Booking Holdings, Inc. and

Priceline Job Applicant Privacy Notice

The Priceline, Booking Holdings, Inc. or Booking Holdings Financial Services entity to which you are applying for employment (“we” or “our” or “us“) provides this Job Applicant Privacy Notice (“Notice“) to explain our practices regarding the collection, use, and other processing of certain personal data about job applicants or other potential employees (“Recruiting Data“). Personal data means any information about an individual from which that person can be identified.

We provide more information about who we are in this Notice below.

Categories of personal data

The categories of Recruiting Data we may collect and process includes, but are not limited to, the following:

identification data: your name, User ID and password (if you apply through our recruiting website), citizenship, and date of birth;
contact data: your home addresses, telephone numbers, and email addresses;
recruitment data: information regarding previous work experience (including references from previous employers), qualifications and work history, educational background, language skills, professional skills and talents, professional memberships, community involvement, geographic mobility interests and reports from executive search or employment firms (where applicable) and, if you are an internal candidate, performance and compensation information;
immigration and right to work information;
interview notes;
communication details: email and content;
information relating to any legal issues or disputes that may arise; and
any other information you choose to share with us in your CV/resume or otherwise.

In addition, we may collect, process and use in connection with our recruiting and hiring activities equal opportunity information (e.g., demographic information which may include racial or ethnic origin, religious or similar belief, sexual orientation, and relevant special categories of data and may be considered special categories of personal data under applicable laws) for compliance with equal opportunity legislation, or to the extent you choose to provide it and if we are based in the European Economic Area (“EEA”) or the UK, we collect and process this information if you have provided your explicit consent.

We may collect personal data relating to unlawful or objectionable behavior which may include personal data relating to criminal convictions and offenses (i.e., background check information) to the extent permitted by applicable law to enable us to assess an employee’s suitability for employment.

We collect information about you through the application and recruitment process, directly from you or an employment agency. We may also collect additional information about you from our group companies and third parties, including former employers, credit reference or background check agencies, and through publicly accessible sources, such as LinkedIn or other social media platforms.

Purposes and basis for processing recruiting data

Recruiting Data is collected, processed, and used for the following purposes (collectively, “Processing Purposes“):

Processing Purposes	Categories of Data Involved
recruiting and hiring activities, including administering your recruitment, making a hiring decision (including assessing qualification and tracking candidates during the application process, and carrying out interviews), and completing the hiring process in case you should be offered and accept a position (including activities related to on-boarding and the new hire process)	identification data, contact data, recruitment data, interview notes, communication details and, for internal candidates, performance and compensation information
complying with laws and employment-related requirements, along with the administration of those requirements, such as employment and immigration laws	identification data, contact data, recruitment data, and interview notes
responding & complying with requests/legal demands from regulators or other authorities in or outside of your country of residence	identification data, contact data, recruitment data, interview notes, and communication details
communicating with you, within the Booking Holdings group of companies, and/or with third parties (such as governmental authorities)	identification data, contact data, recruitment data, interview notes, and communication details immigration and right to work information information relating to any legal issues or disputes that may arise information you choose to share with us in your CV/resume or otherwise

Where we are subject to data protection laws in the EEA or in the UK, we rely on the following legal grounds for the collection, processing, and use of Recruiting Data:

taking steps at your request (i.e., following your application, prior to entering into a potential employment contract with you);
performance of the contract with you for the usage of our recruiting website;
consent, where relevant and as permitted by applicable law;
compliance with legal obligations and regulatory requirements,, in particular in the area of labor law, social security, data protection, tax, and corporate compliance laws and, where applicable, financial services laws and regulations;
pursuing our legitimate interests of hiring the most qualified and appropriate personnel and establishing, exercising or defending legal claims;
protection of the vital interests of you or of another individual; and
where relevant, performance of a task carried out in the public interest.

The provision of Recruiting Data as described in this Notice is partly a statutory requirement, and partly a requirement to carry out the recruitment and hiring process with you. In general, you are obliged to provide the Recruiting Data, except in limited instances when we indicate that certain information is voluntary. Not providing the Recruiting Data may prevent us from carrying out recruiting and hiring activities.

Automated decision making

Currently, we do not make decisions about you using automated means. However, if this changes, we will update this Notice. We do not auto-reject applications unless a role is no longer available.

