Mews privacy policy

Version: 1.0., Effective date: Dec. 5, 2019

This “Privacy policy” describes the way MEWS SYSTEMS BV, Company ID: NL 856548327B01, reg. office at Kleine -Gartmanplantsoen 21, 1017RP, Amsterdam, Netherlands and its affiliates (“MEWS“ or “we” or “us”) collect, process and protect your personal data. MEWS is committed to protecting the personal data in accordance with the Regulation (EU)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC(hereinafter referred to as “GDPR”)

The MEWS Privacy policy applies to data processing within any services, systems, platforms and applications operated by MEWS where personal data is processed (“MEWS Services”). This Privacy policy applies also to processing of personal data of visitors of MEWS website, individuals who contact us via our website and applicants that apply for any job positions at MEWS.

The MEWS Privacy policy applies to services within MEWS which incorporate this policy or contain reference hereto. In the event of any discrepancies between this Privacy policy and any specific privacy policy applicable to MEWS product and services, the specific privacy policy prevails.

I. Data Collection

MEWS as data processor

MEWS operates a property management system ensuring administration of reservations and further hotel operations, including administration of requirements of hotel guests (“MEWS platform”). MEWS platform is used by hotels, hostels and other accommodation providers based on their contract with MEWS (the “Contracting parties”). In these situations, personal data is collected only by the Contracting parties and MEWS as a data processor processes it under instructions of the Contracting party that acts as a data controller. Processing of this personal data is governed by the privacy policy of the respective Contracting party.

MEWS as data controller

When using MEWS Services, contacting MEWS or applying for job position, you may be asked to provide certain personal data to MEWS which will be further processed by MEWS as data controller within the meaning of Article 4 (7) GDPR. Processing of this personal data is governed by this Privacy policy.

II. Data Processing

MEWS Services

MEWS processes your data, if it is necessary for the provision of its services, and generally, in order to fulfill all of its contractual obligations vis-à-vis its customers. Thus, MEWS can process the following data categories:

  • Identification details (name, surname)
  • Contact details, such as address, phone number, e-mail address
  • Booking and accommodation details
  • Information about any additional services you order through MEWS Services
  • Information about your subscriptions to marketing communication
  • Any other information you decide to share with MEWS through MEWS Services

By accessing and using MEWS Services, you enter into an agreement for provision of such services with MEWS. The legal ground for processing this data is Article 6 (1) b) GDPR (performance of contract or pre-contractual relations). The purposes to process your personal data provision of relevant MEWS Services to you.

Website personalization

MEWS processes all personal data contained within your job application, CV, Cover Letter or any other documents you provide us with when applying for a position with us. This includes information such as your name, address, contact details but as well information about your education, professional history, certifications and any other information you include in your application.

MEWS processing of job applications

We can process data for the purpose of evaluation and analyzing of the market, monitoring, evaluation, improving and personalization of MEWS Services, customizing the content of websites according to your preferences, and as well for protection of our legal rights. The legal ground for processing this data is legitimate interests of MEWS according to Article 6 (1) f) GDPR. When data is processed based on the legitimate interest, we always evaluate whether such processing does not constitute an inadequate interference to your rights.

If you apply for any of our job positions at MEWS or its affiliate through MEWS website or other means, we will process the personal data you provide us with for the purposes of evaluating your application and information contained therein to assess whether you are a suitable candidate for any of our open positions. The legal ground for processing this data is Article 6 (1) b) GDPR (performance of contract or pre-contractual relations).. Respective MEWS affiliate to which you applied for a job position shall be considered as data controller within the meaning of Article 4 (7) GDPR for this purpose.

We may keep you CV in our internal database in order to consider you for future positions at MEWS or its affiliates subject to your consent according to Article 6 (1) a) GDPR. You can withdraw your consent at any time in your User account or by sending the message to dpo@mews.com.

Call recordings

MEWS may record the calls with its current or potential clients for the purpose of internal quality checks, as well as for the purpose of handing internal exchange of information about MEWS prospect clients.

When we record the particular phone call between you and MEWS staff, we process the data that are provided by you directly during the phone call or data that are collected automatically such as your phone number. You are always notified about the recording at the beginning of a call and asked to provide your consent. If you do not provide us with the consent, no recording is made. Also, you can withdraw your consent at any time by sending the message todpo@mews.com.

Legal obligations

In some instances, legal regulations impose obligations on us under which we are obliged to process personal data, such cases are for instance tax and accounting laws and provision of some data to public authorities based on law. Thus, we can process your data for the purpose of archiving internal records and fulfilling our legal obligations. Legal ground for processing such data is Article 6 (1) c) GDPR.

