We take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, and protect personal data when you visit our website and when you purchase products from us, in accordance with the General Data Protection Regulation (GDPR).
“Personal data” means any information relating to an identified or identifiable natural person.
Merkuna OHG
Represented by the partners: Metin Erkekoglu, Ahmet Erkekoglu
Sittarder Str. 17, 41748 Viersen, Germany
Website: www.epos-press.com
Email: info@epos-press.com
VAT ID: DE328735661
When you visit our website, our server may automatically process:
IP address (often in log files)
Date and time of access
Requested page / file
Referrer URL
Browser type/version and operating system
Purpose: ensuring website security, technical administration, and troubleshooting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests), our legitimate interest being the secure and reliable operation of the website.
When you place an order, we process:
Name
Billing and shipping address
Email address
Ordered items, order number, order history
Invoice data
Shipping and delivery information (e.g., tracking number)
Purpose: processing your purchase contract, shipping the goods, handling returns/warranty cases, invoicing, and customer communication regarding the order.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligations, e.g., retention of invoices).
If you create an account, we process:
Login data (e.g., username and encrypted password)
Contact details and saved addresses
Order history
Purpose: providing account functionality, simplifying future orders.
Legal basis: Art. 6(1)(b) GDPR.
During checkout you may choose payment via Stripe and/or PayPal. Payment details are typically processed directly by the payment provider. We may receive confirmation/status information (e.g., “paid”, transaction reference).
Purpose: payment processing and fraud prevention.
Legal basis: Art. 6(1)(b) GDPR (contract performance). Depending on the setup, parts may also rely on Art. 6(1)(f) GDPR (fraud prevention).
When you contact us, we process:
Name
Email address
Message content and related metadata
Purpose: responding to inquiries and customer support.
Legal basis: Art. 6(1)(b) GDPR (if related to a contract or pre-contract measures) or Art. 6(1)(f) GDPR (legitimate interests in handling inquiries). If you explicitly consent to a specific processing, Art. 6(1)(a) GDPR may apply.
If you subscribe to a newsletter, we process:
Email address
(optional) name for personalization
Subscription and confirmation timestamps (where applicable)
Purpose: sending updates and marketing communications.
Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw consent at any time via the unsubscribe link or by contacting us.
We use cookies and similar technologies. These may be:
Essential (necessary for core functions such as shopping cart, login, language settings, security)
Optional (analytics/marketing)
Essential cookies: generally processed based on Art. 6(1)(f) GDPR (legitimate interests) or Art. 6(1)(b) GDPR (providing requested functions).
Optional cookies (e.g., analytics/marketing): processed only with your consent under Art. 6(1)(a) GDPR.
If we use a cookie consent tool/banner, you can manage your cookie preferences there and withdraw consent at any time.
We may share personal data with the following categories of recipients to operate our website and fulfill contracts:
E-commerce system (WordPress/WooCommerce)
Used to manage the shop, orders, and customer accounts.
Hosting and IT service providers (e.g., website hosting, email hosting, security services)
Purpose: website and email operation, maintenance, security.
Payment providers (Stripe / PayPal)
Purpose: payment processing. Stripe explains its transfer and contractual safeguards (including SCCs) in its DPA materials.
Shipping and logistics providers (postal/courier services)
Purpose: delivery of your order; they receive the data necessary for shipment (name, address, and where applicable tracking information).
Shipping and delivery providers (DHL / Deutsche Post)
To deliver your order, we share the personal data necessary for shipment with our logistics providers, in particular DHL / Deutsche Post (depending on the selected shipping method). This typically includes your name, delivery address, and—where applicable—shipment and tracking information.
Purpose: delivery of your order, shipment tracking, and handling delivery issues.
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Analytics tools (e.g., Google Analytics)
Purpose: website usage analysis and improvement.
We use Google Analytics 4 to analyze website usage and improve our website. Google Analytics uses cookies and similar technologies (if enabled and accepted) to collect information about your use of the website, such as pages viewed, approximate location (derived from IP metadata), device and browser information, and interaction data.
For users in the EU, Google states that Google Analytics 4 does not log or store IP addresses and removes IP addresses collected from EU users before logging.
Legal basis: We use Google Analytics only with your consent, Art. 6(1)(a) GDPR. You can withdraw your consent at any time via our cookie settings/banner.
Recipients / controller: Data may be processed by Google Ireland Limited and may be transferred to Google LLC in the USA. Google states it participates in the EU-U.S. Data Privacy Framework, and Google LLC is listed as a participant.
Where required, we rely on appropriate safeguards (e.g., adequacy decision/DPF and/or Standard Contractual Clauses).
Data retention: We configure Google Analytics retention settings within our Analytics account and keep data only as long as necessary for the stated purposes.
Legal basis: consent, Art. 6(1)(a) GDPR.
Newsletter service providers (e.g., Mailchimp)
Purpose: sending newsletters.
Legal basis: consent, Art. 6(1)(a) GDPR.
We use processors under Art. 28 GDPR where required and conclude appropriate data processing agreements.
Some service providers (e.g., payment providers, analytics, newsletter tools) may process data outside the EU/EEA (for example in the United States).
Where data is transferred to a third country, we rely on appropriate safeguards, such as:
Adequacy decisions (e.g., the EU–US Data Privacy Framework, where applicable), or
Standard Contractual Clauses (SCCs) and, where necessary, additional safeguards.
We store personal data only for as long as necessary for the purposes described above and as required by law.
Typical retention examples:
Order and invoice data: retained as required by applicable commercial and tax law retention obligations.
Customer account data: retained until you delete the account (subject to legal retention requirements for transaction data).
Contact requests: retained as long as necessary to handle the request and for reasonable follow-up, unless legal obligations require longer storage.
Newsletter data: retained until you unsubscribe/withdraw consent.
You have the right to:
Access your personal data (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
Withdraw consent at any time (Art. 7(3) GDPR), where processing is based on consent
To exercise your rights, contact us using the details in Section 2.
You also have the right to lodge a complaint with a supervisory authority. For North Rhine-Westphalia, the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or destruction (e.g., access controls, encryption where appropriate, and security updates).
We may update this Privacy Policy from time to time. The current version is published on our website.
For any privacy-related questions, requests, or concerns, please contact:
Email: info@epos-press.com
Postal address: Merkuna OHG, Sittarder Str. 17, 41748 Viersen, Germany