Categories of recipients

We may transfer your Recruiting Data to third parties for the Processing Purposes as follows:

Group companies: As part of our global structure, compliance operations or certain regional or global departments may be located at our other group companies. Therefore, other entities within our global group of companies, including Booking Holdings, Inc., and its group entities may receive Recruiting Data as necessary for the Processing Purposes, in particular to conduct recruiting and hiring activities, and respond to and comply with requests and legal demands.
Acquiring or acquired entities: If the business for which you are seeking employment is sold or transferred in whole or in part or if it is acquiring and integrating another entity into the business for which you are seeking employment (or any similar transaction is being contemplated), your Recruiting Data may be transferred to the other entity (e.g., the new potential employer, the new acquired entity, or potential new acquired entity) prior to the transaction (e.g., during the diligence phase) or after the transaction, subject to any rights provided by applicable law, including jurisdictions where the other entity is located.
Data processors: Certain third parties, whether affiliated or unaffiliated, may receive your Recruiting Data to process such data under appropriate instructions (“Data Processors“) as necessary for the Processing Purposes, in particular to conduct recruiting and hiring activities, comply with applicable laws and employment-related requirements, and other activities. The Data Processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the Recruiting Data, and to process the Recruiting Data only as instructed.
Other third parties: We may also disclose your Recruiting Data as required or permitted by applicable laws and regulations to governmental authorities, law enforcement agencies, courts, external advisors, and similar third parties.

Such recipients might be located in countries which do not adduce an adequate level of protection from a European or UK data protection law perspective. We will take all necessary measures to ensure that transfers out of the EEA and the UK are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we may base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission, the relevant bodies in the UK or by a supervisory authority, approved codes of conduct together with binding and enforceable commitments of the recipient, or approved certification mechanisms together with binding and enforceable commitments of the recipient. You can request a copy of the appropriate safeguards by contacting us as set out in sections “Questions” and “Booking Holdings Financial Services” below.

Any access to your Recruiting Data is restricted to those individuals that have a need to know in order to fulfill their job responsibilities.

Retention period

We retain your Recruiting Data for as long as necessary to achieve the purposes for which the information is collected, including to perform our obligations and meet regulatory requirements, in accordance with our policies and applicable data protection laws. When we no longer need to use your Recruiting Data, we will remove it from our systems and records and/or take steps to anonymize it so that you can no longer be identified (unless we need to keep your information to comply with legal or regulatory obligations). If you accept an offer from us, your Recruiting Data will be retained for the duration of your employment with us in accordance with our policies and applicable law.

Your rights

If you have declared your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

Depending on where you are located and pursuant to applicable data protection law, you may have the right to: (i) request access to your Recruiting Data; (ii) request rectification of your Recruiting Data; (iii) request erasure of your Recruiting Data; (iv) request restriction of processing of your Recruiting Data; (v) request data portability; (vi) object to the processing of your Recruiting Data. Please note that these rights might be limited under the applicable national data protection law. For example, if you are based in the EEA and the UK, you can exercise these rights subject to certain limitations set out in applicable data protection laws.

Access: You may have the right to obtain from us confirmation as to whether or not Recruiting Data concerning you is processed, and, where that is the case, to request access to the Recruiting Data. The access information includes the purposes of the processing, the categories of Recruiting Data concerned, and the recipients or categories of recipient to whom the Recruiting Data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. You may have the right to obtain a copy of the Recruiting Data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Rectification: You may have the right to obtain from us the rectification of inaccurate Recruiting Data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete Recruiting Data completed, including by means of providing a supplementary statement.
Erasure (right to be forgotten): Under certain circumstances, you may have the right to obtain from us the erasure of Recruiting Data concerning you and we may be obliged to erase such Recruiting Data.
Restriction of processing: Under certain circumstances, you may have the right to obtain from us restriction of processing your Recruiting Data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
Data portability: Under certain circumstances, you may have the right to receive the Recruiting Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit the data to another entity without hindrance from us.

Object to processing: Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your Recruiting Data by us, for example, where the processing of your personal data is based on legitimate interest. You also have the right to lodge a complaint with the competent data protection supervisory authority.

To exercise your rights please contact us as stated in the “Questions” or “Booking Holdings Financial Services” section below.

Questions

If you have any questions about this Notice or your rights, please contact talentacquisition@priceline.com

Booking Holdings Financial Services

If you apply for a role at Booking Holdings Financial Services International Limited in Ireland, Booking Holdings Financial Services UK Limited in the United Kingdom or Booking Holdings Financial Services USA LLC in the United States (“BHFS”), the relevant hiring BHFS entity is a controller of your personal data. This means we determine why and how we use your personal data.

You can contact a supervisory authority in the EEA where you live or work, or where you think an issue related to your personal data has arisen. You can find a list of national supervisory authorities in the EEA on the European Data Protection Board website and can contact the supervisory authority in the UK, the Information Commissioner’s Office (ICO).

If you have questions about how BHFS processes your personal data or wish to exercise your rights in relation to your personal data, you can contact us and our data protection officer via email at dpo@bookingholdingsfs.com.