Home >
privacy

Privacy Policy

MY COSTA - WEB CALL BACK - NEWSLETTER

Costa Crociere S.p.A., Data controller, in accordance with the provisions as per Article 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code), wishes to inform you about the processing of the data you provided by registering on Costa Crociere website or by completing the f​orms available on Costa Crociere website.

PURPOSE OF PERSONAL DATA PROCESSING

The personal data collected by registering in MyCosta section or by completing the forms available on Costa Crociere website are processed in order to:

  • allow you to access the portal services which are reserved to registered users,
  • be able to contact you at your request to provide you with specific information and the support that you need for which you requested our help,
  • send commercial information and for marketing purposes both by automated (e.g. by e-mail, fax, text messages, mms etc.) and non-automated means (e.g. by ordinary mail, telephone with operator, etc.) in relation to the products and services of Costa Crociere, Costa group companies and/or commercial partners, with your specific, express consent.
  • Carry out, by electronic means, profiling activities, analyses of purchase choices and market research with the aim to improve the services offered and the commercial information provided by Costa Crociere, so that they are more suitable to your interests. Processing concerns the personal data collected also during the cruise in compliance with the guarantees and the measures prescribed by the Personal Data Protection Authority (“Authority”) with your express consent.
    This policy may be supplemented by further information disclosed when requesting any specific services.​
DATA PROCESSING METHODS

Costa Crociere guarantees that the personal data is processed with methods aimed at ensuring the protection of supplied data; specifically, data is processed by electronic and manual means or in print form, in compliance with the minimum security measures that is aimed at ensuring your confidentiality and preventing the risk of access to such data by unauthorized third parties. The data grouped by categories and/or clusters, where anonymous and aggregated, may be used for Costa Group statistical analysis in order to check the commercial trends of its customers.
Under no circumstances shall data be disseminated is such a way as contrary to the law or not expressly authorized by the data subject.

PROFILING ACTIVITY

The personal data supplied when registering with (e.g. personal details) or acquired by Costa Crociere over the course of the cruise (e.g. purchases made) may be used, prior to and with specific consent, for profiling activities, which can help improve the services offered and the commercial information provided by Costa Crociere, thus making them more suitable to your interests. The entry in the database related to profiling activities is optional and shall only be performed if you give your specific consent. We would like to stress that some pieces of information that are useful also for profiling purposes shall in any case be recorded by Costa Crociere in a different database if they are necessary to perform the service requested.
If you agree to data processing for profiling purposes, your data collected in this respect shall be managed by the Costa personnel that are specifically appointed as persons in charge of the processing as provided for in the Personal Data Protection Code.
In compliance with the guarantees and the measures prescribed by the Authority, the data collected and processed for profiling purposes shall be retained for a period of not longer than ten (10) years, at the end of which the data shall be erased or made anonymous on a permanent basis:
Please be advised that also with respect to the profiling activity, the rights under Article 7 of the Personal Data Protection Code may be exercised, as illustrated below in more detail.

MINORS

In order to safeguard minors, Costa Crociere has arranged special protection measures, although we recognize that this may limit minor users' experience in MyCosta section.
Any minors who register in MyCosta section may browse the website and save cruises to favorites.
They may not register through any other forms, buy cruises and any kind of service offered on Costa Crociere website and shall not receive any notices from Costa Crociere.
Furthermore, the collection of minors' personal data is limited to such extent as is reasonably necessary for the participation in the online activity of MyCosta section.

FAILURE TO SUPPLY DATA

The provision of your personal data is optional; however, in the absence of the data marked as "mandatory", the service or part of it shall not be supplied to you and you may not benefit from the aforementioned opportunities. The provision of the data that is not marked as "mandatory", but, however, is voluntarily supplied, if you agree, shall allow Costa Crociere to improve the services that are offered, in order for them to be increasingly more suitable to your personal interests. Failure to provide your consent to marketing and profiling activities, to the analysis of the purchasing choices and to market research shall not prejudice the execution of the requested performance, but shall prevent Costa Crociere, group companies and commercial partners from offering services and commercial information that are most suitable to your interests.

