Controller and contact
MPW Construction Machinery GmbH & Co. KG, Mooringer Straße 4b, 28865 Lilienthal, Germany, is responsible for processing personal data on this website. Contact: mpw@mpw-germany.com, +49 4792 955 682.
Website delivery and security
When you visit, the systems delivering this website process your IP address, request time, requested address, browser information and response status to display the website, maintain security and investigate faults. The legal basis is our legitimate interest in a reliable, secure website (Article 6(1)(f) GDPR). The website runs on servers of netcup GmbH, Karlsruhe, Germany, and is technically maintained by the web agency Peggert; both process this information on our behalf. Operational records are retained only as long as required for these purposes; records needed to investigate an incident may be retained until the investigation is complete.
Protection against attacks
In addition, a security program on the netcup GmbH server named above automatically checks every request to this website for known attack patterns, such as an attempt to retrieve configuration files or to exploit a known security vulnerability. The open-source software CrowdSec is used for this. It runs exclusively on this server and passes no data to its developer or any other third party; only the detection rules are obtained from the developer. The check takes place in memory. Requests without an attack pattern are not stored in the process.
Depending on the rule, a request with an attack pattern is either rejected or only counted. For every rejected request, the program stores an entry: the IP address, the time, the requested address, the browser identifier and further technical characteristics of the request, the detected rule and the part of the request that triggered it. If several requests with attack patterns come from the same IP address within a short time, further requests from that address are rejected for one hour. The purpose is to defend this website and the data stored with it against attacks; the legal basis is our legitimate interest in this defence (Article 6(1)(f) GDPR). The entries are automatically deleted after seven days at the latest.
Enquiries by form, email or telephone
We use the name, email address, telephone number, company details and message you provide to respond to your enquiry and arrange the requested business relationship. Required fields are marked; without them we cannot process the form. Before sending, you confirm that you have read this privacy policy. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Article 6(1)(f) GDPR; our legitimate interest is answering enquiries addressed to us. Messages from the contact form are delivered to our mailbox through the email sending service of our web service provider. We retain correspondence for the enquiry and any resulting business relationship, then delete it unless statutory retention duties or legal claims require continued storage.
Cookies and services
This website stores your cookie choice for six months in the necessary first-party cookie pg_consent, which is permitted under Section 25(2) TDDDG. The website currently uses no optional services and therefore does not ask for consent. If optional services were added, they would only become active with your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR, which you could withdraw at any time for the future via Cookie settings. The overview below is generated from the active website configuration.
Images, fonts and links
Fonts, machinery photographs and the interactive globe are served as website assets. Displaying them does not contact an external font or map service. Following an external link takes you to another provider, whose privacy information applies there.
Recipients and international processing
Access is limited to MPW personnel handling your enquiry. The following processors act on our behalf: netcup GmbH, Karlsruhe, Germany (hosting), Peggert, Worpswede, Germany (web agency, technical maintenance), Hostinger International Ltd., Cyprus (delivery of contact form messages) and STRATO GmbH, Berlin, Germany (email mailboxes). Where a provider processes data outside the EEA, this takes place only on the basis of an adequacy decision or appropriate safeguards such as standard contractual clauses. Service-specific providers and privacy links are shown in the overview below.
Your rights
Subject to the applicable conditions, you may request access, rectification, erasure, restriction and data portability (Articles 15–20 GDPR). Contact MPW using the details above. You may also lodge a complaint with a supervisory authority, in particular the Lower Saxony data protection authority (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany. We do not make automated decisions with legal or similarly significant effects about you through this website.
Right to object (Article 21 GDPR)
Where processing is based on our legitimate interests (Article 6(1)(f) GDPR), you may object to it at any time on grounds relating to your particular situation. An informal message to mpw@mpw-germany.com is sufficient. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
Bot protection for the contact form
To protect the contact form from automated misuse, the contact page uses Cloudflare Turnstile, a service of Cloudflare, Inc., USA. The check runs in the background without a visible box. When the page loads, your browser connects to Cloudflare, which processes your IP address and technical information about your browser and device to tell people from automated programs. Turnstile sets no persistent cookie. It issues a single-use check token that is sent with your enquiry and verified with Cloudflare. The legal basis is our legitimate interest in protecting the form and our mailbox from spam (Article 6(1)(f) GDPR). Cloudflare may process data in the USA; the section “Recipients and international processing” applies. Cloudflare’s Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/
Last updated
October 2026