Personal data you give to us.

When you share personal data about others e.g. people who are travelling with you, you are responsible to ensure that such person or people is made aware of and has given his/her consent for sharing the data with Traveloka, and that they can understand how Traveloka uses their personal data as described in this Privacy Notice.

Moreover, if you are applying for a job with us or are a Traveloka existing employee, we process the following:

Sensitive Personal Data. Some of the personal data identified above, such as your government issued-ID card, financial data and health data may be categorized as sensitive or special category of data under certain applicable laws and regulations. Please be aware that this personal data may be required for certain bookings or to proceed with your job applications, and we may not be able to complete such bookings and recruitment process without this information.

Children’s Data. Our Products and Services are not directed or intended for use by a child who does not have a legal capacity to consent or does not have the maturity to understand what is being proposed by our Products and Services and of this Privacy Notice. We only collect personal data about children if you provide us with information about your own children or any child under your care. If you become aware that your child or any child under your care has provided us with information/personal data without your consent, please contact us using the Contact Details section below.

Personal data we collect from your devices.

Whenever you visit our websites or mobile apps, we collect certain data to provide you with a better experience of using our platform or to maintain security measures. Such data may include:

• Geographic location: to provide you with the best offers and experience by, for example, showing you our city guides, suggesting the nearest travel activities or attractions to your location.
• Log Data: such as IP address, browser type, operating system, country, pages visited, the date and time you accessed our services as well as other Internet usage-related data.
• Cookies and similar technologies: to help us track your internet usage, to make our websites and mobile apps work properly and safely for you, to improve our websites and mobile apps services and to provide personalized messages, advertisements or banners. You can manage your cookies in the settings for your browser such as Internet Explorer, Safari, Firebox or Chrome by choosing which cookies to accept and which to reject. If you choose to block certain functional cookies, please kindly note that you may not be able to use some features of our services.
• Device and Installed Application Data: the data from your phone and/or from the installed Traveloka apps on your device may be collected to identify the device including your device-specific settings and characteristics, app crashes and other system activity

Personal data we receive from third parties or other sources.

We generally collect personal data on a voluntary basis directly from you, except for certain data that we collect from third parties, such as:

• Our Travel Suppliers, business partners and affiliates, business processors and/or other parties whom we collaborate with under any contractual or other commitments for our Products and Services. 
• Third party services such as Google and Facebook when you choose to login or connect to our platform via their services.
• Referral or co-travelers when you are invited or receive an email from us as a co-traveler on a booking from the person who submits your personal data to us.
• Your advisers (including but not limited to accountants, auditors, lawyers, financial advisers, or other professional advisers) that were authorized by you;
• Any person notified by you as your authorized representative or who makes a payment on your behalf for our Products and Services; or
• Any personal data obtained from your employer, as part of your registration or booking process on our corporate travel services. 
• Personal data is collected from third-party service providers regarding certain financial information when you register, access, add, and/or link (as relevant) for a payment card, loan product, insurance, or other financial services product or account with us.

Performing our contract obligations with you

• Travel bookings: we use your personal data to facilitate your online bookings with us. This includes verifying your account or registration process and/or sending you confirmation emails as well as proof of bookings or payment. We may also process your personal data to enable online check-in with our Travel Supplier or to administer your refund claims.
• Account management: when you create an account with us, to facilitate you in managing your personal settings including to create a profile and customizing your experience when using our platform, publishing your reviews about our services as well as the listed products on our platform. Even when you are not logged-in, we use your information to identify you as a user and to manage your reward points.
• Customer support: we use your personal data to allow us to respond to your queries or requests about your bookings via email, push notification, chatbot or phone including to share such information with the Travel Supplier or to attend to any errors or problems you may face when using our services and in measuring and improving your experience and satisfaction.

Compliance with our legal obligations

We use your personal data to comply with a range of legal obligations and regulatory requirements that oblige us to perform or provide:

• Identity verification: we have a legal obligation to confirm your identity for identification and verification purposes. On certain Products and Services, we may also rely on checks performed by other third parties (such as financial institutions) to verify your identity.
• Fraud prevention and anti-money laundering and terrorism financing checks: we have a legal obligation to detect and prevent money laundering, terrorism financing, fraud, abusive behavior, and harmful or illegal activity and protecting our rights. As a result, we may conduct monitoring of unusual transactions by our users.
• Fulfilment of requests from authorities and legal disputes: we have a legal obligation to respond to legal requests submitted by any government authorities or to resolve a dispute, conducting litigation and complaint management.

Our legitimate interest

We process your personal data for a range of purposes that are in our interests as described below. When relying on legitimate interest, we ensure that processing remains proportionate and that your interests and fundamental rights are respected.

