Privacy Policy

At Taoticket, protecting your personal data is a principle that goes beyond legal obligations.
The commercial offers we provide are designed to meet your needs and offer you the best and most convenient service.

Taoticket S.r.l., as Data Controller in compliance with Italian legislation (Art. 13 of Legislative Decree No. 196 of 30 June 2003 – Personal Data Protection Code) and EU legislation (Art. 13 of EU Regulation No. 679/2016 concerning the management of the website with regard to the processing of personal data of users who access it), is committed to protecting users’ privacy in a clear and transparent manner and assumes responsibility for the security of customers’ data.

This Privacy Policy explains which personal data relating to users are collected and processed in connection with their relationship with us as customers and through the use of our websites, smartphone apps and web services.

What personal data we collect
Personal data means any information relating to you that enables us to identify you, such as your name, contact details, booking reference number, payment details and information concerning your access to our website. In particular, we may collect the following categories of information:

  • First and last name, residential address, e-mail address, telephone number, passport number or identity card details, credit/debit card or other payment details;
  • API (Advance Passenger Information), including name, nationality, date of birth, gender, passport or identity card number, expiry date and country of issue;
  • Medical conditions concerning passengers with special medical requirements and/or dietary needs;
  • Travel history, including information relating to cruises and services booked;
  • Information provided regarding your travel preferences;
  • Information regarding purchases of products and services from our trusted partners;
  • Information regarding the use of our website and/or app;
  • Communications exchanged with us or addressed to us by letter, e-mail, chat service, telephone calls and social media;
  • Location data, including the real-time geographical location of your computer or device through GPS, Bluetooth and IP address, together with crowd-sourced Wi-Fi hotspots and mobile tower locations, if you use location-based features and enable geolocation services on your device or computer;
  • Browsing data used for profiling purposes, namely data collected through browsing tools, subject to the data subject’s consent, which allow us to provide advertising that is more relevant to the user.

Personal details concerning your physical or mental health, alleged criminal offences or criminal convictions are considered “sensitive” personal data under applicable data protection laws. We will process such data only where you have given your explicit consent, where processing is necessary (for example, if you request special assistance), or where you have deliberately made such data public.

How, why and for how long we use personal data
Your data may be used for the following purposes:

  • Providing the requested products and services: we use the information you provide to deliver the services requested in relation to your cruise(s) and/or additional flight, including requests to modify the cruise and/or flight;
  • Contacting you in the event of a change to the flight schedule or flight cancellation: we send communications concerning the services you have requested and any changes to those services. These communications are not for marketing purposes and cannot be disabled;
  • Credit card or other payment card verification/screening: we use payment information for accounting, billing and auditing purposes and to detect and/or prevent fraudulent activities;
  • Administrative or legal purposes: we use your data for statistical and marketing analysis, system testing, customer surveys, maintenance and development, or to respond to disputes or complaints. We may profile data based on information collected from you for use in statistical and marketing analyses. Any profiling activity will only be carried out with your prior consent and with every reasonable effort to ensure that all data on which it is based are accurate. By providing any personal data, you expressly agree that we may use them to carry out profiling activities in accordance with this Privacy Policy;
  • Immigration/customs controls: we may be required to provide your information to border control authorities;
  • Security, health, administrative purposes and crime prevention/detection: we may also disclose user data to governmental authorities or competent bodies in accordance with legal requirements;
  • Customer service communications: we use your data to manage our relationship with you as a customer and to improve our services and your experience with us;
  • Providing tailored services: we use your data to provide information that we believe may be of interest to you before, during and after your journey with us and to personalise the services we offer, such as special offers for preferred destinations or Family Plus offers;
  • Marketing: from time to time we will contact you through electronic communications with information concerning cruise promotions and ancillary products. You will, however, have the option to choose whether or not to receive such communications by indicating your preference when booking. Every electronic communication we send will also provide the option to indicate that you no longer wish to receive our direct marketing materials.

We will process your personal data only where we have a lawful basis for doing so. The lawful basis will depend on the reasons for which we collected and need to use your personal data. In most cases, we will need to process your personal data in order to process your booking, enter into a travel contract with you and fulfil that contract. We may also process your personal data for one or more of the following reasons:

  • To comply with a legal obligation, such as immigration or customs requirements;
  • You have consented to the use of your personal data, for example for marketing purposes;
  • To protect your health or that of another person, for example in the event of a medical emergency.

Only persons aged 16 or over may provide their consent. For children under this age, the consent of a parent or legal guardian is required.

The duration of consent is assessed in relation to the purpose of the processing. In any event, consent may be withdrawn by the data subject at any time as indicated in the section concerning Data Subject Rights.

