{"id":509,"date":"2026-01-03T12:55:35","date_gmt":"2026-01-03T12:55:35","guid":{"rendered":"https:\/\/www.eurocheckin.eu\/?page_id=509"},"modified":"2026-02-11T08:16:35","modified_gmt":"2026-02-11T08:16:35","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/www.eurocheckin.eu\/?page_id=509","title":{"rendered":"GDPR"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Your data and GDPR<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When accommodation providers collect and submit guest identification data, they must comply with the General Data Protection Regulation (EU) 2016\/679 (GDPR).<\/p>

GDPR applies across the European Union and sets strict rules on how personal data may be processed, protected, and used.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Lawful basis for processing<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Guest data is processed because it is required by law.<\/strong><\/p>

Under GDPR, personal data may be processed when it is necessary to comply with a legal obligation<\/strong> imposed on the data controller.<\/p>

In this case, the legal obligation arises from national guest registration<\/strong> laws adopted by EU Member States.<\/p>

Accommodation providers do not collect guest data for commercial purposes, marketing, or profiling.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Who processes your data?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tDepending on the country, guest data is processed by:\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tThe accommodation provider, solely for the purpose of legal compliance<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tCompetent public authorities, such as police, immigration, or tourism authorities. Guest data is submitted directly to official government<\/b> systems and is not shared with third parties beyond what is required by law.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    What GDPR rights do guests have?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Under GDPR, guests have the right to:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tAccess<\/b> their personal data<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tRequest correction<\/b> of inaccurate or incomplete data<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tReceive information<\/b> about the purpose and legal basis of data processing<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tKnow how long<\/b> their data will be retained<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tLodge a complaint<\/b> with a national data protection authority.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\tThese rights apply even when data is processed due to a legal obligation.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t
      \n\t\t
      \n\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Rights that may be limited<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Because guest data is processed to comply with legal requirements, certain GDPR rights may be restricted by national law<\/strong>, such as<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t\t\t\t
        \n\t\t\t\t\t\t\t
      • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tThe right to erasure (\u201cright to be forgotten\u201d);<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
      • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tThe right to object to processing<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        Such limitations are permitted under GDPR when necessary for public security, law enforcement, or compliance with legal obligations.<\/p>

        Data retention<\/strong><\/h3>

        Guest data is retained only for the period defined by national law.<\/strong><\/p>

        Retention periods vary by country and are determined by public authorities. Once the legal retention period expires, the data must be deleted or anonymised in accordance with applicable regulations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

        \n\t\t\t\t\t
        \n\t\t
        \n\t\t
        \n\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Data security and confidentiality<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        GDPR requires both accommodation providers and public authorities to implement appropriate technical and organisational measures,<\/strong> including:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t\t\t\t
          \n\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tSecure data transmission<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tEncryption where required<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tAccess controls limited to authorised personnel<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/rect><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tProtection against unauthorised access, loss, or misuse<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t

          Failure to protect personal data may result in legal penalties under GDPR and national law.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

          \n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
          \n\t\t\t\t\t
          \n\t\t
          \n\t\t
          \n\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t

          No central EU database<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t

          Guest personal data is not stored in a central European Union database.<\/strong><\/p>

          Each Member State processes guest data independently, within its own legal framework and under the supervision of national data protection authorities.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

          Your data and GDPR When accommodation providers collect and submit guest identification data, they must comply with the General Data Protection Regulation (EU) 2016\/679 (GDPR). GDPR applies across the European Union and sets strict rules on how personal data may be processed, protected, and used. Lawful basis for processing Guest data is processed because it is required by law. Under GDPR, personal data may be processed when it is necessary to comply with a legal obligation imposed on the data controller. In this case, the legal obligation arises from national guest registration laws adopted by EU Member States. Accommodation providers do not collect guest data for commercial purposes, marketing, or profiling. Who processes your data? Depending on the country, guest data is processed by: The accommodation provider, solely for the purpose of legal compliance Competent public authorities, such as police, immigration, or tourism authorities. Guest data is submitted directly to official government systems and is not shared with third parties beyond what is required by law. What GDPR rights do guests have? Under GDPR, guests have the right to: Access their personal data Request correction of inaccurate or incomplete data Receive information about the purpose and legal basis of data processing Know how long their data will be retained Lodge a complaint with a national data protection authority. These rights apply even when data is processed due to a legal obligation. Rights that may be limited Because guest data is processed to comply with legal requirements, certain GDPR rights may be restricted by national law, such as The right to erasure (\u201cright to be forgotten\u201d); The right to object to processing Such limitations are permitted under GDPR when necessary for public security, law enforcement, or compliance with legal obligations. Data retention Guest data is retained only for the period defined by national law. Retention periods vary by country and are determined by public authorities. Once the legal retention period expires, the data must be deleted or anonymised in accordance with applicable regulations. Data security and confidentiality GDPR requires both accommodation providers and public authorities to implement appropriate technical and organisational measures, including: Secure data transmission Encryption where required Access controls limited to authorised personnel Protection against unauthorised access, loss, or misuse Failure to protect personal data may result in legal penalties under GDPR and national law. No central EU database Guest personal data is not stored in a central European Union database. Each Member State processes guest data independently, within its own legal framework and under the supervision of national data protection authorities.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-509","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=\/wp\/v2\/pages\/509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=509"}],"version-history":[{"count":0,"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=\/wp\/v2\/pages\/509\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.eurocheckin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}