Privacy
Privacy policy
This policy describes which personal data is processed when you use lukaskaffer.com.
Last updated: October 1, 2026
This English version is provided for convenience. The German version is the legally binding one.
Controller
Lukas Alexander Kaffer (sole proprietorship)
Klederinger Straße 15/2/27
2320 Schwechat
Austria
Privacy contact: [email protected]
Accessing and serving the website
When you access the website, technically necessary access data is processed. This may include in particular your IP address, the time of access, the requested URL, the referrer and information about your browser, device and operating system. This processing serves the secure, stable and technically error-free delivery of the website.
The website is hosted on Vercel and delivered through Cloudflare. Cloudflare also handles the email forwarding for the domain. The technical data named above may therefore be processed by Vercel Inc. and Cloudflare, Inc.
Contact form and email
If you use the contact form, your name, email address, message and the technically necessary transmission data are processed in order to deliver and answer your inquiry. The form data is sent directly from your browser to Web3Forms and then forwarded as an email.
Web3Forms is operated by Web3Creative, based in Kerala, India, and according to the provider uses servers in the US-East region. According to the provider’s current information, form submissions are not stored permanently; server logs may contain personal technical data and are deleted regularly, currently after two months at the latest. Please do not send confidential or sensitive information through the form unless it is necessary for your inquiry.
You can also write directly to [email protected]. In that case, the data you include in your message is processed.
Business outreach
To initiate projects, I may contact companies individually and selectively. For this I use only business contact details the company itself has published, for example on its own website: company name, contact person, business email address and publicly available information about the company. The legal basis is my legitimate interest in initiating business relationships under Art. 6(1)(f) GDPR. You can object to this processing at any time, informally, at [email protected]; your data will then be deleted, and only an entry on a suppression list is kept to make sure you are not contacted again.
Clients and projects
For quotes, contracts, project delivery, invoices and ongoing support, I process the contact, contract and payment data this requires under Art. 6(1)(b) GDPR. Records subject to retention obligations under tax and commercial law are kept for seven years under Art. 6(1)(c) GDPR in conjunction with § 132 of the Austrian Federal Fiscal Code (BAO).
Legal bases
Technical access data is processed on the basis of Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the website. Contact inquiries are processed, depending on their content, to take steps prior to entering into a contract under Art. 6(1)(b) GDPR or on the basis of the legitimate interest in handling incoming inquiries under Art. 6(1)(f) GDPR.
Recipients and processing in third countries
Vercel, Cloudflare and Web3Forms are used for hosting, delivery, email forwarding and form transmission. This may involve processing outside the European Union or the European Economic Area. Such processing takes place in accordance with the applicable data protection requirements and the safeguards available with the respective provider.
Cookies and local storage
lukaskaffer.com itself sets no marketing or analytics cookies and uses no third-party analytics. Technically necessary security mechanisms of the infrastructure may in individual cases use comparable technical identifiers.
External links
The website links to external sites, including Vienna Event Radar and the Apple App Store. Only once you open such a link do the privacy terms of the respective external provider apply in addition.
Retention period
Personal data is stored only as long as necessary for the purposes named above, for handling an inquiry or for statutory retention obligations. Inquiry data that is no longer needed is deleted unless legal obligations or legitimate reasons require further storage.
Your rights
Under the GDPR, data subjects have in particular the rights to access, rectification, erasure, restriction of processing, data portability and objection. Requests can be sent to [email protected].
You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at.