Skip to content

Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Lucas Hollweck
Franz-Xaver-Brunner-Straße 1
94086 Bad Griesbach im Rottal

Email:

2. General information on data processing

What data is processed?

This website is a purely static site without user accounts, comments or a contact form. Personal data is only collected if you actively contact me by email, and as technically required when you visit the site (server log files, see below).

Legal basis

Where a legal basis is required for processing personal data, Art. 6(1)(f) GDPR (legitimate interest) applies to the technical operation of the website, and Art. 6(1)(b) GDPR applies to email communication.

3. Hosting and infrastructure

Server hosting (Netcup)

This website is hosted on a dedicated server operated by Netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany). The web server (Nginx) automatically creates server log files that may contain:

  • IP address of the requesting device (anonymised after processing)
  • Date and time of the request
  • Requested URL and HTTP method
  • HTTP status code and amount of data transferred
  • Browser type, operating system and referrer URL (from the HTTP header)

This data is used solely for technical operation, troubleshooting and defence against attacks. It is not combined with other data sources and is deleted after 7 days at the latest. Legal basis: Art. 6(1)(f) GDPR.

Cloudflare (reverse proxy, DDoS protection, DNS)

Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA) is used in front of the origin server as a reverse proxy and DNS provider. Every request to this website first passes through Cloudflare’s infrastructure before reaching the origin server.

Cloudflare processes technical data such as visitor IP addresses, HTTP headers and request metadata for DDoS protection, spam filtering and performance optimisation. TLS is terminated at Cloudflare (“Flexible SSL”); the connection between Cloudflare and the origin server uses HTTP.

Cloudflare is certified under the EU-U.S. Data Privacy Framework. Further information is available in the Cloudflare privacy policy. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and availability of the website).

4. No cookies, no tracking, no analytics

This website sets no cookies. No analytics or tracking services are used (no Google Analytics, Matomo, Meta Pixel or similar). There is no profiling and no disclosure of user data for advertising purposes.

5. External links

This website contains links to external websites (e.g. hollweck-it.de). When you follow these links you leave this site. The respective operators are responsible for the content and privacy practices of linked pages; this privacy policy applies only to lucas-hollweck.de.

6. Contact by email

If you contact me by email, the data you send (email address, name, message content) is stored and used to handle your enquiry. This data is not shared with third parties without your consent and is deleted after the matter is concluded, unless statutory retention obligations apply. Legal basis: Art. 6(1)(b) GDPR.

7. Your rights as a data subject

Under the GDPR you have the following rights:

  • Access (Art. 15 GDPR): what data about you is stored
  • Rectification (Art. 16 GDPR): correction of inaccurate data
  • Erasure (Art. 17 GDPR): deletion of your data
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR) to processing based on Art. 6(1)(f)

To exercise your rights, contact:
Email:

You also have the right to lodge a complaint with the competent supervisory authority. For Bavaria that is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Last updated: February 2026. The German version is authoritative.