This site is run by ADVAITA OÜ, registry code 17568302, Sepapaja tn 6, 15551 Tallinn, Estonia. Contact: hello@dutyvault.app. ADVAITA OÜ is the controller of the processing described on this page.
This site sets no cookies and runs no analytics. The tools run in your browser. Technical request data, including your IP address, is processed by our hosting provider (see Hosting).
Your Vault is stored in this browser's local storage (localStorage) under the key dv-vault. It holds your product records (skus), your saved declaration summaries (decls) and the codes you watch (watch: cn2027, measures, hs2028). It is not sent anywhere. In the Vault you can delete product records and saved declaration summaries one by one, or all your Vault data at once. If your browser cannot save, the Vault shows this notice: “Could not save: your browser blocked storage or is full. Your changes are not kept after you close this tab.” Vault records remain on your device; we do not have access to their contents and cannot retrieve or delete them for you.
The site is hosted on Cloudflare. Cloudflare processes technical request data, including your IP address, on our behalf to deliver the pages. Our legal basis is our legitimate interest in delivering and securing the site (Article 6(1)(f) of Regulation (EU) 2016/679). We set no retention period of our own: under Cloudflare's data processing addendum, the data is kept until our agreement with Cloudflare ends or, if earlier, until its processing is no longer necessary for either party to perform that agreement. Where data is transferred outside the EEA, Cloudflare relies on the European Commission's standard contractual clauses and, for the United States, on its EU-U.S. Data Privacy Framework certification.
If you open a tariff code in the Commission's TARIC database, the code and today's date go in that web address and are sent to the Commission's site.
If you email hello@dutyvault.app, Cloudflare Email Routing relays your message and your email address to our company mailbox at Proton, a service operated by Proton AG in Geneva, Switzerland; a transfer to Switzerland rests on the European Commission's adequacy decision, Decision 2000/518/EC. We use your message to answer it, on the basis of our legitimate interest in answering enquiries. We keep it only as long as needed to answer it and to meet any legal duty.
Depending on the circumstances, Regulation (EU) 2016/679 gives you the rights in its Articles 15 to 22: access, rectification, erasure, restriction of processing, data portability and objection, and the right not to be subject to a decision based solely on automated processing where Article 22 applies. Under Article 19 we notify each recipient of any rectification, erasure or restriction, unless that is impossible or involves disproportionate effort, and we inform you about those recipients if you ask. Under Article 77 you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.