Privacy Policy | CheckMyTrip

Privacy Statement

Basic information about the processing of Personal Information

Data Controller	AMADEUS IT GROUP, S.A. (“Amadeus”, “we” or “us”) will be the data controller for data processing activities related to the use of CheckMyTrip services (“CMT Services”) available either through the mobile application you have downloaded (“Mobile App”) or through your web browser (“Web App” and together the “Apps”).
Information Amadeus collects from you	Amadeus collects the following categories of data: Identification Data, Contact Data, Travel Data, Communication Data, Marketing Preferences and Technical Data. Further detail is provided below.
How Amadeus uses your personal data and what is the legal basis for this use	Amadeus processes your personal data for various purposes including account creation, provision of CMT Services, customer support, analytics and research, service communications, feedback collection, marketing communications, and facilitating third-party bookings. Detailed information about each processing purpose, the categories of data involved, and the corresponding legal basis is provided in the comprehensive table below.
Recipients of the Personal Information	We may share personal data with Amadeus affiliates, who, due to the nature of the services Amadeus provides as a global travel technology supplier, may be in any location around the world. We may also disclose your information to third parties, business partners, suppliers, subcontractors, and service providers for the performance of any contract we enter into with them. If necessary or legally required we may disclose your personal data to public and government authorities, including public and government authorities outside your country of residence.
International Transfers of Data	Amadeus may share your personal data with its affiliates and third-party service providers, this may involve transferring personal data outside the European Economic Area or the United Kingdom. When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements put in place with Amadeus´ affiliates and third-party service providers.
Retention Period	Amadeus retains personal data for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal requirements. Specific retention periods are associated to each independent processing activity.
Your rights	You have the right to access, rectification, erasure, object to the to some of the processing which we carry out, restrict processing of personal data, data portability and the right to lodge a complaint with a supervisory authority in the country that you reside in or, the country of your place of work or the country where the alleged infringement took place. You may also have additional rights if you live in specific jurisdictions. More details are included in the “Your rights” section below. You may exercise your rights by completing this form, via e-mail: privacy.checkmytrip@amadeus.com or by sending your request to our registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain).
Additional information	More information about privacy and data protection is available below.

Last Updated: January 2026

What this notice covers

This notice describes how AMADEUS IT GROUP, S.A. (“Amadeus”, “we” or “us”), with registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain), will make use of your data for the purposes of making the Mobile App or Web App and their features available to you, as well as any processing of personal data carried out by Amadeus to provide you with the travel itinerary and assistance services (“CMT Services”). The notice also describes your data protection rights, including the right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in the “Your rights” section below.

This Notice does not address the collection, use, or disclosure of information through any other means other than the Apps. This Notice does not apply to the personal data that Amadeus may process about you as a traveller. If you are interested in learning more about these other processes, please follow this link.

This Notice is also independent of privacy notices that providers which offer third party services suggested or made available through CMT Services may give to you, as independent controllers, in connection with your usage of CMT Services. If you decide to book or buy third party services suggested or made available through CMT Services, any personal data that you provide will be subject to these third parties’ privacy statements. We strongly recommend you read such privacy statements before providing your personal data.

This Notice does not address, and Amadeus is not responsible for, the privacy, information or other practices of any third parties, including without limitation any third party operating any site to which the Apps contain a link; or any third-party platform such as a social media platform where Amadeus may share personal information at your request. Where personal information is shared in this way, the use of the personal information will be governed by the terms of the third-party platform you have requested personal information is shared with. The inclusion of a link on this App does not imply endorsement of the linked site by us.

Information Amadeus collects from you

We collect and process the following data:

Category	Detail
Identification Data	Your name, surname, username, gender and date of birth
Contact Data	Your email address, home address and phone number
Travel Data	Travel itinerary and travel details, travel schedules, and travel preferences (seat, meal preferences, etc.).
Communication Data	Records of correspondence, your comments, questions, and feedback.
Marketing Preferences	Your marketing preferences, including any consents you have given us
Technical Data	Information related to the browser or device you use to access our Apps that we may obtain through the use of cookies or similar technologies such as your IP address. We and our service providers may use “cookies” and similar technologies on the Apps. We may use cookies and other technologies to better serve you with more tailored information and facilitate your ongoing access to and use of the Apps and the CMT Services. For detailed information on the cookies we may use and the purposes for which we may use them, see our Cookie Notice.

We may collect and process additional personal data that you decide to share with us through specific forms, additional privacy and data protection disclosures will accompany any such forms as applicable.

