Legal basis and regulatory compliance (RD 933/2021)
Why registering guests is mandatory in Spain
In Spain, collecting and submitting guests' identification details is not optional. It is a legal obligation for all tourist accommodation under Royal Decree 933/2021.
EuroCheckin helps you meet these obligations simply, securely and automatically, including the integration with SES.Hospedajes.
Royal Decree 933/2021
The legal framework for guest registration in Spain.
Guest registration in Spain is governed by Royal Decree 933/2021 of 26 October, which sets out obligations for tourist accommodation.
The regulations require:
Collect guests' identification details
Submit the guest reports to the competent authorities (SES.Hospedajes)
Store the data collected securely
Keep the records for a minimum period of three years
This Royal Decree replaced the previous systems and unified the guest reporting procedure nationwide.
Who must comply with the regulations?
Royal Decree 933/2021 applies to all providers of tourist accommodation services in Spain, including:
Tourist apartments- Holiday rental properties
- Hotels
- Guesthouses
- Property managers and agencies
If you offer paid accommodation to guests, you are legally required to comply with the regulations, regardless of:
- The number of properties you manage
- The booking platform you use (Airbnb, Booking.com, etc.)
- Whether check-in is in person or remote
What data must be collected?
Royal Decree 933/2021 requires tourist accommodation in Spain to collect certain identification details from guests. These include:
Identity document details (DNI, passport or other valid document)
Personal identifying information (first name, surname, nationality, date of birth)
Data relating to the stay (check-in date, check-out date, accommodation details)
The data must be reported through the official SES.Hospedajes platform within the deadlines set by the regulations.
Automatic submission to SES.Hospedajes
Guest reports must be submitted to the official platform of the Ministerio del Interior: SES.Hospedajes. Here is how EuroCheckin handles the process:
Guest details are collected through a secure online check-in form
Guest reports are generated and submitted to SES.Hospedajes automatically
Submission takes place on the guest's date of arrival, as the regulations require
All submissions are monitored in real time
You are only notified if a problem is detected
No manual uploads. No duplicate data entry. No needless errors.
Data retention requirements
Royal Decree 933/2021 states that tourist accommodation in Spain must keep the guest register for a minimum period of three (3) years.
The regulations require that:
- Records are stored securely
- Data is available if requested by the competent authorities
EuroCheckin automatically ensures:
- Retention of the data for the mandatory legal period
- Automatic enforcement of the retention policies
- Secure deletion of the data once the retention period has ended
Inspections and checks
Under Royal Decree 933/2021, tourist accommodation must be able to produce the mandatory data when the competent authorities request it.
With EuroCheckin:
- The data required by law is stored securely and correctly
- Records are available immediately
- The information is retained for the mandatory legal period
- Data can be produced easily in the event of an inspection
This reduces the risk of penalties and the pressure of an inspection.
How EuroCheckin ensures GDPR compliance
EuroCheckin is built in line with the General Data Protection Regulation (GDPR), applying its legal principles and advanced technical measures.
GDPR principles applied:
- Lawfulness, fairness and transparency
- Purpose limitation (the data is used solely for the mandatory guest registration)
- Data minimisation (only the information required by law is collected)
- Accuracy of the data stored
- Storage limitation
- Integrity and confidentiality
Technical and organisational measures:
- Encrypted data transmission (SSL/TLS)
- Secure infrastructure located in the European Union
- Role-based access control
- Audit-ready data management
- Automatic retention and deletion policies
- Continuous security monitoring
Consequences of non-compliance
Failing to meet guest registration obligations in Spain can lead to:
- Administrative penalties
- Official requests from the authorities
- Increased inspections
- Penalty proceedings
- Legal and reputational risks
The specific penalty depends on:
- The seriousness of the breach
- Repeat offences
- Errors in the data submitted
- Late submissions
- Failure to keep records for the mandatory period
GDPR and personal data protection
In addition to the Spanish guest registration rules, the processing of guest data must comply with:
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD)
Roles under the GDPR:
- The accommodation provider acts as the Data Controller
- EuroCheckin acts as the Data Processor
How EuroCheckin helps you comply with the regulations
EuroCheckin is designed to:
Automate legal guest registration
Ensure guest reports reach SES.Hospedajes on time
Avoid incomplete data or errors in the register
Keep the records securely for the mandatory legal period
Compliance does not depend on reception staff or spreadsheets.
It is handled automatically by the system.
Legal compliance made simple
Spanish regulations are strict, but complying with them does not have to be complicated.
EuroCheckin turns your legal obligations into an automatic, secure and error-free process.