WHY WE COLLECT YOUR DATA (LEGAL BASIS)
Please note that in some jurisdictions you must agree to the collection of your Personal Data in order for Marriott to provide its services.
| PURPOSE | DESCRIPTION OF ACTIVITIES ASSOCIATED WITH PURPOSE | LEGAL BASES |
|---|---|---|
| Booking & Guest Registration | There are a number of activities associated with this purpose, such as: facilitating reservations and bookings of hotel accommodations and related services; engaging in pre‑arrival communications (logistics, changes, preferences, etc.); and processing payments and security deposits. | Performance of contract for the individual with the guest booking the room Legitimate interests for the individual booking the room, for example, honoring his/her preferences, as well as for any individuals accompanying the primary guest (e.g., spouse, children, friends) Legal obligations relating to financial transactions, such as the obligation to maintain books and records |
| On-Site Reception & Stay Services | There are a number of activities associated with this purpose, such as: facilitating check-in and check-out; processing payments; providing consistent and personalized service and advice about the on-site services (based on past usage or expressed preferences); providing concierge, luggage storage and parking services; making arrangements with third‑party providers on behalf of guests (such as coordinating tours and other sightseeing excursions; arranging taxi, shuttle and chauffeur services; and facilitating reservations and bookings at restaurants and events); administering and facilitating access to Wi-Fi, TV and other connectivity services (including access to business center amenities, such as fax and photocopying services) and entertainment systems (such as PlayStations and music players); facilitating in-room dining (including taking into account any dietary, health restrictions or other personal needs expressed by the guest); housekeeping services (including preferences for special pillows, duvets and other amenities expressed by the guest) and dry-cleaning services; handling customer requests, inquiries and complaints; and determining eligibility for age‑restricted goods and services (such as alcohol or in-room adult entertainment). | Performance of contract, such as processing payments Legitimate interests, such as honoring the guest’s preferences (e.g., for a room near the elevator or on a top floor) Consent, such as collecting information regarding dietary preferences that the guest chooses to provide Legal obligations, such as collecting national ID numbers where legally required |
| Conferences & Events | There are a number of activities associated with this purpose, such as: communicating with customers about conferences and other event planning (“Events”); facilitating reservation and bookings of Events; engaging in pre Event communications (logistics, accommodations, changes, etc.); preparing for and coordinating Events in accordance with customer instructions, expectations and preferences; facilitating catering; communicating about billing and recovering amounts owed; processing payments and security deposits; performing credit checks; handling customer requests, inquiries and complaints; and communicating with participants during Events. | Performance of contract, such as collecting information regarding a planned Event Legitimate interests, such as responding to customer complaints or concerns relating to an Event Legal obligations relating to financial transactions, such as the obligation to maintain books and records |
| Marriott Operations & General Business | There are a number of activities associated with this purpose, such as: administering customer-care services to facilitate and address inquiries, comments and complaints about any of our services (such as in person, through phone lines, email, or on social media); handling security and fraud prevention; administering online services (including troubleshooting, data analysis, testing, system maintenance, support, reporting and the hosting of data); monitoring and analyzing usage of services and using data analytics to improve services, marketing, programs, overall customer experience, gathering feedback, carrying out pilot programs for potential new services and both developing new and improving existing services; and facilitating mergers, acquisitions and other reorganizations and restructurings of our business (including prospective transactions). | Performance of contract, such as ensuring that online services are functioning so that individuals can make reservations or manage loyalty accounts Legitimate interests, such as responding to customer complaints and concerns which may include, where applicable law permits, recording customer service calls Consent, such as for marketing programs Legal obligations relating to financial transactions, such as the obligation to maintain books and records |
| Emergency & Incident Response | There are a number of activities associated with this purpose, such as: ensuring the security of on-site services; responding to, handling and documenting on-site accidents and medical and other emergencies (including facilitating in‑house doctor services); actively monitoring properties to ensure adequate incident prevention, response and documentation (including CCTV); requesting assistance from emergency services; and sending notifications and alerts in the event of incidents or emergencies (such as via SMS, email, call, audio-visual device prompts, etc.). | Performance of contract, such as ensuring the safety of guests and personnel through interactions with on-site security personnel Legitimate interests, such as monitoring properties through CCTV to ensure the safety of guests and personnel Legal obligations, such as documenting on‑site accidents Individuals’ vital interests, such as contacting medical or emergency services for an ill guest |
