Old version
May 5, 2026 08:36 UTC
87ad90226c99b9a0ba9f7191055fb9aa4f7d3634cd294876a7e0d755807d94ca
CA-V-002172
New version
May 6, 2026 07:21 UTC
948e8f0e2da780500386a3767b2a0588a92a70785002a154a431d0625aa89d43
CA-V-002258
Share 𝕏 Share in Share
Change Summary
Booking.com's privacy notice has been replaced with a technical error page containing security challenge code instead of the actual privacy policy document. The previous comprehensive privacy notice, which explained how Booking.com collects and uses traveler data, has been removed entirely and replaced with JavaScript code for handling security challenges and robot verification. This means the privacy policy that previously described your data rights, how your information is shared, and how to contact the company is no longer accessible through the standard policy URL.
high severity
0 Sentences added
404 Sentences removed
3 Sentences modified
407 Sentences before
3 Sentences after
Added
Removed
Modified
BeforeAfter
0Booking.com: Privacy Notice.0<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title></title> <style> body { font-family: "Arial"; } </style> <script type="text/javascript" nonce="17780520608540.8305992733094832"> function getAjaxObject() { var ajax; if (window.XMLHttpRequest) { try { ajax = new window.XMLHttpRequest(); // XMLHttpRequest (Mozilla, Opera, Safari, etc.) } catch (e) { return false; } } else { var msXML = new Array( // XMLHttpRequest (IE with ActiveX) "Msxml2.XMLHTTP.5.0", "Msxml2.XMLHTTP.4.0", "Msxml2.XMLHTTP.3.0", "Msxml2.XMLHTTP", "Microsoft.XMLHTTP" ); for (var i = 0; i < msXML.length; i++) { // We want to get the best we can try { ajax = new ActiveXObject(msXML[i]); break; } catch (e) { return false; } } } return ajax; } function sendAjaxRequest(url, data, callback) { const xhr = getAjaxObject(); if (!xhr) { callback(new Error('Unable to create XMLHttpRequest object'), null); return; } xhr.open('POST', url, true); xhr.setRequestHeader('Content-Type', 'application/json'); xhr.setRequestHeader('Accept', 'application/json'); xhr.onreadystatechange = function() { if (xhr.readyState === 4) { if (xhr.status >= 200 && xhr.status < 300) { try { const response = JSON.parse(xhr.responseText); callback(null, response); } catch (error) { callback(error, null); } } else { callback(new Error('HTTP error! status: ' + xhr.status), null); } } }; xhr.onerror = function() { callback(new Error('Network error'), null); }; xhr.send(JSON.stringify(data)); } function reportChallengeError(log, challengeError) { try { sendAjaxRequest( 'https://reports.booking.com/chal_report', { log: log, message: challengeError.message, stack: challengeError.stack }, (e, response) => { if (e) { console.error('Request failed:', e); } else { console.log('Success:', response); } } ); } catch (e) {} } function setupErrorHandling() { // Handle JavaScript errors window.addEventListener('error', function(event) { var error = { message: event.message, stack: event.error ? event.error.stack : '' }; reportChallengeError('javascript_error', error); }); // Handle unhandled promise rejections window.addEventListener('unhandledrejection', function(event) { var error = { message: event.reason && event.reason.message ? event.reason.message : 'Unhandled Promise Rejection', stack: event.reason && event.reason.stack ? event.reason.stack : '' }; reportChallengeError('promise_rejection', error); }); } // Initialize error handling setupErrorHandling(); </script> <script type="text/javascript" nonce="17780520608540.8305992733094832"> window.awsWafCookieDomainList = ['booking.com']; </script> <script type="text/javascript" src="https://www.booking.com/__challenge_h78IRKX3kpQxScCExxShBNwRUlb/d8c14d4960ca/a18a4859af9c/challenge.js" nonce="17780520608540.8305992733094832"></script> <script type="text/javascript" nonce="17780520608540.8305992733094832"> const maxLocationLength = 2047 - "&chal_t=1760623098515&force_referer=".length; function searchStringWithNewParam(search, key, value) { value = encodeURIComponent(value); if (!search.startsWith('?')) { return search + `?${key}=${value}`; } else if (search.endsWith('&')) { return search + `${key}=${value}`; } else { return search + `&${key}=${value}`; } } function getNewUrlWithAddedParameter(location, parameters) { let newSearch = location.search; for (let parameterName of Object.keys(parameters)) { if (!newSearch.includes(`${parameterName}=`)) { newSearch = searchStringWithNewParam(newSearch, parameterName, parameters[parameterName]); } } let newHref = `${location.pathname}${newSearch}${location.hash}`; if (newHref.length < maxLocationLength) { return newHref; } return null; } </script> </head> <body> <div id="challenge-container"></div> <script type="text/javascript" nonce="17780520608540.8305992733094832"> let newHref; try { setTimeout(() => { try { reportChallengeError("Reloaded without updating url", new Error("")); } catch (e) {} document.location.reload(); }, 20000); let referrer = document.referrer; let availableLength = maxLocationLength - document.location.href.length; if (encodeURIComponent(referrer).length > availableLength) { let parsedReferrer = new URL(referrer); referrer = parsedReferrer.origin; if (encodeURIComponent(referrer + parsedReferrer.pathname).length < availableLength) { referrer = referrer + parsedReferrer.pathname; } } let parameters = { chal_t: 1778052060854, force_referer: referrer, }; newHref = getNewUrlWithAddedParameter(document.location, parameters); } catch (e) { reportChallengeError("Failed while getting new href", e); } newHref = newHref || document.location.href; AwsWafIntegration.saveReferrer(); AwsWafIntegration.checkForceRefresh().then((forceRefresh) => { if (forceRefresh) { AwsWafIntegration.forceRefreshToken().then(() => { window.location.href = newHref; }); } else { AwsWafIntegration.getToken().then(() => { window.location.href = newHref; }); } }); </script> <noscript> <h1>JavaScript is disabled</h1> In order to continue, we need to verify that you're not a robot.
1Skip to main content VND Choose your currency.1This requires JavaScript.
