Privacy Notice
Updated November 3, 2026. This notice explains how personal data is handled when you visit Duotone Projectora or contact us.
Who Is Responsible?
Jon Chance, trading as Duotone Projectora
Cranachstraße 28a, 99423 Weimar, Germany
Email: [email protected]
Phone: +49 176 59003328
Visiting This Website
Our website is hosted and delivered through Cloudflare Pages. When you request a page, Cloudflare processes connection and request data, including your IP address, requested address, date and time, browser and operating-system information, referring page if supplied, and technical response and security information. This is necessary to deliver the website, maintain availability, detect abuse and investigate technical problems. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a secure, functioning website.
The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare operates a global network; processing is not restricted to Germany or the EU. Its Data Processing Addendum governs processing on our behalf, including subcontractors and international-transfer safeguards. For transfers requiring safeguards, it incorporates the European Commission’s standard contractual clauses. Details and a copy of these safeguards are available through that agreement or by contacting us. Cloudflare also describes processing for its own security and operational purposes in its privacy policy.
We do not create a separate visitor database or export visitor-level access logs. Technical information is retained by the provider for service operation, security and applicable legal requirements; the retention period depends on the type of record and purpose. Information needed to investigate a specific incident may be retained until that investigation and associated claims are resolved.
Cloudflare may also instruct supported browsers to report connection failures through Network Error Logging. Such reports can include the requested URL, timing, error type and network information. They are used to diagnose delivery failures. We have disabled this optional feature in the domain settings; previously issued browser policies may remain until they expire. Cloudflare describes this processing in its Network Error Logging documentation.
Cookies, Fonts and External Content
The website code does not set cookies, use local storage, run advertising or visitor-tracking tools, or load third-party fonts. Images and fonts are served with the website. Gallery and language choices are not saved by our code after you leave. Hosting security measures may process additional technical information to protect against abuse. Any storage or access strictly necessary to provide the requested service is governed by Section 25(2) TDDDG; optional tracking would require a separate assessment and, where required, your prior consent.
Maps, location references and provider information are ordinary links, not embedded services. Opening one takes you to another provider, whose privacy information then applies. We do not send your inquiry to a map provider.
Contacting Us
The inquiry fields are an email-draft helper. Your entries stay in the page until you choose “Open Email App.” That action passes the subject and message to your chosen email application. The website does not submit or save the inquiry on a server. You still need to send the email yourself. Your browser or email application may retain drafts according to its own settings. You may also email or telephone us directly.
When you send a message, we process your email address, name if supplied, message, attachments and communication details to answer it. Please include only information relevant to your request. For purchase, wholesale or collaboration requests made by you before a contract, the legal basis is Article 6(1)(b) GDPR. For other correspondence, including business-contact requests on behalf of an organization, it is Article 6(1)(f) GDPR, based on our interest in answering inquiries and maintaining business relationships. Statutory recordkeeping is based on Article 6(1)(c) GDPR.
Email to our domain is forwarded by Cloudflare Email Routing to our Proton mailbox. Cloudflare therefore processes message content and delivery information in transit. Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland, provides the mailbox. See Proton’s Data Processing Agreement and Proton Mail’s privacy policy. Switzerland is covered by an EU adequacy decision. Cloudflare’s international processing and safeguards are described above. Ordinary email from external providers is not automatically end-to-end encrypted.
We keep correspondence while needed to handle the request and any resulting relationship. Afterward we delete it unless legal retention obligations or the establishment, exercise or defense of legal claims require continued storage. Business correspondence and accounting documents may be subject to different statutory retention periods. Only the relevant records are retained for those purposes, with access limited accordingly. You can ask us which retention obligation applies to your information.
Providing information is voluntary. Browsing does not require you to contact us. To answer an inquiry, we need its content and a way to reply. No purchase is completed through this website. If an inquiry leads to an order, we provide the relevant offer and ordering information separately.
Recipients and Security
Access is limited to the operator and service providers needed for hosting and communication. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims. We do not sell inquiry details or add you to a marketing list merely because you contact us. The public website uses HTTPS. Please arrange a suitable secure channel with us before sending sensitive documents.
Your Rights
Subject to the conditions of the GDPR, you may request access to your personal data and a copy (Article 15), correction (Article 16), erasure (Article 17), restriction of processing (Article 18), and data portability for qualifying automated processing based on consent or contract (Article 20). If processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop that processing unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is needed for legal claims. You may object to direct marketing at any time.
Contact us using the details above to exercise your rights. We will respond within the applicable statutory period, normally one month. If there are reasonable doubts about identity, we may request only the additional information necessary to verify it.
Complaints
You may complain to a supervisory authority, particularly in the EU member state of your habitual residence, workplace or the suspected infringement (Article 77 GDPR). Our local authority is the Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit, Häßlerstraße 8, 99096 Erfurt, Germany. Contact details and complaint options: TLfDI.
Changes
We update this notice when our website or processing changes. New services such as a checkout, newsletter, analytics or a server-based contact form require their own privacy assessment before introduction.