DATA CONTROLLER AND PROCESSORS

The Data Controller is Costa Crociere S.p.A. with offices in Genova, Piazza Piccapietra 48.
Correct execution of the requested services may imply that the personal data is accessed by Costa Crociere internal personnel, in their capacity as persons in charge of the processing and/or data processor, as well as by third-party companies, or companies within the Costa group, including subsidiaries (also based abroad), which carry out activities, in their capacity as independent data controllers or processors, being strictly related and instrumental to the provision of services provided by said companies. The list of the subjects to whom the data is disclosed is available at the company to the following addresses: info-pao@costa.it or Costa Crociere S.p.A., Piazza Piccapietra 48, 16121 Genova, for the attention of the Privacy Sales & Marketing Manager.

RIGHTS OF THE DATA SUBJECT

At any time, you may exercise, also in relation to the profiling activity, the rights as per article 7 of the Personal Data Protection Code, including the right to receive confirmation of whether or not your personal data exists, to know the content and origin, to verify the accuracy and request any additions or updates, or correction thereof, as well as the right to request erasure, anonymity or blocking of any data processed in breach of the provisions as per the Personal Data Protection Code and to oppose, in any case, for legitimate reasons, processing, as well as to oppose, also in part, – including in relation to transmission methods – any marketing and profiling activities, by sending a notice by e-mail to info-pao@costa.it or by mail to Costa Crociere S.p.A., Piazza Piccapietra 48, 16121 Genova, for the attention of the Privacy Sales & Marketing Manager.

COSTA CLUB - COSTA CRUISETIPS

1. All personal data provided when subscribing to the CostaClub Programme or any later acquired data is processed by Costa Crociere, in its capacity as Data Controller, in compliance with the statutory and regulatory provisions concerning personal data protection in force and in particular in compliance with Legislative Decree no. 196 of 30 June 2003 ("Personal Data Protection Code").

2. Purposes of processing. Processing operations and the personal data collected are necessary to manage the Member's participation in the CostaClub Programme, to award to the Member any points and other benefits associated with enrolling in the CostaClub Programme and holding the CostaClub Card, as well as to provide the related services, as specified in these Regulations. The data may be processed with the aim to send any notices relating to the Costa Club Programme, as well as, prior to your consent, to market products and services of Costa Crociere and group companies for profiling purposes. In particular:
a. Marketing activity. The data notified by members, when subscribing to the Programme and/or when registering in the MyCosta section on the website www.costacruisesasia.com and/or subsequently acquired by the company in the course of the ordinary management of the Club (e.g. total amount spent on board, type of cruises taken etc.), may also be processed, prior to specific consent from the Member, to send commercial communications and for marketing purposes of Costa Crociere, Costa group companies and/or commercial partners. Processing may be by automated (e.g. by email, fax, text messages, etc.) and/or non-automated means (e.g. by ordinary mail, telephone with operator, etc.).
Costa Crociere also informs that personal data may be used to provide members with institutional notices which are functional to the Member role and to any benefits involved in the Programme. Specifically, Costa Crociere may use the Member's e-mail address that was provided when joining Costa Club or during the participation in the Programme in order to send informational and promotional notices related to the Club and its initiatives, as long as the Member does not object to its use. Costa Crociere notes that the Member may opt-out any time of this type of communication by clicking “unsubscribe” at the bottom of the e-mail received or by sending the appropriate request to the addresses highlighted below.

