For a list of supplements to the Privacy Policy, click here.
This subpage ("Subpage") applies if you reside outside the United States, Brazil, or China and supplements our Privacy Policy. If you reside in Brazil, visit our “Brazil Supplement” page instead for important supplemental information that may apply to you. If you reside in the People’s Republic of China, which for purposes of this Subpage does not include Hong Kong, Macau, and Taiwan ("China"), visit our "Privacy Supplement for China Users" page instead for important information that may apply to you.
Please read this Subpage carefully. If you have any questions, you can contact us by sending an email to DPO@Airbnb.com. It contains important information we are required by the General Data Protection Regulation ("GDPR") and, in some cases other laws, to disclose, including (i) legal bases, (ii) your legal rights, (iii) safeguards we rely on for transferring your personal information outside the European Economic Area ("EEA"), and (v) the contact details of the Data Protection Officer.
In addition to the information we collect about you as described in the Privacy Policy, we may collect the following information necessary to comply with the EU Digital Services Act:
If you are acting for purposes relating to your trade, business, craft or profession and are offering your services to consumers located in the European Union, Airbnb may collect the following additional information to enable you to conduct business on the Airbnb Platform. Without it, you will not be able to use the Airbnb Platform.
Where you are registered in a trade register or similar public register, the trade register in which you are registered and your registration number, or equivalent means of identification in that register;
A self-declaration in which you commit to only offer services that comply with the applicable rules of EU law.
Information you choose to provide us may also include other information, such as when you notify us about content or any other information you consider to be illegal or criminal, lodge a complaint in relation to a decision that content is illegal or incompatible with our Terms and other policies.
To the extent permitted by applicable law, we may receive information about you, such as information to help detect illegal content or content incompatible with our Terms and other policies from (i) third-party service providers and/or partners, or (ii) Members and any other individuals, entities, authorities, and/or other third parties alleging the information in question to be illegal content or content incompatible with our Terms and other policies and combine it with information we have about you.
We will use and share your personal information for the purposes described in the Privacy Policy and in line with the legal bases set out in the following section of this Subpage.
We process personal information for the purposes described in the Privacy Policy in line with the lawful bases set out below. Where a country does not require us to specify our lawful bases for processing personal information, the lawful bases under the laws of that country may differ from those specified here, even where the purposes for processing are similar. For more information on the processing activities, please refer to the relevant section of the Privacy Policy.
If a.) Airbnb Ireland or Airbnb Global Services Limited is the Controller, or b.) Airbnb Payments Luxembourg SA or Airbnb Payments UK Limited is the Payments Controller, or c.) Airbnb Ireland Insurance Services Limited is the Insurance Controller for processing performed by Airbnb based on a legitimate interest, you can request that Airbnb does not process your personal information by providing reasons specific to your circumstances. If you object to such processing, Airbnb will review your objection and will no longer process your personal information for these purposes unless we have compelling legitimate grounds for such processing, or otherwise where such processing is required for the establishment, exercise, or defence of legal claims. We will let you know the outcome of our review. You may exercise your rights to object to such processing by sending us an email at DPO@Airbnb.com.
We process this personal information to provide the Airbnb Platform, and where it is necessary for the adequate performance of the contract with you. | For these purposes, we use the information described in the following sections of the Privacy Policy: | |
We process this personal information for these purposes given our legitimate interest in improving and developing the Airbnb Platform, and our users’ experience with it, and where it is necessary for the adequate performance of the contract with you. | For these purposes, we use the information described in the following sections of the Privacy Policy: | |
We process this personal information for these purposes given our legitimate interest in providing you with a more personalized experience based on your interactions on the Airbnb Platform, your search and booking history, your profile information and preferences, and other content you submit. | For these purposes, we use the information described in the following sections of the Privacy Policy: | |
We process this personal information for these purposes given our legitimate interest in protecting Airbnb and our users, to verify your identity for safety and security purposes, for further safety and security purposes, running sanctions checks, preventing fraud and conducting background checks (where permitted under applicable law), to measure the adequate performance of our contract with you, to detect, prevent, identify and remove, or disable access to illegal content or content incompatible with our Terms and other policies, to develop and improve our products and security practices, to comply with applicable legal obligations, for the protection of your or another person's vital interests, and for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health. | For these purposes, we use the information described in the following sections of the Privacy Policy and this Subpage:
| |
Provide, Personalize, Measure, and Improve our Advertising and Marketing. | We will process this personal information with your consent or based on our legitimate interest in undertaking marketing activities to offer you products or services that may be of interest to you. | For these purposes, we use the information described in the following sections of the Privacy Policy: |
These activities are carried out based on Airbnb's legitimate interest in providing, improving and developing, personalizing and customizing, and safeguarding the Airbnb Platform and where necessary to ensure compliance with applicable laws and our Terms. | For these purposes, we use the information described in the following sections of the Privacy Policy: | |
The Payments Controller processes this personal information given its legitimate interest in improving the Payment Services and its users’ experience with it, and where it is necessary for the adequate performance of the contract with you and to comply with applicable laws. | For these purposes, we use the information described in the following sections of the Privacy Policy: | |
The Insurance Controller processes this personal information as it is necessary for the adequate performance of the contract with you, to comply with obligations under regulatory guidance in line with its legitimate interests in adhering to regulatory guidance and protecting itself from enforcement, and, to comply with applicable laws. | For these purposes, we use the information described in the following sections of the Privacy Policy: |
