Complex rules, clearly seen.

Privacy notice

What personal data EU AML Monitor uses, why, and what you can ask for.

1Who is responsible

The controller is Soccosa Volza, the publisher of EU AML Monitor, whose address is in the legal notice. For anything in this notice, write to office@theamlmonitor.eu.

2What is used, and why

Data	Purpose	Legal basis (GDPR)
Name and work email of the person who orders, the billing contact and each named user	To accept the order, give access, send invoices and manage the subscription	Legitimate interest in performing and administering the contract with the subscribing organisation, Article 6(1)(f)
Invoices and payment records	To meet tax and accounting obligations	Legal obligation, Article 6(1)(c)
Emails sent to the enquiries address	To answer them	Legitimate interest in replying, Article 6(1)(f)
Name and work email of people the publisher has been in contact with	Occasional emails about EU AML Monitor, which stop on request	Legitimate interest in telling customers and contacts about EU AML Monitor, Article 6(1)(f); consent, Article 6(1)(a), where the rules on electronic marketing require it

The organisation’s name, address and VAT number are business details. They are checked against the European Commission’s VIES database before an order is accepted.

Order and billing details are needed to supply the subscription; without them an order cannot be accepted. Where your name and work email were given to the publisher by your employer in an order, they came from that order.

No data is sold, used for advertising or used to build profiles. No decision about anyone is made by automated means.

3Who else receives it

Email. The office@theamlmonitor.eu mailbox is provided by [provider to be completed].
Hosting. The site is hosted by Cloudflare, which processes visitors’ IP addresses and other technical data to deliver the pages and protect them from attack. The legal basis is the legitimate interest in running a secure site, Article 6(1)(f).
Sign-in. Sign-in to subscriber pages is provided by Clerk, Inc., which processes the name and work email address of each named user to send sign-in codes and keep the user signed in. Technical and sign-in data are kept only as long as needed for security and sign-in, under the standard settings of the hosting and sign-in providers.
Accountant, bank and tax authorities, to the extent needed for invoices, payments and tax returns.

Cloudflare, Inc. and Clerk, Inc. are based in the United States. Both are certified under the EU-US Data Privacy Framework, which the European Commission has found gives adequate protection (Implementing Decision (EU) 2023/1795). A copy of the safeguards can be requested at office@theamlmonitor.eu.

The pages set no analytics or advertising cookies. The site uses only cookies needed to run it: security cookies set by Cloudflare, and sign-in cookies set by Clerk on subscriber pages.

4How long it is kept

Order, contact and named-user details: for the subscription and twelve months after it ends.
Invoices and accounting records: for as long as Maltese tax law requires.
Enquiries and contacts for occasional emails: twelve months after the last exchange.

5Your rights

You may ask for access to your data, for it to be corrected or erased, for its use to be restricted, or for a copy in a portable form, and you may object to its use on the basis of legitimate interest. You may stop emails about EU AML Monitor at any time by replying to say so. Where you have given consent, you may withdraw it at any time; this does not affect earlier use. Write to office@theamlmonitor.eu; requests are answered within one month.

You may also complain to the Information and Data Protection Commissioner in Malta, or to the data protection authority where you live or work.

This notice applies from 1 December 2026.

A published reference, not advice to any particular firm; reading it creates no professional relationship.
Enquiries: office@theamlmonitor.eu · Legal notice · Privacy · Terms