We collect only what is necessary. This statement describes what we gather on dermoebius.com, why, and what rights you have. The German version is the legally binding one.
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Tommy Richard MöbiusWe collect personal data only insofar as this is necessary to operate this website and provide our services. We pass data on to third parties only where this is required by law or necessary in order to fulfil our services.
For security reasons this website uses SSL/TLS encryption. You can recognise it by the "https://" prefix and the padlock icon in your browser’s address bar.
This website is hosted by Strato AG (Pascalstraße 10, 10587 Berlin, Germany). A data processing agreement under Art. 28 GDPR is in place with Strato.
When you visit our site, the server automatically records so-called server log files which your browser transmits automatically:
These data cannot be attributed to specific individuals and serve solely to deliver the website technically and to detect and defend against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention: a maximum of 14 days.
We use the typefaces Instrument Sans, Instrument Serif and Manrope (Open Font Licence). The font files are hosted on our own server and delivered from there — there is no data exchange with external services such as Google Fonts. No consent is required for the fonts to display.
For table reservations we use the embedded booking widget from TheFork (LaFourchette SAS, 27 rue de Berri, 75008 Paris, France). TheFork is a subsidiary of TripAdvisor LLC.
We load the TheFork widget only after your consent. Once you have consented, your browser connects directly to TheFork’s servers. The following may be transmitted, among other things:
We receive from TheFork only the reservation data needed to process the booking. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (steps prior to entering into a contract) for the reservation data.
TheFork’s privacy policy: thefork.de/about/datenschutz.
We would like to understand how our site is used — how many visitors arrive, which pages hold their attention, and which sources bring them to us. For this we use Plausible Analytics, a privacy-friendly analytics service provided by Plausible Insights OÜ (Västriku tn 2, 50403 Tartu, Estonia). All data is processed exclusively within the EU (hosting in Frankfurt am Main, Germany).
Plausible operates without cookies and without personal data:
What is recorded is strictly anonymous and aggregated: pages viewed, time on page, source of traffic (e.g. search engine, direct visit), device and browser type, and approximate region (at city level, derived from the User-Agent header). Identification of individuals is technically not possible.
Because no personal data is stored and no cookies are set, no consent is required for this.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement to improve our website). Plausible privacy policy: plausible.io/privacy.
For sending our newsletter we use the service Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). A data processing agreement under Art. 28 GDPR is in place with Brevo; processing takes place within the EU.
When you subscribe to our newsletter, we transfer the following data to Brevo:
We send the newsletter using double opt-in: after you sign up, you receive a confirmation email. Your subscription only becomes effective once you click the confirmation link. In this way we make sure that only you can subscribe your own email address.
Brevo analyses opening and click behaviour for our newsletters in order to improve their quality. The analysis is carried out on a pseudonymised basis.
You may unsubscribe at any time — via the unsubscribe link in every newsletter, or by email to info@dermoebius.com. On unsubscribing, we remove your data from the distribution list.
Legal basis: Art. 6(1)(a) GDPR (consent) together with Art. 6(1)(f) GDPR (proof of consent).
Brevo’s privacy policy: brevo.com/de/legal/privacypolicy.
When you get in touch with us by email or telephone, the details you provide (name, email address, telephone number, content of your message) are processed solely to handle your enquiry. They are not passed on to third parties.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest). Retention: until your enquiry has been dealt with, then in accordance with statutory retention periods (e.g. § 257 HGB, § 147 AO).
On the Studio and Catering pages we offer enquiry forms. We process the data you submit (name, email, telephone, occasion, date, number of guests, free text) solely to handle your enquiry and for the steps prior to entering into a contract.
Legal basis: Art. 6(1)(b) GDPR. Once the matter is closed, the data is retained or deleted in accordance with commercial and tax-law retention periods.
We store a technically necessary record of your cookie-banner choice in your browser (local storage) so that the banner does not appear again at every visit. The consent applies to:
Only after your consent via the banner do we load the TheFork widget. It may then set its own cookies — details are given in section 5. The fonts on this site are self-hosted and require no consent. Our analytics tool (Plausible, see section 6) operates cookie-free and likewise requires no consent.
You may withdraw your consent at any time:
As the data controller, you have the following rights in respect of your personal data:
To exercise these rights, a simple email to info@dermoebius.com is enough.
Any consent you have given may be withdrawn at any time with effect for the future — informally by email to info@dermoebius.com or by adjusting your cookie settings.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
11 · Social media links
In the footer we link to our profiles on Instagram and Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). These are plain links, not embedded plug-ins. Data is transmitted to Meta only when you click the link and thereby visit their platform.