(last revised July 26, 2016)
Please read this Policy carefully. Your access to or use of any part of the Services will constitute your notice about our collection, use, and disclosure of your information in accordance with this Policy. If you do not wish for us to collect, use, and disclose your information in accordance with this Policy, please do not access or use the Services. This Policy does not cover information collected elsewhere, including, without limitation, offline or on sites linked to through the Services. We may add to or amend this Policy with other notices. We may also post different privacy statements for some Services, and when we do so, this Policy does not apply.
This Policy applies solely to information collected by us through the Services and does not apply to any third-party activities, including third-party websites linked from our Services, third-party social networking platforms or features we make available through our Services, or third-party ads displayed on our Services. We are not responsible for the privacy practices or content of such third parties. We encourage you to read the privacy statements of those third parties.
1. What Information We Collect from You
When you register with Concur or use our Services, we ask for your email address and password, name, home location, billing or mailing address, phone numbers, and other email addresses as well as other information including your travel information, history, preferences, and other demographic information. If you wish to purchase additional services we may collect your financial information (for example your credit card number, expiration date). If you also select to have Concur track your travel rewards points, Concur will store account details for each of your travel rewards points accounts including each account's login username and password. If you wish, you can also store in your Traveler Profile information about your emergency contact details and government issued identification numbers needed for travel, for example, your passport identification number, driver’s license number, and/or known traveler number.
Information We Automatically Collect About Visits and Usage
For all Site visitors or App users, not just registered users, we collect information such as IP address, device identifier, browser type, device type, domain name, access times, duration of visit, referring URL, platform, new and repeat information, time stamp, exit page information, and other information about how you use the Service.
You may associate your email accounts with the Service by providing us with log-in credentials for your email accounts. Once you have authorized us to do so by associating your accounts, we will use our automated technology to regularly review the contents of emails in your email accounts to look for travel and travel-rewards related emails, including those with information about recent bookings or reward-program statements. This information collected from your emails will be added to your TripIt account so that you may automatically access this information on the Service and so that we may use this information for other purposes described in this Policy.
Import Contacts and Tell-a-Friend
We utilize an import contacts feature to help you keep in touch with your contacts and other members of Concur. We make it easy for you to invite people from your email address books and contact lists to join our Service and connect with you on our Site or to help find people who have already joined our Service. We do this at your request, by importing your email address books and contact lists to our servers. You may also provide us with an individual friend’s email address so that we may send them an invitation to visit the Service.
We may collect precise geolocation data through our Services. We may use this information as described in this Policy, including, for example, to provide you with offers or opportunities based upon your location and travel plans.
2. What Information Others May Collect about You
Other third parties may collect information about you through our Services, including personally identifiable information about your online activities over time and across different websites when you use our Services. We describe some of those activities below, but understand that our Policy does not cover these or any other third parties, their products, actions, or their services. We cannot control how third parties collect, use, or secure your data. For information about third-party privacy practices, please consult their privacy policies.
Third-Party Sign-In and Social-Media Features
You can log in to our Services using sign-in services provided by third parties, including certain third-party social networking platforms. Certain third-party services we may feature through our Services give you social media options to interact with buttons or widgets that let you like information or post information about your activities from our Site to third party sites and platforms publicly or within your network. These services will share certain personal information with us as described in the sign-in notices or in their privacy policies.
Our Ads on Third-Party Websites
We and our third-party partners may use information collected using third-party cookies and web beacons on our Services and in our emails to deliver ads about our Services displayed to you on third-party websites and applications. We also may use cookie information and other methods to know when you return to our Services after visiting these third-party websites and applications. We use this and other information about you to try to understand your interests and show you relevant advertising about products and services that may interest you. Our third party partners may also use this information for third-party advertising as described above.
When we post videos or other media on our blog, third parties may use local shared objects, also known as Flash cookies, to store your preferences for volume control, or to personalize certain features. Flash cookies are different from browser cookies because of the amount of, type of, and how data is stored. Cookie-management tools provided by your browser will not remove Flash cookies. To learn how to manage privacy and storage settings for Flash cookies, go to the Macromedia website.
3. How Your Information Is Used
In addition to the uses described in this policy, we may use personal information about you to create and maintain your travel itineraries and your travel profile, send you marketing messages about our Services and products and services of our partners, and otherwise provide you with and improve the Services. We also use the information that we gather to personalize and customize experience, content, marketing, and recommendations across all our Services, including to target content on our Services to more closely match your interests and, if you have selected to receive email communication from us, target email marketing messages that are more appropriate to your needs. We may use your personal information to respond to your comments and questions and provide customer service; send you information related to your requests and purchases, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages; communicate with you about contests, promotions, rewards, upcoming events, and process and deliver contest entries and rewards; link or combine your personal information with other information we get about your use of other Services and from third parties to help understand you and your needs, and provide you with recommendations, better service, and customized marketing; and protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
4. How Your Information Is Protected
We maintain data handling and storage practices and procedures that are designed to promote the integrity and confidentiality of the personally identifiable information. No method of transmission over the Internet or method of electronic storage is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
5. How Your Information Is Shared
When you use the Service, your personal information and your travel information will be shared with the third parties you designate for access to such information, including other companies, websites, mobile applications, your friends, relatives, and business associates. Depending upon the type of access you grant to such third parties, they may also be permitted to edit the information you have provided to us and to designate others to access and edit such information. You may change who has access to your information by going to your account settings and then changing your publishing options.
You may choose to display certain information you give us in your public profile. Our Site also offers publicly accessible blogs or community forums. You should be aware that any information you choose to share in these areas may be read, collected, and used by others. To request removal of your content or information from our blog or community forum, contact us at email@example.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.
