Legal

AMP Compliance Solutions is a sole-trader practice (eenmanszaak) under Dutch law.

Trading name

AMP Compliance Solutions

Owner

Adam Poole

Legal form

Eenmanszaak

Registered office

Korte Amstelstraat 26, 1018 XS Amsterdam, the Netherlands

KvK number

94075557

BTW number

NL005062274B22

Contact

adam.poole@ampcompliance.com

The practice is registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under SBI codes 70221 and 70222, covering management and business advisory activity, with registered activities in advisory and support relating to financial economic crime.

This notice explains how AMP Compliance Solutions handles personal data in connection with this website. It is given under Articles 12 to 14 of the EU General Data Protection Regulation (GDPR), and reflects the position as at the date below.

It covers visitors to ampcompliance.com only. Personal data handled in the course of a client engagement is governed separately, under the engagement letter and any associated data processing terms agreed with the client.

Controller

The controller of personal data collected through this website is Adam Poole, trading as AMP Compliance Solutions, at the address above. Contact for data protection enquiries is adam.poole@ampcompliance.com.

What data is collected

The website itself sets no cookies and uses no advertising or cross-site tracking technologies. The analytics it uses are cookieless and aggregate, described below. See also the cookies section.

Personal data may nonetheless be processed in connection with visits to the site, in the following ways.

Server logs. The site is hosted on Cloudflare Pages. Cloudflare processes routine server log information for security, abuse prevention, and infrastructure operation. This includes IP address, user agent, request timestamp, and the resource requested. AMP does not have direct access to these logs in the normal course and does not use them for analytics. Cloudflare's handling of this data is governed by Cloudflare's own privacy terms.

Website analytics. The site uses Cloudflare Web Analytics, a privacy-first, cookieless analytics service. It measures aggregate information about how the site is used, including page views, visit counts, referring sources, approximate country, and device and browser type. It does not set cookies, does not track visitors across other websites, and does not identify individual visitors. To do this it processes limited technical signals, including IP address and user agent, which Cloudflare uses transiently to distinguish visits and does not retain in a form that identifies an individual.

Email correspondence. If a visitor contacts AMP through the email address on this site, the resulting correspondence (sender address, content, and any subsequent exchanges) is processed in order to respond to the enquiry. Email is hosted on Microsoft 365.

No other personal data is collected through the website. There are no contact forms, no newsletter sign-up, no account creation, and no commenting functionality.

Legal basis

For server logs handled by Cloudflare, the legal basis is legitimate interest in the security and proper operation of the website (Article 6(1)(f) GDPR).

For website analytics, the legal basis is legitimate interest in understanding, in aggregate, how the website is used and how it performs (Article 6(1)(f) GDPR). Because the analytics is cookieless and does not identify individual visitors, no consent is required and no consent banner is shown.

For email correspondence, the legal basis is the steps taken at the request of the data subject prior to entering into a possible contract (Article 6(1)(b) GDPR), or legitimate interest in responding to professional enquiries (Article 6(1)(f) GDPR), as applicable to the enquiry.

Retention

Email correspondence is retained for as long as it has legitimate business or compliance relevance, and is reviewed periodically. Correspondence that has no continuing relevance is deleted.

Cloudflare retains server log data in accordance with its own retention schedule.

Recipients and processors

Personal data is not sold, rented, or shared with third parties for marketing purposes. The processors with access to data in the course of running the website and the practice mailbox are:

• Cloudflare, Inc. (United States), as hosting, DNS, and analytics provider for ampcompliance.com.
• Microsoft Ireland Operations Limited, as email and productivity provider (Microsoft 365).

Both providers are bound by their own contractual and regulatory obligations under EU data protection law.

International transfers

Cloudflare is established in the United States. Transfers of personal data to Cloudflare rely on the EU-US Data Privacy Framework or, where applicable, the European Commission's standard contractual clauses, as set out in Cloudflare's published terms.

Microsoft Ireland provides email services within the EU, with sub-processing arrangements documented in the Microsoft Online Services Data Protection Addendum.

Rights

Visitors have the following rights under the GDPR in respect of their personal data:

• Right of access to the data held about them.
• Right to rectification of inaccurate data.
• Right to erasure where the data is no longer needed or the legal basis has fallen away.
• Right to restriction of processing in specified circumstances.
• Right to object to processing based on legitimate interest.
• Right to data portability where the processing is automated and based on consent or contract.

To exercise any of these rights, please contact adam.poole@ampcompliance.com. Requests are responded to without undue delay and in any case within one month, as required by the GDPR.

Supervisory authority

The Dutch supervisory authority for data protection is the Autoriteit Persoonsgegevens. Visitors who believe their data has been handled unlawfully have the right to lodge a complaint with the Autoriteit Persoonsgegevens or with the supervisory authority of their habitual residence within the EU.

This website sets no cookies. It uses no advertising tools, no social-media trackers, and no third-party fingerprinting. The website analytics described in section 02 is cookieless by design. No consent banner is shown because none is required.

The hosting provider (Cloudflare) may set strictly necessary security cookies in narrow circumstances, such as bot detection or DDoS mitigation. These are not set by AMP, are not used to identify individual visitors for any commercial purpose, and fall within the strictly-necessary exemption under EU and Dutch implementation of the ePrivacy framework.

If this position changes in future, this section will be updated and, where required, a consent mechanism added.

The content of this website is published for general information about AMP Compliance Solutions and the work the practice does. It is not legal advice, financial advice, regulatory advice, or compliance advice, and should not be relied on as such.

Engagement of AMP Compliance Solutions to provide advisory or delivery work is on the basis of a separately agreed engagement letter, which sets out the scope, deliverables, commercial terms, and governing terms of the work. Nothing on this website constitutes an offer to contract or creates a client relationship.

References on this site to regulatory frameworks, supervisory expectations, or institutional practice describe the practice's experience and approach. They do not represent advice on the application of any framework to any particular institution. Institutions facing specific regulatory or compliance questions should take advice on those questions directly.

This website may link to external websites. AMP Compliance Solutions does not control and is not responsible for the content of those sites.