We retain personal data for as long as necessary to achieve the purposes and carry out the activities described in this Privacy Policy, as otherwise communicated to the User and/or Customer, or for the period permitted by applicable legislation. Further information concerning retention periods is provided below:

CUSTOMER RECORDS
Information relating to the “myTicketcrociere” reserved-area account:

  • access via Google Sign-In, Apple Sign-In, etc.
  • access via social sign-in
  • username and password

Retention period: 10 years
Start date: From the date of the last interaction

DATA USED FOR MARKETING PURPOSES (CRM)
Data subject to the data subject’s consent and used for marketing activities aimed at customers/users.
Retention period: 5 years
Start date: From the date consent is provided by the data subject or consent is renewed through interaction with the marketing communications department.

DATA COLLECTED THROUGH TAGS
Technical cookies
Retention period: Max. 3 years
Start date: From the date of browsing our website

Non-technical cookies
Retention period: Max. 1 year
Start date: From the date of the data subject’s consent

Personal data security
We follow strict security procedures when storing and disclosing personal data in order to protect them against accidental loss, destruction or damage. Data provided by users are protected using SSL (Secure Socket Layer) technology. SSL is the standard method of encrypting personal data and credit card numbers, allowing them to be transferred securely over the Internet. All payment data are transmitted via SSL and stored in accordance with the Payment Card Industry Data Security Standards (PCI DSS), using certified secure HTTPS connections across all our websites and apps.
We may disclose your information to trusted third parties for the purposes specified in this Privacy Policy. We require all third parties to implement appropriate technical and operational security measures to protect personal data in accordance with EU data protection legislation.

Cookies and website tracking
This website uses cookies to help us improve our service and provide users with useful features. Cookies are small text files transferred to your computer’s hard drive through your web browser, allowing us to recognise your browser and monitor visitors to our website so that we can better understand which products and services are best suited to users. A cookie contains contact information and information useful for identifying your computer when you visit our website, with the aim of assisting you in making a booking. Most web browsers automatically accept cookies, but you may modify your browser settings to accept, reject or delete cookies. The “Help” menu in the toolbar of most browsers explains how to prevent the browser from accepting new cookies, how to receive a notification when a new cookie is received, or how to disable cookies completely. If you choose to change these settings, certain functions and features may not operate as intended. The cookies used do not detect information stored on your computer.
For further information about cookies and how to prevent your browser from accepting them, please visit: http://www.allaboutcookies.org.

Tracking Pixels in e-mail communications
In our promotional e-mail communications, we use hidden tracking systems known as “tracking pixels” to monitor message openings and clicks on links. In compliance with Art. 122 of the Italian Privacy Code and the provision issued by the Italian Data Protection Authority on 17 April 2026, tracking through pixels is carried out exclusively after obtaining the user’s explicit and prior consent.
The user has the right to withdraw authorisation for such tracking at any time and selectively, while retaining the right to continue receiving our promotional communications and newsletters normally, through the dedicated links provided in the communications themselves or by contacting the Data Controller. Consent to tracking is not required only where use of the pixel is technically essential for the delivery of essential service communications or for security purposes.

Data Protection Officer
Taoticket S.r.l., as Data Controller, has appointed an internal Data Protection Officer. Users have the right to lodge a complaint at any time by writing to the dedicated e-mail address privacy@taoticket.com or to Taoticket S.r.l., Via Brigata Liguria 3/21 - 16121 Genoa, Italy.

Data Subject Rights
At any time, pursuant to Articles 15 to 22 of the GDPR, you have the right, including in relation to profiling activities, to:

  • request the correction of your personal data;
  • withdraw at any time your consent to the use and disclosure of your personal data;
  • request the deletion of your personal data;
  • receive the personal data concerning you in a structured, commonly used and machine-readable format and transmit your personal data to another data controller;
  • object to the processing of personal data concerning you, including for marketing or profiling purposes;
  • obtain restriction of the processing of your personal data;
  • lodge a complaint with a supervisory authority;
  • receive notification in the event of a personal data breach;
  • request information regarding:
    • the purposes of processing;
    • the categories of personal data;
    • the recipients or categories of recipients to whom personal data have been or will be disclosed, particularly where data are transferred to recipients in third countries or international organisations, and the existence of appropriate safeguards;
    • the retention period of personal data;
    • where the data are not collected from the data subject, any available information regarding their source.

You may at any time object to receiving communications connected with marketing and profiling activities by clicking “unsubscribe” at the bottom of the e-mail received or by sending a specific request to: privacy@taoticket.com.