Privacy Statement
Data Controller
AMADEUS IT GROUP, S.A. (“Amadeus”, “we” or “us”) will be the data controller for data processing activities related to this application (“App”).
Purpose of Personal Information Processing
Amadeus will be the data controller for processing your personal data for the purposes of making the App available to you, as well as for any processing of personal data carried out based on the Terms and Conditions, specific forms made available to you and/or the sending of commercial communications as well as for the purposes of improving the App and our services (as applicable).
Legal Grounds for Processing
The legal grounds by which we will process your personal data is:
(i) the performance of a contract with you, governed by the Terms and Conditions, by specific forms used when collecting your data;
(ii) your consent when providing us feedback, when booking third-party services through the App and when subscribing to our commercial communications (if applicable) and/or;
(iii) Amadeus’ legitimate interest for the purposes of research, analytical and statistical improvements and to send you commercial communications when you are a registered user of the App.
Information Amadeus collects from you
– IP address
– Information collected through cookies (as applicable)
– If shared by you: (i) name and surname; (ii) e-mail address; (iii) gender; (iv) date of birth; (v) address and country; (vi) phone number; and/or (vii) travel itinerary and travel details.
– Other information you may share with us based on specific forms.
Recipients of the Personal Information
We may share personal data with Amadeus affiliates, who, due to the nature of the services Amadeus provides as a global travel technology supplier, may be in any location around the world. We may also disclose your information to third parties, business partners, suppliers, subcontractors, and service providers for the performance of any contract we enter into with them. If necessary or legally required we may disclose your personal data to public and government authorities, including public and government authorities outside your country of residence.
International Transfers of Data
Amadeus may share your personal data with its affiliates and third-party service providers, this may involve transferring personal data outside the European Economic Area. When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements put in place with Amadeus´ affiliates and third-party service providers.
Retention Period
Amadeus retains personal data for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal requirements. Specific retention periods are associated to each independent processing activity.
Your rights
You have the right to access, rectification, erasure, to object to and/or to restrict processing of personal information and the right to lodge a complaint with a supervisory authority (Spanish Data Protection Authority).
You may exercise your rights by completing this form, via e-mail: privacy.checkmytrip@amadeus.com or by sending your request to our registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain).
Additional information
More information about privacy and data protection is available below.
Last updated: January 2023
Data controller
This App is operated by AMADEUS IT GROUP, S.A. with registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain).
Amadeus will be the data controller for processing your personal data for the purposes of making the App available to you, for any processing of personal data carried out based on the Terms and Conditions, specific forms made available to you and/or the sending of commercial communications as well as for the purposes of improving the App (as applicable).
Purpose of Personal Information Processing
This privacy statement (“Notice”) is applicable to all the information collected by Amadeus from you for the purposes of making the App and its features available to you, as well as any processing of personal data carried out by Amadeus to provide you with the travel itinerary and assistance services (“CMT Services”). This Notice does not address the collection, use, or disclosure of information through any other means other than the App. This Notice does not apply to the personal data that Amadeus may process about you as a traveler. If you are interested in learning more about these other processes, please follow this link.
This Notice is also independent of privacy notices that providers which offer third party services suggested or made available through CMT Services may give to you, as independent controllers, in connection with your usage of CMT Services. If you decide to book or buy third party services suggested or made available through CMT Services, any personal data that you provide will be subject to these third parties’ privacy statements. We strongly recommend you read such privacy statements before providing your personal data.
We develop our services with the goal of using the minimum amount of personal data possible. We will collect and process personal data about you at various stages of your CheckMyTrip journey in order to provide you with the CMT Services. We will always let you know why we need this information and whether it is mandatory or not.
Personal information you share with us and that we collect about you during your navigation through the App will be used, transferred and disclosed (if applicable) (“processed”) as permitted by local law, for the purposes outlined below:
Creation of your CMT account
Categories of data processed
Identification data, such as (i) name, (ii) surname, and (iii) e-mail address
Data collection details
CMT accounts can be created directly on the registration section of the CMT Application.
Additional details
To receive the CMT Services, you will need to create an account within the App. We process your personal data as required to create your CMT account and to provide you with the CMT Services.
Legal grounds for processing
Performance of a contract
Provision of CMT Services
Categories of data processed
Identification data and travel itinerary information such as: (i) name; (ii) address; (iii) gender; (iv) date of birth; (v) email address; (vi) phone numbers; (vii) travel destinations; (viii) travel schedules; and (ix) travel preferences (seat, meal preferences, etc.).
Any additional information you may provide us through the chatbot.
Data collection details
Personal data may be collected through the use of the CMT Services.
Your personal data can be provided either directly by you or extracted from your Passenger Name Record (PNR).
Additional details
We will process your personal data to send you the relevant information and suggestion of services in connection with your trip through the chatbot (flight status, check-in reminder, flight changes, booking services, pre-trip services etc.) suggestion of services).
