At Amadeus, we are deeply committed to protecting the personal data of our customers, partners, and employees.
Given our central role in the travel ecosystem, Amadeus processes millions of personal data records daily. From booking and ticketing to loyalty programs and biometric boarding, our open platforms enable the secure exchange of personal data between authorized travel stakeholders. This includes traveler profiles, preferences, payment details, and more. We apply privacy‑by‑design principles and maintain a comprehensive data governance framework to ensure this data is handled lawfully and transparently.
At Amadeus, privacy is not an afterthought—it’s embedded into every product and service from the earliest design stages. Our teams apply privacy-by-design principles to ensure that personal data is handled responsibly, securely, and in compliance with global regulations.
We regularly review our practices to align with evolving legal standards, including GDPR, CCPA, and other global frameworks.
This is a fundamental aspect of our commitment to protecting user data. By leveraging advanced technology platforms, we facilitate the management of data subject rights (DSRs), cookie consent, and regulatory requests. These tools enable us to respond efficiently to privacy inquiries, ensuring transparency and fostering trust among users and partners alike.
All Amadeus employees receive privacy training tailored to their roles. Specialized training is provided to those in privacy-related functions, ensuring that everyone—from developers to executives—understands their responsibilities in protecting personal data.
We conduct systematic internal reviews and external audits to ensure compliance. Privacy controls are continuously evaluated as part of our ISO 27001 and SOC certification processes.
Amadeus has achieved measurable improvements in privacy maturity over the past five years, outperforming industry peers in assessments conducted by independent firms. This reflects our commitment to continuous improvement and excellence in data protection.
Our corporate Privacy Policy sets out the key privacy compliance requirements for handling personal data at Amadeus.
In addition Amadeus publishes detailed privacy notices for travelers, business partners, events, candidates and website users outlining how personal data is used, shared, and protected:
The Amadeus Privacy Policy outlines the core principles that guide how we collect, use, and protect personal data. It reflects our commitment to transparency, accountability, and respecting the privacy rights of individuals across all our operations.
Information about Amadeus IT Group, S.A. processing of personal data in its different activities.
Our privacy program is supported by a robust governance structure that includes a dedicated Group Data and AI Office, supported by Privacy compliance specialists embedded within each of the Amadeus corporate functions and business units, as well as within some of our key locations. These roles ensure that privacy responsibilities are clearly defined and consistently implemented across all regions and business units. The Group Data and AI Office is responsible for defining the data privacy vision and strategy, organizing the resources dedicated to privacy compliance and managing the Amadeus privacy program. It reports to top management and the Board of Directors regularly on the privacy program maturity and effectiveness, investigations and compliance risks.
Amadeus appoints Data Protection Officers (DPOs) where required and maintains direct lines of accountability to senior leadership, including the Amadeus Risk and Compliance Board.
The Amadeus Privacy Policy outlines the core principles that guide how we collect, use, and protect personal data. It reflects our commitment to transparency, accountability, and respecting the privacy rights of individuals across all our operations.
Being shortlisted is a remarkable accomplishment—especially in a year with a record‑breaking number of entries. It reflects the exceptional work and unwavering dedication of our teams.
