Version: 1.0., Effective date: Dec. 5, 2019
I. Data Collection
MEWS as data processor
MEWS as data controller
II. Data Processing
MEWS processes your data, if it is necessary for the provision of its services, and generally, in order to fulfill all of its contractual obligations vis-à-vis its customers. Thus, MEWS can process the following data categories:
- Identification details (name, surname)
- Contact details, such as address, phone number, e-mail address
- Booking and accommodation details
- Information about any additional services you order through MEWS Services
- Information about your subscriptions to marketing communication
- Any other information you decide to share with MEWS through MEWS Services
By accessing and using MEWS Services, you enter into an agreement for provision of such services with MEWS. The legal ground for processing this data is Article 6 (1) b) GDPR (performance of contract or pre-contractual relations). The purposes to process your personal data provision of relevant MEWS Services to you.
MEWS processes all personal data contained within your job application, CV, Cover Letter or any other documents you provide us with when applying for a position with us. This includes information such as your name, address, contact details but as well information about your education, professional history, certifications and any other information you include in your application.
MEWS processing of job applications
We can process data for the purpose of evaluation and analyzing of the market, monitoring, evaluation, improving and personalization of MEWS Services, customizing the content of websites according to your preferences, and as well for protection of our legal rights. The legal ground for processing this data is legitimate interests of MEWS according to Article 6 (1) f) GDPR. When data is processed based on the legitimate interest, we always evaluate whether such processing does not constitute an inadequate interference to your rights.
If you apply for any of our job positions at MEWS or its affiliate through MEWS website or other means, we will process the personal data you provide us with for the purposes of evaluating your application and information contained therein to assess whether you are a suitable candidate for any of our open positions. The legal ground for processing this data is Article 6 (1) b) GDPR (performance of contract or pre-contractual relations).. Respective MEWS affiliate to which you applied for a job position shall be considered as data controller within the meaning of Article 4 (7) GDPR for this purpose.
We may keep you CV in our internal database in order to consider you for future positions at MEWS or its affiliates subject to your consent according to Article 6 (1) a) GDPR. You can withdraw your consent at any time in your User account or by sending the message to firstname.lastname@example.org.
MEWS may record the calls with its current or potential clients for the purpose of internal quality checks, as well as for the purpose of handing internal exchange of information about MEWS prospect clients.
When we record the particular phone call between you and MEWS staff, we process the data that are provided by you directly during the phone call or data that are collected automatically such as your phone number. You are always notified about the recording at the beginning of a call and asked to provide your consent. If you do not provide us with the consent, no recording is made. Also, you can withdraw your consent at any time by sending the message email@example.com.
In some instances, legal regulations impose obligations on us under which we are obliged to process personal data, such cases are for instance tax and accounting laws and provision of some data to public authorities based on law. Thus, we can process your data for the purpose of archiving internal records and fulfilling our legal obligations. Legal ground for processing such data is Article 6 (1) c) GDPR.
III. Cookies on our website
Additionally, cookies help us deliver online advertising that we believe is most relevant to you. Cookies are also used for profiling. Cookies can help us to understand how our website is being used, for example, by telling us if you get an error messages as you browse. For more information about cookies please visithttp://www.allaboutcookies.org
When you visit our website, you are informed through a cookie banner placed at the bottom of our website that we collect cookies.
By enabling cookies in your browser, you acknowledge that MEWS may process data for the purposes of website’s personalization, browsing experience optimization, analyzing your website’s behavior and delivering relevant advertisements to you.
We use the following types of cookies: (i) essential cookies, which are essential for the provision of access to our websites; (ii) functionality cookies, which are crucial for the proper functioning of our websites (if these cookies are disabled, our website may not work properly); (iii) performance cookies, which do not identify you individually(until you enter your identification details in any of our forms) but help us to personalize your content in accordance with your actions on our websites; and (iv) targeting/advertising cookies, which help make advertisements more relevant to visitors of our website.
If you wish cookies not to be collected, you may restrict, block or delete the cookies at any time by modifying your browser configuration. Although each browser is parameterized differently, cookie configuration is normally located on the “Preferences” or “Tools” menu. If you turn off cookies, the functionality of our website may be limited (in the case of essential cookies you may not be able to access our website).
If you wish to prevent new cookies from being installed or if you wish to delete existing cookies you can find the instructions on the links below. The exact procedure depends on which browser you are using.
- a) Internet Explorer
- b) Firefox
- c) Google chrome
- d) Safari
IV. Direct Marketing
MEWS may use your data for marketing purposes, i.e. in order to inform you of its services which may, according to your past preferences, be of interest to you. These communications shall strictly adhere to applicable legal regulations.
Advertising and marketing materials of the Contracting or other parties shall be sent to you only if you opted in for these communications during the registration process, via e-mail or otherwise.
Your decision about direct marketing may be withheld in accordance with the opt-out rules described in each marketing-mail or other form of communication. Opting out can be done via changing the settings of your User account or by directly contacting MEWS (please see contact details below). Should you opt out, MEWS shall retain only such data necessary for provision of services in accordance with the rules set out in this policy.