| Legal & Compliance | There are a number of activities associated with this purpose, such as: complying with applicable laws; complying with legal processes; responding to requests from public and government authorities; meeting national security or law enforcement requirements; enforcing our terms and conditions; protecting our operations; protecting the rights, privacy, safety, or property of the Marriott Group, guests, visitors and other relevant individuals; and allowing us to pursue available legal remedies and limiting the damages that Marriott may sustain. | Legal obligations, such as complying with legal processes Legitimate interests, such as enforcing terms and conditions to protect trademarks Individuals’ vital interests, such as contacting emergency services in case of disturbances and incidents involving guests |
| Spa, Beauty, Golf, & Fitness Services | There are a number of activities associated with this purpose, such as: facilitating reservations and bookings; determining eligibility for services; honoring disability or other health-related restrictions and providing appropriate and safe activities, services and treatments; providing consistent and personalized service based on past usage and preferences expressed by the individual; processing payments; arranging requested professionals for specific treatments and services; and handling customer requests, inquiries and complaints. | Performance of contract, such as processing payments Consent, such as collecting information about back problems when providing massage services Legitimate interests, such as providing personalized services (e.g., offering golfing opportunities based on past activity) Legal obligations relating to financial transactions, such as the obligation to maintain books and records Individuals’ vital interests (e.g., when an individual becomes ill while using the fitness equipment) |
| Food & Beverage Services | There are a number of activities associated with this purpose, such as: facilitating reservations; honoring dietary preferences; providing consistent and personalized service based on past usage and preferences expressed by the individual; processing payments; arranging reservations; and handling customer requests, inquiries, and complaints. | Performance of contract, such as processing payments Consent, such as collecting information about dietary, health restrictions, or personal needs of a guest when ordering food Legitimate interests, such as providing personalized services (e.g., offering red wine to a guest based on previous requests) Legal obligations relating to financial transactions, such as the obligation to maintain books and records Individuals’ vital interests (e.g., when an individual becomes ill in one of the restaurants)
|
| Child-Related Services (for Parents & Legal Guardians) | There are a number of activities associated with this purpose, such as: facilitating babysitting/hotel nanny, kids club and junior golf program services; facilitating reservations and bookings; preparing for and coordinating hotel accommodations and services in accordance with guest preferences, instructions and expectations; payment and billing services; dining services (for example, special menus for children or special discounts for breakfast for children under a certain age). | Performance of contract, such as having a child of a certain age stay in the room with his/her parents may amount to extra charges or discounts Consent of parent or legal guardian, such as accommodating needs of children Legitimate interests, such as providing a crib or child-sized bathrobes and other amenities for children Legal obligations relating to financial transactions, such as the obligation to maintain books and records Individuals’ vital interests, such as when a child becomes ill while participating in kids’ club |
| Loyalty Programs, Accounts, & Relationship Management | There are a number of activities associated with this purpose, such as: registering users in loyalty and other client account programs and payment card programs; determining eligibility for various programs and related services; administering loyalty programs; providing consistent and personalized service based on past usage and the preferences expressed by members; ensuring access to Online Services; processing payments; notifying members about changes to programs, terms and conditions; and handling members’ requests, inquiries and complaints. | Performance of contract, such as assessing points and distributing benefits Consent, such as honoring the mode of communication preferences (e.g., email, SMS) Legitimate interests, such as managing members’ choices regarding how they wish to earn, track, and use points Legal obligations relating to financial transactions such as the obligation to maintain books and records |
| Marketing, Promotions, Contests & Third Party Products | There are a number of activities associated with this purpose, such as: communicating about products and services that may be of interest to guests; providing personalized advertisements for products and services on selected websites; facilitating participation in sweepstakes, contests and other promotions (such as best vacation photo contests on social media); and handling customer requests, inquiries and complaints. | Performance of a contract, such as fulfilling obligations associated with a contest Consent, such as honoring the mode of communication preferences (e.g., email, SMS) Legitimate interests, such as providing advertisements for similar products and services Legal obligations, such as handling information consistent with rules relating to sweepstakes |
MORE INFORMATION ABOUT YOUR PERSONAL PREFERENCES
Our goal is to serve you better and meet your expectations and preferred level of hospitality at each stage, from the moment that you book with us through to when you check out. See below to learn more.
