Supplemental Terms — EU / EEA Jurisdiction Addendum

Sidst opdateret: 21. juli 2026 · Ikrafttrædelse: 21. juli 2026

If du er located in a Member State of European Union eller the European Economic Area (EEA), these supplemental terms apply to du in addition to Privatlivspolitik and Terms of Service. Atlayo operates primarily in Europe; this Addendum er designed to meet GDPR og national implementing requirements across all EU/EØS countries.

1. Territorial scope

This Addendum applies to users in:

• All 27 European Union Member States: Østrig, Belgien, Bulgarien, Kroatien, Cypern, Tjekkiet, Danmark, Estland, Finland, Frankrig, Tyskland, Grækenland, Ungarn, Irland, Italien, Letland, Litauen, Luxembourg, Malta, Nederlandene, Polen, Portugal, Rumænien, Slovakiet, Slovenien, Spanien, og Sverige.
• EEA countries outside EU: Iceland, Liechtenstein, og Norway.

Users in United Kingdom kan har similar rights under UK GDPR; contact privacy@atlayo.com for UK-specific requests.

2. Data controller og EU establishment

Atlayo Overseas s.r.o. (virksomheds-ID 29645433) er primary data controller for Atlayo Service in EU/EØS.
Address: Příkop 843/4, Zábrdovice, 602 00 Brno
Parent company: Atlayo spol. s r.o. (Atlayo group)
Lead supervisory authority (main establishment): Úřad pro ochranu osobních údajů (UOOU) — Czech Data Protection Authority.

3. GDPR rights (all EU/EØS users)

Under General Data Protection Regulation (EU) 2016/679, du har right to:

• Access — obtain confirmation og a copy of personoplysninger vi process.
• Rectification — correct inaccurate eller incomplete data.
• Erasure — request deletion where no lawful retention ground exists.
• Restriction — limit processing in defined circumstances.
• Portability — receive data du provided in a structured, machine-readable format.
• Object — to processing based on legitimate interests eller direct marketing.
• Withdraw consent — at any time for consent-based processing.
• Automated decisions — ikke be subject solely to automated decisions med legal eller similar significant effect, except where permitted med safeguards.
• Complaint — lodge a complaint med din local supervisory authority (section 5).

Submit requests via Indstillinger → Privacy in app or privacy@atlayo.com. Vi respond within one month, extendable by two months for complex requests.

4. Legal bases og special categories

We process special categories of data (e.g. biometric voiceprints for optional voice lock) only med explicit consent eller another Article 9 GDPR exception. Optional saved payment cards er tokenised; vi do ikke process wallet balances eller operate payment services under PSD2. Processing maps er in Privatlivspolitik.

5. Supervisory authorities by country

You kan contact din local authority if du believe vi infringe data-protection law:

6. Land-specific supplemental notes

6.1 Tjekkiet (main establishment)

Processing er registered med UOOU where required. Consumer disputes kan be referred to the Czech Trade Inspection Authority eller EU ODR platform.

6.2 Tyskland

Non-essential cookies og similar technologies require consent under TTDSG alongside GDPR. Users kan object to processing based on legitimate interests med heightened scrutiny for profiling.

6.3 Frankrig

Direct marketing by electronic means requires opt-in. Mindreårige’ data receives heightened protection under CNIL guidance.

6.4 Italien

Users kan request information on automated decision-making. Public-sector access requests follow national FOIA rules separately from GDPR access.

6.5 Spanien

Digital rights (including right to digital disconnection where employment context applies) under LOPDGDD do ikke apply to consumer Atlayo accounts but inform vores design principles.

6.6 Polen

Complaints kan be filed med President of UODO. Additional consumer protections apply under Polish Civil Code for B2C contracts.

6.7 All EU/EEA — saved payment cards

If du save a payment card, card data er tokenised by vores infrastructure partner. Atlayo does ikke operate a wallet, stored balance, eller peer-to-peer payments. Miniapps use their own payment providers; Atlayo provides card autofill only med din explicit consent.

7. Internationale overførsler from EU/EØS

When vi transfer personoplysninger outside EU/EØS, vi implement Standard Contractual Clauses, supplementary measures, og transfer impact assessments as required by Schrems II jurisprudence og EDPB guidance.

8. Mindreårige in EU/EØS

Digital consent age er 16 unless Member State law lowers it to ikke below 13. See the Erklæring om børns privatliv.

9. Sprog

We kan provide translations of these documents (including Czech). If a translation conflicts med English version, English prevails unless mandatory local law requires otherwise.

10. Consumer rights

EU consumers retain mandatory rights under national consumer-protection laws, including 14-day withdrawal for distance contracts where applicable to paid services purchased directly from Atlayo (not third-party mini-app merchants).

11. Kontakt

Atlayo Overseas s.r.o.
Virksomheds-ID: 29645433
Momsnummer: CZ29645433
Sag C 152275 ved Regional Court in Brno
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic

Moderselskab: Atlayo spol. s r.o. (Atlayo-koncernen)
EU/EØS privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com
Legal: legal@atlayo.com