Privacy policy
V1.1 (March 2025)
This Privacy Policy applies to the website https://store.melia.com (hereinafter, the Website).
Please read it carefully. It contains important information about the processing of your personal data and your rights under the relevant legislation.
We reserve the right to update our Privacy Policy at any time due to business decisions, as well as to comply with any changes in legislation or case law. If you have any questions or need any clarification regarding our Privacy Policy or your rights, please contact us through any of channels indicated below.
You declare that the data you provide us with, now or in the future, are correct and truthful and you undertake to inform us of any changes to them. In the event of providing personal data of third parties, you undertake to obtain the prior consent of those concerned and to inform them of the content of this Policy.
In general, sections marked as mandatory on our forms must be completed in order to process your requests.
1. Who is the data controller? The data controller of the personal data collected on this website is PRODIGIOS INTERACTIVOS, S.A. (hereinafter, referred to as PRODIGIOS), a company belonging to the group of companies whose parent company is MELIA HOTELS INTERNATIONAL, S.A. (hereinafter, referred to as MHI).
The registered office of PRODIGIOS is located at calle Gremio Toneleros nº 22, 07009 Palma (Mallorca, Balearic Islands), Spain.
You can contact our Data Protection Officer at dpo@melia.com
2. What will we process your data for and on what legal basis
2.1 Management of the relationship with customer and users: We process the data provided by customers and users in their queries and purchase forms to deal with their requests and intervene in the sale of products purchased through the website.
For this purpose, we will share your data with the seller so that they can manage the delivery of the product, as well as any complaint or query about the purchased product. Where applicable, we also process your data for order-related procedures, such as sending you the purchase invoice issued by the seller, upon request, or processing the return of the product. More info about the identity and contact details of the seller can be found in each product description and in the Customer Service section.
You can save your contact details to facilitate future purchases through the Website.
All such processing is necessary for the performance of the contract or for the implementation of pre-contractual measures at the request of the data subjects themselves.
The categories of data we process for these purposes are as follows:
- Identification data (name, surname and ID/passport) and contact details (address, email and telephone number). This information has been provided directly by you, or by the person making the purchase on your behalf.
If you choose to log in to the website with your MeliáRewards profile when making a purchase, we will obtain your MeliáRewards Loyalty Programme member number to identify you. The owner of the MeliáRewards Loyalty Programme is MHI. You can contact this entity at Calle Gremio Toneleros, 24 07009 Palma (Mallorca, Balearic Islands), Spain or at privacy@melia.com . More info about MHI's data processing at https://www.melia.com/en/privacy-policy and about the MeliáRewards Loyalty Programme at https://www.melia.com/en/meliarewards/terms-conditions.
- Details about the product purchased (type of product, date of purchase, approximate date of delivery and price). This information has been provided directly by you, or by the person making the purchase on your behalf.
Economic data and details on transactions carried out on the Website will also be processed for accounting and administrative management purposes, in compliance with our legal obligations in accounting and tax matters.
2.2.Sending of commercial communications and management of distribution lists: We process the contact details (email and telephone number) provided by customers and individuals who subscribe to our mailing lists for the purposes of sending, by email and SMS, communications relating to our services (e.g. to remind you of pending purchase processes), as well as offers of products marketed on the Website.
This processing is based on the consent given by you. You may revoke your consent at any time and request to unsubscribe from the processing for commercial purposes by clicking the link provided for this purpose in the commercial communications themselves or by sending an email indicating ‘baja publi’ [unsubscribe] in the subject line to: infomeliastore@melia.com
To manage our distribution lists, we segment the recipients of our communications according to their language and source market. This processing consists of a simple classification according to objective criteria and is not intended for commercial profiling, predictive analysis or behavioural analysis.
This processing is based on our legitimate interest in segmenting the recipients of communications. In weighing this interest against your rights and freedoms, the following has been determined:
- The processing is compatible with the reasonable expectations of data subjects, as it is ancillary processing to the sending of commercial communications and allows recipients to receive them in a format and content adapted to their language and market.
- The processing does not pose a significant threat to the privacy of data subjects, as no new information about data subjects can be inferred, and technical and organisational measures have been adopted to prevent the creation of commercial profiles, predictive analysis or individualised behavioural analyses on the data of customers and users. Likewise, data subjects retain control of their data as they are given the option to object to receiving commercial communications at any time.
2.3 Quality management: In order to assess and improve the quality of our services, we perform statistics based on aggregated data of transactions, orders placed, as well as Website browsing data, e.g. IP address, weblogs, pages visited or actions performed on the Website (More info available in our cookie policy).
