As a matter of principle, we use your data only as far as necessary — for bookings, your stay and contact — and make no further profit from it.
1. Controller
The controller responsible for the processing of personal data on this website and in our guesthouse is:
Hotel-Pension Enzian, owner: M. P. Wilicki, Hortensienstraße 28, 12203 Berlin
Contact: contact form
2. Visiting the website
When you visit this website, the hosting provider processes technically necessary data. This may include in particular the IP address, date and time of access, the page requested and information about the browser used. This processing takes place to provide the website and to ensure its security and functionality. The legal basis is Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required for these purposes, unless legal reasons or specific security incidents require longer storage.
3. Enquiries, bookings and contact
If you contact us via our online forms, by e-mail or by telephone, we process the details you provide in order to handle your enquiry and, where applicable, to prepare or carry out a booking. The legal basis is Art. 6(1)(b) GDPR; for general enquiries it is our legitimate interest in answering your message (Art. 6(1)(f) GDPR). No payments are made via this website.
To protect against spam and abuse, our online forms (booking and contact form) transmit the IP address of your connection when submitted; it appears in the e-mail to us and is not evaluated or passed on in any other way. To protect the forms against automated input we use a captcha generated on our own web server; nothing is transmitted to an external captcha provider.
The contents submitted via the forms are forwarded as e-mail, stored in encrypted form at the e-mail provider and can only be decrypted on our own computer. Unsolicited application documents are used solely to reply and are deleted promptly after our answer.
4. Hosting and e-mail
For the operation of the website and the e-mail service we use a service provider based in Germany (Heinlein Hosting GmbH, service JPBerlin, Berlin), which processes personal data on our behalf and according to our instructions. Your data is only passed on to other recipients if this is necessary to handle your enquiry or required by law.
5. OpenStreetMap
On some pages we embed map material from the OpenStreetMap Foundation. When a map is loaded, a connection to its servers is established; in particular your IP address and technically necessary browser data may be transmitted. The maps are embedded to show our location and to make it easier to find us (Art. 6(1)(f) GDPR). The OpenStreetMap Foundation is based in the United Kingdom; an adequacy decision of the European Commission exists for the United Kingdom.
6. Cookies
We do not use any analytics, advertising or marketing services and do not send newsletters. Our website sets only two technically necessary cookies: a session cookie (PHPSESSID), which is set only when needed (e.g. when using the forms) and deleted when the browser is closed, and a cookie belonging to the ANTISPAM protection of our forms (ddfmcode, stored for one hour). Both are strictly necessary for the operation of the site (Section 25(2) of the German TDDDG); no consent (cookie banner) is required for them. You can delete or block cookies in your browser at any time; in that case some functions (e.g. the forms) may not be available.
7. Data processing during your stay
If you are a guest in our house, we process your data insofar as this is necessary for the booking, your stay, payment and tax obligations (Art. 6(1)(b) and (c) GDPR) — in particular name, address, contact details as well as invoice and payment data. We receive this data from you yourself. We pass data on to public authorities (e.g. tax or registration authorities) only where we are legally obliged to do so. Without the data required for the contract or by law we cannot carry out the booking.
8. Video surveillance
To protect our guests, our staff and our property and to prevent and investigate criminal offences, we operate video surveillance in parts of the generally accessible areas of our house; rooms and sanitary areas are not monitored. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Signs on site indicate the surveillance. Any recordings are deleted promptly unless they are needed to investigate a specific incident.
9. Storage period
We store personal data only for as long as is necessary to handle the respective enquiry or to carry out a booking. Longer storage takes place only insofar as statutory retention obligations exist or the data is needed to assert, exercise or defend legal claims.
10. Your rights
Within the statutory framework you have the right of access as well as the right to rectification, erasure, restriction of processing and data portability (Art. 15-20 GDPR). You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR). Consent once given can be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI), Alt-Moabit 59-61, 10555 Berlin.
As of: July 2026
