Tillæg om beskyttelse af personlige oplysninger for brugere i Kina

1. Application

This Privacy Supplement for China users (the “Supplement”) applies to you in addition to the Airbnb Privacy Policy, if you reside in the People’s Republic of China, which for the purpose of this Supplement does not include the Hong Kong Special Administrative Region, Macau Special Administrative Region, and Taiwan (“China”). Please read this Supplement carefully. If you have any questions or wish to contact our data protection officer, you may contact us at cnprivacy@airbnb.com.

This Supplement contains important information including (i) the controller(s) of your personal information; (ii) additional information about the personal information we process if you reside in China, in particular, your sensitive personal information; (iii) legal bases for processing your personal information; (iv) specific disclosure about the integration of third-party services (e.g., third-party SDKs); (v) how we store and protect your personal information; and (vi) your rights.

2. Identification of the Controller

2.1 Controller

Where this Supplement mentions “Airbnb,” “we,” “us,” or “our,” it refers to the Airbnb company that is responsible for your information (the “Controller”) as set out below.

2.2 Change Your Country of Residence

If you change your country of residence, the Controller and/or Payments Controller will be determined by your new country of residence, from the date on which your country of residence changes. To this end, the Controller and/or Payments Controller that originally collected your personal information will need to transfer such personal information to the new applicable Controller and/or Payments Controller. The new Controller and/or Payment Controller will continue to process your personal information as described in the Airbnb Privacy Policy and other supplemental privacy pages when applicable.

2.3 Contact Us

To contact the Controller, the Payments Controller, or the Data Protection Officer for Airbnb, click here.

3. Sensitive Personal Information

Airbnb may access and process sensitive personal information about you in accordance with applicable laws and will obtain explicit and informed consent prior to such access and processing where required. For instance,

• where appropriate, we may ask you for an image of your government-issued ID (as permitted by applicable laws) or other verification information, and/or a selfie when we verify your ID. If a copy of your ID is provided to us, we will obtain information (such as your ID number) from the copy of your ID. See our Help Center article on Verifying your identity;
• if you use payments-related services, we also process payment information such as payment account, bank account and payment transaction information. If you are not an Airbnb user, we may receive payment information relating to you, such as when an Airbnb user provides your payment card to complete a booking. See our Help Center article on Paying and getting paid on behalf of someone else;
• we may also process your biometric information, such as facial recognition data derived from photos and identification documents you submit for verification, where offered and with your consent where required by applicable laws;
• we may also process booking and check-in/out information (including listing address, dates and times), and such information of any co-travelers that you provided, communications with other Members or our customer support. Such information is necessary for us to provide you with the Airbnb Platform and services you requested. If you choose not to give this information or do not agree to Airbnb processing this information, we may not be able to provide you with the services requested;
• to the extent permitted by applicable laws and with your consent where required, we may obtain, for example, background check results, reports of criminal records, sex offender registrations, and other information about you and/or your background from background information providers. We may use your information, including your full name and date of birth, to obtain such reports;
• we may also collect your geolocation information depending on your device settings, and your health information if you choose to provide us or if required by applicable laws, e.g., to respond to public health emergencies.

Unless required or allowed by applicable laws, or needed to provide the Airbnb Platform and services, you have the discretion to choose whether to provide us sensitive personal information about you.

4. Legal Bases for Processing of Personal Information

We collect and use your personal information where we have obtained your consent. You may choose to grant us device permissions that may allow us to collect your personal information to provide our services or improve your experiences on Airbnb Platform. You may turn off these permissions by changing the privacy setting on your devices. See the list of device permissions we may request.

In some circumstances, we may also process your personal information without your consent where, to the extent required and/or permitted by applicable laws:

• Where the information is necessary for the establishment or implementation of the contract with you, for instance, to provide you with the services requested as illustrated under our Terms of Services, to enable the delivery of the Airbnb Platform to you and/or to secure a safe transaction and community environment, or otherwise necessary to enforce the Terms and relevant policies of the Airbnb Platform (e.g., Nondiscrimination Policy);
• Where the information may be needed to (i) comply with our legal obligations; (ii) safeguard public security, national security, public sanitation, and/or public interest; (iii) facilitate criminal investigations, prosecutions, court trials, enforcement of rulings, etc.; (iv) protect life, health and property of Members or other individuals in urgent situations; or
• Where the personal information is (i) voluntarily published by you to the general public; (ii) has been lawfully and publicly disclosed, such as legal news reports and information published by the government; and (iii) are necessary for ensuring the safe and stable operation of our products or services, such as identifying and disposing of defects in our products or services.

5. Processing of Payment Information

5.1 Information Necessary For Use of Payment Services

The Payments Controller needs to collect the following information necessary for the performance of the contract with you and to comply with applicable law (such as anti-money laundering regulations). Without it, you will not be able to use Payment Services.

5.1.1 Payment Information. When you use the Payment Services, the Payments Controller requires certain financial information (such as your bank account or credit card information) in order to process payments and comply with applicable law.

5.1.2 Identity Verification and Other Information. The Payments Controller may require identity verification information (such as images of your government issued ID document(s), passport, national ID card, tax ID, or driving license) or other authentication information (such as your date of birth, address, email address, or phone number) and other information in order to verify your identity, provide Payment Services to you, and comply with applicable law.

5.2 How the Payments Controller Uses Personal Information Collected

We may use personal information as a part of Payment Services to:

• enable or authorize third parties to use the Payment Services,
• detect and prevent money laundering, fraud, abuse, and security incidents,
• conduct security investigations and risk assessments,
• comply with legal obligations (such as anti-money laundering regulations),
• enforce the Payment Terms and other payment policies,
• with your consent, send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences,
• provide and improve the Payment Services.

