Legal
Privacy
What this site actually processes. The German Datenschutzerklärung prevails if anything here differs.
The German text is the legally binding version. This English page is a short summary for orientation. Read the German version.
Controller: Matthias Dietel, Schafhof 1, 95466 Weidenberg, Germany. Contact: contact@cruise-hopper.com.
Hosting and server logs
The site is hosted in Deutschland (eigener Server). A visit stores the usual connection data (IP address, time, requested address, user-agent) where that is needed to run the site, keep it secure and diagnose faults. We only store email addresses if you watch a sailing or optionally sign in (see below).
No analytics, no ad trackers
CruiseHopper does not set analytics cookies, Google Analytics, a Meta pixel, or similar trackers. There is therefore no cookie banner — including for the strictly necessary session cookie after an optional sign-in (see below).
Search
Combination search runs on this server against the stored sailings. Your choices (year, region, time between two ships) appear in the results-page address. No search profile is stored.
Links to MSC and Awin
Booking links go to the MSC website. Once an Awin programme is approved, the same links may run as affiliate deeplinks via Awin (Awin AG, Germany). Until then they are direct MSC URLs. A click is then subject to MSC’s or Awin’s own privacy notices.
No guarantee on prices or bookability
Displayed prices are “from” figures taken from imported listings, not binding fares. Partial segments of a longer voyage are not official MSC products and may be bookable by phone or through a travel agent. CruiseHopper is not affiliated with MSC Cruises.
Optional account and session cookie
Sign-in is optional. Without an account, search, combinations and price changes work as before.
Purpose: saved list, saved search filters and managing price alerts. Sign-in uses only email and a one-time code, with no password and no third-party login.
Legal basis: Art. 6(1)(b) GDPR (requested service: account features) and Art. 6(1)(a) for price alerts you switch on in the account.
After a successful sign-in we set a strictly necessary, httpOnly session cookie (`hopper_session`) so we can recognise you. It is only for sign-in, with no advertising and no tracking. A consent banner is not required for that.
Data stored: email address, time of sign-in, saved sailings and combinations, named search filters, linked price alerts, hashed session tokens and a hash of the IP address at sign-in (abuse protection).
Sessions end after 30 days or when you sign out. One-time codes expire after 10 minutes. You can delete the account and all related data at any time on the account page; that also deletes price alerts for the same email.
Price alerts by email
If you watch a sailing we only process the data that is needed for that. There is no newsletter. A user account is optional.
Purpose: to email you about price changes on the sailings you chose, after a manual catalogue import finds a change.
Legal basis: Art. 6(1)(a) GDPR (consent). Without an account you give consent through the form and the double opt-in confirmation. In a signed-in account the email is treated as confirmed by the sign-in code — a second opt-in is not needed. You can withdraw consent at any time (unsubscribe link, account, or a plain email to us).
Data stored: email address, watched sailings (id, cabin type, currency, source), time of consent, and a hash of the IP address at sign-up (abuse protection and proof of consent — not the IP itself).
Retention: until you withdraw consent (unsubscribe). We also delete data automatically once every watched sailing has departed, and unconfirmed sign-ups after 48 hours. Unsubscribing deletes the stored data completely.
Sending: after an import that finds a change — not as regular advertising, without tracking pixels and without open or click measurement. Every email has a one-click unsubscribe link and the List-Unsubscribe header.
Sending uses the controller's own mail server, located in Germany. There is no disclosure to third parties for sending, and no data-processing agreement (AV-Vertrag) is required. Without configured SMTP the feature is unavailable and no sign-up data is accepted.
Rights: access, rectification, erasure, restriction, data portability and withdrawal of consent. You may complain to a supervisory authority. Requests to contact@cruise-hopper.com.
Your rights
You may ask for access, correction or deletion, and you may contact a supervisory authority. Write to contact@cruise-hopper.com. More about the site: https://cruise-hopper.com.