Privacy policy
This privacy policy informs you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), about the nature, scope and purpose of the processing of personal data when you use our website and when you contact us. In case of doubt, the German version shall prevail.
1. Controller
The controller within the meaning of Art. 4(7) GDPR is:
Nomad Gastronomie UG (haftungsbeschränkt)
Röntgenstraße 14a
10587 Berlin, Germany
Phone: +49 30 23 88 39 77
Email: hey@nomad-berlin.de
No data protection officer has been appointed, as there is no legal obligation to do so (Art. 37 GDPR, Section 38 BDSG). Please direct any data protection enquiries to the contact details above.
2. Hosting and server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Falkenstein (Germany). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
Each time the website is accessed, the server automatically stores the following data in log files: IP address of the requesting device, date and time of access, requested address (URL), previously visited page (referrer), HTTP status code, amount of data transferred, and browser type and operating system (user agent).
Purpose: provision of the website, ensuring system security and stability, error analysis and defence against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the purposes stated above.
Retention period: The log files are deleted automatically after 14 days unless a specific security incident requires longer retention for evidential purposes.
3. Provision of content and images (Sanity)
We use the content management system Sanity, provided by Sanity AS, Oslo (Norway), and Sanity Inc., San Francisco (USA), to manage the content of this website. When a page is accessed, images are delivered directly to your browser from the provider's content delivery network (cdn.sanity.io). In the process, your IP address and technical information about your browser are transmitted to the provider.
Purpose: fast and reliable delivery of image content.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in a technically sound and performant presentation of the website.
Data processing: A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
Transfer to third countries: A transfer to the USA cannot be ruled out. It takes place on the basis of the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
4. Fonts
The fonts used on this website are loaded locally from our own server. No connection to Google Fonts or any other third-party server is established.
5. Cookies and consent management
Without your consent, we only set the strictly necessary cookie nomad_consent_v1. It stores the choice you made in the cookie banner so that it is taken into account on subsequent visits.
Legal basis: Section 25(2) no. 2 TDDDG and Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent).
Retention period: 180 days.
All other cookies and similar technologies are only used with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change your consent or withdraw it with effect for the future at any time via the "Cookie settings" link at the bottom of every page. The lawfulness of processing carried out before the withdrawal remains unaffected. Upon withdrawal, the cookies set by Google are deleted.
6. Google Analytics
If you have consented to the "Analytics" category in the cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). No connection to Google is established before consent is given.
Google Analytics uses the cookies _ga and _ga_N3HDPK0QWC, which contain a randomly generated identifier. They collect information about your use of the website, in particular pages visited, time spent, source of the visit, device used and clicks on table booking links. Google Analytics 4 does not store complete IP addresses. When you click a booking link to OpenTable, the identifier is appended to the link so that we can determine whether a booking originated from our website.
If you have additionally consented to the "Advertising" category, Google may also use the data to measure and personalise advertising. Without this consent, such use is excluded.
Purpose: statistical analysis of the use and reach of the website.
Legal basis: your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
Data processing: A data processing agreement pursuant to Art. 28 GDPR has been concluded with Google.
Transfer to third countries: A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission pursuant to Art. 45 GDPR applies.
Retention period: The cookies are deleted after 2 years at the latest. The collected usage data is deleted after 14 months.
Further information is available in Google's privacy policy.
7. Group requests via the contact form
If you send us a request via the form on the "Groups" page, we process the data you provide: name, email address, phone number, company (optional), preferred date and time, number of guests, room and drinks preferences, and your message. The data is not stored on the web server but transmitted by email to our mailbox hey@nomad-berlin.de, which is also operated by Hetzner Online GmbH.
Purpose: handling your request and planning and holding the event.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract).
Retention period: If no contract is concluded, the data is deleted no later than 12 months after the correspondence has ended. If a contract is concluded, the data is retained for the statutory retention periods (Section 147 AO, Section 257 HGB; generally 6 or 10 years).
Providing the information marked as mandatory is necessary to process your request. Without it, we cannot process your request.
8. Contact by email or phone
If you contact us by email or phone, we process the data you provide in order to handle your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract; otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your enquiry.
Retention period: The data is deleted once your enquiry has been dealt with conclusively and no statutory retention obligations apply.
9. Links to third-party services
Our website contains links to the services of the providers listed below. These services are not embedded in our website. Data is only transmitted to the respective provider once you click the link. The respective provider is responsible for any subsequent processing, and its privacy policy applies.
Table booking: OpenTable, Inc. or its competent European entity
Gift card sales: Stripe Payments Europe, Ltd., Dublin, Ireland
Instagram: Meta Platforms Ireland Limited, Dublin, Ireland
Directions: Google Maps, Google Ireland Limited, Dublin, Ireland
10. Rights of data subjects
Subject to the statutory provisions, you have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent with effect for the future (Art. 7(3) GDPR)
Right to object pursuant to Art. 21 GDPR: Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, it is sufficient to contact us using the details given in section 1.
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.
11. Automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
12. Changes to this privacy policy
We reserve the right to amend this privacy policy if the legal situation or the procedures used on this website change. The version published here applies.
Last updated: October 2026