Privacy policy

I.  INTRODUCTION

Century Cruises ("Century Cruises", “Century” "we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.

This Privacy Policy describes how we collect, use and share information about you as well as your rights and choices about such collection, use and sharing. It applies when you access or use our websites and other products and services (collectively, the “Services”), contact our service team, engage with us on social media, or otherwise interact with us.

If you do not agree with our policies and practices, your choice is not to use the Services. By accessing or using the Services, whether or not you purchase any of our Services, you agree to this Privacy Policy.

II.  CHANGES TO THIS PRIVACY POLICY

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us, as your continued use of any Services constitutes acceptance to the updated terms.

III.  INFORMATION COLLECTION

Information collected from you

We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:

• Personal Identifiers, including name, email address, postal address, telephone number, driver's license number, State ID card number, passport number, insurance policy number, and online Identifiers

• Internet Activity

• Commercial Information, including purchases and records of personal property

• Financial Information, including credit or debit card number

• Biometric Information, including fingerprints, face, hand, palm prints or vein patterns, and sleep, health, or exercise data

• Location Information

• Physical and Audio Data, including audio recordings, video recordings, and photos

• Protected Classifications and Other Personal Characteristics, including age, sex, gender, or gender identity, citizenship or immigration status, familial status, marital status, disability, and military or veteran status

• Health Data, including data related to physical or mental health

• Professional and Education Information, including professional information

• Consumer Communications, including direct communications with our consumers and contents of mail, email or text messages

• Inferences from Other Data, including inferences created from other personal information collected

• Other data, including child Waiver Form, pregnancy, dietary Needs, allergies, travel Itineraries, and shopping Interests

Information collected from other sources

We may collect personal information about you from third-party sources The sources and categories of information we may collect include:

Other consumers (e.g., referrals)

• Personal Identifiers, including Name, Email address, Postal address, Telephone number, Driver's license number, State ID card number, Passport number, Insurance policy number, Military ID number, and Online Identifiers

• Internet Activity

• Commercial Information, including Purchases and Records of personal property

• Financial Information, including Credit or debit card number

• Biometric Information, including Fingerprints, Face, hand, palm prints or vein patterns, and Sleep, health, or exercise data

• Location Information, including General location data and Precise geolocation

• Physical and Audio Data, including Audio recordings, Photos, and Video recordings

• Protected Classifications and Other Personal Characteristics, including Age, Sex, gender, or gender identity, Citizenship or immigration status, Familial status, Marital status, Disability, and Military or veteran status

• Health Data, including Data related to physical or mental health

• Professional and Education Information, including Professional information

• Consumer Communications, including Direct communications with our consumers and Contents of mail, email or text messages

• Inferences from Other Data, including Inferences created from other personal information collected

• Custom Data, including Allergies, Child Waiver Form, Dietary Needs, Pregnancy, Shopping Interests, and Travel Itineraries

How long we keep your data

We do not retain data for any longer than is necessary for the purposes described in this Privacy Policy. We generally retain data according to the guidelines below.

IV.  WHY WE PROCESS YOUR INFORMATION

We use personal information for the following purposes:

• Analyzing Data

• Conducting Surveys

• Creating Customer Profiles

• Delivering Targeted Ads

• Fulfilling Customer Orders

• Improving Our Products & Services

• Internal Business Operations

• Managing Event & Guest Data

• Marketing Our Products & Services

• Meeting Compliance & Legal Requirements

• Operating Our Website or Mobile Apps

• Preventing Fraud

• Processing Payments

• Providing Customer Support

• Providing Cybersecurity

• Sending Promotional Communications

• Storing and Managing Data

• Tracking Purchases & Customer Data

V.  HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We may disclose the following personal information about you to our services providers and vendors when you purchase our products or visit our website:

Personal Information Sharing Categories

Personal Information Category Categories of Service Providers Categories of Third Parties

Personal Identifiers Ad Networks, Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, Governance, Risk & Compliance Software, IT Infrastructure Services, Identity Verification Tool, Payment Processors, Sales & Marketing Contractors, Sales & Marketing Tools, and Security Contractors Ad Networks, App Developer, Business Operations Tool, Co-Marketing Partner, Collaboration & Productivity Tools, Communications Tools, Customer Support Tools, Data Brokers, Distribution Center, Investor, Payment Processors, Printer, Recruitment Service, Shipping Services, and Web Hosting Services

Internet Activity Ad Networks, Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, IT Infrastructure Services, Sales & Marketing Tools, and Security Contractors Ad Networks, Co-Marketing Partner, Communications Tools, Data Brokers, and Payment Processors

Commercial Information Ad Networks, Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, IT Infrastructure Services, Identity Verification Tool, Sales & Marketing Tools, and Security Contractors Ad Networks, Communications Tools, Data Brokers, Payment Processors, and Shipping Services

Financial Information Business Operations Tool, IT Infrastructure Services, Payment Processors, and Sales & Marketing Tools Business Operations Tool, Co-Marketing Partner, Communications Tools, and Payment Processors

Biometric Information None Communications Tools

Location Information Ad Networks, Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, IT Infrastructure Services, Identity Verification Tool, Sales & Marketing Tools, and Security Contractors Ad Networks, Business Operations Tool, Co-Marketing Partner, Collaboration & Productivity Tools, Communications Tools, Customer Support Tools, Data Brokers, Investor, Payment Processors, Recruitment Service, and Shipping Services

