Privacy Policy

This Privacy Policy explains how Talos Risk Services (“we”, “us”, or “our”) collects, uses, shares, and protects personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

1. Who We Are

Talos Risk Services is an independent consultancy based in the Netherlands, specializing in KYC, CDD, AML, and Financial Economic Crime (FEC) advisory, outsourcing, and risk management services. We support financial institutions in achieving compliance and operational excellence.

Registered office: Amsterdam, Netherlands
KvK number: 86915657
BTW number: NL004322850B56

2. What Data We Collect

We collect only the information necessary to provide our consultancy and compliance services. This may include:

  • Identification and business contact details (e.g., name, title, company, email, phone number)
  • Professional and client-related data (e.g., project information, KYC/CDD documentation, correspondence)
  • Technical data such as IP address, browser type, and website usage statistics

We do not collect sensitive personal data (such as health, religion, or biometric information) unless legally required or explicitly provided for a defined purpose.

3. Purpose of Processing

We process personal data only for legitimate business and regulatory purposes, including:

  • Delivering compliance consulting, advisory, and outsourcing services
  • Managing client relationships, communication, and project delivery
  • Complying with contractual and legal obligations
  • Maintaining internal records for audit and regulatory requirements
  • Improving our services and website functionality

4. Data Sharing

We may share personal data with trusted third parties strictly on a need-to-know basis, such as:

  • IT, hosting, or document management providers
  • Professional service partners or subcontractors engaged in specific projects
  • Regulatory or supervisory authorities where required by law

All third parties are bound by confidentiality and GDPR-compliant agreements. We do not sell or share personal data for marketing purposes.

5. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Performance of a contract or pre-contractual measures
  • Compliance with legal and regulatory obligations
  • Legitimate interests (e.g., business operation, client communication, internal governance)
  • Your consent, where applicable

6. Data Retention & Security

We retain data only for as long as necessary to fulfill the purposes described above or as required by law (e.g., Dutch tax or regulatory retention periods). Project-related data is typically stored for up to 24 months after the end of engagement, unless a longer period is legally required.

We maintain appropriate technical and organizational safeguards, including:

  • Encrypted communications (SSL/TLS)
  • Controlled access to confidential information
  • Secure document storage and backup
  • Periodic review of data protection controls

7. International Transfers

Talos Risk Services stores and processes personal data within the European Economic Area (EEA). If data transfer outside the EEA is necessary, we ensure adequate safeguards such as EU Standard Contractual Clauses or equivalent mechanisms to maintain compliance.

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent (where applicable)

Requests can be submitted to [email protected]. We will respond within 30 days in accordance with GDPR requirements.

9. Updates & Governing Law

We may update this Privacy Policy to reflect changes in legal or operational requirements. Any material changes will be announced on our website at least 14 days before taking effect. The latest version will always be available at www.talosriskservices.com/privacy-policy.

This Privacy Policy is governed by and interpreted under Dutch law.

10. Contact

If you have questions about this Privacy Policy or our data handling practices, please contact:

Talos Risk Services
Amsterdam, The Netherlands
Email: [email protected]