Amadeus Privacy Statement
Last updated - April 2025
Basic information about the processing of Personal Information
AMADEUS IT GROUP, S.A. (“Amadeus”) is the data controller for data processing activities related to this website (“Amadeus.com” or the “Site”). Purpose of the Personal Data Processed Amadeus will be the data controller for processing your personal data for the purposes of making the Site available to you, as well as for any processing of personal data carried out based on the Terms and Conditions, specific forms made available to you and/or the sending of commercial communications where applicable. Personal Data Amadeus Processes About You · Information collected through cookies and other tracking technologies. · Operating system, bowser type, Device type & maker, mobile carrier. · If shared by you: (i) name and surname; (ii) e-mail address; (iii) company name; (iv) address and country; (v) phone number; and/or (vi) position or business title; and · Other information you may share with us based on specific forms. Other Amadeus group entities and to third parties, business partners, suppliers, subcontractors, and service providers for the performance of any contract we enter into with them. If necessary or legally required we may disclose your personal data to public and government authorities, including public and government authorities outside your country of residence. International Transfers of Personal Data Data Controller Legal Grounds for Processing The legal grounds for processing your personal data are as follows: (i) the performance of a contract with you, governed by the Terms and Conditions; (ii) your consent when subscribing to our commercial communications and/or our legitimate interest when sending commercial communications to existing customers; (iii) your consent regarding cookies and other tracking technologies; and (iv) legitimate interest of Amadeus for processing relating security and audience measurement Recipients of the Personal Data Your personal data may be shared internationally upon the existence of appropriate safeguards. Retention Period Amadeus retains your personal data as long as necessary to fulfil the purposes it was collected for, unless a longer retention period is required or permitted by any applicable legal or regulatory obligations. Data Subject's Rights You may exercise your data protection rights (access, rectification, erasure, purpose limitation, objection and data portability) by writing to dataprotection@amadeus.com or by sending your request to our registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain). Additional information More detailed information on the processing of your personal data can be found in the full Privacy Notice.
Data controller
This Privacy Notice (“Notice”) describes howAMADEUS IT GROUP, S.A(“Amadeus”) processes, as data controller, personal data concerning you as a consequence ofmaking the Site available to you, as well as for any processing of personal data carried out based on the Terms and Conditions, specific forms made available to you and/or the sending of commercial communications as well as for the purposes of improving the Site (as applicable).
Purpose of the Personal Data Processed
This Privacy Statement (“Notice”) is applicable to all the information collected by Amadeus from you for the purposes of making the website and its features (the “Site”) available to you. This Notice does not address the collection, use, or disclosure of information through any other means other than the Site. This Notice does not apply to the personal data that Amadeus may process about you as a traveler. If you are interested in learning more about these other processes, please follow this link.
Your personal data will be used to:
- Fulfill requests made by you through specific forms (e.g., to send you commercial communications such as subscriptions and newsletters);
- Obtain your feedback and respond to questions made by you (e.g., through surveys);
- Send you information regarding the Site such as changes to our Terms and Conditions, policies, notices and/or other administrative information;
- Conduct data analysis, audits, developing new products, enhancing our website, improving our services, and identifying usage trends;
- Detect, prevent, or otherwise address security or technical issues in connection with this Site.
Legal Grounds for Processing
We process your personal data based on:
- Theperformance of a contracton the basis of the Terms and Conditions and/or specific forms used when collecting your personal data.
- Yourconsentto send you commercial communications related to Amadeus’ product and/or services (if you request us to do so). Use of tracking technologies is based on consent according to the Cookie Notice.
- Amadeus’legitimate interestfor addressing security or technical issues, audience measurement and for statistical activities with the purposes of improving the Site.
Personal Data Amadeus Processes about You
For the purposes described in this Notice we process the following personal data concerning you due to the navigation through the Site:
- Information that Amadeus may obtain through the use of cookies: We and our service providers may use “cookies” and other tracking technologies on the Site. We may use cookies and other tracker technologies to facilitate your ongoing access to and use of the Site, and to understand how you use the Site, which contents are interesting for you, and, if accepted, to present you tailored content. For detailed information on the cookies and other tracking technologies we may use and the purposes for which we may use them, see ourCookie Notice.
- Operating system, browser type, device type & maker, mobile carrier.
We may process additional personal data that you share with us through specific forms, additional privacy and data protection disclosures will accompany any such forms. Such data may include (as applicable):
- Name and surname.
- E-mail address.
- Company name.
- Address and country.
- Phone number.
- Position or business title.
Recipients of the Personal Data
We may share personal data with other Amadeus group entities which may be in any location around the world. These Amadeus group entities may process your personal data for the purposes described in this Notice. A link to the complete list of Amadeus group entities and their locations can be foundhere.
In addition, and as explained above, we may also disclose your personal data to:
- Third parties, business partners, suppliers, subcontractors, and service providers for the performance of any contract we enter into with them;
- Analytics and search engine providers that assist us in the improvement and optimization of our Site;
- Affiliates or other third parties in the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings); and
- If necessary: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal processes; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of other group entities; (f) to protect our rights, privacy, safety, property, and/or that of other group entities, you, or others; and (g) to permit us to pursue available remedies or limit the damages that we may sustain.
Where such disclosures take place Amadeus requires the appropriate technical and organizational security measures to be in place to protect personal data, and for personal data to be processed lawfully.
Amadeus only allows other group entities and third parties service providers to use personal data for specified purposes and in accordance with Amadeus’ instructions.
International Transfers of Personal Data
When Amadeus shares your personal data, this may involve transferring personal data outside the European Economic Area (“EEA"). When personal data is transferred to a third country, it will continue to receive adequate protection through contractual or other arrangements in place. For these transfers, at least one of the following appropriate safeguards will be implemented:
- Personal data will be transferred to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
- Standard contractual clauses as approved by the European Commission which, together with supplementary measures, will ensure personal data transferred will retain the same protection it has in EEA; or
- Any other lawful transfer mechanism as foreseen in applicable laws and/or as approved by the European Commission or relevant data protection authority.
Further information on the appropriate safeguards used when transferring personal data outside the EEA can be requested through the contact details set out below in the sectionData Subjects’ Rights.When requesting this information please make a reference to the transfer of personal data outside the EEA.
Retention Period
Amadeus keeps your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable laws.Please note that on any forms where you provide us with your details, we may specify the period of time that we intend keep the data according to the specific proposes defined in the form.
Your Rights
You may exercise your rights of access, rectification, erasure, objection, portability and/or restriction of processing in relation to your personal data by sending an email to dataprotection@amadeus.com or by sending your request to our registered office at Calle Salvador de Madariaga, 1, 28027 Madrid (Spain). You may also use that same email address in case you have doubts around how we process your personal data.
You may also lodge a complaint before competent data protection authorities.
If you think your rights have not been properly handled, please contact our DPO: dpo@amadeus.com.
For U.S. residents:
Please refer to ourUnited States Supplemental Privacy Noticefor additional information applicable to individuals residing in the United States.