Access and deletion
Guest profiles help answer access requests quickly.
Iraq specifics
Data protection for hotels: protect guest data under the CMC
In Iraq, quotes and invoices are in dinars with three decimals, and the setup is planned around that from day one. Guests entrust you with names, addresses and payment details. Your system helps you protect that data under Iraqi law. Guest data deserves care: our hotel software for Iraq and the cloud hotel software are designed around the CMC.
- English and the community languages your customers speak
- USD, tax and local fees
- Data protection under CMC rules
What the CMC means for hotels
The revised Iraq Data Protection Act has applied since 1 September 2023. Hotels process a lot of personal data: names, contact details, travel documents, payment information and preferences. Guests have rights, such as access to stored data or its deletion, unless a legal retention duty applies.
Hotels must inform transparently, protect data appropriately and know where it is stored. A suitable system makes this much easier.
How the system supports you
Guest data is bundled in one profile, so you can answer access requests quickly and delete or anonymise data on request. Roles and access rights limit who sees which data, and the change log shows who changed what and when.
We discuss with you where data is stored and which service providers are involved, so you can word your privacy notice accordingly. Responsibility for complying with the law remains with you as the operator.
Your benefits
Restricted access
Roles and permissions protect sensitive data.
Log
Changes are traceable.
Transparency
We clarify storage location and involved providers with you.
How we work
- 1
Clarify requirements
By e-mail we discuss your property, your workflows and your goals and agree on the scope.
- 2
Build and connect
We build the solution to fit your hotel and connect it to your existing systems.
- 3
Test and launch
We test with real workflows, train your team and only go live when everything is right.
Not legal advice
This page gives general information and does not replace legal advice. For implementing the CMC in your business we recommend consulting a specialist.
Frequently asked questions
Since when does the CMC apply?
The revised Iraq Data Protection Act has been in force since 1 September 2023.
Where is the data stored?
We discuss this with you before setup so you can word your privacy notice correctly.
Can I delete guest data?
Yes, on request data can be deleted or anonymised unless legal retention duties apply.
Related topics
Access rights and audit log
Who may do what in the hotel system? Roles and permissions, change log and secure login for Iraqi hotels. Quote by e-mail. Arabic and English, CMC privacy-aware.
Learn moreOnline check-in
Online check-in and digital forms for Iraqi hotels: guests fill in their details before arrival and reception saves time. Data protection under CMC rules.
Learn moreQi Card and payment methods
Online payment for direct bookings: Qi Card, credit card and invoice for Iraqi hotels, with deposit and payment link. Quote by e-mail. Qi Card ready, Arabic and English.
Learn more