Privacy

Controller

Luca Greinecker
Haldenweg 56b/1
6700 Bludenz, Austria

Email: mail@lucagreinecker.at

In short

This website sets no cookies, loads nothing from third-party servers (no external fonts, scripts, maps or videos) and passes no data on to advertising networks. What happens when you visit, in the statistics and in the contact form is described here.

Hosting and server logs

The website runs on a server I operate myself, rented from Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany), located in Nuremberg. When you open a page, the server processes your device's IP address, the date and time, the address requested and your browser's identifier. This is technically necessary to deliver the page to you (Art. 6(1)(f) GDPR).

The server does not write an access log with this data. The website only logs operational messages and errors, without IP addresses; these logs are overwritten once they reach a size limit (at most 30 MB per service). I do not pass them on.

Statistics (Umami)

I measure traffic with Umami, which runs together with its database on my own server. For each page view, Umami stores the page, the referring page, browser, operating system, device type, screen size and language, as well as country, region and city, which it derives from the IP address on the server. The IP address itself is not stored: from it, the browser identifier and a value that changes every month, Umami computes a hash that groups page views within one month into a session. After that, no association is possible.

Umami sets no cookies and the data never leaves my server. If your browser sends “Do Not Track”, nothing is counted. The legal basis is my interest in knowing which pages are read (Art. 6(1)(f) GDPR).

Contact form

If you write to me via the form, the website sends your name, your email address, your phone number if provided, and your message as a push notification to my phone. For this I use ntfy, a notification service that also runs on my own server. The website does not store your enquiry; ntfy keeps it for at most 24 hours so it still arrives if my phone happens to be offline, and then deletes it.

So that the message appears on my phone immediately, ntfy only signals via the ntfy.sh service, Google Firebase and Apple's push service that a new message is waiting: with a random identifier, without the content and without your details. The phone then fetches the message itself directly from my server.

To slow down mass submissions, the website keeps your IP address in memory when you submit (at most five enquiries per hour and address). It is not written to disk and is gone with the next restart of the website (Art. 6(1)(f) GDPR).

I use your details only to reply to you (Art. 6(1)(b) GDPR). If I reply by email, the correspondence goes through my mailbox at Apple (iCloud Mail; contracting party Apple Distribution International Ltd., Ireland). Apple generally stores the data with Apple Inc. in the USA; the transfer is safeguarded by standard contractual clauses. Once your enquiry is dealt with, I delete it. Instead of the form, you can always email me directly.

Save contact

The “Save contact” button creates a contact file (vCard) with my details. No data of yours is transmitted.

Links to other websites

The project pages link to my clients' websites and to my LinkedIn profile. Once you follow a link, that site's privacy policy applies.

Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability. To exercise them, write to me at mail@lucagreinecker.at.

Complaints

If you believe I am not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Last updated: 29 October 2026