Information on the Processing of Personal Data (pursuant to Article 13 of Italian Legislative Decree no. 196/2003)

MSC Cruises S.A. is resolutely committed to guaranteeing its customers’ privacy, so would like to inform you about the collection and use of personal data. In accordance with Article 13 of Italian Legislative Decree no. 196 of 30th June 2003 – Personal Data Protection Code (hereinafter referred to as the “Code”), MSC Cruises S.A. informs you that personal data (hereinafter referred to as "Data") provided by you, or otherwise acquired as a result of or on the occasion of your cruise, may be processed in compliance with the Code.


    Website Cookies

    Cookies are small text files sent by websites to users’ browsers for the purpose of automatic authentication, session tracking and storing of specific information regarding users.
    There are essentially three types of cookies used on this website:

    • Technical cookies
    • Required for navigation within the site and to use some of its functions (e.g. timing the display of certain pages in so-called “pop-up” mode etc.).
    • Statistical cookies  (Google Analytics) 
    • Supplied and managed by Google to provide a statistical analysis of access to the website. The information is solely collected anonymously and in aggregate form and no personal user data is retained. You can decide not to use Google Analytics cookies by following the instructions at the following link: 
    • Profiling cookies  
    • Supplied and managed by third parties to generate specific advertising messages based on browsing habits and the interests of individual users. These cookies do not, however, use sensitive user data. This Website currently uses Google Doubleclick cookies. For more information, including information to opt out from the cookie, please click the following link:

    Cookie opt-out

    Cookie functions can be disabled via the appropriate page made available by the EDAA (European Interactive Digital Advertising Alliance) or by checking the "Privacy" settings of your Internet Browser.
    Please note that disabling cookies may impair the correct functioning of the certain website sections.

    Purpose of processing

    Your Data – which may also appertain to some data deemed sensitive (set out in Articles 4, paragraph 1, letter d, and 26 of the Code), as well as photos/images and audio/video recordings – will be processed for the following purposes:
    • concluding, managing and implementing contractual relations between you and MSC Cruises S.A;
    • purposes linked to fulfilling legal obligations, regulations, national and EU standards, as well as those arising from provisions issued by the authorities and to this end justified by law;
    • activities closely linked to and instrumental in managing relations with guests on board and for ensuring the provision of services as part of the touristic package (e.g., acquiring personal details through bookings for services relating to the various thematic areas of entertainment and relaxation, the organisation of events, photos of events or functions on board, etc.).
    Moreover, if you give your express consent, your data will be processed for the following subsequent purposes:
    • offering a series of exclusive benefits and privileges before and after the cruise;
    • compiling statistics on customer profiles, useful in developing products and services that better meet the requirements of its customers;
    • sending personalised offers, invitations to events of different kinds, as well as information and marketing communications, by post, electronic mail, SMS and fixed-line phones;
    • nominative profiling activities (analysis of consumption patterns to develop marketing strategies, including customised approaches);
    • promotional and commercial activities by companies belonging to the MSC Cruises S.A. corporate group or by third parties, partners of MSC Cruises S.A.
    The processing of Data to achieve these purposes is necessary for ensuring the proper management of contractual relations, in addition to fulfilling the purposes indicated above.

    Processing methods and storage

    The processing of your Data may involve their respective collection, recording, retention, modification, communication and\or deletion; this will be carried out either using print media, or by electronic and telematic means, in such a way as to guarantee the data’s integrity and confidentiality, as well as to comply with the methods stipulated in Articles 11, 31 and subsequent articles of the Code, and respect the minimum security measures prescribed by the technical specifications (Annex B to the Code).
    The Data will be retained for no longer than necessary to achieve the aims for which they were collected and subsequently processed. Photos/images and audio/video recordings taken at events or functions on board will be retained for no longer than the duration of the cruise and then deleted. Data collected and processed for purposes relating to the MSC Voyagers Club program will, once the respective enrollment has ceased, be kept for a maximum of two months for purely administrative purposes, except if required to fulfill the requirements of accounting legislation in force.
    Your Data will not be disseminated and may be disclosed, for the above-mentioned purposes, to staff responsible for processing them in order to organize activities on board, companies belonging to the same corporate group as MSC Cruises S.A., people, companies, associations or professional bodies that provide services or support and consulting activities for MSC Cruises S.A. and other entities, granted permission to access the Data by statutory provisions, secondary regulations and/or rules issued by authorities with the lawful right to do so, including the port authorities at the point of disembarkation. The entities belonging to the above-mentioned categories shall utilize the Data as independent data controllers under the law and with full autonomy, being uninformed of the original processing undertaken by MSC Cruises S.A. The nominal list of the parties to whom/which your Data have been or may be communicated is available for you to consult.

    Data Processor

    The data processor (with the exception of images/photos and audio/video recordings, which will be processed directly by the Controller, according to the procedures and for the purposes described above) is MSC Crociere S.p.A., acting through its pro tempore legal representative, having its registered office at 31, Via Agostino Depretis, IT-80133 Naples (Italy) – Tel. +39 81 794 2111 – e-mail:

    Data Controller

    The data controller is MSC Cruises S.A., acting through its pro tempore legal representative, having its registered office at Avenue Eugène-Pittard 40, CH-1206 Geneva (Switzerland).

    Right to access personal data and other rights (pursuant to Article 7 of Italian Legislative Decree no. 196/2003)

    The data subject has the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of whether they have already been recorded, and to communication of such data in an intelligible form. The data subject has the right to be informed of: a) The source of the personal data;  b) The purposes and methods of the processing;  c) The logic applied to the processing, if this has been carried out using electronic means; d) Details of the data controller, data processors and the representative designated under Article 5, paragraph 2; e) The entities or categories of entity to whom/which the personal data may be communicated and who/which may be notified about these data in their capacity as designated representative on the State’s territory, data processors or persons in charge of the processing.  The data subject has the right to obtain: a) Updating, rectification or, if interested, integration of the data, b) Deletion, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed; c) Certification to the effect that the operations under letters a) and b) have been reported, including as to their content, to the entities to whom/which the data were communicated or disseminated, unless this requirement proves impossible to comply with or involves a clearly disproportionate effort compared with the right to be protected. The data subject has the right to object, in whole or in part: a) On legitimate grounds, to the processing of personal data concerning him/her, even if they are relevant to the purpose of their collection; b) To the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or for undertaking market or business communication research.