Privacy policy

This policy explains which personal data we process when you visit this website, when you are in contact with us as a customer, prospect or business partner, and when Maridex Onboard checks its licence. It also explains your rights under the General Data Protection Regulation (GDPR). In short: no cookies, no tracking, no advertising.

1. Controller

bitova GmbH, Samariterstraße 5, 50968 Köln, Germany. Represented by the managing directors Ali Fallahi and Arian Ghahramani. Email: info@maridex.app. See also our imprint.

2. Hosting and server logs

This website consists of static pages delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, on our behalf (data processing agreement under Art. 28 GDPR). When you open a page, your browser transmits technical data that is necessary to deliver it: IP address, date and time, the page requested, browser and operating system, and the referring page. This data is used only to deliver the site and keep it secure, and is not combined with other data. Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest is a secure and reliable website. Cloudflare may process data in the USA; Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

3. No cookies, no tracking

This website sets no cookies and uses no analytics, tracking or advertising services. Fonts and all other resources are served by us; your browser does not contact third parties such as Google when you load a page.

4. Booking a demo (Calendly)

On the demo page you can book an appointment with Calendly, a service of Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. The calendar is only loaded after you click “Load calendar”. Only then does your browser connect to Calendly, which receives your IP address and the data you enter (such as name, email address and the chosen time) and may set cookies. Legal basis: your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time for the future; for the appointment itself, Art. 6 (1) (b) GDPR. Calendly is certified under the EU-US Data Privacy Framework. Details: calendly.com/privacy.

5. Contact by email

If you write to us, we process your details and your message to answer your request. Legal basis: Art. 6 (1) (b) GDPR where your request concerns a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data when it is no longer needed, unless statutory retention periods apply.

6. Customers, prospects and business partners

If you are a contact person of a customer, prospect or business partner, we process your name, business contact details, role and our correspondence with you. We use them to prepare and perform contracts, to invoice, to provide support and to inform you about Maridex. Legal basis: Art. 6 (1) (b) GDPR where you are our contractual partner yourself, otherwise Art. 6 (1) (f) GDPR; our legitimate interest is working with your company. Independent sales agents who work for us may pass your business contact details to us when they introduce your company; you can object to this at any time (Art. 21 GDPR).

Recipients are our IT service providers (hosting, email), who process the data on our behalf under data processing agreements, our tax adviser and banks, and, for the customers they introduced, our sales agents. We keep the data for as long as the business relationship lasts and claims can arise from it. Invoices and other records that commercial and tax law requires us to keep (§ 257 HGB, § 147 AO) are kept for up to ten years.

7. Licence check and updates of Maridex Onboard

When Maridex Onboard starts on a ship PC, and regularly while it is online, it sends its licence number to license.maridex.app and receives the address of the company’s server. It also checks for updates and downloads them there. This transmits the IP address of the vessel’s internet connection, the licence number and the app version, but no names. We use this data only to deliver Maridex and keep it secure; the licence server does not store the requests. It is operated on our behalf by Cloudflare (see section 2). Legal basis: Art. 6 (1) (b) GDPR towards our customer, and Art. 6 (1) (f) GDPR; our legitimate interest is a working and secure service.

8. Maridex as a product

When your company uses Maridex, we process the documents and data in it on your company’s behalf (Art. 28 GDPR). Your company is responsible for this data; our data processing agreement sets out how we process it, with our technical and organisational measures and our sub-processors. Each customer has a private, isolated instance in a German data centre; other locations can be agreed. To make the documents searchable and to answer questions, their text and each question are transmitted to an AI service through its business interface. On request, your company’s own AI provider can be used instead.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7 (3)). To exercise your rights, write to info@maridex.app. You also have the right to lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

10. Changes

We update this policy when the website or our processing changes. The current version is always available on this page.