My question is on GDPR compliance. I have an agency in Germany with hotel clients abroad. I’ve been asked to share the data from all the clients I meet on their behalf (either on a personal meeting or at trade shows). Is there a best practice of how to request client approval that I may share their data with my hotel abroad?
Legal questions are often multifaceted and there are very rarely general answers. They depend heavily on the country, applicable legislation, and data and whether it’s B2B or B2C. You should on any case consult legal professionals to be on the safe side. My reply does not constitute legal advice.
Very generally, you usually cannot share data of persons unless there is a legal basis, which often has to be an explicit consent.
If you want to approach this with out a legal professional, I’d recommend evaluating a one-time email send, asking for confirmation of the recipients for their data to be shared. Anything else would have a very high risk.
Thanks for the fast reply and advise. As this is recurrent issue, ie. every time I am travelling on behalf of a client, can I set up a CTA or similar requesting their consent? Or is there an app that can be used for clients to enter their data, signature and agreement for their data to be shared within the specified parties?