Privacy Policy

When you use Guest OS or interact with our website, we may collect the following categories of personal data:

Contact information: name, email address, phone number and company name, provided when you request a demo, create an account or contact us.

Usage data: anonymised information about how you interact with our platform, including pages visited, features used and session duration.

Device and technical data: IP address, browser type, operating system and device identifiers, collected automatically through cookies and similar technologies.

Guest data (processed on behalf of our customers): Guest OS processes guest information such as names, booking details, ID verification data and communication history on behalf of hospitality properties. In this context, the property is the data controller and Guest OS acts as the data processor.

We use personal data for the following purposes:

To provide and improve the Guest OS platform and services.

To communicate with you about your account, demo requests or support enquiries.

To send product updates and relevant information (you can opt out at any time).

To ensure the security, stability and performance of our systems.

To comply with legal obligations, including Dutch and EU regulations.

We process personal data based on one or more of the following legal grounds under the GDPR:

Contractual necessity: processing is required to provide our services to you or your organisation.

Legitimate interest: to improve our platform, ensure security and communicate with prospective customers.

Consent: where you have explicitly consented, for example when subscribing to updates.

Legal obligation: where processing is required to comply with applicable laws and regulations.

We do not sell personal data. We may share data with:

Sub-processors: trusted service providers who help us deliver our platform (e.g. cloud hosting, email delivery). All sub-processors are bound by data processing agreements.

Legal authorities: when required by law or to protect the rights, property or safety of Guest OS, our customers or the public.

Our infrastructure is hosted within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Account data is retained for the duration of your relationship with Guest OS and deleted within 90 days of account closure.

Guest data processed on behalf of properties is retained according to the data processing agreement with each customer.

Under the GDPR, you have the right to:

Access, correct or delete your personal data.

Restrict or object to processing.

Request data portability.

Withdraw consent at any time (where consent is the legal basis).

Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, please reach out through our contact page.

Our website uses cookies and similar technologies to improve your experience and analyse usage. We use:

Essential cookies: required for the website to function properly.

Analytics cookies: to understand how visitors interact with our website (anonymised).

You can manage your cookie preferences through your browser settings.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include encryption in transit and at rest, access controls, regular security assessments and incident response procedures.

We may update this privacy policy from time to time. When we make material changes, we will notify you through our platform or by email. The date at the top of this page indicates the most recent update.

If you have questions about this privacy policy or how we handle your data, please use the button below to get in touch.

Guest OS (a brand by Hospitality Europe B.V.)