Physical and Audio Data Business Operations Tool and IT Infrastructure Services Ad Networks, Collaboration & Productivity Tools, and Communications Tools

Protected Classifications and Other Personal Characteristics Business Operations Tool, Data Analytics Providers, IT Infrastructure Services, and Sales & Marketing Tools Business Operations Tool and Communications Tools

Health Data None Communications Tools

Professional and Education Information Sales & Marketing Tools Communications Tools and Recruitment Service

Consumer Communications Business Operations Tool, Data Analytics Providers, IT Infrastructure Services, and Sales & Marketing Tools Ad Networks, App Developer, Business Operations Tool, Co-Marketing Partner, Communications Tools, Customer Support Tools, and Shipping Services

Inferences from Other Data Ad Networks, Commerce Software Tools, Cybersecurity Providers, IT Infrastructure Services, and Sales & Marketing Tools Ad Networks, Communications Tools, Data Brokers, and Investor

Custom Data None Communications Tools

No personal information, mobile number, or messaging consent information will be shared with third parties or affiliates for marketing or promotional purposes.

VI.  COOKIES & SIMILAR TECHNOLOGIES

Cookies

This site uses first and third-party cookies and similar technologies to process personal information for the purposes described in this Policy. Cookies are small text files placed on your device to store data that can be recalled by a web server in the same domain that placed the cookie. The text in a cookie often consists of a string of numbers and letters that uniquely identifies your device, but it can contain other information as well. To learn more about cookies and how to control the use of cookies at a browser level, visit

Essential Cookies

We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.

List of Essential Cookies

Analytics Cookies

These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.

List of Analytics Cookies

Personalization Cookies

We do not use cookies to personalize content for you.

Advertising Cookies

These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.

List of Advertising Cookies

Do Not Track

Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals. However, you may still exercise your privacy rights as described elsewhere in this Policy.

Third Party Analytics Tools

This site uses Google Analytics to analyze your interactions and experiences with our Services. You can find out how Google Analytics uses data here and how to opt out of Google Analytics here.

VII.  CALIFORNIA SHINE THE LIGHT DISCLOSURE

You are a California resident and have an established business relationship with us, you can request a notice disclosing the categories of personal information we have shared with third parties, for the third parties' direct marketing purposes, during the preceding calendar year. To request a notice, please submit your request to marketing@centuryrivercruises.com. Please allow 30 days for a response.

To opt out of selling and sharing personal information, go to Your Privacy Choices.

VIII.  CONTACT US

If you have any questions about this Privacy Policy, please contact us as follows:

Century Cruises

Marketing@centuryrivercruises.com

IX.  EEA / UK (GDPR)

This section provides additional information for people in the European Economic Area (EEA) or United Kingdom (UK). The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.

Collection and Disclosure of Personal Data

The personal data we collect and how we share it is described above in our Privacy Policy.

We may disclose your personal information to the following third party controllers for business purposes: Pinterest Ads, Youtube Ads, Tiktok Ads, Meta Ad Network, Instagram Ads, Lithographix, Microsoft Ads, X Ads, Braintree Direct, Travel Agencies, Google Ads, Consortia Partners, LiveIntent, Bombora, Exelate. To understand how these parties handle your data, please refer to their respectiveprivacy policies.

Lawful Bases and Legitimate Interests

We process personal data on the following lawful bases:

• Complying with legal obligations

• Fulfilling contracts

• Consent

• Legitimate interests

Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Analyzing Data, Conducting Surveys, Delivering Targeted Ads, Fulfilling Customer Orders, Improving Our Products & Services, Managing Event & Guest Data, Marketing Our Products & Services, Meeting Compliance & Legal Requirements, Preventing Fraud, Processing Payments, Providing Customer Support, Providing Cybersecurity, Sending Promotional Communications, Tracking Purchases & Customer Data, Internal Business Operations, Operating Our Website or Mobile Apps, Storing and Managing Data, and Creating Customer Profiles.

International Data Transfers

We may send the personal data of individuals in the EEA/UK/CH to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we rely either on Adequacy Decisions as adopted by the European Commission (EC), the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC) on the basis of the EU-US Data Privacy Framework, UK-US Data Bridge, and Swiss-U.S. Data Privacy Framework agreements, Standard Contractual Clauses (SCCs) issued by the EC or the FDPIC, or International Data Transfer Agreements (IDTAs) approved by the ICO. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK/CH. You may read more about international data transfer mechanisms at the following links:

• https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

• https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/

• https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/arbeit_wirtschaft/datenuebermittlung_ausland.html

Privacy Rights

Individuals in the EEA/UK/CH have the following rights regarding their personal data. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.

Right to access. You have the right to request a copy of the personal data we hold about you.

Right of portability. You have the right to ask us to transfer your data to another party.

Right to rectification. You have the right to request that we rectify any incorrect information we have about you.

Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.

Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.

Right to object. You have the right to object to our use of data about you.

Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit theInformation Commissioner’s Office website athttps://ico.org.uk/ , the Federal Data Protection and InformationCommissioner’s website at https://www.edoeb.admin.ch/, or see a list of EU Data Protection Authorities at