Home

Website, cookies and privacy

Loan Privacy Policy

  1. Introduction

    This document explains how Aymz processes personal data that is collected, used, shared or otherwise handled in relation to (private) loans obtained and managed through the www.aymz.com platform (the “Platform”).

    This loan privacy policy does not apply to the use of the website. Please see our Website Privacy and Cookie Policy for information about how your personal data is used when you visit the website.

    Aymz is committed to processing personal data in accordance with the European General Data Protection Regulation (EU) 2016/679 (“GDPR”), including the principles of lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation and confidentiality, among others.

  2. The Parties involved

    There are multiple parties involved in the processing of personal data in relation to loans. The parties and their respective roles are described as follows:

    1. Aymz B.V. is the sole operator of the Platform. Aymz is the servicer of every Loan that is provided through the Platform. This means that Aymz acts as an intermediary between the users of the Platform for administration and communication purposes. Aymz is a joint venture of ABN AMRO Bank N.V. and Bishopsfield Capital Partners Limited. Aymz is considered a controller in relation to the processing of personal data for the purposes described in this Loan Privacy Policy.

    2. Aymz Stichting Payments acts as the receiver, administrator and manager of third party funds for loans that are negotiated via the Platform. Funds that are paid under the loans will be collected and disbursed by Aymz Stichting Payments. Aymz Stichting Payments is considered a controller in relation to the processing of personal data for the payments purposes described in this Loan Privacy Policy.

    3. Aymz Stichting Security acts as the 'Security Agent' for the Lenders and may process personal data on their behalf. This means it will hold certain assets or security rights as collateral for the loans for the benefit of and as instructed by the Lenders.

    4. Lender(s) are institutional investors and ABN AMRO Bank N.V. that are admitted to the Platform by Aymz B.V. to enable access to direct lending opportunities, negotiate (private) loans via the Platform and make payments via the Platform. The Lender will vary per loan. The identity of the Lender is described in the relevant loan agreement. When processing personal data obtained from Aymz of shared by Aymz via the Platform, the Lender will act as a controller in relation to the GDPR.

    5. Borrower(s) are medium sized corporates that are admitted to the Platform by Aymz B.V. to search for new debt funding sources and negotiate (private) loans via the Platform and receive payments via the Platform. The Borrower will vary per loan. The identity of the Borrower is described in the relevant loan agreement. When processing personal data obtained from Aymz of shared by Aymz via the Platform, the Borrower will act as a controller in relation to the GDPR.

    6. Third Parties are parties providing security for the benefit of the Borrower, such as a tenant from the Borrower.

  3. How Aymz processes personal data

    Aymz collects and processes personal data of (i) directors, (ii) shareholders, (iii) representatives, and (iv) employees of Lenders and Borrowers (and Third Parties, if applicable) as relevant to offer its services as follows.

    Processing purpose

    Personal data processed

    Legal basis under GDPR

    Aymz entity involved

    KYC compliance

    Prevention of money laundering and financing of terrorism

    Contact Information

    Copy of ID

    Proof of address

    Tax returns

    Compliance with a legal obligation

    Aymz B.V. as controller

    Administrating loans

    Financial returns

    Legitimate interest

    Aymz B.V. as controller

    Making and collecting payments

    Bank account information

    Performance of contract

    Legitimate interest

    Aymz B.V. as controller

    Aymz Stichting Payments as controller

    Communicating with individuals, which may include marketing communications

    Contact information

    Contents of request, complaint or remark

    Performance of contract

    Legitimate interest (for marketing communications)

    Aymz B.V. as controller

    Pledging of third claims for security of Borrower

    Information about claims on individuals

    Information about tenants and rental contracts

    Legitimate interest

    Aymz B.V. as controller


    Aymz may share the abovementioned personal data with the parties 1-5 listed under 2. above as needed for the purposes identified above, including with (potential) Lenders and Borrowers.

    In addition, where lawful, Aymz may share the abovementioned personal data with:

    • Law enforcement agencies, government agencies, other competent bodies and courts, to comply with legally binding orders;

    • Service providers, amongst others for fraud prevention and investigation, to help manage or administer loans, to provide IT services, to provide marketing communications and payment processors (e.g. Mount Street Hibernia Servicing Limited);

    • External advisors, amongst others for obtaining legal and accountancy advice;

    • Prospective assignees or transferees of loans or related security (or any rights and/or obligations in respect thereof), or prospective purchasers of the Aymz business, if personal data is transferred as part of an assignment of a loan or the sale of the Aymz business the individual whose personal data is involved, will be informed in advance.

  4. Data retention

    Aymz only retains personal data in an identifiable form as long as necessary to comply for the purposes for which they were collected. Generally, this means that personal data is retained until the loan agreement is terminated and Aymz no longer needs the personal data to comply with legal obligations, to comply with its legitimate business interests (e.g. to prevent and investigate fraud) or to establish, exercise and defend our legal rights and claims or for other legitimate business reasons.

  5. International data transfers

    If personal data is transferred to a recipient outside of the European Economic Area, this will be done in accordance with the rules laid down in the GDPR. If needed, Aymz will enter into safeguards ensuring that the level of protection provided is essentially equivalent to the level of protection provided under the GDPR.

  6. Individual rights

    Individuals are asked to help Aymz ensuring that all personal data that is processed by Aymz under this Loan Privacy Policy is relevant, accurate and correct.

    Individuals whose personal data is processed by Aymz under this Loan Privacy Policy may contact Aymz to enforce all rights granted to them under the GDPR, including the right to access, amend or erase their personal data, object to the processing of their personal data on the basis of the legitimate interest (including for marketing purposes) or withdraw consent if consent is used as the legal basis for processing personal data. Individuals also have the right to submit a complaint with local supervisory authorities.

  7. Contact details

    If you have any questions regarding your personal data, or if you would like to exercise your rights, please feel free to contact us at privacyoffice@aymz.com.


Last updated: June 2021