1. WHO ARE WE? We are COSTASOL CRUCEROS S.L. and we process your personal data as data controllers. This means that we take responsibility for how we use and protect your data. Vea más en la política completa de protección de datos.
2. WHAT DO WE USE YOUR DATA FOR? We will use your data (obtained online or in person), among other purposes, to manage your registration as a user, manage the purchase of our services, deal with your queries and, if you wish, to send you our personalised communications. Ver más en la Política completa de protección de datos
3. WHY DO WE USE THEM? We are entitled to process your data for different reasons. The main reason is that we need to process them in order to execute the contract you accept with us when you register and make a purchase or enjoy one of our services or functionalities, although there are other reasons that legitimise us to do so, such as the interest in attending to your queries or the consent you give us to send you our communications, among others. See more in Full Data Protection Policy
4. WITH WHOM DO WE SHARE YOUR DATA? We will share your data with service providers who help or support us, or external partners with whom we have entered into a contractual agreement, whom we check for compliance with applicable laws and regulations. See more in Full Data Protection Policy.
5. RIGHTS. You have the right to access, rectify or delete your personal data. In some cases, you also have other rights, for example, to oppose us to use your data or to carry it, as we explain in detail below. See more. We invite you to read our full Privacy and Cookie Policy below to understand in detail how we will use your personal data and the rights you have in relation to it.

1. WHO IS RESPONSIBLE FOR THE TREATMENT OF YOUR DATA? The person responsible for the processing of your data is:

2. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA? Depending on the products, services or functionalities that you want to enjoy at any time, we will need to process some data or others, which in general will be, as appropriate, the following: your identifying data (for example, your name, surname, language and country from which you interact with us, contact information, etc); economic and transactional information (for example, your payment or card details, information about your purchases, orders, etc.); connection data, geolocation and navigation (in case you interact with us from the mobile, for example); commercial information (for example, if you subscribe to our communications), information about your tastes and preferences. Remember that, when we ask you to fill in your personal data to give you access to some functionality or service of the WEB, we will mark some fields as mandatory, since they are data that we need to be able to provide the service or give you access to the functionality in question. Please bear in mind that if you decide not to provide us with this information, you may not be able to complete your registration as a user or that you may not be able to enjoy these services or functionalities. Depending on how you interact with our WEB, we will process your personal data for the following purposes:

PURPOSE:

1. To manage your registration as a WEB user. In case you decide to register as a user on our WEB, we need to treat your data to identify you as a user of the same and give you access to its different functionalities, products and services that are available to you as a registered user. You can cancel your registered user account by contacting us through Customer Service.
2. For the development, fulfilment and execution of the contract of sale or services that you have contracted with Us on the WEBSITE. This purpose includes the processing of your data to, mainly: Contact you regarding updates or informative communications related to the functionalities, products or services contracted, including the sending of quality surveys on the products or services provided. Manage the payment of the products you buy, regardless of the payment method used. For example: if when you buy any of our products through the Web or the App, you choose to activate the functionality of saving your card data for future purchases,

COSTASOL CRUCEROS S.L. : Spanish company, with C.I.F: B 29833811 dedicated to the maritime transport of passengers and boat trips. Registered in the Mercantile Registry of Malaga, volume 1971 of the Archive, book 884 of the General Societies section, folio 37, sheet number MA-28042, inscription 1st

Postal Address: Calle February No 22 Benalmádena Costa C.P. 29630 Malaga

Email for Data Protection : info@costasolcruceros.com

We need to process the indicated data for the activation and development of such functionality. The consent for the activation of this functionality allows your self-complete payment details to appear in subsequent purchases so that you do not have to re-enter them in each new process, and they will be considered valid and valid for subsequent purchases. You can modify or delete your cards at any time through the section corresponding to the payment information, either from your user account registered on the Web. Activate the necessary mechanisms in order to prevent potential fraud against you and us during the purchase process. If we consider that the operation can be fraudulent, this treatment can result in the blocking of the transaction. Manage possible returns once you have made a purchase and manage requests for information on the availability of seats, ticket reservations through the WEB, according to these options are available at any time. For billing purposes and to make available to you the tickets and invoices of the purchases that you have made on the WEB. To guarantee the use of other functionalities or services available, such as the purchase, management and use of Gift Cards or the Gift Ticket, as well as to facilitate the access and use of the Wifi that we make available to our customers on the Ships.

