PRIVACY POLICY

PRIVACY POLICY

Effective date: May 26, 2026

1. Introduction

This Privacy Policy explains how ZJC Consult s.r.o., Company ID 17771650, with its registered office at Plzeňská 3350/18, 150 00 Praha 5-Smíchov, Czech Republic (the “Controller”), processes personal data in connection with the NORDVANDE website, contact forms, questionnaires, and services.


Contact email: info@nordvande.com


We process personal data only to the extent necessary for communication with you, website operation, assessment of your AML workflow information, preparation of service proposals, and provision of NORDVANDE services.

2. Categories of personal data processed

We may process the following categories of personal data:


  • first and last name;

  • business email address;

  • telephone number;

  • company name;

  • job title;

  • company identification data;

  • information provided through NORDVANDE contact forms or questionnaires;

  • information shared via email or other communication;

  • information necessary for preparing a proposal or providing services;

  • technical data regarding website visits, such as IP address, device, browser, and cookies, where relevant.


We do not process data from identity documents, personal identification numbers (birth numbers), PEP status, or information regarding personal cryptocurrency wallets unless necessary for a specific service and separately agreed with the client.

3. Source of personal data

We typically obtain personal data:


  • directly from you via forms, questionnaires, email, or direct communication;

  • from communications between you and NORDVANDE;

  • from public registers, where relevant for company identification or preparing a collaboration;

  • from professional partners or service providers, where necessary and legally justified.


If you provide us with personal data of other persons, such as employees, advisers, or corporate contacts, you are responsible for ensuring that they are adequately informed about this processing.

4. Why we process personal data

We process personal data primarily for:


  • responding to your message or inquiry;

  • processing contact forms and questionnaires;

  • preparing a preliminary AML automation snapshot;

  • preparing an AML Automation Roadmap or a proposal for related services;

  • communicating before, during, and after our collaboration;

  • providing NORDVANDE services;

  • maintaining basic business, accounting, and administrative records;

  • protecting our legal claims;

  • ensuring the security of the website and systems;

  • measuring website traffic, if analytical tools are used;

  • sending commercial communications, where legally permissible or based on consent.

5. Legal basis for processing

Depending on the situation, we process personal data on the basis of:


  • steps taken prior to entering into a contract or performance of a contract;

  • legitimate interests, in particular for communication, administration, service preparation, security, and protection of legal claims;

  • legal obligations, in particular accounting, tax, or other statutory requirements;

  • consent, where required, for example for non-essential analytics or marketing cookies.

6. Retention period for personal data

We store personal data only for the period necessary for the relevant purpose.


In general:


  • contact details are retained for the period necessary to process communication and subsequent business communication;

  • data related to services are retained for the duration of the cooperation and subsequently for the period necessary to protect legal claims;

  • accounting and tax data are retained for the period stipulated by law;

  • data processed on the basis of consent are retained until consent is withdrawn or the relevant period expires;

  • analytical data and cookies are retained according to the settings of the specific tool used.

7. To whom personal data may be provided

Personal data may be shared to the extent necessary with:


  • providers of website hosting and technical services;

  • tools for email, communication, forms, reservations, analytics, payments, or invoicing;

  • accounting, tax, legal, compliance, or other professional advisers;

  • professional partners involved in providing NORDVANDE services;

  • public authorities, if required by law.


We do not sell personal data to third parties.

8. Data transfers outside the EU

We endeavour to process personal data within the Czech Republic or the European Union. Some providers of technical, cloud, analytical, or communication services may process data outside the EU.


If personal data are transferred outside the EU, we do so only in accordance with the GDPR, for example on the basis of an adequacy decision or standard contractual clauses.

9. Cookies and analytics

The website may use necessary cookies required for basic operation.


If analytical or marketing cookies are used, they will be used only in accordance with legal requirements and, where required, based on your consent. Specific analytical, cookie, or marketing tools should be listed according to the website’s actual technical configuration.

10. Automated decision-making

We do not use personal data for automated decision-making that would have legal effects on you or similarly significantly affect you.


NORDVANDE services may use AI-assisted analysis to support AML workflow assessment, automation mapping, and preparation of recommendations. However, NORDVANDE does not make final decisions regarding AML risk, regulatory decisions, sanctions or PEP screening, suspicious activity reports, or legal conclusions on behalf of clients.

11. Data security

We protect personal data using appropriate technical and organisational measures against unauthorised access, loss, misuse, alteration, or destruction.


Access to personal data is limited to persons who need it for the purposes described in this Privacy Policy.

12. Your rights

Under the GDPR, you may have the right to:


  • request access to your personal data;

  • request rectification of inaccurate or incomplete data;

  • request erasure of personal data, provided the legal conditions are met;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • withdraw your consent, if processing is based on consent;

  • request data portability, where relevant;

  • lodge a complaint with a supervisory authority.


The supervisory authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

13. Contact

For questions regarding the processing of personal data or to exercise your rights, contact us at info@nordvande.com.

14. Updates

We may update this Privacy Policy from time to time, particularly if there are changes to the website, tools, services, scope of processing, or legal requirements.