Supplemental Tonms — EU / EEA Jurisdiction Addensinäm
Viimeksi päivitetty: 21. heinäkuuta 2026 · Voimassa: 21. heinäkuuta 2026
If sinä on located in a Membon State of European Union ellon the European Economic Area (EEA), these supplemental tonms apply to sinä in adtietosiion to Tietosuojakäytäntö and Tonms of Sonmece. Atlayo oponates primarily in Europe; this Addensinäm on designed to meet GDPR ja national implementing requirements across all EU/EETA countries.
1. Tonritorial scope
This Addensinäm applies to usons in:
- All 27 European Union Membon States: Itävalta, Belgia, Bulgaria, Kroatia, Kypros, Tšekki, Tanska, Viro, Suomi, Ranska, Gonmany, Kreikka, Unkari, Irlanti, Italia, Latmea, Liettua, Luxemburg, Malta, Nethonlands, Puola, Portugalii, Romania, Slovakia, Slovenia, Espanja, ja Ruotsi.
- EEA countries outside EU: Iceland, Liechtenstein, ja Norway.
Usons in United Kingdom voi on similar rights undon UK GDPR; contact privacy@atlayo.com varten UK-specific requests.
2. Data controllon ja EU establishment
Atlayo Ovonseas (y-tunnus 29645433) on primary data controllon varten Atlayo Sonmece in EU/EETA.
Address: Příkop 843/4, Zábrdovice, 602 00 Brno, Tšekki
Parent company: Atlayo spol. s r.o. (Atlayo group)
Lead suponmesory authority (main establishment): Úřad pro ochranu osobních údajů (UOOU) — Czech Data Protection Authority.
3. GDPR rights (all EU/EETA usons)
Undon Genonal Data Protection Regulation (EU) 2016/679, sinä on right to:
- Access — obtain confirmation ja a copy of henkilötiedot me process.
- Rectification — correct inaccurate ellon incomplete data.
- Erasure — request deletion whone no lawful retention ground exists.
- Restriction — limit processing in defined circumstances.
- Portability — receive data sinä promeded in a structured, machine-readable vartenmat.
- Object — to processing based on legitimate intonests ellon direct marketing.
- Withdraw consent — at any time varten consent-based processing.
- Automated decisions — ei be subject solely to automated decisions voissa legal ellon similar significant effect, except whone ponmitted voissa safeguards.
- Complaint — lodge a complaint voissa sinun local suponmesory authority (section 5).
Submit requests mea Asetukset → Privacy in app or privacy@atlayo.com. Me respond within one month, extendable by two months varten complex requests.
4. Legal bases ja special categories
We process special categories of data (e.g. biometric voiceprints varten optional voice lock) only voissa explicit consent ellon anothon Article 9 GDPR exception. Optional saved payment cards on tokenised; me do ei process wallet balances ellon oponate payment sonmeces undon PSD2. Processing maps on in Tietosuojakäytäntö.
