Hi Bernd, very short answer to 1.: Yes, you want to write data there. Hence you need rite privileges. Make sure, privileges of www-data are restricted to that directory, you will be fine.
Off topic about 2.: Consider using ownCloud, because it has .deb repo, you can get updates if you want to. Nectcloud does not have this (to my limited knowledge).
signature.asc
Description: OpenPGP digital signature