Privacy policy
Last updated: 13 November 2026
This policy explains which personal data we process when you visit this website, and your rights under the General Data Protection Regulation (GDPR). In short: no cookies, no tracking, no advertising.
1. Controller
bitova GmbH, Samariterstraße 5, 50968 Köln, Germany. Represented by the managing directors Ali Fallahi and Arian Ghahramani. Email: info@maridex.app. See also our imprint.
2. Hosting and server logs
This website consists of static pages delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, on our behalf (data processing agreement under Art. 28 GDPR). When you open a page, your browser transmits technical data that is necessary to deliver it: IP address, date and time, the page requested, browser and operating system, and the referring page. This data is used only to deliver the site and keep it secure, and is not combined with other data. Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest is a secure and reliable website. Cloudflare may process data in the USA; Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
3. No cookies, no tracking
This website sets no cookies and uses no analytics, tracking or advertising services. Fonts and all other resources are served by us; your browser does not contact third parties such as Google when you load a page.
4. Booking a demo (Calendly)
On the demo page you can book an appointment with Calendly, a service of Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. The calendar is only loaded after you click “Load calendar”. Only then does your browser connect to Calendly, which receives your IP address and the data you enter (such as name, email address and the chosen time) and may set cookies. Legal basis: your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time for the future; for the appointment itself, Art. 6 (1) (b) GDPR. Calendly is certified under the EU-US Data Privacy Framework. Details: calendly.com/privacy.
5. Contact by email
If you write to us, we process your details and your message to answer your request. Legal basis: Art. 6 (1) (b) GDPR where your request concerns a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data when it is no longer needed, unless statutory retention periods apply.
6. Maridex as a product
This policy covers the website. When your company uses Maridex, we process the documents and data in it on your company’s behalf, under a data processing agreement (Art. 28 GDPR) that is part of the contract. Each customer has a private, isolated instance in the region agreed in the contract. For answers from the AI assistant, the question and the relevant passages are transmitted to the AI service named as a sub-processor in the data processing agreement, through its business interface. On request, your company’s own AI provider can be used instead.
7. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7 (3)). To exercise your rights, write to info@maridex.app. You also have the right to lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
8. Changes
We update this policy when the website changes. The current version is always available on this page.