Privacy
Summary of the privacy policy
This is a summary of our privacy policy
What does this privacy policy cover?
This privacy policy aims to describe the following:
-
What type of personal data we collect and use and how we collect
it
- When and with whom we share your personal information
-
What choices you can make about how we collect, use and share
your personal information
What personal data do we collect and use and how do we collect it?
We collect personal information when:
- You give us the information
- We collect it automatically
- We receive it from others
When you create an account on one of our websites, log in to
receive offers or information, or make a booking through our
platform, you provide us with your personal information. We
also collect such information through automated technologies such
as cookies, which are placed on your browser, possibly with your
consent, when you visit our websites or download and use our
apps. We also receive information from affiliates within
Expedia Group, as well as from business partners and other third
parties that help us improve our platform and related tools and
services, update and maintain accurate records, potentially detect
and investigate fraud, and our Services.
How is your personal information shared?
Your personal data may be shared to help you book your travel
and/or holiday, to assist you with your travel and/or holiday, to
communicate with you (including when we send information about
products and services or Allow you to communicate with travel
providers and/or property owners) and comply with the
law. The full privacy policy describes how personal
information is shared.
What are your rights and choices?
You can exercise your data protection rights in various
ways. For example, you can unsubscribe from marketing by
clicking the unsubscribe link in the emails or, where applicable,
in your account or by contacting our customer service. Our
privacy policy informs you about the options and data protection
rights available to you.
Categories of personal information we collect
When you use our Platform, Apps, or related tools or services, we
may collect the following types of personal information from you
as necessary:
-
Name, email address, telephone number, home, business and
billing addresses
-
Government-issued IDs required for booking or identity
verification, such as: B. Passport, driver's license and
state recovery numbers, and for vacation property owners, their
tax identification number
-
Payment information such as payment card number, expiration date
and billing address
-
Travel-related preferences and requests such as preferred
destinations and accommodation types, as well as special dietary
and accessibility requirements, if available
- Loyalty program and membership information
- Date of birth and gender
- Geolocation
- Images, videos and other recordings
-
Social media account ID and other publicly available information
-
Communicating with us (e.g. recording calls to customer service
representatives for quality assurance and training purposes)
-
Searches you make, transactions and other interactions with you
on our online services and apps
-
Other communications that take place via the Platform between
partners and vacationers, as well as in-group chat and
collaboration tools for vacationers
-
The searches and transactions conducted through the Platform
-
Information you give us about other people, such as: B.
Your travel companions or others for whom you make a booking
-
Information we receive about you from other Expedia Group
companies and third parties, such as: B. our business and
affiliate partners and authorized service providers, which may
include updated contact information, demographic information,
interests and purchase history, which we may add to your account
or profiling and use for market research and analysis
When you install one of our apps or use our platform, we
automatically collect the following types of information from your
device
- IP address
- Device type
- Unique device identification numbers
-
Internet browser type (e.g. Firefox, Safari, Chrome and Internet
Explorer)
- Internet provider
- operating system
- Mobile network
-
How your device has interacted with our online services,
including pages viewed, links clicked, trips viewed and features
used, along with associated dates and times
-
Details of referring websites or exit pages and general
geographic location (e.g. state or city level)
Mobile apps
When you download and use one of our mobile apps, we collect
certain technical information from your device to enable the app
to function properly and as otherwise described in this Privacy
Policy. This technical information includes:
-
Device and phone connectivity information such as your network
operator, network type, network operator, SIM (Subscriber
Identity Module) operator and SIM country
- Operating system and version
- Device model
- Performance and data usage
-
Usage data, such as B. Dates and times the app accesses our
servers, the features and links clicked in the app, search
queries, transactions and the data and files downloaded into the
app
-
Device settings selected or enabled, such as Wi-Fi, Global
Positioning System (“GPS”) and Bluetooth (which may
be used for location services, subject to your permission as
explained below)
- Mobile device settings
-
Other technical information such as the name, type and version
of the app, if necessary to provide you with services
Location-based services permissions:
Depending on your device's settings and permissions and your
choice to participate in certain programs, we may collect your
device's location using GPS signals, cell towers, Wi-Fi signals,
Bluetooth or other technologies. We collect this information
when you log in through the App or another program (either during
your initial login or later) to enable certain location-based
services available in the App (such as finding the closest
available accommodation ). . To disable the app's
location features, you can log out or change your mobile device
settings.
Use of personal data
We use your personal information for various purposes described
below, which depend on the website you visit or the app you use.
