This document is available in English for non-Spanish speakers’ convenience. However, should contradictions arise, the Spanish text will prevail.

ALMA VICTORIA S.L., operating commercially as ALMA CRUCEROS, is a trading company whose main activity involves the management, organization and marketing of cruises. This requires the processing of users’ or clients’ personal data. In compliance with our obligation to grant infiormation, we have developed this privacy policy to provide you with the information necessary to understand the scope and purpose of the data processing, so that any consent you provide for such processing will be based on informed approval, in accordance with the Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights, and the General Data Protection Regulation (EU) 2016/679, of April 27, 2016, on the protection of natural persons concerning personal data processing and the free movement of such data.

Which are the origin and categories of the data?

The personal or non-personal data that we process come from the information you provide when requesting information, or establishing any type of relationship with us, directly through the contact details. Therefore, the collection of information regarding user data can be directly, if the request for our services or information is required directly by end consumers, in addition to the data extracted from the forms that are completed, but especially when interacting with professionals in the tourism sector, such as other travel agencies, user data are provided to us by them to facilitate the travel service required and information is generated by the contractual relationship itself.

Which personal information do we obtain?

The personal data we process come from the information provided by the interested parties when contacting us through any of the ways we make available to users.

The categories of data that we will process will be of a general nature, such as your identification data; full name, ID card or passport, email / postal address, telephone; economic data once the contract has been formalized and your image if you have given your consent.

It is also possible that we process special data, as defined in art. 9 of the General Data Protection Regulation, only concerning special diets/allergies, if the customer has provided us with such data. If the user provides essential data for the proper provision of the requested service and concerning health data, such as allergies, food intolerances, disabilities, etc., the user expressly authorizes their processing as it may be necessary (and mandatory for the provision of the service), that his/her data must be communicated to suppliers whose intervention is essential for the provision of services such as transportation companies, caterers, on board medical service providers, or similar, which will be required to use the data, solely and exclusively, to fulfill the purpose of the contract.

These accessory and/or sensitive data will be processed applying all security and confidentiality guarantees reasonably applicable from a technical point of view, and will be deleted from our systems once the service or trip has been completed. Failure to accept this processing means the impossibility to provide personalized services for which special data is required.

All personal data are processed confidentially in accordance with the privacy and security policies implemented in ALMA CRUCEROS.

Who is responsible for the processing of your data?

The Data Controller is ALMA VICTORIA S.L., with Tax Identification Number B70787940 and registered office at Alameda Principal nº 49, 29001 Málaga, Spain. You can contact us at our physical address indicated in this paragraph or by e-mail at datospersonales@almacruceros.com, or by phone at +34 629 661 600.

For which purpose do we process the personal data?

ALMA CRUCEROS will process the personal data provided by the users in order to achieve the following objectives:

• For the development, execution and fulfillment of the hired service, the necessary data will be collected, being these data: Personal identification data such as, address, email, telephone, ID/passport proving the identity of the traveler necessary to provide the hired service, nationality, country of residence, economic data once the contract is formalized and if so established when providing the services purchased.
• Management of special data provided directly by users or through professionals of the tourism sector, and essential for the provision of the requested service, with the corresponding consent.
• To inform of any relevant novelty with respect to the hired services, changes or notifications, the channels of communication between the users and ALMA CRUCEROS can be any of those facilitated by the users for this purpose, including an e-mail address, a fixed or mobile telephone number and instant messaging services as authorized channels. 
• We collect the IP address, in order to generate usage statistics that allow us to improve our products and services and for security reasons.
• To manage the consultations raised through any of the indicated routes of communication. In the case that the person interested only has contacted with ALMA CRUCEROS, to request information on the services that are lent, his/her data will be processed to take care of the requests or requests of information that he/she makes with respect to the offered services, with follow-up after sending the proposal. ALMA CRUCEROS will only process the personal data that are strictly necessary to manage or to solve the request or demand.
• For commercial purposes, the interested person that effectively is a client of ALMA CRUCEROS will be able to receive news on analogous products that ALMA CRUCEROS also provides. Nevertheless, the client is informed that he/she will be able to oppose at any time by addressing himself/herself to ALMA CRUCEROS by means of the aforementioned channels.
• To manage the data of the users of the web that are obtained through the cookies that will be processed to guarantee the operation of the web allowing the user to browse, make use of the different options offered by the portal, as well as allowing the analysis of the data regarding visitors and sessions.
• Management of the selection process of ALMA CRUCEROS with future candidates.
• In addition, as long as the interested party, not yet a client, has given his/her consent, his/her personal data will be processed for the sending of commercial, advertising and/or promotional communications, the user being able to oppose this processing at any time through the address provided in each of these communications, or at the address indicated in this privacy policy. 
• Prior and express consent will be sought for the capturing and reproduction of photographic and audiovisual images for publication on ALMA CRUCEROS’ website and/or on ALMA CRUCEROS’ social networks.
• In addition, express consent will be obtained for the elaboration of profiles related to the analysis of the shopping experience, analysis of the opinions provided by the client about his/her experience through electronic comment forms, age composition of the participants in the trip, as well as market analysis of the reservations.

