GDPR for hotels: how to handle guest data at check-in without getting burned
What the GDPR demands when you collect a guest's passport or ID at check-in: lawful basis, data minimisation, the three-year retention of the guest report, and the mistakes that trigger the most fines.
