GDPR in the hotel industry 2