III. Cookies on our website

Our website uses cookies to collect information about individuals who visit our website. Cookies are small encrypted text files that are stored on your computer or other device. Cookies help us to operate our website, provide important features and functionality on our website. They help us to understand how our website is being used. We use cookies for statistical purposes, for example to track and monitor, what country, what pages and what method, was used to visit our website.

Additionally, cookies help us deliver online advertising that we believe is most relevant to you. Cookies are also used for profiling. Cookies can help us to understand how our website is being used, for example, by telling us if you get an error messages as you browse. For more information about cookies please visithttp://www.allaboutcookies.org

When you visit our website, you are informed through a cookie banner placed at the bottom of our website that we collect cookies.

By enabling cookies in your browser, you acknowledge that MEWS may process data for the purposes of website’s personalization, browsing experience optimization, analyzing your website’s behavior and delivering relevant advertisements to you.

We use the following types of cookies: (i) essential cookies, which are essential for the provision of access to our websites; (ii) functionality cookies, which are crucial for the proper functioning of our websites (if these cookies are disabled, our website may not work properly); (iii) performance cookies, which do not identify you individually(until you enter your identification details in any of our forms) but help us to personalize your content in accordance with your actions on our websites; and (iv) targeting/advertising cookies, which help make advertisements more relevant to visitors of our website.

If you wish cookies not to be collected, you may restrict, block or delete the cookies at any time by modifying your browser configuration. Although each browser is parameterized differently, cookie configuration is normally located on the “Preferences” or “Tools” menu. If you turn off cookies, the functionality of our website may be limited (in the case of essential cookies you may not be able to access our website).

If you wish to prevent new cookies from being installed or if you wish to delete existing cookies you can find the instructions on the links below. The exact procedure depends on which browser you are using.

MEWS Services and/or websites and the communications generated from using and/or registering for MEWS Services and/or platform, such as promotional emails, may contain electronic images known as “web beacons”. Web beacons generally work in conjunction with cookies, and we may use them in the same way we use cookies (see above).

IV. Direct Marketing

MEWS may use your data for marketing purposes, i.e. in order to inform you of its services which may, according to your past preferences, be of interest to you. These communications shall strictly adhere to applicable legal regulations.

Advertising and marketing materials of the Contracting or other parties shall be sent to you only if you opted in for these communications during the registration process, via e-mail or otherwise.

Your decision about direct marketing may be withheld in accordance with the opt-out rules described in each marketing-mail or other form of communication. Opting out can be done via changing the settings of your User account or by directly contacting MEWS (please see contact details below). Should you opt out, MEWS shall retain only such data necessary for provision of services in accordance with the rules set out in this policy.

V. Data Retention

MEWS Services

MEWS shall not store your personal data for a longer period than what is necessary, given the purposes for which they were provided or collected. If you create a User account we will process your data for the period of your registration with MEWS. Subject to situations set out below, your personal data will be removed once you inform MEWS that you do not wish to use MEWS’ Services anymore. MEWS shall retain only that of your data serving legitimate purposes (e.g., some data is required to be retained by legal regulations, some data is necessary to maintain the mutual relationship with you – for instance billing purposes, etc.) MEWS shall neither collect an excessive amount of personal data nor other information which is not relevant for the purposes for which the personal data is collected.

MEWS processing of job applications

Information of personal data of successful applicants are processed and retained in line with our employee privacy policy. Personal data of unsuccessful applicants that provided us with their consent for considering them for future positions at MEWS are processed until the respective consent is withdrawn. Personal data of unsuccessful applicants that have not provided us their consent for retaining their personal data are retained for as long as the given legitimate interest of Mews to protect itself from legal claims and effectuate the hiring process.

Call recordings

MEWS shall not store data provided by you or collected automatically during the phone calls for a longer period than what is necessary, given the purposes for which they were provided or collected. Moreover, you can withdraw your consent to process your data at any time by sending the message to dpo@mews.com,in which case we will remove your data from our system.

VI. Data Sharing and transfer to third countries

MEWS Services

Your personal data shall not be shared or provided without your consent to any third party except for the following situations: (a) data is necessary for provision of services by MEWS to Contracting Parties (i.e. if you place such an order where provision of your personal data is indispensable to a Contracting party – e.g., within the reservation process), (b) data is necessary for provision of services by MEWS to you,(c) MEWS is obliged to provide the personal data on the basis of law or upon order by a public authority, or (d) it is specifically allowed by applicable legal regulations. Should the applicable legal regulations prohibit that, your personal data shall never be shared with any third party.

