Privacy & Policy

Privacy

This is a summary of our privacy statement

What does this Privacy Statement cover?

This Privacy Statement is designed to describe:

What kind of personal data we collect and use and how we collect it
When and with whom we share your personal data
What choices you can make about how we collect, use and share your personal information

What personal data do we collect and use and how do we collect it?

We collect personal data when:

You give us the information
We collect it automatically
We get it from others

When you create an account on one of our sites, sign up to receive offers or information, or make a reservation through our platform, you provide us with your personal information. We also collect such information through automated technology, such as cookies placed on your browser, if necessary with your consent, when you visit our sites or download and use our applications. We also receive information from Expedia Group affiliates and business partners and other third parties to help us improve our platform and related tools and services, update and maintain accurate information, potentially detect and investigate fraud, and market the services more effectively.

How is your personal data shared?

Your personal information may be shared to help you book your trip and/or vacation, assist you with your trip and/or vacation, communicate with you (including when we send information about products and services or enable communication with travel providers and/or property owners) and comply with the law. The complete Privacy Statement explains how personal data is shared.

What are your rights and choices?

You can exercise your data protection rights in many different ways. For example, you can refuse marketing by clicking on the "unsubscribe" link in the email, if necessary in your account or by contacting our customer service. Our data protection statement contains information about available options and data protection rights.

Categories of Personal Information We Collect

When you use our platform, applications or related tools or services, we may collect the following types of personal information from you:

Name, e-mail address, telephone number and home, business and billing addresses
Government-issued identification, such as passport, driver's license and government credit numbers, and the tax identification number of the vacation property owners are required for booking or identity verification
Payment information, such as payment card number, expiration date and billing address
Travel-related preferences and requests, such as favorite destinations and types of accommodation, as well as special dietary and accessibility needs, if available
Loyalty system and member information
Date of birth and gender
Geolocation
Pictures, videos and other recordings
Social media account ID and other publicly available information
Communications with us (such as recordings of calls with customer service representatives for quality assurance and training purposes)
Your searches, transactions and other interactions with you on our online services and applications
Other communication that takes place via the platform between partners and vacationers, as well as intra-group chat and collaboration tools for vacationers
Searches and transactions made through the platform
Information you give us about other people, such as your travel companions or others for whom you make a booking
Information we receive about you from other Expedia group companies and third parties, such as our business and affiliate partners and authorized service providers, which may include updated contact information, demographic information, interests and purchase history, which we may add to your account or profile and use for market research and analysis

When you install any of our apps or use our platform, we automatically collect the following types of information from your device

IP address
Device type
Unique device identification numbers
Internet browser type (such as Firefox, Safari, Chrome, and Internet Explorer)
Internet service provider
Operating system
Mobile network
How your device has interacted with our online services, including pages opened, links clicked, tours viewed and features used, and associated dates and times
Details of referring websites or exit pages and general geographic location (such as country or city level)

Mobile applications

When you download and use any of our mobile applications, we collect certain technical information from your device in order for the application to function properly and otherwise as described in this privacy statement. These specifications include:

Device and phone contact information such as operator, network type, network operator, SIM operator and SIM country
Operating system and version
Device model
Performance and data usage
Usage data, such as dates and times when the application uses our servers, features and links clicked on the application, searches, events, and data and files uploaded to the application
Selected or enabled device settings such as Wi-Fi, Global Positioning System (GPS) and Bluetooth (which may be used for location services based on the permission explained below)
Mobile device settings
Other technical information, such as the name, type and version of the application, if necessary to provide the services

Access rights for location-based services:

Depending on your device's settings and permissions and your choice to participate in certain programs, we may collect your device's location using GPS signals, cell towers, Wi-Fi signals, Bluetooth or other technologies. We collect this information if you opt-in through the App or other program (either upon initial login or later) to enable certain location-based services available in the App (for example, finding the nearest available accommodation). . You can disable the app's location features by logging out or changing your mobile device's settings.

Use of personal data

We use your personal information for a number of purposes described below, which depend on the site you visit or the application you use.

