Last updated:
26 May 2026
Privacy Policy
1. Introduction
This Privacy Policy explains how ZJC Consult s.r.o., Company ID 17771650, with its registered office at Plzeňská 3352/156, Smíchov, 150 00 Prague 5, processes personal data in connection with the AMlytix website, contact forms, questionnaires, AML automation snapshots, automation roadmaps, and related services. The original Czech version of this policy designates ZJC Consult s.r.o. as the controller and refers to the GDPR as the applicable legal framework.
Contact email: info@amlytix.com
We process personal data only to the extent necessary for communication with you, website operation, assessment of your AML workflow information, preparation of service proposals, and the provision of AMlytix services.
2. Categories of personal data processed
We may process the following categories of personal data:
first and last name;
business email address;
telephone number;
company name;
job title;
company identification data;
information provided through AMlytix contact forms or questionnaires;
information shared via email or other communication;
information necessary for the preparation of a proposal or the provision of services;
technical data regarding website visits, such as IP address, device, browser, and cookies, where relevant.
The original policy further states that data from identity documents, personal identification numbers (birth numbers), PEP status, and information regarding personal cryptocurrency wallets are not processed unless necessary for a specific service and separately agreed upon with the client.
3. Source of personal data
We typically obtain personal data:
directly from you via forms, questionnaires, email, or direct communication;
from communication between you and AMlytix;
from public registers, if relevant for company identification or preparing collaboration;
from professional partners or service providers, if necessary and legally justified.
If you provide us with personal data of other persons, such as employees, advisors, or corporate contacts, you are responsible for ensuring that they are adequately informed about this.
4. Why we process personal data
We process personal data primarily for the purpose of:
responding to your message or inquiry;
processing contact forms and questionnaires;
preparing a preliminary AML automation snapshot;
preparing an AML Automation Roadmap or a proposal for related services;
communication before, during, and after our collaboration;
providing AMlytix services.
maintenance of basic business, accounting, and administrative records;
protection of our legal claims;
ensuring the security of the website and systems;
measuring website traffic, if analytical tools are used;
sending commercial communications, where legally permissible or based on consent.
The original policy specifies these purposes, including responding to inquiries, processing forms, preparing proposals, providing services, maintaining records, protecting legal claims, website security, analytics, and commercial communication.
5. Legal basis for processing
Depending on the situation, we process personal data on the basis of:
steps taken prior to entering into a contract or performance of a contract;
legitimate interests, in particular for communication, administration, service preparation, security, and the protection of legal claims;
legal obligations, in particular accounting, tax, or other statutory requirements;
consent, where required, for example for necessary cookies or optional marketing.
These legal bases correspond to the original Czech principles.
6. Retention period for personal data
We store personal data only for the period necessary for the given purpose.
In general:
contact details are retained for the period necessary to process communication and subsequent business communication;
data related to services are retained for the duration of the cooperation and subsequently for the period necessary for the protection of legal claims;
accounting and tax data are retained for the period stipulated by law;
data processed on the basis of consent are retained until the withdrawal of consent or the expiration of the relevant period;
analytical data and cookies are retained according to the settings of the specific tool used.
7. To whom personal data may be provided
Personal data may be shared to the extent necessary with:
providers of website hosting and technical services;
tools for email, communication, forms, reservations, analytics, payments, or invoicing;
accounting, tax, legal, compliance, or other professional advisors;
professional partners involved in the provision of AMlytix services;
public authorities, if required by law.
We do not sell personal data to third parties. The original policy explicitly states that personal data is not sold to third parties.
8. Data transfers outside the EU
We endeavor to process personal data within the territory of the Czech Republic or the European Union. Some providers of technical, cloud, analytical, or communication services may process data outside the EU.
If personal data is transferred outside the EU, we do so only in accordance with the GDPR, for example, on the basis of an adequacy decision or standard contractual clauses.
9. Cookies and analytics
The website may use necessary cookies required for basic operation.
If analytical or marketing cookies are used, they will be used only in accordance with legal requirements and, where required, based on your consent. Specific analytical, cookie, or marketing tools should be listed according to the actual technical configuration of the website.
10. Automated decision-making
We do not use personal data for automated decision-making that would have legal effects on you or significantly affect you in a similar manner.
AMlytix services may use AI-assisted analysis to support AML workflow assessment, automation mapping, and preparation of recommendations. However, AMlytix does not make final decisions regarding AML risk, regulatory decisions, sanction or PEP screening decisions, suspicious activity report decisions, or legal conclusions on behalf of clients.
11. Data security
We protect personal data using appropriate technical and organizational measures against unauthorized access, loss, misuse, alteration, or destruction.
Access to personal data is limited to persons who need it for the purposes described in this Privacy Policy.
12. Your rights
Pursuant to the GDPR, you may have the right to:
request access to your personal data;
request the rectification of inaccurate or incomplete data;
request the erasure of personal data, provided that the legal conditions are met;
request the restriction of processing;
object to processing based on legitimate interests;
withdraw your consent, if the processing is based on consent;
request data portability, where relevant;
lodge a complaint with a supervisory authority.
The supervisory authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
13. Contact
In case of questions regarding the processing of personal data or to exercise your rights, please contact us at:
14. Updates
We may update this Privacy Policy from time to time, particularly if there are changes to the website, tools, services, scope of processing, or legal requirements.
Effective date: May 26, 2026.