Personal Information Category | Purposes for collection | Sources of Personal Information | Lawful basis |
---|---|---|---|
Government issued identification data – including passport, driver’s license, government redress numbers, country of residence, tax identification number (for property owners) |
|
|
|
Identification data – including name, username, email address, telephone number, as well as home, business, and billing addresses (including street and postal code) |
|
|
|
Payment data - including payment card number, expiration date, billing address, financial / bank account number |
|
|
|
Travel related preferences - including favorite destination and accommodation types, special dietary and accessibility needs, as available |
|
|
|
Loyalty data – including loyalty program membership, loyalty points balance, points earnt and used, loyalty status |
|
|
|
Geolocation data – including inferred location from IP address, country selected to use our website, and exact, real-time location (with your consent) |
|
|
|
Images, videos and recordings – including facial photographs, images you upload, and videos |
|
|
|
Communications with us – including emails, chat transcripts and recordings of calls with customer service representatives |
|
|
|
Site interaction data - including searches you conduct, transactions and other interactions with you on our platform, online services and apps |
|
|
|
Device data – including device type, unique device identification numbers , operating system, mobile carrier, and how your device has interacted with our online services, including the pages accessed, links clicked, trips viewed, and features used, along with associated dates and times |
|
|
|
Friends and co-traveler data - including data you give us about other people, such as your travel companions or others for whom you are making a booking |
|
|
|
Child data – including name and contact details of minor travelers provided by you as the parent/guardian of the minor as part of a trip reservation |
|
|
|
Clickstream data - In certain instances, we may use clickstream data to render an illustration of your usage of our site. Clickstream data is the collection of a sequence of events that represent visitor actions on a website. We may reconstruct your site journey modeled on the timing and location of your actions. |
|
|
|
Birthdate and gender - including both your specific date of birth or an approximate age bracket you fall within, along with your gender. |
|
|
|
Sensitive data – data that could reveal sensitive information, including your racial or ethnic origin, religious or philosophical beliefs, sexual orientation, or health or disability information. We will only use your sensitive personal information for the purposes for which it was collected. |
|
|
|
Recipient of Personal Information | Purpose Category |
---|---|
Expedia Group Companies. We share your personal information within the Expedia Group companies, listed at expediagroup.com. Expedia Group companies (either autonomously or as joint data controllers, where applicable) share access and use your personal information as described in this Privacy Statement. |
|
Third-party service providers. We share personal information with third-parties in connection with the delivery of services to you and the operation of our business. These third-party service providers are required to protect personal information we share with them and may not use any directly identifying personal information other than to provide services we contracted them for. They are not allowed to use the personal information we share for purposes of their own direct marketing (unless you have separately consented with the third-party under the terms provided by the third-party). |
|
Travel suppliers. We share personal information with travel-related suppliers such as hotels, airlines, car-rental companies, insurance, vacation-rental property owners and managers, and where available, activity providers, rail, or cruise lines who fulfill your booking. Please note that travel suppliers may contact you to obtain additional personal information if and as required to facilitate your booking or to otherwise provide the travel or associated services. |
|
Business partners and offers. If we promote a program or offer a service or product in conjunction with a third-party business partner, we will share your personal information with that partner to assist in marketing or to provide the associated product or service. In most of those cases, the program or offer will include the name of the third-party business partner, either alone or with ours, or you will be redirected to the website of that business with notice. |
|
Targeted Advertising partners. We may disclose your personal information to our third-party marketing partners for targeted advertising. This may be considered “sharing” data under California law. Subject to certain limitations, some US residents have the right to opt out of having their personal information shared for this purpose. For more information, see the Your Rights and Choices section below. You should note that by opting out of these types of disclosures, you may limit our ability to customize your experience with content that may be of interest to you or to provide you with a better travel experience. View our Cookie Statement for more information on our use of tracking technology for the purposes of targeted advertising. |
|
Social media and online platforms: we share personal information with media agencies, social media, search engines and other online platforms to help us target our online marketing. These social media and other online platforms may also use personal information they hold and combine or match it against personal information received from us to create target audiences, which are audiences that we think would be interested in our online advertising. This may involve social media and other online platforms building a ‘lookalike’ profile of the type of person we are trying to target and providing specific adverts to those people when they browse the internet or use social media. |
|
Other Third-Parties. When you access certain features like Facebook’s “Like” button or a single sign-on that allows you to login with your social media credentials to our online services, you will share information with the third-party, like a social media company, such as the fact that you have visited or interacted with us. In the European Economic Area (EEA), Switzerland, and United Kingdom (UK) we will not load social media sharing or sign-on buttons on our website unless and until you accept our use of cookies and similar technologies. For more information, see our Cookie Statement. The third-party provider may combine this information with other information they have about you. The personal information shared will be governed by the third-party provider’s privacy policy (including any personal information we may access via the third-party provider). The third-party providers should inform you about how you can modify your privacy settings on their site. |
|
Recipients in relation to our legal rights and obligations. We may disclose your personal information and associated records to enforce our policies; as necessary to satisfy our tax or other regulatory reporting requirements, including the remission of certain taxes in the course of processing payments; or where we are permitted (or believe in good faith that we are required) to do so by applicable law, such as in response to a subpoena or other legal request, in connection with actual or proposed litigation, or to protect and defend our property, people and other rights or interests. |
|
Recipients in relations to corporate transactions. We may share your personal information in connection with a corporate transaction, such as a divestiture, merger, consolidation, assignments or asset sale, or in the unlikely event of bankruptcy. In the case of any acquisition, we will inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Statement. |
|