Privacy policy

1. Introduction

Welcome to tariffs.help. We value your privacy and are committed to protecting your personal data. This privacy policy explains how Golden Planet ApS (“we”, “us”, “our”) collects, uses, shares, and protects your information when you use our service tariffs.help.

Data controller:
Golden Planet ApS
CVR number: DK26991714
Address: Dalbygade 40 A, 6000 Kolding, Denmark
E-mail: privacy@tariffs.help
Phone: +45 51900694

2. What information do we collect?

2.1 Information you provide us

• Account information: name, email address, company name
• Payment information: billing address (payment card details are processed by our payment provider)
• Communication: messages you send to our support

2.2 Information we collect automatically

• Usage data: how you use the service, features you access, customs code (HS) searches
• Visit data: when you view a page on tariffs.help or app.tariffs.help, our own server records the page, the time, your IP address, your browser type and operating system, your browser language, the country your IP address points to, the page that linked you to us, and any campaign tags in the link you followed. This is collected by our server and stored in our own database. No analytics script runs in your browser, and no other company receives this data.
• Cookies: see our cookie section below; our visit statistics do not use cookies

2.3 Information from third parties

• Payment providers: payment status and transaction history
• Authentication services: if you log in via a third party (e.g. Google)

3. How do we use your information?

We use your information to:

• Provide the service: process your customs code classifications and manage your account
• Improve the service: analyse usage to develop new features and improvements
• Communicate with you: send service updates, support messages, and (with your consent) marketing
• Security and compliance: protect against fraud, enforce our terms, comply with legal requirements
• Billing: process payments and manage subscriptions

4. Legal basis for processing (GDPR)

We process your personal data based on:

• Contractual performance (GDPR Art. 6(1)(b)): necessary to provide the service
• Legitimate interest (GDPR Art. 6(1)(f)): service improvement, security, and our own visit statistics (sections 2.2 and 10)
• Consent (GDPR Art. 6(1)(a)): marketing messages, if you have opted in to them
• Legal obligation (GDPR Art. 6(1)(c)): compliance with tax legislation and accounting requirements

5. Sharing of information

We never share your information for commercial purposes. We only share with:

5.1 Service providers

• Hosting: Hetzner (servers located in the EU)
• Payment processing: Stripe (GDPR-compliant)
• Email delivery: an email service provider (for transactional emails such as account and review notifications)

5.2 Legal requirements

We may share information if required by law, court order, or governmental request.

5.3 Business transfer

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

6. International data transfer

We primarily store data within the EU/EEA. If data is transferred to countries outside the EU/EEA, we ensure:

• Standard Contractual Clauses (SCCs): approved by the EU Commission
• Adequacy decisions: only transfer to countries with an adequate level of protection
• Additional security measures: encryption, pseudonymisation

7. Data protection and security

We implement comprehensive security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access control: strict access management and authentication
• Regular audits: security reviews and penetration testing
• Staff training: all employees are trained in data protection
• Incident response: a documented plan for data breaches

8. Retention period

We store your information only as long as necessary:

• Active accounts: throughout the entire subscription period
• Inactive accounts: 12 months after last login, then deletion
• Billing data: 5 years (accounting requirements)
• Support communication: 3 years
• Visit data: detailed visit records, including the IP address, are deleted after 90 days; we keep only summarised statistics that contain no personal data. Ordinary technical server logs and backups can hold IP addresses for a limited period beyond this, for security and operations.
• Marketing consent: until you withdraw consent

9. Your rights under GDPR

You have the following rights:

9.1 Right of access (Art. 15)

You can request a copy of all personal data we hold about you.

9.2 Right to rectification (Art. 16)

You can request correction of inaccurate or incomplete information.

9.3 Right to erasure (Art. 17)

You can request erasure of your personal data (“right to be forgotten”).

9.4 Right to restriction of processing (Art. 18)

You can request temporary restriction of processing.

9.5 Right to data portability (Art. 20)

You can request your data in a structured, commonly used format.

9.6 Right to object (Art. 21)

You can object to processing based on legitimate interest or direct marketing.

9.7 Right not to be subject to automated decision-making (Art. 22)

You have the right not to be subject to decisions based solely on automated processing.

Exercising your rights: contact us at privacy@tariffs.help or via your account settings. We respond within 30 days.

10. Cookies

We use only the cookies the service needs in order to work. We do not use analytics cookies or advertising cookies, and we do not track you across other websites. Because we set no cookies that require consent, there is no cookie banner.

10.1 Necessary cookies

• Session cookie: keeps you logged in (deleted when you log out)
• Security cookie: protects forms against cross-site request forgery (CSRF)

10.2 Functional cookies

• Language: remembers your chosen language

Our visit statistics work without cookies; they are collected by our own server as described in section 2.2. You can block or delete cookies in your browser settings, but blocking the necessary ones will prevent you from logging in.

11. Children’s privacy

tariffs.help is intended for business use. We do not knowingly collect information from individuals under 18 years of age. If you are a parent and discover that your child has provided us with information, please contact us.

12. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via:

• Email to registered users
• Notification upon login
• The update date at the top of this page

Continued use after changes constitutes acceptance of the new policy.

13. Complaints and supervision

If you are dissatisfied with our processing of your information, you have the right to complain to:

Datatilsynet
Borgergade 28, 5.
1300 København K
Phone: +45 33 19 32 00
E-mail: dt@datatilsynet.dk
Website: www.datatilsynet.dk

14. Contact us

If you have questions about this privacy policy or our data protection practices:

E-mail: privacy@tariffs.help
Mail: Golden Planet ApS, Att: Data Protection, Dalbygade 40 A, 6000 Kolding, Denmark
Phone: +45 51900694

We strive to respond to all inquiries within 48 hours.

---

This privacy policy has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and Danish data protection legislation.