Expedia Group’s Data Collected, Purpose of Use, and Retention Period
Purpose of processing | Categories of Personal Data | Use/Retention | |
Account Creation | Name(as opposed to booking as a guest), Email address | Uses and retains the personal information until the purpose of use is achieved or the user cancels/withdraws from the service, and then destroys it when it is no longer required.
The retention period is the same as the period stipulated in the personal information privacy statement. | |
Account information | Social media network username / handle | ||
Profile | City, Country, HomeTown, Languages(When traveler may indicate it) | ||
Gender(May be collected as part of package booking for airline requirements) | |||
Customer Authentication | Credit Card details / PCI data (expiry / CVV) / Bank account | ||
Booking | transactional | Name, Email address, Address, Credit Card details / PCI data (expiry / CVV) / Bank account | |
Marketing | Name, Email address | ||
Booking confirmations and travel alerts | Phone number | ||
Refunds | Credit Card details / PCI data (expiry / CVV) / Bank account | ||
Telesales Telemarketing (the brand carries out limited tele-sales, often only B2B) | Phone number | ||
Group bookings | Co-traveller/family details | ||
Previous booking information | Transaction history | ||
Filtering Hotel Choice | LGBT filter (A customer can select to filter hotels as to whether they are LGBT friendly. Other than the display of hotels for that customer, no other use is made of this data.) | ||
Goodwill/compensation payments | Financial Account Numbers | ||
Loyalty / Rewards | Name, Email address | ||
Call backs | Phone number | ||
Customer Service or Complaint Handling | Name, Email address, Phone number | ||
Surveys/Reviews | Name, Email address(Note: Reviews often only used in de-identified state), Rating | ||
Prize draw/competition entry | Name, Email address, Address, Social media network username / handle (Social media competitions / prize draws) | ||
Points allocation | Customer loyalty information (e.g. Avios, Nectar, PayBack) | ||
Standalone Newsletter sign up | Name, Email address | ||
information passed to hotel as necessary and dealt with by GSO offline team internally(On request only). | Special Service Requests (SSR) : Accessibility information | ||
Contacting in case of emergency | Emergency Contact (Name and number) | ||
Security – Identity Verification | Email address Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address - GUID – global user ID - TUID – traveller user ID - AMUC – Adobe user ID | ||
Training & Quality | Call Recordings | ||
Protecting the Company | Call Recordings | ||
Fraud prevention or detection | Credit Card details / PCI data (expiry / CVV) / Bank account Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address - GUID – global user ID - TUID – traveller user ID - AMUC – Adobe user ID Security question / Two-Factor Authentication | ||
Statistics, Analysis; Data Science | Mosaic Segment (e.g. income bracket, age demographic (via Experian)) | ||
Site optimisation | Mosaic Segment (e.g. income bracket, age demographic (via Experian)) | ||
Targeting and Tracking | Geolocation data (approx. longitude and latitude) – (not accurate), Cookies(IMIDs) | ||
Marketing, Analytics / Statistics | Email address Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address - GUID – global user ID - TUID – traveller user ID - AMUC – Adobe user ID Clickstream data (including searches made, time, date, referring and exit pages) | ||
Cross device tracking and browser stitching device finger-printing | Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address - GUID – global user ID - TUID – traveller user ID - AMUC – Adobe user ID | ||
Secure Communication Services (for HomeAway to communicate with travellers in a secure way) | Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address - GUID – global user ID - TUID – traveller user ID - AMUC – Adobe user ID | ||
For Mobile App | Last Access Location |