2Your current currency is Vietnam Dong Choose your language.2Enable JavaScript and then reload the page. </noscript> </body> </html>
3Your current language is English (US) Get help with your reservation List your property Register Sign in Stays Flights Flight + Hotel Car rental Attractions Airport taxis Print/Save Privacy Notice for Travelers Updated March 2026 About this privacy notice Terms we may use in our privacy notices Personal data we collect and process Personal data you give to us Personal data you give us about others Personal data we collect automatically Personal data and information about you we receive from other sources Purposes of collecting and processing your personal data Legal bases for personal data processing How we share personal data within Booking.com How we share personal data within the Booking Holdings Inc. group (BHI) How we share personal data with third parties Information regarding specific markets and products & services Ground transportation Insurance How we protect personal data How we use cookies & other tracking technologies How we use artificial intelligence and make automated decisions How we treat personal data belonging to minors Your rights Our company and how we further comply with privacy laws About this privacy notice We are Booking.com and this privacy notice is intended for travelers using or considering using our products and services.Removed
4You place your trust in us by using Booking.com services, and we value that trust.Removed
5This privacy notice describes how we collect and otherwise process your personal data when you visit our websites, use our mobile apps or buy a travel-related product or service through us.Removed
6Among other things, it tells you what rights you have in relation to your personal data and how you can contact us.Removed
7Booking.com offers online travel-related services through its own websites and mobile apps, as well as through third-party channels, for example, partners’ websites.Removed
8This privacy notice applies to any kind of traveler information Booking.com processes through all of our services.Removed
9It isn't the only privacy notice Booking.com maintains to inform you about our processing of personal data.Removed
10A similar privacy notice is available for Booking.com business partners.Removed
11Booking.com amends its privacy notices from time to time and recommends that you visit this privacy notice occasionally to stay informed.Removed
12If Booking.com makes updates to a privacy notice that could significantly impact persons, it will take steps to inform these persons about such changes before they go into effect.Removed
13Back to top Terms we may use in our privacy notices Throughout our privacy notices, Booking.com uses particular terms that have a specific meaning in the context of these notices and the services Booking.com offers.Removed
14These specific terms are described here.Removed
15Term Meaning Booking.com: When we refer to “we,” “us,” or “our,” we mean Booking.com group entities and other Booking Holdings Inc. companies as described in the section on Our Company .Removed
16Booking Holdings Inc.Removed
17(BHI) This is the parent company of Booking.com.Removed
18It is also the parent company of other BHI brands such as Agoda and Priceline.Removed
19Visit https://www.bookingholdings.com/ for more information.Removed
20Platform Any websites, mobile apps, or other technologies that we provide in order to interact with travelers and other parties for travel-related services.Removed
21Strategic partner A company (such as an airline, a bank, another BHI brand, or a phone manufacturer) with whom we contract and collaborate to expand reservation opportunities.Removed
22Through these partnerships, travelers can conveniently book their trip at various touchpoints beyond our direct channels of Booking.com websites and mobile apps.Removed
23Traveler Anyone who uses or is considering using any of our travel products and services, whether for themselves or for others, through our platform.Removed
24Trip One or more travel products and services a traveler can select to obtain from one or more trip providers via our platform.Removed
25Trip provider The third-party provider of an accommodation (e.g. hotel, motel, apartment, bed & breakfast, etc.), an attraction (e.g. amusement park, museum, sightseeing tour, etc.), transportation (e.g. plane, ground transportation including private cars, public transit, car rental, train, coach tour and related transfers) and any other travel or related product (e.g. insurance) or service as from time to time available on the platform for a trip reservation.Removed
26Trip service The online reservation, order, purchase, and payment services as offered, enabled, and supported by Booking.com for trip providers on the platform.Removed
27Trip reservation The online reservation, order, purchase, or payment in connection with a trip.Removed
28Back to top Personal data we collect and process Personal data you give to us When you make a trip reservation, you are asked for your name and email address.Removed
29Depending on the nature of the trip reservation, we may also need to ask for your home address, phone number, payment info, date of birth, current location (in the case of on-demand services), whether you’re traveling for work purposes, the names and dates of birth of the people traveling with you, and any preferences you might have for your trip (e.g. dietary or accessibility requirements).Removed
30For reservations for flights and certain attractions, we may be required to collect additional information from you including your and your co-travelers’ passport or national ID information.Removed
31This may also be necessary for online check-in.Removed
32When you contact our customer service team, contact your trip provider through our platform, or reach out to us by telephone or through social media, we also collect information from you through these channels including your name, metadata such as, for calls, where you called from, and the date and length of the call.Removed
33When you search using our platform for possible trip reservations, you can select to save specific trip items in a list that we’ll store for you.Removed
34During or after your trip, we may also invite you to submit reviews that can inform others about the experiences you had on your trip.Removed
35When you submit reviews on the platform, we collect information you’ve included along with your first name or display name and avatar (if you choose one).Removed
36If you create an account on our platform, we also store information you include and manage in your account.Removed
37This can include personal settings, travel preferences, credit card information, uploaded photos, and your reviews.Removed
38You can also choose to add details from one or more of your identification documents to your account so that you don’t have to re-enter this information for future trip reservations.Removed
39If you want a verified account badge in those jurisdictions where it is available, we may ask for a copy of your identification (a passport or ID card) and a “selfie” to help us confirm it is you.Removed
40There are other circumstances where you may provide us with personal data.Removed
41For example, if you’re using our platform from your mobile device, you can decide to allow Booking.com to use your current location or grant us access to other details.Removed
42This helps us give you the best possible service and experience by, for example, suggesting the nearest restaurants or attractions to your location or making other recommendations.Removed
43Personal data you give us about others It may be that you use our platform to make a trip reservation on behalf of, or that involves, other travelers.Removed
44In this case, you may be required to provide some details about these persons as part of the trip reservation.Removed
45If you have a Booking.com for Business account, you can keep an address book there to make it easier to plan and manage business travel arrangements for others.Removed
46When you use the platform to give us information about others, it’s your responsibility to ensure that each person whose personal data you provide is aware that you’re doing so and can understand how Booking.com uses their personal data (as described in this privacy notice).Removed
47Personal data we collect automatically Whether or not you make a trip reservation, when you use our platform, we automatically collect certain information.Removed
48This includes your IP address, the dates and times you use our platform, and some information about your device’s hardware and software (such as the type of operating system, internet browser and mobile app version you use, your chosen language settings).Removed
49When you use our mobile apps, we collect data identifying the mobile device and operation of our app on the device (including possible crashes).Removed
50When you are redirected to the Booking.com platform by a third-party website or mobile app, we collect this information as well.Removed
51We also collect information about clicks you make and which pages are shown to you from our platform.Removed
52Personal data and information about you we receive from other sources We may also receive information about you from other sources.Removed
53This can include one or more of the following: Other BHI companies Trip providers Strategic partners Other third-party companies such as marketing partners Information we receive from these parties may be used together with information you provide us with directly via our platform for the purposes of providing services to you.Removed
54We receive personal data about you from these parties in situations such as these: Our trip reservation services are available beyond our platform.Removed
55They are also integrated into the services of strategic partners.Removed
56When you make a reservation using a service for which the strategic partner relies on Booking.com, we receive the reservation details from the strategic partner so that your reservation can be processed and supported.Removed
57Trip providers may share other information about you with Booking.com.Removed
58This could happen if you have support questions about a pending trip reservation, or if there is a dispute, major complaint, including about you, or other issue about a trip reservation.Removed
