Brazil Privacy Supplement

If you reside in Brazil, this Brazil Privacy Supplement applies to you, and supplements our Privacy Policy.

All information regarding the processing of your personal data is detailed in the Privacy Policy, and any differences arising from the application of Law No. 13,709/18 ("Brazil General Data Protection Law" or "LGPD") will be addressed in this Supplement.

In case of conflict between the Privacy Policy and this Supplement, this Supplement shall prevail for residents of Brazil.

1. Identification of the Controller.

All activities carried out by a user resident in Brazil as of April 1, 2022: Airbnb Plataforma Digital Ltda., 422 Aspicuelta Street, Suite 51, ZIP Code: 05433-010, São Paulo - SP, https://www.airbnb.com.br.

2. Your Rights.

You benefit from rights pursuant to applicable law. The LGPD grants certain rights regarding your personal data, which are not absolute and may be subject to restrictions. Your rights under the applicable law are the following:

2.1. Confirmation on whether your data is being processed. 

You have the right to receive confirmation on whether Airbnb processes your personal data.

2.2. Access to your data.

You have the right to request certain copies of your personal information held by us. In certain instances, you also have the right to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format.

2.3. Correction of incomplete, inaccurate, or outdated data.

You have the right to ask us to correct inaccurate, incomplete, or outdated personal information about you (and which you cannot update yourself within your Airbnb account).

2.4. Anonymization, blocking, or erasure of data.

You have the right to request the anonymization, blocking, or erasure of data that is unnecessary, excessive, or processed in non-compliance with the provisions of the law, subject to certain limitations and restrictions.

2.5. Request the deletion of Personal Data processed based on your consent.

You have the right to request the deletion of your personal data processed with your consent by Airbnb. However, exceptions apply when personal data retention is required, as provided by the LGPD.

2.6. Portability of personal data to a third party.

If technically feasible, you have the right to request portability of your data to a third party, as long as this does not infringe on our trade secrets.

2.7. Information on the sharing of your personal data.

You have the right to request information on the sharing of your personal data.

2.8. Information about the possibility of refusing to provide consent and the respective consequences, when applicable.

You have the right to be informed about the possibility of refusing to provide your consent for the processing of your personal rights and the potential consequences of such refusal, such as the limitation of access to certain features or services offered by Airbnb.

2.9. Withdrawing your consent.

If we are processing your personal information based on your consent you can withdraw your consent at any time by changing your account settings or by sending a communication to Airbnb specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. This procedure will be carried out free of charge.

2.10. Request a review of decisions made solely based on automated processing of personal data.

You have the right to request a review of decisions made solely through automated processing of your personal data. This means that if a decision affecting you was made without any human intervention, you can ask for that decision to be reviewed.

3. Fulfilling Your Rights.

We may ask you to verify your identity before taking further action on your request. We also offer many privacy controls directly within your Account settings. Click here for more information about how to control Airbnb’s use of your personal information. In addition, if you do not want Airbnb to use your personal information to develop and improve AI models that power certain features on Airbnb, you can set your preferences as described here.

4. International Data Transfers. 

Airbnb Plataforma Digital Ltda. is part of the Airbnb group. You acknowledge that, in order to facilitate our global operations and provide you with the requested Services, certain personal data we hold about you will be transferred to, used, accessed, processed, and stored in other countries, including, for example, Ireland, the United Kingdom, and the United States. Privacy and data protection laws in these countries may not be equivalent to the laws of Brazil.

If your personal information is shared with corporate affiliates or third-party service providers outside of Brazil, we will ensure the necessary and secure means are in place to uphold an adequate level of data protection for the period necessary to fulfill the purposes described in our Privacy Policy. These transfers use one of the valid mechanisms required by the LGPD, such as the Standard Contractual Clauses approved by the National Data Protection Agency (“ANPD”), and all recipients are subject to appropriate technical, administrative, and contractual measures to ensure the security, confidentiality, and integrity of the information, in accordance with applicable legislation.

5. Data Protection Officer. 

If you have questions regarding your rights or wish to make a request related to your personal data, you can contact the Controller or the Data Protection Officer for Brazil ("Brazil DPO") by emailing us at [email protected]. More information about the Brazil DPO can be found here. If our response does not address your concerns or you require further assistance with respect to your personal data, you also have the right to contact the ANPD.