Recital 15 of the GDPR states that it only applies "to the processing of personal data by automated means, as well as to manual processing, if the personal data are contained or are intended to be contained in a filing system."

So if you don't file the sign in book, it's out of scope of the GDPR.