59We may also obtain information about you from publicly available sources (such as media reports or social media platforms) and combine it with other information we hold, where we consider it necessary to verify a complaint or suspected misconduct concerning you.Removed
60We integrate with third-party payment service providers such as Adyen and Stripe to facilitate electronic payments between you, Booking.com, and trip providers.Removed
61These service providers share payment information so we can administer and handle your trip reservation.Removed
62In some cases, we link to other business partners who provide trip reservations that may not be available on our platform.Removed
63If you select these, you are redirected to other business partners’ websites where you can make a reservation.Removed
64These partners may share certain personal data related to your specific reservation and your interactions on their websites or mobile apps with us in accordance with their privacy policies.Removed
65Our platform includes communication services such as email and chat messages.Removed
66These communication services offer you a convenient way to contact the trip provider you’ve booked with to discuss specifics of your reservation such as available parking at an accommodation.Removed
67The data we collect and process includes these communications.Removed
68We may block the delivery of communications that we, at our sole discretion, believe might contain malicious content or spam, or pose a risk to you, trip providers, Booking.com, or others.Removed
69We may also receive information on an aggregated basis from our social media and marketing partners.Removed
70This helps us measure the effectiveness of advertising and marketing campaigns.Removed
71When you link your Booking.com account to a social media account you control, you might trigger exchanges of data between Booking.com and that social media provider.Removed
72You can always unlink them by updating your Booking.com account settings.Removed
73We may receive confirming or verifying information about you from third parties.Removed
74For example, in order to provide you with a verification badge, we may use a third party to cross-check the information you give us to confirm that it is accurate and belongs to you.Removed
75Back to top Purposes of collecting and processing your personal data We use your personal data for a number of purposes as outlined here: Trip reservations First and foremost, we process your personal data to complete and administer your trip reservation, which is essential to provide this service.Removed
76This includes sending you communications that relate to your trip reservation, such as confirmations (including, where applicable, providing you with a proof of purchase and/or payment), modifications, and reminders.Removed
77In some cases, this may also include processing your personal data to enable online check-in with the trip provider or processing personal data in relation to possible damage deposits.Removed
78In addition to your contact details (e.g. email address, phone number), in order to provide you with services, we may also need reservation identifiers and dates to determine the duration of the reservation.Removed
79Customer service We provide our travelers with customer service in more than 40 languages, and we’re here to help 24 hours a day, seven days a week.Removed
80Sharing reservation information with our global customer service staff is essential to help you when you need us.Removed
81This includes, for example, helping you to contact the right trip provider and responding to any questions you might have about your trip reservation.Removed
82To do this, we use personal data such as your reservation details, including, for example, the price of your reservation as well as how and when you made the reservation.Removed
83User accounts As a user of our services, you can create an account for your use across our platform.Removed
84With an account, you can manage your trip reservations, take advantage of special offers, make future trip reservations more easily, and manage your personal settings.Removed
85Managing personal settings gives you the ability to keep and share lists, share photos, easily see trip services you’ve searched for, and check travel-related information you’ve provided.Removed
86You can also see any reviews you’ve written in connection with your trips.Removed
87With your account, you can also create a public profile under your own first name or with another name you choose.Removed
88In some jurisdictions, we offer an account/guest verification program.Removed
89It helps to create trust and assurance between partners and guests.Removed
90In order to receive a verification badge on your account, we cross-check the data you give us with any historical data we may have about you as well as other publicly available data.Removed
91If you log in to your Booking.com account and you want to create a Booking.com for Business account, we may use your name and email address to pre-fill the sign-up form.Removed
92If you’re a Booking.com for Business account holder, you can also save contact details in that account, manage business reservations, and link other account holders to the same Booking.com for Business account.Removed
93To provide accounts, we use personal data such as login credentials for accessing your account and information about when the account is used; for example in connection with reservations and payments.Removed
94Marketing activities We use your information for marketing activities, including: To send you personalized marketing messages, including promotions, Genius and other rewards, travel experiences, surveys, and other updates about Booking.com products and services.Removed
95These can be by push notifications, text messages, and other messaging applications, notifications in the app, or emails.Removed
96You always have the option to unsubscribe from marketing messages.Removed
97For example, you can unsubscribe from receiving email marketing communications anytime by selecting the “Unsubscribe” link included in each communication, or manage your preferences in your account settings.Removed
98For personalized marketing messages, we may also use your interactions with our platform, such as previous reservations and behavioral data, including data collected via cookies and similar tracking technologies.Removed
99To show you personalized marketing, including promotions, Genius and other rewards, travel experiences, surveys, and other updates about Booking.com products and services on the Booking.com website, mobile apps, or on third-party websites and apps.Removed
100For more information on personalized marketing, see the section How we use artificial intelligence and make automated decisions .Removed
101These may be offers and recommendations we think you may find interesting that you can book directly on our platform, on sites operated with a strategic partner, or on other third-party sites.Removed
102For personalized marketing displays, we may also use your interaction with our platform, such as previous reservations and behavioral data, including data collected via cookies and similar tracking technologies.Removed
103To contact you with information about insurance products that you didn’t include in your reservation.Removed
104To organize other promotional activities and, based on information already collected, we may invite you and other travelers to participate in such activities.Removed
105To do this, we use personal data such as your contact and account information, browsing data, location data and preferences, searches, and reservations you make from different devices.Removed
106Communicating with you There may be times when we get in touch with you, including via email, chatbot, mail, phone call, push notification, platform notification, or text message.Removed
107Which method we choose depends on the contact information you’ve previously shared.Removed
108We process personal data in communications you and other parties send to us.Removed
109There may be a number of reasons for this, including: Responding to and handling any support requests made by you or the trip provider you booked with.Removed
110We offer travelers and trip providers various ways to exchange information via our platform, such as requests and comments about trip reservations made via Booking.com.Removed
111If you have started but not finished a trip reservation, we might contact you to invite you to continue with your reservation.Removed
112This convenience allows you to pick up the process where you left off without having to search for a trip provider or fill out your reservation details again.Removed
113When you use our trip services, we might send you a survey or otherwise invite you to provide a review about your experience with us or the trip provider.Removed
114We send you other material related to your trip reservations, such as how to contact us if you need assistance while you’re away and information that we feel might be useful to you to prepare for your trip and get the best experience.Removed
115Even if you don’t have an upcoming trip, we may still need to send you other administrative messages, which could include security alerts.Removed
116We may send you a warning or other notice if a trip provider reports misconduct by you.Removed
117To do this, we use personal data such as your first and last name, email address, and reservation details, including reservation IDs and chosen locations.Removed
118Market research We sometimes invite our customers to participate in market research.Removed
119Review the information that accompanies this kind of invitation to understand what personal data will be collected and how it’s used.Removed
120Improving our services We use personal data about travelers using our platform for analytical purposes, including for analyzing how you or travelers like you with similar interests use our platform, understanding customer sentiment and satisfaction, measuring our operating performance, and improving trip services.Removed
121We may process your user ID for the purpose of measuring the audience visiting our websites.Removed
122We may use your personal data to develop and enhance our machine learning models and artificial intelligence systems.Removed
123This is a necessary part of our ongoing commitment to make our services better and enhance our travelers’ experience.Removed
124For more details, see the How we use artificial intelligence and make automated decisions section.Removed