b. Profiling activity. Costa Crociere, with the express consent from the Member, may also carry out such activities as profiling, analysis of Member's travel preferences and market research in order to improve the services offered and the commercial information provided by Costa, thus making them more suitable to the Member's interests. Processing concerns the personal data collected also during the cruise in compliance with the guarantees and the measures prescribed by the Personal Data Protection Authority (“Authority”).
The personal data supplied when enrolling and registering with the Costa Club Programme, when purchasing the tourist package (e.g. personal details) or those that shall be acquired by Costa Crociere over the course of the cruise (e.g. purchases made) may be used, only prior to and with specific consent, for profiling activities, which can help improve the services offered and the commercial information provided by Costa Crociere, thus making them more suitable to the interests of its Members. The entry in the database related to profiling activities is optional and shall only be performed if you give your specific consent. Should the Member disagree to this processing, Costa Crociere informs that some pieces of information that are also useful for profiling purposes shall in any case be recorded in a different database if they are necessary to perform the service requested.
If the Member agrees to data processing for profiling purposes, the data collected in this respect shall be managed by the Costa Crociere personnel that are specifically appointed as persons in charge of the processing as provided for in the Personal Data Protection Code.
In compliance with the guarantees and the measures prescribed by the Authority, the data collected and processed for profiling purposes shall be retained for a period of not longer than ten (10) years, at the end of which the data shall be erased or made anonymous on a permanent basis.
The Member is also informed that with respect to the profiling activity the rights under Article 7 of the Personal Data Protection Code may be exercised, as illustrated below in more detail

3. Processing methods. Costa Crociere guarantees that the personal data is processed by electronic and manual means or in print form, in compliance with the minimum security measures that are aimed at ensuring confidentiality for the data subject and preventing the risk of access to such data by unauthorised third parties. The data grouped by categories and/or clusters, where anonymous and aggregated, may be used for statistical analysis. Under no circumstances shall data be disseminated in such a way as contrary to the law or not expressly authorized by the Member.
Personal data is processed throughout the Programme and for its later editions, under the terms and conditions set out in these Regulations and shall be retained after such expiry and/or upon termination or upon exercising the right to object as per Article 7 of the Personal Data Protection Code by the Member for the sole purpose of managing disputes and/or for administrative and accounting purposes and after the expiry or termination according to the limitation period of Members' rights.

4. Data transmission scope. The data may only be disclosed for the aforementioned purposes to the subjects classified as follows: (i) companies within the same Group as Costa Crociere, including those based abroad; (ii) persons, companies, associations or firms that provide support or advisory services or activities to Costa Crociere (iii) subjects whose right to access the data is recognized by statutory provisions or secondary legislation or by provisions prescribed by authorities which are entitled to this purpose by law. Furthermore, both internal personnel, in their capacity as persons in charge of the processing and/or data processor for the management of the relationship between us, and external subjects, acting as data controllers or processors, may be aware of the data, as they were appointed by Costa Crociere to perform specific processing operations, including those related to the profiling activity. For the same purposes as stated above, your data may be transferred abroad to EU and non-EU third-party companies. The list of subjects to whom data is notified is available by writing to the address info-pao@costa.it or the addresses specified below. You are required to supply your data in order to enroll in the Costa Club.

5. Failure to supply your data and consent. When registering with the CostaClub Programme, it is mandatory to provide the personal data marked with an asterisk (*) in order to complete Programme enrollment successfully and for any related initiatives, as well as for the fulfillment of statutory obligations. Any refusal to supply the requested personal data, in whole or in part, also during the execution of the Programme, shall result in the impossibility, for Costa Crociere and for the third-party companies providing the services as part of the Programme, to ensure full execution of or to fulfil their obligations deriving from the Programme. On the other hand, the supply of personal data other than those marked with an asterisk (*) is optional and failure to provide them does not cause any consequences in relation to Member's registration and participation in the Programme.
The Member shall be adequately informed about the processing of any personal data collected for Programme objectives and shall be asked, where required by law, to provide appropriate consent. In particular, the Member is entitled to express his/her choices freely as to personal data processing as well as to express his/her intention separately for each purpose pursued, including (i) the transmission of commercial communication by Costa Crociere in relation to its services and/or products; (ii) the transmission of comment forms and delivery questionnaires concerning customer profiling data to analyse consumption habits and implement informational and commercial activities that can most specifically suit members' interests; (iii) marketing activities by third parties, including Costa group companies, also abroad and/or commercial partners. Failure to provide the consent for the stated purposes shall not compromise the correct execution of the Costa Club Programme, to which the Member enrolled, but shall not entitle you to receive information or offers related to products and services of Costa Crociere or third parties, including Costa group companies.