Your use of online sites, apps and services:
-
Book the trip you want or enable the booking of a holiday
property
- Providing services related to the booking and/or account
-
Create, maintain and update user accounts on our platform and
authenticate yourself as a user
-
Maintain your search and travel history, accommodation and
travel preferences and similar information about your use of the
Expedia Group Platform and Services and as otherwise described
in this Privacy Policy
-
Enable and facilitate the acceptance and processing of payments,
coupons and other transactions
- Management of loyalty and reward programs
- Collect and activate booking-related reviews
-
Help you use our Services faster and easier using features such
as: B. the ability to log in with your account to the
online services and websites of some Expedia Group companies
Communication and Marketing:
-
Responding to your questions and requests for information and
processing information decisions
-
Enable communication between you and the travel provider,
e.g. B. Hotels and owners of holiday accommodation
-
Contact you (e.g. via SMS, email, phone calls, postal mail, push
notifications or messages on other communication platforms) to
provide information such as travel booking confirmations and
updates for marketing purposes or for other purposes described
in this Privacy Policy
-
Market our products and services, optimize that marketing to be
more relevant to you, and measure and analyze the effectiveness
of our marketing and promotions
-
Administer promotions such as contests, sweepstakes and similar
giveaways
Other Business Purposes and Compliance
- Conduct surveys, market research and data analysis
-
Maintain, improve, research and measure the effectiveness of our
websites and apps, activities, tools and services
-
Monitor or record calls, chats and other communications with our
customer service team and other representatives, and platform
communications between or between partners and vacationers for
quality control, training, dispute resolution and as described
in this Privacy Policy
-
Create aggregated or otherwise anonymized or de-identified data
that we may use and share without restriction, where permitted
-
Promote security, verify the identity of our customers, prevent
and investigate fraud and unauthorized activities, defend
against claims and other liabilities, and manage other risks
-
Comply with applicable laws, protect our rights and interests
and those of our users, defend ourselves and respond to law
enforcement authorities, other legal authorities and requests
that are part of legal proceedings
-
Comply with applicable security and anti-terrorism,
anti-bribery, customs and immigration and other such due
diligence laws and requirements
-
Operate our business for legitimate business purposes and as
permitted by law
Legal basis for processing:
We only collect personal data from you (i) where the personal data
is necessary to perform a contract with you (e.g. managing your
booking, processing payments or creating an account at your
request), ( ii) where the processing is within our lawful
interests and is not overridden by your rights (as explained
below) or (iii) where we have your consent to do so (for example,
sending you marketing communications where consent is required
). In some cases we are required by law to collect personal
information from you, for example when it is necessary to use your
transaction history to comply with our legal financial and tax
obligations.
If we ask you to provide personal data to comply with a legal
obligation or to perform a contract with you, we will make this
clear in due course and inform you whether the provision of your
personal data is mandatory or not (as well as by the possible
consequences if you do not provide your personal data).
Certain countries and regions allow us to process personal data
based on legitimate interests. Where we collect and use your
personal data in reliance on our legitimate interests (or the
legitimate interests of a third party), those interests will
typically be to operate or improve our Platform and to communicate
with you as necessary to provide you with our services To provide
services such as security screening purposes when you contact us,
to respond to your inquiries, to conduct marketing, or to detect
or prevent potentially illegal activities.
In some cases we may use automated decision-making, for example in
relation to evaluating fraudulent transactions or suspicious
activity on our website. As part of this processing,
automated decisions may be made by entering your personal data
into a system and calculating the decision using automatic
processes. If you pose a risk of fraud this may affect your
ability to book on our website. You may have rights regarding
automated decision-making, including the ability to request a
manual decision-making process instead or to challenge a decision
based solely on automated processing. If you would like to
learn more about your privacy rights, please read the section
below.
Disclosure of personal data
We share your personal information as described below and in this
Privacy Policy and as permitted by applicable law.
-
Third Party Service Providers. We share
personal information with third parties in connection with
providing services to you and operating our business (for
example, to provide credit card processing, customer service,
business analytics and fraud prevention and compliance services,
and to provide you with advertising tailored to your interests
is). These third parties are required to protect personal
information we share with them and are prohibited from using
directly identifying personal information except to provide
services for which we have engaged them. You must not use
the personal information we share with you for the purposes of
your own direct marketing (unless you have given your express
consent to the third party in accordance with the terms provided
by the third party).
-
Travel provider. We share personal
information with travel-related providers such as hotels,
airlines, car rental companies, insurance companies, vacation
rental owners and managers and, where available, activity
providers, railway companies or cruise lines that fulfill your
booking. Please note that travel providers may contact you
to obtain additional information if and as necessary to
facilitate your booking or otherwise provide the trip or related
services.