125In addition to the statistics we generate regularly about our business, we use data to test and troubleshoot platform features.Removed
126The main goal here is to get insights into how our services perform, how they are used, and ultimately how to optimize and customize our website and mobile apps, in an effort to make them easier and more meaningful to use.Removed
127In order to achieve this purpose, we may combine personal data we collect from you during different visits to our platform or visits on different devices or different websites of ours, even when you are not logged in.Removed
128To do this, we use personal data such as: Reservations made by travelers over specific periods of time or for specific products Communications between you and our trip providers, or between you and us (for example, for customer service purposes) The searches travelers made on our websites and apps The reviews travelers shared with us about their trip experience Our recurring work for analytical purposes includes the use of solutions that pseudonymize personal data or process personal data in encrypted formats.Removed
129As much as possible, we strive to use anonymized and de-identified personal data for this analytical work.Removed
130Showing the pricing applicable to you When you search our websites or mobile apps, for example to find an accommodation, a rental car, or a flight, the pricing you see may depend on a number of factors, such as whether you are in the European Economic Area (EEA) or in another region or country outside of the EEA.Removed
131To display the pricing applicable to you, we use personal data such as your IP address, the type of device you’re using, and which site you came from.Removed
132Customer reviews and other destination-related information During and after your trip, we might invite you or your traveling companion to submit a review.Removed
133This invitation asks for information about the trip provider or the destination.Removed
134The reviews help to inform other travelers about the quality of the trip service you used, the destination you chose, the ground transportation, or any other experiences you choose to share without disclosing your identity.Removed
135Reviews submitted by travelers are subject to our Terms of Service and to automated and other content moderation to verify that reviews conform with our Content standards and guidelines .Removed
136If a review you submit is not accepted in line with our content moderation standards, we may still process the rejected review, for example, for improving our services.Removed
137If you have a Booking.com account, you can choose to display a screen name next to your review, instead of your first name.Removed
138Call monitoring When you make calls to our customer service team, we use an automated telephone number detection system to match the number you call from to the reservation you made.Removed
139This saves time for you and our customer service staff.Removed
140However, our customer service staff may still ask for additional identification to ensure it is you calling about the reservation.Removed
141When you call our customer service team, we may have one or more authorized persons listen to the call or record the call for training and quality control purposes.Removed
142This quality control includes the usage of the recordings to handle possible complaints, legal claims, and indications of possible fraud attempts.Removed
143We do not record every call made to our customer service team.Removed
144If a call is recorded, it is kept for a limited amount of time (30 days by default).Removed
145We then automatically delete the call recording unless we determine before then that it will be necessary to retain it for fraud investigation or legal purposes.Removed
146Promotion of a safe and trustworthy service and the prevention of fraud We continuously analyze and use certain personal data to prevent and detect online fraud attempts and other illegal or unwanted activities.Removed
147This is necessary to maintain our platform as a trustworthy environment as well as for the safety of all travelers.Removed
148We use personal data for safety and security purposes, including when you report a safety concern, when others do so about you, or when we need to identify persons in connection with a user account or reservation.Removed
149When we do this, we may have to stop or put certain reservations on hold until we finish our assessment.Removed
150If we have concerns about serious misconduct, we may cancel your upcoming reservations or decline your future reservations via our platform.Removed
151In case of safety or security concerns, we may collect, analyze, and combine with other information we hold, and/or information from publicly available sources (such as media reports or social media platforms), to prevent or detect harm (including toward our staff or premises).Removed
152We cannot prevent that some of that information may contain special categories of personal data.Removed
153In order to detect and prevent fraud and limit other abuse of our platform, we may use your personal data and analyze your behavior on our platform to assess the risk of a certain action or transaction you are attempting to make.Removed
154For example, this may help us determine whether a bot is using our platform rather than a legitimate user, or to determine whether a user is making a fraudulent payment using a stolen credit card.Removed
155For these purposes, we use your contact information, other identifiers (such as IP addresses), reservation details including canceled reservations, reviews, account information, browsing data, location data, communications data, or other information that you or another person has provided to us, including images, video, or other media submitted on our platform.Removed
156We use artificial intelligence to review activity on our platform for fraud and to detect any other forms of misconduct as described in the section How we use artificial intelligence and make automated decisions .Removed
157Legal purposes In certain cases, we may need to reuse your information to: Handle and resolve legal claims and disputes Address possible regulatory investigations Enforce our reservation Terms of Service Comply with lawful requests from law enforcement Comply with laws and regulations that apply to Booking.com For example, we may be required to process your reservation history, the details of one or more of these reservations and associated payment information.Removed
158Legal bases for personal data processing To process your personal data as previously described, Booking.com relies on several legal bases in applicable privacy regulations.Removed
159This is summarized as follows: Purpose of personal data processing Legal basis and comments A.Removed
160Trip reservations B.Removed
161Customer service Here Booking.com relies on the legal basis that the processing of personal data is necessary for the performance of a contract involving you, specifically to finalize and administer your trip reservation.Removed
162If the required personal data isn’t provided, Booking.com can’t finalize the trip reservation with the trip provider, nor can we provide customer service to you about it.Removed
163C.Removed
164User accounts D.Removed
165Marketing activities E.Removed
166Communicating with you F.Removed
167Market research G.Removed
168Improving our services H.Removed
169Showing the pricing applicable to you I.Removed
170Customer reviews and other destination-related information J.Removed
171Call monitoring K.Removed
172Promotion of safe and trustworthy service and prevention of fraud Unless provided otherwise in this overview, collecting and processing of your personal data for these purposes is based on the legitimate interests of Booking.com or a third party.Removed
173Before we process personal data to serve the legitimate interests of Booking.com or a third party, Booking.com balances your rights and interests in the protection of personal data with the rights and interests of Booking.com or those of the third party.Removed
174The legitimate interests include, for example, avoiding financial harm from online fraud; maintaining the safety of our platform, customers, and trip providers and staff; sharing people’s experiences with prospective travelers; and keeping people informed about offers we think might be of interest.Removed
175In the unlikely event Booking.com would process special categories of personal data in the context of purpose K, we rely, where applicable, on the fact that processing relates to personal data which are manifestly made public by the individual or other legal bases as may be assessed at the time.Removed
176L.Removed
177Legal purposes Booking.com also relies, where applicable, on compliance with legal obligations (e.g. lawful law enforcement requests).Removed
178All purpose categories Finally, where needed under applicable law, Booking.com will obtain your consent prior to processing your personal data, including for direct marketing purposes or where otherwise required by law.Removed
179If you wish to object to the processing set out under C to L and no opt-out mechanism is available to you directly (for example, in your account settings), contact us as described in the section Your rights.Removed
180Back to top How we share personal data within Booking.com To support the use of Booking.com services, your details may be shared within Booking.com group entities and the other Booking Holdings Inc. companies described in the section on Our company .Removed
181How we share personal data within the Booking Holdings Inc. group (BHI) We may receive personal data about you from other companies in the BHI group (e.g. Agoda or OpenTable), or share your personal data with them, for the following purposes: To provide services (including making, administering, and managing reservations or handling payments) To provide customer service To detect, prevent, and investigate fraudulent or other illegal activities and data breaches, companies within BHI may need to exchange personal data about certain persons to ensure all platforms’ users are protected, for example, from online fraud attempts For analytical and product improvement purposes where permitted by applicable law To provide personalized offers or send you marketing communications where permitted For hosting, technical support, overall maintenance, and maintaining security of such shared data To ensure compliance with applicable laws As applicable and unless indicated otherwise, for purposes A to F, we rely on our legitimate interests to share and receive personal data.Removed