If you intend to provide us with personal data of a third party, it is your responsibility to obtain consent from that third party prior to passing the personal information to us.

How Amadeus uses your personal data and what is the legal basis for this use

Personal information you share with us and that we collect about you during your navigation through the Apps will be used, transferred and disclosed (if applicable) (“processed”) as permitted by local law, for the purposes outlined below:

Purpose	Categories of data processed	Data collection details	Additional details	Legal grounds for processing
Creation of CMT account	Identification Data Contact Data	CMT accounts can be created directly on the registration section of the CMT Mobile App or Web App.	To receive the CMT Services, you will need to create an account. We process your personal data as required to create your CMT account and to provide you with the CMT Services.	Performance of a contract.
Provision of CMT Services	Identification Data Contact Data Travel Data Any additional information you may provide us with.	Personal data may be collected through the use of the CMT Services. Your personal data can be provided either directly by you or extracted from your Passenger Name Record (PNR).	We will process your personal data to send you the relevant information and suggestions of services in connection with your trip (flight status, check-in reminders, flight changes, booking services, pre-trip services etc.)	Performance of a contract.
Provision of helpdesk and support services related to the CMT Services.	Identification Data Contact Data Communication Data Any other information necessary to solve your problem and to respond any queries that is raised with us, and comments, questions, or feedback.	We will process your personal data when you contact us by e-mail as described in the section ‘Contacting Us’ of this Notice and/or if you contact us or we contact you through our social media pages.	We will use your e-mail address to verify your identity, including other relevant personal data by contacting you with necessary information on the CMT Services and e-mail updates on the basis of a contract to which you are a party to.	We have a legitimate interest* in managing our business, providing customer service and resolving any issues or complaints.
Perform analytics and research to improve CMT Services.	Identification Data Contact Data Travel Data Technical Data	Personal data will be collected through your use of the CMT Services including, but not limited to, through the use of tracking technologies.	We will anonymize and/ or aggregate any personal data collected through the CMT Services and use it for research, analytical and statistical purposes, to identify preferences, interests and trends, and other activities in the travel and/or hospitality industry, improve our products and to identify products, solutions and services that might be of interest to you.	We have a legitimate interest* in managing our business and improving our services. Where we use cookies or similar technologies, we rely on your consent where required.
Provision of communications related to changes and updates in the CMT Services.	Identification Data Contact Data	Personal data collected for the provision of the CMT Services will be used to provide you with these communications related to the services.	We will send you information regarding the App and/or the CMT Services such as changes to our Terms and Conditions, policies, notices and/or other administrative information.	We have a legitimate interest* in managing our business.
Obtaining feedback	Contact Data Information you decide to share through surveys and other forms made available to you.	Personal data may be collected to obtain your feedback and respond to questions made by you (e.g., through surveys, forms or via email when you contact us).	Personal data collected through surveys, forms and/or via email will be anonymized and/ or aggregated for research, analytical and statistical purposes, to identify preferences, interests and trends, and other activities in the travel and/or hospitality industry, improve our products and to identify products, solutions and services that might be of interest to you.	Consent.
Commercial Communications (Marketing)	Identification Data Contact Data Marketing Preferences Additional contact information that may be required when using the subscription form.	Personal data may be collected through the registration form for the CMT Services or through the subscription form to receive commercial communications from Amadeus (e.g., newsletters).	We will fulfil requests made by you through specific forms to send you commercial communications such as subscriptions and newsletters.	If you are a user of the CMT Services, we have a legitimate interest* in promoting our products and services, and in keeping you informed about updates and offerings that may be relevant to you. If you actively subscribe to receive commercial communications and/or newsletters from Amadeus, we rely on your consent.
Facilitate the booking of third-party services suggested through CMT services	Identification Data Travel Data	Personal data will be collected through your use of the CMT Services.	We will share your personal data with third parties offering services to facilitate the booking of such services. If you finalize the booking with such third-party providers, they will process your personal data as independent data controllers in accordance with their own privacy statements and practices.	Consent.

* Important note: There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Please note that when Amadeus relies on legitimate interest as the legal grounds for processing your personal data, we have considered your privacy and carried out a balancing test to verify that your interests and fundamental rights do not override ours. You can obtain more information about this balancing test by using the contact details at the end of the notice.

Recipients of personal information

We may share personal data with Amadeus affiliates, who, due to the nature of the services Amadeus provides as a global travel technology supplier, may be in any location around the world. These Amadeus affiliates may process personal data for the purposes described in this Notice. A link to the complete list of Amadeus affiliates and their locations can be found here.

