Privacy policy

Overview

The protection of personal data and the responsible handling of information that you entrust us with are very important and are a priority for us. We process personal data only in accordance with the law, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (German BDSG).

With this privacy policy, we are informing you how, to what extent and for what purposes we collect and process personal data during your use of this website (including our career portal).

1. Data Controller in the Meaning of the Data Protection Law

Carnival Maritime GmbH
Großer Grasbrook 9
20457 Hamburg

phone:  +49 (0) 40 - 30 2393 1100
e-mail: info@carnival-maritime.com

2. Contact Details of the Data Protection Officer

Carnival Maritime GmbH, Datenschutzbeauftragter, Großer Grasbrook 9, 20457 Hamburg

E-Mail: privacy@carnival-maritime.com

3. Processing of Personal Data (Career Portal, Job Applications)

The subject of data protection are personal data. Data are personal if they relate to a specific or identifiable person. This includes information such as name, address, email address and telephone number. Generally, this website can be used without your personal data being collected or processed. Your personal data is collected and processed if you voluntarily provide it. This in particular concerns the following situations related to a job application. In these cases, we may process the data provided by you based on your request (Art. 6(1)(b) GDPR) or based on our legitimate interest in offering a career portal (Art. 6(1)(f) GDPR).

3.1 Creating a Profile on Our Career Portal

In order to use our career portal for job applications, you can create your personal user account. In that case, we ask you to provide your personal details, contact data, and user data via the registration form. Mandatory fields are indicated with an asterisk.

To secure your profile, we ask you to provide a password (you can review the password rules by clicking on “Help”) and we also ask for a security question in order to be able to reset your password in case you should forget it.

The profile information will be stored by us to maintain and manage your account. It will be reduced to name and date of birth six months after the application process has ended. The account will automatically be deleted 2 years after your application, or if you decide to delete your account.

3.2 Applying for a Job

If you decide to apply for a position through our career portal and submit an application, we ask you to provide your personal details (in particular salutation, title, name, postal address, age, nationality), contact data (e-mail and mobile phone number) and information on your earliest availability for a position. This information is mandatory if you want to submit an application. Optionally, you may also choose to provide information on your desired salary or, in case you are available for a Skype interview, your Skype account.

To complete your application, you need to go to the “Your application” section to upload a CV and relevant certificates. In addition, you may choose to upload a correspondence letter and/or a photo.

If you want to provide us with any relevant links to websites in order to support your application and to enable us to learn more about you, you can also provide us with links, e.g. to your own website, your YouTube channel or your profile on XING, LinkedIn, Facebook or Instagram. We may then visit the indicated website and take the information into account in the application process.

Before you submit your application, you can view the summary of all the information provided by you by clicking on the “Summary” tab.

You can also apply for jobs via other means, e.g. by e-mail.

All of the above data provided by you for purposes of the application will exclusively be used for the application process. If your application is successful and we enter into an employment relationship with you, we will store your application data within your personnel file. Otherwise, we will delete the data six months after the end of the application process (unless you agree to become part of the applicant pool, see 3.4); only your name and date of birth are stored for up to two years to identify repeat applications in our legitimate interest.

You can also decide to tell us where you found out about our job offers, we will only use this information for internal administrative purposes in order to optimize our advertisements of open positions.

3.3 Video Interviews

In case you are available for interviews via Skype, you may also provide your Skype user account. Please note that the Skype service is offered by Microsoft Inc. and subject to their privacy notice. We will not record Skype interviews.

We may also invite you to a live and/or recorded video interview with a different provider (such as Cammio BV, Cammio B.V. in Voorschoten, Willem de Zwijgerlaan 68, 2252VS, The Netherlands). In that case, we will ask you to provide a separate consent to the data processing in the context of such interview.

It will not have any negative impact on your application if you are not available for a video interview.

3.4 Applicant pool

We offer you to include your application in our applicant pool with your consent. This may be helpful if we cannot currently offer you a position or none of our positions fits your profile. If you agree to add your application to the pool, as soon as a vacancy opens that would be suitable for you, we will contact you. We will store your information in our applicant pool for a maximum of twelve months.

You may withdraw your consent at any time with effect for the future by writing an e-mail to career@carnival-maritime.com. In that case, your application will be deleted from the pool.

4. Automatic Collection and Processing of Data During the Use of this Website

When you visit our website, we present you with a “cookie consent manager” to ask you about your cookie preference when using this website. In particular, we ask you whether you consent to the use of cookies for the purpose of creating usage statistics and personalizing the website experience. You may decide at any time to limit or withdraw you consent; your options to do so are explained in detail below.

