Privacy Policy
Last updated: September 2026
This Privacy Policy explains how personal data is handled when you visit holtsdav.com.
1. Data Controller
The person responsible for processing personal data on this website is:
David HoltschkeArcisstraße 50
80799 Munich
Germany
Email: [email protected]
2. Website Hosting and Content Delivery Network (Cloudflare)
This website is hosted using Cloudflare Pages, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
When you access this website, Cloudflare processes technical connection data required to deliver and secure the site. This may include:
- IP address
- Requested URL / page
- Date and time of the server request
- Browser type, version, and operating system
- Technical request and security headers
The processing of this data is based on Article 6(1)(f) GDPR. I have a legitimate interest in ensuring the technically error-free, secure, and performant delivery of my website.
I have concluded a Data Processing Agreement (DPA) with Cloudflare. To the extent personal data is transferred to the United States, Cloudflare relies on the EU-U.S. Data Privacy Framework (DPF) and the Standard Contractual Clauses (SCCs) of the European Commission.
For further details, consult Cloudflare's Privacy Policy.
3. Cookies, Analytics, and Tracking
This website does not use advertising cookies, tracking pixels, or advertising frameworks.
No web analytics services are enabled (including Cloudflare Web Analytics).
The contact form uses Cloudflare Turnstile to help prevent automated spam. Turnstile processes technical browser and connection information for this security check.
4. Contact
If you contact me by email or through the contact form, the personal data you transmit (your name, email address, and message contents) is used to process and respond to your inquiry. Form submissions are processed by a Cloudflare Worker and sent to my email inbox through Cloudflare's email service. The form does not store messages in a website database.
The legal basis for this processing is:
- Article 6(1)(b) GDPR, if your inquiry relates to fulfilling a contract or pre-contractual measures.
- Article 6(1)(f) GDPR, based on my legitimate interest in answering inquiries directed to me.
Your data will be deleted once your inquiry has been resolved, provided no statutory retention obligations (e.g., commercial or tax law) apply.
5. External Links
This website contains external links to third-party platforms (such as the Apple App Store, itch.io, GitHub, LinkedIn, X, and Steam). These are standard outbound hyperlinks, not embedded third-party widgets. When clicking an external link, you leave this website, and the data processing practices of the destination platform apply.
6. Your Rights
Under Chapter III of the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent supervisory authority for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.