Obtaining P3P Privacy Policies for Composite Services

Algorithm 8

P3P policies of FlightBooking service, HotelReservation service, and Payment service (P3P policy of HotelReservation service).

Policy₂{Entity (#business.name): HotelReservation,…,

 𝑆₁{Purpose: (current),

  Recipient: (ours),

  Retention: (legal-requirement),

  Data: (#user.IDCardNo)}

 𝑆₂{Purpose: (current, contact [opt-in]),

  Recipient: (ours, unrelated [opt-out]),

  Retention: (indefinitely),

  Data: (#user.Name, #user.Mobile)}}