Legal grounds for processing
Performance of a contract
Provision of helpdesk and support services related to the CMT Services
Categories of data processed
Identification data, such as (i) name, (ii) address, (iii) e-mail address, (iv) telephone number, (v) records of correspondence, (vi) any other information necessary to solve your problem and to respond any queries that is raised with us, and (vii) your username, comments, questions, or feedback.
Data collection details
We will process your personal data when you contact us by e-mail as described in the section ‘Contacting Us’ of this Notice and/or if you contact us or we contact you through our social media pages.
Additional details
We will use your e-mail address to verify your identity, including other relevant personal data by contacting to you with necessary information on the CMT Services and e-mail updates on the basis of a contract to which you are a party to.
Legal grounds for processing
Performance of a contract
Perform analytics and research to improve CMT Services
Categories of data processed
Identification data: (i) name; (ii) address; (iii) e-mail and; (iv) additional contact information.
Travel itinerary information provided through the chatbot
Data collection details
Personal data will be collected through your use of the CMT Services including, but not limited to, through the use of tracking technologies.
Additional details
We will anonymize and/ or aggregate any personal data collected through the CMT Services and use it for research, analytical and statistical purposes, to identify preferences, interests and trends, and other activities in the travel and/or hospitality industry, improve our products and to identify products, solutions and services that might be of your interest.
Legal grounds for processing
Legitimate interest
Please note that when Amadeus relies on legitimate interest as the legal grounds for processing your personal data, we have considered your privacy and carried out a balancing test to verify that your interests and fundamental rights do not override ours.
Provision of communications related to changes and updates in the CMT Services.
Categories of data processed
Identification data, such as (i) name, (ii) address, (iii) e-mail, and (iv) additional contact information.
Data collection details
Personal data collected for the provision of the CMT Services will be used to provide you with these communications related to the services
Additional details
We will send you information regarding the App and/or the CMT Services such as changes to our Terms and Conditions, policies, notices and/or other administrative information.
Legal grounds for processing
Performance of a contract.
Obtaining feedback
Categories of data processed
Information collected through surveys and other forms made available to you.
Data collection details
Personal data may be collected to obtain your feedback and respond to questions made by you (e.g., through surveys, forms or via email when you contact us).
Additional details
Personal data collected through surveys, forms and/or via email will be anonymized and/ or aggregated for the purposes of research, analytical and statistical purposes, to identify preferences, interests and trends, and other activities in the travel and/or hospitality industry, improve our products and to identify products, solutions and services that might be of your interest.
Legal grounds for processing
Consent
Commercial Communications (Marketing)
Categories of data processed
Identification data made available when registering to use the CMT Services under the Terms and Conditions
Identification data such as: (i) name; (ii) address; (iii) e-mail; and (iv) additional contact information that may be required when using the subscription form
Data collection details
Personal data may be collected through the registration form for the CMT Services or through the subscription form to receive commercial communications from Amadeus (e.g., newsletters).
Details of purpose
We will fulfill requests made by you through specific forms to send you commercial communications such as subscriptions and newsletters.
Legal Basis
If you are a user of the CMT Services, we rely on our legitimate interest for this processing activity*.
If you actively subscribe to receive commercial communications and/or newsletters from Amadeus we rely on your consent.
Important note: Please note that when Amadeus relies on legitimate interest as the legal grounds for processing your personal data, we have considered your privacy and carried out a balancing test to verify that your interests and fundamental rights do not override ours.
Facilitate the booking of third-party services suggested through CMT services
Categories of data processed
Identification data and trip information
How data is collected
Personal data will be collected through your use of the CMT Services.
Details of purpose
We will share your personal data with third party offering services to facilitate the booking of such services. If you finalize the booking with such third-party providers, they will process your personal data as independent data controllers in accordance with their own privacy statements and practices.
Legal Basis
Consent
Legal grounds for processing
As outlined above, we process your personal data based on:
– The performance of a contract on the basis of the Terms and Conditions and/or specific forms used when collecting your personal data for the following purposes:
o Creation of CMT account.
o Provision of CMT Services.
o Provision of helpdesk and support services related to the CMT Services.
o Provision of communications related to changes and updates in the CMT Services.
– Your consent for the following purposes:
o If you are not a user of the CMT Services, to send you commercial communications related to Amadeus’ product and/or services (if you request us to do so).
o To obtain your feedback.
o Facilitate the booking of third-party services suggested through the CMT Services.
– Amadeus’ legitimate interest for the following purposes:
o Research, analytical and statistical activities for the purposes of improving the App and the CMT Services.
o If you are a registered user of the CMT Services, to send you commercial communications related to Amadeus’ product and/or services.
Information Amadeus collections from you
This Notice covers any personal information that we may collect during your use of the App and/or the CMT Services:
– Name and surname
– E-mail address
– Address and country
– Phone number
– Date of birth
– Gender
– Travel itinerary and travel details
– IP address.
– Information that Amadeus may obtain through the use of cookies: We and our service providers may use “cookies” and similar technologies on the App. We may use cookies and other technologies to better serve you with more tailored information and facilitate your ongoing access to and use of the App and the CMT Services. For detailed information on the cookies we may use and the purposes for which we may use them, see our Cookie Notice.