• To develop and improve our Products and Services: we may use your personal data when analyzing your visit to our websites or mobile applications with the aim of improving these by using cookies and/or comparable technologies. We will also ask your feedback or review about your experiences in our Products and Services or our Travel Suppliers and use your data for testing and troubleshooting purposes as well as to generate statistics about our business for growth, functions and to get insight into how our services perform. We strive to use anonymized personal data for this analytical work. To achieve this purpose, we may combine personal data we collect from you during different visits to our platform or visits on different devices even when you are not logged in.
• To promote and offer you the best-suited offers provided by us or our Travel Suppliers: we will process your personal data when informing or advising you about similar inventories of our hotels, flights and other transportation and travel activities or best price applicable to you, offering you with travel and lifestyle packages, as well as financial services and payment options suitable for your preferences. We strive to understand you better and meet your changing needs by offering you Products and Services that will suit your specific situation. To achieve such personalization, we may:
• Consider your sociodemographic situation;
• Analyze your behaviors, search queries and preferences in our various communication channels, visits to our websites and mobile applications;
• Analyze the Products and Services that you have already booked or purchased from us.
• To enforce our platform Terms and Conditions, Community Guidelines, or other product-specific policies such as accommodation or flight refund procedures or other terms of use.
• To collect any outstanding payments from you.

To respect your choice if we request your consent

Consistent with the above purposes and as permitted by applicable laws, we may communicate with you via electronic messages including email, text message or mobile push notification to:

• Send you information relating to our Products and Services. This may include booking confirmations and updates, receipts, technical notices, updates, security alerts, and support and administrative messages. Please note that when the communications are related to your bookings, the communications are necessary to fulfil our contract obligations to you.
• Send you marketing communications. In other situations, subject to your consent and applicable law, we may communicate with you about our offers, promotions, rewards, upcoming campaigns or events, market research or surveys and other news about Products and Services offered by us, our group companies, our Travel Suppliers and other business partners.

You may opt out of receiving marketing materials by following the unsubscribe link or instructions set out in our marketing materials or manage your preferences through your account settings on our websites or mobile applications. However, please note that if you withdraw your consent, the opt-out may take effect up to seven (7) calendar days after your request.

Within Traveloka group

We are committed to your privacy, and we have adopted data protection and privacy principles through our Internal Data Privacy Policy and are binding on all Traveloka entities throughout the jurisdictions where we operate. We may share your personal data within our group to ensure that we are able to comply with our legal obligations such as:

• For hosting, technical and customer support, analytical or product improvement purposes and overall maintenance of our platform.
• We may use centralized storage systems to process data at a central point within Traveloka group. These centralized storage systems are operated by Traveloka or third parties and might be located outside your local jurisdiction. In any case, we will ensure that adequate measures are in place to safeguard your personal data.
• We may use centralized storage systems to process data at a central point within Traveloka group. These centralized storage systems are operated by Traveloka or third parties and might be located outside your local jurisdiction. In any case, we will ensure that adequate measures are in place to safeguard your personal data.

With third parties

We may also share your Personal Data with the following third parties:

• Government and supervisory authorities to comply with any regulatory reporting obligations and data requests as required by any (local) regulatory authorities including tax and judicial/investigative authorities such as the police, public prosecutors, courts and arbitration/mediation bodies. Unless data on an individual level is specifically requested by a regulator, we will make sure that personal data is aggregated, meaning that only information about groups of customers (or employees, as applicable) will be shared with the authorities to ensure that it can no longer be linked back to you.
• The Travel Supplier you have booked such as hotels, airlines and other transport services and attractions or activities providers to facilitate your bookings. We encourage you to read their own privacy notices to understand how they process your personal data.
• Business partners, channel managers, intermediaries or other connectivity providers that distribute our services, including to connect and administer your booking with the Travel Supplier. 
• Service providers and other third parties that support us in carrying out certain activities in the ordinary course of business such as cloud infrastructure, customer support and communications, fraud detection and prevention, insurance claims, and financial institutions who assist you in certain payment processes or who provide us with financial services.
• Other professional third parties such as law firms or auditors. Your personal data is shared to the extent necessary, and these third parties will process your data in line with their own professional obligations.
• Marketing and advertising partners to ensure that relevant advertisements are shown to the right audience.

Singapore

Registration Identity Card ("NRIC") or other national identification numbers for Site or Apps related purposes, to the extent permissible by law. However, please note that we may collect, use, and disclose your NRIC number or Foreign Identification Number (FIN) in accordance with applicable law to fulfill our obligations and to prevent, detect, and investigate fraudulent activity within our platform.

Korea

To enhance the efficiency and speed of our services to local residents, we have entered into personal information processing agreements with our outsourced processors. Accordingly, during the provision of services, these outsourced processors may have access to your personal information.

With your personal information safety prioritization, we have established outsourcing agreements with our processors that cover the following obligations: (a) compliance with applicable personal information protection laws and regulations; (b) prohibition on the use of personal information for purposes other than those for which it was provided; and (c) prompt destruction of personal information upon completion of processing, along with other compliance obligations.