Introduction
The General Data Protection Regulation (GDPR) is a European Union law designed to protect personal data and privacy. It applies to businesses worldwide if they process data from EU citizens.
Bookboost is a communication tool that enables you to reach your guests. Compliance with applicable data protection laws, including GDPR, is the responsibility of the hotelier.
Bookboost does not assume liability for how the platform is used in relation to legal obligations in your jurisdiction.
Understanding GDPR Compliance
GDPR requires businesses to process personal data lawfully, transparently, and securely. Key principles include:
Consent: Guests must explicitly agree to receive marketing communications.
Right to Access & Erasure: Guests can request their data or ask for its deletion.
Data Protection: Secure handling of personal information.
Purpose Limitation: Use data only for the intended purpose.
Use Cases
Bookboost users must comply with GDPR in these scenarios:
Sending marketing campaigns (broadcasts, newsletters, promotions).
Managing guest journey communications (booking confirmations, pre-stay messages).
Importing and storing guest profiles in Bookboost.
Handling guest requests for data removal.
Configuration and Setup
To ensure GDPR compliance in Bookboost:
Obtaining Consent
Consent Statuses in Bookboost
Adding an Opt-Out Option
Handling Guest Data Removal Requests
Advanced Setup
Syncing with External Systems: Connect Bookboost with PMS providers to fetch and update consent statuses.
API Integration: Use API endpoints to sync newsletter subscriptions from external platforms.
Monitoring Unsubscribes: Track campaign reports to analyze opt-out trends and maintain email reputation.
Known Issues & Limitations
Country-Specific Regulations: GDPR applies differently across regions; consult local laws.
Spam Reports & Email Deliverability: High spam complaints may limit email functionality.
Pending Double Opt-Ins: If a guest doesn’t confirm via email, their status remains pending.
Data Retention Laws: Some countries require hotels to store reservation data for a specific period.
Conclusion
GDPR compliance is essential for hoteliers using Bookboost to manage guest communications responsibly. Ensuring proper consent handling, data security, and transparent opt-in/opt-out processes will help maintain compliance and build guest trust.
Need Assistance? Please contact us through the ‘Talk to Us’ on the left Menu in the platform or through the Bookboost Support email at support@bookboost.io.