What is the legal basis for the processing of your data?

The legal bases for the processing of your data are:

• Management of pre-contractual and, where appropriate, contractual measures based on Article 6.1.b) of the General Data Protection Regulation, as we collect and process your personal data mainly for the execution of contracts according to the terms and conditions contained in such contracts. 
• To manage queries raised through reported means of communication for communications with users. This treatment is based on Article 6.1.f) of the general data protection regulation, the legitimate interest that ALMA CRUCEROS has to attend to the information requirements received.
• The unequivocal consent based on article 6.1.a) of the General Data Protection Regulation, in case you are not a client, for the sending of commercial communications, news.
• We may obtain and process your personal data for our legitimate interests based on Article 6(1)(f) of the General Data Protection Regulation. Such legitimate interests include: The offering of products and services that finds its legitimacy in the legitimate interest of the Data Controller, with the Client being able to express at any time his/her opposition to this type of processing without in any case the exercise of this right conditioning the execution of the contract.
• Access to the web portal and web application of ALMA CRUCEROS, called ALMA to have access to information and contracting of cruise services.
• Management of the selection process with future candidates. This processing is legitimized in the unequivocal consent given by the future candidates for inclusion in the database of ALMA CRUCEROS.
• Managing the data of web users that are collected through cookies, this processing is legitimized in the unambiguous consent given by users.
• In international data transfers, we inform that their legitimacy is covered by Article 49.1 b) of Regulation (EU) 2016/679, since they are transfers necessary for the performance of a contract between the interested person and the controller or for the performance of a contract between the interested person and the Data Controller or for the execution of pre-contractual measures taken at the request of the interested person. Failure to accept this processing will make it impossible to provide the service and fulfill the contract.
• For the fulfillment of legal obligations.

For how long do we keep your personal data?

ALMA CRUCEROS processes your personal data for the period necessary to fulfill the purposes set forth in this Privacy Policy, as well as to retain your personal information in compliance with the provisions of the relevant laws and regulations.

Specifically, the data will be retained for the entire duration of the contract, to be blocked at the expiration of the contract. In this way, the data will be blocked and stored for 5 years, which is the prescription term for any actions that may arise from the contractual relationship entered into.  

The data that the user has consented for the sending of commercial information will be retained until the user requests cancellation, at which time the data will be deleted.

To which recipients will your data be communicated?

ALMA CRUCEROS will communicate the data collected to third party suppliers related to the Data Controller (developers, online marketing, invoicing, management, transport companies, medical services, catering or restaurant companies, etc) whose intervention is necessary for the fulfillment of the purposes described herein.

For the provision of services provided by some of the suppliers/carriers that are located in territories outside the European Economic Area and that do not provide a level of data protection comparable to that of the European Union, the performance of international data transfers is intrinsic. In such cases, we inform you that we transfer your data with appropriate guarantees and always safeguarding the security of your data. We apply the guidelines of the European Data Protection Committee regarding the implementation of security measures to ensure the appropriate level of protection.

ALMA CRUCEROS is managed through the digital marketing platform JUNIPER based in Spanish territory, whose servers are located within the European Union, although there are other servers where backups are made (back ups) in the United States, which involves a flow of personal data from Spanish territory to recipients established in countries outside the European Economic Area (International Data Transfers). JUNIPER guarantees adequate security levels, privacy policy and compliance with Commission Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council. 

In the absence of an adequacy decision by the Commission, in relation to the country where the data is hosted, ALMA CRUCEROS applies the guidelines of the European Data Protection Committee on the appropriate supplementary measures to ensure the equivalent level of protection, with adequate guarantees and always safeguarding the security of your data.

Outside the cases described here, no data will be communicated, except for legal obligations.

Social networks

ALMA CRUCEROS is present in some social networks on the Internet, in which it acts as the Data Controller in relation to the data published by ALMA CRUCEROS. The social networks are those listed below:

Instagram: www.instagram.com/almacruceros/

Facebook: www.facebook.com/profile.php?id=61558849869504

LinkedIn: www.linkedin.com/company/almacruceros/

The users of the social network can configure the privacy and security options that facilitate the social networks, and ALMA CRUCEROS is not responsible for the processing of the data of the users of the social network. 

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether ALMA CRUCEROS is processing personal data concerning him/her.

The interested party shall have the right to withdraw his or her consent at any time, provided that the processing is not necessary for the performance of the contract. The withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal. 

As interested person you can exercise your rights of access, rectification, suppression, limitation, portability and opposition to the processing of personal data, at any time and free of charge by sending an email to datospersonales@almacruceros.com or by writing to ALMA CRUCEROS at the address indicated at the beginning of this privacy policy, indicating the right you wish to exercise and your identification data.

The exercise of rights will be answered within one month of receipt of the request, which may be extended for another two months if necessary, taking into account the complexity and number of requests.

In addition, if you consider that your rights have not been met, you may file a complaint with the Spanish Data Protection Agency (AEPD) as the national supervisory and control authority for data protection.

Last update: June 2024