Zásady ochrany osobných údajov

1.1. The data controller responsible for the personal data collected through the Euro Duty platform is the entity that manages and operates said platform.

1.2. Euro Duty is an independent digital platform of an informative and educational nature about European labor and tax legislation.

1.3. For any questions related to personal data protection, data subjects can contact us through the channels provided on the platform.

2.1. This Privacy Policy has been prepared in compliance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR);

• Law No. 58/2019, of August 8 (GDPR Implementation Law in Portugal);

• Law No. 41/2004, of August 18 (Electronic Communications Law);

• Directive 2002/58/EC (ePrivacy Directive).

2.2. Euro Duty undertakes to respect the fundamental principles of the GDPR: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality and accountability.

3.1. Euro Duty may collect the following categories of personal data:

TECHNICAL DATA (collected automatically):

• IP address and approximate geographic location;

• Device type, operating system and browser;

• Pages visited, time spent and navigation patterns;

• Cookie identifiers and session tokens.

USAGE DATA (entered by the user):

• Data entered into tax simulators and calculators (salaries, family situation, country of residence);

• Language and country preferences;

• Conversation history with the AI Assistant;

• Contact data (if voluntarily provided).

3.2. We DO NOT collect sensitive data under Article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, biometric or genetic data).

4.1. Personal data is processed for the following purposes:

PRIMARY PURPOSES:

• Provide platform services (simulators, calculators, AI assistant);

• Process the tax and labor calculations requested by the user;

• Personalize the user experience (language, preferred country);

• Answer questions through the AI Assistant.

SECONDARY PURPOSES:

• Improve and optimize the platform based on usage analyses;

• Ensure security and prevent fraud or abuse;

• Comply with applicable legal obligations;

• Conduct aggregated and anonymized statistical analyses.

4.2. Data is NOT used for direct marketing purposes, creation of commercial profiles or sale to third parties.

5.1. The processing of personal data by Euro Duty is based on the following legal bases provided for in Article 6 of the GDPR:

CONSENT (Art. 6(1)(a)):

• Use of non-essential cookies;

• Sending promotional communications (if applicable);

• Data processing in the AI Assistant.

CONTRACT PERFORMANCE (Art. 6(1)(b)):

• Provision of services requested by the user;

• Processing of simulations and calculations.

LEGITIMATE INTEREST (Art. 6(1)(f)):

• Continuous improvement of the platform;

• Security and fraud prevention;

• Anonymized statistical analyses.

LEGAL OBLIGATION (Art. 6(1)(c)):

• Compliance with applicable legal obligations.

5.2. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

6.1. Personal data is retained only for the period strictly necessary for the purposes for which it was collected:

• Session and browsing data: up to 12 months;

• Analytics cookies: as defined in the cookie policy (max. 24 months);

• AI Assistant history: stored locally in the user's browser;

• Contact data: until response to the request or 36 months after last contact;

• Data for legal compliance: according to applicable legal periods.

6.2. After the end of the retention period, data is securely deleted or irreversibly anonymized.

6.3. Data entered into the simulators is processed in real time and is NOT permanently stored on our servers.

7.1. Euro Duty does NOT sell, rent or trade personal data to third parties.

7.2. Data may be shared with:

• Hosting and infrastructure service providers (subcontractors);

• Analytics service providers (e.g., Google Analytics, with IP anonymization);

• AI service providers (for Assistant processing);

• Competent authorities, when legally required.

7.3. All subcontractors are bound by data processing agreements (DPA) in compliance with Article 28 of the GDPR.

7.4. INTERNATIONAL TRANSFERS: Some service providers may be located outside the EEA. In these cases, we ensure that adequate safeguards are in place:

• European Commission adequacy decisions;

• Standard Contractual Clauses approved by the Commission;

• Certification under the EU-US Data Privacy Framework.

8.1. Euro Duty používa cookies a podobné technológie na zlepšenie používateľskej skúsenosti.

8.2. TYPY POUŽÍVANÝCH COOKIES:

NEVYHNUTNÉ COOKIES:

• Základná funkčnosť platformy;

• Nastavenia relácie a jazyka;

• Bezpečnosť a autentifikácia.

