PRIVACY POLICY
Legal Information
Carnival Corporation and Carnival plc (collectively referred to as "Carnival") operate under a dual listed company structure with primary stock exchange listings in the United States and the United Kingdom. Carnival is a global cruise business with a portfolio of leading cruise brands, including P&O Cruises Australia, Princess Cruises, Carnival Cruise Line, Holland America Line, Seabourn, Cunard Line, P&O World Cruises, AIDA, Costa and Fathom (‘Carnival brands’).
Carnival plc, has registered branches in Australia (ABN 23 107 998 443) and New Zealand (Company number 1471215). These branches trade under various brand names, including Carnival Cruise Line and are subject to the Australian Privacy Principles introduced under Australian privacy legislation and the Information Privacy Principles introduced under New Zealand privacy legislation. In this policy “we”, “us”, “our” means Carnival plc trading as Carnival Cruise Line.
In this policy, we set out a summary of how we manage your personal information. You should also refer to Carnival Cruise Line Cruise Ticket Contract for further details on some of the personal information we may need to collect, use or disclose as part of your cruise holiday.
Collection
The core functions of our business (i.e. the primary purposes for which we collect and manage personal information) are to facilitate the booking, carriage, marketing and administration of our various cruise products and those of other Carnival brands.
So that we can carry out these functions, and provide you with our products and services, we may ask you to provide us with and may manage personal information, including (but not limited to) your personal contact details, your passport and driver’s licence details, next of kin and emergency contact information, payment information (e.g. your credit card details), information relating to your health and dietary requirements (if any), and your proposed travel and tour arrangements.
Some examples of where we may need this information are to:
- process your booking and carriage aboard our cruise ships;
- create and process insurance policies;
- assess your health and provide medical assistance (if needed);
- handle and respond to complaints; and
- provide your details to immigration officials.
We may collect personal information about you in a variety of ways including when you deal with us in person or over the phone, send us correspondence (by letter, email or fax) or visit one of our web sites or when we receive personal information about you from other Carnival brands (in accordance with their applicable privacy policies).
We will not collect personal information or sensitive information unless it is reasonably necessary for one or more of our core business functions or a related activity or it is permitted under Australian law.
As far as it is reasonable or practicable, we will collect your personal information directly from you. If it is not reasonable or practicable and personal information is collected from someone else (e.g. a travel agent or another person booking on your behalf), we will take reasonable steps to ensure that you are made aware of the collection of your personal information, unless specific exemptions apply. Sensitive information will only be collected with your consent, unless specific legislative exemptions apply.
Closed Circuit Television (CCTV)
To ensure the security and safety of our passengers, CCTV cameras have been installed and operate aboard our cruise ships. In addition, shipboard crew may use body mounted cameras for security purposes. CCTV operates through the use of dedicated cameras to transmit a video image to a specific set of monitors. Access to the images shown on these monitors is available to authorised persons only. CCTV recordings are generally retained for a period of 21 days, and then deleted permanently unless retained as records of an incident.
The operation of CCTV cameras is limited to public access areas only, such as around pools and areas where children are located. Cameras have not been installed in private areas, such as toilets and change rooms.
For more information about the operation of CCTV aboard our cruise ships, please contact us on the contact details below.
Photographs
Please note that passengers may have their photos taken in public areas by cruise ship staff. Once developed, the photos are publicly displayed in photo galleries for purchase by passengers. At the end of the cruise, all unsold photos are bagged and incinerated. As with all other personal information, photos identifying individuals will be handled in accordance with our obligations under privacy legislation.
You have no obligation to provide any information requested by us. However, if you choose to withhold requested information, or you do not consent to the transfer or disclosure of your information to the countries listed in this policy, we may not be able to provide you with the products, services and assistance that depend on the collection of that information
Destruction and de-identification of personal information
If we receive personal information which we did not solicit and we determine within a reasonable period of time that we could not have otherwise collected the personal information, where lawful or reasonable to do so, we will destroy the information or ensure that the information is de-identified as soon as practicable.
Use and Disclosure
Our general rule is that we will not use or disclose your personal information other than for the primary purpose for which it is collected, which may be as stated above or at the time of collection. If we propose to use your personal information for another use, we will seek your further consent unless that other purpose is related to the original purpose of collection (the "secondary purpose"). For example, you could reasonably expect us to use or disclose your personal information collected from your booking form for the secondary purpose of us and other Carnival brands sending you information about special offers and potential discounts.
If we propose to use your sensitive information for a purpose other than for one of our functions or activities, we will seek your further consent unless it could reasonably be expected that we would use or disclose the information for the other purpose and the other purpose is directly related to the primary purpose (the “secondary purpose”). For example, if we provide medical services to you in one of our on board medical centres, you could reasonably expect us to disclose information about your health in a letter of referral to another doctor.
