We collect only what is necessary. This statement describes what we gather on dermoebius.com, why, and what rights you have. The German version is the legally binding one.
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Tommy Richard MöbiusWe collect personal data only insofar as this is necessary to operate this website and provide our services. We pass data on to third parties only where this is required by law or necessary in order to fulfil our services.
For security reasons this website uses SSL/TLS encryption. You can recognise it by the "https://" prefix and the padlock icon in your browser’s address bar.
This website is hosted by Strato AG (Pascalstraße 10, 10587 Berlin, Germany). A data processing agreement under Art. 28 GDPR is in place with Strato.
When you visit our site, the server automatically records so-called server log files which your browser transmits automatically:
These data cannot be attributed to specific individuals and serve solely to deliver the website technically and to detect and defend against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention: a maximum of 14 days.
We use the typefaces Instrument Sans, Instrument Serif and Manrope (Open Font Licence). The font files are hosted on our own server and delivered from there — there is no data exchange with external services such as Google Fonts. No consent is required for the fonts to display.
For table reservations we use the embedded booking widget from TheFork (LaFourchette SAS, 27 rue de Berri, 75008 Paris, France). TheFork is a subsidiary of TripAdvisor LLC.
We load the TheFork widget only after your consent. Once you have consented, your browser connects directly to TheFork’s servers. The following may be transmitted, among other things:
We receive from TheFork only the reservation data needed to process the booking. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (steps prior to entering into a contract) for the reservation data.
TheFork’s privacy policy: thefork.de/about/datenschutz.
You book places for our events (e.g. Sunday at möbius, the goose dinner) through our own form on this website. In doing so, we process:
We store this data on our own web server (see section 3). It is used to handle your booking: confirmation, a reminder five days before the event, any questions, planning your menu and, where applicable, invoicing under our cancellation terms. The legal basis is Art. 6(1)(b) GDPR (contract or pre-contractual steps). Information about dietary requirements is processed only because you provide it voluntarily, and solely to prepare your menu (Art. 9(2)(a) GDPR).
We send the emails relating to your booking via Brevo (Sendinblue SAS, see section 8); for this, your name, email address and booking details are transmitted to Brevo. If you tick the optional newsletter box in the form, you will also receive the newsletter confirmation email (double opt-in, see section 8).
Retention: Dietary requirements and your notes are deleted the day after the event. Your name and contact details are deleted no later than three months after the event; if an invoice under the cancellation terms is still outstanding at that point, only once it has been settled. Afterwards, only anonymous figures remain (e.g. the number of guests).
If you register for a cooking class or sign up to be notified about an event (“please let me know”), we store your name, email address and – for cooking classes – phone number and number of guests on our own web server (see section 3). We use this information to run the class or to notify you once, as soon as the event can be booked; afterwards we delete the sign-up. The legal basis is Art. 6(1)(b) GDPR (class registration) or Art. 6(1)(a) GDPR (your consent to the advance notice).
If you tick the optional box “let me know about future cooking classes” when registering, we add you to our list of former class participants and write to you when there are new dates (Art. 6(1)(a) GDPR). Without that box, we keep your name and contact details only to handle your class. You can withdraw your consent at any time – a short message to reservierung@dermoebius.com is enough and we will delete your entry.
We would like to understand how our site is used — how many visitors arrive, which pages hold their attention, and which sources bring them to us. For this we use Plausible Analytics, a privacy-friendly analytics service provided by Plausible Insights OÜ (Västriku tn 2, 50403 Tartu, Estonia). All data is processed exclusively within the EU (hosting in Frankfurt am Main, Germany).
Plausible operates without cookies and without personal data:
What is recorded is strictly anonymous and aggregated: pages viewed, time on page, source of traffic (e.g. search engine, direct visit), device and browser type, and approximate region (at city level, derived from the User-Agent header). Identification of individuals is technically not possible.
Because no personal data is stored and no cookies are set, no consent is required for this.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement to improve our website). Plausible privacy policy: plausible.io/privacy.
We run adverts on Facebook and Instagram. To measure how effective these ads are, we use the Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) — only after your consent via the cookie banner.
The pixel sets cookies (e.g. "_fbp") and transmits to Meta, among other things:
Meta may link this data to your Meta account and process it for its own purposes, including in the USA. Transfers to the USA are based on the EU-U.S. Data Privacy Framework, under which Meta is certified, as well as on standard contractual clauses. We and Meta are joint controllers for the collection and transmission (Art. 26 GDPR).
Without your consent the pixel is not loaded — no data whatsoever is sent to Meta. You may withdraw your consent at any time via the cookie settings (see section 11).
Legal basis: Art. 6(1)(a) GDPR (consent) and § 25(1) German TDDDG. Meta's privacy policy: facebook.com/privacy/policy.
For sending our newsletter we use the service Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). A data processing agreement under Art. 28 GDPR is in place with Brevo; processing takes place within the EU.
When you subscribe to our newsletter, we transfer the following data to Brevo:
We send the newsletter using double opt-in: after you sign up, you receive a confirmation email. Your subscription only becomes effective once you click the confirmation link. In this way we make sure that only you can subscribe your own email address.
Brevo analyses opening and click behaviour for our newsletters in order to improve their quality. The analysis is carried out on a pseudonymised basis.
You may unsubscribe at any time — via the unsubscribe link in every newsletter, or by email to info@dermoebius.com. On unsubscribing, we remove your data from the distribution list.
Legal basis: Art. 6(1)(a) GDPR (consent) together with Art. 6(1)(f) GDPR (proof of consent).
Brevo’s privacy policy: brevo.com/de/legal/privacypolicy.
When you get in touch with us by email or telephone, the details you provide (name, email address, telephone number, content of your message) are processed solely to handle your enquiry. They are not passed on to third parties.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest). Retention: until your enquiry has been dealt with, then in accordance with statutory retention periods (e.g. § 257 HGB, § 147 AO).
On the Studio and Catering pages we offer enquiry forms. We process the data you submit (name, email, telephone, occasion, date, number of guests, free text) solely to handle your enquiry and for the steps prior to entering into a contract.
Legal basis: Art. 6(1)(b) GDPR. Once the matter is closed, the data is retained or deleted in accordance with commercial and tax-law retention periods.
We store a technically necessary record of your cookie-banner choice in your browser (local storage) so that the banner does not appear again at every visit. The consent applies to:
Only after your consent via the banner do we load the TheFork widget and the Meta Pixel. These may then set their own cookies — details are given in sections 5 and 7. The fonts on this site are self-hosted and require no consent. Our analytics tool (Plausible, see section 6) operates cookie-free and likewise requires no consent.
You may withdraw your consent at any time:
As the data controller, you have the following rights in respect of your personal data:
To exercise these rights, a simple email to info@dermoebius.com is enough.
Any consent you have given may be withdrawn at any time with effect for the future — informally by email to info@dermoebius.com or by adjusting your cookie settings.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
12 · Social media links
In the footer we link to our profiles on Instagram and Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). These are plain links, not embedded plug-ins. Data is transmitted to Meta only when you click the link and thereby visit their platform.