Personal Data Protection and Privacy Policy
Introduction
This Privacy Policy explains how the information collected from you while visiting this website and benefiting from the services we offer is used and protected. By visiting this site and requesting our services, you are deemed to have accepted the terms stated herein.
I. Purpose of the Personal Data Protection and Processing Policy
Since 2004, Maxx Class Group has prioritized the confidentiality of customer data at the highest level and processes personal data in compliance with legal regulations and ethical principles. Privacy is one of our core corporate values. We commit to complying with all responsibilities imposed by the Personal Data Protection Law. This policy covers the privacy of data related to our customers, potential customers, employees, and business partners.
II. Scope and Amendments of the Policy
This Policy has been prepared in compliance with Law No. 6698 on the Protection of Personal Data (“KVKK”). Our company processes customer data only in accordance with the law, based on explicit consent or legal obligations. The data is collected in a limited manner for the stated purposes and retained only for the required period.
When necessary, this policy may be updated by Maxx Class Group due to legal obligations or for the purpose of improving service quality.
III. Fundamental Rules for Processing Personal Data
Lawfulness and fairness: Maxx Class Group ensures that the data collected originates from legal sources and in accordance with ethical standards.
Accuracy and being up-to-date: We prioritize the accuracy and currency of personal data and take update requests seriously.
Processing for specific, explicit, and legitimate purposes: Data is processed only for the purposes for which it was collected and within the scope of provided services.
Being relevant, limited, and proportionate to the purpose: Data is processed only to the extent necessary for the intended purpose.
Retention for the required period: Data is deleted, destroyed, or anonymized once the legal retention period expires or the processing purpose is no longer valid.
Minimum Data Principle
Maxx Class Group collects only the necessary data and stores it within its systems. Unnecessary data is not stored, and if received, it is either deleted or anonymized. Special categories of data, such as health information, are processed with extra care and only for protecting the individual's well-being.
Deletion of Personal Data
When the legal retention period expires or the processing purpose ceases, the data is deleted, destroyed, or anonymized by Maxx Class Group.
Accuracy and Up-to-Dateness
Our company processes personal data based on the declarations provided by individuals. The accuracy of the declared information is assumed unless otherwise indicated. Update requests are honored to keep the data up to date.
IV. Customer, Potential Customer, and Business Partner Data
Maxx Class Group processes personal data of its customers, potential customers, and business partners in accordance with Law No. 6698.
Types of Data Processed
Identity Information: Name, surname, place/date of birth, ID/passport/driver’s license details
Contact Information: Address, phone number, e-mail
Financial Information: Payment details, bank account numbers, invoice details
Data Processing Within the Scope of Contract and Service
In case a contractual relationship is established between the parties, personal data may be processed without requiring customer consent, provided it is within the requirements of the service being rendered.
Data Sharing with Business Partners
Maxx Class Group may share data with business and solution partners to the extent necessary for the execution of the service. Security commitments are obtained from all parties involved.
E-Invoice & E-Archive
Every customer who completes a reservation is registered in our system, and invoices are sent via e-mail. The customer is responsible for providing an accurate e-mail address.
If the booking is made for another person, the invoice will be sent to the e-mail address owner.
An e-Archive Invoice is an electronic document created and stored in compliance with the Tax Procedure Law. All digital invoices issued to non-e-invoice subscribers fall under the scope of e-archive.
Commercial Electronic Messages
Maxx Class Group sends commercial messages only to individuals who have given explicit consent. Consent can be obtained electronically or in writing.
This includes marketing, promotion, campaigns, announcements, and similar content.
V. Company Data Processing and Sensitive Personal Data
Maxx Class Group processes personal data only for legitimate purposes as part of the services it provides. No data is processed outside of the service scope.
Sensitive Personal Data
Special categories of personal data such as race, ethnicity, political opinions, religious beliefs, health information, and criminal records are processed only with explicit consent and as required by law. Maxx Class Group implements all security measures specified by the Board during such processing.
Automated Data Processing
Personal data may be processed through software and automated systems. However, such data shall not be used to the disadvantage of the data subject. Automated decisions are used only for internal evaluations.
