Last Updated: January 2026

What this notice covers

This notice describes how AMADEUS IT GROUP, S.A. (“艾瑪迪斯”，“我們“ 或者 ”我們”), with registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain), will make use of your data for the purposes of making the Mobile App or Web App and their features available to you, as well as any processing of personal data carried out by Amadeus to provide you with the travel itinerary and assistance services (“CMT Services”). The notice also describes your data protection rights, including the right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in the “Your rights” section below.

This Notice does not address the collection, use, or disclosure of information through any other means other than the Apps. This Notice does not apply to the personal data that Amadeus may process about you as a traveller. If you are interested in learning more about these other processes, please follow this link.

本通知也獨立於提供第三方服務的提供商通過 CMT 服務建議或提供的隱私通知，這些提供商可能會向您（作為獨立控制人）提供與您使用 CMT 服務相關的信息。如果您決定預訂或購買通過 CMT 服務建議或提供的第三方服務，您提供的任何個人數據將受這些第三方隱私聲明的約束。我們強烈建議您在提供您的個人數據之前閱讀此類隱私聲明。

本通知不涉及任何第三方的隱私、資訊或其他做法，且艾瑪迪斯對此不承擔任何責任，包括但不限於任何第三方經營的應用程式包含連結的任何網站；或任何第三方平台，例如社交媒體平台，Amadeus 可能會根據您的要求共享個人資訊。當以此方式分享個人資訊時，個人資訊的使用將受您要求共享個人資訊的第三方平台的條款的約束。本應用程式中包含的連結並不表示我們認可該連結的網站。

艾瑪迪斯從您那裡收集的信息

We collect and process the following data:

We may collect and process additional personal data that you decide to share with us through specific forms, additional privacy and data protection disclosures will accompany any such forms as applicable.

如果您打算向我們提供第三方的個人數據，您有責任在將個人信息傳遞給我們之前獲得該第三方的同意。

How Amadeus uses your personal data and what is the legal basis for this use

您與我們分享的個人資訊以及我們在您瀏覽應用程式期間收集的有關您的個人資訊將被使用、傳輸和揭露（如適用）（“已處理」），並依當地法律規定，用於下列目的：

* Important note: There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Please note that when Amadeus relies on legitimate interest as the legal grounds for processing your personal data, we have considered your privacy and carried out a balancing test to verify that your interests and fundamental rights do not override ours. You can obtain more information about this balancing test by using the contact details at the end of the notice.

個人信息的接收者

We may share personal data with Amadeus affiliates, who, due to the nature of the services Amadeus provides as a global travel technology supplier, may be in any location around the world. These Amadeus affiliates may process personal data for the purposes described in this Notice. A link to the complete list of Amadeus affiliates and their locations can be found 這裡.

In addition, we may also disclose your information to the following categories of recipients:

Where such disclosures take place Amadeus requires the appropriate technical and organizational security measures to be in place to protect personal data, and for personal data to be processed lawfully. Amadeus only allows affiliates and third-party service providers to use personal data for specified purposes and in accordance with Amadeus’ instructions. Any sharing of personal data using third party platforms would be governed by the terms of the third-party platform used.

個人數據的國際傳輸

When Amadeus shares your personal data with its affiliates and third-party service providers who process personal data on behalf of Amadeus, this may involve transferring personal data outside the European Economic Area (“EEA“) or the United Kingdom. When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements put in place with Amadeus´ affiliates and third-party service providers. For these transfers, at least one of the following appropriate safeguards will be implemented:

• Personal data will be transferred to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission, or which are subject to regulations from the UK government permitting data transfers further safeguards;
• Standard contractual clauses as approved by the European Commission or the UK government which, together with supplementary measures, will ensure personal data transferred will retain the same protection it has in EEA or the UK; or
• Any other lawful transfer mechanism as foreseen in applicable laws and/or as approved by the European Commission, the UL government or relevant Data Protection Authority.

Further information on the appropriate safeguards used when transferring personal data outside the EEA or the UK can be requested through the contact details set out below in the section legal rights. When requesting this information please make a reference to the transfer of personal data outside the EEA or the UK.

保留期

艾瑪迪斯保留個人數據所需的時間，以實現收集數據的目的，包括滿足任何法律要求的目的。

請注意，在您向我們提供詳細信息的任何表格上，我們可能會根據表格中定義的具體建議指定我們打算保留數據的時間段。

Furthermore, if a CMT account remains inactive for a continuous period of two years, Amadeus will delete the associated personal data, unless a longer retention period is required by law or necessary for legal purposes. Any activity within the account during this period will reset the inactivity timer.

您的權利

You have the following rights:

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may, however, have other legal grounds for processing your data for other purposes, such as those set out above.

In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests.  You have an absolute right to optout of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.

You may exercise your rights by completing 這種形式，通過電子郵件發送請求： privacy.checkmytrip@amadeus.com 或將您的請求發送到適用的註冊辦事處。

儘管艾瑪迪斯打算謹慎處理您的任何請求和/或索賠，並謹慎處理您的個人數據，但您有權向相關數據保護機構提出任何索賠或投訴。

Updates to this privacy policy

We may update this privacy policy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

聯繫我們

如果您對本通知有任何疑問，請與我們聯絡： privacy.checkmytrip@amadeus.com。對於所有其他疑問，特別是功能問題或帳戶存取疑問，請透過電子郵件聯絡我們 feedback@checkmytrip.com.