Updated:
Privacy policy
1. Introduction
This Privacy Policy explains how ZJC Consult s.r.o., Reg. No. 17771650, with its registered office at Plzeňská 3352/156, Smíchov, 150 00 Prague 5, processes personal data in connection with the AMlytix website, contact forms, questionnaires, AML automation snapshots, automation roadmaps, and related services. The original Czech policy identifies ZJC Consult s.r.o. as the controller and refers to GDPR as the applicable framework.
Contact email: info@amlytix.com
We process personal data only to the extent necessary to communicate with you, operate the website, review your AML workflow information, prepare service proposals, and provide AMlytix services.
2. What personal data we process
We may process the following types of personal data:
name and surname;
work email address;
phone number;
company name;
job title;
company identification details;
information submitted through contact forms or AMlytix questionnaires;
information shared in email or other communication;
information needed to prepare an offer or provide services;
technical data about website visits, such as IP address, device, browser, and cookies, where applicable.
The original policy also states that identity-document data, birth numbers, PEP status, and personal crypto-wallet data are not processed unless necessary for a specific service and separately agreed with the client.
3. Where we get personal data from
We usually receive personal data:
directly from you through forms, questionnaires, email, or direct communication;
from communication between you and AMlytix;
from public registers, where relevant for company identification or cooperation preparation;
from professional partners or service providers, where necessary and legally justified.
If you provide us with personal data of other persons, such as employees, advisors, or company contacts, you are responsible for ensuring that they are reasonably informed.
4. Why we process personal data
We process personal data mainly to:
respond to your message or inquiry;
process contact forms and questionnaires;
prepare a preliminary AML automation snapshot;
prepare an AML Automation Roadmap or related service proposal;
communicate before, during, and after cooperation;
provide AMlytix services;
maintain basic business, accounting, and administrative records;
protect our legal claims;
ensure website and system security;
measure website traffic, where analytics are used;
send business communication where legally permitted or based on consent.
The original policy lists these purposes, including responding to inquiries, processing forms, preparing offers, providing services, maintaining records, protecting legal claims, website security, analytics, and business communications.
5. Legal basis for processing
Depending on the situation, we process personal data on the basis of:
steps taken before entering into a contract or performance of a contract;
legitimate interest, especially for communication, administration, service preparation, security, and protection of legal claims;
legal obligation, especially accounting, tax, or other statutory requirements;
consent, where required, for example for non-essential cookies or optional marketing.
These legal bases correspond to the original Czech policy.
6. How long we keep personal data
We keep personal data only for as long as necessary for the relevant purpose.
In general:
contact data is kept for the time necessary to handle communication and follow-up business communication;
service-related data is kept for the duration of cooperation and then for the period necessary to protect legal claims;
accounting and tax-related data is kept for the period required by law;
data processed based on consent is kept until consent is withdrawn or the relevant period expires;
analytics and cookie data is kept according to the settings of the specific tool used.
7. Who may receive personal data
Personal data may be shared, where necessary, with:
website hosting and technical service providers;
email, communication, form, booking, analytics, payment, or invoicing tools;
accounting, tax, legal, compliance, or other professional advisors;
professional partners involved in providing AMlytix services;
public authorities where required by law.
We do not sell personal data to third parties. The original policy expressly states that personal data is not sold to third parties.
8. Transfers outside the EU
We try to process personal data within the Czech Republic or the European Union. Some technical, cloud, analytics, or communication providers may process data outside the EU.
If personal data is transferred outside the EU, we will do so only in accordance with GDPR, for example based on an adequacy decision or standard contractual clauses.
9. Cookies and analytics
The website may use necessary cookies required for basic operation.
If analytics or marketing cookies are used, they will be used only in accordance with legal requirements and, where required, based on your consent. Specific analytics, cookie, or marketing tools should be listed according to the actual technical setup of the website.
10. Automated decision-making
We do not use personal data for automated decision-making that would have legal effects on you or significantly affect you in a similar way.
AMlytix services may use AI-assisted analysis to support AML workflow review, automation mapping, and preparation of recommendations. However, AMlytix does not make final AML risk decisions, regulatory decisions, sanctions or PEP clearance decisions, suspicious activity reporting decisions, or legal conclusions on behalf of clients.
11. Data security
We protect personal data using appropriate technical and organizational measures against unauthorized access, loss, misuse, alteration, or destruction.
Access to personal data is limited to persons who need it for the purposes described in this Privacy Policy.
12. Your rights
Under GDPR, you may have the right to:
request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of personal data, where legal conditions are met;
request restriction of processing;
object to processing based on legitimate interest;
withdraw consent, where processing is based on consent;
request data portability, where applicable;
lodge a complaint with the supervisory authority.
The supervisory authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
13. Contact
For questions about personal data processing or to exercise your rights, contact us at:
14. Updates
We may update this Privacy Policy from time to time, especially if the website, tools, services, processing scope, or legal requirements change.
Effective date: 26 May 2026.