Your privacy is of great importance to us. We therefore comply with the relevant laws and regulations, including the General Data Protection Regulation (hereinafter: GDPR).
Your data is safe with us and we will always use this data properly. In this privacy statement, we explain what Maxxton does with the information that we learn about you.
The information in this privacy statement relates to our applicants, customers, suppliers, potential customers, visitors, and website visitors.
This privacy statement applies to Maxxton B.V. If you have any questions or would like to know exactly what we keep about you, please contact Maxxton. The contact details can be found at the bottom of this privacy statement.
Processes
Below you will find the processes that take place within our organization. A short description of the purpose is given for each process, together with the personal data that are processed in the process. You can also see which third parties (possibly) also process your personal data.
Job applications received
Purpose: When you apply for a job with us, we process various personal data about you. Below you can see which data we process and how long we keep it. Maxxton treats the information they receive from you as an applicant confidentially.
Which details do we process?
On a legitimate interest do we keep data for 28 days (end of application procedure) from Google:
CV’s are kept in file for a later moment
If you have applied for a job with us, but we are currently not a match, you can give us consent to keep your data in order to possibly contact you at a later time. Below you can read which data we process in this case and for how long.
After consent we keep data for 1 year (after the last contact) and Google is a third party involved:
Mailing Sales
Purpose: Send newsletters to our customers or when you have indicated that you wish to receive our newsletters.
Below you can read which of your data we process and for how long it will be processed if you have given your consent to receive our newsletters.
After consent, we keep data for 7 days (After unsubscribing from the newsletter by customer or sales) and The Rocket Science Group, LLC is a third party involved:
Support – customers
Purpose: You can read below how and in what way we process your data when you ask us a question via support.
We keep the following data on the basis of Performance of contract and as long as strictly necessary, with Google Cloud Platform and google as third parties involved.
Sales – approach new customers
Purpose: Below is a description of how and when we will approach you if you can become a potential new customer of ours Below you can read a description of when and how we will approach you if you have indicated that you are interested in our services.
We keep the following data on the basis of Legitimate interest for 5 years (After last contact), with Google, Salesforce, and Hubspot as third parties involved.
Sales – potential becomes customer
Purpose: Below you can see what we process when we enter into a relationship.
We keep the following data on the basis of the Performance of the contract for 2 years (After termination of the contract), with Google, Salesforce, Hubspot, and Google Cloud Platform as third parties involved.
Leaving contact details on the website
Purpose: Your data is processed when you leave your data when you visit our website. Below you can see which data this is and when this happens.
On the basis of the Performance of the contract, we keep data for 28 days (after assessing mutual interest) with Google, Hubspot and Salesforce as third parties involved.
Office visit
Purpose: Below you can see what we process from you when you visit our office in the Netherlands.
We keep the following data on the basis of Legitimate interest for 2 months (After visit), with Google, and Microsoft as third parties involved.
Debtors & Creditors administration
Purpose: Conducting debtor and creditor administration, including collecting receivables and possibly sending reminders.
For this administration, we are legally obliged to process various data and to store it for a longer period. In certain cases, this is personal data, for example when the debtor is a natural person. Or when we communicate with a contact person within your organization.
We keep the following data on the basis of Legal Obligation for 7 years (After transaction), with Exact Online and Remmerswaal as third parties involved.
Video surveillance HQ
Purpose: Securing the office building and employees through camera surveillance
To guarantee your and our property and safety, there is video surveillance in and around our building in a few places. The cameras are visible and the images are only viewed when there is reason to do so.
We keep the following data on the basis of Legitimate Interest for 28 days (After transaction), and store the data on internal servers:
Receivers
We have listed above for each process which third parties may be involved in the processing of your personal data. Below you will find a complete overview of these parties, with their role and contact details. In this way we ensure that you always know where your personal data is processed.
Some third parties may process your personal data outside the EU. We always ensure that the correct (contractual) measures have been taken for this, as prescribed by the GDPR. An important part of this is that we take so-called “appropriate guarantees”. You can read below what these are per recipient.
Remmerswaal
Role in processing: Administrative office.
Contact details involved party:
Onder de Linden 7
4695 BV , Sint Maartensdijk
Nederland
Rabobank
Role in processing: Finance and Pension fund advisor
Contact details involved party:
Croeselaan 18
3521 CB , Utrecht
Nederland
Allianz Nederland Groep N.V.
