What the GDPR means for an accommodation provider

When registering guests, an accommodation provider processes personal data — name, document number, nationality. The GDPR (EU Regulation 2016/679, supplemented in Slovakia by Act No. 18/2018 Coll.) sets the rules for this processing regardless of the size of the operation; the supervisory authority is the Office for Personal Data Protection of the Slovak Republic.

When registering guests, the legal basis is compliance with legal obligations (foreigner reporting, the accommodation register, the accommodation tax) and performance of the accommodation contract — the guest’s consent is generally not needed, but the guest must be informed in a clear and understandable way. The principle of minimization means collecting only the data the obligations actually require: data from the document, yes; blanket copying of documents is a riskier practice.

Why it matters

Data is kept only for the period set by law and then securely destroyed — unlimited retention “just in case” conflicts with the GDPR. Guests have the right of access, rectification, and, under certain conditions, erasure of their data, and the accommodation provider is responsible for adequate security (encryption, access control, storage in the EU).

Informational only

This page is provided for general information and is not legal or tax advice. Rates, deadlines and exemptions are set by law and municipal ordinances and can change — always verify current requirements with your municipality or a qualified advisor.