Bên ngoài Hoa Kỳ

1. APPLICATION

This subpage (“Subpage”) applies if you reside outside the United States and supplements our Privacy Policy. It contains important information we are required by the General Data Protection Regulation (“GDPR”) to disclose, including (i) the controller(s) of your personal information, (ii) legal bases, (iii) your legal rights, (iv) safeguards we rely on for transferring your personal information outside the EEA, and (v) the contact details of the controller and Data Protection Officer. 

If Airbnb Ireland or Airbnb Global Services Limited is the Controller or Airbnb Payments Luxembourg SA or Airbnb Payments UK is the Payments Controller for processing performed by Airbnb based on a legitimate interest, you can request that Airbnb does not process your personal information by providing reasons specific to your circumstances. If you object to such processing, Airbnb will review your objection and will no longer process your personal information for these purposes unless we have compelling legitimate grounds for such processing, or otherwise where such processing is required for the establishment, exercise, or defence of legal claims. We will let you know the outcome of our review. You may exercise your rights to object to such processing by sending us an email.

This Subpage also contains important information about:

• the Payments Controller (defined below) and the information processed in connection with the Payments Services; and
• the Travel Insurance Controller (defined below) and the information processed in connection with the travel insurance program (Travel Insurance).

Please read this Subpage carefully. If you have any questions, you can contact us at the details below.

2. WHO CONTROLS MY PERSONAL INFORMATION

2.1 Controller

Where this Subpage mentions “Airbnb,” “we,” “us,” or “our,” it refers to the Airbnb company that is responsible for your information under this Privacy Policy (the “Controller”). The designated Controller is set out in Schedule 1.

2.2 Payments Controller

The Privacy Policy also applies to the Payment Services provided to you by Airbnb Payments pursuant to the Payments Terms of Service (“Payments Terms”).

When using the Payment Services, you will also be providing your personal information to one or more Airbnb Payments entities (the "Payments Controller" as outlined in Schedule 1), which will be responsible for your information related to the Payment Services, generally depending on your country of residence.

2.3 Travel Insurance Controller

This Subpage also applies to Travel Insurance distributed to you by the relevant insurance distributor ("Travel Insurance Controller" as outlined in Schedule 1) pursuant to the Travel Insurance and the Terms of Business ("Travel Insurance Terms") that apply to your Travel Insurance offer.

When you purchaseTravel Insurance, your personal information will be provided to travel insurance partners ("Travel Insurance Partner" as outlined in Schedule 1) who will be independently responsible for your personal information related to your Travel Insurance.

2.4 Changing Your Country of Residence

If you change your country of residence, the Controller and/or Payments Controller and/or the Travel Insurance Controller will be determined by your new country of residence as specified above, from the date on which your country of residence changes. To this end the Controller and/or Payments Controller and/or Travel Insurance Controller that originally collected your personal information will need to transfer such personal information to the new applicable Controller and/or Payments Controller and/or Travel Insurance Controller. The new Controller and/or Payment Controller and/or Travel Insurance Controller will continue to process your personal information as described in the Privacy Policy and Subpage when applicable.

2.5 Contact Us

To contact the Controller, the Payments Controller, the Travel Insurance Controller, or the Data Protection Officer (DPO) for Airbnb, click here.

3. PROCESSING OF PAYMENTS INFORMATION

3.1 Information Necessary For Use of Payment Services

The Payments Controller needs to collect the following information necessary for the performance of the contract with you and to comply with applicable law (such as anti-money laundering regulations). Without it, you will not be able to use Payment Services.

• Payment Information. When you use the Payment Services, the Payments Controller requires certain financial information (such as your bank account or credit card information) in order to process payments and comply with applicable law.
• Identity Verification and Other Information. The Payments Controller may require identity verification information (such as images of your government issued ID document(s), passport, national ID card, tax ID, or driving license) or other authentication information (such as your date of birth, address, email address, or phone number) and other information in order to verify your identity, provide Payment Services to you, and comply with applicable law.

3.2 How the Payments Controller Uses Personal Information Collected

We may use personal information as a part of Payment Services to:

• Enable or authorise third parties to use the Payment Services,
• Detect and prevent money laundering, fraud, abuse, and security incidents,
• Conduct security investigations and risk assessments,
• Comply with legal obligations (such as anti-money laundering regulations),
• Enforce the Payment Terms and other payment policies,
• With your consent, send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences
• Provide and improve the Payment Services.

4. PROCESSING OF TRAVEL INSURANCE INFORMATION

4.1 Information Necessary For Travel Insurance

The Travel Insurance Controller needs to collect the following information for the following purposes. Without it, you will not be able to purchase Travel Insurance.

