Beds24 is a data processor: it provides software as a service (SaaS) to accommodation providers and managers, who are the data controllers. All personal data collected in this process is processed on behalf of the client and as directed by the client. Settings in Settings > Account > Privacy let you control how your guests' data is stored in Beds24.
Agreements and policy
- The Data Processing Agreement is part of the Beds24 User Agreement.
- Read the Beds24 Privacy Policy.
- Download the contract for commissioned processing of personal data from the Legal section in Settings > Account > Billing.
- Beds24 complies with the GDPR.
Table of Contents
- GDPR basics
- Your obligations as an accommodation provider
- Remove personal data automatically
- Data sent to third parties
GDPR basics
| Term | Meaning |
|---|---|
| Who the GDPR affects | All companies processing and holding the personal data of natural persons residing in the European Union, regardless of the company's location. |
| Personal data | Any information related to a natural person that can be used to directly or indirectly identify the person, for example a name, a photo, an email address, bank details, posts on social networking websites, online behaviour or a computer IP address. |
| Data controller | The entity that determines the purposes, conditions and means of the processing of personal data. |
| Data processor | An entity that processes personal data on behalf of the controller. |
Your obligations as an accommodation provider
- Purpose: personal data can be collected for specified, explicit and legitimate purposes, for example to process and fulfil a booking. You must explain exactly what data is captured, for what purposes, how long it is stored, who has access to it and what the rights of the guest are.
- Use: data can't be used for other purposes than those outlined initially. For example, taking an email address at the time of booking and then using it for email marketing, or passing it on to third parties like Tripadvisor, without further consent isn't allowed.
- Consent: consent to your privacy policy and to the processing of personal data must be explicit, opt-in and freely given. Add a custom question with a link to your privacy regulations in Settings > Properties > Booking Questions. See Custom Questions on Booking Page.
Remove personal data automatically
You can automatically remove personal data from bookings, or delete bookings, after check-out. The settings are in Settings > Account > Privacy.
Data sent to third parties
Beds24 only sends data to third parties on your instruction. You instruct Beds24 to send your guests' data to a third party by activating one of these services. The group concerned is always the guests of controllers who use the interface between Beds24 and that service, unless stated otherwise.
| Interface | Categories of personal data | Recipient | Transfer to third country |
|---|---|---|---|
| Beyond | Booking number, arrival and departure date, name, email address, invoice items | Beyond, 425 2nd St, Suite 602, San Francisco, California 94107, US | Yes |
| Charge Automation (Pre-Arrival-Tools) | Booking number, arrival and departure date, name, email address, invoice items | 10 Dundas St E, Toronto, Ontario, Canada | Yes |
| Feratel Meldeclient | Booking number, arrival and departure date, name, email address | feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck | No |
| Google Hotel Ads | Arrival and departure date, email address | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | No |
| Kashflow | Booking number, arrival and departure date, name, address, invoice items | Iris Software Group Ltd, Heathrow Approach, 470 London Road, Slough SL3 8QY | Yes |
| Mailchimp | Guest name, email address, language, booking number | The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA | Yes |
| Make | The information selected in Make is forwarded to the apps connected in Make | Celonis, Inc., One World Trade Center, 87th Floor, New York, NY 10007, USA | Yes |
| Nuki | Booking number, arrival and departure date, name, email address | Nuki Home Solutions GmbH, Münzgrabenstraße 92/4, 8010 Graz | No |
| Poster POS | Booking number, arrival and departure date, name, email address, invoice items | Poster POS | Yes |
| Pricelabs | Booking number, arrival and departure date, name, address, invoice items | Pricelabs Inc, 73 W Monroe St, Chicago, IL 60603, US | Yes |
| Refund Protect | Time of booking, arrival date, guest name, currency, price of booking | Event Protect, Suite 3 Indigo Blue, 14 Crown Point Road, Leeds, LS10 1ES, United Kingdom | Yes |
| Remotelock/Lockstate | Booking number, arrival and departure date, name, email address | LockState, 2170 South Delaware St., Denver, CO 80223 | Yes |
| RoomPriceGenie | Booking number, arrival and departure date, name, address, invoice items | RoomPriceGenie AG, Sumpfstrasse 18, 6312 Steinhausen, Switzerland | Yes |
| sevDesk | Booking number, arrival and departure date, name, address, invoice items | sevDesk GmbH, Hauptstraße 115, 77652 Offenburg | No |
| TripAdvisor Review Express | Email address, country of origin | TripAdvisor LLC, 400 1st Avenue, Needham, MA 02494, USA | Yes |
| Visit Scotland | Country, postcode, number of guests, price | VisitScotland, Ocean Point One, 94 Ocean Drive, Edinburgh EH6 6JH, Scotland | Yes |
| VRBO/Homeaway (group concerned: guests of controllers who notify VRBO/Homeaway about manual bookings made on any of the VRBO/Homeaway websites) | Booking number, arrival and departure date, language, name, email address, number of guests travelling, booking date, invoice sum, payment status | HomeAway.com, Inc, 11920 Alterra Pkwy, Austin, TX 78758, USA | Yes |
| Xero | Booking number, arrival and departure date, name, address, invoice items | Xero (NZ) Limited, 19–23 Taranaki Street, Te Aro, Wellington 6011 | Yes |
Warning: This information isn't legal advice. If you need legal advice, contact a lawyer.