Statement of confidentiality:

The protection of your personal data is important to us. We appreciate your trust when you choose to visit and use for your online reservation and we fulfil the ensuing commitments to protect the privacy of your personal information by striving to strictly adhere to the Personal Data Protection Act (PDPA). This document, which is subject to regular updates, describes how we use and process your personal information. Here you will also find information on how to contact us if you have questions about the protection of your personal information.

The following statement sets out how data protection is guaranteed and what kind of data for what purposes are collected.

Collection, processing and transmission of personal data:

In general, you can visit our website without leaving any personal information. Personal data are collected only if you provide them voluntarily, for example when booking accommodation or making a request. When making a booking, you will be asked to complete an online form that contains: name, address, email, telephone contact number. This information is needed to process the application and complete the order (and to send an email to you to confirm the order).

Card data and authentication data

We do not have access to your card data, but only your serving bank.

We do not have access to your authentication data, but only to the bank issuing your card.

The entry and transfer of card data is secured by using an SSL protocol to encrypt the connection between your computer and the payment website of our serving bank

The authenticity of your card is verified by entering a security code (CVV2).

In addition, for your identification as a cardholder, the payment server for e-commerce of our serving bank supports the authentication schemes of the international card organizations – Verified by VISA and MasterCard Secure Code, in case you are registered to use them.

Consent and use of data for the purposes stated:

When you enter personal or business data (e-mail addresses, names, addresses), the disclosure of the data is entirely voluntary. By entering the data, you consent to the collection, processing and use of the data in order to establish contact. Collection, processing and use for any other purpose is not carried out. This consent may be revoked at any time for a future period.

Your personal data is not transferred unless you specifically wish to do so.

Right to information:

You have the right to ask for information about what data is stored about you, the origin of that data, its recipients, and the purpose for which the data is stored. Our team will give you with such information. In addition, you have the right to have your personal information corrected, blocked, and deleted in accordance with the regulatory requirements


Max and Co and implement comprehensive technical and organizational measures to protect the provided data against accidental or deliberate manipulation, loss, destruction and access by unauthorized persons. Our security measures are continually improving, keeping pace with technological developments.

Competent authorities:

It is possible to share and disclose your personal data and information to governmental or investigative bodies only if required by law (or other regulations having the force of law) in the event of a trial, a criminal investigation, a court order or a subpoena.

Additional information:

Your trust is important to us. Therefore, we will respond to all your inquiries regarding the processing of your personal data. If you have any questions that were not answered in this data protection statement or if you would like to get more detailed information on a particular issue, please contact out team at any time at



Withdrawal of consent from the data subject