Where you consent to receiving promotional material from us, you consent to receiving promotional material from all of the Carnival brands and agree that we may share your personal information with other Carnival brands for that purpose. To opt out of receiving promotional material from other Carnival brands, you can email us directly at optout@carnivalaustralia.com, please type ‘Opt out of Affiliate Marketing’ into the subject line, and include your full name and VIFP number, if relevant. Please let us know whether you would like to opt out of one or more of our Carnival brands or whether you would prefer not to receive any promotional material from us at all. Any promotional material that we, or another Carnival brand, sends to you (by post or by email) will contain instructions for how you can opt out of receiving further offers from that brand.
Whilst we may retain various third parties to assist us in our booking, marketing and promotional activities (eg. to administer our direct marketing activities and to maintain an off-site database for information concerning our past passengers), we do not disclose your personal information to anyone outside Carnival for their promotional use. However, we may disclose your personal information to third parties (including our agents and contractors) to perform certain activities on our behalf. Examples include:
- fulfilling requests for brochures and sending promotional materials and communications: printing companies, mail houses, couriers, e-mail service providers;
- processing payments: banks, payment service providers;
- maintaining guest records and analysing data: customer insight and research agencies, data processors, data analysts and data washing companies, credit agencies;
- providing port services and excursions: port agents;
- providing travel services: airlines, coach operators, travel agents.
These third parties have access to personal information needed to perform their functions, but are not permitted to use it for other purposes. We seek written assurances from any third parties to whom we may disclose personal information to ensure that they will treat that information in accordance with applicable privacy laws.
If we have reasonable grounds to believe that disclosure of your personal information or sensitive information is necessary to prevent a serious threat to life, health or safety, or we are required to provide information in response to subpoenas, warrants or other legal processes including police enquiries, or enquiries from another government department (including, without limitation, Customs and Immigration) we will disclose your information for those purposes without seeking your consent.
Data Quality
We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete, up to date and relevant, having regard to the purpose for which the information is proposed to be used. We encourage you to contact us if you believe personal information we hold about you is incorrect or incomplete in some way.
Access and Correction
If you request access to the personal information we have collected about you, we will give you access to the information where reasonable and practicable to do so, within a reasonable amount of time, unless an exception exists under applicable law.
If you request that we correct your personal information or we are satisfied that the information we hold is inaccurate, out-of-date, incomplete, irrelevant or misleading, we will take such steps as are reasonable in the circumstances to correct the information, having regard to the purpose for which the information is held.
If we correct your personal information which we have previously disclosed to another entity and you request that we notify that entity of the correction, except to the extent that it is impracticable or unlawful to do so, we will take such steps as are reasonable in the circumstances to notify that other entity.
If we do not grant your request for access to the personal information we have collected about you, or for access to the information in the form requested, we will provide you with a written explanation within a reasonable period of time, including the reasons for our decision and any complaint mechanism available to you.
If we do not grant your request to correct the personal information we have collected about you, to the extent that it is reasonable to do so, we will, if requested by you, take such steps as are reasonable in the circumstances, within a reasonable amount of time, to attach to our record of your personal information any statement provided by you of the correction, deletion or addition sought.
Data Security
We take such steps as are reasonable in the circumstances to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. This includes stringent security measures on board our vessels, physical security for our offices in Australia and New Zealand and electronic security (such as password access, encryption and firewalls) for our office network servers and electronic data transfers.
If we disclose your information to a third party in connection with the provision of a service, we will take reasonable steps to prevent the unauthorised use or disclosure of information contained in the record.
Where we no longer need personal information that we hold about you for a primary purpose or secondary purpose and where lawful to do so, we will take such steps as are reasonable in the circumstances to destroy the information or to ensure the information is de-identified. We hold a basic record of guests’ cruise history (name and contact details, booking/cruise number, nights on board) indefinitely for the purpose of maintaining our loyalty scheme.
Identifiers
We will not use any government related identifier (such as your Medicare or tax file number) as our own identifier to link you with your personal information. We will not use or disclose any government related identifier of yours unless required or authorised by law.
Anonymity and pseudonymity
Where lawful and practicable, we will give you the option of not identifying yourself when dealing with us. For example, at the completion of your cruise we will request that you provide us with specific feedback on our cruise facilities on an anonymous basis.
Transborder Data Flows
Carnival Corporation and Plc is headquartered in the United States and the United Kingdom and has registered branch offices in Australia, New Zealand and various Asian countries. We may transfer your personal information between the various offices of Carnival Corporation and Plc. Where personal information is required to be shared with or accessed by other Carnival companies, we use ‘standard contractual clauses’ to ensure the adequacy of the transfer.
Casinos on our ships are operated by Carnival Cruise Line in the United States. If you use the casino then your personal information may be transferred to the United States for the purposes of monitoring and improving quality of services, and preventing and detecting fraud. For more information, please read Global Casino Operations’ Privacy Notice.
Some of our third party service providers are based overseas. For example, our customer database is jointly managed in the United States and India.
