Privacy Policy

1. Controller

2. Accessing this website

When this website is accessed, technically necessary connection data is processed. This may include the IP address, date and time of the request, requested page, transferred data volume, browser and device information, referrer, and status or error data.

The data is processed to deliver the website, ensure its stability and security, and prevent attacks or misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

3. Hosting

This website is hosted by an external service provider. In particular, IP addresses, device and browser information, access data and log data may be processed.

This processing is necessary to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement is in place with the hosting provider. Where data is processed outside the EEA, this is based on the applicable data protection safeguards.

4. Cookies and similar technologies

MDX North currently does not use analytics, marketing or personalisation cookies and does not use Local Storage or comparable technologies for optional purposes.

The hosting infrastructure sets the technically necessary security cookie __cf_bm. It is used to identify automated requests, protect the site against abusive traffic and provide it securely. The cookie expires after 30 minutes of continuous inactivity.

Consent is not required for this strictly necessary security cookie under § 25(2)(2) TDDDG. Where personal data is processed, the legal basis is Art. 6(1)(f) GDPR and our legitimate interest in secure website operation.

5. Project inquiry form

When you submit the project inquiry form, we process the information provided to review and respond to your inquiry and coordinate possible next steps. Required fields are your name, email address, project type, preferred timeline and project description.

We use Resend, a service provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, for the technical delivery of form submissions. The form details are transmitted via Resend to our email infrastructure. A data processing agreement is in place with Resend. For transfers to the United States, Resend relies on the EU-U.S. Data Privacy Framework and, additionally, the EU Standard Contractual Clauses.

Where your inquiry concerns a contract or pre-contractual steps, processing is based on Art. 6(1)(b) GDPR. Otherwise, it is based on Art. 6(1)(f) GDPR and our legitimate interest in handling business enquiries. The data is deleted once the inquiry has been fully handled, unless statutory retention duties or legal claims require longer storage.

6. Contact by email

If you contact us by email, we process the information you provide to handle your request and respond to follow-up questions. Where your request concerns a contract or pre-contractual steps, the legal basis is Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR and our legitimate interest in handling business enquiries.

The data is deleted once the enquiry has been completed, unless statutory retention obligations or legal claims require further storage.

7. No analytics or embedded third-party content

We currently do not use web analytics, advertising trackers, social-media pixels, externally loaded fonts, maps, videos or other embedded third-party content.

8. Your rights

Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests.

You may also lodge a complaint with a data protection authority. The competent authority for businesses based in Bremen is:

9. Date of this policy

This privacy policy is effective as of 28 July 2026.