I made an advanced purchase booking at the Duo Hotel Lisbon last week for a stay in February and received this email today

”I’m reaching out regarding your upcoming reservation with us (confirmation number xxxxxxxxxxx). As this booking was made under an advance purchase rate, full prepayment is required prior to arrival. Please note that, in accordance with GDPR regulations, we are not allowed to charge the full stay amount directly to the credit card provided during the reservation process.



To complete the payment securely, kindly click on the link below and follow the instructions



Kindly note that if the payment is not proceeded in 48h, we will cancel the reservation.”

I have never received such a request before for any reservation and the GDPR regulations came into effect in May 2018, dealing with privacy. My credit card details were all provided when I booked on the Hilton website.