1. Data controller
Peter Weller, trading as Appartements Wannsee
Dreilindenstraße 38, 14109 Berlin, Germany
Email: kontakt@appartements-wannsee.de
Phone: +49 172 390 8167
2. Hosting and technical access data
We operate this website on a self-managed virtual private server (VPS) provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS provides the server infrastructure as our hosting provider. The server we use is located in a data centre in the United Kingdom.
When you visit the website, the server infrastructure processes your IP address and the request data needed to transmit the content. Technical access and error logs are kept to operate the service, analyse faults and protect against misuse. These logs may contain the full IP address, time, requested address, HTTP method and version, response status, volume of data transferred, processing time and browser identifier (user agent). IP addresses are not automatically anonymised in these logs.
The logs of the web server and the connection service in front of it are stored in files with size limits. Once a storage limit is reached, the oldest log files are automatically removed. Retention therefore depends on the volume of log data generated; no fixed deletion period in days is currently configured.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are to provide a reliable website, resolve faults and detect attacks and misuse. Access is available to those responsible for technical operation and, where required to provide its services, IONOS as the hosting provider.
Transfers of personal data to the United Kingdom are covered by an adequacy decision of the European Commission under Article 45 GDPR. Further information about the decision is available from the European Commission. Information about data processing by the hosting provider is available in the IONOS data processing agreement.
3. No audience measurement or advertising profiles
This website does not use IONOS WebAnalytics or any other audience measurement or advertising tracking services. No visitor profiles are created for advertising. The technical logs described above are used to operate and secure the website.
4. Contact by email and phone
When you contact us, we process your contact details and the content of your enquiry so that we can respond. For rental enquiries, this is done to take steps before entering into a contract under Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is to respond to your message.
Your information is deleted once your enquiry has been dealt with and there are no further legitimate purposes or legal retention obligations. If a tenancy agreement is concluded, the relevant periods for administering the contract and any statutory retention requirements apply. Access is limited to people and service providers needed to handle the enquiry or operate the service.
5. Enquiry form and ALTCHA spam protection
When you send the enquiry form, your name, email address, message and any optional details about your phone number, dates and number of occupants are transmitted to our server over HTTPS. Our contact service forwards the enquiry to kontakt@appartements-wannsee.de using authenticated, encrypted email transport through IONOS. The service does not store enquiries in a separate website database or log message contents. The processing purposes, legal bases and retention criteria in section 4 also apply to these enquiries.
We use the self-hosted ALTCHA software to limit automated abuse. The widget and verification endpoint are provided by our own server. Your browser performs a short computational task; our server checks its result, signature, expiry and one-time use before accepting an enquiry. No connection to an external CAPTCHA provider is required. ALTCHA does not set cookies or create advertising profiles in this configuration; form entries are not stored in the browser's local storage.
Verification records expire after five minutes and are removed from memory within approximately one further minute. Rate-limit records use a keyed, non-reversible representation of the connection's IP address and are removed after at most 15 minutes, plus the approximately one-minute cleanup interval. These short-lived records contain no form text. Technical access logs are handled separately as described in section 2. The legal basis for spam protection is Article 6(1)(f) GDPR; our legitimate interest is reliable communication and protection against automated misuse.
You can also contact us directly by email or phone. Providing optional form fields is voluntary. Without a name, a usable email address and a message, we cannot process an enquiry through this form.
6. Local files, cookies and external links
Images, fonts, styling and scripts are loaded from our own server. The website files do not set cookies, use local storage or include analytics or advertising scripts. External fonts and embedded maps are not loaded automatically.
Airbnb, map services and journey planners are provided as links only. You leave this website and connect to the relevant provider only when you follow a link. That provider’s privacy policy then applies.
7. Your rights
Where the legal requirements are met, you have the rights of access, rectification, erasure, restriction of processing and data portability under Articles 15 to 20 GDPR. You may withdraw any consent you have given at any time with effect for the future.
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. Please use the contact details above.
You may also lodge a complaint with a data protection supervisory authority. In Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information.
8. Security and changes
When you access the website over HTTPS, the connection between your browser and the web server is encrypted. The website files do not carry out automated decision-making, including profiling. If our offering or the services we use change, this notice will be updated accordingly.
Last updated: 3 November 2026. The hosting information describes the operation of this website on our own VPS.