Privacy statement - India
Your privacy is of great importance to us. We comply with all relevant laws and regulations, including the General Data Protection Regulation (GDPR) and the Digital Personal Data Protections Act, 2023.
Your data is safe with us, and we will always use it responsibly. This privacy statement explains what Maxxton does with the information we collect about you.
This statement applies to our applicants, customers, suppliers, potential customers, and visitors, including website visitors. It applies to the personal data collected by Maxxton B.V. and Maxxton India Technologies Private Limited.
If you have any questions or wish to know exactly what information we hold about you, please contact us using the details provided at the end of this statement.
Processes
Below, we outline the processes within our organisation that involve personal data. For each process, we provide a brief description of its purpose, the personal data processed, the retention period, and any third parties involved.
Job applications
Purpose: When you apply for a role with us, we process your personal data to evaluate your application. All applicant information is treated confidentially.
|
Data processed |
Legal basis |
Retention period |
Third parties involved |
|
Age |
Legitimate interest |
28 days (end of application procedure) |
|
|
Name and address details |
Legitimate interest |
28 days (end of application procedure) |
|
|
Contact details |
Legitimate interest |
28 days (end of application procedure) |
|
|
Function details (e.g., education, roles) |
Legitimate interest |
28 days (end of application procedure) |
|
CVs kept for future opportunities
If you apply for a job with us, but there isn’t a match at the time, you may consent to us retaining your data for potential future opportunities.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Name and address details (First name, Last name, Initials, Street name, Home number, Postcode, Place of residence, Country of residence) |
Consent |
As agreed with applicant |
|
|
Contact details |
Consent |
As agreed with applicant |
|
|
Function details (Education, Current role, Previous roles) |
Consent |
As agreed with applicant |
|
Mailing and newsletters
Purpose: Sending newsletters to customers or individuals who have expressed an interest.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Name and address details (First name, Last name, Street name, Initials, Home number, Postcode, Place of residence, Country of residence) |
Consent |
1 year after last contact |
|
|
Age |
Consent |
1 year after last contact |
|
|
Contact details |
Consent |
1 year after last contact |
|
|
Function details (Education) |
Consent |
1 year after last contact |
|
|
Name and address details (First name, Last name) |
Consent |
7 days after unsubscribing |
HubSpot |
|
Contact details (Email address, Phone number) |
Consent |
7 days after unsubscribing |
HubSpot |
For unsubscribing customers, certain data (e.g., email) is retained for seven days post-unsubscription and is processed by HubSpot.
Support – customers
When you ask a question via support, we process your data to assist you.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Name and address details (First name, Last name, Initials) |
Performance of contract |
As long as strictly necessary |
Google Cloud Platform, Google |
|
Contact details (Email address) |
Performance of contract |
As long as strictly necessary |
Google Cloud Platform, Google |
|
Contract details |
Performance of contract |
As long as strictly necessary |
Google Cloud Platform, Google |
Sales – approaching potential customers
We process data to approach potential customers.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Name and address details (First name, Last name, Initials, Country of residence, Company name) |
Legitimate interest |
5 years after last contact |
Google, HubSpot |
|
Contact details (Email address, Mobile phone number) |
Legitimate interest |
5 years after last contact |
Google, HubSpot |
Sales – potential customer becomes client
When we establish a relationship with a customer, we process the following data:
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Contact details (Email address, Mobile phone number) |
Performance of contract |
2 years after contract termination |
Google, Salesforce, Google Cloud Platform |
|
Name and address details (Country of residence, Initials, First name, Last name) |
Performance of contract |
2 years after contract termination |
Google, Salesforce, Google Cloud Platform |
Leaving contact details on the website
We process your data when you leave your contact details while visiting our website.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Name and address details (First name, Last name, Company name) |
Legitimate interest |
2 months after submission |
Google, Microsoft |
|
Keys (Key number, Date of visit, Purpose of visit) |
Legitimate interest |
2 months after submission |
Google, Microsoft |
Debtors and creditors administration
We process data for debtor and creditor administration, including invoicing and reminders.
|
Details processed |
Legal basis |
Retention period |
Third parties involved |
|
Name and address details (First name, Last name) |
Legal obligation |
7 years after transaction |
Exact Online, Remmerswaal |
|
Financial details (Payment terms, Rates, Services rendered, Bank account number, Debtor/Creditor number, Invoice date and number, Outstanding balance, Reminders, VAT number) |
Legal obligation |
7 years after transaction |
Exact Online, Remmerswaal |
Video surveillance at HQ
Purpose: Ensuring safety and security through visible surveillance cameras.
|
Data processed |
Legal basis |
Retention period |
Third parties involved |
|
Photo, video, and audio |
Legitimate interest |
28 days |
Internal server |
|
Date and time |
Legitimate interest |
28 days |
Internal server |
Rights and responsibilities
Your rights
You have the right to:
- Access your personal data.
- Request corrections if your data is incorrect or incomplete.
- Request deletion of your personal data in certain circumstances.
- Request restriction of processing under specific conditions.
- Object to processing for direct marketing or due to your specific situation.
- Withdraw consent at any time if processing is based on consent.
- Request data portability where applicable.
Exercising your rights
To exercise your rights, contact us using the details below. Please include clear identification to prevent unauthorised changes.
INFORMATION FOR INDIA VISITORS AS PER DPDPA
These rights are available to the individuals accessing the Website from India. These rights will be provided to the individuals under the Digital Personal Data Protection Act, 2023, as and when it is enforced. You have the following rights that can be exercised:
i. Right to access information about Personal Data.
ii. Right to correction and erasure of Personal Data.
iii. Right of grievance redressal.
iv. Right to nominate.
v. Withdraw consent at any time where we are relying on consent to process Personal Data.
Depending on the nature of the request, we may ask you to complete a Personal Data request form or seek certain details to verify the request.
All requests for Personal Data will be handled within a reasonable period of time. If you would like to exercise ANY of these rights, please contact dpo@maxxton.com.
Only after exhausting the Company’s grievance redressal mechanism, you may approach the Data Protection Board of India that may be set up.
CHANGES TO THIS PRIVACY STATEMENT
We reserve the right to update this Privacy Statement at any time. The updated Privacy Statement will be made available through our website along with the date of the latest revision. If such modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change via email or through the website.
Technical and organisational measures
We take some of the following measures, but not limited to, to protect your data:
Technical measures
- Firewalls
- Password-protected Wi-Fi
- ISAE 3402 Type I certification
- Up-to-date virus and malware protection
- Daily backups
Organisational measures
- Procedures to block access for former employees
- Secure device and software configurations
- Regular security training for staff
- Periodic testing of security measures
Making a complaint
If you wish to lodge a complaint about our use of your personal data, you can email us at dpo@maxxton.com. You may also contact the Dutch Data Protection Authority.
Contact details
Maxxton India Technologies Private Limited
Office No.101, First Floor S No.1, H No. 1A, Goodwill, Byond,
Kharadi, Pune, Maharashtra,
India – 411014
Name: Reema Banerjee
Email: hr-india@maxxton.com
MaxxtonB.V.
Oostperkweg 45
4332 SB Middelburg
The Netherlands
Email: dpo@maxxton.com
Phone: +31 (0)118 671010