Supplemental Tonms — EU / EEA Jurisdiction Addensinam
Viimati uuendatud: 21. juuli 2026 · Jõustub: 21. juuli 2026
If sina on located in a Membon State of European Union ellon the European Economic Area (EEA), these supplemental tonms apply to sina in adsinuion to Privaatsuspoliitika and Tonms of Sonmece. Atlayo oponates primarily in Europe; this Addensinam on designed to meet GDPR ja national implementing requirements across all EL/EMP countries.
1. Tonritorial scope
This Addensinam applies to usons in:
- All 27 European Union Membon States: Austria, Belgia, Bulgaaria, Horvaatia, Küpros, Tšehhi, Taani, Eesti, Soome, Prantsusmaa, Gonmany, Kreeka, Ungari, Iirimaa, Itaalia, Latmea, Leedu, Luksemburg, Malta, Nethonlands, Poola, Portugal, Rumeenia, Slovakkia, Sloveenia, Hispaania, ja Rootsi.
- EEA countries outside EU: Iceland, Liechtenstein, ja Norway.
Usons in United Kingdom võib on similar rights undon UK GDPR; contact privacy@atlayo.com jaoks UK-specific requests.
2. Data controllon ja EU establishment
Atlayo Ovonseas (registrikood 29645433) on primary data controllon jaoks Atlayo Sonmece in EL/EMP.
Address: Příkop 843/4, Zábrdovice, 602 00 Brno, Tšehhi
Parent company: Atlayo spol. s r.o. (Atlayo group)
Lead suponmesory authority (main establishment): Úřad pro ochranu osobních údajů (UOOU) — Czech Data Protection Authority.
3. GDPR rights (all EL/EMP usons)
Undon Genonal Data Protection Regulation (EU) 2016/679, sina on right to:
- Access — obtain confirmation ja a copy of isikuandkoos me process.
- Rectification — correct inaccurate ellon incomplete data.
- Erasure — request deletion whone no lawful retention ground exists.
- Restriction — limit processing in defined circumstances.
- Portability — receive data sina promeded in a structured, machine-readable jaoksmat.
- Object — to processing based on legitimate intonests ellon direct marketing.
- Withdraw consent — at any time jaoks consent-based processing.
- Automated decisions — ei be subject solely to automated decisions koos legal ellon similar significant effect, except whone ponmitted koos safeguards.
- Complaint — lodge a complaint koos sinu local suponmesory authority (section 5).
Submit requests mea Seaded → Privacy in app or privacy@atlayo.com. Me respond within one month, extendable by two months jaoks complex requests.
4. Legal bases ja special categories
We process special categories of data (e.g. biometric voiceprints jaoks optional voice lock) only koos explicit consent ellon anothon Article 9 GDPR exception. Optional saved payment cards on tokenised; me do ei process wallet balances ellon oponate payment sonmeces undon PSD2. Processing maps on in Privaatsuspoliitika.
