Privacy policy
(Last updated: 2022, November 15st)
Data Controller
Amadeus IT Group, S.A. will be the Data Controller for the Personal Data it collects and processes about you through your usage of the CMT Services.
Collectively referred to as “Amadeus” or “we” or “us“)
Purpose of Personal Information Processing
Various aspects of the provision of CMT Services, as listed in detail below in this Privacy Statement.
Legal Grounds for Processing
Legal grounds may vary depending on the specific purpose of processing of any information that identifies or can be used to identify an individual directly or indirectly (hereinafter, “Personal Data“), as listed further in this statement below.
These legal grounds may be: (i) performance of a contract, (ii) legitimate interest, and (iii) consent.
Recipients of the Personal Information
Amadeus Affiliates.
Amadeus Subprocessors.
Data subject's rights
You have the right to access, rectification, erasure, to object to and/or to restrict processing of personal information and the right to lodge a complaint with a supervisory authority.
You may exercise your rights: completing this form, by email or by sending your request to our registered office: Calle Salvador de Madariaga, 1, 28027 Madrid, Spain.
Additional information
More information about privacy and data protection is available below.
Introduction
Amadeus IT Group, S.A., Salvador de Madariaga 1, 28027, Madrid, Spain, is committed to protecting the privacy of the Personal Data it collects and processes, and to act in compliance with applicable data protection legislation in its processing activities. We want you to be familiar with how we collect, use, and disclose Personal Data (information that identifies you as an individual).
Who is collecting and processing the Personal Data?
Who is collecting and processing the Personal Data?
This CheckMyTrip Privacy Statement (the “Privacy Statement”) describes how Amadeus processes and collects Personal Data about you through your usage of the travel itinerary and assistance services (“CMT Services”) provided through the CheckMyTrip mobile application (“CMT Application”). To know more about CMT Services, you can read CMT Terms and Conditions.
This Privacy Statement does not address the collection, use, or disclosure of information through any other means other than CMT Application. This Privacy Statement does not apply to the Personal Data that Amadeus may process about you as a traveler or consumer in other products offered within the Amadeus system, including but not limited to the provision of other travel technology services to Amadeus customers and which is covered under the relevant privacy statement.
This Privacy Statement is also independent of privacy notices that providers which offer third party services suggested or made available through CMT Services may give to you, as independent controllers, in connection with your usage of CMT Services. If you decide to book or buy third party services suggested or made available through CMT Services, any Personal Data that you provide will be subject to these third parties’ privacy statements. We strongly recommend you read these privacy statements before providing your Personal Data.
What Personal data is processed, how is this Personal Data collected, what is the Personal Data used for and what is the legal basis for processing?
We develop our services with the goal of using the minimum amount of Personal Data possible. We will collect and process Personal Data about you at various stages of your CheckMyTrip journey in order to provide you with the CMT Services. We will always let you know why we need this information and whether it is mandatory or not.
The Personal Data processed via CMT Services is used for multiple purposes and based on various legal grounds, as detailed below:
Creation of your CMT account
Categories of data
Identification data, such as (i) name, (ii) surname, and (iii) e-mail address
How data is collected
You can create your account directly on the registration section of the CMT Application
Details of purpose
To receive CMT Services, you will need to create an account on CMT Application.
We process your Personal Data as required to create your CMT account and to provide you with the CMT Service(s) you are requesting.
Legal Basis
Performance of the contract
Provision of CMT Services
Categories of data
Identification Data and trip information such as your (i) name, (ii) address, (iii) gender, (iv) date of birth, (v) email address, (vi) phone numbers, (vii) travel destinations, (ix) travel schedules, and (x) travel preferences (seat, meal, etc.)
Information provided through the chatbot.
How data is collected
When you use CMT Services.
Your Personal Data can be provided either directly by You or extracted from your Passenger Name Record.
Details of purpose
We will use your Personal Data to send you’re the relevant information and suggestion of services in connection with your trip through the chatbot (flight status, check-in reminder, flight changes, booking services, pre-trip services, suggestion of services, etc).
Legal Basis
Performance of the contract
Helpdesk and support related to CMT Services
Categories of data
Identification data, such as (i) name, (ii) address, (iii) e-mail address, (iv) telephone number, (v) records of correspondence, (vi) any other information necessary to solve your problem and to respond any queries that is raised with us, and (vii) your username, comments, questions, or feedback.
How data is collected
When you contact us by e-mail as described in the section ‘Contacting Us’ of this Privacy Statement, and if you contact us or we contact you on our social media pages.
Details of purpose
We will use your e-mail address to verify your identity, including other relevant Personal Data by contacting to you with necessary information on the CMT Services and e-mail updates on the basis of a contract to which you are a party to.
Legal Basis
Performance of the contract
Perform analytics to improve CMT Services
Categories of data
Identification data, such as (i) name, (ii) address, (iii) e-mail, and (iv) additional contact information.
Trip information
Information provided through the chatbot
Information collected through Surveys
How data is collected
When you use CMT Services.
When you answer to Customer Surveys
Details of purpose
We will anonymise and/ or aggregate your Personal Data collected through the CMT Services and use it for research, analytical and statistical purposes, to identify preferences, interests and trends, and other activities in the travel and/or hospitality industry, improve our products and to identify products, solutions and services that might be of your interest.
Legal Basis
Legitimate interest
Where Personal Data is processed based on our legitimate interest, the privacy impact on you will be considered, and any processing would only be valid insofar our interests are not overridden by your rights and freedoms.
Marketing communications on new features and updates of CMT Services
Categories of data
Identification data, such as (i) name, (ii) address, (iii) e-mail, and (iv) additional contact information.
How data is collected
When you register to CMT services.
