1. Introduction
2. Definitions
- “Personal Data” means any data about an identifiable individual.
- “Data Principal” refers to the individual to whom the personal data relates.
- “Processing” includes collection, storage, use, sharing, or deletion of personal data.
3. Personal Data We Collect
We may collect the following categories of data:
3.1 Identity Information
- Full name
- Date of birth
- Gender
3.2 Contact Information
- Phone number
- Email address
- Residential address
3.3 Travel Documentation
- Passport details
- Visa documentation
- National identification details (if required)
3.4 Financial Information
- Payment details
- Billing information
- Transaction records
3.5 Health Information (Where Necessary)
- Medical conditions relevant to travel
- Insurance details
- (Collected only where necessary for travel arrangements.)
3.6 Website Usage Information
- IP address
- Browser type
- Device information
- Cookies and usage analytics
4. Purpose of Data Collection
Personal Data is collected for lawful purposes including:
- Processing bookings
- Issuing tickets
- Hotel reservations
- Visa facilitation
- Travel insurance processing
- Regulatory compliance
- Customer communication
- Marketing communication (where permitted)
- Fraud prevention and security
5. Lawful Basis for Processing
Processing of Personal Data is based on:
- Consent provided by the Data Principal
- Necessity for performance of a contract
- Compliance with legal obligations
- Legitimate business interests
6. Sharing of Personal Data
Personal Data may be shared, where necessary, with:
- Airlines
- Hotels
- Cruise operators
- Ground transport providers
- Visa processing centres
- Insurance providers
- Government authorities
- Payment gateway providers
- Technology and IT service providers
7. International Data Transfers
8. Data Retention
Personal Data shall be retained only:
- For the duration necessary to fulfil travel services;
- For compliance with statutory obligations;
- For dispute resolution and audit purposes;
- For accounting and regulatory requirements.
Data will be deleted or anonymised when no longer required.
9. Data Security
We implement reasonable administrative, technical, and organisational measures to protect Personal Data from:
- Unauthorised access
- Disclosure
- Alteration
- Destruction
However, no electronic transmission or storage system is completely secure.
10. Rights of Data Principals
Subject to applicable law, you have the right to:
- Request access to your Personal Data
- Request correction of inaccurate data
- Request erasure of data (where legally permissible)
- Withdraw consent
- Nominate another individual to exercise rights in case of incapacity or death
Requests may be submitted via email to: official@maximilianholidays.com.
11. Withdrawal of Consent
Consent may be withdrawn at any time by written request.
However, withdrawal may impact our ability to provide travel services or fulfil contractual obligations.
12. Marketing Communication
We may send promotional emails or messages regarding tours and offers.
You may opt out of marketing communications at any time.
13. Cookies and Website Tracking
- Enhance user experience
- Analyse website traffic
- Improve functionality
Users may disable cookies through browser settings.
14. Grievance Officer
15. Policy Updates
We reserve the right to amend this Privacy Policy from time to time.
Updated versions will be published on our website.