This privacy notice (“Privacy Statement”) describes how Katanox BV (“Katanox”, “We” or “Us”) processes personal data included in booking information processed in the Katanox Market Place (“Market Place”).
This Privacy Statement describes how Katanox processes personal data on the Katanox Market Place, a B2B technology platform used to provide intermediary and payment services for travel reservations between buyers (for instance booking sites and travel agents) and sellers (such as hotels & accommodation providers) on behalf of travellers (“Guests”). Buyers and sellers commercially utilising the Market Place are hereinafter jointly referred to as “Market Place Users”. The travel bookings for Guests that are processed via the Market Place for Market Place Users are referred to as a “Reservation”.
When facilitating our Market Place Users to agree and execute Reservations, Katanox acts as a so-called Data Processor and not as a Data Controller.
As Data Processor, Katanox processes personal data on behalf of Market Place Users when they input or access personal data of Guests on the Market Place for initiating, managing and completing a Reservation.
The personal data processed can include a name as well as additional information required by the Market Place User such as contact information, telephone, email, billing information, date of birth, credit card information, preferences or special requests).
Katanox uses personal data to facilitate the completion of Reservations between Market Place Users, to provide Katanox Market Place Users with access to such information, to provide Reservation payment services, conduct internal business processes (such as testing and quality assurance) for payment processing, authentication, fraud prevention. The legal basis for processing personal data is that this is necessary for the performance of a contract to which the Guest is a party.
Katanox may also use usage datapersonal data in order to optimise the design and performance of the software. Market Place Users. Personal data used for analytical purposes are pseudonymised and aggregated.
The legal basis for processing personal data for research, analytical and statistical purposes, and to identify trends that may be of interest to Market Place Users, is for the legitimate business interests of Katanox. Where personal data are processed for these purposes, the data protection impact will have been assessed for the individuals involved.
Individual Guests cannot be identified from aggregated data, but if Guests do not want personal data included in aggregated data they can file an objection as explained in the ‘Rights and complaints’ section below.
We may share personal data with affiliates, third party service providers, Katanox Market Place Users and their partners. Katanox Market Place Users can independently decide if and with which parties personal data can be shared.
Katanox may share personal data with our affiliates and third party service providers (for instance, cloud storage providers, email service providers, CRM platforms) as well as professional advisers (for instance, legal, financial or accounting service providers). We will ensure that appropriate data processing agreements are concluded with our third party services providers.
In general, personal information about Guests is only shared with the parties involved in the booking transaction (and service providers and partners who act on their behalf) necessary to perform the contracts the Market Place Users have with Guests and our third party service providers (“sub-processors”) involved in the processing of these transactions.
Where personal data are shared, Katanox requires that appropriate technical and organisational security measures are in place to protect personal data, and for personal data to be processed in a lawful and fair manner.
Further information on the affiliates and third party service providers that Katanox uses to process personal data on their behalf can be obtained by filing a request as detailed in the ‘Rights and complaints’ section of this Privacy Statement.
Katanox may also disclose personal data as required by law, regulation or enforceable court order, or when lawfully requested by a government or law enforcement authority.