Politika zasebnosti

1.1. The data controller responsible for the personal data collected through the Euro Duty platform is the entity that manages and operates said platform.

1.2. Euro Duty is an independent digital platform of an informative and educational nature about European labor and tax legislation.

1.3. For any questions related to personal data protection, data subjects can contact us through the channels provided on the platform.

2.1. This Privacy Policy has been prepared in compliance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR);

• Law No. 58/2019, of August 8 (GDPR Implementation Law in Portugal);

• Law No. 41/2004, of August 18 (Electronic Communications Law);

• Directive 2002/58/EC (ePrivacy Directive).

2.2. Euro Duty undertakes to respect the fundamental principles of the GDPR: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality and accountability.

3.1. Euro Duty may collect the following categories of personal data:

TECHNICAL DATA (collected automatically):

• IP address and approximate geographic location;

• Device type, operating system and browser;

• Pages visited, time spent and navigation patterns;

• Cookie identifiers and session tokens.

USAGE DATA (entered by the user):

• Data entered into tax simulators and calculators (salaries, family situation, country of residence);

• Language and country preferences;

• Conversation history with the AI Assistant;

• Contact data (if voluntarily provided).

3.2. We DO NOT collect sensitive data under Article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, biometric or genetic data).

4.1. Personal data is processed for the following purposes:

PRIMARY PURPOSES:

• Provide platform services (simulators, calculators, AI assistant);

• Process the tax and labor calculations requested by the user;

• Personalize the user experience (language, preferred country);

• Answer questions through the AI Assistant.

SECONDARY PURPOSES:

• Improve and optimize the platform based on usage analyses;

• Ensure security and prevent fraud or abuse;

• Comply with applicable legal obligations;

• Conduct aggregated and anonymized statistical analyses.

4.2. Data is NOT used for direct marketing purposes, creation of commercial profiles or sale to third parties.

5.1. The processing of personal data by Euro Duty is based on the following legal bases provided for in Article 6 of the GDPR:

CONSENT (Art. 6(1)(a)):

• Use of non-essential cookies;

• Sending promotional communications (if applicable);

• Data processing in the AI Assistant.

CONTRACT PERFORMANCE (Art. 6(1)(b)):

• Provision of services requested by the user;

• Processing of simulations and calculations.

LEGITIMATE INTEREST (Art. 6(1)(f)):

• Continuous improvement of the platform;

• Security and fraud prevention;

• Anonymized statistical analyses.

LEGAL OBLIGATION (Art. 6(1)(c)):

• Compliance with applicable legal obligations.

5.2. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

6.1. Personal data is retained only for the period strictly necessary for the purposes for which it was collected:

• Session and browsing data: up to 12 months;

• Analytics cookies: as defined in the cookie policy (max. 24 months);

• AI Assistant history: stored locally in the user's browser;

• Contact data: until response to the request or 36 months after last contact;

• Data for legal compliance: according to applicable legal periods.

6.2. After the end of the retention period, data is securely deleted or irreversibly anonymized.

6.3. Data entered into the simulators is processed in real time and is NOT permanently stored on our servers.

7.1. Euro Duty does NOT sell, rent or trade personal data to third parties.

7.2. Data may be shared with:

• Hosting and infrastructure service providers (subcontractors);

• Analytics service providers (e.g., Google Analytics, with IP anonymization);

• AI service providers (for Assistant processing);

• Competent authorities, when legally required.

7.3. All subcontractors are bound by data processing agreements (DPA) in compliance with Article 28 of the GDPR.

7.4. INTERNATIONAL TRANSFERS: Some service providers may be located outside the EEA. In these cases, we ensure that adequate safeguards are in place:

• European Commission adequacy decisions;

• Standard Contractual Clauses approved by the Commission;

• Certification under the EU-US Data Privacy Framework.

8.1. Euro Duty uporablja piškotke in podobne tehnologije za izboljšanje uporabniške izkušnje.

8.2. VRSTE UPORABLJENIH PIŠKOTKOV:

NUJNI PIŠKOTKI:

• Osnovna funkcionalnost platforme;

• Nastavitve seje in jezika;

• Varnost in avtentikacija.