V. Data Retention
MEWS shall not store your personal data for a longer period than what is necessary, given the purposes for which they were provided or collected. If you create a User account we will process your data for the period of your registration with MEWS. Subject to situations set out below, your personal data will be removed once you inform MEWS that you do not wish to use MEWS’ Services anymore. MEWS shall retain only that of your data serving legitimate purposes (e.g., some data is required to be retained by legal regulations, some data is necessary to maintain the mutual relationship with you – for instance billing purposes, etc.) MEWS shall neither collect an excessive amount of personal data nor other information which is not relevant for the purposes for which the personal data is collected.
MEWS processing of job applications
MEWS shall not store data provided by you or collected automatically during the phone calls for a longer period than what is necessary, given the purposes for which they were provided or collected. Moreover, you can withdraw your consent to process your data at any time by sending the message to firstname.lastname@example.org,in which case we will remove your data from our system.
VI. Data Sharing and transfer to third countries
Your personal data shall not be shared or provided without your consent to any third party except for the following situations: (a) data is necessary for provision of services by MEWS to Contracting Parties (i.e. if you place such an order where provision of your personal data is indispensable to a Contracting party – e.g., within the reservation process), (b) data is necessary for provision of services by MEWS to you,(c) MEWS is obliged to provide the personal data on the basis of law or upon order by a public authority, or (d) it is specifically allowed by applicable legal regulations. Should the applicable legal regulations prohibit that, your personal data shall never be shared with any third party.
Personal data as described in letter (a) shall be provided exclusively to the Contracting parties enlisted on the website www.mews.com, or to integration providers or other service providers enlisted on hotel website. The personal data is provided to these processors only based on mutually agreed contractual terms safeguarding security of personal data in line with applicable legal regulations.
Categories of Processors
- data center, hosting
- marketing tools
- tools for analytics and recording
- tools for running polls or surveys
- business management tools
- task management and communication tools
In order to allow you to manage various reservations made with hotels, MEWS may share your personal data with hotels for the sole purpose of making and managing your reservation as well as other services of the hotels available to you through Mews Services. Sharing of any other personal data or information may be shared with hotels based on your consent only.
MEWS processing of job applications
Your personal data shall not be shared or provided without your consent to any third party except for when (a) we use services and applications of third parties to manage HR processes, whereas these third parties are processors of your personal data and act upon instructions of MEWS as the data controller (b) MEWS is obliged to provide the personal data on the basis of law or upon order by a public authority, or (c) it is specifically allowed by applicable legal regulations. Should the applicable legal regulations prohibit that, your personal data shall never be shared with any third party.
IX. Data Security
MEWS shall ensure that your personal data is stored securely. Therefore, it has introduced adequate physical, technical and organizational measures and plans to protect and secure all information collected via services of MEWS.
The aim is to eliminate unauthorized or unlawful processing of your personal data, or accidental, unauthorized or unlawful access, use, transferring, processing, copying, transmitting, alteration, loss or damage of your personal data. Despite all efforts and meeting all rules set out by applicable legal regulations, it is not possible to guarantee the security of your data, if it is transferred or transmitted in an unsecured way.
MEWS protects your data in particular in the following ways:
- Using cryptography, where necessary
- Using password protection, where necessary
- Restricting access to your personal data (i.e. access to your personal data is granted only to those employees or personnel of MEWS for whom the access is indispensable for the purposes described herein).
These measures do not deprive you from your duties to undertake proper steps in order to secure your own personal data. You should, inter alia, regularly change your passwords. On the other hand, you should not, inter alia, use predictable usernames and/or passwords, share your password with other persons, or grant access to your user account and/or disclose your personal data to other persons. MEWS will never ask you for your password in any unsolicited communication. Please notify our data protection officer immediately of any unauthorized use of your account credentials or any other suspected breach of security.
X. Your rights
Where EU General Data Protection Regulation 2016/679 (“GDPR”) applies to the processing of your personal data you are entitled under the GDPR to the following rights:
Right of access
You are entitled to be informed inter alia about what personal data MEWS processes about you, for what purposes, who are the recipients of your personal data.
Right to rectification
You have a right for any of your incomplete, inaccurate or out-of-date personal data to be rectified.
Right to erasure (‘right to be forgotten’)
You are entitled to erasure of personal data that we have collected and processed about you.
Right to restriction of processing
In given cases such as when we process inaccurate personal data about you or you deem the processing as no longer necessary you may ask for a restriction of the processing.
Right to data portability
You have a right to receive personal data you provide us with in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible.
Right to object
You are entitled to object, on grounds relating to your particular situation, at any time to processing of personal data that concerns you and is carried out in public interest or for the purposes of legitimate interests pursued by MEWS, including profiling.
The exercise of your rights may be limited shall MEWS be obliged to keep any of your personal data for the purpose of compliance with legal obligations, for the establishment, exercise or defense of legal claims or any other compelling reasons as provided by the relevant data protection law.
Should you wish to exercise any of your rights you may contact our data protection officer at email@example.com.
XII. Contact Details
Please help MEWS ensure that your data is up-to-date. If you believe that some of the data processed by MEWS is incorrect, please contact MEWS at firstname.lastname@example.org.