Privacy Policy

We take the protection of your personal data seriously. This policy explains which data we process when you visit our shop and place an order, why we do so, and what rights you have.

1. Controller

sorashowcases.com, owner Sebastian Koch, Am Schunkenhofe 11, 99848 Wutha-Farnroda, Germany, info@sorashowcases.com.

2. Hosting and access data

Our shop and configurator are hosted by Hostinger International Ltd. on servers in the European Union. When you visit our pages, the server records technical access data (IP address, date and time, page requested, browser and operating system, referring page) in log files. We use this data to deliver the pages, to ensure security and stability, and to detect abuse. Legal basis: our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Log files are deleted after a short period.

3. Orders and configurator quotes

When you place an order, we process the data you enter at the checkout – name, delivery address, e-mail address, optionally your telephone number, the items ordered and your payment method – to conclude and perform the contract, to manufacture and ship your order, to send you the order confirmation and to handle warranty matters. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Quotes you generate in our configurators are stored under a quote number for a limited period so that you can transfer them to your basket; they do not contain personal data unless you place an order.

Order data is stored in our database (hosted in the EU) and on our shop server. To fulfil your order, we pass the necessary data to our service providers for order processing, manufacture and shipping – in particular to the order management system in which your order is produced and dispatched, and to the carrier (name, address and, where needed for delivery notifications, e-mail address and, if you have given it, your telephone number). Your telephone number is optional; we use it only if there are questions about your order or its delivery. These providers process your data on our instructions or in order to perform the delivery contract with you.

We retain order data for as long as required by commercial and tax law – currently ten years after the end of the year in which the order was placed.

4. Payment via PayPal

If you pay by PayPal, including card payments processed through PayPal, your payment data is collected and processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. We do not receive your card or account details; PayPal transmits to us only the confirmation of payment and the data needed to allocate it to your order. PayPal's privacy policy is available at https://www.paypal.com/webapps/mpp/ua/privacy-full. Legal basis: Art. 6(1)(b) GDPR. If you pay by bank transfer, we see the data that appears on our bank statement.

5. Customer account

You can view your past orders in a customer account. To log in, you enter your e-mail address and receive a one-time code by e-mail; after entering the code, a signed session cookie (sora_konto) keeps you logged in for a limited time. The account shows the orders associated with your e-mail address, retrieved from our order management system. To prevent abuse, we temporarily limit the number of login attempts per e-mail address and IP address. Legal basis: Art. 6(1)(b) GDPR; for abuse prevention Art. 6(1)(f) GDPR.

6. Cookies and local storage

Our shop uses only technically necessary storage without your consent:

  • Basket – the items in your basket are stored in your browser's local storage; a cookie (soraCartCount) holds the number of items so that it can be shown on every page.
  • Consent choice – your decision in the cookie banner is stored in a cookie (allowCookie or cookieDeclined) so that we do not ask you again.
  • Login – the session cookie described in section 5, only if you log in.

Cookies that are not technically necessary (section 8) are set only if you agree in the cookie banner. You can change or withdraw your choice at any time via the Cookie settings link in the footer, and you can delete cookies in your browser settings at any time.

7. E-mail contact

If you e-mail us, we process your e-mail address and the content of your message to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete enquiries once they are settled, unless retention periods apply.

8. Web analytics (only with your consent)

If you agree in the cookie banner, we use Google Tag Manager and Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to measure how our pages are used – for example which pages are visited, from which country, and which orders are completed. Google processes this data on our behalf; IP addresses are not stored by Google Analytics 4. Data may be transferred to Google LLC in the USA on the basis of the EU–US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie settings in the footer. Without consent, no analytics cookies are set and no data is sent to Google ("Consent Mode").

9. Meta Pixel (only with your consent)

On some pages we use the Meta Pixel (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) to measure the success of our advertising on Facebook and Instagram. The pixel is activated only if you have agreed in the cookie banner. Meta may link the data with your Meta account and may transfer it to the USA under the EU–US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR), revocable at any time via Cookie settings.

10. Embedded content

Some pages embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com, Google Ireland Ltd.). When you play a video, YouTube receives your IP address and may set cookies. Legal basis: Art. 6(1)(f) GDPR (presentation of our products).

11. Customer photos

Our customer photo gallery shows photographs that customers have sent us for publication. If you have sent us a photo and would like it removed, e-mail info@sorashowcases.com.

12. Your rights

You have the right to obtain information about the personal data we hold about you, to have inaccurate data rectified, to have data erased or its processing restricted, to data portability, and to object to processing based on our legitimate interests (Art. 15–21 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future. To exercise your rights, e-mail info@sorashowcases.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany.

Version of 21 August 2026