Privacy & data protection
Last updated: 2026
Scope: mendex.ai website

Privacy Policy

This policy explains how Mendex processes personal data when you visit our website, contact us, book an appointment, apply for a role or use an interactive website feature.

01 ยท Privacy at a glance

How Mendex processes personal data.

This policy applies to mendex.ai, www.mendex.ai and Mendex website interactions that link to it.

It explains what data we collect, why we use it, which providers may receive it, how long it is retained, and which data protection rights you can exercise.

02

Scope and responsibility

This policy applies to mendex.ai, www.mendex.ai and Mendex website interactions that link to it. The website operator and controller is Mendex, Weddigenufer 2, 32052 Herford, Germany. Privacy enquiries and rights requests can be sent to info@modeco.tech. Separate customer agreements may apply when Mendex processes data on behalf of a business customer.

03

Personal data we collect

Data you provide can include your name, business or employer, email, phone number, website, LinkedIn profile, country, message, selected service or appointment topic, appointment date and time, job application information, CV and information entered into the chatbot. With analytics consent, we can also process a pseudonymous session identifier, IP address, page path, page title, referrer, browser language, timezone, screen size, activity status and approximate or browser-approved location information.

04

How and why we use personal data

We use personal data to answer enquiries, provide requested information, schedule appointments, assess job applications, operate support and chatbot features, secure the website, understand consented website usage, improve our services, establish or perform business relationships, and meet legal obligations. Depending on the context, processing is based on consent, requested pre-contractual steps, contract performance, legitimate interests in secure and effective business operations, or compliance with law.

05

Recipients and service providers

Relevant providers can include website and infrastructure providers, SMTP/email services, Microsoft Graph and Microsoft 365 for appointment scheduling, OpenAI and Pinecone for chatbot functionality, and BigDataCloud or ipwho.is for consented analytics location enrichment. Authorized personnel and contractors may receive data where required for recruitment, enquiries or service delivery. Data can also be disclosed where required by law or to protect legal rights and system security.

06

Cookies and automatic technologies

Necessary storage records your consent decision. Functional and analytics technologies remain disabled until you consent. The current inventory, purposes and expiration periods are listed in our Cookie Policy. Your selection can be changed through Cookie Settings in the footer.

07

Retention

Mendex keeps personal data only for as long as needed for the collection purpose and applicable legal, accounting, security, dispute-resolution or contractual requirements. Retention depends on the type and sensitivity of the data, the relationship with Mendex and the applicable obligation. Browser identifiers controlled by Cookie Settings are removed where technically possible when consent is withdrawn.

08

International transfers

Some providers may process data outside the European Economic Area. Where data protection law requires safeguards, Mendex assesses the transfer and uses an applicable mechanism, such as an adequacy decision or contractual safeguards. Information about safeguards relevant to a specific request can be obtained through the privacy contact above.

09

Security

Mendex uses appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration or disclosure. Access is limited according to operational need. No internet transmission or storage system can be guaranteed to be completely secure.

10

Your data protection rights

Subject to applicable law, you may request access, correction or deletion, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing and may lodge a complaint with the competent authority. Mendex may verify your identity before completing a request.

11

Third-party websites

The website contains links to third-party websites and social platforms. Their privacy practices are controlled by the relevant third party. Mendex encourages you to review their notices before providing personal data. Simply displaying an external link does not activate that provider on the Mendex website.

12

Children

The Mendex website and business services are not directed to children. Mendex does not knowingly request personal data from children through this website.

13

Contact and policy updates

For privacy questions or rights requests, email info@modeco.tech or write to Mendex at Weddigenufer 2, 32052 Herford, Germany. Mendex may update this policy when services, providers, legal requirements or processing purposes change. Material changes affecting consent will result in an updated notice or a new consent request where required.