ZMOGLJIVOSTNI IN ANALITIČNI PIŠKOTKI:

• Google Analytics (z anonimizacijo IP);

• Analiza uporabe in vedenja.

FUNKCIONALNI PIŠKOTKI:

• Personalizacija izkušnje;

• Shranjevanje uporabniških nastavitev.

8.3. Uporabnik lahko upravlja nastavitve piškotkov prek:

• Nastavitev brskalnika;

• Pasice za soglasje piškotkov.

8.4. Deaktivacija nujnih piškotkov lahko vpliva na funkcionalnost platforme.

8.5. OGLAŠEVALSKI PIŠKOTKI:

Tretje osebe, vključno z Googlom, uporabljajo piškotke za prikazovanje oglasov na podlagi predhodnih obiskov uporabnika na naši spletni strani. Z uporabo oglaševalskih piškotkov lahko Google in njegovi partnerji prikazujejo oglase uporabnikom na podlagi njihovih obiskov na tej in/ali drugih spletnih straneh na internetu. Uporabniki lahko onemogočijo prilagojeno oglaševanje v Googlovih nastavitvah oglasov.

9.1. Under the GDPR, data subjects have the following rights:

RIGHT OF ACCESS (Art. 15): Obtain confirmation as to whether your data is being processed and access a copy thereof.

RIGHT TO RECTIFICATION (Art. 16): Request correction of inaccurate or incomplete data.

RIGHT TO ERASURE (Art. 17): Request deletion of personal data ('right to be forgotten').

RIGHT TO RESTRICTION (Art. 18): Restrict processing of data in certain circumstances.

RIGHT TO PORTABILITY (Art. 20): Receive data in a structured, machine-readable format.

RIGHT TO OBJECT (Art. 21): Object to processing based on legitimate interest or direct marketing.

RIGHT TO WITHDRAW CONSENT: Withdraw consent at any time, without affecting the lawfulness of prior processing.

9.2. To exercise any of these rights, contact us through the channels provided. We will respond within a maximum of 30 days.

10.1. Euro Duty implements appropriate technical and organizational measures to ensure the security of personal data:

TECHNICAL MEASURES:

• Data encryption in transit (HTTPS/TLS);

• Data encryption at rest;

• Firewalls and intrusion detection systems;

• Regular backups and recovery plans;

• Role-based access control.

ORGANIZATIONAL MEASURES:

• Employee training in data protection;

• Internal information security policies;

• Regular risk assessments;

• Incident response procedures.

10.2. In case of a data breach with risk to the rights of data subjects, we will notify the supervisory authority within 72 hours and, where applicable, the affected data subjects.

11.1. The Euro Duty platform is not intended for minors under 16 years of age.

11.2. We do not intentionally collect personal data from minors under 16.

11.3. If we become aware that we have collected data from a minor without valid parental consent, we will delete that information immediately.

11.4. Parents or legal guardians who believe their child has provided personal data should contact us to request deletion.

12.1. Euro Duty's AI Assistant uses automated processing to generate responses to user questions.

12.2. This processing does NOT constitute 'automated decision-making' under Article 22 of the GDPR, since:

• It does not produce legal effects on the user;

• It does not similarly significantly affect the user;

• The responses are merely informative and non-binding.

12.3. We do not carry out 'profiling' for marketing purposes or price discrimination.

12.4. Tax calculations are simulations based on parameters entered by the user and public legislation, without legal impact.

13.1. If you consider that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

13.2. In Portugal, the supervisory authority is:

NATIONAL DATA PROTECTION COMMISSION (CNPD)

Av. D. Carlos I, 134 - 1st floor

1200-651 Lisbon, Portugal

Tel: (+351) 213 928 400

Email: geral@cnpd.pt

Website: www.cnpd.pt

13.3. Residents of other EU Member States may lodge a complaint with the data protection authority in their country of residence.