182For purpose G, we rely, where applicable, on compliance with legal obligations (e.g. lawful law enforcement requests).Removed
183We also ensure that data flows between companies in the BHI group comply with applicable law, including obtaining your consent where needed prior to sharing your personal data with other BHI companies.Removed
184How we share personal data with third parties In certain circumstances, we’ll share your personal data with third parties.Removed
185These third parties include: The trip provider you booked with In order to complete your trip reservation, we need to transfer relevant reservation details to the trip provider you have chosen.Removed
186Depending on the trip reservation and the trip provider, the details we share can include your name, contact and payment details, the names of the people accompanying you, and any other relevant information (e.g. check-in/check-out dates), including preferences you specified when you made your trip reservation.Removed
187In certain cases, we also provide some summary information about you to the trip provider.Removed
188This can include: Whether your account is verified Whether you’ve booked with the trip provider in the past The number of completed reservations you’ve made with us The absence of reports to Booking.com regarding misconduct involving you The percentage of reservations you may have canceled in the past on our platform Whether you’ve given reviews about past reservations If you have a query about your trip, we may contact the trip provider to handle your request.Removed
189Unless payment is made to Booking.com itself during the reservation process, we need to forward your credit card details to the trip provider you chose for payment processing.Removed
190To resolve possible trip-related claims or disputes or any other kind of customer service issue, we may provide the trip provider on an as-needed basis with your contact details and other information about the reservation, claim, or dispute.Removed
191This can include, for example, your email address and a copy of your reservation confirmation to confirm that the trip reservation was made or the reasons for its cancellation.Removed
192Trip providers will further process your personal data outside of the control of Booking.com to prepare for arriving and departing guests, for example.Removed
193Trip providers may also ask for additional personal data, for instance to provide additional services and to comply with local requirements and restrictions.Removed
194If available, read the privacy notice of the trip provider to understand how they process your personal data.Removed
195Strategic partners We work with many strategic partners around the world.Removed
196These strategic partners distribute and advertise Booking.com services, including the services and products of our trip providers.Removed
197Depending on the strategic partner, you may make your trip reservation through: our website that’s operated in partnership with a strategic partner; or strategic partners’ websites or mobile apps.Removed
198For the former, the strategic partners will receive certain personal data related to your specific reservation and your interactions on these websites.Removed
199This is for the legitimate interest of Booking.com or our strategic partners.Removed
200For the latter, certain personal data that you give them, such as your name and email address, your address, payment details, and other relevant information, will be forwarded to us to finalize and manage your trip reservation.Removed
201With these strategic partners, we may act as joint controllers for processing of specific personal data.Removed
202When we do act as joint controllers, you will be informed, including to which joint controller to address your specific request to exercise rights.Removed
203We may collaborate with our joint controllers to ensure an adequate response to your request.Removed
204For fraud detection and prevention purposes, we may also exchange information about our users with strategic partners – but only when strictly necessary.Removed
205Connectivity providers Many trip providers contract with specific third-party companies (often referred to as “connectivity providers”) to automate the routing of reservation information from Booking.com and other members of the travel industry to them.Removed
206Connectivity providers act on behalf of trip providers (rather than Booking.com) and forward reservation information to them so they can manage their reservations in their systems.Removed
207Third-party service providers We use service providers to support us in providing our trip services.Removed
208The services these third-party companies provide include: Customer support Industry/market research Fraud detection and prevention (including anti-fraud screening) Insurance coverage claims handling Payment processing We use third parties to electronically process payments, handle chargebacks, or provide billing collection services.Removed
209The payment service providers may, in some cases, use your personal data for their own purposes, such as to detect and prevent fraud attempts and to comply with legal obligations applicable to them.Removed
210When a chargeback is requested for your trip reservation, either by you or by the holder of the credit card used to make your reservation, we need to share certain reservation details with the payment service provider and the relevant financial service organization so they can handle the chargeback.Removed
211This may also include a copy of your reservation confirmation or the IP address used to make your reservation.Removed
212We may also share information with relevant financial institutions, if we consider it strictly necessary for fraud prevention purposes, for example, to prevent the fraudulent use of a stolen credit card.Removed
213Marketing services We may share some of your personal data (such as identifiers) with advertising partners, as part of the marketing of our trip services through third parties (to ensure that relevant advertisements are shown to the right audience and to measure the effectiveness of different marketing activities).Removed
214We use techniques such as hashing specific personal data (e.g. email address, telephone number) to enable matching with data in one or more of their databases.Removed
215Such techniques limit what the receiving third-party company can do with the personal data we selectively share with them.Removed
216When sharing audience insights with advertising partners and other third parties, we ensure that your personal data is aggregated and pseudonymized so the advertising partners and other parties cannot directly identify you (e.g. through the use of data clean rooms).Removed
217These pseudonymized insights are used to develop customized media proposals and pitches for our partners.Removed
218As part of the account verification process, we may share some of your account data (such as your name, email address, phone number, passport number, physical address), linked social media account, passport, or other identification document(s) with a third party.Removed
219A third party may use a detection system to verify that you are a real person and not a bot.Removed
220This process is automated, and the data is not retained beyond what is necessary for verification.Removed
221Other professional third parties In some cases (e.g. disputes, legal claims, or as part of auditing activities), we may need to share your personal data with representatives of professional service organizations.Removed
222These representatives can include legal counsels at law firms as well as auditors.Removed
223We only share your personal data to the extent that is necessary and in line with contractual and other obligations applicable to them.Removed
224Competent authorities We follow specific protocols when law enforcement agencies and other government bodies request that we disclose personal data about one or more travelers in connection with a possible criminal matter.Removed
225We may also disclose personal data to law enforcement agencies in connection with possible cases of fraud.Removed
226We follow similar protocols where, for example, EU and local laws additionally require us to share personal data with a competent authority, such as a tax authority.Removed
227We may be required to disclose personal data to: Comply with a legal obligation, for instance, under applicable short-term rental laws Protect and defend our rights or the rights and interests of our business partners.Removed
228Other business partners We may share personal data in other instances with other business partners.Removed
229These include: Insurance companies: If an insurance claim is made, concerning you and a trip provider, we may provide the necessary data (including personal data) to the insurance company and their appointed representatives for further processing.Removed
230Other trip providers: We may present you with a “Partner offer.” When you book an accommodation marked “Partner offer,” your reservation will be facilitated by a trip provider who is separate from the accommodation you’re booking.Removed
231As part of the reservation process, we’ll need to share some relevant personal data with this trip provider.Removed
232If you book a “Partner offer,” review the information provided in the reservation process or check your reservation confirmation for more information about the trip provider and how your personal data will be further processed by them.Removed
233Safeguards for international transfers of personal data Booking.com is a business that connects travelers and partners around the world.Removed
234The data that we collect from you, as described in this privacy notice, could be accessible from, transferred to, or stored in countries that may not have the same data protection laws as those of the country in which you initially provided the information.Removed
235In any case, we apply appropriate safeguards to make sure that cross-border transfers of personal data comply with applicable law and seek to ensure that your data continues to receive a comparable level of protection.Removed
