Meliá Rewards Privacy Policy (Last update: November 2025)

The data controller of your personal data is MELIÁ HOTELS INTERNATIONAL, SA (hereinafter, “ Meliá ”), with registered office at Gremio Toneleros, 24, Polígono Son Castelló, 07009, Palma de Mallorca and with fiscal ID number A-78304516. 

You can contact our Data Protection Officer at dpo@melia.com. 

Meliá will process your data to manage your membership of the Programme. This includes the following purposes:
2.1.- Program registration process
2.2.- Assignment of your tier in MeliáRewards. 
2.3.- Personalization of services. 
2.4.- Earning and redeeming points.
2.5.- Conversion of points to other loyalty programmes.
2.6.- Use of discount codes.
2.7.- Managing the status of beneficiary of another Program member.
2.8.- Delivery of program messages.
2.9.- Sending personalized marketing messages based on your MeliáRewards membership level.

Below is detailed information on each of these purposes.

2.1.- Program registration process. We will process the following personal data to manage your registration in the programme:

• Identification data: name and surname, personal ID number/Passport number;
• Contact information: address, e-mail and telephone number;
• Personal characteristics data: Nationality, country of residence and date of birth;

The legal basis for this data is the contractual relationship created by your registration in the MeliáRewards program and your acceptance of the program terms and conditions. 

2.2.- Assignment of your tier in MeliáRewards. Your membership will be managed through a profile that consolidates the data generated by your stays, purchases or products and services included in the program in order to classify your membership level.

The data that will be processed for this purpose is:

• Identification and contact information: Name, last name, ID number, country of residence, email address, prefix code and mobile number; 
• Personal characteristics data: date of birth, nationality; 
• Goods and services transaction data: Data related to the booking (dates of stay, number and age of guests and services included in the booking) and services included in the stay (shopping, use of services, meals and drinks, use of facilities); Data regarding purchases made or services contracted (items purchased or type of service contracted, date the service is provided);

Whether the member experiences any of the special circumstances described in the program terms and conditions will also be taken into account when assigning their membership level.

The legal basis for this data is the implementation of the contractual relationship created by the acceptance of the Program Terms and Conditions.

2.3.- Personalization of services. When you make a booking or on arrival at the hotel, your membership data will be transmitted to the hotels in which you stay.

This data will also be shared with other participating companies if you request a service from one of them. The purpose of both communications is to identify you as a MeliáRewards member and personalize services based on the benefits to which you are entitled depending on your MeliáRewards membership level.

The transfer of data may involve international data transfer if the companies that receive the data are located outside the European Economic Area.  

The legal basis for this data is the implementation of the contractual relationship created by the acceptance of the Program Terms and Conditions

2.4.- Earning and redeeming points. We process data on your stays, purchases or products and services, as well as data on transactions carried out through the purchase of points in order to allow you to earn and redeem MeliáRewards points. 

The data is obtained from the hotels in which you stay, other Meliá Group companies or third-party companies from the program from which you buy products or services. Your MeliáRewards account will have a list of all the third-party companies that are part of the programme.

The legal basis for this data is the contractual relationship created by your registration in the MeliáRewards program and your acceptance of the program terms and conditions.

2.5.- Conversion of points to other loyalty programmes. If you request the conversion of MeliáRewards points for the loyalty programs of other partners, Meliá will send your personal data and the number of points you wish to transfer to the partner company you designate. 

The transfer of data may involve international data transfer if the companies that receive the data are located outside the European Economic Area.  

This processing is required to implement the contractual relationship created by the acceptance of the Program Terms and Conditions .

2.6.- Use of discount codes. If you use discount codes provided by another MeliáRewards member, the following data will be shared with the member who provided the code: 

• Identification and contact information: name, last name, e-mail, mobile number; 
• Goods and services transaction data: data related to the booking (dates of stay, booking reference number and hotel name).

This processing is required to implement the contractual relationship created by the acceptance of the Program Terms and Conditions .

2.7.- Managing the status of beneficiary of another Program member. If a program member has been designated as a beneficiary in the MeliáRewards account of another program member and they accept that designation, the following data will be shared with that member:

• Identification data: first name, last name, MeliáRewards card number.
• Personal characteristics data: type of relationship.
• Goods and services transaction data: data on the booking (dates of stay, number and age of guests and services included in the booking), purchase made or products or services contracted.

This processing is based on your consent. You may revoke your consent at any time without affecting the legality of the processing based on consent prior to its removal. 

2.8.- Dispatch of program messages. We will use your email address to send you informational messages related to your membership based on the implementation of the contractual relationship created by your registration in MeliáRewards.

These communications will take place while you are a member of the Programme.

2.9.- Sending personalized marketing messages based on your MeliáRewards membership level. We will process your data to carry out personalized sales activities appropriate to your MeliáRewards membership level and related to products and services offered by the Meliá Group and partner companies. This processing is required to implement the contractual relationship created by the acceptance of the Program Terms and Conditions.

Data processed for marketing purposes will be stored as long as you do not oppose its processing or request its deletion.

Without prejudice to the data communications indicated in section 2 of this Privacy Policy, your data will only be shared with third parties that are required by law or with your consent.

Without prejudice to the data retention periods indicated in section 2 of this Policy, in general, we will retain your data for as long as you are a member of MeliáRewards, and for the periods required in the applicable legal requirements and for the time required to to attend to any possible liabilities arising from data processing. We will delete your data when they are no longer required or relevant for the purposes for which they were collected. 

In the terms and with the requirements defined by applicable data protection regulations, you have the right to:

• Revoke any consent they have previously given.
• Access their personal data.
• Rectify inaccurate or incomplete data.
• Request the deletion of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Oppose the processing of their data.
• Not be the subject of a decision based solely on automated processing, including profiling, that has legal effects on them or significantly affects them in a similar way. 
• Limit the processing by Meliá of their data if any of the data protection regulations are not met.
• Request the portability of their data.

To exercise the aforementioned rights, you must send a written message to Meliá Hotels International, SA, Calle Gremio Toneleros, 24, Polígono Son Castelló, 07009 Palma de Mallorca, Spain or by email to privacy@melia .com, proving your identity. 

The person may also make a complaint to the corresponding data protection authority if they consider that Meliá has violated their rights under applicable data protection regulations.

You can contact our data protection officer at dpo@melia.com.