6. Controller and Processor. The Data Controller is Costa Crociere S.p.A. with offices in Genova, Piazza Piccapietra 48. Correct execution of the requested service may imply that the personal data is accessed by Costa Crociere internal personnel as person in charge of the processing and/or data processor, as well as by third-party companies, or companies within the Costa Crociere group, including subsidiaries (also based abroad), which carry out activities, in their capacity as independent data controllers or processors, being strictly related and instrumental to the provision of services provided by said companies.

7. Member rights. The Member, at any time, may exercise, also in relation to the profiling activity, the rights as per Article 7 of the Personal Data Protection Code, including the right to receive confirmation of whether or not his/her personal data exists, to know the content and origin, to verify the accuracy and request any additions or updates, or correction thereof, as well as the right to request erasure, anonymity or blocking of any data processed in breach of the provisions as per the Personal Data Protection Code and to oppose, in any case, for legitimate reasons, their processing, as well as to oppose, also in part, – including in relation to transmission methods – any marketing and profiling activities, by sending a notice by e-mail to info-pao@costa.it or by mail to Costa Crociere S.p.A., Piazza Piccapietra 48, 16121 Genova, for the attention of the Privacy Sales & Marketing Manager.

WEBCHECK-IN

Pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 - Personal Data Protection Code (hereinafter, the “Code”), Costa Crociere S.p.A. informs you that the personal data (hereinafter the "Data") you provided when purchasing the tourist package or otherwise acquired as a result or during your cruise shall be subject to processing, in compliance with the said Code.

Purposes of processing
Your data shall be processed both in print form and electronically, so as to guarantee integrity and confidentiality by adopting the most advanced security tools, for the following purposes:
a) entering, managing and executing the contractual relationships between you and Costa Crociere:
b) any purposes in connection with the performance of statutory obligations, rules, national and EU regulations as well as deriving from provisions. prescribed by authorities which are entitled to this purpose by law.
c) processing in an anonymous manner statistics and market research;
d) implementing any such activities as may be functional to make the trip more comfortable and guarantee high entertainment standards aboard the ships (e.g. parties, photos and video shoots, games, etc.). In addition, with respect to photos and videos taken by our photographers aboard our ships who contribute to providing you an unforgettable travel experience, note that if you do not wish to be involved in the shoots/photos or if you wish that the photos of you are not displayed on Photoshop notice boards, please go to our Photoshop that from time to time will take note of your preference. The photo depicting you may be removed only after you have expressed your request.
e) promotional activities of Costa Crociere, group companies, including abroad, and/or commercial partners, performed by automated means (email, text messages, etc.), for which you shall be asked to provide, if so required by law, your express consent. In particular, Costa Crociere may use your e-mail address, which was supplied when purchasing the tourist package, to send you informational and promotional communications related to any similar services and products and offered by Costa Crociere also without your consent, unless you object to such use. Costa informs you that you may opt-out any time of this type of communications by clicking “unsubscribe” at the bottom of the e-mail received or by sending the appropriate request to the addresses highlighted below.
f) prior to specific consent, profiling activities to analyse, by electronic tools, purchase choices and consumption habits and market research with the aim to improve the services on offer and the commercial information provided by Costa Crociere, so that they are more suitable to your interests. Processing shall be performed in compliance with the guarantees and the measures prescribed by the Personal Data Protection Authority (“Authority”), as more extensively described in the relevant section below.

Profiling activity

As pointed out, the personal data provided when purchasing the tourist package (e.g. personal details) or those that shall be acquired by Costa Crociere during the cruise (e.g. purchases made) may be used, prior to specific consent, for profiling activities, which can help improve the services on offer and the commercial information provided by Costa Crociere, thus making them more suitable to your interests. The entry in the database related to profiling activities is optional and shall only be performed if you give your specific consent.
We would like to stress that some pieces of information that are useful also for profiling purposes shall be in any case recorded by Costa Crociere in a different database if they are necessary to perform the service requested.
If you agree to data processing for profiling purposes, your data collected in this respect shall be managed by the Costa personnel that are specifically appointed as person in charge of the processing as provided for in the Personal Data Protection Code.
In compliance with the guarantees and the measures prescribed by the Authority, the data collected and processed for profiling purposes shall be retained for a period of not longer than ten(10) years, at the end of which the data shall be erased or made anonymous on a permanent basis:
Please be advised that also with respect to the profiling activity the rights under Article 7 of the Personal Data Protection Code may be exercised, as illustrated below in more detail.

