Privacy Policy

Effective date: April 26, 2026 | Last updated: April 26, 2026

1. Who We Are

PVMAXX is a premium brand of Smart Solar Technologies (Smart Güneş Enerji Teknolojileri A.Ş.), a publicly listed Turkish solar manufacturer (Borsa Istanbul: SMRTG).

This website (pvmaxx.com) is operated by:

Smart Global Enterprises & Trading BV — Amstelplein, 1096 HA Amsterdam, Netherlands (EU operations)
Smart Green Energy Trading LLC — 2513 Shallowford Rd Ste 200, Marietta, GA 30066, USA (US operations)

For privacy inquiries: us@pvmaxx.com

2. What Data We Collect

We collect the following categories of personal data:

Information you provide directly

Contact form submissions: name, company, email, phone number, job title, project details, and message content
Email correspondence: any information you include when emailing us
Business inquiries: company details, project specifications, volume requirements

Information collected automatically

Usage data: pages visited, time spent, referral source, browser type, device type, operating system
IP address: used for approximate geographic location and security purposes
Cookies: see Section 7 (Cookie Policy) below

3. How We Use Your Data

We use your personal data for the following purposes:

Responding to your inquiries and providing requested information
Processing and managing business relationships
Sending product information, datasheets, and pricing (only when requested)
Improving our website and user experience
Complying with legal obligations
Protecting our legitimate business interests

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area (EEA), we process personal data under the following legal bases:

Consent: when you submit a contact form or subscribe to communications
Legitimate interest: website analytics, security, and improving our services
Contract performance: when processing data related to a business agreement
Legal obligation: when required by applicable law

5. Data Sharing & Third-Party Processors

We share personal data only with the following categories of service providers, under appropriate data processing agreements:

Formspree Inc. — form submission processing (US-based; data processed in the US)
Vercel Inc. — website hosting and content delivery (US-based)
Google LLC — Google Analytics for website usage statistics (when enabled; US-based)
LinkedIn Corporation — LinkedIn Insight Tag for advertising analytics (when enabled; US-based)

We do not transfer personal data to any country that does not provide adequate data protection without appropriate safeguards (Standard Contractual Clauses or equivalent).

6. Your Rights

For all users

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent at any time

Additional rights under GDPR (EEA residents)

Right to data portability
Right to restrict processing
Right to object to processing based on legitimate interest
Right to lodge a complaint with a supervisory authority (Dutch DPA: Autoriteit Persoonsgegevens)

Additional rights under CCPA (California residents)

Right to know what personal information is collected and how it is used
Right to request deletion of personal information
Right to opt-out of the sale of personal information — we do not sell personal information
Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at us@pvmaxx.com. We will respond within 30 days.

7. Cookie Policy

We use cookies and similar technologies to make this site work, understand how visitors use it, and measure marketing performance. We follow a US opt-out model: when you first visit, you can accept all, reject non-essential, or manage preferences. You can change your preferences at any time using the “Manage Cookies” link in the footer.

Cookies Used on This Site

Category	Vendor / Cookie	Purpose	Retention
Essential	Formspree	Contact form submission and anti-abuse	Session
Essential	Google reCAPTCHA	Spam and bot protection on contact forms	6 months
Essential	pvmaxx_consent (first-party, localStorage)	Remembers your cookie preferences	13 months
Essential	pvmaxx_dl_auth (first-party)	Remembers that you have requested a datasheet so you do not have to re-enter your details	30 days
Analytics	Google Analytics 4 (_ga, _ga_*)	Measures site traffic and usage. IP addresses are anonymized.	Up to 14 months
Analytics	Google Tag Manager	Loads and orchestrates analytics tags only after consent	Session
Marketing	LinkedIn Insight Tag (li_*, lidc, bcookie)	Measures the performance of PVMAXX marketing on LinkedIn. We do not run third-party advertising on this site.	Up to 6 months

Your Choices

Use the cookie banner shown on your first visit to accept or reject non-essential cookies
Use the “Manage Cookies” link in the footer at any time to change your preferences
Control cookies through your browser settings (see your browser’s help documentation)
Opt out of Google Analytics across all sites with the Google Analytics Opt-Out Browser Add-on

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information. The Analytics and Marketing categories described above may constitute “sharing” under CCPA — you can opt out of these at any time by selecting “Reject Non-Essential” in the cookie banner or by toggling them off in “Manage Cookies.”

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

Contact form submissions: 24 months from last interaction, unless an active business relationship exists
Website analytics data: 14 months (Google Analytics default)
Business correspondence: duration of business relationship + 5 years (legal retention requirement)

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

HTTPS encryption for all data in transit
Security headers (HSTS, CSP, X-Frame-Options) on all pages
Access controls limiting data access to authorized personnel
Regular review of third-party processor security practices

10. Children’s Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

12. Contact

For questions, requests, or complaints regarding this privacy policy or your personal data:

Email: us@pvmaxx.com
Mail (US): Smart Green Energy Trading LLC, 2513 Shallowford Rd Ste 200, Marietta, GA 30066, USA
Mail (EU): Smart Global Enterprises & Trading BV, Amstelplein, 1096 HA Amsterdam, Netherlands