This page is about the menu SETTINGS->ACCOUNT->PRIVACY and explains the privacy aspects of using BookingAutomation.
BookingAutomation is a data processor providing a saas to their clients which are accommodation providers and managers (data controller). All personal data collected in this process is processed on behalf of the client and as directed by the client.
Here is our Terms & User Agreement.
We provide settings which allow you to control how your guests data is stored in BookingAutomation.
- 1 Who does the GDPR affect?
- 2 What is personal data?
- 3 What does GDPR mean for accommodation providers?
- 4 How can I use personal data collected from a booking?
- 6 What is the difference between a data processor and a data controller?
- 7 Does BookingAutomation send data to third parties?
- 8 Is BookingAutomation GDPR compliant?
- 9 Where can I download the contract for commissioned processing of personal data?
Who does the GDPR affect?
The GDPR applies to all companies processing and holding the personal data of natural persons residing in the European Union, regardless of the company’s location.
What is personal data?
Any information related to a natural person, that can be used to directly or indirectly identify the person. This can be for example a name, a photo, an email address, bank details, posts on social networking websites, online behavior, a computer IP address.
What does GDPR mean for accommodation providers?
Personal data can be collected for specified explicit and legitimate purposes i.e. to process and fulfill a booking. Accommodation providers are obliged to explain what data exactly is being captured, for what purposes, for how long it will be stored, who has access to it and what the rights of the guest are.
How can I use personal data collected from a booking?
Data cannot be used for other than the purposes outlined initially. For example, taking an email address at the time of booking and then using it, without further consent for E-mail marketing or to pass data on to third parties like Tripadvisor is not allowed.
Consent needs to be explicit, opt-in, and freely given. You can achieve this with a custom question with a link to your privacy regulations which you can set these up in SETTINGS->PROPERTIES->BOOKING QUESTIONS.
What is the difference between a data processor and a data controller?
A controller is the entity that determines the purposes, conditions and means of the processing of personal data. The processor is an entity which processes personal data on behalf of the controller.
Does BookingAutomation send data to third parties?
We only send data to third parties at your order. You order your guests data to be sent to third parties by activating certain services. These are:
|Purposes of processing||Group concerned||Categories of personal data||Addresse||Transfer to third country|
|Interface with Lockstate||Guests of controllers who use the interface between BookingAutomation and Lockstate||booking number, arrival date and departure date, name, E-mail address||"LockState
2170 South Delaware St. Denver, CO 80223"
|Interface with TripAdvisor Review Express||Guests of controllers who use the interface between BookingAutomation and TripAdvisor Review Express||E-mail Adresse, county of origin||TripAdvisor LLC
400 1st Avenue Needham, MA 02494, USA
|Interface with Homeaway||Guests of controllers who notify Homeaway about manual booking which were stated on any of Homeaways web sites||booking number, arrival date and departure date, language, name, E-mail address, number of guests travelling, booking date, invoice sum, payment status||HomeAway UK Limited, Level 25 Portland House, Bressenden Place, London SW1E 5BH, United Kingdom|
|Interface with Google Hotel Ads||Guests of controllers who use BookingAutomation's interface with Google Hotel Ads||arrival date and departure date, E-mail address||Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland|
|Interface with Visit Scotland||Guests of controllers who use BookingAutomation's interface with Visit Scotland||country, postcode, number of guests, price||VisitScotland, Ocean Point One, 94 Ocean Drive, EdinburghEH6 6JH, Scotland|
|Interface with Mailchimp||Guests of controllers who use BookingAutomation's interface with Maichimp||guest name, E-mail address, language, booking number||The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308 USA
|Interface with Integromat||Guests of controllers who use BookingAutomation's interface with Integromat||information selected in Integromat will be forwarded to the apps connected in Integromat||Integromat s.r.o.
Novakovych 1954/20a, 180 00 Prague 8, Czech Republic
|Interface with Refund Protect||Guests of controllers who use BookingAutomation's interface with Refund Protect||time of booking, arrival date, guest name, currency, price of booking||Event Protect, Suite 3 Indigo Blue,
14 Crown Point Road, Lees, LS10 1ES, United Kingdom
Is BookingAutomation GDPR compliant?
Yes. BookingAutomation complies to GDPR.
Where can I download the contract for commissioned processing of personal data?
You can download the contract for commissioned processing of personal data from the "Legal" section in SETTINGS-ACCOUNT-BILLING.