Booking.com
The Booking.com affiliate widget embeds search boxes and booking banners that set advertising and tracking cookies and share visitor data for affiliate attribution.
What does Booking.com do?
What it is
The Booking.com widget and affiliate tools let websites embed search boxes, deals banners and map widgets that link through to Booking.com. They are operated by Booking.com B.V., based in the Netherlands and part of the US group Booking Holdings, and are used by publishers and travel sites to earn affiliate commission.
Cookies and data it collects
When a Booking.com widget loads, it can set advertising and analytics cookies and read identifiers used for affiliate attribution and retargeting. It collects the visitor IP address, the pages and searches viewed and click data used to credit referrals. Much of this is marketing data that profiles the visitor.
GDPR and ePrivacy implications
Because the widget sets non essential cookies and shares personal data for advertising and attribution, it is squarely within the ePrivacy consent rule and the GDPR. You and Booking.com may be joint controllers for parts of the processing, so a clear allocation of responsibilities is needed.
Consent requirements
Advertising and affiliate cookies require prior, opt in consent before the widget loads. A simple banner that blocks the widget until the visitor accepts marketing cookies is the standard approach. Consent must be as easy to refuse as to give.
Data transfers
Booking.com B.V. is in the EU, but as part of Booking Holdings and through its advertising partners, data may be transferred to the United States. Those transfers should rely on the EU US Data Privacy Framework or Standard Contractual Clauses, which you should confirm in the Booking.com data processing terms.
Practical compliance steps
Load the widget only after marketing consent, categorise its cookies as advertising in your consent manager, and disclose Booking.com and the possible US transfer in your privacy and cookie policies. Review the affiliate terms to understand the controller relationship.
Booking.com and the GDPR
Booking.com is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Article 6(1)(a) GDPR for advertising and tracking cookies
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A DPIA is recommended where the Booking.com widget is used for large scale advertising, retargeting or affiliate profiling. Assess the marketing cookies, the joint controller relationship and any United States transfer.
Sample text for your banner
We use the Booking.com widget for travel search and offers. It sets advertising cookies and shares data with Booking.com for affiliate tracking. It loads only if you accept marketing cookies.
What Booking.com sets and contacts
- Tracking method
- Embedded affiliate widget and JavaScript with advertising cookies
- Server location
- European Union (Netherlands), part of US based Booking Holdings
- Data transferred outside the EU
- Booking.com B.V. is based in the Netherlands, but it is part of the US group Booking Holdings and works with advertising partners, so data can be transferred to the United States under the EU US Data Privacy Framework or Standard Contractual Clauses.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bkng | Functional | 1 year | Stores preferences and the affiliate context for the Booking.com widget. |
| aid | Advertising | 1 year | Affiliate identifier used to attribute referrals and commissions to your site. |
| pcm_consent | Functional | 6 months | Records the visitor consent state for Booking.com personalisation and advertising. |
Third-party domains contacted (3)
booking.combstatic.comdistribution-xml.booking.com
Frequently asked questions about Booking.com
Can't find your question? Write to us, we answer fast.
Does the Booking.com widget set cookies?
Yes, it sets advertising and analytics cookies and reads identifiers used for affiliate attribution and retargeting. These are non essential marketing cookies that need consent.
Do I need consent for the Booking.com widget?
Yes, because it places advertising cookies and shares personal data for marketing, you must obtain prior opt in consent before the widget loads.
What is the legal basis for the Booking.com widget?
Consent under Article 6(1)(a) of the GDPR is the appropriate basis, together with the ePrivacy consent rule for the advertising cookies. Legitimate interest is not suitable for marketing trackers.
Does the Booking.com widget transfer data to the United States?
Booking.com B.V. is in the Netherlands, but as part of Booking Holdings and through ad partners data can reach the United States, relying on the EU US Data Privacy Framework or Standard Contractual Clauses.
Do I need a DPIA for the Booking.com widget?
A DPIA is advisable when the widget supports large scale advertising, retargeting or profiling. Assess the marketing cookies, transfers and the joint controller relationship.
How do I implement the widget compliantly?
Block it until marketing consent is given, classify its cookies as advertising, disclose Booking.com and the US transfer, and review the affiliate and data processing terms.
Are there alternatives to the Booking.com widget?
You can link to Booking.com with a plain text or image link that sets no cookies until the user clicks through, or use a privacy friendly booking provider. Static links avoid pre consent tracking.
How do I update my cookie policy for the Booking.com widget?
List the Booking.com advertising and analytics cookies, their purpose and duration, state that the widget loads only after marketing consent and disclose the possible US transfer.
Adcash
Adcash is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Adcash enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Adcash empowers marketing teams to achieve measurable growth.
HappySync
HappySync is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. HappySync enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, HappySync empowers marketing teams to achieve measurable growth.
AdRoll
AdRoll is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. AdRoll provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, AdRoll helps deliver the right message to the right audience at the right time.
Teads
Teads is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Teads provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Teads helps deliver the right message to the right audience at the right time.
Quora Pixel
Quora Pixel is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Quora Pixel enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Quora Pixel empowers marketing teams to achieve measurable growth.
Clicktripz
Clicktripz is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Clicktripz enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Clicktripz empowers marketing teams to achieve measurable growth.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.