We may process additional personal data that you share with us through specific forms, additional privacy and data protection disclosures will accompany any such forms as applicable.
If you intend to provide us with personal data of a third party, it is your responsibility to obtain consent from that third party prior to passing the personal information to us.
You are responsible for the content of the information you provide to us and you must ensure it is legal, truthful, accurate and not misleading in any way and does not infringe on any third party’s rights or is not otherwise legally actionable by such third party.
Recipients of personal information
We may share personal data with Amadeus affiliates, who, due to the nature of the services Amadeus provides as a global travel technology supplier, may be in any location around the world. These Amadeus affiliates may process personal data for the purposes described in this Notice. A link to the complete list of Amadeus affiliates and their locations can be found here.
In addition, we may also disclose your information to:
• Third parties, business partners, suppliers, subcontractors, and service providers for the performance of any contract we enter into with them;
• Analytics and search engine providers that assist us in the improvement and optimization of our App and the CMT Services;
• Affiliates or other third parties in the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings); and
• If necessary: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal processes; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety, property, and/or that of our affiliates, you, or others; and (g) to permit us to pursue available remedies or limit the damages that we may sustain.
If you initiate a booking processed for third-party services made available or suggested through CMT Services, we may also process your personal information (name, surname, e-mail address, travel itinerary and travel details) to pre-fill some mandatory information requested by such third-party provider in order to facilitate your booking process. This personal information will be used by the third-party provider as necessary for your booking process and will be processed in accordance with the third-party’s applicable privacy terms.
Where such disclosures take place Amadeus requires the appropriate technical and organizational security measures to be in place to protect personal data, and for personal data to be processed lawfully.
Amadeus only allows affiliates and third-party service providers to use personal data for specified purposes and in accordance with Amadeus’ instructions. Any sharing of personal data using third party platforms would be governed by the terms of the third-party platform used.
Security and integrity of Personal Data
Amadeus has taken the appropriate technical and organizational security measures to protect Personal Data from loss or unlawful processing. When Personal Data is processed on behalf of Amadeus, access is limited to those who require access on a business need-to-know basis. Personal Data will be processed in accordance with the instructions of Amadeus and those who have access are subject to a duty of confidentiality.
Amadeus has in place procedures to deal with any suspected Personal Data breach and will notify individuals and any applicable regulator of a breach where they are legally required to do so.
International Transfer of Personal Data
When Amadeus shares your personal data with its affiliates and third-party service providers who process personal data on behalf of Amadeus, this may involve transferring personal data outside the European Economic Area (“EEA”). When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements put in place with Amadeus´ affiliates and third-party service providers. For these transfers, at least one of the following appropriate safeguards will be implemented:
• Personal data will be transferred to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
• Standard contractual clauses as approved by the European Commission which, together with supplementary measures, will ensure personal data transferred will retain the same protection it has in EEA; or
• Any other lawful transfer mechanism as foreseen in applicable laws and/or as approved by the European Commission or relevant Data Protection Authority.
Further information on the appropriate safeguards used when transferring personal data outside the EEA can be requested through the contact details set out below in the section legal rights. When requesting this information please make a reference to the transfer of personal data outside the EEA.
Retention Period
Amadeus retains personal data for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal requirements.
Please note that on any forms where you provide us with your details, we may specify the period of time that we intend keep the data according to the specific proposes defined in the form.
Security and Integrity of Personal Information
We use reasonable organizational, technical and administrative measures to protect personal information under our control. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. Please do not send us sensitive information through e-mail. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting us in accordance with the contacting section of this App. Please note that e-mail communications will not necessarily be secure; accordingly, you should not include health or financial information in your e-mail correspondence with us.
When personal data is processed on behalf of Amadeus, access is limited to those who have a business need to know. Personal data will be processed in accordance with the instructions of Amadeus and those who have access are subject to a duty of confidentiality.
Amadeus has procedures in place to deal with any suspected personal data breach and will notify individuals and any applicable regulator of a breach where they are legally required to do so.
Third party sites and sending messages through the App
This Notice does not address, and Amadeus is not responsible for, the privacy, information or other practices of any third parties, including without limitation any third party operating any site to which this App contains a link; or any third-party platform such as a social media platform where Amadeus may share personal information at your request. Where personal information is shared in this way, the use of the personal information will be governed by the terms of the third-party platform you have requested personal information is shared with. The inclusion of a link on this App does not imply endorsement of the linked site by us.
Your rights
You may exercise your rights of access, erasure, to object, to rectification, data portability and/or to restrict the processing of your personal data by completing this form, sending a request via email: privacy.checkmytrip@amadeus.com or by sending your request to the applicable registered office.
Although Amadeus intends to carefully address any request and/or claim from you, as well as carefully process your Personal Data, you are entitled to file any claim or complaint before the relevant data protection authorities.
Contacting Us
If you have any questions regarding this Notice, please contact us at privacy.checkmytrip@amadeus.com. For all other queries specially functionality issues or account access queries please contact us by email at feedback@checkmytrip.com.