4.1 Data Processing to Enable the Use of the Website

When you visit our website, we collect the necessary data to enable you to use it (usage data). This includes your IP address and data about the start, end and subject of your use of the website as well as any data for identification (e.g. your login data when you log into a secure area such as the career portal). This also includes the technical data transmitted by your browser such as browser type, previously visited website (referrer URL), monitor resolution, etc. These data are used to provide and design the service as needed. They are always deleted as soon as they are no longer needed. For the processing of pseudonymous user profiles see section 4.3.

4.2 Use of Cookies and Other Tracking Technology

When you visit our website, we display a "cookie banner" to inform you that we use cookies and other tracking technologies to improve the user experience on our website and for the purposes of web analytics and interest-based advertising.

The associated data processing is described in detail in the information below. Via the cookie banner, you can choose whether you only want to use the website with the technically necessary cookies or whether you give your consent so that we can also use cookies and similar tracking technologies for statistical purposes and to personalize the website (for details, see our cookie information).

You can revoke this consent in whole or in part at any time with effect for the future. To do this, you can call up the cookie banner again at any time via the following link:

Link to Manage Cookie Consent  

When you visit our website, depending on the selection you make via the cookie banner, information is stored on your computer in the form of cookies. Cookies are small text files that are sent to your browser by a web server and stored on your computer's hard drive. This makes it possible, for example, to recognise you when you visit the website again. In this way, we can ensure better functionality of the site and, for example, avoid you having to log in repeatedly or we can carry out web analysis (see below).       

Required cookies: Some cookies are necessary for the provision of the website and the associated functions. The legal basis for the use of these cookies is our legitimate interest under Art. 6(1)(f) GDPR in the provision and proper and secure operation of the website.

Cookies for additional functions: In addition, we may use cookies and other tracking technologies for additional functions, in particular to record and analyse user behaviour on our website in order to improve our own offering. We may also use cookies and other tracking technologies to provide personalised offers and advertisements or to measure the success of advertising campaigns on other sites. We only set these types of cookies if you give your consent to do so via the cookie banner (Art. 6(1)(a) GDPR).

1st-party cookies and 3rd-party cookies: There are different types of cookies. A distinction must be made between cookies that are set by the website operator when you visit a website (also known as "first-party cookies") and cookies that are set by third-party providers (also known as "third-party cookies"). We only have technical control over the first-mentioned cookies. Otherwise, the cookies are set and read directly by the third-party provider.

Session cookies and permanent cookies: On the other hand, there are cookies that are only stored on your computer during your respective visit to our website (also called "session cookies") and cookies that are stored for a longer period of time.

In particular, the following cookies may be set on your computer when using our website:

4.3 Web tracking and analysis for statistical purposes and personalisation of the website, in particular Google Analytics

We use web tracking technology for statistical analysis and to make your use of our website as pleasant as possible. In this context, data on the use of our website is stored in pseudonymous usage profiles if you have given your consent (your IP address is stored in anonymized form). This enables us to further develop our website and to tailor the content even better to your needs. The legal basis for the processing is your consent given via the cookie banner (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of these cookies at any time with effect for the future. To do this, call up your cookie settings in the cookie banner.

In particular, our website uses Google Analytics, a web analytics service by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Within the EU, this service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies (see section 4.2) in order to analyse your use of this website. The information about your use of this website collected using cookies is usually transferred to and stored on servers of Google LLC in the US. Prior to the transfer to the US, Google masks and thereby anonymizes your IP address within the territory of the EU or of EEA. Only in exceptional cases, the full IP address is sent to and masked by Google servers in the US. On behalf of the website provider Google will use this information to analyse your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not combine your IP address with any other data held by Google.

You can withdraw you consent to the use of Google Analytics by changing your cookie consent preferences above, disallowing usage statistics (see section 4.2).You may also refuse to have cookies stored on your device by appropriately configuring your browser (see section 4.2) or by using a privacy plugin. Furthermore, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available here: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
 
Further information on the data processing in the context of Google Analytics is contained in the privacy policy of Google available under: policies.google.com.