Use of websites, applications and services:

Book the trip you want or activate the reservation of the vacation destination
Provide reservation and/or account related services
Create, maintain and update user accounts on our platform and authenticate you as a user
Store your search and travel history, accommodation and travel preferences and similar information about your use of Expedia Group's platform and services and otherwise as described in this privacy statement
Enables and facilitates the acceptance and processing of payments, coupons and other transactions
Manage loyalty and reward systems
Collect and enable booking-related reviews
To help you use our services faster and more easily with features such as the ability to log in with your account to the online services and sites of some Expedia Group companies.

Communication and marketing:

Answer your questions and requests for information and process information choices
Communicate between you and the tour operator, such as hotels and vacation rental owners
Contact you (such as by text message, email, phone calls, mail, push notifications or messages on other communication platforms) for information such as travel booking confirmations and updates, for marketing purposes or for other purposes described in this Privacy Statement.
Market our products and services, optimize such marketing so that it is more relevant to you, and measure and analyze the effectiveness of our marketing and promotions
Manage promotions such as contests, sweepstakes, and similar giveaways

Other Business Purposes and Compliance

Do research, market research and data analytics
To maintain, improve, research and measure the effectiveness of our sites and applications, functions, tools and services
Monitor or record phone calls, chats, and other communications with our customer service team and other representatives, as well as platform communications between or between partners and vacationers for quality control, training, dispute resolution, and as described in this privacy statement.
Create aggregated or otherwise anonymized or de-identified information that we may use and disclose without limitation where permitted
Promote security, ensure the identity of our customers, prevent and investigate fraud and unauthorized activity, defend against claims and other liabilities and manage other risks
Comply with applicable laws, protect our and our users' rights and interests, defend ourselves, and respond to law enforcement, other lawful authorities, and requests as part of legal process
Comply with applicable security and terrorism, bribery, customs and immigration and other related due diligence laws and requirements
Conduct our business for legitimate business purposes and as permitted by law

Legal grounds for processing:

We collect personal data from you only (i) if personal data is necessary to enter into a contract with you (e.g. managing a reservation, processing payments or creating an account at your request), (ii) when the processing is legal. your rights (as explained below) or (iii) if we have your consent to do so (eg sending marketing messages where consent is required). In some cases, we have a legal obligation to collect personal information from you, for example when it is necessary to use your transaction history to fulfill our financial and tax obligations under the law.

If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the appropriate time and let you know whether or not providing your personal information is mandatory (as well as the possible consequences of not providing your personal information).

Certain countries and regions allow us to process personal data based on legitimate interests. If we collect and use your personal information based on our legitimate interests (or the legitimate interests of any third party), that interest is typically to operate or improve our platform and communicate with you as necessary to provide our services to you. to verify security when you contact us, to answer your inquiries, to conduct marketing or to detect or prevent illegal activities.

In some cases, we may use automated decision-making, for example to evaluate fraudulent transactions or suspicious activity on our site. As part of this processing, automatic decisions can be made by adding your personal data to the system and calculating the decision using automatic processes. If you are at risk of fraud, it may affect your ability to make a booking on our site. You may have rights related to automated decision-making, including the ability to request a manual decision-making process instead or challenge a decision based solely on automated processing. If you would like to know more about your data protection rights, please see the section below.

Sharing of personal information

We share your personal information as described below and in this privacy statement and as permitted by applicable law.