It may also be necessary to disclose your personal information to regulatory or other authorities in the ports of call in your cruise itinerary.
Website Privacy
Our websites https://www.carnival.com.au/ is maintained by Carnival Cruise Line Australia and is subject to our Website Terms & Conditions.
In an online environment there are several means by which information may be collected. The type of information collected depends on how you have interacted with our website.
When you visit our website (or any Internet site) the server records details of your visit, including:
- the type of browser and operating system (eg. Mac, PC) you are using
- the address of the referring site (ie. the previous site that you visited)
- your IP address (a number unique to the computer through which you are connected to the Internet)
- the country or region you come from
- the date and time of your visit
- the address of the pages accessed and documents you downloaded.
In addition to this we also use software to detect what screen size your computer uses and what plug-ins you have. Plug-ins are used to run features such as our Flash movies and the Quicktime VR ship and cabin virtual tours. The sole purpose of this is to make sure we can present the best viewing experience for each visitor. If you send us an error report, we use software to detect whether you are browsing from behind a firewall and what type of error you have encountered.
We also use cookies which are are pieces of information that a website can transfer to an individual's computer hard drive for tracking websites browsed by the person. This tracking enables us to customise our site information to your requirements and interests. Cookies are not unusual, most major websites use them. However, you can set your internet browser to refuse the cookies entry into your computer's hard drive.
If you send us an email via our website or you complete a form on our website the personal information submitted may be retained for the purposes of answering your query or complying with your request. Every email we receive is automatically stored on our server and backed up in accordance with our usual data management procedures. If you have completed a web form to request one of our brochures or made a booking, you will be added to our mailing list to ensure that you receive notifications of any special promotions that are on offer. You can opt out of this mailing list at any time.
Any information we collect is treated in accordance with this Privacy Policy and with applicable privacy laws.
Some of our functions are provided by third parties. In those instances, it is necessary for us to supply your information to a third party as part of fulfilling the purpose for which you have provided the information (for example, the agency which administers and maintains our e-newsletter on our behalf). Whilst we do not seek your consent again we do seek an assurance from that third party that the information will only be used for the purpose for which it is supplied and that your information is kept safe and secure in line with our own policies in that regard.
We will seek your consent before sending you marketing communication. Every email you receive from us will have details of how to remove yourself from our email lists. Remember to change your preference for each email address and other contact details you have given us. If you have any difficulty with this process you can email optout@carnivalaustralia.com and specify your request.
Our website may allow you to ‘like’ particular categories using Facebook functionality. If you ‘like’ a particular category you will receive regular notifications on your Facebook page relating to that category. If you no longer wish to receive these notifications you are required to ‘unlike’ the relevant category.
For Customers in the EU
If you are located in the EU, in addition to your rights to access and correction set out above, you are also entitled to the following rights in respect of personal information that we hold:
- Right to erasure. The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
- Right to restriction. The right to obtain the restriction of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information.
- Right to object. The right to object to us processing personal information relating to you.
- Right to port. The right to obtain certain personal information from us in a format that can be transferred electronically to a third party.
- Right to be informed. The right to be informed about the personal information being processed.
In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request. You may contact our Data Protection Officer to discuss how to exercise those rights by sending an email to dpo@carnival.com.
The procedure for exercising your data subject rights is available at www.carnival.com/request-forms/eu-customer-data-subject-rights.aspx.
You also have the right to lodge a complaint with the relevant data protection authority.
Contact Details
If you would like to request access to or correction of inaccurate, incomplete or out of date personal information, lodge a complaint about how we have handled your personal information or should you require any further information about our privacy policy, please contact us. If you are in Australia, you can:
Send an email to australiasupport@carnival.com
Write to Carnival Cruise Line, Attention: Customer Service, PO Box 1429 Chatswood NSW 2057 AUSTRALIA; or
If you are in New Zealand, you can:
Send an email to NZsupport@carnival.com
Write to Carnival Cruise Line, Attention: Customer Service, PO Box 105874, Auckland 1143, NEW ZEALAND.
Further Information about Privacy
If you are in Australia and you would like further information about privacy generally, please contact the Office of the Australian Information Commissioner by calling 1300 363 992 or visit the Commissioner’s web site at www.privacy.gov.au
If you are in New Zealand and you would like further information about privacy generally, please contact the Office of the Privacy Commissioner by calling 0800 803 909 or 09 302 8600 (Auckland) or 04 474 7590 (Wellington) or visit the Commissioner’s web site at www.privacy.org.nz.
Changes to this Privacy Policy
We may amend this Privacy Policy as our business requirements or the law changes. Any changes to this Privacy Policy will be updated on https://www.carnival.com.au/, so please visit our website periodically to ensure that you have our most current version.
Our Privacy Policy
If you request a copy of our Privacy Policy, we will take reasonable steps in the circumstances to provide you with a copy. If you would like a copy in non-electronic format, please contact us as detailed above.