Privacy Notice

Celebrity Central

Who's responsible for your personal data?)

When you sign up as a user of our web-based platform available under www.celebritycentral.co.uk (hereinafter “Celebrity Central”), you, RCL Cruises Ltd of Building 7, The Heights, Brooklands, Weybridge, Surrey KT13 0NY, UK (“We”, “Us”, or “Our”) will act as a controller, and are responsible for the processing of any personal data you provide to Us via Celebrity Central.

This Privacy Notice relates specifically to the use of Celebrity Central. For a more general explanation of the way We as well as the other companies of our group – which consists of Us, Royal Caribbean Cruises Ltd., 1050 Caribbean Way, Miami, Florida 33132, USA trading as Celebrity Cruises Inc., 1050 Caribbean Way, Miami, FL 33132, USA and their and Our affiliates and subsidiaries (hereinafter the “Royal Caribbean Group”) – process data of our suppliers and business partners, please see Our Suppliers and Business Partners Privacy Notice.

This notice does not relate to data processing for consumers. For information on how We process data of guests and consumers please see Our Consumer Privacy Notice.
What personal data do We collect or receive?
1. The following are categories of your personal data that We process:
  
  Initially, We will collect data you provide to Us (e.g. name, date of birth, payment data, ABTA number) for the purpose of your registration to Celebrity Central. We will also collect information relating to Our business relationship (e.g. contracts, bookings and revenues generated by your agency and created by you). Additionally, We might, to the extent permitted by law, check your details against law enforcement registers and Our internal records for security purposes.
  
  When you use the training and product education services provided through Celebrity Central such as Celebrity Passport, We will record your training process (e.g. courses completed, stamps earnt).
  
  We might from time to time process your data for the purpose of participation in incentive programs such as Celebrity Rewards. We will collect personal data such as contact data in order to fulfill Our obligations under such incentive programs.
  
  Using technology, our sites can collect information about the type of browser you are using, your operating system and your IP address information using technology. An IP address is a number that is automatically assigned to your computer and is recognized by Web technology whenever you are surfing the Internet. As technology evolves, additional methods of information gathering may be used, such as “pixel tags” (also known as “web beacons” and “clear gifs”). We will update our Privacy Policy from time to time to record any changes in the way we use your data and inform you of this.
2. If you provide information to Us containing personal data of individuals (e.g. employees, sub-agents or guests), please make sure that you or your company is authorized by all relevant individuals to provide their personal data, including sensitive data (e.g. health data), to Us and to permit the processing of such personal data as set out in this Privacy Notice. This includes – as the case may be – notifying relevant individuals in accordance with applicable data protection law and, where necessary, obtaining consent.
How We use your personal data and who We share it with
1. This section explains how We use the personal data listed above and who We share it with. We process the data for the purpose of Our business relationship, e.g. for fulfilling and evaluating our mutual contractual obligations, offering business incentives (conferences, cruises etc.) and opportunities to you and evaluating your professional trustworthiness.
2. We use your personal data:
  (a) On the basis of your consent, to
  - provide, maintain, improve, and develop Our services
  - communicate with you
  - inform and advise you on products of Royal Caribbean Group
  - provide medical assistance, e.g. in the context of a cruise provided in the course of an incentive trip
  (b) For the preparation and/or performance of a contract with you, to
  - establish a business relationship
  - set up and maintain your user accounts, provide technical support and for other related purposes
  - prepare offers for Our products, deliver Our services to you and fulfill our mutual contractual obligations
  - to reward you with incentives pursuant to Celebrity Rewards on achievement of any terms for the payment of incentives
  (c) For our legitimate interests, to
  - provide, maintain, improve, and develop Our services
  - communicate with you
  - enhance the security of Royal Caribbean Group’s IT-systems for the benefit of all Our users
  - assess your performance when you are rendering services to Us
  - assess your professional trustworthiness
  - provide for your safety and the safety of others when you are on board one of Our ships
  - establish, exercise or defend a legal claim
  - identify and pursue new ways to develop and grow Our business
  (d) For Compliance with Our legal obligation
  We are sometimes subject to legal requirements to collect, retain and disclose personal data, for example for customs agencies or port authorities to allow Our ships to dock, or where We need to cooperate with law enforcement agencies, including in relation to criminal investigations. Pursuant to the United States’ Stored Communications Act (the SCA), We may be considered a provider of electronic communication services for certain services We offer through the digital platforms (because We provide users of the digital platforms the ability to send or receive wire or electronic communications). In such instances, We will not turn over records or other information pertaining to you unless compelled to do so by a Court of competent jurisdiction.
  
