Privacy statement
Your privacy is of great importance to us. We comply with all relevant laws and regulations, including the General Data Protection Regulation (GDPR).
Your data is safe with us, and we will always use it responsibly. This privacy statement explains what Maxxton does with the information we collect about you.
This statement applies to our applicants, customers, suppliers, potential customers, and visitors, including website visitors. It applies specifically to Maxxton B.V.
If you have any questions or wish to know exactly what information we hold about you, please contact us using the details provided at the end of this statement.
Processes
Below, we outline the processes within our organisation that involve personal data. For each process, we provide a brief description of its purpose, the personal data processed, the retention period, and any third parties involved.
Job applications
Purpose: When you apply for a role with us, we process your personal data to evaluate your application. All applicant information is treated confidentially.
|
Data processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Age |
Legitimate interest |
28 days (end of application procedure) |
|
|
Name and address details |
Legitimate interest |
28 days (end of application procedure) |
|
|
Contact details |
Legitimate interest |
28 days (end of application procedure) |
|
|
Function details (e.g., education, roles) |
Legitimate interest |
28 days (end of application procedure) |
|
CVs kept for future opportunities
If you apply for a job with us, but there isn’t a match at the time, you may consent to us retaining your data for potential future opportunities.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Name and address details (First name, Last name, Initials, Street name, Home number, Postcode, Place of residence, Country of residence) |
Consent |
As agreed with applicant |
|
|
Contact details |
Consent |
As agreed with applicant |
|
|
Function details (Education, Current role, Previous roles) |
Consent |
As agreed with applicant |
|
Mailing and newsletters
Purpose: Sending newsletters to customers or individuals who have expressed an interest.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Name and address details (First name, Last name, Street name, Initials, Home number, Postcode, Place of residence, Country of residence) |
Consent |
1 year after last contact |
|
|
Age |
Consent |
1 year after last contact |
|
|
Contact details |
Consent |
1 year after last contact |
|
|
Function details (Education) |
Consent |
1 year after last contact |
|
|
Name and address details (First name, Last name) |
Consent |
7 days after unsubscribing |
HubSpot |
|
Contact details (Email address, Phone number) |
Consent |
7 days after unsubscribing |
HubSpot |
For unsubscribing customers, certain data (e.g., email) is retained for seven days post-unsubscription and is processed by HubSpot.
Support – customers
When you ask a question via support, we process your data to assist you.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Name and address details (First name, Last name, Initials) |
Performance of contract |
As long as strictly necessary |
Google Cloud Platform, Google |
|
Contact details (Email address) |
Performance of contract |
As long as strictly necessary |
Google Cloud Platform, Google |
|
Contract details |
Performance of contract |
As long as strictly necessary |
Google Cloud Platform, Google |
Sales – approaching potential customers
We process data to approach potential customers.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Name and address details (First name, Last name, Initials, Country of residence, Company name) |
Legitimate interest |
5 years after last contact |
Google, HubSpot |
|
Contact details (Email address, Mobile phone number) |
Legitimate interest |
5 years after last contact |
Google, HubSpot |
Sales – potential customer becomes client
When we establish a relationship with a customer, we process the following data:
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Contact details (Email address, Mobile phone number) |
Performance of contract |
2 years after contract termination |
Google, Salesforce, Google Cloud Platform |
|
Name and address details (Country of residence, Initials, First name, Last name) |
Performance of contract |
2 years after contract termination |
Google, Salesforce, Google Cloud Platform |
Leaving contact details on the website
We process your data when you leave your contact details while visiting our website.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Name and address details (First name, Last name, Company name) |
Legitimate interest |
2 months after submission |
Google, Microsoft |
|
Keys (Key number, Date of visit, Purpose of visit) |
Legitimate interest |
2 months after submission |
Google, Microsoft |
Debtors and creditors administration
We process data for debtor and creditor administration, including invoicing and reminders.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Name and address details (First name, Last name) |
Legal obligation |
7 years after transaction |
Exact Online, Remmerswaal |
|
Financial details (Payment terms, Rates, Services rendered, Bank account number, Debtor/Creditor number, Invoice date and number, Outstanding balance, Reminders, VAT number) |
Legal obligation |
7 years after transaction |
Exact Online, Remmerswaal |
Video surveillance at HQ
Purpose: Ensuring safety and security through visible surveillance cameras.
|
Data processed |
Legal basis |
Retention period |
Third parties involved |
|---|---|---|---|
|
Photo, video, and audio |
Legitimate interest |
28 days |
Internal server |
|
Date and time |
Legitimate interest |
28 days |
Internal server |
Rights and responsibilities
Your rights
You have the right to:
- Access your personal data.
- Request corrections if your data is incorrect or incomplete.
- Request deletion of your personal data in certain circumstances.
- Request restriction of processing under specific conditions.
- Object to processing for direct marketing or due to your specific situation.
- Withdraw consent at any time if processing is based on consent.
- Request data portability where applicable.
Exercising your rights
To exercise your rights, contact us using the details below. Please include clear identification to prevent unauthorised changes.
Technical and organisational measures
We take some of the following measures, but not limited to, to protect your data:
Technical measures
- Firewalls
- Password-protected Wi-Fi
- ISAE 3402 Type I certification
- Up-to-date virus and malware protection
- Daily backups
Organisational measures
- Procedures to block access for former employees
- Secure device and software configurations
- Regular security training for staff
- Periodic testing of security measures
Making a complaint
If you wish to lodge a complaint about our use of your personal data, you can email us at dpo@maxxton.com. You may also contact the Dutch Data Protection Authority.
Contact details
Maxxton B.V.
Oostperkweg 45
4332 SB Middelburg
The Netherlands