EU GDPR

for Hospitality
Checklist

FRONT OFFICE
How to stay compliant
DO DON’T

• Invite the Guest to correct or update
their personal information on the
registration forms, loyalty enrolment forms
and/or invoices.
• Correct any inaccurate or outdated
personal data that is already stored on the
property management system immediately.
• Refer the Guest to the privacy policy, as
per your standard operating procedures.
• If you are using paper copies, store the
forms in a secure location.
• Enter any corrected or updated
personal data from invoices into the
appropriate database.
• Collect as little personal data as possible
through Guest satisfaction surveys and
loyalty programme enrolment forms.
• If a Guest chooses to book additional
services or facilities, inform the Guest that
their personal data will be disclosed to the
third party offering the service.
• Leave any registration forms, Guest
satisfaction surveys, invoices or loyalty
programme enrolment forms lying around.
• Indicate that the Guest has subscribed
to marketing if they haven’t.
• Forget to present the registration
form to the Guest.
• Forget to enter any corrected or
updated personal data in the property
management system.
• Collect any unnecessary data when
processing negative feedback.
• Collect, store or disclose more data than
is necessary when booking additional
services or facilities for Guests.
• Use anything other than your
establishment’s template form for
loyalty programme enrolments.

© Copyright Lobster International S.A. 2018. All rights reserved.