10.1. Additional Disclosure Requirements Applicable to United States Residents

10.1.1. Financial Incentives
We may offer incentives related to the collection, retention, or sharing of Personal Data that may be deemed a “financial incentive” or “price or service difference.” For example, we may offer you a coupon or promo code in exchange for signing up to receive marketing emails or text messages from us. The perks of membership in our loyalty program may also be considered a financial incentive under some privacy laws. If you opt in to such an offering pursuant to the terms described at the time of signup, we may collect information such as contact information, transactional information and inferences, internet or other network activity, and device information.

Participating in any of our financial incentive programs is always optional and you can opt-out (e.g., by unsubscribing to email or closing your loyalty program account). When you do so, you will forego any additional financial incentives through these programs.

Any difference in price or rate, such as a discount, will be directly related to the value of the data. We estimate the value of the data by considering the time and cost associated with procuring such data versus the expenses related to the provision of the financial incentive. From time to time, we may provide additional terms that apply to a particular financial incentive, which will be presented to you at the time you sign up for the financial incentive.

10.1.2. Sale of Personal Data

MSC Cruises participates in targeted advertising or personalized ads, which is also called interest-based or online behavioural advertising and may include cross-contextual advertising. Under some privacy legislation, personalized ads may constitute the “sale” or “sharing” of Personal Data, such as for business purposes (e.g., providing our cruises and related services) and commercial purposes (e.g., marketing).

Accordingly, MSC Cruises may share Personal Data with third parties, such as advertising and marketing partners (i.e., travel agencies and vacation clubs, social media, casino) to promote our services and provide you with travel offers and opportunities that could be of interest, through targeted advertising and other personalized ads. As mentioned, such activity might be considered as selling of data under certain privacy laws, however, MSC Cruises does not directly monetize your personal data.

To opt out of these practices, please see the section above about opting out or visit our Do Not Sell or Share My Personal Information page.

10.1.3. Tracking and Privacy Controls

 

Our Website does not currently respond to Do Not Track, or “DNT” requests. DNT is a feature that, when enabled, sends a signal to websites to request that your browsing not be tracked.

“GPC” is short for Global Privacy Control settings in your browser or extension. Our Website recognizes GPC signals. This means that if your browser has GPC enabled, our Website will automatically recognize your GPC signal and opt you out of the sale of your personal information, if any. For more information about GPC, please click here: https://globalprivacycontrol.org/

10.1.4. Jurisdiction-Specific Rights

In addition to the privacy rights set forth in Section 6 of this Privacy Notice, if you are a resident of any of the following jurisdictions within the United States, the corresponding privacy rights apply to you:

For California Residents

The “right to access” includes the right to request the following:

  • what Personal Data we have collected, used, disclosed and “sold” about you, including the categories of Personal Data;
  • the categories of sources from which the Personal Data is collected;
  • the business or commercial purpose(s) for collecting, selling, or sharing Personal Data;
  • the categories of Third Parties to which Personal Data has been disclosed
  • the specific pieces of Personal Data we have collected about you.

Please note that we are only required to honor “right to access” requests twice in a 12-month period.

The “right to rectify” includes the right to correct inaccuracies, considering the nature of the Personal Data and the purposes of the processing.

The “right to obtain erasure” is not absolute and we will, in some cases, retain Personal Data as allowed by applicable laws and to support essential functionality, such as maintaining your subscription.

You may also designate an authorized agent to make a privacy rights request on your behalf.

In addition, California law requires us to identify, for the 12-month period prior to the date of this Privacy Notice, what information we may have “sold” or “shared” about you. For the 12-month period prior to the date of this Privacy Notice, we have only sold or shared Personal Data about customers as expressly described in this Privacy Notice.

The Shine the Light law permits you to request and obtain from us, once per calendar year, information about any of your Personal Data shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us as described in Section 1.

For Virginia, Colorado, Connecticut, and Utah Residents

The “right to access” means you have the right to confirm whether we process your Personal Data and access your Personal Data.

Please note that we are only required to honor “right to access” requests twice in a 12-month period.

The “right to rectify” includes the right to correct inaccuracies, considering the nature of the Personal Data and the purposes of the processing.

The “right to obtain erasure” is not absolute and we will, in some cases, retain Personal Data as allowed by applicable laws and to support essential functionality, such as maintaining your subscription.

You have the right to opt out of the processing of your Personal Data for purposes of personalized advertising, the sale of Personal Data, and/or profiling in furtherance of decisions that produce legal or similarly significant effects. Please see our Do Not Sell or Share My Personal Information page for information on exercising this right.

Please note that we do not process your Personal Data using machine learning and/or profiling methods in ways that would impact you in a legal or similarly significant manner.

If we deny your privacy request, you have the right to appeal our decision. To appeal a decision we have made regarding your request, you may contact us as instructed below. We will respond to appeals within 45 days.

You may also designate an authorized agent to make a privacy rights request on your behalf.

10.2. Additional Disclosure Requirements Applicable to Canadian Residents

If you are a resident in Canada, please note that this Privacy Notice also includes Canadian requirements where applicable. MSC Cruises (Canada) Limited’s privacy practices comply with the Personal Information Protection and Electronic Documents Act (Canada), the Personal Information Protection Act (British Columbia), the Personal Information Protection Act (Alberta), the Act respecting the protection of personal information in the private sector (Quebec), and any successor legislation, as applicable.