Privacy policy
Updated: 10 October 2026
1. Controller
Malgorzata Bobrecka
Kirchgasse 21
65185 Wiesbaden
Germany
Email: info [at] duo-iphone.com. Replace [at] with @ when writing.
2. Website hosting
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The hosting provider processes technical connection and access data such as IP address, time, requested URL, status code and, depending on configuration, browser/operating-system information and the referring page. This is necessary for delivery, security and troubleshooting. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in a reliable, secure website.
We do not use technical logs to create individual advertising profiles. Retention depends on the technical purpose, the hosting provider’s deletion periods and any investigation of a specific security incident. STRATO generally describes six weeks of downloadable customer access logs; other technical logs may differ. STRATO log information (German) and STRATO privacy information.
3. Local content, language and news
Fonts come from your operating system. Images, styles and scripts are served by this website. We do not use analytics or advertising pixels, embedded social-media modules or automatic IP-country lookup. Language selection uses a normal link; this website version does not set a cookie or Local Storage value for it.
On the newsletter page (/newsletter/), if the newsletter form is active, and on the confirmation form for unsubscribing from the newsletter a technically necessary session cookie (name DUOADMIN, protection against forged requests and a 10-second send lock; HttpOnly, Secure, SameSite=Lax) is set and deleted when the browser session ends. Basis: Section 25(2) no. 2 TDDDG.
News search filters stories already loaded in your browser; search terms are not sent to a search service. The website reads its news cache from its own server and may request a frequency-limited update there. News sources are fetched server-side without forwarding the visitor’s IP address to them. Requests to our server are subject to the hosting logs described above.
4. Email contact
When you contact us, we process your email address, message and voluntarily supplied information to respond. The legal basis is Article 6(1)(f) GDPR or, for contractual and pre-contractual enquiries, Article 6(1)(b) GDPR. Data is deleted when the enquiry is resolved unless a statutory retention obligation or legitimate need to retain it applies. Our hosting/email provider STRATO processes the email service.
5. External links
Links to news sources, manufacturers and other third-party websites are normal external references. Your browser connects to the destination provider only if you open a link. That provider’s privacy terms then apply. Some editorial pages contain clearly marked, commission-based external product-search links. Your browser connects to the merchant only when you open a link; the merchant’s privacy terms then apply. See Transparency and funding for details.
6. Duo Digest / newsletter
If you subscribe to Duo Digest, we process your email address only to handle registration, confirmation and delivery. A requested email confirmation link activates the subscription (double opt-in). The legal basis is your consent (Art. 6(1)(a) GDPR).
The application does not store an IP address or user agent in clear text for newsletter signup; for abuse prevention, however, it briefly keeps a keyed hash of the IP address and of the entered email address together with timestamps of recent requests (see “Abuse prevention” at the end). It does not use open-tracking pixels or visitor-level open or click profiles. Hosting and email providers may still maintain technically necessary delivery logs. Unconfirmed subscriptions are deleted after 14 days and old individual delivery logs after 90 days. After unsubscribing, the address is blocked from further newsletters; the suppression status is retained to prevent accidental resending. Access and erasure requests are handled under the applicable data-protection rules.
You can withdraw your consent for future newsletters using the unsubscribe link in each issue.
7. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent for the future where consent is the processing basis. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation; you may object to direct marketing at any time.
You may complain to a data-protection supervisory authority, particularly where you live, work or believe an infringement occurred. In Hesse: The Hessian Commissioner for Data Protection and Freedom of Information.
8. Changes
We update this policy if new features change personal-data processing. This version of duo-iphone.com does not provide a user account or on-site checkout. Duo Digest is available as an optional double-opt-in newsletter.
Privacy-friendly audience measurement
The platform uses first-party, cookie-free aggregate measurement. Only daily totals by page, interaction type and technical target key are stored. The analytics module does not store IP addresses, client IDs, user agents, referrers or individual raw events in its measurement data (for rate limiting see “Abuse prevention”). The default retention period is 180 days and measurement can be disabled by the administrator.
Abuse prevention
To protect against abusive bulk requests (newsletter signup, search, audience measurement, administrator login), the application briefly stores a keyed hash of the IP address (IPv6 truncated to the /64 prefix) or of the entered email address together with timestamps of recent requests. The IP address and email address themselves are not stored in clear text. Such a hash remains personal information as long as the key is held by the operator. The counter data are regularly deleted after about two days at the latest; this may take longer when traffic is low. The legal basis is Article 6(1)(f) GDPR (security and availability of the service).