Data transmission scope

The Data shall be disclosed, exclusively for the aforementioned purposes, to the following categories of subjects:
- companies within the same Group as Costa Crociere;
- persons, companies, associations or firms that provide support and advisory services or activities to Costa Crociere;
- subjects whose right to access the data is recognized by statutory provisions or secondary legislation or by provisions prescribed by authorities which are entitled to this purpose by law, including the authorities at the ports of call.
Furthermore, both internal personnel, in their capacity as person in charge of the processing and/or data processor for the management of the relationship between us, and external subjects, acting as data controllers or processors, may be aware of the data, as they were appointed by Costa Crociere to perform specific processing operations. For the same purposes as stated above, your data may be transferred abroad to EU and non-EU third-party companies. You are required to supply your data in order to execute the contract.

Sensitive data

Some of the data you provided may also be defined as "sensitive" by the Code. This data may be only processed with your written consent; in the absence of such consent, Costa Crociere may not be able to perform some of its contractual obligations. In detail, the data that may reveal your health conditions, prior to your written consent, shall be processed both for security and health reasons and as a guarantee that you shall receive the necessary medical assistance, and for any purposes in connection with the performance of statutory obligations, rules, national and EU regulations as well as deriving from provisions prescribed by authorities which are entitled to this purpose by law.

Failure to supply your data and consent

The provision of your personal data is optional; however, in the absence of the data marked as "mandatory", the requested performance or part of it may not be supplied to you and you may not benefit from the afore-mentioned opportunities. The provision of the data that is not marked as "mandatory", but, however, is voluntarily supplied, if you agree, shall allow Costa Crociere to improve the services being offered, in order for them to be increasingly more suitable to personal interests of its passengers. Failure to provide your consent to marketing and profiling activities, analyses of the purchasing choices and market research shall not prejudice the execution of the requested performance, and shall prevent Costa Crociere, group companies and commercial partners from offering services and commercial information that are most suitable to your interests.

Data controller and processors

The Data Controller is Costa Crociere S.p.A. with offices in Genova, Piazza Piccapietra 48.
Correct execution of the requested service may imply that the personal data is accessed by Costa Crociere internal personnel, in their capacity as persons in charge of the processing and/or data processor, as well as by third-party companies, or companies within the Costa group, including subsidiaries (also based abroad), which carry out activities, in their capacity as independent data controllers or processors, being strictly related and instrumental to the provision of services provided by said companies.
The list of subjects to whom data is disclosed is available at the company to the following addresses:
info-pao@costa.it or Costa Crociere S.p.A., Piazza Piccapietra 48, 16121 Genova, for the attention of the Privacy Sales & Marketing Manager.

Rights of the data subject

At any time, you may exercise, also in relation to the profiling activity, the rights as per Article 7 of the Code, including the right to receive confirmation of whether or not your personal data exists, to know the content and origin, to verify the accuracy and request any additions or updates, or correction thereof, as well as the right to request erasure, anonymity or blocking of any data processed in breach of the provisions as per the Personal Data Protection Code and to oppose, in any case, for legitimate reasons, the processing, as well as to oppose, also in part, – including in relation to transmission methods – any marketing and profiling activities, by sending a notice by e-mail to ​info-pao@costa.it or by mail to Costa Crociere S.p.A., Piazza Piccapietra 48, 16121 Genova, for the attention of the Privacy Sales & Marketing Manager.

Cookies Policy

Please note that we use “cookies” technology to obtain information about your experience on our website and to allow certain services to operate that require the user's path through the various pages of the website to be identified.

What are cookies?