5.3 Legal Bases for Processing of Payments Information

The Payments Controller processes this personal information given its legitimate interest in improving the Payment Services and its users’ experience with it, and where it is necessary for the adequate performance of the contract with you and to comply with applicable laws.

Processing Based on a Legitimate Interest. If Airbnb Payments UK Ltd. is the Payments Controller for processing performed by Airbnb based on a legitimate interest, you can request that Airbnb does not process your personal information by providing reasons specific to your circumstances. If you object to such processing, Airbnb will review your objection and will no longer process your personal information for these purposes unless we have compelling legitimate grounds for such processing, or otherwise where such processing is required for the establishment, exercise, or defence of legal claims. We will let you know the outcome of our review. You may exercise your rights to object to such processing by sending us an email to cnprivacy@airbnb.com.

6. Specific disclosure about Integration of Third-party Services

Parts of the Airbnb Services may link to third-party services, not owned or controlled by Airbnb, including the third-party Software Development Kit (“SDK”) or Application Programming Interface (“API”). Some of them may require certain of your personal information to provide their services such as your location (such as Amap, see here for Amap’s terms of service and privacy policy) or device information (such as IMEI and Android ID). Use of their services are subject to their terms of service and their respective privacy policy. We may perform technical inspection, testing and behavioral audits on such third-parties from time to time and require that they commit to compliance with applicable laws, regulations and agreements with us.

Here is a list of SDKs and third-party services we link to.

7. How We Store Your Personal Information

We retain your personal information only for as long as necessary to fulfill the purposes of processing, unless a longer retention period is required by applicable laws. Your personal information will be deleted or anonymized after the retention period. Subject to applicable laws, the retention period will depend on following criteria, whichever is the longest:

• to provide the products or services that you agree to use;
• to ensure the safety and quality of our products and services;
• a longer retention period that you agree to; or
• other special agreements relating to the retention period.

8. How We Protect Your Personal Information

We use a variety of security technologies and procedures, such as firewall, encryption, de-identification, and access control, to prevent loss, misuse, unauthorized access or disclosure of personal information. We also implement administrative measures such as designating dedicated departments or persons to protect the security of your personal information, classifying personal information, conducting privacy impact assessment, and organizing training to our personnel, to protect personal information.

9. Protection of Personal Information About Minors

Account registration on Airbnb Platform is only permitted for natural persons who are 18 years or older. Please notify us immediately if you are aware of persons under 18 using the platform. If we find that personal information of minors has been provided, we will endeavor to delete the relevant personal information or, in case needed as required by applicable laws, seek parental consent as soon as possible.

10. Your Rights

You have rights as set forth in the Privacy Policy, and the following subject to applicable laws:

Account Deletion. You may delete your Airbnb account directly from our mobile application. After logging into your Airbnb account, you may go to the profile page, click “Privacy and sharing” and “delete your account” to delete your account. Upon account deletion, we will also delete your personal information unless otherwise required by applicable law to retain such data. Click here to learn more about specific requirements and processes for account deletion.

Withdraw Your Consent: If we are processing your personal information based on your consent, you can withdraw your consent at any time by changing your account settings or by sending a communication to Airbnb specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Specifically, to the extent required by applicable laws and regulations, you may withdraw your consent to the collection and processing of your personal information by the following methods:

• Delete the personal information you provided to Airbnb by updating or managing your account settings;
• Go to the Airbnb website, and click on the Profile icon, then click “Account”, and “Notifications” to unsubscribe from receiving marketing emails, messages, reminders or other notifications;
• Go to the “Privacy” or “Settings” on your device to turn off the permissions granted to us;
• Go to "Me", “Legal” on the Airbnb mobile application to opt out of personalized search.

Restriction of Processing. You have the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information, (ii) the processing is unlawful and you oppose the erasure of your personal information, (iii) we no longer need your personal information for the purposes of the processing, but you require the personal information for the establishment, exercise, or defence of legal claims, or (iv) you have objected to the processing and pending the verification whether the legitimate grounds of Airbnb override your own.

Objection to Processing. You have the right to object to the processing of your personal information based on grounds specific to your situation if such processing is for direct marketing or is for a purpose based on a legitimate interest or public interest. If you object to processing based on legitimate or public interests, we will no longer process your personal information for these purposes unless we have compelling legitimate grounds for such processing or where the processing is otherwise required for the establishment, exercise, or defence of legal claims.

Where your personal information is processed for direct marketing purposes, you may, at any time, ask Airbnb to cease processing your data for these direct marketing purposes by sending an email to opt-out@airbnb.com.

Lodging Complaints. You have the right to lodge complaints about our data processing activities by filing a complaint with our Data Protection Officer who can be reached by the “Identification of the Controller” section above or with your local supervisory authority.

Right to Receive Explanation. You may request that we explain the rules on our personal information processing activities.

11. International Transfers

To deliver Airbnb platform services and facilitate our global operations, Airbnb and Airbnb Payments may transfer, store, and process your information within our family of companies, partners, and service providers based in Europe, Asia Pacific and North and South America. Laws in these countries may differ from the laws applicable to your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in these other countries may be entitled to access your personal information. We will take measures pursuant to applicable data protection law, such as standard contractual clauses within Airbnb or with the relevant third party to protect this personal data.

Check our historical versions of Privacy Policy here.