How to inform your guests about Data Protection and Terms & Conditions in a legally compliant manner
Introduction
As a hotelier, you are required under the General Data Protection Regulation (GDPR) to inform your guests about the processing of personal data as well as your Terms and Conditions (T&Cs). This documentation explains your responsibilities and shows how LIKE MAGIC supports you in correctly displaying the relevant information in the digital guest journey.
Table of Contents
Roles
Your responsibility as a Hotelier
According to the GDPR, you as the hotel are the "controller" for the processing of your guests' personal data. This means that you must ensure that:
-
Your guests are transparently informed about the processing of their data.
-
The Privacy Policy and T&Cs are up to date and accurate.
-
The necessary documents are clearly visible to the guest.
As the controller, you are liable for ensuring that this information is provided correctly.
The Role of LIKE MAGIC
LIKE MAGIC acts as a "processor" and processes your guests' personal data exclusively on your behalf. We provide you with the technical capabilities to correctly display the privacy policy and T&Cs in the digital guest journey.
Integration into the Digital Guest Journey
To ensure that your guests always have access to the relevant information, you can and must display the following documents in the digital guest journey within the online check-in module:
-
Your Privacy Policy
-
Your Terms & Conditions (T&Cs)
These documents should be easily accessible to the guest and clearly labeled as hotel-specific information.
Placement within the Guest Journey
- in the booking step while specifying booker data:
- during the Online Check-in within the legal step:
Content Management - Placement
- Go to Prismic and select the document type "Common"
- open the section "Modals"
- Enter the Terms & Conditions in the "Terms and Conditions general" field
- Enter the Privacy Policy in the "Terms and Conditions online" field
Information on Data Processing
LIKE MAGIC processes personal data exclusively within the framework of the Data Processing Agreement (DPA) concluded with you. Detailed information on the processed data can be found in our Knowledge Base at the following link:
The documentation on Google Tag Manager integration with the cookie banner and consent mode explains how the cookie banner is connected to Google Tag Manager (GTM) to ensure compliance with the GDPR:
Cookie Banner and Consent Mode
You are responsible for using this information to ensure a GDPR-compliant user experience for your guests.
Conclusion
It is your responsibility as a hotelier to inform your guests in compliance with the GDPR and to correctly provide the relevant documents. LIKE MAGIC provides you with the necessary technical capabilities to display your Privacy Policy and T&Cs in the digital guest journey, but the final implementation is up to you.
If you have any further questions or need support, please feel free to contact our support team.