Third party service providers. We share personal information with third parties to provide services to you and in connection with the operation of our business (for example, to provide credit card processing, customer service, business analytics and fraud prevention and compliance services, and to serve you with advertising tailored to your interests). These third-party service providers must protect the personal information we share with them, and they must not use any directly identifiable personal information other than to provide services for which we have agreed with them. They may not use the personal information we share for their own direct marketing purposes (unless you have specifically agreed with the third party in accordance with the terms provided by the third party).
Travel reporters. We share personal information with travel-related suppliers such as hotels, airlines, car rental companies, insurance companies, vacation rental owners and operators and, where possible, activity providers, rail companies or cruise lines that fulfill your reservation. Please note that the tour operators may contact you to obtain additional information, if and as necessary to facilitate your reservation or otherwise provide the trip or related services.
Business partners and offers. If we promote a program or offer a service or product in conjunction with a third-party business partner, we will share your information with that partner to assist in marketing or to provide the related product or service. In most cases, a program or offer will include the name of a third-party business partner, either alone or with us, or you will be directed to that company's website by a notice. An example of such a business partner relationship is a third-party loyalty program where you can earn points by making a reservation on our platform.
Legal rights and obligations. We may disclose your personal information to enforce compliance with our policies or when we are authorized (or in the good faith belief that we are required to) by applicable law, such as in response to a request from a law enforcement or governmental authority in connection with actual or proposed legal proceedings, or to protect and defend our property, people and other rights; or our interests. We may also share your personal information based on a subpoena or other legal request or as necessary to pay certain taxes during payment processing as required by law or legal process.
Business transactions. We may share your personal information in connection with a business transaction, such as a sale, merger, consolidation, assignment or sale of assets, or in the unlikely event of bankruptcy. With each purchase, we inform the buyer that it must use your personal data only for the purposes stated in this privacy statement.

Your rights and choices

You have certain rights and choices regarding your personal information, as described below:

You can review, change, request deletion or update the accuracy of your information at any time by either logging into your account or contacting us
If you no longer wish to receive marketing and promotional emails, you can unsubscribe by clicking the "unsubscribe" link in the email. You can also log into your account to change your communication settings (not available for all Expedia group companies) or contact us here. Please note that if you choose to unsubscribe or opt-out of marketing emails, we may still send you important event and account-related messages that you cannot opt-out of
In our mobile applications, you can view and manage notifications and settings from the settings menus of your application and operating system.
If we process your personal data based on consent, you can withdraw your consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal of consent, nor does it affect the processing of your personal data based on a legal basis other than consent.

Certain countries and regions offer their residents additional rights related to personal data. These additional rights vary by country and region and may include the ability to:

Request a copy of your personal data
Request information about the purpose of processing operations
Delete your personal data
Object to the use or disclosure of your personal information
Limit the processing of your personal data
Opt out of selling your personal information
Transfer your personal data
Request information about the automated decision-making logic used in our anti-fraud practices and the results of such decisions

If you have any questions about your privacy, rights and choices, and if you want to request that information be changed or updated, or to inquire about deletion, please contact us

In addition to the above rights, you may have the right to complain to the data protection authority about the collection and use of your personal data. However, we recommend that you contact us first so that we can do our best to resolve your concerns. You can send us your request using the information in the section. We respond to all requests we receive from individuals who wish to exercise their personal data protection rights in accordance with applicable data protection laws.

International data transfer

The personal data we process may be transferred or transferred to countries other than the country in which you live. These countries may have data protection laws that differ from your country's laws.

Our platform's servers are located in the United States, and Expedia Group companies and third-party service providers operate in many countries around the world. When we collect your personal data, we may process it in any of these countries.

We have taken the necessary steps and implemented safeguards to ensure that your personal information remains protected in accordance with this privacy statement. For example, all data transfers between our group companies are regulated by our internal group agreements, which contain strict data transfer conditions (including the European Commission's standard contract clauses for transfers from the EEA) and require all group companies to protect the personal data they process. in accordance with the applicable data protection law. In addition, certain US subsidiaries of the Expedia Group have been granted EU-US and Swiss-US Privacy Shield certification, as explained in the Privacy Shield section below.

We also require that third-party service providers to whom information is transferred have appropriate safeguards in place to protect your personal information in accordance with applicable data protection law. The specific measures used depend on the service provider, and our agreement with them may include standard contract clauses approved by the European Commission, the service provider's EU-US and/or Swiss-US Privacy Shield certification, or reliance on the service provider's agreement. binding company rules as defined by the European Commission.

Updates to the privacy statement

We may update this privacy statement in response to changing laws or technical or business developments. You can see when this Privacy Statement was last updated by checking the most recent update date displayed at the top of this statement.