CEO and Project Manager
May 23, 2019
If there is a leading economic sector in Spain, it is undoubtedly the tourism sector. Data protection in the tourism sector is one of the greatest challenges facing tourism entrepreneurs. The management of any business with implications in the field of tourism services requires technological resources for activities such as online reservations , information via the web or wireless connections in hotel establishments.
As those of you who are already in this “battle” know well (warlike terms come to mind after Game of Thrones and Vikings), the main objective of the new European General list of latvia consumer email Data Protection Regulation (GDPR) is to protect the fundamental right to the protection of personal data, as well as the right to be forgotten, the right to limitation of processing and the right to data portability.
At Asiri Marketing we review the entire GDPR issue and some parameters that you must take into account to comply with current legislation:

1 What is the GDPR and what is its purpose?
2 What changes does the GDPR entail?
3 What obligations do I have as a tourism company?
4 How hotels adapt to the GDPR step by step.
4.1 1. Create a record of processing activities.
4.2 2. Contracts with third parties.
4.3 3. Website.
4.4 4. Customer consent document.
4.5 5. Contracts with employees.
4.6 6. Risk analysis.
4.7 7. Notification of security breaches.
4.8 8. Appoint a Data Protection Officer.
What is the GDPR and what is its purpose?
This is a common framework that aims to strengthen and unify data protection for all individuals within the European Union (EU).
The GDPR sets new rules for all of us who manage the information of others within the EU and, for that reason, it affects not only EU professionals and companies but also anyone who processes data of European citizens.
What changes does the GDPR entail?
There is a fundamental change, which is the change in approach to data protection.
This regulation gives citizens greater self-governance over their personal information so that they can take greater control of their data and make decisions before providing the data to a company or professional.
Privacy, or rather respect for privacy, takes on maximum importance with the GDPR and must be present in every process, every strategy, every tool.
Many of the decisions we make in our businesses today must be screened for privacy, so before choosing a tool or strategy, we should ask ourselves whether:
Does it comply with the GDPR ?