trivago's Privacy Notice

1. Who is responsible for the processing of personal data described in this Privacy Notice?

trivago N.V. controls the processing operations described in this Privacy Notice. trivago is a company incorporated under the laws of the Netherlands, and has its offices at Kesselstraße 5-7, 40221 Düsseldorf, Germany.

To exercise your data protection rights, or to ask a general question about the processing of your personal data by trivago or about this Privacy Notice, you can contact our team by sending an email to privacy@trivago.com.

To contact our data protection officer directly, please send an email to privacy@trivago.com with the subject line "To the attention of the data protection officer". Please note, emails sent to this address will not automatically be confidential/only read by the data protection officer. Should you require a confidential exchange with our data protection officer, please state so in your email to us and we will arrange such an exchange.

2. Your rights

You have the following rights with respect to your personal data. Please refer to Section 1 to get information about how to contact us and to exercise such rights.

3. What data we collect from you

When you use our Services, we may process these types of personal data:

• User data
  • Personal data collected for the creation of a member account, such as: your name, email address, password.
  • Contact details and other information you may share with us, such as your postal address, age, gender, country of residence, social network profiles, messages you sent to our team, feedback, comments, replies to surveys or interviews, participation to any of our promotional activities.
• Usage data
  • Information about how you use our Services, including the details inputted by you when you conduct a search using our Services (including destination, date, number of guests, currency), deals viewed, and links clicked.
  • Interaction with our marketing communication: we may collect information about your engagement with our direct marketing messages, including our newsletter and push notifications (for instance, analytics on the number of times you open our newsletter or click on hyperlinks in it).
• Booking data: When you use our Services and click a link to an accommodation offer that is listed on our Services, the online booking site making that offer may send us personal data relating to any subsequent booking or reservation that you make on the online booking site.
• Location data: We may process approximate location information based on your IP address (country or city level). Furthermore, with your prior consent, we may use GPS data to provide you with customised search results on your mobile.
• Bank data: Even though we are not directly involved in the accommodation booking and payment process, we may ask you to share, from time to time, your bank details, for example to issue compensation to users.
• Technical data: Examples include IP address, cookies, identification data (session ID, member ID, device ID), access status/HTTP status code, browser software and version, operating system and its interface, internet service provider, language and other configuration settings.

4. Why and how we use your personal data

Below you will find information about (i.) the reasons why we collect and use your personal data, as well as, for each purpose, (ii.) the corresponding legal basis and (iii.) the categories of personal data involved. Your personal data may be used in the following ways:

• Provide our Services, including help you compare accommodation prices and offers, and find your ideal accommodation.
  • Legal basis: performance of a contract, consent.
  • Categories of personal data used: user data, usage data, booking data, location data, technical data.
• Create and maintain a safe and reliable environment for our Services, including for your trivago user account.
  • Legal basis: compliance with legal obligation, legitimate interest.
  • Categories of personal data used: usage data, technical data.
• Understand how you use our Services and use the feedback you may send us to improve our Services, identify trends in the industry, and develop new products and features to improve your experience.
  • Legal basis: consent, legitimate interest.
  • Categories of personal data used: user data, usage data, booking data, technical data.
• Send you direct marketing communication about our Services or related services, provide you with advertisement on our Services as well as on third party websites (whether personalised or not), and otherwise administer promotional activities (such as sweepstakes and similar giveaways).
  • Legal basis: consent, legitimate interest.
  • Categories of personal data used: user data, usage data, technical data.
• Communicate with you, respond to your questions and comments, and provide customer service.
  • Legal basis: performance of a contract, legitimate interest.
  • Categories of personal data used: user data, usage data, booking data, bank data.
• Fulfil contractual obligations with third parties, such as online booking sites listing in our Services.
  • Legal basis: performance of a contract, legitimate interest.
  • Categories of personal data used: user data, usage data, booking data.
• Comply with legal obligations, requests from law enforcement, prevent fraud and establish, exercise or defend legal claims.
  • Legal basis: compliance with legal obligation, legitimate interest, performance of a contract.
  • Categories of personal data used: user data, usage data, booking data, technical data.

5. With whom we share your data

We may share your personal data with the following categories of recipients, provided there is an appropriate legal basis:

• Our wholly owned subsidiaries.
• Authentication partners: for instance, when you sign in or log into our Services using third-party services such as Facebook, Google or Apple. For details on how Google handles your data, check out Google's privacy policy and terms.
• Third party service providers who provide data processing services to us, such as: hosting and storage providers,customer service providers, communications providers, security and fraud prevention providers, debt collectors, analytics, advertising, and marketing providers.
• Third party service providers who provide services to us that are independent data controllers, such as security and fraud prevention services, social media networks and advertising and marketing providers.
• Business partners that we may jointly offer products or services with. These are services offered through our Services in conjunction with other third parties.
• Third party travel suppliers such as hotels, airlines, car hire, insurance, property owners, travel guide or activity providers.
• Law Enforcement Authorities. To prevent, detect and prosecute illegal activities, threats to state or public security and to prevent threats to people’s lives.
• As part of a corporate transaction such as a merger, divesture, consolidation, or asset sale.

If we transfer data to our service providers, they may only use the data to perform their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organisational measures and are regularly monitored by us.

6. Service-specific information

7. Information on cookies

Whenever you use our Services, we use cookies and other online tracking technologies. In this paragraph, you will find information about what ‘cookies’ are, how they are used by trivago, and how to manage your preferences.

8. Transfer to other countries

Because of the global nature of our business, we may share your personal data internationally with our wholly owned subsidiaries, and with our partners and service providers. They may process your personal data in countries where data protection laws may differ from EU laws, or with the law applicable in your country of residence.

Whenever such countries are not subject to a European Commission adequacy decision, we take additional measures to make sure that the transfer of your personal data complies with applicable laws, such as the Standard Contractual Clauses issued by the European Commission.

If a transfer to a third country is provided for and no adequacy decision or appropriate safeguards are in place, it is possible and there is a risk that authorities in the respective third country may gain access to the transferred data in order to collect and analyse it, and that the enforceability of your affected rights cannot be guaranteed.

9. How does trivago protect your data?

As part of our commitment to safeguard your personal data, we have taken appropriate technical and organisational measures to protect your personal data from being accidentally or intentionally manipulated, lost, destroyed, or accessed by unauthorised persons. These include pseudonymization, encryption, firewalls, or access controls. Our security measures are reviewed regularly and updated in keeping up with technological advances.

10. When will your data be deleted?

We keep your personal data only for as long as needed or permitted in light of the purposes for which it was collected and consistent with applicable law. Thereafter, we delete the data immediately, unless we still need the data until the expiry of statutory limitation periods (e.g. for evidence purposes for civil law claims or accounting and tax law reasons), or if there is another legal basis under data protection law for the continued processing of your data in the specific individual case. We will anonymize your data if we intend to use it for analytical statistical purposes over longer periods.