Privacy policy

Herrenzimmer Brandt e.K., Matthias Brandt, Mittelweg 112, 20149 Hamburg, Germany. Telephone +49 40 41328870, email empfang@herrenzimmer-brandt.de.

We have not appointed a data protection officer, as we are not required to do so.

When you open this website, your browser transmits technical data to our hosting provider: IP address, date and time, the page requested, the referring page, browser and operating system. This is processed on the basis of Art. 6 (1) (f) GDPR in our legitimate interest in delivering the site securely and stably. Server logs are deleted after seven days at the latest.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, on servers in the European Union. A data processing agreement under Art. 28 GDPR and the EU standard contractual clauses are in place.

We use no analytics, no tracking and no advertising cookies. This site stores two values in your browser: your chosen language and your answer to the cookie notice. Both are stored locally, are not transmitted to us and can be deleted at any time in your browser settings. The legal basis is Art. 6 (1) (f) GDPR and § 25 (2) TDDDG (technically necessary storage).

When you book an appointment we process your name, email address, telephone number, the ritual and time you chose, your choice of drink and anything you write in the notes field. This is used solely to arrange, confirm and carry out the appointment, on the basis of Art. 6 (1) (b) GDPR (steps prior to entering into a contract).

Your choice of drink is used only to have it ready at the chair. It is not profiled, not shared and not kept beyond the appointment.

Booking data is deleted twelve months after the appointment, unless retention periods under tax or commercial law require otherwise (§ 147 AO, § 257 HGB: up to ten years for invoices).

To issue a gift card or a membership we process the name and contact details of the purchaser, the recipient's name, the amount and, where applicable, the message you ask us to write. The legal basis is Art. 6 (1) (b) GDPR. Invoice data is kept for ten years under § 147 AO.

The map on The Room page is not loaded until you press the button. Only then is a connection made to OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, which then receives your IP address. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you may withdraw at any time by reloading the page.

Your data is passed on only to our hosting provider, our email provider and, where legally required, to tax authorities and our tax adviser. It is never sold and never used for advertising by third parties.

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority. The one responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.

This policy was last revised in March 2026. We will amend it if the site or the law changes.