This processing is based on our legitimate interest in assessing and managing the quality of our services. In weighing this interest against your rights and freedoms, the following has been determined:
- The processing is compatible with the reasonable expectations of the data subjects, as it is a processing linked to the provision of services and the use of the functionalities offered by the Website.
- The processing is carried out on data that do not allow identification of data subjects, by measuring aggregate data of all Website users and calculating the average of such data.
- The processing has a limited impact on the privacy of data subjects and does not pose significant threats, and technical and organisational measures have been taken to prevent personal data from being attributed to data subjects.
2.4 Administration and management of the Website security: We process browsing data (IP addresses or logs) to administer and manage the security of the Website and its restricted access areas.
This processing is based on our legitimate interest in ensuring the security of the Website. This interest is expressly recognised by recital 49 of Regulation (EU) 2016/679 (GDPR). In weighing this interest against your rights and freedoms, it has been taken into account that this processing corresponds to general security practices and does not pose significant threats to data subjects.
3. Who can we share your data with?
Your data will only be shared with third parties when legally required to do so, with your consent or when your request so requires it. In this sense and, as mentioned in section 2.1, once you have made a purchase on the Website we will share your data with the relevant seller to manage the delivery of the product, as well as any claim, query or action regarding it. This transfer of data implies that the seller is the only responsible for this processing and for any other processing that may be carried out with your data (e.g. for marketing or statistical purposes). More info about the identity of the seller and its contact details may be found in the description of each product and in the Customer Service section.
Furthermore, if you register or identify yourself as a user of the MeliáRewards Loyalty Programme before initiating the purchase process, we will disclose to MHI the number of points earned based on the amount of the product purchased so that they can be added to your MeliáRewards account. This disclosure to MHI is based on the execution of the contractual relationship between you and MHI, since you have accepted the MeliáRewards Loyalty Programme Terms and Conditions. More info about the MeliáRewards Loyalty Programme is available at https://www.melia.com/en/meliarewards/terms-conditions. Such disclosure will be made after the deadline for requesting the return of the product (14 days from the date of purchase), provided that the return has not been requested.
The provider of the purchasing platform available on this website is SHOPIFY INTERNATIONAL Ltd. (a subsidiary of Shopify Inc. located in Canada), with registered office at Victoria Buildings Haddington Street, 2nd Floor, 1-2, Dublin (4, D04 XN32, Ireland). This company processes users' data on behalf of PRODIGIOS, and an appropriate data processing contract has been entered into by SHOPIFY INTERNATIONAL Ltd. and PRODIGIOS.
4. How long will we keep your data?
In general, we keep your data for the duration of your relationship with us and in any case for the periods provided for by the applicable legal provisions, e.g. in accounting and tax matters, and for the time necessary to meet any liabilities arising from the processing. We will delete your data when they are no longer necessary or relevant for the purposes for which they were collected.
Browsing-related information (such as IP address, weblogs, webpages visited or actions performed on the Website) will be deleted once the connection is terminated or statistics have been performed. Likewise, data collected for statistical purposes on transactions and orders will be deleted once the analysis has been completed.
Data processed for marketing purposes will be kept for as long as you do not request their deletion or revoke your consent to receive marketing communications from us. The formats in which your consent to the processing of your data for marketing purposes is recorded, such as electronic form submission logs, will be kept for the entire duration of the processing and the applicable time limits.
5. What are your rights?
You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access them. You may also request that your data be rectified when inaccurate or completed when incomplete, as well as request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, you may request that we restrict the processing of your data. In this case, we will only process the data concerned for the purpose of making, exercising or defending complaints or for the protection of the rights of other individuals. Under certain conditions and for reasons relating to your particular situation, you may also object to the processing of your data. In this case, we will stop processing the data except for compelling legitimate reasons which override your interests or rights and freedoms, or for the purpose of making, exercising or defending complaints.
Likewise, and under certain conditions, you may request the portability of your data to be transferred to another data controller.
You may withdraw your consent for certain purposes at any time without affecting the lawfulness of the processing based on your consent prior to its withdrawal.
You also have the right to object to automated individual decisions that have legal effects on you or significantly affect you in a similar way, when this right applies in accordance with the provisions of Article 22 of the GDPR.
You also have the right to file a complaint with a data protection authority. You can find the list and contact details of the European data protection agencies on the European Commission's website at https://commission.europa.eu/index_en
To exercise your rights, you must send us a request by post or e-mail to the addresses indicated in section ‘1. Who is the data controller’, indicating ‘MELIA STORE’ in the subject line.
Further information about your rights and how to exercise them can be obtained from the Spanish Data Protection Agency at https://www.aepd.es/en or from the data protection authority in your country.