In general, most of your travel-related information, such as upcoming destinations and travel statistics, is displayed only to other users of the Service to whom you have specifically connected as part of your TripIt network. You can change your privacy settings to designate which types of information are shared and with whom by visiting Profile and Privacy page. You may also post information about your travel plans or current travel status through your TripIt connections or other social-networking connections or otherwise instruct the Service to automatically provide such information to other users of the Service and with your social-networking connections.
Information We May Share
In addition, we may share your personal information as follows:
- When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of Concur, our users, or others; and in connection with the enforcement of our terms, contracts, and User Agreement.
- In connection with a corporate transaction, such as a divestiture, merger, acquisition, consolidation, or asset sale (or the negotiation thereof), or in the unlikely event of bankruptcy. We may assign or transfer your information as part of the transaction.
- With third-party business firms contracted to provide specific services to us, such as a credit card processing company, email messaging providers, SMS providers, and other third parties that perform services on our behalf as a part of the Service.
- As required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on our Site.
From time to time, we also may share general information about our Services, users, and visitors such as the number of visitors, aggregate and/or non-personally identifiable demographic and travel data, etc., with third parties (including with your employer, if your account was provided through your employer).
We may also post customer feedback on the Site from time to time along with your first name and last initial.
6. What Choices Are Available to You on Our Services
We think that you benefit from a more personalized experience when we know more about you and your TripIt experiences. However, in some cases you can limit the information you provide to us, and you can limit the communications that we send to you.
Registration is optional. If you choose not to register, certain features of the Service and sections of our Site may be inaccessible, but you will be able view the main pages of the Site. Registration and log-in are required to prepare an itinerary using our Service.
In the Settings section, you may make changes to or delete inaccuracies in your account and change your password, privacy settings, or contact information such as your name, email address, and billing address. We will retain your information for as long as your account is active or as needed to provide you the Service and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you wish to cancel your account, modify your information, or request that we no longer use your information to provide you the Service, contact us at firstname.lastname@example.org.
You can manage your email preferences by clicking Settings at the top of any page on our Site, then Email Settings, and updating your email subscription settings. You can also unsubscribe from promotional emails by: (1) following the unsubscribe instructions in our emails; or (2) emailing us at email@example.com. You may update your email preferences from time to time. Please note that even if you unsubscribe from promotional email messages, we may still need to contact you with important transactional information related to your account and your use of the Service. For example, even if you have unsubscribed from our email messages, we will still send you emails confirming emails relating directly to an itinerary or travel profile created through the Service confirming registration.
You may manage the SMS alerts regarding flight delays, gate changes, and other alert information specific to your itinerary sent by the Service to your mobile device by following the opt-out instructions in each SMS message.
Do Not Track
We may not recognize or respond to every type of "do not track" signal or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party websites or online services, but we give you certain choices about how we collect personally identifiable information as described in this Policy. Many Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Site including certain opt-out cookies. Cookie management tools provided by your browser usually will not remove Flash cookies. To learn how to manage privacy and storage settings for Flash cookies, visit the Macromedia website (or, in the EU, the Your Online Choices website).
You can opt out of TripIt PPIDs to serve personalized ads and content on and across the devices you use to access the Services at any time by visiting the TripIt PPID Opt-Out page. Note that the TripIt PPID Opt-Out will not affect non-personalized ads on the Services and elsewhere, use of TripIt PPIDs for other analytics purposes, such as to improve Services and track effectiveness and frequency of non-personalized ads, or personalized or interest-based ads on the Services and elsewhere that use identifiers other than TripIt PPIDs (such as cookies and PPIDs that Concur and its affiliates may use in connection with non-TripIt branded services). To learn about use of PPIDs in connection with other non-TripIt branded sites and services from Concur, please visit the https://www.concur.com/en-us/privacy-policy.
We encourage you to review the privacy policies of our third-party advertisers and analytics service providers to learn about your choices about information they collect from you. In addition, the Network Advertising Initiative offers information about some of the Internet advertising companies we may use, including how to opt out of interest-based advertising they deliver. To opt out of Google Analytics, you can download the Google Analytics Opt-out Browser Add-on. Modify your personalized ad choices.
7. International Users; International Transfer of Your Personal Information
The Internet is a global environment and Concur is a global corporation operating in many countries around the world. Collecting and processing your information using the Internet necessarily involves the transmission and storage of personal information on an international basis and when Concur transfers your personal information across national borders, we do so in compliance with applicable law and the practices we have developed to ensure the integrity and confidentiality of the personally identifiable information we process.
Pursuant to the European Court of Justice ruling dated October 6, 2015 which invalidated the ability of European companies to rely on the Safe Harbor Framework for cross border data transfers, in an effort to meet the “adequacy requirements” under EU data protection laws, the Concur affiliates have entered into and executed an intra-Group Data Protection Agreement with SAP SE, as the ultimate parent company of Concur, which covers the processing and the transfer of your personal information from the European Economic Area (EEA)and which incorporates the Standard Contractual Clauses to provide a mechanism approved by the European Commission as offering adequate protection when transferring personal information from the European Economic Area under the EU Data Protection Directive 95/46/EC.
8. Updates to This Policy
9. Questions or Concerns
Concur Technologies, Inc.
601 – 108th Avenue NE, Suite 1000
Bellevue, WA 98004
Telephone: (888) 883-8411
55 2nd Street, 2nd Floor
San Francisco, CA 94105
Telephone: (415) 520-3400
Facsimile: (415) 520-3420