Privacy Policy and Notice at Collection
- INTRODUCTION
- DATA CONTROLLER
- WHAT PERSONAL DATA WE COLLECT, HOW WE USE IT, AND WHERE WE GET IT FROM
- COOKIES
- SHARING PERSONAL DATA WITH THIRD PARTIES
- YOUR CHOICES ABOUT YOUR PERSONAL DATA
- YOUR PRIVACY RIGHTS
- ADDITIONAL CALIFORNIA DISCLOSURES
- RETENTION, STORAGE, AND PROTECTION
- CHILDREN’S PRIVACY
- LINKS TO OTHER WEBSITES
- CHANGES TO OUR PRIVACY POLICY
- YOUR COMMENTS
1. INTRODUCTION
This Privacy Policy and Notice at Collection (“Privacy Policy”) describes the collection, use, sharing, and retention of personal data collected from or about you in connection with your access to and use of the Viking Investor Relations website and any associated services (collectively, the “Investor Relations Services”).
When you interact with Viking’s commercial websites and mobile applications as a customer in relation to our ocean, river, and expedition cruises and other Viking products and services, such as www.vikingrivercruises.com or www.vikingcruises.co.uk, your personal data will be processed in accordance with the privacy notices made available on such websites and applications. If you are an employee, contractor, or job applicant, your personal data collected in those contexts will be subject to a separate privacy notice that we provide to you where and when appropriate.
2. DATA CONTROLLER
Depending on where you are located, the data controller in relation to your personal data processed in connection with the Investor Relations Services is either: (i) Viking River Cruises UK Limited, Nelsons House, 83 Wimbledon Park Side, London SW19 5LP (for visitors from the United Kingdom or European Economic Area), or (ii) Viking River Cruises, Inc., 5700 Canoga Avenue, Suite 200, Woodland Hills, CA 91367 (for all other visitors) (collectively, “Viking”, “we”, or “us”).
Viking’s data protection officer may be contacted by email at data.protection@vikingcruises.com (if you are located in the UK or EEA) or privacy.request@viking.com (if you are located elsewhere).
3. WHAT PERSONAL DATA WE COLLECT, HOW WE USE IT AND WHERE WE GET IT FROM
In relation to the Investor Relations Services, we collect and process the following categories of personal data about you. We have set these out in the table below together with the lawful basis for our use of your personal data and the source of this personal data.
| Personal data we use | How we use it | Lawful basis / condition for processing | Source of personal data |
|---|---|---|---|
| Identifiers and contact information Name, telephone number, email address, and type of individual (such as employee, customer, student, or investor). | To provide you with the Investor Relations Services you request.To administer and manage our relationship with you (such as record keeping and communicating with you). | Your consent.Legitimate business interest (administration and management of our business). | Directly from you when you request to receive update emails about Viking, contact our investor relations team, request information from us, visit the website, use the Investor Relations Services, or provide us with feedback. |
| Internet Browser, Usage, and Log Data When you visit and use the Investor Relations Services, we collect your IP address; device, browser, and software characteristics (such as type and operating system); location; activity on the Investor Relations Services, including activities and content viewed, used, or accessed, which links you click, which pages you view and how long you spend on those pages, the timestamp of your visits or interactions, what search terms you use, referral URLs, network state, device identifiers, or other unique identifiers; and identifiers associated with browser cookies. We also collect information about your interactions with our emails, such as whether you open a message and click any links within the message. | Customizing or personalizing the Investor Relations Services and evaluating how well the Investor Relations Services perform. To help recognize you when you use other devices. Planning for, improving, and enhancing our Investor Relations Services. To keep our website, our other IT systems and facilities safe and secure. Measure the effectiveness of our email correspondence with you. | Legitimate business interest (administration and management of our business and the improvement of our services). | As you interact with our website, we will automatically collect website and communication usage data about your equipment, browsing actions and patterns. We collect this personal data through the operation of your browser on your device, by using cookies and other similar technologies. Please see Section 4 below for further details on cookies.Our correspondence with you. |
| General Location Information We collect your general location based on your IP address | To ensure that we are complying with applicable laws.To tailor the content of our website for you. | Legitimate business interest (administration and management of our business and the improvement of our services). | Automatically from your devices: Like many companies, we use various technologies to automatically collect usage and interaction data when you interact with our websites or read our emails. These tools include cookies, pixels, and SDKs.Please see Section 4 below for further details on cookies. |
We combine the information we collect from or about you with information provided by other sources. We also combine information that we collect offline with information we collect online.
You are not under a legal obligation to provide us with any of your personal data but please note that if you elect not to provide us with your personal data we may be unable to provide the Investor Relations Services to you.