5. Data Collection by Third Parties / Social Networks

Our Website may contain links to social networks (such as LinkedIn). These social networks are exclusively operated by third parties. If you follow these links, information may be transferred to these third parties. For information on the scope and purpose of the processing and use of data by these social networks and on your rights and options regarding the protection of your privacy, please refer to the privacy policy of the respective operator of the social network (for the operators listed above you will find the respective policies under the following links: LinkedIn).

Please note that we have also implemented a “Social Plugin” by LinkedIn on our career portal. This plugin allows you to follow us on LinkedIn to stay up to date and receive news on open positions. By using the career portal, the plugin is loaded and information on your visit to our website may be transferred to LinkedIn. You will find information on how this data is handled in the privacy policy of LinkedIn. If you want to avoid a data transfer to LinkedIn, you may choose to use a browser-plugin to block social plugins or avoid using our career portal and apply by mail (3.2).

6. Transfer to Third Parties

The data described under section 3 is processed on our behalf by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany, in order to offer the career portal functionality and to support our application process; data from CVs received for application purposes is temporarily processed on our behalf by Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, The Netherlands. In addition to their legal obligation to comply with all data protection regulations, all service providers that have access to personal data are bound by us with further contractual regulations on data protection. This regularly includes a data processing agreement pursuant to Art. 28(3) GDPR.

In all other respects we transmit personal data to third parties only if a legal permission exists or if you have agreed before. Any consent given can be withdrawn at any time with effect for the future. We will only disclose your data to government authorities within the framework of statutory obligations or following an official order or court decision and only insofar as this is permitted under data protection law.

7. Transfer of Data to non-EU/EEA Countries

If you are located outside of the EU and want to apply for a crew position, we may suggest you to apply via a local manning agency; but we will not transfer your data without your consent.

We only transfer data to third countries if it is ensured that the recipient of the data guarantees an adequate level of data protection within the meaning of Chapter V of the GDPR and there are no other interests worthy of protection that stand against the transfer of the data. To ensure an adequate level of protection for the recipient of the data, we use in particular the standard contractual clauses of the EU Commission for the transfer of personal data to third countries.

8. Deletion

Data from job applications will be deleted as described in section 3. The pseudonymous profiles created via Google Analytics (see 4.3) will automatically be deleted 38 months after the last piece of information has been added to the profile .

In general, we delete your personal data when it is no longer required for the purposes for which it has been collected and processed, unless there are statutory obligations to archive the data. Under German law, relevant archiving periods under tax and commercial law are six years (for business letters in any form) and 10 years (for information relevant for activities subject to tax accounting).

9. Data Security

We have taken the necessary technical and organisational measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees and all persons involved in the data processing are obliged to observe the GDPR and the German BDSG and other data protection legislation and are obliged to keep personal data confidential.

To protect your personal data, we use a secure online transmission protocol called “Secure Socket Layer” (SSL). You can see this by the fact that there is an “s” added to the URL part “http://” (making it “https://”) or by a green, closed lock icon shown in your browser. By clicking the lock icon, you will get information on the SSL certificate used. The appearance of the icon depends on the type and version of your browser. SSL-encryption ensures an encrypted and complete transmission of your data. The SSL connection used by us was certified for security and confidentiality.

10. Your Rights

You may at any time and free of charge request information about the personal data stored by us and - insofar as the legal requirements are met - the rectification, erasure and restriction of the processing of these data. If we process your data to pursue legitimate interests, in particular for advertising purposes, you may exercise your right of objection. Whether and to what extent these rights exist in individual cases and what conditions apply to them is governed by the law (i.e. under the GDPR and the German BDSG). The GDPR also grants you a right to data portability under certain circumstances. If you have given your consent under data protection law, you can revoke this consent at any time with effect for the future.

For the exercise of these rights and for other questions regarding data protection, please contact our company data protection officer (see section 2). In order to process your request quickly, we recommend that you inform us of your surname, first name, date of birth and, if available, your e-mail address and, in the event of an objection, send us a copy of the advertising material after receipt of advertising.

You have also the right to lodge a complaint with a supervisory authority. However, if you have any questions or complaints about data protection at Carnival Maritime, we recommend that you first contact our data protection officer.

11. No automated individual decision-making

We do not use your personal data for automated individual decisions in the sense of Art. 22(1) GDPR.

12. Links to other websites

The Carnival Maritime website contains links to other websites. Please note that our privacy policy does not apply to these other websites.

13. Changes to this Data Protection Declaration

New legal requirements, business decisions or technical developments may require changes to our privacy policy. This privacy policy will then be updated. The most current version is always available on our website.

Last Update: July 2021