Personal data as described in letter (a) shall be provided exclusively to the Contracting parties enlisted on the website www.mews.com, or to integration providers or other service providers enlisted on hotel website. The personal data is provided to these processors only based on mutually agreed contractual terms safeguarding security of personal data in line with applicable legal regulations.

Your personal data shall not be shared with any third party for any other purposes than those described in this Privacy policy.

Personal data is shared with Mews processors that process personal data on behalf of MEWS in line with MEWS instructions and in compliance with this Privacy Policy.

Categories of Processors

  • data center, hosting
  • marketing tools
  • tools for analytics and recording
  • tools for running polls or surveys
  • business management tools
  • task management and communication tools

In order to allow you to manage various reservations made with hotels, MEWS may share your personal data with hotels for the sole purpose of making and managing your reservation as well as other services of the hotels available to you through Mews Services. Sharing of any other personal data or information may be shared with hotels based on your consent only.

MEWS processing of job applications

Your personal data shall not be shared or provided without your consent to any third party except for when (a) we use services and applications of third parties to manage HR processes, whereas these third parties are processors of your personal data and act upon instructions of MEWS as the data controller (b) MEWS is obliged to provide the personal data on the basis of law or upon order by a public authority, or (c) it is specifically allowed by applicable legal regulations. Should the applicable legal regulations prohibit that, your personal data shall never be shared with any third party.

IX. Data Security

MEWS shall ensure that your personal data is stored securely. Therefore, it has introduced adequate physical, technical and organizational measures and plans to protect and secure all information collected via services of MEWS.

The aim is to eliminate unauthorized or unlawful processing of your personal data, or accidental, unauthorized or unlawful access, use, transferring, processing, copying, transmitting, alteration, loss or damage of your personal data. Despite all efforts and meeting all rules set out by applicable legal regulations, it is not possible to guarantee the security of your data, if it is transferred or transmitted in an unsecured way.

MEWS protects your data in particular in the following ways:

  • Using cryptography, where necessary
  • Using password protection, where necessary
  • Restricting access to your personal data (i.e. access to your personal data is granted only to those employees or personnel of MEWS for whom the access is indispensable for the purposes described herein).

These measures do not deprive you from your duties to undertake proper steps in order to secure your own personal data. You should, inter alia, regularly change your passwords. On the other hand, you should not, inter alia, use predictable usernames and/or passwords, share your password with other persons, or grant access to your user account and/or disclose your personal data to other persons. MEWS will never ask you for your password in any unsolicited communication. Please notify our data protection officer immediately of any unauthorized use of your account credentials or any other suspected breach of security.

X. Your rights

Where EU General Data Protection Regulation 2016/679 (“GDPR”) applies to the processing of your personal data you are entitled under the GDPR to the following rights:

Right of access

You are entitled to be informed inter alia about what personal data MEWS processes about you, for what purposes, who are the recipients of your personal data.

Right to rectification

You have a right for any of your incomplete, inaccurate or out-of-date personal data to be rectified.

Right to erasure (‘right to be forgotten’)

You are entitled to erasure of personal data that we have collected and processed about you.

Right to restriction of processing

In given cases such as when we process inaccurate personal data about you or you deem the processing as no longer necessary you may ask for a restriction of the processing.

Right to data portability

You have a right to receive personal data you provide us with in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible.

Right to object

You are entitled to object, on grounds relating to your particular situation, at any time to processing of personal data that concerns you and is carried out in public interest or for the purposes of legitimate interests pursued by MEWS, including profiling.

The exercise of your rights may be limited shall MEWS be obliged to keep any of your personal data for the purpose of compliance with legal obligations, for the establishment, exercise or defense of legal claims or any other compelling reasons as provided by the relevant data protection law.

Should you wish to exercise any of your rights you may contact our data protection officer at dpo@mews.com.

XI. Changes of Privacy Policy

MEWS shall, from time to time, change and update the terms of this Privacy policy. You shall be informed of any changes to this Privacy policy by publishing updated version on MEWS website, you may also obtain a copy of the amended Privacy policy either via your User account or via the e-mail address you have provided to MEWS.

XII. Contact Details

Should you wish to know more about MEWS, its protection of your privacy, or about this Privacy policy, you can contact MEWS at dpo@mews.com.

Please help MEWS ensure that your data is up-to-date. If you believe that some of the data processed by MEWS is incorrect, please contact MEWS at dpo@mews.com.