How to comply with Royal Decree 933/2021 if you are an accommodation intermediary

Record-keeping, reporting to SES.Hospedajes, penalties and data protection: what bedbanks, agencies and platforms need to do.

Passport and guest registration form at a hotel reception sent to the SES.Hospedajes platform, with a data protection shield

Since Royal Decree 933/2021 came into force, many TravelTech companies are still unsure whether it applies to them or how to comply. We receive a steady stream of enquiries from bedbanks, travel agencies and digital platforms that need clarity on their obligations.

If you manage accommodation bookings in Spain, you need to know the record-keeping and reporting requirements of this regulation to avoid penalties of up to €30,000.

What Royal Decree 933/2021 requires

  • Record-keeping. You must collect information on guests, bookings and payments and keep it for three years from the end of the service.
  • Reporting. Part of that information must be sent to the Ministry of the Interior through the SES.Hospedajes platform.
  • Penalties. Failing to keep the records or to submit the mandatory reports may amount to a serious or minor infringement.
  • Data protection. The whole process must comply with the General Data Protection Regulation (GDPR).

Our practical guide to Royal Decree 933/2021

We have prepared a guide that explains, step by step:

  • Who is required to comply with the Royal Decree.
  • How to register on the Ministry of the Interior’s accommodation platform.
  • What data must be kept and for how long.
  • What the penalties are and how to avoid them.
  • The key data protection points to avoid legal risk.

Download the guide to Royal Decree 933/2021 (PDF)

Frequently asked questions

Who does Royal Decree 933/2021 apply to?

To accommodation providers and also to intermediaries that manage accommodation bookings in Spain, such as bedbanks, travel agencies and digital platforms.

How long must the data be kept?

Three years from the end of the contracted service (Article 5.3 of Royal Decree 933/2021).

How is the data reported?

Through the Ministry of the Interior’s SES.Hospedajes platform.

Sources

This article is for information only and does not constitute legal or tax advice.

How we can help

Lawyers for bedbanks GDPR and data protection Regulatory advice

Keep reading

All articles
Seafront holiday apartments, a calendar showing weeks of use and a contract with a five-year deadline Timeshare contracts for tourist accommodation: what changes with the 2025 reform Organic Law 1/2025 brings legal certainty to timeshare contracts and sets a five-year deadline to challenge earlier contracts. Read article Biometric control at an airport, facial recognition and a chart showing rising technology investment The technology boom is driving the transformation of the travel sector The Amadeus study forecasts 14% more technology investment in travel, with machine learning, data and biometrics as priorities. Read article A parent company and two group subsidiaries linked by a signed intercompany agreement Intercompany agreements: easy to forget, costly to ignore Why TravelTech companies expanding internationally need intercompany agreements and a written transfer pricing policy. Read article

Does this affect you? Let’s talk.

30 minutes with the team to look at your case and how best to approach it.

Book a 30-minute call

Or, if you prefer, email us and we’ll get back to you.

information@mylegalinbox.com