Privacy Policy
Last updated: September, 2025
1. Who is the data controller?
In accordance with current regulations, we inform you that the data controller is MELIÁ HOTELS INTERNATIONAL, S.A. (hereinafter, “MHI”), whose contact details are as follows:
- Tax ID: A78304516
- Registered address: C/Gremio Toneleros 24, 07009 Palma de Mallorca, Spain
- Email: privacy@melia.com
- Data Protection Officer (DPO): You can contact the DPO at dpo@melia.com or by writing to the registered address of MHI, addressed to the “Data Protection Officer”.
2. For what purpose will your personal data be processed and for how long?
We collect the data provided by job candidates to positions within the Meliá Group companies or in hotels operated under our brands, mainly through our portal https://careers.melia.com, but also at recruitment events, job fairs, or through our hotel establishments. We process this information for the following purposes:
Evaluate and manage your job application: When a candidate provides their professional profile data without applying to a specific selection process, we use this information to create a talent pool to fill future vacancies that match the candidate's profile. The legal basis for this processing is the consent given when providing the information through any of the mentioned channels.
Inform about job opportunities: We use candidates’ contact details to inform them about vacancies that match the professional profile they provided. The legal basis is our legitimate interest in contacting suitable candidates for specific positions and inviting them to participate in a selection process.
Manage selection processes for a specific job position: We process data of candidates participating in the selection process to assess their suitability for the position. This may include:
- Conducting interviews
- Administering knowledge and psychometric tests
- Evaluating letters of recommendation and references provided by third parties
The legal basis for this processing is the need to carry out pre-contractual measures at the request of the data subject under Article 6.1(b) of the GDPR.
Proactively search for professional profiles: We process data obtained from professional networks and communities to identify potential candidates and invite them to register on our job portal https://careers.melia.com. The legal basis for this is our legitimate interest in locating professional profiles that meet our needs. In balancing this interest with your rights and freedoms, we have determined that:
- The processing is compatible with the reasonable expectations of candidates, as the data has been published by them in professional networks to increase visibility.
- The impact on privacy is limited: the processing benefits the candidate by increasing their employment opportunities; the data used is that which the candidate has chosen to share on the platform.
Unless you indicate otherwise, your personal data will be retained for one year from your last update, for the purposes mentioned. It is your responsibility to keep it updated, as it will be used to contact you about future vacancies that match your profile.
If you have participated in a selection process, your data will be retained as long as necessary to demonstrate compliance with applicable regulations, such as equal opportunity plans.
3. Who are the recipients of your data?
Your personal data will be shared with recruiters from companies within the Meliá Group or with entities that operate hotels under a management or franchise agreement with MELIÁ or its affiliates (hereinafter, the “Recruiter”), in order to assess your application for relevant opportunities.
You may choose the level of visibility of your profile:
- All recruiters, regardless of location.
- Only recruiters in your country of residence.
- Only recruiters managing the roles you have directly applied to.
Additionally, your data may be disclosed to public authorities when required to comply with legal obligations.
Some of these recipients may be located outside the European Economic Area. In such cases, any international data transfers will be carried out under appropriate legal safeguards to ensure an adequate level of protection, in accordance with applicable data protection regulations.
4. What rights do you have as a data subject?
In accordance with applicable regulations, you have the right to:
- Withdraw your consent
- Access your personal data
- Rectify inaccurate or incomplete data
- Object to the processing of your data
- Request the erasure of your data when it is no longer necessary for the purposes it was collected
- Request restriction of processing under certain circumstances
- Request the portability of your data
- File a complaint with the Spanish Data Protection Agency if you believe your rights have been violated
- Contact the Data Protection Officer at dpo@melia.com
To exercise your rights, please send a written request to the address above or via email to privacy@melia.com, including proof of your identity.
5. Security measures
MHI will treat your data confidentially at all times and will comply with the duty of secrecy as required by applicable law. We implement the necessary technical and organizational measures to ensure the security of your data and prevent its alteration, loss, unauthorized processing, or access, considering the state of technology, the nature of the stored data, and the risks to which they are exposed.