Staying somewhere generates a substantial data trail across several organisations.
Registration requirements
Identity details required by law in many countries.
Which is why passports are requested.
Loyalty programmes
Preferences and history retained across stays.
Booking platforms
Intermediaries holding data separately from the property.
Which is why marketing arrives from both.
Data protection rights
Access and deletion rights in several jurisdictions.
Which apply to travel companies as to anyone else.
Where the data actually goes
The property, the brand's central systems, the booking platform if one was used, the loyalty programme, and in many countries a legally required guest register accessible to authorities.
Which is more organisations than a guest typically imagines.
Each holds a different subset for a different period, and the rights you have over each differ accordingly.
Marketing consent
Separate permissions for property and platform.
Which is why unsubscribing from one does not stop the other.
Payment data
Card details held for incidentals.
Which should be handled to payment industry standards.
Data breaches
Major hotel groups having suffered significant ones.
Which affected very large numbers of guests.
Exercising rights
Access and deletion requests where the law provides them.
Practical steps
Decline marketing consent you do not want, use a card rather than leaving details on file where possible, and check what a loyalty programme retains.
Which are small choices made at check-in and booking.
Guest registration data required by law cannot be declined, and knowing that saves an unproductive conversation at the desk.
Wifi terms
Network access granted in exchange for data.
Which is worth reading once.
Room technology
Connected devices in rooms collecting usage data.
Which is increasingly common.
Breach notification
Obligations to inform affected individuals.
Which several major incidents have tested.
A general note
Data protection law differs substantially by jurisdiction.
Why the travel industry is so hard to see into
Almost every part of a holiday is sold by one company, delivered by another and regulated by a third, frequently across several countries. The traveller deals with a single price and a single confirmation, and the arrangements behind it are invisible.
That structure is not designed to confuse anyone. It exists because travel involves aviation, accommodation, ground transport, insurance and consumer protection, and no single business does all of those well. The consequence is that when something goes wrong, working out who is responsible is genuinely difficult, and the answer frequently depends on how the booking was assembled rather than on what actually happened.
The questions worth asking before booking
Who is the organiser, what protection applies if a supplier fails, what exactly is included in the price, and what happens if plans change. Four questions, all answerable at the point of booking, and between them they cover most of the situations that produce complaints afterwards.
None of this makes travel more complicated than it is. It makes visible a set of decisions that are being made whether or not the traveller notices them.
A general note
Consumer protection, aviation passenger rights, classification schemes, driving rules and insurance regulation all differ substantially between countries, and change. National regulators and consumer bodies publish the applicable rules, and they are the authoritative source for anything with money or a legal position attached.
One habit worth adopting
Before paying for anything in travel, read the part of the confirmation that describes what happens if it does not go ahead. Not the terms in full, just that section.
It takes two minutes, it is where the meaningful differences between apparently similar offers actually sit, and it is the only part of the documentation that matters on the day something goes wrong.
A closing thought
Travel is one of the few substantial purchases most people make without reading anything about how it is arranged. That is understandable, because the arranging is meant to be invisible and usually is.
The occasions when it becomes visible are the occasions when something has gone wrong, and that is the worst possible moment to be learning who is responsible for what. Ten minutes of reading before booking is not a burden, and it is the difference between having a position and hoping someone will help.
Where to find reliable information
National tourist boards, aviation regulators and consumer protection bodies all publish material aimed at travellers rather than at the industry, and it is free, specific and rarely promoted. It is considerably more useful than the general advice that circulates, and it has the advantage of being current for the country you are actually going to.
A final practical note
Almost everything above rewards a small amount of preparation and punishes none. Checking entry requirements, reading what a booking includes, and knowing what protection applies takes an hour spread across the weeks before a trip.
It is the least enjoyable part of planning a holiday and it is the part that determines whether an ordinary problem stays ordinary.