General

We are BlueMonks, an international financial and economic crime boutique based in the Netherlands, with a focus on all aspects of the Know Your Customer (KYC) and Anti Money Laundering (AML) standards. This includes money laundering, funding of terrorism, tax evasion, and other forms of Financial Economic Crime (FEC). Supervisory bodies expect financial institutions to take measures to prevent FEC, and BlueMonks helps financial institutions find the best approach to do so. For more information about our services, you can read more about us here.

Objective of this Privacy Statement

​The objective of this privacy statement is to provide more information about the way in which personal data is handled by BlueMonks when our services are utilized. We only process personal data in a lawful way and give high priority to the protection of these data. We consider personal data to be data that are given to us, but also any data that we may collect from or about you. It applies to products and services for which we collect your personal data, and all personal information that is processed by or on behalf of BlueMonks. As a data controller, we act reasonably to protect your privacy. This statement explains how we intend to do this.

Updates to the Privacy Policy

​This online privacy statement might be updated periodically, for example in the event of changes in the law or changes in our privacy practices. When changes are made, the 'latest update' will be revised. If the changes are significant, we will notify you of this through a post on our website.

Processing Personal Information

We process your personal data in order to provide our services. BlueMonks' main expertise lies in providing services regarding the implementation of FEC-related laws and regulations at financial institutions. Furthermore, BlueMonks also offers support in optimizing existing processes, systems, and policies. This means that we may, for example, collect personal data through automated processing, but also when you freely provide information by, for example, completing our (contact) forms or sending us an email. This means that we can offer services, but also, for example, can target EU residents with advertising cookies and store your IP addresses in our log files.

Personal Data Collection

Personal data that we, as a data controller, may collect from you for the purposes of this privacy statement, include your name, email address, information about your company, and phone number. We will only use this data to inform you via BlueMonks newsletter and for the specific reason for which it was provided. If you do not want your personal data to be collected, please notify us, and we will exclude your data. If you do not want to receive the BlueMonks newsletter, you can easily unsubscribe via the link in the footer of the newsletter.

• Internet Protocol addresses (IP)#
• Browser Type
• Internet Service Provider (ISP)
• Referring/Exit pages
• The files viewed on our site (e.g. HTML pages, Graphics, etc.)
• Operating System
• Date/Time stamp

 Sources

We collect personal information from: you directly, information provided when using our service and products, and from other publicly available sources.

How we use your Data

We use your data for the following purposes: 

• Contacting you to provide information about our services.
• Managing the projects and services signed for.
• To perform and test the performance of our services and internal processes.
• For management and auditing of our business operations, including accounting.
• To monitor and keep records of our communications with you and our staff.
• For market research and analysis.
• To comply with legal and regulatory obligations, requirements and guidance.

Legal Grounds

We rely on the following legal bases for the use of your data:

• Where it is needed to provide you with services or a contractual obligation.
• Where it is in our legitimate interests to do so.
• To comply with our legal obligations.
• With your consent or explicit consent: Where we're relying upon your consent to process personal data, you can withdraw this at any time by contacting us using the details below.
• To protect the vital interest of an individual.
• With your explicit consent.

Sharing your personal information with other organisations

We may share information with the following third parties for the purposes listed above: 

• Business Partners
• Governmental and regulatory bodies.
• Other organizations and businesses who provide services, such as IT software and maintenance providers, document storage providers, and suppliers of other back-office functions. 
• Market research organizations that help us to develop and improve our products and services.

Retention Period

Unless explained otherwise, we will hold your personal data based on the following criteria: for as long as we have reasonable business needs, such as fulfilling our contractual obligations, and to comply with retention periods in line with legal and regulatory requirements or guidance. 

Your Rights under Data Protection laws

Listed below are the rights of all individuals under the data protection laws and regulations. They don't apply in all circumstances. If you wish to use any of them, we'll explain at that time if they apply or not. 

• ​The right to be informed about the processing of your personal information.
• The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed.
  
• The right to object to processing.
  
• The right to restrict processing.
  
• The right to have your personal information erased (the “right to be forgotten”).
  
• The right to request access to your personal information and to obtain information about how we process it.
  
• The right to move, copy, or transfer your personal information (“data portability”).
  
• Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.
  

You have the right to complain and object

You have the right to complain to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), which enforces the data protection laws. You can contact us using the details below.

You also have the right to object to certain purposes for processing, in particular to data processed for direct marketing purposes and to data processed for certain reasons based on our legitimate interests. You can contact us to exercise these rights.

Data Privacy Officer

We have a dedicated privacy officer, who you can contact using the details on our Contact Us form.