• Pre-contract information. At the time you express an interest in purchasing Travel Insurance, the Travel Insurance Controller requires certain pre-contract information (such as your name, accommodation address, residential address, date of birth, age, e-mail address, contact number, trip start / end date, trip cost, transaction currency, booking number) in order to offer Travel Insurance to you.
• Post-contract information. When you purchase Travel Insurance, the Travel Insurance Controller will process information about your Travel Insurance (such as your unique policy number, booking number, status of policy claims, amendments, refunds or cancellations (if any)) in order to perform the Travel Insurance Terms, comply with obligations under applicable law and regulatory guidance.

4.2 How the Travel Insurance Controller Uses Personal Information Collected

We will use and share your personal information as a part of Travel Insurance to:

• Assess your eligibility to purchase Travel Insurance (based on the details of your trip),
• Facilitate the Travel Insurance Partner to underwrite and administer your Travel Insurance (such as policy claims and benefits),
• Perform and manage our contract with the Travel Insurance Partner,
• Perform and enforce the Travel Insurance Terms, including any other Travel Insurance policies,
• Comply with legal obligations (such as anti-money laundering and consumer contracts obligations), and
• Comply with regulatory guidance (as issued by the relevant insurance supervisory authority).

5. LEGAL BASES FOR PROCESSING PERSONAL INFORMATION

We process personal information for the purposes described in the Privacy Policy in line with the lawful bases set out below. For more information on the processing activities, please refer to the relevant section of the Privacy Policy.

5.1 Processing of Payments Information (Section 3, this Subpage)

5.2 Processing of Travel Insurance Information (Section 4, this Subpage and Section 4.10 of the Privacy Policy)

5.3 How We Use Information We Collect (Section 3 of the Privacy Policy)

5.4 Complying with Law, Responding to Legal Requests, Preventing Harm, and Protecting our Rights (Section 4.5 of the Privacy Policy)

As further set out in our Privacy Policy, we are obliged to comply with certain tax laws. In the European Union, the following tax legislation is relevant in the context of the data processing carried out by Airbnb:

6. YOUR RIGHTS

You benefit from rights pursuant to applicable law. While some of these rights apply generally, certain rights apply only in certain limited cases. We may ask you to verify your identity and request before taking further action on your request. See here for information on data subject rights requests and how to submit a request.

6.1 Data Access and Portability

You have the right to request certain copies of your personal information held by us. In certain instances, you also have the right to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).

6.2 Rectification

You have the right to ask us to correct inaccurate or incomplete personal information about you (and which you cannot update yourself within your Airbnb account).

6.3 Erasure

We generally retain your personal information for as long as is necessary for the performance of the contract between you and us, to comply with our legal obligations, and as permitted by applicable law.

You have the right to ask us to delete your personal information, subject to certain limitations and restrictions. Please note that if you request the erasure of your personal information:

• We may retain personal information as necessary for our legitimate business interests, such as prevention of money laundering, fraud detection and prevention, and enhancing safety. For example, if we suspend an Airbnb account for fraud or safety reasons, we may retain information from that Airbnb account to prevent that Member from opening a new Airbnb account in the future.
• We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, Airbnb and Airbnb Payments may keep your information for tax, legal reporting and auditing obligations.
• Information you have shared with others (e.g., Reviews, forum postings) may continue to be publicly visible on Airbnb, even after your Airbnb account is cancelled. 
• Because we maintain Airbnb to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

6.4 Withdrawing Consent

If we are processing your personal information based on your consent you can withdraw your consent at any time by changing your account settings or by sending a communication to Airbnb specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.

6.5 Restriction of Processing

You have the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information, (ii) the processing is unlawful and you oppose the erasure of your personal information, (iii) we no longer need your personal information for the purposes of the processing, but you require the personal information for the establishment, exercise, or defence of legal claims, or (iv) you have objected to the processing pursuant to Section 5.6 (below) and pending the verification whether the legitimate grounds of Airbnb override your own.

6.6 Objection to Processing

You have the right to object to the processing of your personal information based on grounds specific to your situation if such processing is for direct marketing or is for a purpose based on a legitimate interest or public interest. If you object to processing based on legitimate or public interests, we will no longer process your personal information for these purposes unless we have compelling legitimate grounds for such processing or where the processing is otherwise required for the establishment, exercise, or defence of legal claims.

Where your personal information is processed for direct marketing purposes, you may, at any time, ask Airbnb to cease processing your data for these direct marketing purposes by sending an e-mail to opt-out@airbnb.com.

6.7 Lodging Complaints

You have the right to lodge complaints about our data processing activities by filing a complaint with our Data Protection Officer who can be reached by the “Contact Us” section above or with your local supervisory authority or our lead supervisory authority, the Irish Data Protection Commission.

