Privacy Policy

Introduction

This Privacy Policy explains how Maximus 360° GmbH ("we," "our," or "us") collects, uses, discloses, and safeguards your personal information when you visit our website and use our moving and transport services.

We are committed to protecting your privacy and ensuring transparency in our data processing practices in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

1. Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Personal Information You Provide Directly:

• Full name
• Email address
• Phone number (mobile/landline)
• Pickup and delivery addresses
• Moving/transport date and time preferences
• Floor number and elevator availability
• Details about items to be moved (furniture, boxes, etc.)
• Special requirements or additional notes

Technical Data Collected Automatically:

• IP address
• Browser type and version
• Device information (type, model, operating system)
• Pages visited and time spent on each page
• Referring website addresses
• Date and time of access
• Cookie identifiers and preferences

3. How We Collect Your Data

We collect data through the following methods:

• Booking forms: When you submit a booking request through our online form
• Email and phone: When you contact us directly
• Cookies: Automatically when you browse our website (see our Cookie Policy)
• Analytics tools: Through Google Analytics and similar services
• Newsletter subscriptions: When you sign up for our communications

4. Purpose of Data Processing

We use your personal data for the following purposes:

• To process and manage your moving service requests and bookings
• To provide quotes and pricing information
• To communicate with you regarding your booking (confirmations, updates, etc.)
• To improve our website functionality and user experience
• To send you marketing communications (only with your explicit consent)
• To analyze website usage and optimize our services
• To comply with legal obligations (accounting, tax, etc.)
• To prevent fraud and ensure security
• To respond to your inquiries and provide customer support

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR (Article 6):

• Consent (Art. 6(1)(a)): When you explicitly agree to our data processing, such as when subscribing to newsletters or accepting cookies
• Contractual necessity (Art. 6(1)(b)): To fulfill our contract with you when you book our moving services
• Legitimate interests (Art. 6(1)(f)): To improve our services, prevent fraud, ensure security, and conduct analytics
• Legal obligation (Art. 6(1)(c)): To comply with applicable laws and regulations (e.g., accounting, tax laws)

6. Sharing Data with Third Parties

We may share your personal data with the following third parties:

• Analytics providers: Google Analytics - to understand website usage and visitor behavior
• Email service providers: Mailchimp or similar services - for sending newsletters and booking confirmations
• Payment processors: Stripe, PayPal, or similar - if you make payments online
• Cloud hosting providers: Vercel, Netlify, or similar - for website hosting and data storage
• Customer relationship management (CRM) tools: For managing customer communications
• Legal authorities: When required by law, court order, or legal process

Important: We ensure that all third-party service providers comply with GDPR and have appropriate data protection measures in place. We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

• Booking requests and quotes: 2 years from the date of inquiry
• Completed service records: 5-7 years for accounting and legal purposes
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 26 months (Google Analytics default setting)
• Cookie data: As specified in our Cookie Policy (typically 1-2 years)

After the retention period expires, we will securely delete or anonymize your personal data.

8. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to erasure / "Right to be forgotten" (Art. 17): Request deletion of your personal data
• Right to restrict processing (Art. 18): Request limitation of how we process your data
• Right to data portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent (Art. 7(3)): Withdraw your consent at any time (does not affect processing done before withdrawal)
• Right to lodge a complaint (Art. 77): File a complaint with your local data protection supervisory authority

How to exercise your rights: To exercise any of these rights, please contact us at info@maximus360.com. We will respond to your request within 30 days as required by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure with access controls
• Regular security assessments and updates
• Employee training on data protection
• Limited access to personal data (need-to-know basis)

Please note: While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions (transfers to countries deemed adequate by the EU)
• Privacy Shield certification (where applicable)

11. Filing a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a data protection supervisory authority.

For users in the European Union: You can contact your local data protection authority.

For users in Germany: The relevant authority is the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI):

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of any significant changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending you an email notification (if we have your email address)

We encourage you to review this policy periodically to stay informed about how we protect your information.