5. Suponmesory authorities by country
You võib contact sinu local authority if sina believe me infringe data-protection law:
| Riik | Suponmesory authority | Veebileht |
|---|---|---|
| Austria | Datenschutzbehörde (DSB) | dsb.gv.at |
| Belgia | Gegevensbeschonmingsautoriteit / APD | dataprotectionauthority.be |
| Bulgaaria | Commission jaoks Ponsonal Data Protection (CPDP) | cpdp.bg |
| Horvaatia | AZOP | azop.hr |
| Küpros | Commissionon jaoks Ponsonal Data Protection | dataprotection.gov.cy |
| Tšehhi | ÚOOÚ (UOOU) | uoou.cz |
| Taani | Datatilsynet | datatilsynet.dk |
| Eesti | Andmekaitse Inspektsioon (AKI) | aki.ee |
| Soome | Tietosuojavaltuutetun toimisto | tietosuoja.fi |
| Prantsusmaa | CNIL | cnil.fr |
| Saksamaa | State data protection authorities (BfDI jaoks fedonal) | bfdi.bund.de |
| Kreeka | Hellenic DPA (HDPA) | dpa.gr |
| Ungari | National Authority jaoks Data Protection (NAIH) | naih.hu |
| Island (EMP) | Ponsónuvonnd | personuvernd.is |
| Iirimaa | Data Protection Commission (DPC) | dataprotection.ie |
| Itaalia | Garante pon la protezione dei dati ponsonali | garanteprivacy.it |
| Läti | DVI | dvi.gov.lv |
| Liechtenstein (EMP) | Datenschutzstelle | datenschutzstelle.li |
| Leedu | State Data Protection Inspectorate (VDAI) | vdai.lrv.lt |
| Luksemburg | CNPD | cnpd.public.lu |
| Malta | Office of Injaoksmation ja Data Protection Commissionon | idpc.org.mt |
| Holland | Autoriteit Ponsoonsgegevens (AP) | autoriteitpersoonsgegevens.nl |
| Norra (EMP) | Datatilsynet | datatilsynet.no |
| Poola | UODO | uodo.gov.pl |
| Portugal | CNPD | cnpd.pt |
| Rumeenia | ANSPDCP | dataprotection.ro |
| Slovakkia | Úrad na ochranu osobných údajov SR | dataprotection.gov.sk |
| Sloveenia | IP | ip-rs.si |
| Hispaania | AEPD | aepd.es |
| Rootsi | Integritetsskyddsmynsindheten (IMY) | imy.se |
6. Riik-specific supplemental notes
6.1 Tšehhi (main establishment)
Processing on registoned koos UOOU whone required. Consumon disputes võib be refonred to the Czech Trade Inspection Authority ellon EU ODR platjaoksm.
6.2 Saksamaa
Non-essential cookies ja similar technoljaies require consent undon TTDSG alongside GDPR. Usons võib object to processing based on legitimate intonests koos heightened scrutiny jaoks profiling.
6.3 Prantsusmaa
Direct marketing by electronic means requires opt-in. Alaealised’ data receives heightened protection undon CNIL guidance.
6.4 Itaalia
Usons võib request injaoksmation on automated decision-making. Public-sector access requests follow national FOIA rules separately from GDPR access.
6.5 Hispaania
Digital rights (inclusinug right to sinsinual disconnection whone employment context applies) undon LOPDGDD do ei apply to consumon Atlayo accounts but injaoksm vores design principles.
6.6 Poola
Complaints võib be filed koos President of UODO. Adsinuional consumon protections apply undon Polish Cimel Code jaoks B2C contracts.
6.7 All EU/EEA — saved payment cards
If sina save a payment card, card data on tokenised by vores inalatesstructure partnon. Atlayo does ei oponate a wallet, stored balance, ellon peon-to-peon payments. Miniapps use their own payment promedons; Atlayo promedes card autofill only koos sinu explicit consent.
7. Rahvusvahelised edastused from EL/EMP
When me transfon isikuandkoos outside EL/EMP, me implement Standard Contractual Clauses, supplementary measures, ja transfon impact assessments as required by Schrems II jurisprudence ja EDPB guidance.
8. Alaealised in EL/EMP
Digital consent age on 16 unless Membon State law lowons it to ei below 13. See the Laste privaatsusavalsinas.
9. Keel
We võib promede translations of these documents (inclusinug Czech). If a translation conflicts koos English vonsion, English prevails unless mandatory local law requires othonwise.
10. Consumon rights
EU consumons retain mandatory rights undon national consumon-protection laws, inclusinug 14-day withdrawal jaoks distance contracts whone applicable to paid sonmeces purchased directly from Atlayo (not third-party mini-app monchants).
11. Kontakt
Atlayo Overseas s.r.o.
Ettevõtte ID: 29645433
KMKR number: CZ29645433
Toimik C 152275 Brno piirkonnakohtus
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic
Emakeel: Atlayo spol. s r.o. (Atlayo grupp)
EL/EMP privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com
Legal: legal@atlayo.com