Privacy

1. Controller

SORRA & CO.
Inh. Kristi Sorra
Hegaustraße 11
70469 Stuttgart-Feuerbach
Phone: +49 179 2030683
Email: info@sorraco.com

2. Overview

We only process personal data to the extent necessary to operate this website and to handle your enquiries. We do not use cookies, analytics or tracking tools, or advertising services. Fonts and scripts are loaded directly from our server; no data is transferred to Google or other third parties in the process.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes technical data transmitted by your browser (server log files): IP address, date and time of access, page visited, referrer URL, browser type and operating system.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, reliably and quickly. A data processing agreement (Art. 28 GDPR) is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision and, in addition, on the EU Standard Contractual Clauses. More information: vercel.com/legal/privacy-policy.

4. Contact form, email and phone

If you contact us via the contact form, by email or by phone, we process the information you provide (e.g. name, company, email address, phone number, location, preferred date, project description and uploaded plans and photos) in order to handle your enquiry and prepare a quotation.

The legal basis is Art. 6(1)(b) GDPR (steps prior to or performance of a contract) and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Please only upload files that are necessary for your enquiry and make sure that, where possible, no people are recognisable in photos. Photos are resized in your browser before sending.

Form data is received by a server function of our host Vercel (see section 3); it is not stored on the website but forwarded directly by email to our mailbox. Our mailbox is operated by Zoho Corporation B.V., Beneluxweg 125, 4904 SJ Oosterhout, the Netherlands, in data centres within the EU. A data processing agreement (Art. 28 GDPR) is in place with Zoho.

We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations apply (e.g. up to 10 years under commercial and tax law for orders).

5. Local storage in your browser

So that the short welcome animation does not reappear on every page change, the website stores a single entry without personal data in your browser’s session storage (sessionStorage). It is deleted automatically when you close the browser tab. The legal basis is Section 25(2) no. 2 of the German TDDDG.

6. Links to Instagram

Our website links to our Instagram profile. This is a simple link, not an embedded plugin: data is only transferred to Instagram (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) when you click the link. Processing on Instagram is governed by Meta’s privacy policy.

7. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

8. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Simply contact us using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

Last updated: October 2026 · This is a translation; the German version is legally binding.