GDPR compliance

Last updated: 2026-05-11

We act as a data processor for personal data of EU and EEA residents.

01Lawful basis

We rely on legitimate interest for frequency capping and fraud prevention, and on consent (collected by the publisher's CMP) for targeted advertising.

02Data transfers

Primary data centers are located in Frankfurt (Germany). MENA mirrors do not store EU-resident data. Standard Contractual Clauses are in place with all onward processors.

03Data subject requests

Write to gdpr@mpwa.to with your hashed user ID (publishers can extract it from their integration). We respond within 30 days.

04Data Protection Officer

Contact dpo@mpwa.to. We employ a designated DPO under Article 37 of the GDPR.

05Breach notification

We notify the relevant supervisory authority within 72 hours of becoming aware of a breach, and affected data subjects without undue delay.