GDPR does apply. You do not need any agreement from your guests or another reason, because the data collection is required by law. But you still have to deal wi

GDPR does apply. You do not need any agreement from your guests or another reason, because the data collection is required by law. But you still have to deal with GDPR requirements around deletion (after you don't need it anymore), access (give it to the wrong person without the appropriate paperwork and you are on the hook), security (have a breach or a unhappy employee and...), notification, data protection officer, inquiries etc.