4. COOKIES
When you visit our website, we store and retrieve information about how you use our website through what is known as “cookie” technology or similar tracking tools. A cookie is a small text file that is placed on your computer when you access our website and allows us to recognize you each time you visit the website. These cookies help us to distinguish you from other users, and to provide you with a good experience when you browse our website. it also allows us to improve our website.
There are different types of cookies, including:
- First-party cookies (which are set by Viking)
- Third-party cookies (which are set by our approved partners). Data from third-party cookies is stored by the third-party and not on our systems, with Viking being granted access.
- Session cookies (which are temporary cookies that expire when you leave the website)
- Persistent cookies (which last for longer than your browser session)
Further information on the cookies we use is included below. View the different category headings below to find out more. We may combine the information we collect through cookies, web beacons, or other technology tools with other information we have collected from you or information from other sources.
Strictly Necessary Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems. They are set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms. They do not gather information about you that could be used for marketing, and they do not track where you have been on the internet. You can set your browser to block or alert you about these cookies, but some parts of the site may not work as a result.
We use the following strictly necessary cookies on our website.
| COOKIE PROVIDER | COOKIES | PURPOSE | FIRST OR THIRD PARTY |
|---|---|---|---|
| Equisolve | eqMajorAnnouncement; eqCookieConsent | To determine whether or not you've seen an announcement or the cookie banner so that we don't show it to you repeatedly | Third party |
| hCaptcha | hmt_id; INGRESSCOOKIE; __cfduid; __cflb; session; sessionid; hc_accessibility | For technical purposes related to contacting us via webforms, such as accessibility support, load balancing, routing, and anonymous service-related statistics | Third party |
| QuoteMedia | app_93303_InteractiveChart; app_93303_DayYearRange; app_93303_DetailedQuoteTab; app_93303_PriceHistory | To provide stock quote data, such as to enable use of the interactive chart, price history tool, and dividend tool | Third party |
| Klaro | eq-klaro | To support implicit and explicit consent processes and ensure that no third-party applications are loaded or collect personal data without the user’s consent | Third party |
Analytics Cookies
Analytics cookies or performance cookies are used to track website visitors and their user behavior. For example, they allow us to count the number of visitors, pages or links accessed and the length of time spent on our website. This data is then used to improve the way the website works and in turn, used to improve user experience.
We don’t currently have any analytics cookies on this website.
Functional Cookies
Functional cookies allow us to provide a better user experience on our website, by remembering your log-in details or allowing personalized content and preferences (such as, for example, your jurisdiction).
We don’t currently have any functional cookies on this website.
Marketing Cookies
Marketing cookies are used to build a profile of your interests and to show you ads that are more relevant to you and your interests on other sites. These cookies gather information about your browsing and usage by remembering your device has visited a website and sharing that information with other organizations such as advertisers or platforms on which a company advertises. They do this to provide you with online advertisements that are targeted to your browsing history and are therefore more relevant to you and your interests.
We don’t currently have any marketing cookies on this website.
How do I change my cookie settings?
‘Strictly necessary’ cookies will always be active on your device, but you can choose not to allow Analytics, Marketing and Functional cookies or manually delete individual cookies via the cookie preference ‘pop-up’ that appears when you enter our website, or at any time by clicking the ‘Manage Cookies’ link in the footer of this website.
5. SHARING PERSONAL DATA WITH THIRD PARTIES
In relation to the Investor Relations Services, we may share your personal data in the instances described below.
With our corporate affiliates: We share all of the personal data listed at Section 3 with our parent company and corporate affiliates located in the U.S., Canada, and Europe. This sharing enables us to fulfill the Investor Relations Services. We share this personal data on the basis of our legitimate interests (administration and management of our business).
With our service providers: We share all of the personal data listed at Section 3 with the vendors and service providers who provide functions on our behalf, including business analytics, website hosting, customer and investor service, marketing, distribution of surveys, and fraud prevention. We may also authorize vendors to collect information on our behalf, including as necessary to operate features of our websites. Sharing this personal data assists us in the improvement and optimization of our website, and to support and maintain our IT infrastructure. We share this personal data on the basis of our legitimate interests (administration and management of our business).
For legal compliance: We share all of the personal data listed at Section 3 to our professional advisors in the, public authorities, regulators or government bodies U.S., Canada, and Europe for legal compliance and law enforcement purposes such as: in response to subpoenas, court orders, or other legal process; with law enforcement agencies as required; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law; to enforce any agreement we or another party may have with you; and/or when we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities. We share this personal information in order to comply with our legal obligations and also on the basis of our legitimate interests in ensuring that our business is well advised about compliance issues.
