of birth and gender for the purpose of watch list screening under the authority of 49 U.S.C. section 114, the Intelligence Reform and Terrorism Prevention Act of 2004 and 49 C.F.R. parts 1540 and 1560 for all commercial air travel within, into or out of the United States which is booked on or after August 15, 2009. You may also provide your Redress Number, if available. 

If you book commercial air travel within, into or out of the United States in conjunction with your voyage we will request this information from you and forward it to the TSA as required by law. Failure to provide your full name, date of birth, and gender may result in denial of transport or denial of authority to enter the boarding area. 

TSA may share information you provide with law enforcement or intelligence agencies or others under its published system of records notice. For more on TSA privacy policies or to review the system of records notice and the privacy impact assessment, please see the TSA Web site at www.tsa.gov.

LINKS TO THIRD-PARTY SERVICES

The Services may contain links to and from third party websites of our business partners, advertisers, and social media sites and our users may post links to third party websites.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies.  We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third-party sites. 

CHANGES TO OUR PRIVACY NOTICE

We may modify or update this Privacy Notice from time to time to reflect the changes in our business and practices, and you should review this page periodically.  We will update the “Last Updated” date at the top of this page when we post changes to this Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

If you object to any changes, you may close your account. Continuing to use our Services after we publish changes to this Privacy Notice means that you are consenting to the changes.

COMMENTS?  QUESTIONS?  CONTACT US

If you have any questions about this Privacy Notice or the website, please contact the Data Protection Officer: 

Carnival Privacy, DPO

3655 NW 87th Avenue, Miami, FL 33178

privacy@carnival.com 

Carnival Privacy, UK DPO

 100 Harbour Parade, Southampton, Southampton SO15 1ST, UK

privacy@carnival.com 

CHILDREN’S ONLINE PRIVACY NOTICE

Though Carnival Corporation provides fun for families of all ages, most of our online Services are not intended to be used by children. When we intend to collect personal information from children through a mobile app or online service, we take additional steps to protect their privacy.

The privacy of our youngest users is very important to us.  Children under 13 (in the US) or otherwise defined by applicable law (for example, under age 14 in China and Canada, under age 16 in the EEA, under age 13 in the UK, or under age 18 in Australia, New Zealand India and Indonesia) (“Child” or “Children”) may download our mobile apps or use our online services and use them with limited functionality without providing any personal information.  If a Child creates a login profile and we determine the Child is underage, then to the extend required by applicable laws, we will seek authorization of a parent or legal guardian before the Child will be permitted to provide additional personal information, make purchases, or engage the chat functions.  

Please contact us at privacy@carnival.com if you believe we have inadvertently collected personal information from a Child without necessary parental consent so that we can delete this information as soon as possible.

When we recognize a Child is using an application or online service, the following policies and practices apply: 

• We collect only as much personal information as necessary to provide the functions of the application and to provide notice to parents, consistent with the requirements of applicable children’s privacy laws, including, in the U.S., the Children’s Online Privacy Protection Act (“COPPA”).

We will seek parental consent before we will enable certain features of the mobile applications, including chat and location features and in-app purchases. How a Child’s Personal Information is Collected. During registration, we collect the person’s first and last name, date of birth, and booking number (optional) to find them in our booking systems.

If we see the person is a Child, we use the parent or guardian’s contact information from the reservation to notify them and ask for consent for the Child to use the app fully.

We automatically collect information about how the Child uses the app or online service and their device, like a device ID, other persistent identifiers, operating system, and settings. This helps us run the app, monitor and improve our Services, and for other internal purposes.

If a parent or guardian allows the Child to use chat and purchase features, we collect the Child’s chat messages, chat usage data, and purchase records. If the Child uses a Medallion® on a MedallionClass™ ship, the app will also collect their location data on board.

How a Child’s Personal Information is Used and Shared.  We use the personal information collected to provide features in the applicable service or app, like letting the Child view the ship’s schedule, choose activities, use chat (if allowed), and choose photos taken on the ship. With the parent or guardian’s consent, the Child can make purchases on board or access internet services. The Child’s information may be shared with staff to help with purchases and dining requests, and purchase details will be shared with the parent or guardian. With the parent or guardian’s consent, the Child can use the Shipmates chat to talk to approved individuals. We recommend parents supervise their children using the chat. The Child’s location data on the ship will be shared with the parent and approved members of the booking party. We may also use the Child’s information to improve the onboard and app experience. We will not use the Child’s information for personalized ads.

How Parents May Access and Control a Child’s Information.  At any time, parents can withdraw consent for further collection of personal information from the Child through the App and can request that we delete from our records the personal information we have collected in connection with the App. Please keep in mind that a request to delete records may lead to a termination of an account or other service, and that we may not be able to delete information that we need to retain for certain legal or business records.

To access the information we have collected from the Child: 

1. Parents can request access to and delete their Child’s personal information by logging on to the Child’s account through the Child’s mobile device. Parents will need their Child’s username and password. 

2. Parents can contact Guest Services to request access to, change, or delete their Child’s personal information by visiting the Guest Services desk on board. If you believe your child is participating in an activity that collects personal information and you or another parent/guardian have NOT given consent for, please feel free to contact us Guest Services. 

Retention of Children’s Data

We retain the information collected from the Child only as long as necessary to provide the Services and fulfil our internal business purposes.  

Contact Us

Please contact us if you have any questions about how your Child’s personal information is collected, used, shared, or stored or if you would like to access or delete your Child’s personal information: 

privacy@carnival.com