S&R Eisenmann GmbH
Phone: +49 7150 9574-0
Fax: +49 7150 9574-120
Managing Director: Marcel Brinkwirth
Data Protection Officer
If you have any questions regarding data protection, please contact our data protection officer at datenschutz[at]vimopro.de or at the following postal address:
Phone: +49 7721 6981151
Processing your personal data - purposes and legal basis
Data processing on the company's website
When our website is accessed, log files are recorded and remain stored for 14 days. Such log files are automatically transmitted by your browser to us or the service provider of the website.
These are the following data:
• Browser type and version
• Referrer URL (from which website you came to us)
• Host name of the accessing computer
• Operating system used
• Time of the server request
• IP address
This data serves to ensure a technically flawless website and is therefore collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the error-free presentation of our online presence and the resulting optimisation of the website, if necessary.
We host our website with the following provider:
Mittwald CM Service GmbH & Co KG
Königsberger Straße 4-6
This company is the recipient of your personal data and acts as a data processor for us. The servers are located in Germany.
Session cookies are deleted when you close your internet browser.
Contact requests / contact possibility
If you contact us (e.g. via contact form, telephone or email), the data you provide will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. The processing of this data is based on Art. 6 para. 1 lit. b) GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a) GDPR) by implied conduct with the contact.
The data you send us will remain with us until you request erasure, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Online shop Shopware
We operate our online shop via the self-hosted e-commerce platform Shopware. No personal data is transferred to the platform provider, Shopware AG.
When you place products in the shopping cart and place an order, we collect personal data from you. The purpose of processing your data is to operate the online shop, to process your orders and enquiries and to ensure the security of our online shop.
Legal basis: Art. 6 para. 1 letter b GDPR. The following
categories of data are processed:
• Master data
• Contact details
• Username and password
• Contract data
• Content data
• Connection data
• Payment data
When you register a customer account, we save your data so that you do not have to enter it again when you place a new order and only have to log in.Recipients of the data: Payment service provider, trading partner if applicable, IT service provider within the scope of hosting and maintenance of the systems. In some countries we can only offer you our products through exclusive dealers. If you provide a delivery address in one of these countries, we will inform you during the ordering process of the possibility to forward your request to our respective exclusive dealer in your country.
We would like to point out that the forwarding of your shopping basket results in the transfer of personal data to a third country in which the protection of your data and your rights as a data subject under the GDPR cannot be guaranteed. By your active transmission, you consent to the forwarding. In this case, the legal basis is your express consent (Art. 6 para. 1 letter a GDPR.). If you do not wish to consent to this data transmission, you can cancel the order.
We offer the option of processing the payment process in our online shop via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This is in line with our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR), which is widely used. In this context, we pass on the following data to PayPal insofar as it is necessary for the performance of a contract (Art. 6 para. 1 lit b. GDPR).
• First name
• Last name
• E-mail address
• Telephone number
The processing of the data provided under this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot carry out a payment via PayPal.
There is no obligation to use PayPal as a payment method, you also have the option to pay in advance, for example.
PayPal carries out a credit check for various of its services (e.g. payment by direct debit) in order to check your ability to pay. This corresponds to the legitimate interest of PayPal (according to Art. 6 para. 1 lit. f GDPR) and serves the execution of the contract (according to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) are passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or a check is pending. You can find further information on objection and removal options vis-à-vis PayPal at:
Your data will be stored until payment processing is completed. This includes the period required for processing refunds, claims management and fraud prevention.
Credit assessment and scoring
If you order goods from us and decide to pay by invoice, we reserve the right to obtain a credit report in order to assess the risk of default. For this purpose, we transmit necessary data such as your name and address to a credit agency, which makes an assessment of your solvency on the basis of mathematical-statistical procedures. We use this information to decide whether we can offer you payment by invoice.
The legal basis for this processing is our legitimate interest in securing our receivables in accordance with Art. 6 para. 1 lit. f) GDPR.
Trusted Shops Trustbadge
We have integrated Trusted Shops widgets on this website to display Trusted Shops services such as seals of approval and collected ratings. This is done to protect our legitimate interests in optimal marketing by enabling safe shopping in accordance with Art. 6 (1) p. 1 lit. f GDPR and to increase trust in our online shop. Trusted Shops GmbH, located at Subbelrather Str. 15C, 50823 Cologne, and we are jointly responsible for data protection in accordance with Art. 26 of the GDPR and inform you about the essential contents of the contract in accordance with Art. 26 (2) of the GDPR.
The trust badge is integrated by a US CDN provider (content delivery network) under a shared accountability.
An appropriate level of data protection is guaranteed by standard data protection clauses and other contractual measures. Further information on the data protection of Trusted Shops GmbH can be found in their data protection declaration, which you can access via the following link: https://www.trustedshops.de/impressum-datenschutz/#datenschutz.
When you click on the trust badge, a server log file is automatically stored on the web server, which also contains your IP address, the time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval. After collection, your IP address is immediately anonymised, which prevents an assignment to your person. The anonymised data is collected for the analysis of errors and for statistical evaluations. After completing the order, your e-mail address is hashed and transmitted to Trusted Shops GmbH. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation services in
accordance with Art. 6 (1) p. 1 lit. f GDPR. If you are not yet registered for the services, you will subsequently be given the option to do so for the first time. In this case, further processing is governed by the provisions and contractual agreements with the provider. Registration is optional. If you decide not to register, the provider will delete the data collected up to that point.