Mergers or corporate reorganization: If another entity acquires Viking or all or substantially all of our assets, your information may be disclosed to such entity as part of the due diligence process and may be transferred to such entity as one of the transferred assets. Also, if any bankruptcy or reorganization proceeding is brought by or against us, all such information may be considered an asset of ours and as such may be sold or transferred to third parties. We share this information on the basis of our legitimate interests in administering our business.
Where we transfer your personal information to third parties outside of the UK or European Economic Area (“EEA”) we shall do so only where there are adequate provisions to ensure your privacy. Where the jurisdiction is not considered adequate by the relevant authorities, we put in place alternative contractual measures including the standard contractual clauses approved under the relevant laws (such as those approved by the European Commission under Art 46 of the EU’s GDPR or the UK Information Commissioner pursuant to the equivalent provisions of UK GDPR).
We may also aggregate and/or deidentify information and then share that aggregated or anonymized data with third parties for market and research purposes or for other purposes.
6. YOUR CHOICES ABOUT YOUR PERSONAL DATA
In relation to the Investor Relations Services, you have the following choices regarding how we and third parties use your personal data:
How to Opt-Out of Update Emails
You can request to receive updates about Viking, such as press releases, summary financial reports, and SEC filings. We will ask you to indicate your communications preferences when you sign up on our website. You can stop receiving update emails from us by clicking on the “unsubscribe” link provided in such communications. Even after an opt-out, certain non-marketing emails may continue, such as security alerts or responses to your inquiries. Please allow up to 10 days to be unsubscribed from our update emails.
Cookies and Pixels
See Section 4 (Cookies) for more information about the cookies used on this website. ‘Strictly necessary’ cookies will always be active on your device, but you can choose not to allow Analytics, Marketing and Functional cookies or manually delete individual cookies via the cookie preference ‘pop-up’ that appears when you enter our website, or at any time by clicking the ‘Manage Cookies’ link in the footer of this website. Choices you make are device-specific and browser-specific. If you use different browsers on your computer, or multiple computers and devices, you will need to update your cookie preferences from each browser on each of the computers and devices that you use to access our site.
Do Not Track
Some browsers have “do not track” features that allow you to tell a website not to track you. These features are not all uniform. We do not currently respond to those signals on the Viking investor relations website.
7. YOUR PRIVACY RIGHTS
a. United States Privacy Rights
In relation to the Investor Relations Services, where provided for by applicable privacy laws and depending on your U.S. state of residence, you may be entitled to exercise some or all of the rights described below with respect to your personal data:
Access / Right to Know: You may have the right to confirm whether we process personal data about you and to request that we disclose to you the following: (i) the categories of personal data that we have collected about you; (ii) the categories of sources from which we have collected personal data about you; (iii) the business or commercial purpose for collecting, “selling”, or “sharing” your personal data; (iv) the categories of personal data that we have “sold” or “shared” about you and the categories of outside parties to whom the personal data was “sold” or “shared” (if applicable); (v) the categories of personal data that we have disclosed about you for our business purposes and the categories of suppliers to whom the personal data was disclosed; (vi) a portable copy of the specific pieces of personal data that we have collected about you; and (vii) information about the logic involved in any automated decision-making processes used by us (if applicable), as well as a description of the likely outcome of the process with respect to you.
Modifying or Correcting Your Personal Data: You may have the right to modify or request the correction or update of your personal data.
Deleting Your Information: You may have the right to request the deletion of your personal data, subject to certain exceptions.
Do Not Sell, Share, or Process My Personal Data for Targeted Advertising: We do not currently sell, share, or process your personal data for targeted advertising purposes in relation to the Investor Relations Services.
Opt-out of Automated Decision-Making: You may have the right to request to opt-out of any profiling or automated decision-making, to the extent we engage in those processing activities.
Limit the Use of my Sensitive Personal Data: We do not collect sensitive personal data in relation to the Investor Relations Services.
b. United Kingdom (UK) and European Economic Area (EEA) Privacy Rights
In relation to the Investor Relations Services, you may be entitled to exercise some or all of the rights described below with respect to your personal data. To exercise your rights, please email us at data.protection@vikingcruises.com.
- Right of access and data portability: You have the right to access personal data that we hold about you and/or have it transferred to another data controller in some circumstances.
- Right of rectification and erasure: If you become aware of any inaccuracies in your personal data which we process on your behalf, you have a right to ask us to rectify the inaccuracies. You also have a right to ask us to erase personal data about you where you can demonstrate that the data we hold is no longer needed by us, if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data. Your right of rectification and erasure extends to anyone we have disclosed your personal data to and we will take all reasonable steps to inform those with whom we have shared your data about your request for erasure.