236In particular, if you’re in the European Economic Area (EEA) and your personal data is transferred to third-party service providers in countries not considered adequate by the European Commission (EC), we establish and implement appropriate contractual, organizational, and technical measures with these third-party companies.Removed
237This is done by using Standard Contractual Clauses as approved by the EC, by examining the countries to which the data may be transferred, and by imposing specific technical and organizational measures.Removed
238In certain cases, we transfer your data outside the EEA because it’s necessary to conclude or perform the contract we have with you.Removed
239For example, if you make a trip reservation involving a trip provider or strategic partner operating outside the EEA, it’s likely to require that we transfer data about your specific reservation outside the EEA.Removed
240For transfers of your personal data outside of the United Kingdom (UK), we apply the equivalent mechanisms and appropriate safeguards for the UK.Removed
241For transfers within Booking.com group entities, we've implemented Binding Corporate Rules (BCRs) as a further safeguard to help ensure your data remains appropriately protected when transferred outside of the EEA.Removed
242You can find information about our BCRs here .Removed
243You can ask us for more information on our implemented safeguards by contacting us as described in the section Your rights .Removed
244Back to top Information regarding specific markets and products & services Depending on the type of product or service you use and other factors such as where you live, we may have additional information to provide you which supplements or even replaces the information elsewhere in this notice.Removed
245Review those following sections which apply to you in order to have the full picture.Removed
246Ground transportation If you use our ground transportation services, the information in this section applies to you.Removed
247It adds to, or replaces, the information in other parts of this privacy notice.Removed
248In addition to what we list in Personal data you give to us , for a car rental reservation we might also ask for your home address, billing address, phone number, date and place of birth, passport and driver’s license info, government-issued ID (where required by law), and the names of any additional drivers.Removed
249For a private or public transportation reservation, we might ask for your pick-up and drop-off address (if you book a journey such as a car or an airport transfer).Removed
250We might also ask for your date of birth or age range for some public transportation tickets (e.g. child or senior tickets) and the names of any additional passengers.Removed
251In addition to what's described in the section Personal data we receive from other sources , car rental, private, or public transportation companies may also share information about you with us.Removed
252This could happen if you need support with or have questions about a pending reservation, or if disputes or other issues arise about a reservation.Removed
253In addition to what is described in the section How we share personal data with third parties , if the car rental company you select on our platform participates in our pre-registration scheme, the details we share can also include your email address, home address, phone number, date and place of birth, passport, and driver’s license information if you have provided this information to us.Removed
254Providing further pre-registration information will enhance your pick-up experience, but it’s optional and you’ll still be able to pick up your rental car even if you don’t provide any pre-registration information.Removed
255Note that, sometimes, at the direction of the ground transportation provider, we’ll need to share your personal data with parties related to the provider in order to finalize and administer your reservation.Removed
256These parties might include other entities of the provider’s corporate group or service providers, drivers, or end fleets who are handling the data on the provider’s behalf.Removed
257Car rental companies may also ask for additional personal data, for example, to provide additional services or to comply with local restrictions.Removed
258Be aware that any information you provide directly to the company/companies supplying your car and/or related products will be stored and used in accordance with their own privacy notice(s) and terms and conditions.Removed
259Back to top Insurance If you purchase an insurance product while using our platform, the information in this section applies to you.Removed
260It adds to, or replaces, the information in other parts of this privacy notice.Removed
261If you live in the US and purchase an insurance product, then our section on US insurance applies to you instead.Removed
262The offering of insurance can involve multiple parties, such as intermediaries, underwriters, and other agents.Removed
263Where Booking.com Distribution B.V. is involved, it will act as the intermediary and authorized agent or appointed representative (depending on the jurisdiction) on behalf of the insurer, by offering insurance products and services to Booking.com customers.Removed
264Review the information provided during the reservation process for more information about us and the parties who work together with us to offer you these products and services.Removed
265The details of the insurer will be visible in the insurance policy and related documentation provided to you.Removed
266When offering insurance, we may have to use and share personal data that is relevant to the insurance product.Removed
267This data relates to you as a potential or actual policyholder, the beneficiaries under a policy, family members, claimants, and other parties involved in a claim: To provide offers, arrange insurance cover and handle insurance claims, some personal data, provided to us during the reservation process (“General Order Data”), may have to be shared within other Booking.com entities.Removed
268You may also be asked to provide additional information, such as names of family members or other beneficiaries or details about a claim (“Insurance-Specific Data”).Removed
269If you make a claim under an insurance policy, this claim may be directly handled by the insurer.Removed
270This means that you may be asked to provide personal data in order to submit the claim directly to them.Removed
271The insurer will inform you accordingly at the point of collection of your information.Removed
272When your claim is handled by the insurer, we may receive information about the status of your claim in order to provide you with customer support services.Removed
273For further information about the relationship between Booking.com and Booking.com Distribution B.V., and to exercise your rights regarding personal data that is collected through the Booking.com platform, contact us as described in the section Your rights .Removed
274Insurance-related call recordings may be kept for up to 12 months to comply with specific provisions from insurance-related laws and regulations.Removed
275If you purchase an insurance product over the phone, we can verify and confirm your insurance purchase in the event of disputes.Removed
276Back to top How we protect personal data We combine people, processes, and technology to protect your personal data and respect your privacy.Removed
277This includes, among other things, that we: Maintain a comprehensive framework of security policies, procedures, and protocols Employ personnel dedicated to cybersecurity and data protection Keep staff alert to security risks through continual security training and awareness activities Use up-to-date security technologies such as encryption and data leakage prevention to help guard against unauthorized data disclosure or destruction Maintain inventories to provide oversight over processes, systems, and data assets Use multiple systems for fraud prevention/detection and continuous system monitoring, including for security purposes Use identity and access management and other logical and physical access restrictions to control that only authorized personnel can access personal data Maintain and test protocols to respond to reports about possible incidents and data breaches Verify and enhance our security systems, procedures, and protocols on a recurring basis Impose equivalent measures on third parties we appoint We use retention practices to keep and, where possible under applicable law, dispose of personal data.Removed
278Generally, we keep your personal data for as long as is necessary to: Enable you to use our services or to provide our services to you Prevent and detect online fraud attempts and/or other illegal activities Comply with legal obligations such as those from accounting and tax laws Resolve any disputes and legal claims How you can further protect your personal data on Booking.com Although not mandatory for your use of the Booking.com platform, we recommend that you: Create an account where available on our platform.Removed
279By using an account, you can protect access to your data, such as your reservation history and your Wallet, for example, with a strong password as well as two-factor authentication.Removed
280Use unique passwords for every online service, including for your Booking.com account.Removed
281If you reuse username and password combinations across multiple services and one of these services suffers a data leak, malicious actors typically try using the same combinations to gain access to your user accounts at other online services.Removed
282Where we detect such malicious attacks impacting travelers, we quickly take countermeasures such as blocking accounts at risk and alerting account holders.Removed
283Read (and follow the guidance from) articles we may make available to you about online fraud prevention and data protection.Removed
284Online fraud attempts typically involve social engineering and “phishing” schemes.Removed
285For example, fraudsters pretend to be a specific accommodation and ask a traveler for payment where this is not necessary.Removed
286You should contact Customer Service if you suspect there is a possible fraud attempt in connection with your reservation.Removed
287Back to top How we use cookies & other tracking technologies Whenever you use our services, including our mobile apps, we may use cookies and other tracking technologies, which we collectively refer to as “cookies.” This section provides information about how we use cookies.Removed