Details of purpose
We will send you e-mails relating to new features and updates on the CMT Services if you have registered to use CMT Services. You can opt out of receiving marketing communications, at any time by clicking on the relevant link available on the email.
Legal Basis
Legitimate interest
Where Personal Data is processed based on our legitimate interest, the privacy impact on you will be considered, and any processing would only be valid insofar our interests are not overridden by your rights and freedoms.
Facilitate the booking of third-party services suggested through CMT services
Categories of data
Identification data and trip information
How data is collected
When you use CMT services
Details of purpose
We will share your Personal Data with third party offering services to facilitate the booking of such services. If you finalize the booking with such third-party providers, they will process your Personal Data as independent controllers in accordance with their own privacy statements.
Legal Basis
Consent
Who is the Personal Data shared with?
We share your information only upon your request, where it is necessary for the provision of CMT Services or where we need to for legal reasons. We may disclose your Personal Data to, among others:
- Amadeus affiliates, who, due to the nature of the services Amadeus provides as a global travel technology supplier, may be located in any location around the world. These Amadeus affiliates, which provide services necessary to support Amadeus in the provision of the services described in this Privacy Notice (security, R&D, operations) will process Personal Data for the purposes described in this Privacy Notice in order to provide CMT Services;
- An affiliate or other third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including without limitation in connection with any bankruptcy or similar proceedings);
- To analytics and search engine providers that assist us with the improvement and optimization of CMT;
- Legal, financial/accounting service providers, and other similar professional advisers;
- If necessary:
- Under applicable law including laws outside your country of residence;
- To comply with legal processes as required by law, subpoena, or regulation;
- To respond to requests from public and government authorities including public and government authorities outside your country of residence;
- To enforce our terms and conditions;
- To protect our operations or those of any of our affiliates;
- To protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and
- To permit us to pursue available remedies or limit the damages that we may sustain.
- • Third party service providers, business partners, suppliers, or subcontractors (‘’Amadeus Subprocessors’’), who provide Amadeus with different services to support and provide CMT Services. You can find the list of Amadeus Subprocessors used in connection with CMT Services the following link Amadeus Subprocessors.
When such disclosure takes places, Amadeus requires the appropriate technical and organizational security measures to be in place to protect Personal Data, and for Personal Data to be processed lawfully. Amadeus only allows affiliates and third-party service providers to use Personal Data for specified purposes and in accordance with Amadeus’ instructions.
International transfers of Personal Data
When Amadeus shares your Personal Data with its Affiliates and third-party service providers who process Personal Data on behalf of Amadeus, this may involve transferring Personal Data outside the EEA. When Personal Data is transferred to another country it will continue to receive adequate protection through contractual or other arrangements put in place with affiliates and third-party service providers. For these transfers at least one of the following appropriate safeguards will be implemented:
- Personal Data will be transferred to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission.
- Standard data protection clauses approved by the European Commission and additional safeguards, which give Personal Data transferred the same protection it has in EEA.
Further information on the appropriate safeguards used when transferring Personal Data outside the EEA can be requested through contacting privacy.checkmytrip@amadeus.com. When requesting this information, please make a reference to the transfer of Personal Data outside the EEA.
Third party sites through CheckMyTrip
CMT Services may also contain links to third-party providers websites or interfaces to enable you to book services with third-party providers. This Privacy Statement does not address, and we are not responsible for, the privacy, information, or other practices of any third parties operating any site to which CheckMyTrip contains a link.
If you initiate a booking processed for third-party services made available or suggested through CMT Services, we may also use your personal information (name, surname, e-mail address and trip details) to pre-fill some mandatory information requested by such third-party provider in order to facilitate your booking process. This personal information will be used by the third-party provider as necessary for your booking process and will treat your personal information in accordance with the third-party’s Privacy Statement.
Security and integrity of Personal Data
Amadeus has taken the appropriate technical and organizational security measures to protect Personal Data from loss or unlawful processing. When Personal Data is processed on behalf of Amadeus, access is limited to those who require access on a business need-to-know basis. Personal Data will be processed in accordance with the instructions of Amadeus and those who have access are subject to a duty of confidentiality.
Amadeus has in place procedures to deal with any suspected Personal Data breach and will notify individuals and any applicable regulator of a breach where they are legally required to do so.
Retention of personal data
Amadeus retains Personal Data for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Legal rights
The CMT Services have been designed to enable you to directly and securely control your Personal Data at any time. Accordingly, you can access, erase and rectify the Personal Data relating to your account directly in the CMT Application. You do not need to file a specific request to exercise your rights.
In any event if you would like to exercise your access, erasure, rectification, portability or restrict processing data subject rights, you can also complete this form. We will take care of the request and, if appropriate, send you instructions.
For security reasons, we reserve the right to take steps to authenticate your identity after submitting the form.
Contacting us
If you have any questions regarding this Privacy Statement or any other data protection related queries, please contact us by e-mail in the English language at privacy.checkmytrip@amadeus.com. For all other queries specially functionality issues or account access queries please contact us by email at feedback@checkmytrip.com
Your rights
Although Amadeus intends to carefully address any request and/or claim from you, as well as carefully process your Personal Data, you are entitled to file any claim or complaint before the relevant data protection authorities, if the answer provided by Amadeus does not meet your expectations.
Updates
We’ll review this Privacy Statement from time to time to make sure it is up-to-date. The latest version will always be available on CMT Application. This Privacy Statement is published by Amadeus IT Group S.A. and may be changed at any time. The date this document was last updated is shown here: 2022-11-15
English 
German 
Spanish 
French 
Italian 
Portuguese (Portugal) 
Portuguese (Brazil) 
Swedish 
Russian 
Chinese (China) 
Chinese (Hong Kong)