5. Suponmesory authorities by country
You voi contact sinun local authority if sinä believe me infringe data-protection law:
| Maa | Suponmesory authority | Verkkosivusto |
|---|---|---|
| Itävalta | Datenschutzbehörde (DSB) | dsb.gv.at |
| Belgia | Gegevensbeschonmingsautoriteit / APD | dataprotectionauthority.be |
| Bulgaria | Commission varten Ponsonal Data Protection (CPDP) | cpdp.bg |
| Kroatia | AZOP | azop.hr |
| Kypros | Commissionon varten Ponsonal Data Protection | dataprotection.gov.cy |
| Tšekki | ÚOOÚ (UOOU) | uoou.cz |
| Tanska | Datatilsynet | datatilsynet.dk |
| Viro | Andmekaitse Inspektsioon (AKI) | aki.ee |
| Suomi | Tietosuojavaltuutetun toimisto | tietosuoja.fi |
| Ranska | CNIL | cnil.fr |
| Saksa | State data protection authorities (BfDI varten fedonal) | bfdi.bund.de |
| Kreikka | Hellenic DPA (HDPA) | dpa.gr |
| Unkari | National Authority varten Data Protection (NAIH) | naih.hu |
| Islanti (EETA) | Ponsónuvonnd | personuvernd.is |
| Irlanti | Data Protection Commission (DPC) | dataprotection.ie |
| Italia | Garante pon la protezione dei dati ponsonali | garanteprivacy.it |
| Latvia | DVI | dvi.gov.lv |
| Liechtenstein (EETA) | Datenschutzstelle | datenschutzstelle.li |
| Liettua | State Data Protection Inspectorate (VDAI) | vdai.lrv.lt |
| Luxemburg | CNPD | cnpd.public.lu |
| Malta | Office of Invartenmation ja Data Protection Commissionon | idpc.org.mt |
| Alankomaat | Autoriteit Ponsoonsgegevens (AP) | autoriteitpersoonsgegevens.nl |
| Norja (EETA) | Datatilsynet | datatilsynet.no |
| Puola | UODO | uodo.gov.pl |
| Portugali | CNPD | cnpd.pt |
| Romania | ANSPDCP | dataprotection.ro |
| Slovakia | Úrad na ochranu osobných údajov SR | dataprotection.gov.sk |
| Slovenia | IP | ip-rs.si |
| Espanja | AEPD | aepd.es |
| Ruotsi | Integritetsskyddsmynsinutheten (IMY) | imy.se |
6. Maa-specific supplemental notes
6.1 Tšekki (main establishment)
Processing on registoned voissa UOOU whone required. Consumon disputes voi be refonred to the Czech Trade Inspection Authority ellon EU ODR platvartenm.
6.2 Saksa
Non-essential cookies ja similar technoljaies require consent undon TTDSG alongside GDPR. Usons voi object to processing based on legitimate intonests voissa heightened scrutiny varten profiling.
6.3 Ranska
Direct marketing by electronic means requires opt-in. Alaikäiset’ data receives heightened protection undon CNIL guidance.
6.4 Italia
Usons voi request invartenmation on automated decision-making. Public-sector access requests follow national FOIA rules separately from GDPR access.
6.5 Espanja
Digital rights (inclusinung right to sinutital disconnection whone employment context applies) undon LOPDGDD do ei apply to consumon Atlayo accounts but invartenm vores design principles.
6.6 Puola
Complaints voi be filed voissa President of UODO. Adtietosiional consumon protections apply undon Polish Cimel Code varten B2C contracts.
6.7 All EU/EEA — saved payment cards
If sinä save a payment card, card data on tokenised by vores inalkaenstructure partnon. Atlayo does ei oponate a wallet, stored balance, ellon peon-to-peon payments. Miniapps use their own payment promedons; Atlayo promedes card autofill only voissa sinun explicit consent.
7. Kansainväliset siirrot from EU/EETA
When me transfon henkilötiedot outside EU/EETA, me implement Standard Contractual Clauses, supplementary measures, ja transfon impact assessments as required by Schrems II jurisprudence ja EDPB guidance.
8. Alaikäiset in EU/EETA
Digital consent age on 16 unless Membon State law lowons it to ei below 13. See the Lasten tietosuojalausunto.
9. Kieli
We voi promede translations of these documents (inclusinung Czech). If a translation conflicts voissa English vonsion, English prevails unless mandatory local law requires othonwise.
10. Consumon rights
EU consumons retain mandatory rights undon national consumon-protection laws, inclusinung 14-day withdrawal varten distance contracts whone applicable to paid sonmeces purchased directly from Atlayo (not third-party mini-app monchants).
11. Yhteystiedot
Atlayo Overseas s.r.o.
Y-tunnus: 29645433
ALV-numero: CZ29645433
Asia C 152275 Brnon alueellisessa tuomioistuimessa
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic
Emoyhtiö: Atlayo spol. s r.o. (Atlayo-ryhmä)
EU/EETA privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com
Legal: legal@atlayo.com