Privacy Policy

This Privacy Policy explains how personal data is processed in connection with services provided by Nomadtax. It forms part of the contractual framework between Nomadtax and its clients and supplements Nomadtax’s General Terms and Conditions.
 

1.0 Data Controller

The specific legal entity within Nomadtax engaged for a particular assignment, currently Hefaistos Skatt Ltd, is the data controller in respect of personal data processed within that engagement.
 

Contact: hello@nomadtax.se
 

2.0 Scope of This Policy

This policy applies to personal data relating to:

• Clients who are natural persons

• Representatives, employees, directors and beneficial owners of client entities

• Counterparties and opposing parties

• Witnesses and other individuals connected to a matter

• Contact persons at authorities and institutions

• Other individuals whose personal data is processed as part of our professional services
   

3.0 Categories of Personal Data

Depending on the nature of the assignment, Nomadtax may process the following categories of personal data.

• Identification data such as name, personal identity number, date of birth, passport or ID details and nationality.

• Contact data such as postal address, email address and telephone number.

• Professional and corporate data such as employment, position, ownership structures and company roles.

• Financial and tax data such as income, assets, liabilities, bank information, transaction history, tax identification numbers, tax filings and financial statements.

• Legal data such as contracts, agreements, court or authority documents, legal correspondence and case files.

• Compliance data collected for anti-money laundering, sanctions screening and regulatory compliance.

• Communication data such as emails, letters, call notes and meeting notes.
   

In certain cases, sensitive personal data may be processed where required for the assignment, for example information relevant for tax residency or financial background.
 

4.0 Sources of Personal Data

Personal data may be obtained from:

• You directly

• Your representatives or advisors

• Public authorities and courts

• Public registers

• Banks and financial institutions

• External advisors

• Counterparties

• Publicly available sources
   

5.0 Purposes of Processing

Personal data is processed for the following purposes:

• Provision of legal and tax services, including advice, analysis, drafting, representation before authorities or courts, and preparation of filings and reports.

• Client administration, including onboarding, conflict checks, engagement management and communication.

• Compliance with legal obligations, including anti-money laundering checks, accounting obligations, tax reporting and regulatory duties.

• Invoicing and payment, including billing, bookkeeping and collection of unpaid fees.

• Risk management and quality control.

• Establishment, exercise or defence of legal claims.
   

6.0 Legal Bases for Processing

Processing is based on performance of a contract, compliance with legal obligations, legitimate interests such as providing professional services, risk management and administration, and where necessary the establishment or defence of legal claims.
 

7.0 Mandatory AML and Reporting Requirements

Nomadtax is legally obliged to verify the identity of clients and beneficial owners, retain identification documentation, monitor transactions and client relationships, and report suspicions of money laundering or terrorist financing to competent authorities.
 

Nomadtax is prohibited from informing clients if such a report has been made.
 

8.0 Disclosure of Personal Data

Personal data may be disclosed where necessary to tax authorities and other public authorities, courts and arbitral tribunals, banks and financial institutions, external advisors such as foreign lawyers and accountants, IT and cloud service providers, insurance companies, auditors or regulators, and debt collection authorities.
 

Nomadtax does not sell personal data.
 

9.0 International Transfers

Because Nomadtax operates in cross-border matters, personal data may be transferred outside the EU or EEA. Such transfers occur only where an adequacy decision exists, appropriate safeguards are used, or the transfer is necessary for legal claims or contractual performance.
 

10.0 Data Retention

Personal data is retained for the duration of the engagement, as required by law such as AML and accounting regulations, as long as necessary for legal claims, and as long as justified from a professional responsibility perspective.

Documents may be stored digitally in common systems across Nomadtax divisions.
 

11.0 Your Rights

Subject to legal and professional confidentiality limitations, individuals may have the right to access personal data, request rectification, request erasure where legally possible, request restriction of processing, object to processing based on legitimate interest, request data portability in certain cases, and lodge a complaint with a supervisory authority.
 

12.0 Confidentiality

All personal data processed within our engagements is subject to strict professional secrecy obligations. Please see our Terms & Conditions for more details.

 

13.0 Security Measures

Nomadtax applies appropriate technical and organisational safeguards, including secure IT systems, access restrictions, confidentiality undertakings and secure storage procedures.
 

14.0 Data Concerning Representatives of Clients

If you provide personal data of representatives, you are responsible for informing them of this Privacy Policy.

​

15.0 Updates

This Privacy Policy may be updated from time to time. The latest version is available upon request.