Privacy Policy
Last updated: 2 November 2026
1. Controller and scope
TaxTreaties.eu is operated by an individual in Sweden. This policy describes processing of personal data when you access the website, use its checker, contact us or interact with consent and advertising features. EU General Data Protection Regulation (GDPR) rights may apply.
Operator and data controller: Nicholas Ahonen
Address: Finnboda Kajväg 2B, SE-13172 Nacka, Sweden
Email: nicholas@allseasonsportfolio.eu
2. Categories of information
Technical information: Website infrastructure may process IP addresses, request times, browser/device details, requested resources, error events and security logs for delivery, diagnostics and protection.
Checker choices: The checker processes the countries, income type, tax year and other parameters you choose to generate a response. It also supports browser-stored preferences. These inputs are intended for general scenarios but may be personal data if associated with an identifiable person. Please do not submit tax identification numbers or sensitive personal details to the checker.
Contact information: When you email us or use the contact form, we process your name, email address, enquiry category, message and any optional country-pair details. Contact-form submissions are stored in a private admin inbox, used to respond to requests, investigate corrections and prioritise suggested tax scenarios. We do not publish submissions or visitor contact details. Please do not include personal identification numbers, account information or sensitive tax records in the form.
Consent records and identifiers: Once advertising is activated, Google's Privacy & messaging certified consent platform manages advertising consent and related identifiers. A retired first-party consent storage item (tt_consent_v1) may remain in returning visitors' browsers but no longer determines advertising eligibility. Where advertising is enabled, third-party providers may process online identifiers and browsing information in accordance with consent choices and their own privacy documentation.
3. Purposes and lawful bases
| Activity | Purpose | GDPR basis |
|---|---|---|
| Essential site requests and security logs | Deliver the website, debug and prevent misuse | Legitimate interests, Art. 6(1)(f), subject to balancing |
| Checker selections and session preferences | Provide requested checker functionality and remember requested choices | Legitimate interests, Art. 6(1)(f), where appropriate |
| Enquiries | Answer messages and maintain correspondence | Legitimate interests, Art. 6(1)(f), or precontractual steps, Art. 6(1)(b), where applicable |
| Recording cookie choices | Respect consent choices and evidence compliance | Legal obligation, Art. 6(1)(c), where applicable |
| Non-essential analytics, advertising storage and personalised advertising | Measure use and provide advertising where implemented | Consent, Art. 6(1)(a), where required |
These descriptions are limited to activities currently identified in the application code; exact infrastructure logging and third-party behaviour must also be confirmed with providers.
4. Technology providers and recipients
The site is built using Base44, whose application platform and associated infrastructure may process site requests and stored data. We may use providers that supply hosting, security, email or website operations. Exact infrastructure subprocessors, processing locations and contractual roles are subject to the current Base44 provider documentation.
The code includes support for Google AdSense advertising where enabled in site settings, and for affiliate placements. Advertising partners may act as independent controllers for some activities. See their own notices for further details. A reference to a provider here does not mean that it is always active.
We do not sell personal information as a business activity.
5. Cookies, local storage and consent
The site may use browser storage for preferences and necessary functions. The former home-built advertising consent banner has been retired. Google AdSense advertising may be activated only after its Google-certified Privacy & messaging message is published and configured for this website. Its message collects and records consent and supports withdrawal through the footer's Cookie Preferences control when available. Google manages consent signals for its ad services; where we control individual advertising placements, we additionally require a positive TCF consent signal. See our Cookie Policy.
6. International transfers
Technical or advertising service providers may process information outside the European Economic Area. Where GDPR Chapter V applies, transfers must be covered by an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses and any necessary additional measures. We will provide further information about relevant safeguards on request, subject to verification of actual provider arrangements.
7. Retention
We keep information only as long as necessary for the stated purposes, applicable legal obligations and legitimate claims. Browser preferences and consent choices remain on your device until replaced or deleted, including when browser data is cleared. Correspondence, including private contact-form submissions and internal handling notes, is retained while needed to resolve the enquiry and for any justified follow-up or legal record. You can request deletion when no longer required. Infrastructure security logs and third-party advertising data follow the provider's actual configured retention periods, which must be verified; we do not claim a specific period without confirmation.
8. Your rights
Subject to statutory conditions, you may request access, correction, deletion, restriction or portability of your personal data, object to legitimate-interest processing, and withdraw consent at any time without affecting previous lawful processing. Contact nicholas@allseasonsportfolio.eu. We normally respond within one month, subject to lawful extensions and necessary identity verification.
You may complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), or another competent supervisory authority.
9. Automated decision-making
The checker produces general informational outputs from selected criteria. It is not designed to make solely automated decisions with legal or similarly significant effects on an individual under GDPR Article 22.
10. Security, children and external sites
We use reasonable technical and organisational safeguards, but no online service is risk-free. This website is not directed specifically at children. External links lead to third parties whose processing practices we do not control.
11. Updates and contact
We may amend this policy when our processing or applicable law changes. Material changes will be communicated where required.
Operator and data controller: Nicholas Ahonen
Address: Finnboda Kajväg 2B, SE-13172 Nacka, Sweden
Email: nicholas@allseasonsportfolio.eu