13.4. Before filing a complaint, we encourage direct contact with us to try to resolve the matter amicably.

14.1. Euro Duty reserves the right to update this Privacy Policy at any time.

14.2. Changes will be published on this page, with an indication of the date of the last update.

14.3. In case of significant changes that affect users' rights, we may notify through a notice on the platform.

14.4. Continued use of the platform after the publication of changes constitutes acceptance of the new policy.

14.5. We recommend periodically consulting this page to stay informed about our privacy practices.

15.1. For questions related to personal data protection, including the exercise of your rights, you can contact us through:

• The contact channels provided on the platform;

• The contact form (when available).

15.2. We undertake to respond to all requests related to data protection within a maximum of 30 days, as provided for in the GDPR.

15.3. In cases of complexity or high volume of requests, the period may be extended by a further 60 days, upon informing the data subject.

Ta spletna stran uporablja Google Analytics (G-H7CXPCMRRZ) za anonimno spremljanje prometa na spletni strani in vedenja uporabnikov. To nam pomaga izboljšati naše storitve. S sprejemom našega pasice piškotkov soglašate s tem zbiranjem podatkov.

EuroDuty uporablja TikTok za objavo informativne, izobraževalne in promocijske vsebine, povezane z domenama euroduty.eu in euroduty.com. Ta vsebina vključuje razlagalne videoposnetke o temah, obravnavanih na spletni strani.

INTERAKCIJA Z VSEBINO TIKTOK:

Ko uporabnik ogleda ali komunicira z videoposnetki EuroDuty na TikToku, lahko platforma TikTok zbira podatke o uporabi in meritve v skladu z lastno Politiko zasebnosti. EuroDuty teh podatkov ne prejema in ne nadzoruje.

POVEZAVA RAČUNA TIKTOK Z EURODUTY (API):

EuroDuty uporabniku omogoča, da poveže svoj račun TikTok s spletno stranjo za objavo videoposnetkov neposredno na svojem računu TikTok. Ta povezava je neobvezna in se zgodi le, ko jo uporabnik izrecno odobri prek uradnega API-ja TikTok.

Ko uporabnik odobri to povezavo, lahko EuroDuty prejme:

• Žeton za dostop, ki ga zagotovi TikTok

• Identifikator računa TikTok

• Dovoljenja, povezana z nalaganjem in objavo videoposnetkov

• Osnovne informacije o profilu (samo če so odobrene)

EuroDuty ne prejema zasebnih sporočil, stikov, naprednih statistik ali neodobrenih podatkov.

NAMEN UPORABE PODATKOV TIKTOK:

Podatki, ki jih zagotovi TikTok, se uporabljajo izključno za:

• Objavo videoposnetkov, ustvarjenih na EuroDuty, neposredno na računu TikTok uporabnika

• Upravljanje avtentikacije in ohranjanje povezave aktivne, dokler jo uporabnik odobri

EuroDuty teh podatkov ne prodaja niti jih ne deli z oglaševalci in jih ne uporablja za vedenjsko profiliranje ali trženjske analize. EuroDuty prikazuje Googlove oglase, ti pa lahko uporabljajo piškotke, kot je opisano v razdelku o oglaševanju v tem pravilniku.

PIŠKOTKI IN TIKTOK PIXEL:

Če bo EuroDuty uporabil TikTok Pixel za merjenje učinkovitosti kampanj, bo ta uporaba navedena v tej Politiki. Trenutno EuroDuty ne uporablja TikTok Pixla.

SHRANJEVANJE IN VARNOST:

Podatki, ki izvirajo iz TikToka, so shranjeni varno in šifrirano. EuroDuty teh podatkov ne deli, prodaja ali prenaša tretjim osebam.

PREKLIC IN IZBRIS:

Uporabnik lahko kadar koli prekliče dostop EuroDuty do svojega računa TikTok v nastavitvah TikToka. Ko se dostop prekliče:

• Žeton postane neveljaven

• Povezava se deaktivira

• Povezani podatki se izbrišejo v razumnem roku

POLITIKA ZASEBNOSTI TIKTOK:

Za več informacij o tem, kako TikTok obravnava podatke, naj uporabnik pregleda uradno Politiko zasebnosti TikToka.