A HOTEL in Cantabria has been fined €1,500 for turning a customer away after they refused to photocopy their ID.
The Spanish Data Protection Agency (AEPD), handed them the judgment after a guest refused the hotel’s request to scan and photocopy his identity document.
The client booked the room online through Booking.com. They tried to check-in but were stopped by the request for two pictures of their ID.
The hotel asked for a copy and scan of their document when they arrived. However, the guest refused, saying that it was excessive.

They offered to take down the details of the booking and give them to reception to check.
The hotel refused, and the booking was cancelled.
After the incident, the client complained about the situation to the Cantabrian Ministry of Tourism and AEPD. They ruled that the client was entitled to compensation.
They ruled asking for a photocopy of ID is ‘excessive’ and the hotel has no need for some information listed on the card, such as a photo of the client.
According to article 5.1c of the General Data Protection Regulation (GDPR) personal data should be ‘adequate, appropriate and limited to what is necessary for the ends specified.’
While the hotel claimed that the ID photocopy is necessary to check client details, the AEPD concluded that only certain details were required.
Included are: first name, second names, ID number and supporting document number. Also included is the type of document, date of birth, nationality, and the type of document.
The hotel paid the fine, which was reduced by 20%, handing over a total of €1,200.