Holiday apartment let & GDPR

Emily_Joy

OH and I decided to go to Spain for a little break. We booked what appeared to be an 2 - room apartment with a kitchen on trip dot com. The booking was not refundable. The day before arrival we were contacted by someone who introduced themselves as "a manager" on whatsapp asking to send them passport photographs, UK address confirmation and a photo of two sides of a credit card. My OH refused to send these on whatsapp and offered to provide these in person. The other side said that the only option is to send this via whatsapp and until we give those details they will not give us access. The trip agent was pretty useless - they simply informed us that this is a police requirement and it is worded on their website as "online check-in" and we should do as we are told. 

Another complication was that in the owners view the apartment could accommodate 4 people, they didn't believe there are only 2 of us and kept threatening sending the police if "a random check"  will reveal that someone else is staying there.

After spending over 8 hours trying to resolve this, we gave up and found another place to stay. 

I suppose there is very little chance for us to get money back, and my main question is whether this kind of online check-in where you have to give your personal data to random strangers in order to be given access code is a new norm? 

flaneurs_lobster

Was your replacement accommodation also in Spain? Did they also ask for the up-front ID and CC details for "online check-in"?

Emily_Joy

flaneurs_lobster said:

Was your replacement accommodation also in Spain? Did they also ask for the up-front ID and CC details for "online check-in"?

The replacement accommodation was also in Spain. We booked it after spending a couple of hours at the airport upon arrival talking on whatsapp with the representative of the (ex-)host and went directly there. This one had 24-hours reception desk, and although we did receive an email advising us to complete online check-in on some website, we read this email only after we have had physically checked in.  So I don't know. 

flaneurs_lobster

Which! have an article about the requirements for travelling to Spain after the recent rule changes.

https://www.which.co.uk/news/article/can-i-travel-to-spain-from-uk-aaZSk8j2LdPj

The rules about the data to be collected by hotels, campsites etc have been enhanced but the basic data is much as it always was. Nothing there about supplying data prior to check-in but I guess when the accommodation may be an AirBnB-type apartment then there may not be a hotel-style reception to take the details and therefore this data would need to be collected prior to arrival?

Isn't it just admin? Particularly on a short break like a weekend you don't want to be bothered with someone seeking you out during your trip to take your details? Get the data collection out of the way prior to the trip.

Don't like the credit card details being taken, needed for ID? No.

There's a particular reference to hotels copying/scanning your passport - they shouldn't if it's just to verify ID.

Not sure why you are citing GDPR in your title, that deals with what happens to your personal data once it's been collected, not the actual collection. 

Emily_Joy

flaneurs_lobster said:

Which! have an article about the requirements for travelling to Spain after the recent rule changes.

https://www.which.co.uk/news/article/can-i-travel-to-spain-from-uk-aaZSk8j2LdPj

The rules about the data to be collected by hotels, campsites etc have been enhanced but the basic data is much as it always was. Nothing there about supplying data prior to check-in but I guess when the accommodation may be an AirBnB-type apartment then there may not be a hotel-style reception to take the details and therefore this data would need to be collected prior to arrival?

Isn't it just admin? Particularly on a short break like a weekend you don't want to be bothered with someone seeking you out during your trip to take your details? Get the data collection out of the way prior to the trip.

Don't like the credit card details being taken, needed for ID? No.

There's a particular reference to hotels copying/scanning your passport - they shouldn't if it's just to verify ID.

Not sure why you are citing GDPR in your title, that deals with what happens to your personal data once it's been collected, not the actual collection. 

Thanks, the article is very helpful. I would actually expect the host to meet me upon arrival, take a look at my passport if they wish, explain one or two things about accommodation and give me the keys in person. 

Maybe it is not GDPR, perhaps it should be Spain’s data protection authority, AEPD.

flaneurs_lobster

Emily_Joy said:

Thanks, the article is very helpful. I would actually expect the host to meet me upon arrival, take a look at my passport if they wish, explain one or two things about accommodation and give me the keys in person. 