-
Business partners and offers. If we
promote a program or offer a service or product in connection
with a third-party business partner, we will share your
information with that partner to assist in marketing or to
provide the related product or service. In most of these
cases, the program or offering will contain the name of the
third party business partner, either alone or in conjunction
with ours, or will direct you to that company's website. An
example of such a business partner relationship would be a
third-party loyalty program for which you could earn points by
completing a booking on our Platform.
-
Legal Rights and Responsibilities. We may
disclose your personal information to enforce our policies or
when we are permitted to do so by applicable law (or have a good
faith belief that we are required to do so), such as: B. in
response to a request from a law enforcement or government
agency in connection with actual or proposed litigation, or to
protect and defend our property, employees and other rights or
interests. We may also disclose your personal information
in response to a subpoena or other legal request, or when
required to process certain taxes as required by law or legal
process.
-
Corporate transactions. We may share
your personal information in connection with a corporate
transaction such as a divestiture, merger, consolidation,
assignment or sale of assets, or in the unlikely event of
bankruptcy. In the event of a purchase, we will inform the
buyer that they may only use your personal data for the purposes
specified in this privacy policy.
Your Rights and Choices
You have certain rights and choices regarding your personal
information, as described below:
-
You can access, change, request deletion or update the accuracy
of your information at any time, either by logging into your
account or by contacting us
-
If you no longer wish to receive marketing and promotional
emails, you can unsubscribe by clicking on the
“unsubscribe” link in the email. You can also
log in to your account to change communication preferences (not
available for all Expedia Group companies) or contact us
here. Please note that if you unsubscribe or unsubscribe
from marketing emails, we may continue to send you important
transactional and account-related messages that you will not be
able to opt out of
-
For our mobile apps, you can view and manage notifications and
settings in the app's and your operating system's settings menus
-
If we process your personal data based on consent, you can
withdraw that consent at any time by contacting
us. Withdrawal of your consent will not affect the
lawfulness of the processing that took place before you withdrew
your consent and will not affect our processing of your personal
data based on a legal basis other than consent
Certain countries and regions provide their residents with
additional rights regarding personal information. These
additional rights vary by country and region and may include:
- Request a copy of your personal information
-
Request information about the purpose of the processing
activities
- Delete your personal information
-
Object to our use or disclosure of your personal information
- Restrict the processing of your personal data
- Opt out of the sale of your personal information
- Port your personal information
-
Request information about the logic involved in our automated
decision-making used in our fraud prevention practices and the
outcome of such decisions
If you have any questions about privacy, your rights and choices,
and to make a request to change or update your information or to
request deletion, please contact us
In addition to the rights set out above, you may have the right to
complain to a data protection authority about our collection and
use of your personal data. However, we recommend that you
contact us first so that we can do our best to resolve your
concern. You can submit your request to us using the
information in the section. We respond to all requests we
receive from individuals wishing to exercise their personal data
protection rights in accordance with applicable data protection
laws.
International data transfer
The personal data we process may be transferred or transferred to
countries other than the country in which you reside. These
countries may have data protection laws that differ from the laws
in your country.
Our Platform's servers are located in the United States, and
Expedia Group companies and third-party providers operate in many
countries around the world. If we collect your personal data,
we may process it in any of these countries.
We have taken appropriate steps and put in place safeguards to
ensure that your personal information remains protected in
accordance with this privacy policy. For example, all data
transfers between our group companies are subject to our
intra-group agreements, which contain strict data transfer terms
and conditions (including the European Commission's Standard
Contractual Clauses for transfers out of the EEA) and require all
group companies to protect the personal data they process in
accordance with applicable data protection law. In addition,
certain U.S. subsidiaries of Expedia Group have certified with the
EU-US and Swiss-US Privacy Shield, as discussed below in the
“Privacy Shield” section.
We also require that third parties to whom data is transferred
have appropriate safeguards in place to protect your personal data
in accordance with applicable data protection laws. The
specific measures used depend on the service provider, and our
agreements with them may include Standard Contractual Clauses
approved by the European Commission, certification of the service
provider under the EU-US and/or Swiss-US Privacy Shield, or
reliance on the service provider's Binding Corporate Rules as
defined by the European Commission.
Privacy Policy Updates
We may update this privacy policy in response to changing laws or
technical or business developments. You can see when this
Privacy Policy was last updated by checking the “last
updated” date displayed at the top of this Policy.