Role in processing: Pension fund
Contact details involved party:
Coolsingel 120
3011 AG ROTTERDAM
Exact Netherlands BV
Role in processing: Accounting software
Contact details involved party:
Molengraaffsingel 33
2629 JD, Delft
Microsoft
Role in processing: Office/ software solutions
Contact details involved party:
One Microsoft Way 1
98052, Redmond
Verenigde Staten
Processing (possibly) takes place outside the EEA
Safeguards/additional measures: Binding
Corporate Rules (United States of America)
Unit4
Role in processing: IT- administrator
Contact details involved party:
Stationspark 1000
3364 DA, Sliedrecht
Salesforce
Role in processing: CRM system
Contact details involved party:
Gustav Mahlerlaan 2970
1081 LA, Amsterdam
Processing (possibly) takes place outside the EEA
Safeguards/additional measures: : Standard
Contractual Clauses (United States of America)
Hubspot
Role in processing: CRM system
Contact details involved party:
1 Sir John Rogerson’s Quay, Dublin 2, Ireland
Mailchimp
Role in processing: Direct mailing
Contact details involved party:
675 Ponce de Leon Ave NE Suite 5000
Georgia 30308, Atlanta
Verenigde Staten
Processing (possibly) takes place outside the EEA
Safeguards/additional measures: Standard Contractual
Clauses (United States of America)
Role in processing: Marketing/ Analytics/ Customer
service
Contact details involved party:
1600 Amphitheatre Parkway 1600
CA94043, Mountian View
Verenigde Staten
Processing (possibly) takes place outside the EEA
Safeguards/additional measures: Standard
Contractual Clauses (United States of America)
Google Cloud Platform
Role in processing: Hosting
Contact details involved party:
1600 Amphitheatre Parkway 1600
CA94043, Mountain View
Verenigde Staten
Processing (possibly) takes place outside the EEA
Safeguards/additional measures Standard Contractual
Clauses (United States of America)
The Rocket Science Group, LLC
Role in processing: Main entity Mailchimp (direct
mailing)
Contact details involved party:
675 Ponce de Leon Ave NE Suite 5000
Georgia 30308, Atlanta
Verenigde Staten
Processing (possibly) takes place outside the EEA
Safeguards/additional measures Standard
Contractual Clauses (United States of America)
Changes in the privacy statement
When our organization changes or our processes change, this may have consequences for the processing of your personal data. We will always communicate transparently with you about this. If necessary, we will adjust this privacy statement. At the top you can see the effective date of this privacy statement.
Your rights
When we process your personal data, you have certain rights. You can exercise these by submitting a request, indicating which right (or rights) you wish to exercise. For this you can use the contact details that you will find at the bottom of this privacy statement.
Make sure that you always clearly indicate who you are, so that we can be sure that we do not change or delete data from the wrong person. The above rights depend on the legal basis on which we base the processing of your personal data. For more information about your rights, we refer to the website of the Dutch Data Protection Authority.
It is also possible that under certain circumstances we are legally unable to follow up on your request.
For example, when we are prohibited from doing so by law or by a competent authority. If possible, we will inform you about this when you submit your request.
In principle, we will comply with your request within 1 month. However, this period may be extended for reasons related to the specific rights of data subjects or the complexity of the request. If we extend this term, we will inform you in good time.
You have the following rights:
Right of access
Would you like to know which of your personal data Maxxton processes? Then you can submit a request for access. We probably process multiple categories of personal data from you and/or for multiple purposes. You may wish to view only part of these processing operations. Please indicate with your request exactly what you would like to see.
Right to rectification
Does your personal data at Maxxton appear to be incorrect, incomplete or irrelevant? Then you can make an additional request to have your data changed or supplemented. You can request rectification if your personal data is incorrect, incomplete, irrelevant to the purpose for which it was collected or if we use your data in a way that you believe is illegal.
Right to be forgotten
You can, in a number of cases, ask Maxxton to delete your personal data. However, we think it is important to inform you that we may not be able or allowed to delete all your data. We will always inform you about this.
Right to data portability
You can invoke the right to data portability (transferability of personal data) if Maxxton processes your data because you have given us Consent to do so. Or to perform an agreement with you. Please note: this only applies to data that Maxxton processes digitally, so not to paper files.
Right to restriction of processing
In certain situations, an organization may no longer use your personal data. But the organization cannot (yet) delete the data. The organization must then temporarily stop using your data. This is called the right to restriction of processing. You can ask Maxxton to restrict the processing of your data.
Right to object
You have the right to ask Maxxton to stop using your personal data in two situations. This is called the right of objection. Firstly, if we use your data for direct marketing. Secondly, you can object to the use of your personal data because of your specific situation.
Right to withdraw consent
Does Maxxton process your personal data based on your consent? Then you can withdraw your consent at any time. From that moment on, we no longer process your personal data. Unless there is (also) another basis for processing your data.
Technical and organizational measures
Security of personal data is of great importance to us. To protect your privacy, we take the following measures:
Technical measures:
Organizational measures
Make a complaint
If you wish to make a complaint about the use of your personal data, you can send an email to [email protected]. We handle every complaint internally and communicate this further with you.
In addition, you have the right to file a complaint with the supervisory authority at any time. In the Netherlands, this is the Dutch Data Protection Authority.
Contact details
If you have any questions or want to know what personal data we have about you, please contact us.
See the contact details below.
Maxxton B.V.
Kousteensedijk 5
4331 JE Middelburg
The Netherlands
E-mailadres: [email protected]
Telefoon: +31 (0)118 671010
The Maxxton Group (“Maxxton”) is the leading IT services and Consultancy provider for the hospitality and accommodation rental sector and as a part of social responsibility, Maxxton is committed to International compliance with data protection laws.
To perform services effectively Maxxton requires to gather information about customers, employees, business contacts, and other organizations who are directly or indirectly associated with Maxxton.
Maxxton will notify in the form of a transparency report every 6 months on the requests that have been received from the relevant requesting authority. Maxxton commits to preparing such a semi-annual report (a “Transparency Report”), which reflects the number and type of data disclosure requests it has received for the preceding six months, which may be subject to restrictions by applicable law or court order.
Maxxton shall publish the Transparency Report on its website, and make the report available upon request to the competent data protection authorities. National regulations and policies may prevent this notification to the data subject. Maxxton nonetheless commits to informing the data subject as soon as the restrictions on the disclosure of data are lifted and to make its best efforts to obtain the waiver of the prohibition to disclose.