| PERSONAL PREFERENCES | PURPOSES | LEGAL BASES |
|---|---|---|
| Anniversaries | When you stay with us, we want to help you celebrate any special occasion, such as an anniversary, birthday. For example, we may make a note of these dates to allow us to provide you with a birthday or anniversary gift. | Consent, where applicable |
| Activity type and hobbies (such as trips to beach, babysitting, fitness, travel and transportation details, kids club theater, restaurant etc.) | We want to ensure that we provide you with services that enhance your Marriott experience. To do this, we may retain your preferences about the types of activities that you like to take part in, so that we can ensure we are able to offer you similar experiences when you stay with us in the future. | Consent, where applicable |
| Relationships (husband, wife, son, daughter, etc.) | We understand that your Preferences may change depending on who you are traveling with (such as your preferred room type). We may keep a record of your relationships to assist us with making your Marriott stay as comfortable as possible. For example, if we know you are traveling with small children, we can proactively plan for additional accommodations such as a crib or roll-away bed. |
Legitimate interest, in order to provide you with exceptional service Consent, where applicable |
| Preferences for properties, clubs, and facilities | When you are staying with us, we want to make sure that we can provide you with services to enhance your Marriott experience. To do this, we may retain your preferences for our properties, clubs, and facilities, based on your past stay preferences, of our kids’ clubs, nanny services, spa and beauty services, golf, restaurant, and fitness facilities. |
Legitimate interest, in order to provide you with exceptional service Consent, where applicable |
| Dietary preferences | When you stay with us, we want to ensure that you are safe, that we are looking after your wellbeing, and to provide you with services to enhance your Marriott experience. For example, we may make a note of your dining or beverage preferences so that we are prepared if you request room service or dine at one of our cafes or restaurants. |
Legitimate interest, in order to provide you with exceptional service Consent, where applicable |
YOUR DATA, YOUR CHOICES: YOUR PRIVACY PREFERENCES & RIGHTS
At Marriott, we believe that you should have choices with respect to your data. We provide you with the options, information, and choices below to express your preferences: what and how much you share with us and when and how you hear from us.
Communication Preferences
- To change how we or our partners communicate with you, please sign into your loyalty account profile and select Communication Preferences.
- You can also use the unsubscribe link at the bottom of any of our communications.
- If you no longer wish to receive marketing-related emails, you may opt out by visiting our unsubscribe page or by following the instructions in any such email you receive from us.
- In addition, you can opt out from marketing-related emails by sending a letter to: Internet Customer Care – Unsubscribe, 1818 North 90 Street, Omaha, Nebraska 68114-1315 USA or Luxury Reservations Limited - Unsubscribe, 10 Earlsfort Terrace, Dublin D02 T380, Ireland
- NOTE: Even if you choose to opt out of marketing-related emails, we will continue to send you transactional messages, such as information about your reservations or stays, including confirmation and pre-arrival emails, or account security updates.
- If you want to adjust your Stay Preferences, log into your loyalty account, and choose Room Options, Stay Preferences.
Cookies and Other Data
For information on your choices related to Cookies and Other Data, please see the Section on Cookies and Other Data, above.
Individual Rights
How You Can Request to Access, Change, Delete, Restrict or Confirm the Use or Object to the Processing of Your Personal Data
If you or your authorized agent would like to request to access, change, delete, restrict or confirm the use or object to the processing of your Personal Data that you have previously provided to us, or if you would like to receive an electronic copy of your Personal Data for purposes of transmitting it to another company, or appeal our decision regarding your privacy request (to the extent these rights are provided to you by law), please see this form
. If you have any questions about the form or our process, feel free to contact us at privacy@marriott.com. Please see also, Contact Us.
For your protection, we only fulfill requests for the Personal Data associated with the email address and/or loyalty account number that you identify in your request, and we may need to verify your identity before fulfilling certain requests. When permitted by law, we may charge an appropriate fee to cover the costs of responding to your request.
Marriott acknowledges and respects our guests’ privacy and we will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that all individual rights may not be available under applicable law to all of our guests or other users of our Services.
How You Can Request to Opt-Out of Sale, Sharing, and/or Targeted Advertising
U.S. Residents: To exercise your rights to opt-out of the sale and/or sharing of your Personal Data, or opt out of the use of your Personal Data for targeted advertising (if those rights are afforded to you under U.S. State law), please visit Marriott’s “Your Privacy Rights” page.
Notice for California Residents
Customers who reside in California and have provided their Personal Data to us can request, once per calendar year, information about our sharing of certain categories of Personal Data to third parties and within the Marriott Group, for direct marketing purposes. Such requests should be submitted to us at privacy@marriott.com. California residents can find more information on exercising their rights under the CCPA by reading our California Consumer Privacy Statement or by calling 1-800-218-9316.