7. RETENTION

We retain personal information for as long as needed or as permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:

• the length of time we have an ongoing relationship with you, whether you are a Guest or a Host, and provide Airbnb to you (for example, for as long as you have an account with us or keep using Airbnb),
• whether there is a legal obligation to which we are subject (for example, certain laws, such as anti-money laundering requirements) require us to keep records of your transactions for a certain period of time before we can delete them); and/or
• whether retention is advisable in light of our legal position or to protect the safety of individuals (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

8. OPERATING GLOBALLY AND INTERNATIONAL TRANSFERS

To facilitate our global operations, Airbnb and Airbnb Payments may transfer, store, and process your information within our family of companies, partners, and service providers based in Europe, Asia Pacific and North and South America. Laws in these countries may differ from the laws applicable to your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in these other countries may be entitled to access your personal information.

Some of these countries are subject to a European Commission adequacy decision, such as Japan, New Zealand, Switzerland, the United Kingdom, Canada, and Israel. For other countries, measures have been taken pursuant to applicable data protection law, such as standard contractual clauses within Airbnb or with the relevant third party to protect this personal data.

8.1 Other Means to Ensure an Adequate Level of Data Protection

If Airbnb Ireland is the Controller and your information is shared with corporate affiliates or third party service providers outside the EEA, we have (prior to sharing your information with such corporate affiliates or third party service providers) established the necessary means to ensure an adequate level of data protection. This may be an adequacy decision of the European Commission confirming an adequate level of data protection in the respective non-EEA country or an agreement on the basis of the EU Model Clauses (a set of clauses issued by the European Commission). We will provide further information on the means to ensure an adequate level of data protection, such as a copy of the EU Model Clauses, on request.

Schedule 1:

* Airbnb Payments UK is responsible for all Payments Services before January 9, 2019.

** Airbnb Payments UK is responsible for all Payments Services before April 20, 2020. From April 20, 2020 until April 1, 2022, Airbnb Pagamentos Brasil Ltda is responsible for all Payments Services except in connection with: (i) booking a Host Service located outside of Brazil where the Host resides outside of Brazil and paying in foreign currency, or (ii) offering any Host Service, located outside Brazil, where the Guest booking the service resides outside of Brazil and pays in foreign currency. For those activities, Airbnb Payments UK will remain responsible until April 1, 2022. After April 1, 2022, Airbnb Plataforma Digital Ltda will be responsible for all activities done by a Guest or Host residing in Brazil.

***Except for Switzerland, Airbnb Payments UK is responsible for Payments Services before May 10, 2020.

****In the European Economic Area (EEA), Travel Insurance is offered by Aon Iberia Correduria de Seguros y Reaseguros, S.A.U (“Aon Spain”). Aon Spain is assisted by Airbnb Marketing Services S.L.U., a company based at 2-4 Carrer de Casanova, Plant 9, Barcelona, C.P. 08011, Spain, which acts as an “external collaborator” within the meaning of art. 137 of the Spanish Insurance Distribution Act. The external collaborator is not involved in distribution activities to customers, but: (1) assists Aon to understand the needs of potential Airbnb Guests who could purchase the Travel Insurance and their abstract risks; and (2) assists Aon in relation to the arrangement of the Travel Insurance program for Airbnb Guests. In the UK, Travel Insurance is offered by Airbnb UK Services Limited (“Airbnb UK”) as an appointed representative of Aon UK Limited (“Aon UK”). Europ Assistance S.A., Irish Branch, whose principal establishment is located at Central Quay, Ground Floor, Block B, Riverside IV, Sir John Rogerson's Quay, Dublin 2, Ireland, is the underwriter of your Travel Insurance. Aon Spain, Aon UK, and Europ Assistance S.A. are Travel Insurance Partners. The Travel Insurance Controllers and the Travel Insurance Partners are independent controllers of your personal information and each process your personal information for separate purposes. See the Travel Insurance Terms for more details, including information about the Travel Insurance Partner's own privacy policy.

(-) For purposes of our Privacy Policy, China refers to the People's Republic of China and does not include Hong Kong, Macau, and Taiwan.

(+) If you book or offer a hotel or traditional accommodation and Airbnb Travel, LLC is identified as the contracting entity, Airbnb Ireland UC and Airbnb Travel, LLC act as joint controllers. If you book a long term stay accommodation in the U.S. and Airbnb Stays, Inc. is the contracting entity, Airbnb Ireland UC and Airbnb Stays Inc. act as joint controllers. Contact Airbnb Travel, LLC and Airbnb Stays, Inc. at 888 Brannan St., San Francisco, CA 94103, United States. If you use Airbnb to book or host a charitable stay related to Airbnb.org’s programs, or to make a donation to Airbnb.org, then Airbnb Ireland/Airbnb Global Services Limited and Airbnb.org are joint controllers for the purpose of those transactions.