VÝKONNOSTNÉ A ANALYTICKÉ COOKIES:

• Google Analytics (s anonymizáciou IP);

• Analýza používania a správania.

FUNKČNÉ COOKIES:

• Personalizácia zážitku;

• Zapamätanie používateľských preferencií.

8.3. Používateľ môže spravovať nastavenia cookies cez:

• Nastavenia prehliadača;

• Banner na súhlas s cookies.

8.4. Deaktivácia nevyhnutných cookies môže ovplyvniť funkčnosť platformy.

8.5. REKLAMNÉ COOKIES:

Tretie strany vrátane spoločnosti Google používajú súbory cookies na zobrazovanie reklám na základe predchádzajúcich návštev používateľa na našej webovej stránke. Používaním reklamných cookies môžu Google a jeho partneri zobrazovať reklamy používateľom na základe ich návštev na tejto a/alebo iných webových stránkach na internete. Používatelia môžu deaktivovať personalizovanú reklamu v Nastaveniach reklám Google.

9.1. Under the GDPR, data subjects have the following rights:

RIGHT OF ACCESS (Art. 15): Obtain confirmation as to whether your data is being processed and access a copy thereof.

RIGHT TO RECTIFICATION (Art. 16): Request correction of inaccurate or incomplete data.

RIGHT TO ERASURE (Art. 17): Request deletion of personal data ('right to be forgotten').

RIGHT TO RESTRICTION (Art. 18): Restrict processing of data in certain circumstances.

RIGHT TO PORTABILITY (Art. 20): Receive data in a structured, machine-readable format.

RIGHT TO OBJECT (Art. 21): Object to processing based on legitimate interest or direct marketing.

RIGHT TO WITHDRAW CONSENT: Withdraw consent at any time, without affecting the lawfulness of prior processing.

9.2. To exercise any of these rights, contact us through the channels provided. We will respond within a maximum of 30 days.

10.1. Euro Duty implements appropriate technical and organizational measures to ensure the security of personal data:

TECHNICAL MEASURES:

• Data encryption in transit (HTTPS/TLS);

• Data encryption at rest;

• Firewalls and intrusion detection systems;

• Regular backups and recovery plans;

• Role-based access control.

ORGANIZATIONAL MEASURES:

• Employee training in data protection;

• Internal information security policies;

• Regular risk assessments;

• Incident response procedures.

10.2. In case of a data breach with risk to the rights of data subjects, we will notify the supervisory authority within 72 hours and, where applicable, the affected data subjects.

11.1. The Euro Duty platform is not intended for minors under 16 years of age.

11.2. We do not intentionally collect personal data from minors under 16.

11.3. If we become aware that we have collected data from a minor without valid parental consent, we will delete that information immediately.

11.4. Parents or legal guardians who believe their child has provided personal data should contact us to request deletion.

12.1. Euro Duty's AI Assistant uses automated processing to generate responses to user questions.

12.2. This processing does NOT constitute 'automated decision-making' under Article 22 of the GDPR, since:

• It does not produce legal effects on the user;

• It does not similarly significantly affect the user;

• The responses are merely informative and non-binding.

12.3. We do not carry out 'profiling' for marketing purposes or price discrimination.

12.4. Tax calculations are simulations based on parameters entered by the user and public legislation, without legal impact.

13.1. If you consider that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

13.2. In Portugal, the supervisory authority is:

NATIONAL DATA PROTECTION COMMISSION (CNPD)

Av. D. Carlos I, 134 - 1st floor

1200-651 Lisbon, Portugal

Tel: (+351) 213 928 400

Email: geral@cnpd.pt

Website: www.cnpd.pt

13.3. Residents of other EU Member States may lodge a complaint with the data protection authority in their country of residence.