OTHER IMPORTANT PROVISIONS
Non-Marriott Group Entities
This Privacy Statement does not address, and we are not responsible for the privacy, data, or other practices of any entities outside of the Marriott Group, including Franchisees, Owners, Homes and Villas Property Management Companies, Authorized Licensees, Strategic Business Partners, or any third party operating any site or service to which the Services link, payment service, loyalty program, or website that is the landing page of the high-speed Internet providers at our properties. The inclusion of a link on the Online Services does not imply endorsement of the linked site or service by us. We generally have no control over, and are not responsible for, any third party’s collection, use and disclosure of your Personal Data.
In addition, we are not responsible for the data collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Data you disclose to other organizations through or the Apps or our social media pages.
Security
We seek to use reasonable organizational, technical, and administrative measures to protect Personal Data. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance with the Contact Us section, below.
Retention
We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law.
The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services and for as long as necessary to satisfy the terms of the Bonvoy program
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them)
- Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation, or regulatory investigations)
Sensitive Data
Unless specifically requested, we ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any Sensitive Personal Data (e.g., social security number, taxpayer identification number, passport number, driver’s license number, or other government-issued identification number; credit or debit card details or financial account number, with or without any code or password that would permit access to the account, credit history; or information on race, religion, ethnicity, sex life or practices or sexual orientation, medical or health information, genetic or biometric information, biometric templates, political or philosophical beliefs, political party or trade union membership, background check information, judicial data such as criminal records, or information on other judicial or administrative proceedings).
Use of Services by Minors
The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide Personal Data through the Services.
International Data Transfers
The Marriott Group is a global organization and provides a global service. Transferring data internationally is essential to the Services so that you receive the same high-quality service wherever you are in the world. As a result, we will, subject to law, transfer Personal Data and Other Data collected in connection with the Services, to entities in countries where data protection standards may differ from those in the country where you reside, including outside the EEA, UK, or Switzerland. By making a reservation, visiting, or staying at a Marriott branded property or using any Marriott Group branded service, you understand that we transfer your Personal Data globally.
In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Data.
Some of the countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here). The Marriott Group enters into Standard Contractual Clauses or another approved mechanism for cross-border transfer where appropriate.
Updates to This Privacy Statement
The “Last Updated” legend at the top of this page indicates when this Privacy Statement was last revised. Any changes will become effective when we post the revised Privacy Statement on the Online Services. If you would like to review the version of the Privacy Statement that was effective immediately prior to this revision, please contact us at privacy@marriott.com.
CONTACT US
If you have any questions about this Privacy Statement, please contact us at privacy@marriott.com.
If you live in the United States or any other country outside of the European Economic Area, the United Kingdom, or Switzerland, the data controller responsible for your personal data is Marriott International, Inc. with an address of:
Marriott International, Inc.
Global Compliance, Privacy
7750 Wisconsin Avenue
Bethesda, MD 20814
United States of America
If you live in the European Economic Area, the United Kingdom, or Switzerland, the data controller is Luxury Reservations Limited, with an address of:
Luxury Reservations Limited
10 Earlsfort Terrace
Dublin D02 T380
Ireland
Additional Information
DATA CONTROLLER
The Marriott Group acts as an independent data controller in relation to our owners and franchisees, who have a limited right to use the Data we collect as described below:
Owners: As the hotel you are booked to stay in may not be owned by the Marriott Group, we disclose Data to owners of Marriott Group branded properties for the purposes described in this Global Privacy Statement. Owners have a limited right to use certain Personal Data for their own purposes and therefore qualify as independent data controllers in order to comply with their own legal obligations, including maintaining books & records and other compliance obligations.
Franchisees: In addition, some Marriott-branded hotels are owned and operated under a franchise agreement with the Marriott Group. As such, we disclose Data to franchisees of Marriott Group branded properties for the purposes described in this Global Privacy Statement. Franchisees have a limited right to use certain Personal Data for their own purposes and therefore qualify as independent data controllers for the purposes of managing and coordinating your stay at hotels, and for complying with their own legal obligations, including maintaining books & records and other compliance obligations.
You can also:
- Contact our data protection officer responsible for your country or region via MarriottDPO@marriott.com. In your email, please indicate the country from which you are contacting us.
- Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection laws occurs. For the EEA, a list of the national data protection authorities can be found at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080. For the UK, the responsible data protection authority is the Information Commissioner’s Office (ICO), more details about which can be found on the ICO website.