Data Processing Information

Protecting your privacy and personal data is important to us.

According to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR), there are information requirements for the collection of personal data. For this reason, you will be informed of the following information:

Data protection officer of A-ROSA Flussschiff GmbH is Mr. Gunar Laaser.
Email: datenschutzbeauftragter@a-rosa.com

A-ROSA Flussschiff GmbH collects, processes and uses your personal data in the administration of interested parties and as well as customer service only in accordance with legal regulations. The data will only be stored for the fulfilment of travel contracts, as proof in accordance with the requirements of the tax authorities, as well as for the sending of offers and for market research (with your consent). These include information for the ship manifest, surveys and the evaluation of travel services. Data is collected, processed and used for the above-mentioned purposes.

The data is processed upon your request / interest and is necessary to proceed the travel contract according to Article 6 2 GDPR.

The legal basis for personal data processed pursuant to our obtaining the consent of the data subject is Article 6 (1) a) of the EU General Data Protection Regulation (GDPR). 

The legal basis for processing of personal data necessary for the performance of a contract to which the data subject is a party is Article 6 (1) b) GDPR. This also applies to processing performed to enable pre-contractual actions.

Only the data required to render and invoice the travel service and to issue invitations to complete opinion surveys and submit reviews is transmitted to third parties (e.g. contract data to the airline, data from the ship manifest to the port authorities, contact data such as e-mail address for invitations to review our products / services). Further to their legal obligation to comply with all data protection regulations, these service providers are also bound by data protection provisions put in place by us..

When booking a cruise, the personal data of persons travelling with you may also be collected. We therefore request that you ensure that such data are provided with the consent of the persons travelling with you. Personal data of children and other minors (under the age of 18) are collected, stored and used solely for travel contract fulfilment.

Personal data are only collected and transferred to government institutions and authorities in accordance with compulsory legal provisions.

As necessary for the fulfilment of travel contracts we may also transfer your data to non-EU recipients if we are able to ensure that the data recipient guarantees an adequate level of data protection and there are no other legitimate interests against the transfer of data. In particular, we utilise the model contracts of the EU Commission for the transfer of personal data to third countries in order to ensure that the data recipient affords an adequate level of protection:

The transfer of data to A-ROSA Reederei GmbH in Switzerland, which is responsible for the operational aspects of your travel, is necessary for the fulfilment of travel contracts. The basis for data transfer to Switzerland is an adequacy decision. Switzerland provides an adequate level of protection, and does not require any special authorisation for data transfer.

If the data were not collected directly from the data subject, we receive personal data to fulfil a contract from travel agencies, travel agents or tour operators.

The following data are necessary for the fulfilment of the contract:

Contract data: Surname, name, form of address, street, house number, postal code, city, country, credit card data (PCI standard), telephone number, email address

Contact data are deleted after a period of 10 years in accordance with legal requirements (tax law).

Manifest data: Gender, passport and identity card number, nationality, date of birth, emergency contact, voluntary additional data

Manifest data are deleted 2 years after the conclusion of travel (EU Package Travel Directive).

Trustpilot: The contact data transmitted for the purpose of issuing invitations to review our products, services and booking process will be erased by the respective service provider within 7 days.