- Right to object: You have the right to object to our processing of your personal data. This includes the right to object to the use of your personal data for direct marketing and profiling purposes.
- Right to restriction of processing: You have the right to ask us to restrict our processing of your personal data to the extent that (a) you have questioned the accuracy of the personal data and we are still checking its accuracy, (b) it is established that we did not have the lawful right to process the personal data, (c) we no longer need to use your personal data for the purposes we collected or used it for but you need it to be preserved for the purposes of legal claims, or (d) you have exercised your right to object to our use of your personal data and no exception applies to permit us to keep using it.
- Right to opt-out of automated processing: You have the right not to be subject to automated processing which significantly affects you, unless we need to carry out the automated decision-making to enter into or perform our contract with you, or we are authorised by law to use the personal data for automated decision-making, or we have your explicit consent.
- Right to withdraw consent: You have the right to withdraw your consent for the processing of your personal data where the processing is based on consent.
You have the right to complain to the Information Commissioner (http://www.ico.gov.uk/) if you have any concerns in respect of the handling of your personal data by Viking. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance at the email set out above.
c. Other Jurisdiction Privacy Rights
If you are located in another jurisdiction, we will honor privacy requests under relevant data protection laws that apply to Viking’s personal data processing. See below for information about how you may submit a rights request.
d. Additional Information About Your Privacy Rights
Eligible individuals can submit a privacy rights request through the Data Subject Request Form, or by calling us at (844) 916-1333 or by emailing us at privacy.request@viking.com.
Please note that we may deny your request, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal data as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate investor requests.
If you are not satisfied with the outcome of your request and would like to request further review, you may send an email to privacy.request@viking.com with “Personal Data Requests Appeal” in the subject line.
You may designate an authorized agent to make a request on your behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.
We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps may vary depending on the sensitivity of the personal data and whether you have an account with us.
We will not discriminate against you because you made any of these requests.
8. ADDITIONAL CALIFORNIA PRIVACY DISCLOSURES
For purposes of California law, please note the following with regard to the Investor Relations Services:
- We collect and use the following categories of personal data for the business and commercial purposes described in this Privacy Policy: identifiers; customer records under Cal. Civ. Code § 1798.80(e); commercial information; internet or other electronic network activity information; general location data; and professional information. See Section 3 above for more details.
- We use the above-described categories of personal data for our business and commercial purposes described in Section 3 above.
- We collect these categories of personal data from the following categories of sources, as more fully described in Section 3 above: directly from you; automatically from your devices; from our service providers; and from our corporate affiliates.
- We disclose the above categories of personal data to our affiliates, service providers, with entities for legal compliance purposes, and with potential acquirers of parts of our business. See Section 5 above for more details.
- We do not “sell” or “share” your personal data.
- We do not collect sensitive personal data.
9. RETENTION, STORAGE, AND PROTECTION
We will retain and process your personal data for as long as you continue to use or express an interest in the Investor Relation Services or log into our website. If you have not used or expressed an interest in our services or logged into our website for more than two years, we will delete your personal data shortly thereafter.
We will only keep your personal data for a longer period where necessary in order to comply with our legal obligations.
10. CHILDREN’S PRIVACY
Viking does not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register on any Access Points. In the event that we learn that we have collected personal data from a child under age 13 without appropriate permission from their parent/legal guardian, we will delete that information as quickly as possible. If you believe that we might have any information from a child under 13, please contact us as provided in Section 13 (Your Comments and Questions).
11. LINKS TO OTHER WEB SITES AND SERVICES
The Access Points may integrate with or contain links to other third-party websites and services. We are not responsible for the practices employed by third party websites or services embedded in, linked to, or linked from the Access Points and your interactions with any third-party website or service are subject to that third party’s own rules and policies.
12. CHANGES TO OUR PRIVACY POLICY
We reserve the right to make changes to this Privacy Policy from time to time. When we do so, we will take reasonable steps to notify you of any substantive updates to it.
13. YOUR COMMENTS AND QUESTIONS
If you have any questions or comments regarding our privacy policy or our websites, you can contact us at:
- Viking River Cruises UK Limited, Nelsons House, 83 Wimbledon Park Side, London SW19 5LP or data.protection@vikingcruises.com (for visitors from the United Kingdom or European Economic Area), or
- Viking River Cruises, Inc., 5700 Canoga Avenue, Suite 200, Woodland Hills, CA 91367 or privacy.request@viking.com (for all other visitors).
Last Updated: April 30, 2024