288What are cookies?Removed
289A web browser cookie is a small text file placed by a website in the data that a web browser automatically stores on your computer or mobile device.Removed
290It enables software to store information about the content you view and interact with, for example, to: Remember your preferences, settings, and reservations you may not have completed Analyze how you use our services We also use other types of cookies.Removed
291For example, our websites, email messages, and mobile apps may contain small transparent image files or lines of code that record how you interact with them.Removed
292What are cookies used for?Removed
293Cookies we use can be divided into three purpose categories: functional, analytical, and marketing cookies.Removed
294Functional cookies We use functional cookies to enable our websites and mobile apps to work properly so you can create an account, sign in, and manage bookings.Removed
295They also remember your selected currency, language, and past searches.Removed
296These technical cookies must be enabled to use our website and services.Removed
297Analytical cookies We and our partners use analytical cookies to gain information on your website and mobile app usage, which is then used to understand how visitors like you use our platform and to improve the performance of our website and services.Removed
298Marketing cookies We and our partners use marketing cookies, including social media cookies, to collect information about your browsing behavior that helps us and our partners decide which products to show you on and off our websites and mobile apps, and to display and send personalized content and advertisements on our platform, other websites, and using push messages and email.Removed
299The personalized content is based on your browsing activities and the services you have booked.Removed
300These cookies also allow you to share or like pages on social media.Removed
301We work with selected third-party companies to collect and process data.Removed
302We may sometimes share information (such as your email address or phone number) with some of these third parties so that they can link that information to other data they collect separately (and typically independently from Booking.com).Removed
303This helps us to engage with specific audiences or deliver targeted ads.Removed
304What are your choices?Removed
305Where required, we offer you the option to decline analytical and marketing cookies (through, for example, a cookie banner).Removed
306Most browsers will also allow you to choose which cookies to accept and which to reject.Removed
307See the help function of your browser to learn more.Removed
308Note that if you choose to block certain functional cookies, you may not be able to use or benefit from some features of our services.Removed
309Back to top How we use artificial intelligence and make automated decisions We are always looking for opportunities to innovate and improve the customer experience by using new technologies such as artificial intelligence (AI) systems.Removed
310We currently use AI for the following purposes: Promotion of a safe and trustworthy service and prevention of fraud Machine learning AI systems monitor our platforms for fraud attempts, complaints, and possible traveler or trip provider misconduct at a much faster rate and with greater accuracy than solely manual monitoring.Removed
311The AI systems scan transactions and content (including content submitted by users, e.g. images) on our platform for risk indicators.Removed
312Transactions and content that are identified as indicative of higher fraud risk are flagged for human review and may be hidden or removed from the platform.Removed
313Showing you the most relevant content We use additional AI systems to improve the customer experience and personalization on our platform.Removed
314This includes the use of AI to predict the optimal/most relevant category of products for you and bring the best options to your attention.Removed
315This may include sending you details of a trip we think you would be interested in, displaying tailored complementary trip offerings on our website, and ranking search results to put the best matches at the top of your feed.Removed
316Our page on How we work contains more information on our recommendation systems, including on how you can manage your personalization preferences.Removed
317Remembering your activities and preferences to personalize your experience We offer personalization using stored memories of your activities and preferences using generative AI.Removed
318The purpose of this service is to allow us to remember key preferences you share and maintain a memory of your conversations and interactions so we can tailor your user experience across our platform, making it more personalized and relevant to you.Removed
319The memories are generated by a third-party AI model.Removed
320This can include preferences like your travel style, budget, or specific needs.Removed
321For instance, if you mention, “Remember that I always need a hotel with an electric vehicle charging station,” our AI can remember this preference for future searches and recommendations so you don't have to repeat yourself.Removed
322Sometimes, a preference you ask us to remember may collect special category data about you, such as health or religious information (for instance, if you ask us: “Can you remember that I always need a wheelchair-accessible room?”).Removed
323We will only generate these memories after you give your separate, explicit consent at the moment you make the request.Removed
324We will not intentionally infer memories with sensitive data (including special categories of personal data) without your direct and explicit instruction to do so.Removed
325You remain in full control: through your privacy settings, you can view, manage, and delete your primary stored memories, and you can also withdraw your consent for this feature at any time.Removed
326AI interactive chats We may use AI to develop and offer interactive chats which allow you to ask questions about a trip or service and receive AI-generated relevant responses or itinerary suggestions.Removed
327They may use any personal data you share with it, as well as your search and booking history on our platform, to make personalized recommendations to you.Removed
328Summarizing customer service interactions In addition to our normal process of recording calls, live chats, emails, and other written interactions that you may have with our customer service agents, we may use AI to transcribe and summarize these interactions.Removed
329This helps us to improve the efficiency and speed of our customer services to help you with queries about your booking and our services.Removed
330Any personal data you share with us when interacting with our customer service agents, including your booking details, may be included in the AI summary.Removed
331Intelligent Voice Assistance Depending on your location, when you call us, we may use AI to offer you an option called Intelligent Voice Assistance to help with your query.Removed
332This service allows you to ask questions about your booking to an AI-powered agent, which can provide relevant responses and actions to help you with certain actions relating to your booking.Removed
333This AI-powered agent will use any personal data you share with it, and your booking details, on our platform and with the third parties that we use to provide this solution.Removed
334Improving our services We use AI to improve trip services in line with the information included in the section Purposes of collecting and processing your personal data .Removed
335This includes the identification of trends, analyzing and understanding user sentiment, monitoring the operations of the platform, moderating content on our platform, troubleshooting our websites and apps, and achieving performance and cost efficiencies.Removed
336Personal data may be used to develop, train, and fine-tune AI systems such as generative AI models.Removed
337These models enable you to use natural language to ask questions about a trip or service and to receive AI-generated relevant responses or itinerary suggestions.Removed
338In turn, the AI systems will be trained, fine-tuned, and utilized to improve the effectiveness of the other purposes set out in this privacy notice, including AI systems meant to maintain the trustworthiness of our platform.Removed
339We also use personal data to develop, train, and fine-tune AI systems to improve our personal data detection and redaction capabilities.Removed
340This improves our services by helping us to limit the use of your personal data to when strictly needed and so that we prevent storing any sensitive personal data you may inadvertently give us.Removed
341We have a legal basis to use AI systems in accordance with data protection laws.Removed
342The legal basis of using AI will usually follow the overall purpose of processing set out in the section Purposes of collecting and processing your personal data : Beyond preventing and detecting fraud attempts, we may have a legitimate interest in developing AI systems to reduce our costs, improve the efficiency and quality of our processing, improve our privacy-enhancing technologies, provide better products, and for the benefit and safety of our customers.Removed
343We consider whether your rights and freedoms are not unduly infringed upon by the processing of your personal data and only proceed where this legitimate interest is not overridden by your rights.Removed
344In other cases where we may use AI, we’ll seek your consent where this is required.Removed
345We assess our AI systems against data protection principles, such as minimization, accuracy, and purpose limitation.Removed
346We take steps to prevent harm and biases from our use of AI, for example by: Pseudonymizing, minimizing, and redacting personal data Developing our own systems to reduce sharing data with third parties Reassessing our use of AI systems to ensure risks continue to be adequately mitigated See the How we protect your personal data section for more information regarding the safeguards we have implemented, which will also apply to personal data we process to train or use AI.Removed
347We don’t currently use any solely automated systems, including those using AI, to make a decision about you that would result in a legal or similarly significant effect on you.Removed
