Appointment as Data Processor (DPA)
When an accommodation property uses the Octorate services, such as PMS, Channel Manager, Booking Engine, OctoSite and OctoAgent, it is the controller of its guests’ data and Octorate processes them on its behalf as processor.
The relationship is governed by the appointment as Data Processor, which the Customer accepts with the Privacy Annex on first access to the platform, together with the Terms and Conditions. The appointment forms part of the contract.
The Service Processing Record is the technical annex to the appointment. It describes purposes, categories of data subjects and of data, authorised providers, transfers, retention periods and security measures, including those required by the NIS2 legislation.
Download the appointment with the Service Processing Record (PDF)
Changes to the list of providers are communicated to Customers as provided for in the appointment. Previous versions of this page and of the documents are available on request by writing to legal@octorate.com.
For the data that Octorate processes for its own purposes, the Zucchetti Group’s privacy notice, at octorate.com/privacy-policy/, and Octorate’s privacy notice apply.
For questions about data processing, write to legal@octorate.com. Octorate’s DPO can be contacted at dpo@octorate.com.