Nedsom Financial Services B.V. ("Nedsom Bank", "we", "us", "our") is the data controller — a B.V. incorporated under Dutch law and registered with the Chamber of Commerce under number 32088878 at Kamp 71, 3811AP Amersfoort, Netherlands. We are licensed by De Nederlandsche Bank (DNB) as a Payment Institution (Licence F0019, LEI 724500TC6IMCMZAZMO28) and process personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. What we collect
• Identification data: full name, date of birth, nationality, identity documents.
• Contact details: email address, phone number, residential or correspondence address.
• Payment and transaction data: bank-account details, card information, transaction history, recipient details.
• Crypto activity: external deposit addresses linked to your account, on-chain transaction references.
• Fraud-prevention data: device fingerprints, IP address, behavioural signals, information shared by third parties.
• Technical data: computer, operating system and browser information used for service optimisation and internal analytics.
2. How we use your information
• Processing payments, account operations and card transactions.
• Verifying your identity (KYC) and keeping records as required by law.
• Communicating with you about your account, transactions and service updates.
• Preventing fraud, money laundering and terrorist financing.
• Marketing — only where you have given explicit consent.
• Improving our products and your user experience.
• Complying with applicable law, including AMLD5 and PSD2.
3. Legal basis for processing
We process personal data to perform our contract with you, to comply with our legal obligations (including AML/KYC requirements), to pursue our legitimate interests (fraud prevention, service improvement), and — where applicable — on the basis of your explicit consent (e.g. marketing).
4. Sharing your information
We may share your data with external service providers who assist us (identity-verification, cloud hosting, card issuing, blockchain infrastructure), with legal authorities on formal request, and with investment or restructuring partners. We will not share your information for commercial purposes unless you have given explicit permission.
5. How we protect your data
We implement technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. Bank-account details are encrypted in transit and at rest.
6. Transfers outside the EEA
Where recipients are located outside the European Economic Area (EEA), we ensure an adequate level of protection for your personal data — either through an adequacy decision or by using Standard Contractual Clauses.
7. How long we keep your data
We only keep information for as long as necessary for the purposes above, or as required to comply with legal obligations imposed on us. In general, customer records are retained for five (5) years following the most recent transaction, in line with Netherlands and EU AML requirements.
8. Your rights
Under the GDPR you have the right to: receive information on how your personal data is being used; correct inaccurate information; access or receive a transferable copy of your data; object to or restrict the processing of your personal data under certain circumstances; not be subject to fully automated decision-making; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, write to support@ned-som.com. If your issue remains unresolved you may lodge a complaint with Autoriteit Persoonsgegevens (Dutch DPA).
9. Cookies
See our Cookies Policy for details on the cookies and similar technologies we use.
10. Links to other sites
We are not responsible for the privacy practices of websites we link to. Please review their policies before sharing personal information.
Contact
If anything in this document is unclear, write to support@ned-som.com — we will be happy to help.
This document is published in multiple languages. In case of discrepancy, the English version prevails.