13.4. Before filing a complaint, we encourage direct contact with us to try to resolve the matter amicably.

14.1. Euro Duty reserves the right to update this Privacy Policy at any time.

14.2. Changes will be published on this page, with an indication of the date of the last update.

14.3. In case of significant changes that affect users' rights, we may notify through a notice on the platform.

14.4. Continued use of the platform after the publication of changes constitutes acceptance of the new policy.

14.5. We recommend periodically consulting this page to stay informed about our privacy practices.

15.1. For questions related to personal data protection, including the exercise of your rights, you can contact us through:

• The contact channels provided on the platform;

• The contact form (when available).

15.2. We undertake to respond to all requests related to data protection within a maximum of 30 days, as provided for in the GDPR.

15.3. In cases of complexity or high volume of requests, the period may be extended by a further 60 days, upon informing the data subject.

Táto webová stránka používa Google Analytics (G-H7CXPCMRRZ) na anonymné monitorovanie návštevnosti webu a správania používateľov. Pomáha nám to zlepšovať naše služby. Prijatím nášho bannera cookies súhlasíte s týmto zberom údajov.

EuroDuty využíva TikTok na publikovanie informatívneho, vzdelávacieho a propagačného obsahu súvisiaceho s doménami euroduty.eu a euroduty.com. Tento obsah zahŕňa vysvetľujúce videá o témach pokrytých na webe.

INTERAKCIA S OBSAHOM TIKTOK:

Keď používateľ sleduje alebo interaguje s videami EuroDuty na TikToku, platforma TikTok môže zhromažďovať údaje o používaní a metriky v súlade s vlastnými Zásadami ochrany osobných údajov. EuroDuty tieto údaje neprijíma ani nekontroluje.

PREPOJENIE ÚČTU TIKTOK S EURODUTY (API):

EuroDuty umožňuje používateľovi prepojiť svoj účet TikTok s webom za účelom publikovania videí priamo na svojom účte TikTok. Toto prepojenie je dobrovoľné a dochádza k nemu len vtedy, keď ho používateľ výslovne autorizuje prostredníctvom oficiálneho API TikToku.

Keď používateľ autorizuje toto prepojenie, EuroDuty môže prijať:

• Prístupový token poskytnutý TikTokom

• Identifikátor účtu TikTok

• Oprávnenia súvisiace s nahrávaním a publikovaním videí

• Základné informácie o profile (iba ak sú autorizované)

EuroDuty neprijíma súkromné správy, kontakty, pokročilé štatistiky ani žiadne neautorizované údaje.

ÚČEL VYUŽITIA DÁT TIKTOK:

Dáta poskytnuté TikTokom sa využívajú výhradne na:

• Publikovanie videí vytvorených na EuroDuty priamo na účte TikTok používateľa

• Správu autentifikácie a udržiavanie prepojenia aktívneho, kým ho používateľ autorizuje

EuroDuty tieto údaje nepredáva ani nezdieľa s inzerentmi a nepoužíva ich na behaviorálne profilovanie ani marketingovú analýzu. EuroDuty zobrazuje reklamy Google, ktoré môžu používať súbory cookie, ako je uvedené v časti o reklame v týchto zásadách.

COOKIES A TIKTOK PIXEL:

Ak EuroDuty použije TikTok Pixel na meranie výkonu kampaní, bude toto použitie uvedené v týchto Zásadách. V súčasnosti EuroDuty TikTok Pixel nepoužíva.

UKLADANIE A ZABEZPEČENIE:

Dáta pochádzajúce z TikToku sú ukladané bezpečne a šifrovane. EuroDuty tieto údaje nezdieľa, nepredáva ani neprenáša tretím stranám.

ODVOLANIE A VYMAZANIE:

Používateľ môže kedykoľvek odvolať prístup EuroDuty k svojmu účtu TikTok v nastaveniach TikToku. Pri odvolaní prístupu:

• Token sa stáva neplatným

• Prepojenie je deaktivované

• Súvisiace dáta sú vymazané v primeranej lehote

ZÁSADY OCHRANY OSOBNÝCH ÚDAJOV TIKTOK:

Pre viac informácií o tom, ako TikTok spracováva dáta, by používateľ mal nahliadnuť do oficiálnych Zásad ochrany osobných údajov TikToku.