I haven't yet reviewed all of our updates Hotel contract terms and conditions, but we've create a Data Protection information help sheet for our staff to use when working with outside vendors. We seek information on the processing of personal data and its storage (collection, transfers, if it is shared, and when it is deleted).
I'm not sure our team would want me sharing our specific language, but below would be an example I saw recently of contract terms:
--- will be financially and legally responsible for damages resulting in ---'s illicit or willful mis-use of ---- including but not limited to hacking attempts, attempts to gain unauthorized access to ---- , directories, and/or encrypted data, attempts to change system generated documents and reports, attempts to change the text of email notifications, changes and/or any mis-representation of attached files. ---- and/or its agents will prosecute any such attempts to the fullest extent of the law.
------------------------------
Geoffrey Seiler
Registrar and Travel Coordinator
International Baccalaureate Organization (IBO) .
------------------------------