348We’ll inform you if this changes and will ensure that we’ve implemented suitable measures to safeguard your rights and freedoms.Removed
349In some cases, we may complete decision-making without human review but only after we’ve assessed that the decision wouldn’t result in a significant effect on you.Removed
350In the cases which may have a significant effect on an individual, for example monitoring for fraud attempts, our systems may inform and contribute to a decision, but any such decisions will have human input.Removed
351A member of our team will review a possible issue that a system may identify and make an informed decision.Removed
352If you’d like to know more about our use of AI systems or would like to object to the use of your personal data in the context of AI, contact us as described in the Your rights section.Removed
353Back to top How we treat personal data belonging to minors Our services are not intended for people under the age of 18.Removed
354In general, we don’t intentionally collect personal data about persons below that age (collectively called “minors”).Removed
355The limited circumstances where we might need to collect from parents or guardians the personal data of minors include: As part of a reservation The purchase of other travel-related services In other exceptional circumstances (e.g. features addressed to families).Removed
356If we become aware (for example, through a Customer Support request) that we’ve processed personal data about minors without the valid consent of their parent or guardian where required, we will delete it.Removed
357Where personal data of minors is provided, we may in limited circumstances retain and use this personal data to test, train, and improve our AI systems to meet our legal obligations or legitimate interests to ensure measures taken to detect and address violations of our content integrity and moderation policies remain proportionate and effective.Removed
358Back to top Your rights We want you to be in control of how we use your personal data.Removed
359You can do this in the following ways: Right Description Access You can ask us for a copy of the personal data we hold about you.Removed
360Correction You can inform us anytime of changes to your personal data and ask us to correct certain personal data we hold about you.Removed
361You can make some of these changes directly when you have an account.Removed
362We rely on you to make sure that your personal info is complete, accurate, and current.Removed
363Erasure You can ask us to erase the personal data we hold about you when, for example, it is no longer needed or we have asked for your consent and you later withdraw it.Removed
364Restriction In certain situations, you can ask us to block or restrict the processing of the personal data we hold about you and object to particular ways we’re using your personal data.Removed
365Portability In certain situations, you can also ask us to provide you with specific personal data you have given us for possible transmission to a third party.Removed
366Withdrawal of consent Where we have collected and processed your personal data on the basis of your consent, you can withdraw that consent at any time, subject to applicable law.Removed
367Objection Where we process your personal data based on legitimate interest or the public interest, you have the right to object to that use of your personal data anytime, subject to applicable law.Removed
368We offer various ways for you to exercise your rights or raise questions and concerns about your personal data at Booking.com: Directly from your account If you have an account, you can access a lot of your personal data through our websites or mobile apps.Removed
369You’ll generally find the option to add, update, or remove information we have about you in your account settings.Removed
370Using our Data Subject Request form If you can’t perform an action through our websites or mobile apps (for example, because certain personal data we have about you isn’t accessible online), you can easily submit your request to us via this Data Subject Request form .Removed
371By email If you can’t perform an action directly from your account or using our Data Subject Request form (for example because a certain option isn’t available), you can exercise the data subject rights mentioned in this notice by contacting our privacy team (which includes our Data Protection Officer) via the email address given in the section Our company and how we comply with privacy laws .Removed
372You can contact us the same way for any other requests or questions about this privacy notice or if you have a complaint or concern about the processing of your personal data.Removed
373We recommend including your country of residence when contacting us through this channel to help us respond to your request.Removed
374By mail If you’d prefer to exercise your data subject rights by mail, address it to our privacy team using the mailing address in Our company and how we comply with privacy laws .Removed
375By default, we’ll respond to such requests electronically.Removed
376To protect your personal information, we may need to verify your identity before completing your request.Removed
377We will do this by asking you questions about your previous reservations with us.Removed
378We’ll respond to your request without undue delay.Removed
379If you aren’t satisfied with our response to your request or have other concerns about your personal data, you can also contact your data protection supervisory authority.Removed
380For questions about a reservation, contact our Customer Service team through our customer service contact page.Removed
381Back to top Our company and how we further comply with privacy laws The entities relevant for this notice include: Entity name Mailing address Privacy email contact details Comments Booking.com B.V. Oosterdokskade 163, 1011 DL Amsterdam, The Netherlands. dataprotectionoffice@booking.com Operates the platform and is the controller for the processing of personal data as described in this privacy notice, except where explicitly stated otherwise.Removed
382It is the EU representative for Booking.com Transport Ltd.Removed
383(BTL).Removed
384Booking.com Distribution B.V. (BDBV) Oosterdokskade 163, 1011 DL, Amsterdam, The Netherlands. dataprotectionoffice@booking.com A sister company of Booking.com B.V. Booking.com B.V. and BDBV work closely together to offer customers different insurance products and services for trip reservations (e.g. room cancellation insurance).Removed
385When BDBV acts as an intermediary for insurance products and services via Booking.com B.V., the two companies are jointly responsible for the collection of insurance-specific data and its transmission from Booking.com B.V. to BDBV.Removed
386However, BDBV acts as the sole controller for any processing outside of the Booking.com B.V. systems.Removed
387Booking.com Transport Ltd.Removed
388(BTL) The Goods Yard Building, 6 Goods Yard Street, Manchester, M3 3BG, United Kingdom. dataprotectionofficer@rentalcars.com A sister company of Booking.com B.V. BTL trades as Rentalcars.com.Removed
389It’s the controller for any ground transportation services.Removed
390The contact details listed are also the means to contact the Booking.com Data Protection Officer.Removed
391Booking.com is subject to an array of laws and regulations, including those related to personal data protection, and their enforcement through data protection supervisory and other authorities.Removed
392Among others, we are subject to supervision by the Dutch Supervisory Authority (the “Autoriteit Persoonsgegevens” (AP)) based in the Netherlands, as well as the Information Commissioner’s Office (ICO) in the United Kingdom.Removed
393Booking.com may be contacted by law enforcement agencies seeking to obtain specific personal data, for example, in connection with their criminal investigations or reports they receive about missing persons.Removed
394Similarly, other agencies and authorities may contact Booking.com with ad hoc or recurring information requests, in connection with short-term rental laws or consumer protection laws for example.Removed
395Duly authorized representatives from agencies and other authorities must submit such requests only via our Law Enforcement Response processes and using the portal we make available for these purposes.Removed
396Back to top List your property Mobile version Your account Make changes online to your booking Customer Service Help Become an affiliate Booking.com for Business Countries Regions Cities Districts Airports Hotels Places of interest Homes Apartments Resorts Villas Hostels B&Bs Guest Houses Unique places to stay Reviews Discover monthly stays Travel articles Seasonal and holiday deals Traveller Review Awards Car rental Flight finder Restaurant reservations Booking.com for Travel Agents About Booking.com Customer Service Help Partner help Careers Sustainability Press Center Safety Resource Center Investor relations Terms of Service Partner dispute How We Work Privacy Notice Modern Slavery Statement Human Rights Statement Corporate contact Content guidelines and reporting Extranet Log-in Copyright © 1996–2026 Booking.com™.Removed
397All rights reserved.Removed
398Booking.com is part of Booking Holdings Inc., the world leader in online travel and related services.Removed
399Start of dialog content Verified reviews from real guests.Removed
400We have more than 70 million property reviews, all from real, verified guests .Removed
401How does it work? 1 It starts with a booking It starts with a booking The only way to leave a review is to first make a booking.Removed
402That's how we know our reviews come from real guests who have stayed at the property. 2 Followed by a trip Followed by a trip When guests stay at the property, they check out how quiet the room is, how friendly the staff is, and more. 3 And finally, a review And finally, a review After their trip, guests tell us about their stay.Removed
403We check for naughty words and verify the authenticity of all guest reviews before adding them to our site.Removed
404If you booked through us and want to leave a review, please sign in first.Removed
405Sign in and leave a review End of dialog content « » Mo Tu We Th Fr Sa Su Close calendar Sign in to continue Sign in to your account or use one of these options Don't have an account yet?Removed
406Create your account 2529900Removed
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.