  (e) For Our business management activities
  including, but not limited to, accounting, tax and fraud audits and investigations and to enable Us to conduct reporting. Reports help Us to monitor Our performance and the performance of Our Suppliers as defined below. Additionally, We keep records to assist with any complaints you may have or in the event of a legal claim. We also process your feedback to improve Our products and services.
We may share your personal data with the following recipients for the purposes list above.

(a) Other members of the Royal Caribbean Group
We are a global business and We need to share your personal data with other members of the Royal Caribbean Group for the purposes above.

(b) Our Suppliers
When We say "Suppliers" in this Privacy Notice, We mean the parties who provide Us with products and services that enable Us to run Our business and Celebrity Central. This includes third parties who help Us to host data, manage our websites, administer delivery of incentives, record data relating to performance, deliver cruise vacations, such as transport and accommodation vendors, media vendors, port agents, and who assist Us to run Our business, such as accountants, consultants, payment providers, auditors, IT service and platform providers, insurance providers, and legal advisers (together, Our “Suppliers”).

We use products and services from Our Suppliers in the operation of Our business. We choose Our Suppliers carefully and put in place safeguards to ensure that they protect your personal data. Specifically the services provided to you through the Celebrity Central Portal are operated on Our behalf by the following Suppliers:

The Celebrity Central website, Celebrity Toolkit and Celebrity Passport are operated on Our behalf by Front Page, 2nd Floor, Doges, Templeton on the Green, 62 Templeton Street Glasgow, G40 1DA.

Celebrity Booking is run on our behalf by Codegen Limited (company no. 04134223) with registered office address at York House, Empire Way, Wembley, Middlesex, HA9 0FQ.

Celebrity Rewards is run on our behalf by Motivforce Marketing and Incentives Limited (company number 07669029) with registered business address 17 Hanover Square, London, england, W1S 1HT. All of the abovementioned supplier process personal data on Our instruction as described in this privacy policy.

(c) Our Business Partners
We partner with companies to complement the products and services that We provide to you. We only do this in compliance with applicable law.

We will provide, via our processor MotivForce, certain personal information to MasterCard Europe Services Ltd (company no. 09210818) with registered office address 10 Upper Bank Street, Canary Wharf, London, England, E14 5NP in order to provide you with your card that will be credited with any cash incentives you earn via Celebrity Central portal.

(d) Ports, customs and other government authorities, law enforcement agencies and courts and parties to litigation
We may need to share your personal data where required under the laws of countries in which We operate. Local ports and customs authorities require details of individuals onboard to process Our ships in the ports at which they call. Law enforcement agencies may also require access to personal data, including in connection with criminal investigations, or We may be ordered to disclose personal data by a court or in connection with legal proceedings.

(e) Other third parties
We may share your personal data with other third parties at your request. Celebrity Central may provide links to websites and applications or other digital tools that We believe may be useful to you in addition to adverts placed by third parties. These links will lead you to websites or digital tools operated by third parties operating under their own privacy policies. We encourage you to review those privacy policies, as We have no control over those third parties nor the information you may submit to those third parties.
Direct marketing
1. We may contact you for marketing purposes, including to tell you more about Our services, share news or tell you about promotions from time to time. You are always in control of the emails and texts that you receive and you can update your preferences in Celebrity Central or opt out at any time by following the links in Our emails or by contacting Us using the details provided below. Please note that even if you have opted out of marketing messages, We might still need to contact you in relation to your bookings and trainings with Us.
Cookies and other tracking technologies

This page provides a guide to the cookies this website may place on your computer, and information on how to control those cookies. You may also wish to refer to our Privacy Policy for privacy information.
1. What are cookies?
  
  As is common practice with almost all professional websites this site uses cookies, which are tiny files that are downloaded to your computer, and allow our website to recognise your device and improve your experience of the site.
2. How we use cookies
  
  We use cookies for a variety of reasons, the table below explains the cookies we use and why:
  1. Google Analytics
    
    This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. Google Analytics tracks activity such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content. 3 cookies titled “_ga”, “_gat” and “_gid” are connected to the Google Analytics plugin that’s used to handle traffic data relating to each platform’s page and how many users are accessing it. The data collected is anonymous and only highlights the number of page visits, time length, time of visit and which region it is being accessed from.
    
