1. Scope and who is responsible
This Privacy Policy applies to the AW Stopover website, booking proof of concept, related communications and customer-support activities operated by Amadeus Worldwide (“Amadeus Worldwide,” “AW,” “we,” “us” or “our”).
For questions about this policy or our handling of personal information, contact Amadeus Worldwide at 132 Little Falls Road, Fairfield, New Jersey 07004, United States, or info@amadeusworldwide.com.
2. Information we collect
Information you provide
- Contact information: name, email address, telephone number and communication preferences.
- Journey preferences: origin, stopover city, final destination, travel dates, number of travelers, cabin class and selected package.
- Traveler and booking information: titles, names, dates of birth, gender, email addresses and telephone numbers required to create a flight order.
- Consent records: whether you accepted the Terms of Service, requested AW marketing, consented to marketing-partner sharing, withdrew a choice, or sent a privacy request.
- Communications: inquiries, support messages, requests and feedback.
Information collected automatically
We may collect device and browser information, approximate network information, referring page, campaign parameters, timestamps, security logs and interactions needed to operate, protect and measure the service. In this proof of concept, the raw network address used for lead security is converted to a one-way keyed hash before storage.
Payment information
When the Duffel card component is activated, card details are entered into Duffel-hosted secure fields and are not intended to pass through or be stored on AW application servers. We may receive transaction identifiers, card status, booking amount, currency and payment or authentication results, but not the full card number or security code.
Sensitive travel documents
This proof of concept does not request passport numbers. A production booking may require passport, identity-document, nationality, visa or other information. Where required, we will provide additional notice and limit use to travel fulfillment, compliance, fraud prevention and support.
3. How we use personal information
We may use personal information to:
- save a journey request and create a secure checkout session;
- search, compare, price and present flight and stopover options;
- create, service, change or cancel travel bookings and coordinate suppliers;
- communicate confirmations, schedule information, service messages and customer support;
- send AW newsletters and promotional offers where you have opted in or where otherwise permitted by applicable law;
- share limited information with selected marketing partners only when you separately opt in, as described below;
- prevent fraud, abuse and security incidents; maintain audit records; enforce our terms; and comply with legal obligations;
- analyse and improve service design, reliability, conversion and customer experience using aggregated or appropriately de-identified information where practical.
Depending on the applicable law and context, our legal bases may include performing a contract or taking requested pre-contract steps, legitimate interests, compliance with legal obligations and consent. Where processing relies on consent, you may withdraw it for future processing.
4. Travel suppliers and service providers
We may disclose personal information to the parties reasonably needed to search, book, pay for and service your trip, including:
- airlines, flight distribution and ticketing providers, including Duffel and the operating or marketing carriers;
- hotels, accommodation providers, destination-management companies, transfer providers, chauffeurs, greeters, guides, activity providers, restaurants and other suppliers selected for your itinerary;
- payment, fraud-prevention, identity, communications, hosting, analytics, customer-management, email-delivery and professional-service providers;
- government authorities, border agencies, regulators, courts or law-enforcement bodies when required or permitted by law;
- a successor, buyer or adviser in connection with a merger, financing, reorganisation, sale or transfer of all or part of our business, subject to appropriate safeguards.
Travel suppliers are often independent businesses with their own privacy notices and legal responsibilities. Information may be processed in countries with different privacy laws from your home jurisdiction.
5. AW marketing and newsletter choices
The “Email me Amadeus Worldwide travel ideas, stopover deals and special offers” checkbox is optional and is not required to request or book travel. It is separate from accepting the Terms of Service and acknowledging this Privacy Policy.
When selected, we may add your contact information and relevant travel preferences to our email platform through a secure integration. Messages will identify the sender and include a way to unsubscribe. You may also update your choices through Privacy Choices or by contacting us.
Withdrawing marketing consent does not stop essential service communications about a request, booking, security issue or transaction.
6. Optional sharing with marketing partners
We provide a separate, optional checkbox that asks whether Amadeus Worldwide may share your name, email address and travel preferences with selected travel and lifestyle marketing partners so they may send relevant offers. The checkbox is not pre-selected and is not required to use AW Stopover.
When you expressly choose this option, the partner categories may include:
- airlines and air-service providers;
- hotels, resorts and accommodation partners;
- chauffeur, transfer and ground-transport providers;
- tour, activity, dining and destination-experience providers;
- destination marketing organisations and tourism partners;
- travel, loyalty, insurance, communications and lifestyle partners.
We do not intend to provide full payment-card details, passport numbers or account passwords to partners for their independent marketing. Each recipient may process information under its own privacy notice. We will maintain consent records and provide a way to withdraw your choice for future sharing.
Before activating partner-originated marketing in a country that requires partners to be specifically identified, we will update the consent language to name the relevant partners or otherwise obtain consent in the form required by local law. A generic category list may not be sufficient in every jurisdiction.
7. California and similar U.S. privacy choices
Where applicable law grants these rights, you may request access, correction or deletion of personal information, or opt out of the sale or sharing of personal information and targeted advertising. We will not discriminate against you for exercising an applicable privacy right.
Use Privacy Choices / Do Not Sell or Share My Personal Information to submit a request or switch off partner-marketing sharing. When a browser sends a recognised Global Privacy Control signal, AW Stopover disables the optional partner-marketing consent for that browser interaction and records that the signal was applied.
We may need to verify your identity and authority before completing certain requests. An authorised agent may submit a request where permitted, but we may request evidence of authority and direct verification from the consumer.
9. Retention, security and international transfers
We retain information for only as long as reasonably needed for the purposes described in this policy, including travel service, customer support, consent evidence, fraud prevention, accounting, dispute resolution and legal obligations. Retention periods may differ by record type and supplier requirement.
We use administrative, technical and physical measures intended to protect information, including access controls, transport encryption, server-side secrets, hashed public session tokens, consent audit events and separation of card collection from AW application servers. No system is completely secure, and we cannot guarantee absolute security.
AW, Duffel, airlines and other suppliers may process information outside your home country. Where required, the relevant party should use a recognised transfer mechanism or other appropriate safeguards.
10. Children
AW Stopover is not directed to children who independently use the service. An adult booking travel for a child must have authority to provide the child’s information. The proof of concept currently accepts adult passengers only.
11. Your privacy rights and choices
Subject to applicable law, you may ask to access, correct, delete or obtain information about our use of your personal information; withdraw consent; object to or restrict certain processing; opt out of marketing; or opt out of sale/sharing or targeted advertising.
Submit a request at Privacy Choices or email info@amadeusworldwide.com. We may retain a minimal suppression record so that an opt-out continues to be honoured.
12. Changes to this policy
We may update this policy as the service, suppliers, laws or practices change. We will post the revised version with a new effective date and provide additional notice where required.
13. Contact us
Amadeus Worldwide
132 Little Falls Road
Fairfield, NJ 07004
United States
Email: info@amadeusworldwide.com