6. Promotional Communications. We may use your personal information to send you updates (by email, text message, telephone or postal mail) about our products and/or services, including exclusive offers, promotions or new products and/or services.
We have a legitimate interest in processing your personal information for promotional purposes (see above “How and why we use your personal information”). This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.
We will always treat your personal information with the utmost respect and never sell or share it with other organizations for marketing purposes.
You have the right to opt out of receiving promotional communications at any time by:
- Contacting us at legal@riverside-cruises.com ; or
- Using the “unsubscribe” link in emails or “STOP” number in texts; or
- updating your marketing preferences in your account.
We may ask you to confirm or update your marketing preferences if you instruct us to provide further products and/or services in the future, or if there are changes in the law, regulation, or the structure of our business.
7. With Whom We Share Your Personal Information. We may share your personal information with the parties described below:
(a) Our affiliates, including Riverside Collection GmbH & Co. KG, Wexstrasse 16, 20355 Hamburg, Germany and Seaside Hotel Hamburg Verwaltungs- GmbH Wexstraße 16, 20355 Hamburg, Germany;
(b) Other third parties and service providers we use to help us run our business, such as marketing agencies, website hosts, payment service providers, social media sites you choose to link your account and/or data services providers;
(c) Credit reporting agencies;
(d) Our insurers and brokers;
(e) Our banks; or
(f) External auditors.
We only allow our service providers to handle your personal information if we are satisfied that they take appropriate measures to protect your personal information.
We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
We may also need to share some personal information with other parties, such as potential buyers of some or all of our business or during a re-structuring. The recipient of the information will be bound by confidentiality obligations.
When we share your personal information with our affiliates, the personal information is transferred to, stored in, and accessible from Germany, which may not have the same data protection laws as the jurisdiction applicable to your personal information.
8. Types of Personal Information We Share and/or Disclose for Business Purposes. We share the information as described in Section 3 with the parties described above.
9. Personal Information We Sold or Disclosed for a Business Purpose.
In the preceding 12 months, we have not sold to third party any of your personal information (as defined above) and we will not sell any of your personal information.
In the preceding 12 months, we may have disclosed for a business purpose to one or more third parties the following categories of personal information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household: Categories A, B, C, D, F, G, and H (defined Section 2).
The business purpose may include processing transactions that you have requested. For example, we may share your name, email address, and billing address to with third parties, such as credit card companies and shipping companies, in order to process your transactions, e.g., the purchase of products and/or services from us and/or the delivery of your purchased products to you). The business purpose may also include providing products and/or services to you, including booking the requested trip, and providing customer service. The business purpose may also include sharing information with third-parties, e.g., cloud service providers, in order to enable us to provide you with the purchased products and services.
10. Where Your Personal Information is Held. Information may be held at our offices and at our digital storage locations in Germany.
11. How Long Your Personal Information Will Be Kept. We will keep your personal information while you have an account with us or while we are providing services to you. Thereafter, we will keep your personal information for as long as is necessary:
(a) To respond to any questions, complaints or claims made by you or on your behalf;
(b) To show that we treated you fairly; or
(c) To keep records required by law.
We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information. We will de-identify, aggregate, or otherwise anonymize your personal information if we intend to use it for analytical purposes or trend analysis over longer periods of time.
12. Your Rights. You have the right to exercise free of charge the rights listed in the following table.
Disclosure of Personal Information We Collect About You:
You have the right to know:
> The categories of personal information we have collected about you;
> The categories of sources from which the personal information is collected;
> Our business or commercial purpose for collecting or selling personal information;
> The categories of third parties with whom we share personal information, if any; and
> The specific pieces of personal information we have collected about you.
> Please note that we are not required to: was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained; Re-identify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or Provide the personal information to you more than twice in a 12-month period.
Your Right of Access:
You have the right to ask us for copies of your personal information.
Your Right to Rectification
You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplet
Your Right to Restriction of Processing
You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Right to Information
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this turns out to be impossible or requires a disproportionate effort. We will inform the applicable recipients upon your request.
Your Right to Data Portability
You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.
13. Keeping Your Personal Information Secure.
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality.
14. How to Contact Us and Exercise Your Rights. If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.riverside-cruises.com or 833-305-3313.
Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.
If you choose to contact us directly you will need to provide us with:
(a) Enough information to identify you (e.g., your full name, address and customer or matter reference number);
(b) Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
(c) A description of what right you want to exercise and the information to which your request relates.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.
Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
15. Changes to This Privacy Notice.
We may change this privacy notice from time to time–when we do, we will inform you via our website.
Do You Need Extra Help?
If you would like this notice in another format (for example: audio, large print, braille) please contact us (see "How to contact us" above).