3. We only process personal data that is strictly necessary to manage or resolve your application or request in order to deal with the requests or requests that you make through the Customer Service channels. If you decide to use WhatsApp as a channel to communicate with Customer Service, we will provide your phone number to WhatsApp Inc. to verify that you are a user of this service. We recommend that you review your privacy settings and read the WhatsApp privacy policy to obtain more detailed information about WhatsApp’s use of the personal data of the users who use its services
4. For marketing purposes This purpose includes processing your data mainly for the following purposes: To the extent that you subscribe to our Communications, we will process your personal data to manage your subscription, including sending you personalised information about our products or services through various means (such as email or SMS). We may also send you this information via push notifications if you have activated push notifications on your mobile device. Therefore, please note that this data processing involves the analysis of your user or customer profile to determine what your preferences are and therefore which products and services may be more suited to your style when sending you information. For example, based on your shopping and browsing history, we will make suggestions about products we think you might be interested in and, if you are a registered user, we will provide you with the “cart recovery” functionality. Remember that you can unsubscribe from our Communications at any time and free of charge through the WEB, as well as through the indications we provide you with in each communication. If you do not wish to receive push notifications, you can deactivate this option on your mobile device. To carry out promotional actions (for example, for the development of competitions). By participating in any promotional action, you authorise us to process the data you provide us with in accordance with each promotional action and we may communicate them through various media such as social networks or on the WEBSITE itself. In each promotional action in which you participate you will have available the legal bases where we will provide you with more detailed information about the processing of your data. Disseminate on the WEBSITE or through our social media channels photographs or images that you have shared publicly, provided that you give us your consent to do so.
5. Usability and quality analysis to improve our services If you access our WEBSITE, we inform you that we will process your browsing data for analytical and statistical purposes, i.e. to understand how users interact with our WEBSITE and thus be able to make improvements to it. Likewise, sometimes we carry out quality actions and surveys aimed at knowing the degree of satisfaction of our customers and users and detecting those areas in which we can improve.
6. WHAT IS THE LEGITIMACY FOR THE PROCESSING OF YOUR DATA? The legal basis for us to process your personal data also depends on the purpose for which we process it, as explained in the table below: Purpose Legitimation 1. Manage your registration as a user of the WEB The processing of your data is necessary for the execution of the terms that regulate the use of the WEB. In other words, so that you can register as a user on the WEB, we need to process your personal data, since otherwise we could not manage your registration. In the event that you choose to use the access or login through a social network, the reason we are entitled to process your data is the consent you give when authorizing the transfer of your data from the social network. Purpose Legitimation 2. Development, fulfillment and execution of the contract of sale or services The treatment of your data is necessary for the execution of the contract of sale or provision of services that link us with you. It is possible that some data processing associated with the purchase process will be activated only because you request it or authorize us, such as the storage of payment data (card) for future purchases or data processing or to inform you of the availability of our products. In these cases, the basis on which we process your data is your own consent. We believe that we have a legitimate interest to carry out the necessary checks to detect and prevent possible fraud when making a purchase. We understand that the processing of this data is positive for all parties involved in the payment of a purchase and in particular for you as it allows us to put measures in place to protect you against fraud attempts by third parties. Purpose Legitimation3. Customer Service. We believe that we have a legitimate interest to meet the requests or queries that you raise through the various existing means of contact. We understand that the processing of this data is also beneficial for you as it allows us to properly assist you and resolve the questions raised. When you contact us, in particular, for the management of incidents related to your order or the product / service acquired through the WEB, the treatment is necessary for the execution of the sales contract. When your query is related to the exercise of the rights about which we inform you below, or with claims related to our products or services, what legitimises us to process your data is the fulfilment of legal obligations on our part. Purpose Legitimation 4. Marketing The legitimate basis for processing your data for marketing purposes is the consent you give us, for example when you agree to receive personalised information by various means, when you authorise the sending of push notifications on your mobile device, or when you accept the legal bases for participating in a promotional action or for publishing your photographs on the WEBSITE or on our social media channels. To show you personalized information, we consider that we have a legitimate interest in profiling with the information we have about you (such as browsing, preferences or purchase history) and the personal data that you have provided as an age range or language, Since we understand that the processing of this data is also beneficial for you because it allows you to improve your user experience and access information according to your preferences. Purpose Legitimation 5. Usability and quality analysis We consider that we have a legitimate interest to analyze the usability of the Platform and the degree of user satisfaction since we understand that the processing of this data is also beneficial for you because the purpose is to improve the user experience and Offer a higher quality service.