    For more information on Google Analytics cookies, see the official Google Analytics page.
  2. PHPSESSID
    
    Remembers your 'session ID' ensuring a smooth site browsing experience, the site will not function correctly without it.
  3. ASP.Net
    
    Celebrity Passport is built using Microsoft’s C# programming language and their ASP.NET framework. As part of the user login procedure, 2 cookies are utilised as part of the platform’s functionality. The first one titled “.ASPNet.ApplicationCookie” relates to the login authentication functionality that’s within all ASP.Net applications that uses the user-specific login feature. It is a cookie-based authentication functionality that enables a user to hold a login session and automatically times out after a certain amount of time. The cookie can also expire when the user formally logs out of the platform. It is required for a user to have an active cookie in order to be logged into the Celebrity Passport platform.
    
    The second cookie titled “_RequestVerificationToken” is required as part of the “Anti-Forgery Token” functionality present within the Celebrity Passport platform that prevents Cross-site Request Forgery (CSRF) attacks from taking place on the website. It prevents an intruder from hijacking a user’s login in order to obtain access to their user’s details and account.
3. Disabling cookies
  
  You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of this site.
  
  To opt out of being tracked by Google Analytics across all websites visit: http://tools.google.com/dlpage/gaoptout
4. More information
  
  Hopefully that has clarified things for you however if you are still looking for more information then you can contact us.
Data retention
1. We retain your personal data only for as long as necessary: (i) for the purposes set out in this Privacy Notice; (ii) to provide Our products and services to you; (iii) to comply with Our legal obligations (e.g. to comply with tax or accounting rules or in connection with legal proceedings); or (iv) to comply with Our usual business data retention policies. If you want to learn more about how long we retain your personal data, please contact Us at any time using the contact details provided above.
Acting on someone else’s behalf
1. If you give Us information about another person (or persons), such as an employee, We will understand this to mean that they have appointed and authorized you to act on their behalf. This includes providing consent (to the extent this is required) to:
  
  (a) Us processing their personal data; and
  (b) you receiving any notifications and notices on their behalf.
  
  We may ask you to provide evidence that you have been appointed and authorized to act on behalf of the other person (or persons).
International data transfer
1. We are a global business and We need to share your personal data with other members of the Royal Caribbean Group and third parties for the purposes that We explain in this Privacy Notice. This means that We may transfer your personal data outside of the EEA (including to the United States, as this is where the servers that We use for Our business, and on which your personal data is stored, are located). Sometimes transferring your personal data outside the EEA will be necessary for Us to perform Our contract with you. If any personal data is transferred outside the EU or EEA, whose data protection laws may be less protective that that of the EU / EEA, we will ensure that the recipient of the personal data provides an adequate level of data protection, in particular, by implementing contractual safeguards such as standard contractual clauses for data transfers which are approved by the European Commission.
Your rights
1. you have the right to ask Us to:
  
  (a) restrict Our processing of your personal data;
  (b) object to Our processing of your personal data;
  (c) request that We move your personal data to another organization;
  (d) object specifically to Us using your personal data for profiling for direct marketing purposes; or
  (e) provide a copy of your personal data in an easily accessible format.
  (f) you also have the right to make a complaint about how We process your personal data to your data protection supervisory authority.
  (g) Where you have specifically consented to Our use of your personal data, you have the right to withdraw that consent at any time. Please contact Us if you want to do this.
Changes to this Privacy Notice
1. This Privacy Notice may be updated from time to time for any reason. We will notify you of any changes to Our Privacy Notice by updating the Privacy Notice within the digital platforms. In the event of a material change to this Privacy Notice, you will be notified from within the digital platforms and asked to acknowledge your acceptance of the changes to the Privacy Notice.
2. In the event We are involved in a merger, acquisition, or sale of all or a portion of Our assets, you will be notified via email and/or in a prominent notice on Our digital platforms of any change in ownership or uses of this information, as well as any choices you may have regarding this information.
Contact Us and complaints
1. If you require any other information about any part of this notice, you can contact Our Data Protection Officer at Royal Caribbean Cruises Ltd. at the mailing addresses above or via email at privacy@rccl.com.