Trusted Shops uses its own service providers for hosting, monitoring and logging functions to ensure trouble-free operation. The legal basis for this is Art. 6 para. 1 lit. f GDPR. This may include data processing in third countries (USA and Israel). For Israel, there is an adequacy decision of the EU Commission. A comparable level of data protection for possible processing in the USA is achieved through concluded standard contractual clauses.
We use the open source software Matomo for analysis purposes and statistical evaluation of website usage. We have hosted the software on our own servers so that no data collected is passed on to the software provider.
The information we collect through Matomo is transmitted exclusively to our servers and compiled in pseudonymous usage profiles.
The processing of IP addresses in Matomo is anonymised (IP masking), so that there is no longer any personal reference.
You have the possibility to revoke your already given consent at any time with effect for the future by either deleting your browser cookies or using the following opt-out link:
If you delete your browser cookies, the opt-out cookie will also no longer be available and you may have to click on the link again if you have in the meantime given your consent to analysis by Matomo (e.g. via our Consent Banner).
We have an account on YouTube and use the platform to communicate with customers, applicants and interested parties. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Please note that when using YouTube, users' data may be processed outside the European Union, in particular in the USA. YouTube is a joint data controller with us in addition to the data that Youtube forwards to us as a company. This can lead to increased risks for users, for example if access to user data is made more difficult. We do not have access to this user data. The accountability lies exclusively with YouTube.
YouTube clarifies the explicit processing and sharing of your information in its own
We have a company profile on Facebook. We are jointly accountable with Meta Platforms Ireland Limited, based in Dublin, Ireland, for the processing of your data in relation to Facebook. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.
When you visit our Facebook pages, usage data is collected via Facebook Insights and made available to us anonymously for marketing and analysis purposes. To ensure that we comply with the requirements of the General Data Protection Regulation (GDPR), we have entered into an agreement with Facebook that governs the obligations of both parties. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
The processing of personal data that takes place in the context of the use of our company profile on Facebook is based on Art. 6 (1) lit. f GDPR. Our legitimate interest is to analyse, promote and sell our products and services. It may also be the case that the processing is based on the consent of the user pursuant to Art. 6 (1) lit. a GDPR. This consent can be revoked at any time by the user contacting the Facebook operator directly. The corresponding contact form can be found under the following link:
https://www.facebook.com/help/contact/540977946302970. By consenting to the Facebook user agreement, you have also consented to the transfer of various information from Facebook to us. When you visit our company profile on Facebook, Meta Platforms Ireland Limited, as the operator of the platform in the EU, processes data about you (e.g. personal information, IP address). This data is used to obtain statistical information about the use of our Facebook page.
If you contact us via Facebook, we use the personal data you enter to process your enquiry. As soon as your enquiry has been completed and there are no legal retention obligations (e.g. in the case of subsequent contract processing), we delete your data.
It is not excluded that the processing by Meta Platforms Ireland Limited also takes place via Meta Platforms Inc, 1601 Willow Road, Menlo Park, California 94025 in the USA. We, as the operator of the Fanpage, do not make any decision regarding the processing of Insights data and any other information resulting from data subject rights, including legal basis, identity of the data controller and storage period of cookies on user terminals.
Our company uses Instagram as part of our marketing strategy to promote our products and services and to communicate with prospects and customers. We are jointly accountable with Meta Platforms Ireland Limited for our presence on this social media platform. When you visit our online presence on Instagram, user data is processed by Meta Platforms Ireland Ltd, operator of the platform in the EU. This data includes, among other things, personal information and the user's IP address. This data is used for statistical purposes and is also used by Meta Platforms Ireland Ltd. for market research and advertising as well as to create user profiles.
As a company, we process personal data on the basis of our legitimate interest in analysing, communicating, selling and advertising our products and services (Art. 6 para. 1 lit. f GDPR). In some cases, the user's consent may also be given in accordance with Art. 6 (1) a GDPR. The user can transmit the revocation of this consent to the platform operator at any time (Art. 7 para. 3 GDPR). If you contact us via Instagram, we use the personal data you provide to process your enquiry. As soon as we have answered your enquiry and there are no legal retention obligations, we delete your data. Meta Platforms Ireland Ltd. may set cookies when processing your data. However, it is possible to prevent the installation of cookies by setting your browser accordingly. Cookies that have already been stored can be deleted at any time. Please note, however, that restricting or preventing the installation of cookies may mean that not all functions of Instagram can be fully used. You can find more information on this in
Please note that it is not excluded that the processing of your data also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA. XING
We have a company page on the career platform XING. The provider of the platform is New Work SE, Am Strandkai 1, 20457 Hamburg. There we can inform about news in our company, present ourselves and get in direct contact with interested parties and business partners. XING also allows you to use interactive functions such as sharing or commenting on posts or to write direct messages to us. When you use or access our XING Company Page, personal data is processed by us and by XING. This data includes, among other things, personal information and the IP address of the user. We are joint data controllers within the meaning of the GDPR.