Thank you for your response!
I think the problem is that everything gets symlinked in /var/lib/vz/root, the actual files are located in /var/lib/vz/private.
However, with df -h, also the symlinked files get counted, although they don't even exist. So the files get counted twice as you can see...