Every asset has a name. The group has one gravity.
Hotel groups, resort operators, residential and commercial portfolios and the developers building whole districts sell the same thing at every scale: a place a person will trust with a night, a season or a lease. That trust is made at the front desk, on the phone at two in the morning, in the campaign that fills the shoulder season and in the record of who stayed and what they asked for. Altuon builds the systems that hold it together across properties, languages and time zones without flattening what makes each address worth its own name.
What is at stake
The portfolio is the problem and the point. A group that owns or manages many properties has as many identities as it has addresses, and each of them is right to want one: a lakeside hotel and a business tower do not speak in the same voice, and a guest who chose the first did not choose the group. Yet the loyalty programme, the reservations line, the owner reporting and the procurement contract all belong to the group. The architecture of the identity, the data model of the guest and the routing of the phone have to answer the same question in the same way: what belongs to the property and what belongs to the whole. Where that question is left to each general manager, the group ends up with fifteen websites, fifteen guest records and no gravity at all.
The buyer and the operator are often different companies. An owner holds the asset; an operator runs it under a management agreement; a franchisor lends the flag; a property manager collects the rent and answers the tenant. Each party keeps its own systems and has its own view of who the guest or tenant is. A service line, a campaign or a brand refresh that works for one of them and breaks the reporting of another does not survive the next owners' meeting. The work has to be designed with the management agreement and the franchise standards open on the table, because they decide who may hold which data, who signs off a promotion and whose name appears where.
The guest record is personal data in its most literal form. Where a person slept, who they travelled with, what they ate, when they arrive home and which door their key opens is information that four regimes now protect. The revised Swiss Federal Act on Data Protection requires a lawful basis, proportionality and a register of processing, and reaches any group with Swiss guests or Swiss properties. The GDPR governs the European guest wherever the hotel stands, and treats the cross-border transfer of a reservation as a transfer that needs a mechanism. Jordan's Personal Data Protection Law sets out consent, purpose limitation and the rights of the data subject for the region's fastest-growing destinations. In the United States, state privacy laws give residents rights of access, deletion and opt-out of sale and of targeted advertising, and a loyalty programme that shares data with partners has to be built with those rights in mind rather than retrofitted after a complaint. Guest data collected for a stay and reused for a campaign without a basis is the most common failure in this industry, and the least visible until it is public.
The cycle is seasonal, the assets are long-lived and the launch is one chance. A ski resort sells its winter in the autumn; a beach property sells its summer in the spring; a new residential tower sells off-plan and has one window in which the market decides what it thinks. Campaigns are measured on bookings and enquiries because those are what the owner is paid in, and a channel that produces impressions and no occupancy is a cost with a dashboard. Meanwhile the property-management core, the reservation system and the channel manager were installed with the building and will outlive three marketing directors. Anything Altuon builds has to work with those systems as they are, and be replaceable when they finally change.
Practices that apply
- Voice agentsCoreReservations, concierge requests and tenant services answered by voice in the languages the guests and tenants actually speak, at the hours they actually call, with the booking created or the maintenance ticket raised inside the property's own systems and a handover to the front desk or the property manager that carries the whole context of the call.
- Brand and identityCoreIdentity architecture for portfolios in which every asset wants its own name and the group still needs one gravity: rules for which name is on the door, which is on the loyalty card and which is on the management agreement, written so that the next acquisition, rebrand or new tower is decided by the system rather than reopened by the owner.
- Advertising and growthCoreSeasonal and launch campaigns across languages and markets, run on consented first-party guest and enquiry data, measured on bookings, average rate and qualified enquiries rather than impressions, with the incrementality of each channel tested against the occupancy the property would have had anyway.
Regional notes
- Europe and DACH
- Swiss alpine and lakeside hospitality trades on discretion, longevity and the guest who returns for thirty years. The record of that guest is kept in Switzerland unless there is a written reason for it not to be, is handled under the revised FADP with the proportionality the Act demands, and is never sold to a partner the guest has not heard of. Service lines answer in Swiss German, French, Italian and English and know the difference between a regular and a first-time caller without saying so. Owners are often families and foundations, and the identity work is done with the awareness that a name on a hotel may have been on it for a century.
- Middle East and North Africa
- Jordan and the Gulf are building destinations, not hotels: whole coastlines, heritage sites and new districts planned as one development with dozens of assets, each of which will carry its own flag and all of which have to sit under one master identity that the development authority and the operators can both live with. The work here is partnership at scale: Arabic-first service lines that handle the dialects of the region as well as the English of the international guest, guest and resident data held in-country under Jordan's Personal Data Protection Law and the Gulf's own regimes, and a launch programme that treats the first season as the reputation the destination will carry for a decade.