In addition, we may also disclose your information to the following categories of recipients:

Personal Data Category	Category of Recipient	Why we share your data
All relevant data	Business partners, suppliers, subcontractors, and service providers	We share your data with our business partners, suppliers, subcontractors, and service providers, who will process it on our behalf for the purposes identified above. In particular, we use third party technology and platform providers for website hosting, maintenance, email service delivery.
Technical Data	Analytics and search engine providers	For the improvement and optimization of our Apps and the CMT Services.
All relevant data	Affiliates or other third parties	To complete possible reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).
All relevant data	Public and Government authorities	To comply with legal requirements and respond to requests, to enforce our terms and conditions and protect our operations or those of any of our affiliates, to protect our rights, privacy, safety, property, and/or that of our affiliates, you, or others; and to permit us to pursue available remedies or limit the damages that we may sustain.
Identification Data Contact Information Travel Data And other relevant data requested by the third party	Third party booking provider	If you initiate a booking processed for third-party services made available or suggested through CMT Services, we may also process your personal information to pre-fill some mandatory information requested by such third-party provider in order to facilitate your booking process. This personal information will be used by the third-party provider as necessary for your booking process and will be processed in accordance with the third-party’s applicable privacy terms.

Where such disclosures take place Amadeus requires the appropriate technical and organizational security measures to be in place to protect personal data, and for personal data to be processed lawfully. Amadeus only allows affiliates and third-party service providers to use personal data for specified purposes and in accordance with Amadeus’ instructions. Any sharing of personal data using third party platforms would be governed by the terms of the third-party platform used.

International Transfer of Personal Data

When Amadeus shares your personal data with its affiliates and third-party service providers who process personal data on behalf of Amadeus, this may involve transferring personal data outside the European Economic Area (“EEA“) or the United Kingdom. When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements put in place with Amadeus´ affiliates and third-party service providers. For these transfers, at least one of the following appropriate safeguards will be implemented:

Personal data will be transferred to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission, or which are subject to regulations from the UK government permitting data transfers further safeguards;
Standard contractual clauses as approved by the European Commission or the UK government which, together with supplementary measures, will ensure personal data transferred will retain the same protection it has in EEA or the UK; or
Any other lawful transfer mechanism as foreseen in applicable laws and/or as approved by the European Commission, the UL government or relevant Data Protection Authority.

Further information on the appropriate safeguards used when transferring personal data outside the EEA or the UK can be requested through the contact details set out below in the section legal rights. When requesting this information please make a reference to the transfer of personal data outside the EEA or the UK.

Retention Period

Amadeus retains personal data for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal requirements.

Please note that on any forms where you provide us with your details, we may specify the period of time that we intend keep the data according to the specific proposes defined in the form.

Furthermore, if a CMT account remains inactive for a continuous period of two years, Amadeus will delete the associated personal data, unless a longer retention period is required by law or necessary for legal purposes. Any activity within the account during this period will reset the inactivity timer.

Your rights

You have the following rights:

Right	Summary
The right of access	Enables you to receive a copy of your personal data
The right to rectification	Enables you to correct any inaccurate or incomplete personal data we hold about you
The right to erasure	Enables you to ask us to delete your personal data in certain circumstances
The right to restrict processing	Enables you to ask us to halt the processing of your personal data in certain circumstances
The right to object	Enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party), including processing for direct marketing purposes or profiling for purposes of direct marketing, or where we are performing a task in the public interest. Your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us.
The right to data portability	Enables you to request us to transmit personal data that you have provided to us to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible
In France: The right to instruct us regarding the use of your personal data after your death	Enables you to instruct us on the processing (retention, deletion, and disclosure) of your personal data after your death. You can change or revoke such instructions at any time.
In the UK: the right to make a complaint to us	If you have unresolved concerns, you have the right to complain to us (using the details set out in ‘Contacting us’ below)

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may, however, have other legal grounds for processing your data for other purposes, such as those set out above.

In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to optout of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.

You may exercise your rights by completing this form, sending a request via email: privacy.checkmytrip@amadeus.com or by sending your request to the applicable registered office.

Although Amadeus intends to carefully address any request and/or claim from you, as well as carefully process your Personal Data, you are entitled to file any claim or complaint before the relevant data protection authorities.

Updates to this privacy policy

We may update this privacy policy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

Contacting Us

If you have any questions regarding this Notice, please contact us at privacy.checkmytrip@amadeus.com. For all other queries specially functionality issues or account access queries please contact us by email at feedback@checkmytrip.com.

CheckMyTrip

The ultimate travel companion that simplifies your journey from planning to arrival, with real-time flight updates and essential information at your fingertips.