Cookie Policy
Some data may be collected via cookie technologies on our website. Users are informed in detail and asked for consent regarding cookie usage.
Types of Cookies
Functional and Analytical Cookies: Enhance user experience and enable statistical analysis.
Commercial Cookies: Display advertisements tailored to user interests.
Third-Party Cookies Used
Google: analytics, doubleclick
Facebook: ad targeting
Insider, Hotjar: user behavior analytics
Criteo, RTBHouse: personalized advertising
Managing Cookies
You can allow, restrict, or delete cookies through your browser settings. These actions vary depending on your browser.
VI. Employee Data
Maxx Class Group processes and protects employee personal data only to the extent necessary within the context of the employment relationship. Personal data collected during job applications is used solely for recruitment purposes by authorized personnel.
Processing Within the Scope of Employment
Personal data may be processed without additional consent for the purposes of insurance, compliance with legal obligations, and business operations.
Legal Obligations and Employee Benefits
To ensure the lawful rights and benefits of employees, such as private health insurance, Maxx Class Group may process personal data without explicit consent.
Use of IT Equipment
Devices such as computers and phones provided by the company are strictly for business use. Maxx Class Group reserves the right to monitor and audit data on such equipment.
VII. Transfer of Personal Data Domestically and Internationally
Maxx Class Group transfers data only within the legal framework and with explicit consent. Transfers to business partners, suppliers, or solution partners are done only for the purpose of executing services.
Transfers abroad are carried out in compliance with the security provisions specified by the Personal Data Protection Law.
VIII. Rights of the Data Subject
Maxx Class Group recognizes the following rights of data subjects under Law No. 6698:
- To learn whether personal data is processed
- To request information about data processing
- To learn the purpose of processing and whether it is used appropriately
- To learn third parties to whom the data is transferred within or outside the country
- To request correction of incomplete or inaccurate data
- To request deletion or destruction of personal data under legal conditions
- To request notification of changes to third parties to whom data was transferred
- To object to a result arising against the individual through analysis by automated systems
- To claim compensation in case of damages due to unlawful processing
Requests regarding these rights can be made using the application form available on our official website.
IX. Principle of Confidentiality
All employees and stakeholders of Maxx Class Group are obliged to maintain the confidentiality of personal data. No one may disclose, copy, reproduce, or use personal data for purposes other than those permitted by law or contract.
X. Data Security
Maxx Class Group takes all necessary technical and administrative measures to protect personal data and prevent unauthorized access. Security infrastructure is regularly updated, and software and data policies are designed in accordance with industry standards. System audits are performed to ensure the sustainability of data protection.
XI. Audits
Maxx Class Group conducts regular internal and external audits to ensure the protection of personal data and the enforcement of privacy policies.
XII. Breach Notification
In the event of a breach of personal data, Maxx Class Group will immediately take necessary actions to mitigate damages and inform the affected individuals. If the breach poses a serious risk, the Personal Data Protection Authority will be notified in accordance with applicable regulations.
XIII. Policy Amendments and Updates
Maxx Class Group reserves the right to make changes to this Privacy Notice when deemed necessary. Updates are effective upon publication on the website. Users are considered informed as soon as the updated policy is accessible through the homepage.
In the event of significant updates, registered users may also be notified directly through their provided communication channels.
XIV. Application Process
Under Article 13 of the Personal Data Protection Law (KVKK), data subjects may submit their requests in writing or through other methods determined by the Personal Data Protection Authority.
Requests must be submitted with a signed application form and a photocopy of a valid ID, delivered to the company’s address:
Address: Çırkan Mahallesi Ayfer Feray Sokak. No:2 Bodrum/Muğla
Website: https://www.maxxclass.com
All requests will be processed within a maximum of 30 days. If the transaction incurs a cost, the applicant may be charged in accordance with the tariff set by the Authority.
XV. Conclusion
This document was enacted on 01.01.2020. Any future changes will be published with the updated effective date and content. For detailed information about our KVKK and Privacy Policy, you may contact us at any time.