- North America
- US hospitality is scale and loyalty. Groups run hundreds of properties under several flags, the loyalty programme is the group's most valuable asset and its largest privacy exposure, and the guest expects to be recognised across a brand family they may not know is one company. State privacy laws decide how programme data may be used for targeted advertising and shared with partners, and the rights of access, deletion and opt-out have to be honoured across every property system that holds the guest. The work moves at the pace of the revenue calendar and leaves a record that the general counsel can defend.
Service regions
Europe and DACH
Registered office
Turin, Italy
Representative engagement
- Advertising and growthSeptember 9, 2026The end of the agency-of-record modelThe agency of record was built for a world where production was scarce and media was bought by hand. Both are gone. What replaces it is an advertising system the client owns, and a firm paid to build it rather than to run it forever.
- BrandSeptember 9, 2026Brand identity as infrastructureAn identity that lives in a PDF is decoration. An identity that lives in tokens, templates and a governed release process is infrastructure, and it is the only kind that survives a merger, a rebrand of a subsidiary or the next chief marketing officer.
Questions we are asked
Who owns the guest and tenant data, and can it be kept in a specific country?
The owner, operator or manager that collected it under its own lawful basis owns it; Altuon is a processor and the agreement says so. Where the management or franchise agreement splits that ownership between parties, the data model is designed to respect the split rather than to merge records the parties are not entitled to merge. The data plane is decided per system in the Define phase and recorded in the architecture register: a Swiss region, the European Union, Jordan or a Gulf state, the United States or the group's own data centre. Speech, language and recommendation models run inside that plane; the control plane holds policy, identity and metrics but never a guest record. The residency commitment is costed in the proposal so that it is a decision rather than a hope.
How does a voice agent take a reservation or a maintenance request without making a promise the property cannot keep?
Policy is enforced outside the language model. The model understands the caller and proposes an action; a policy engine decides what may be executed against the property-management or reservation system, at what rate, for which room categories and within which cancellation terms, all of which are written with the revenue and operations teams and versioned like code. Anything the policy does not permit is a handover to the front desk, the reservations team or the property manager with the full transcript and the caller's history, never an improvised answer. Every release is tested against the real questions the property receives, including the ones designed to talk the agent into an upgrade it is not allowed to give.
We have fifteen properties on three property-management systems. Do we need to replace them first?
No. The service line, the guest data model and the campaign measurement are built on an integration layer that reads from and writes to the systems the properties already run, one property at a time, with reconciliation against the source of truth. The layer is documented and belongs to the group, so a later consolidation of the property-management cores happens behind it without the guest noticing. Where a core is at the end of its life, the Discover phase says so and gives the group a migration path with dual-running and rehearsed rollback, but that is a separate decision and is priced separately.
How is the identity work kept from erasing what makes each property distinct?
By writing the rules before touching a single logo. The architecture defines which elements are the group's and which are the property's: typically the group holds the loyalty programme, the reservations line, the owner and investor communications and the legal name, while the property holds its own name, its own visual world and its own voice with guests. Endorsement, the way the group appears on the property's materials, is specified by rule and by degree, so a heritage hotel can carry the group lightly and a new business tower can carry it plainly. The output is a system with a governance model, not a set of files, and it is designed so that the next acquisition fits into it rather than reopening it.
How do you measure a seasonal or a launch campaign, and who owns the accounts?
Measurement is expressed in the units the owner is paid in: rooms booked, average daily rate, length of stay, qualified enquiries and viewings for a launch, leases signed for a portfolio. Incrementality is tested by holding back comparable properties or markets, so the group learns what the campaign added over the occupancy it would have had anyway, and channel budgets are moved on that evidence. All advertising accounts, audiences, creative files and reporting are held in the group's own name from the first day; Altuon operates them under delegated access that can be withdrawn at the end of the engagement, and the first-party data that feeds them is used only under the basis on which it was collected.
What happens to the systems and the data when the engagement ends?
Everything built for the group is assigned to the group on payment: the integration layer, the voice agent's policy configuration and evaluation sets, the identity system and its governance documents, the campaign structures and the reporting. Exit is planned in the Define phase and rehearsed before the last invoice: the handover includes the source, the infrastructure definitions, the runbooks and a period of transition support at a stated rate. Guest and tenant data held by Altuon as a processor is returned or deleted at the group's instruction and confirmed in writing, and the sub-processor agreements end with the engagement.
Bring us the portfolio, not the property.
Whether the question is one service line for thirty hotels, one identity for a destination still on the drawing board or one campaign measured in occupancy rather than reach, the Discover phase begins with the assets and the agreements that govern them and ends with a register the owners and the operators can both sign. Request a proposal, or book a briefing for the executives who will be asked to approve it.