4. HOW LONG WILL WE KEEP YOUR DATA? The term of conservation of your data will depend on the purposes for which we treat them, as explained below:

Purpose / Conservation term

1. Manage your registration as a user of the Platform We will process your data during the time you maintain the status of registered user (that is, until you decide to unsubscribe).
2. Development, fulfilment and execution of the contract of sale or services We will process your data for the time necessary to manage the purchase of the products or services you have purchased, including possible returns, complaints or claims associated with the purchase of the particular product or service. On some occasions, we will only process the data until you decide, as is the case with the payment data (card) that you have asked us to store for possible future purchases.
3. Customer Service. We will process your data for as long as necessary to meet your request or request.
4. Marketing We will process your data until you unsubscribe or cancel your subscription to our communications. If you participate in promotional actions, we will keep your data for a period of six (6) months from the end of the action.
5. Usability and quality analysis We will treat your data promptly during the time in which we proceed to carry out an action or survey of concrete quality or until we anonymize your navigation data.

Regardless of whether we process your data for the time strictly necessary to fulfill the corresponding purpose, we will keep them later

duly stored and protected during the time in which responsibilities arising from the treatment may arise, in compliance with the regulations in force at all times. Once they prescribe the possible actions in each case, we will proceed to the deletion of the personal data.

5. WILL WE SHARE YOUR DATA WITH THIRD PARTIES? To fulfill the purposes indicated in this Privacy and Cookies Policy, it is necessary that we give access to your personal data to third parties that provide us with support in the services we offer, namely: Financial entities, Fraud detection and prevention entities , Technology service providers, Service providers related to customer service. Suppliers and collaborators of services related to marketing, advertising and labor management.

In all cases, we inform you that we transfer your data with adequate guarantees and always keeping the security of your data: With all suppliers we have signed Type Contract Clauses approved by the Commission.

6. WHAT ARE YOUR RIGHTS WHEN YOU FACILITATE YOUR DATA? We promise to respect the confidentiality of your personal data and to guarantee the exercise of your rights. As Data Controllers, you can exercise your rights free of charge by sending us an e-mail to info@costasolcruceros.com, simply indicating the reason for your request and the right you wish to exercise. If we consider it necessary to identify you, we may request a copy of a document proving your identity. In particular, regardless of the purpose or legal basis under which we process your data, you have the right to: • Request access to the data we have available to you. We remind you that if you are a registered user on the Platform you can also consult this information in the section corresponding to your personal data. • Ask us to rectify the data we already have. Remember that if you are a registered user of the WEB you can also access the section corresponding to your personal data of your account to modify or update your personal data. However, keep in mind that, by actively providing us with your personal data by any means, you guarantee that they are true and accurate and you agree to notify us of any changes or modifications to them. Any loss or damage caused to the WEB or to the person in charge of the WEB or to any third party due to a communication of erroneous, inaccurate or incomplete information in the registration forms, will be the sole responsibility of the user.

Please remember that as a general rule you should only provide us with your own personal data, not those of third parties, except as allowed in this Privacy and Cookies Policy. • Ask us to delete your data to the extent that they are no longer necessary for the purpose for which we need to treat them as we have informed you above, or that we no longer have the legitimacy to do so. • Ask us to limit the processing of your data, which means that in certain cases you can ask us to temporarily suspend the processing of the data or to keep it beyond the necessary time when you may need it. If you have provided us with your consent to the processing of your data for any purpose, you also have the right to withdraw it at any time. Some of the ways in which you can withdraw your consent are explained in section 2 in which we explain for what purposes we treat your data. When our legitimacy for the processing of your data is your consent or the execution of the contract, as explained in section 3, you will also have the right to request the portability of your personal data. This means that you will have the right to receive the personal data that you have provided us in a structured format, commonly used and readable by a machine, to be able to transmit it to another entity directly, whenever technically possible. On the other hand, when the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data. Finally, we inform you of your right to lodge a complaint with the relevant data protection supervisory authority, in particular: the Spanish Data Protection Agency. (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php)

7. WHAT HAPPENS IF WE PROVIDE THIRD PARTY DATA? We offer functionalities or services that require us to process the personal data of a third party that you provide us, If you provide us with Personal Data of third parties, you guarantee to have informed them about the purposes and the way in which we need to process your personal data.
8. CHANGES TO THE PRIVACY AND COOKIES POLICY: We may change the information contained in this Privacy and Cookie Policy from time to time. In case we do, we will notify you in different ways through the WEB (for example, through a banner, a pop-up or a push notification), or we will even notify you to your email address when the change in question is significant for your privacy, so that you can review the changes, assess them and, where appropriate, oppose or unsubscribe to any service or functionality. In any case, we suggest that you review this Privacy and Cookies Policy from time to time in case there are minor changes or introduce any interactive improvement, taking advantage that you will always find it as a permanent point of information on our Website and our App.
9. INFORMATION ABOUT COOKIES We use cookies and similar devices to facilitate your browsing on the WEBSITE, to know how you interact with Us and, in certain cases, to be able to show you advertising based on your browsing habits.