imprint

I. Person responsible

Jilu Apartments GbR

At the Trough 54

13589 Berlin

Germany

Represented by the shareholders:

Lucas Witt & Jill Witt

Email: jiluapartments@gmail.com

Due to the size of the company and the nature of data processing, a data protection officer has not been appointed.

However, if you have any questions about data protection, you can contact us at any time using the email address provided above.

II. What data do we process?

• We process personal data when you:
• visit our website,
• book accommodation,
• fill out a contact form,
• subscribe to our newsletter or
• communicate with us in other ways.

In detail, the following data can be processed:

• Booking data: Name, address, email address, telephone number, arrival and departure dates, accommodation, payment information (e.g. credit card, SEPA, Stripe, etc.)
• Registration data: full name, date of birth, residential address, nationality, and for foreign guests, ID number
• Payment data: Information on payment processing via our partners (Smoobu, Stripe Payments Europe Ltd., Adyen BV, etc.)
• Communication data: Contents of contact, booking or support requests
• Technical data: IP address, browser type, operating system, referrer URL, date and time of access
• Usage data: pages visited, click behavior, cookies and tracking data (e.g. via Google Analytics or Meta Pixel – if active)

III. Is there an obligation to provide the data?

Providing personal data is not required by law, but is necessary to complete bookings and fulfill legal reporting obligations. Without this data, we cannot rent accommodation or process bookings.

IV. Purposes and legal bases of processing

We process your personal data on the basis of the following legal bases in accordance with Art. 6 GDPR:

1. Contractual performance (Art. 6 (1) (b) GDPR)

To process bookings, payments, communication with guests and fulfillment of the accommodation contract.

Bookings are processed through our partner Smoobu GmbH, Wönnichstraße 68/70, 10317 Berlin.

2. Fulfillment of legal obligations (Art. 6 (1) (c) GDPR)

We are required to collect certain data in accordance with the Federal Registration Act (BMG) and to retain it for a certain period of time.

3. Legitimate interest (Art. 6 (1) (f) GDPR)

Ensuring IT and data security (e.g. server log files)

Optimization of our website and offers

Direct advertising for own, similar services to existing customers

4. Consent (Art. 6 (1) (a) GDPR)

If you give us your express consent, for example for:

• Newsletter distribution
• Use of cookies and tracking tools for marketing purposes
• Transfer of your data to third-party service providers outside the EU
• You can revoke your consent at any time with future effect.

V. Transfer of data

Your personal data will only be passed on if this is necessary to fulfil the contract or due to legal obligations.

Recipients may in particular be:

IT and hosting service providers: e.g., Smoobu, IONOS, Google Cloud

Payment service providers: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland; Adyen BV, Amsterdam, Netherlands

Communication service providers: e.g. email or SMS sending services

Authorities: e.g. residents’ registration office within the framework of Section 29 BMG

Marketing service providers: e.g. newsletter distribution, Google Analytics

Legal or debt collection service providers: for legitimate debt collection

All service providers are bound by data processing contracts (AV contracts) in accordance with Art. 28 GDPR.

VI. Data processing outside the EU

Some of our service providers (e.g. Google LLC, Meta Platforms Inc.) are based outside the European Union.

To ensure an appropriate level of data protection, we conclude EU standard contractual clauses (SCCs) with these companies.

VII. Duration of storage

We only store your personal data for as long as it is necessary for the respective purpose or as long as there are legal retention obligations:

• Booking and invoice data: 10 years (§ 147 AO)
• Registration forms: 1 year (Section 30 (4) BMG)
• Contact requests: 6 months
• Applications: 6 months after completion of the procedure
• Newsletter data: until you revoke your consent

VIII. Your rights

You have the following rights under the General Data Protection Regulation (GDPR):

• Information (Art. 15 GDPR) – about your stored personal data
• Correction (Art. 16 GDPR) – of incorrect or incomplete data
• Deletion (Art. 17 GDPR) – “Right to be forgotten”
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Right of objection (Article 21 GDPR) – in particular against direct marketing
• Revocation of consent (Art. 7 para. 3 GDPR)
• Right to lodge a complaint (Art. 77 GDPR) – with the data protection supervisory authority

Competent supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moab 59-61

10555 Berlin

Email: mailbox@datenschutz-berlin.de

IX. Cookies und Tracking

Our website uses cookies and similar technologies to provide features, analyze user behavior, and optimize marketing efforts.

Technically necessary cookies – required for login, booking, form functions (Art. 6 (1) (f) GDPR)

Analysis/marketing cookies – are only set with your consent (Art. 6 (1) (a) GDPR)

Google Analytics

Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Your IP address will be stored anonymously.

You can deactivate tracking via your browser settings or an opt-out cookie.

X. Newsletter

If you subscribe to our newsletter, we will process your data (email address, name if applicable, IP address and timestamp) exclusively to send you information, offers and news about Jilu Apartments.

The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent at any time, e.g., via the unsubscribe link in every email or by sending a message to jiluapartments@gmail.com.

XI. Server log files

When you visit our website, technical information is automatically collected:

IP address, browser type, operating system, date/time and pages accessed.

This data is used to ensure operations and IT security.

Legal basis: Art. 6 (1) (f) GDPR.

XII. Security of your data

We use technical and organizational security measures to protect your data against manipulation, loss, destruction or unauthorized access.

Our security measures are regularly reviewed and adapted to the state of the art (e.g. SSL/TLS encryption).

XIII. Changes to this Privacy Policy

We reserve the right to amend this privacy policy from time to time to ensure that it always complies with current legal requirements or takes into account changes to our services.

The latest version will then apply to your next visit.

📅 Stand: October

© Jilu Apartments GbR – Berlin