Comply with Law, Respond to Legal Requests, Prevent Harm and Protect our Rights. | These disclosures may be necessary to comply with our legal obligations, for the protection of a person's vital interests, for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health, for reasons of substantial public interest, where necessary and proportionate for or in connection with current or prospective legal claims or legal proceedings against Airbnb or a third party, or for the purposes of Airbnb’s or a third party’s legitimate interest in keeping Airbnb secure, preventing a breach of the law, harm or crime, enforcing or defending legal rights, claims, or obligations, facilitating the collection of taxes and prevention of tax fraud or preventing loss or damage. | For these purposes, we use the information described in the following sections of the Privacy Policy: |
We process personal information from linked third-party accounts, third-party partners, and integrations to the extent necessary to ensure the adequate performance of our contract with you, or to ensure that we comply with applicable laws, or with your consent. | For these purposes, we use the information described in the following sections of the Privacy Policy: |
As further set out in our Non-User DAC7 Privacy Notice, we are obliged to comply with certain tax laws. In the European Union, the following tax legislation is relevant in the context of the data processing carried out by Airbnb:
APPLICABLE LEGAL OBLIGATION | DATA CATEGORIES DISCLOSED | THIRD-PARTY RECIPIENT |
DAC7 – European Council Directive 2021/514 (link). See here for further information about DAC7. |
If you provide us with certain information (such as name and bank account details) relating to non-users who reside in the EU, or who receive income from properties/experiences located in the EU, we will be obliged to share this information with the Irish Revenue Commissioners. For further information, please see here. | The Irish Revenue Commissioners. The Irish Revenue will share information relating to you with the relevant local tax authority/ies in the EU. |
You benefit from rights pursuant to applicable law. While some of these rights apply generally, certain rights apply only in certain limited cases, which may vary by country. We may ask you to verify your identity and request before taking further action on your request. See here for information on data subject rights requests and how to submit a request.
You may request certain copies of your personal information held by us. In certain instances, you also have the right to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).
You may ask us to correct inaccurate or incomplete personal information about you (and which you cannot update yourself within your Airbnb account).
We generally retain your personal information for as long as is necessary for the performance of the contract between you and us, to comply with our legal obligations, and as permitted by applicable law. You may ask us to delete your personal information, subject to certain limitations and restrictions. Please note that if you request the erasure of your personal information:
We may retain personal information as necessary for our legitimate business interests, such as prevention of money laundering, fraud detection and prevention, and enhancing safety. For example, if we suspend an Airbnb account for fraud or safety reasons, we may retain information from that Airbnb account to prevent that Member from opening a new Airbnb account in the future.
We may retain and use your personal information to the extent necessary to comply with our legal, tax, reporting, and auditing obligations.
Information you have shared with others, such as Reviews and forum postings, may continue to be publicly visible on Airbnb, even after your Airbnb account is cancelled.
Because we maintain Airbnb to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.
If we are processing your personal information based on your consent you can withdraw your consent at any time by changing your account settings or by sending a communication to Airbnb specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
You may ask us to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information, (ii) the processing is unlawful and you oppose the erasure of your personal information, (iii) we no longer need your personal information for the purposes of the processing, but you require the personal information for the establishment, exercise, or defence of legal claims, or (iv) you have objected to the processing pursuant to Section 4.6 (below) and pending the verification whether the legitimate grounds of Airbnb override your own.
You may contact us to tell us that you object to the processing of your personal information based on grounds specific to your situation if such processing is for direct marketing or is for a purpose based on a legitimate interest or public interest. If you object to processing based on legitimate or public interests, we will no longer process your personal information for these purposes unless we have compelling legitimate grounds for such processing or where the processing is otherwise lawful or required for the establishment, exercise, or defence of legal claims. To submit an objection, including objections related to the processing of your personal information for direct marketing purposes, you may send us an email at DPO@Airbnb.com.
You have the right to lodge complaints about our data processing activities by filing a complaint with our Data Protection Officer, who can be reached by emailing DPO@Airbnb.com, or with your local supervisory authority or, where applicable, our lead EU supervisory authority, the Irish Data Protection Commission.
To facilitate our global operations, Airbnb and Airbnb Payments may transfer, store, and process your information within our family of companies, partners, and service providers based in Europe, Asia Pacific, and North and South America, including Brazil, Ireland, and the United States. Laws in these countries may differ from the laws applicable to your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in these other countries may be entitled to access your personal information. Some of these countries are subject to a European Commission adequacy decision, such as Japan, New Zealand, Switzerland, the United Kingdom, Canada, and Israel. For other countries, measures have been taken pursuant to applicable data protection law, such as standard contractual clauses within Airbnb or with the relevant third party to protect this personal data.
If Airbnb Ireland is the Controller and your information is shared with corporate affiliates or third-party service providers outside the EEA, we have, prior to sharing your information with such corporate affiliates or third-party service providers, established the necessary means to ensure an adequate level of data protection. This may be an adequacy decision of the European Commission confirming an adequate level of data protection in the respective non-EEA country or an agreement on the basis of the EU Model Clauses (a set of clauses issued by the European Commission). We will provide further information on the means to ensure an adequate level of data protection, such as a copy of the EU Model Clauses, upon request.