Maybe it is not GDPR, perhaps it should be Spain’s data protection authority, AEPD.

TBH, I've little experience of using apartments for holiday accommodation, prefer hotels. Would it not be a rather posh booking that included a meet'n'greet? I thought most of this market just gave you the combination of a key box and let you get on with it, but maybe it's different in Spain.

Are we talking blocks of holiday self-catering apartments or a repurposed home in an otherwise residential area? (the sort of thing that has picket lines forming in bits of Barca)

silvercar

Emily_Joy said:

flaneurs_lobster said:

Which! have an article about the requirements for travelling to Spain after the recent rule changes.

https://www.which.co.uk/news/article/can-i-travel-to-spain-from-uk-aaZSk8j2LdPj

The rules about the data to be collected by hotels, campsites etc have been enhanced but the basic data is much as it always was. Nothing there about supplying data prior to check-in but I guess when the accommodation may be an AirBnB-type apartment then there may not be a hotel-style reception to take the details and therefore this data would need to be collected prior to arrival?

Isn't it just admin? Particularly on a short break like a weekend you don't want to be bothered with someone seeking you out during your trip to take your details? Get the data collection out of the way prior to the trip.

Don't like the credit card details being taken, needed for ID? No.

There's a particular reference to hotels copying/scanning your passport - they shouldn't if it's just to verify ID.

Not sure why you are citing GDPR in your title, that deals with what happens to your personal data once it's been collected, not the actual collection. 

Thanks, the article is very helpful. I would actually expect the host to meet me upon arrival, take a look at my passport if they wish, explain one or two things about accommodation and give me the keys in person. 

Maybe it is not GDPR, perhaps it should be Spain’s data protection authority, AEPD.

Often the key is left in a key safe and you have no contact with the host.

I understand the need for a deposit, after all you are being entrusted with the property.  Though with the provision of digital credit cards from the likes of Wise/ Monzo/ Revolut I don’t know how hosts can move with the times. 

user1977

Lots of AirBnBs have virtual check-in, so yes sending your ID online is normal (and it is a legal requirement for them to gather your ID).

Emily_Joy

user1977 said:

Lots of AirBnBs have virtual check-in, so yes sending your ID online is normal (and it is a legal requirement for them to gather your ID).

I have been using AirBnB since 2014. It was always about sharing your home with someone so to me what you describe sounds very nonpersonal, "just business, nothing else". When I want something like this, I book a hotel/a hostel. 

unforeseen

I stay in apartments (not Airbnb) when I go to Spain. With the new licensing regime some owners ask for the information before arrival and some on arrival, it is all dependent on your arrival time. For my last one 
I had to provide the info beforehand as my flight didn't get in until 9:30PM so  takeover was remote.
When booking you must ensure that they provide the licence details within the ad. 

Emily_Joy

flaneurs_lobster said:

Emily_Joy said:

Thanks, the article is very helpful. I would actually expect the host to meet me upon arrival, take a look at my passport if they wish, explain one or two things about accommodation and give me the keys in person. 

Maybe it is not GDPR, perhaps it should be Spain’s data protection authority, AEPD.

TBH, I've little experience of using apartments for holiday accommodation, prefer hotels. Would it not be a rather posh booking that included a meet'n'greet? I thought most of this market just gave you the combination of a key box and let you get on with it, but maybe it's different in Spain.

Are we talking blocks of holiday self-catering apartments or a repurposed home in an otherwise residential area? (the sort of thing that has picket lines forming in bits of Barca)

During our recent trips we have always had what you call "meet & greet" service, our host in Podgorica even gave us a free lift to the airport on our way back. I suppose market has changed a lot and one has to look carefully for compulsory online check-in especially if you don't feel comfortable with it. I also find it a bit odd, to be honest, as with recent technology it is pretty easy to create a picture of whatever document, so it is easy for fraudsters.