(1) The managers of commercial accommodation or institutions as referred to in section 29 (4) are required to have on hand a supply of special registration forms. They may provide additional technical devices to fulfil the registration requirement under section 29 (5) electronically. They are to see to it that data subjects
1. meet the obligations under section 29 (2) or the stipulations relating to the chosen electronic procedure under subsection (5) and
2. meet the obligations under section 29 (3) and (4) sentence 3.
(2) Subject to subsection (3), the registration forms contain only the following data:
1. date of arrival and planned departure,
2. family name,
3. given names,
4. date of birth,
5. nationalities,
6. address,
7. number of foreign nationals travelling together and their nationality and
8. serial number of the recognised and valid passport or passport substitute.
The managers of commercial accommodation or institutions as referred to in section 29 (4) are required to check the information on the registration form against the information in the identity document. Any discrepancies are to be noted on the registration form. If persons staying in commercial accommodation do not present an identity document or a valid identity document, this is to be noted on the registration form. In the case referred to in section 29 (5) no. 1, the payment method’s specific allocation number is to be stored together with the data referred to in sentence 1.
(3) Land law may stipulate that additional data may be collected using the registration form to collect tourist and resort taxes.
(4) The persons obligated under subsection (1) are required to retain the filled-out registration forms for one year starting from the day of departure of the person staying in commercial accommodation and to destroy them no later than three months after the retention period has ended. Where the registration requirement is met electronically, the retention periods referred to in sentence 1 apply to the storage and deletion of data collected as required by section 29 (5). To carry out their tasks, the authorities determined by Land law and the authorities referred to in section 34 (4) sentence 1 nos. 1 to 5 and 9 to 11 are, on request,
1. to be presented with the registration forms signed by hand in accordance with section 29 (2) sentence 1, for inspection, and
2. to have the machine-readable data collected electronically in accordance with section 29 (5) made available to them.
(5) If the registration procedure is conducted electronically, the persons obligated under subsection (1) are required to implement appropriate technical and organisational measures as referred to in Articles 24, 25 and 32 of Regulation (EU) 2016/679 to ensure that the data designated in subsection (2) are only processed in accordance with the provisions of subsection (4) and section 29 (5).