A “cookie” is information sent by a server to a browser, which allows the server to collect information from the browser, and vice versa. The cookie will help the website to recognise your device the next time you visit. There are many functions cookies serve. For example, they can help us to remember your username and preferences, analyse how well our website is performing, or even allow us to recommend content we believe will be most relevant to you.

Our cookies are normally anonymous and are not traceable to the user's personal data. First-party cookies are associated to the domain name of the page you are looking at and allow the person to be identified by cross-reference with our database, may only be assigned at the explicit request of users and in order to allow their immediate identification for access to restricted areas of the website without requiring them to enter the login and password manually. The user's identity is never in any case included directly in the cookie and cannot be intercepted.

Every time you access the website, regardless of whether a cookie is present or not, we record the type of browser, the operating system and host and the visitor's source URL, as well as information on the requested page. This data may then be used in aggregate and anonymous form for statistical analysis of how the website is being used.

What types of Cookies does Costa use?

Four types of cookies are used on our website: Strictly necessary, performance, functionality and identification cookies. Our website does not collect personal details and information relating to the individual, unless he/she voluntarily decides to enter them. You can, therefore, browse our website without disclosing any personal identifiable data, including your email address. Remember that if you choose to disable cookies, some sections of the website may not work properly.

Third-party cookies

Costa also uses third-party cookies, installed by Google Analytics for example, to process statistical analyses of the user's browsing habits, on the number of pages visited or the number of clicks the user makes on a page when browsing. Costa processes the results of these analyses for statistical purposes on website user behaviour, in order to improve and fine-tune website content. If you would like further information about third-party cookies, and for information about how to manage or refuse them, click on the links in the table:

What appens to cookies that have been downloaded in the past?

We will only read or write cookies for the preference level set in the Cookies Settings tool. Cookies set prior to you changing your settings will still be on your computer and you can remove them using your browser settings.

Cookies on Costa Cruises from Social Networking sites

We have links so you can use social networking websites (e.g. Facebook and Twitter or You Tube) from Costa Cruises. These websites may place cookies on your computer and this tool will not block cookies from these websites. We suggest you check the networking website to see how they are using cookies.

Some additional information about the cookies settings tool

We use a cookie to remember your cookie preferences in the Cookies Settings tool this has a couple of consequences:

  • If you delete all your cookies you will have to update your preferences with us again; and
  • If you use a different device, computer or browser you will have to tell us your preferences again

Cookie preference settings are set for this website only (i.e. www.costacruisesasia.com). If you move to another Costa website (e.g. ​www.costacruises.co.uk​​), you'll need to set your cookie preferences for that website too.

Do we track whether users open our emails?

Our emails may contain a single, campaign-​unique “web beacon pixel” to tell us whether our emails are opened and verify any clicks through from links within the email. We may use this information for purposes including determining which of our emails are more interesting to users, and query whether users who do not open our emails wish to continue receiving them. The pixel will be deleted when you delete the email. From that moment on we will not be able to get any data, but will keep previous one.

More information about cookies is available at http://www.youronlinechoices.com/

Managing cookies in the browser

Each type of browser handles cookies in a different way. To disable sumbit your browser:

Accept Refuse

Strictly Necessary Cookies

Some cookies are essential for our website to work properly. These cookies allow us to provide the services requested by users and allow you to browse the website to the best of its capabilities. This type of cookie cannot be disabled because it is needed for the website to work properly.


 

Performance and functionality cookies

Performance cookies gather anonymous information about the pages visited by users. They are used to track the pages most frequently sought and are useful for improving links between pages and determining the reason for possible error messages. Functionality cookies also save the choices made by users in order to improve navigation and your online experience. These cookies are used, for example, to allow you to save a cruise in your list of "favourites". If you remove these cookies, which do not gather any sensitive user data, you will lose some of the functionalities of the website, which will therefore perform less well.


 

Identification or advertising cookies

These cookies gather information about your browsing habits in order to bring you advertising that is important and relevant to your interests. Sensitive user data will not be tracked, but we advise you to visit the http://www.youronlinechoices.com/uk/ website for more information. If you remove these cookies, you won't lose any functionality.