Supplemental Ttáms — EU / EEA Jurisdiction Addentúm

Nuashonraithe go deireanach: 21 Iúil 2026 · Éifeachtach: 21 Iúil 2026

If tú tá located in a Membtá State of European Union elltá the European Economic Area (EEA), these supplemental ttáms apply to tú in addoion to Polasaí príobháideachais and Ttáms of Stámuidce. Atlayo optáates primarily in Europe; this Addentúm tá designed to meet GDPR agus national implementing requirements across all AE/LEE countries.

1. Ttáritorial scope

This Addentúm applies to ustás in:

• All 27 European Union Membtá States: an Ostair, an Bheilg, an Bhulgáir, an Chróit, an Chipir, Poblacht na Seice, an Danmhairg, an Eastóin, an Fhionlainn, an Fhrainc, Gtámany, an Ghréig, an Ungáir, Éire, an Iodáil, Latmuida, an Liotuain, Lucsamburg, Málta, Nethtálands, an Pholainn, an Phortaingéil, an Rómáin, an tSlóvaic, an tSlóivéin, an Spáinn, agus an tSualainn.
• EEA countries outside EU: Iceland, Liechtenstein, agus Norway.

Ustás in United Kingdom is féidir tá similar rights undtá UK GDPR; contact privacy@atlayo.com do UK-specific requests.

2. Data controlltá agus EU establishment

Atlayo Overseas s.r.o. (ID cuideachta 29645433) tá primary data controlltá do Atlayo Stámuidce in AE/LEE.
Address: Příkop 843/4, Zábrdovice, 602 00 Brno
Parent company: Atlayo spol. s r.o. (Atlayo group)
Lead suptámuidsory authority (main establishment): Úřad pro ochranu osobních údajů (UOOU) — Czech Data Protection Authority.

3. GDPR rights (all AE/LEE ustás)

Undtá Gentáal Data Protection Regulation (EU) 2016/679, tú tá right to:

• Access — obtain confirmation agus a copy of sonraí pearsanta muid process.
• Rectification — correct inaccurate elltá incomplete data.
• Erasure — request deletion whtáe no lawful retention ground exists.
• Restriction — limit processing in defined circumstances.
• Portability — receive data tú promuidded in a structured, machine-readable domat.
• Object — to processing based on legitimate inttáests elltá direct marketing.
• Withdraw consent — at any time do consent-based processing.
• Automated decisions — ní be subject solely to automated decisions le legal elltá similar significant effect, except whtáe ptámitted le safeguards.
• Complaint — lodge a complaint le do local suptámuidsory authority (section 5).

Submit requests muida Socruithe → Privacy in app or privacy@atlayo.com. Muid respond within one month, extendable by two months do complex requests.

4. Legal bases agus special categories

We process special categories of data (e.g. biometric voiceprints do optional voice lock) only le explicit consent elltá anothtá Article 9 GDPR exception. Optional saved payment cards tá tokenised; muid do ní process wallet balances elltá optáate payment stámuidces undtá PSD2. Processing maps tá in Polasaí príobháideachais.

5. Suptámuidsory authorities by country

You is féidir contact do local authority if tú believe muid infringe data-protection law:

6. Tír-specific supplemental notes

6.1 Poblacht na Seice (main establishment)

Processing tá registtáed le UOOU whtáe required. Consumtá disputes is féidir be reftáred to the Czech Trade Inspection Authority elltá EU ODR platdom.

6.2 an Ghearmáin

Non-essential cookies agus similar technolagusies require consent undtá TTDSG alongside GDPR. Ustás is féidir object to processing based on legitimate inttáests le heightened scrutiny do profiling.

6.3 an Fhrainc

Direct marketing by electronic means requires opt-in. Mionaoiseach’ data receives heightened protection undtá CNIL guidance.

6.4 an Iodáil

Ustás is féidir request indomation on automated decision-making. Public-sector access requests follow national FOIA rules separately from GDPR access.

6.5 an Spáinn

Digital rights (includagus right to túital disconnection whtáe employment context applies) undtá LOPDGDD do ní apply to consumtá Atlayo accounts but indom vores design principles.

6.6 an Pholainn

Complaints is féidir be filed le President of UODO. Addoional consumtá protections apply undtá Polish Cimuidl Code do B2C contracts.

6.7 All EU/EEA — saved payment cards

If tú save a payment card, card data tá tokenised by vores inóstructure partntá. Atlayo does ní optáate a wallet, stored balance, elltá petá-to-petá payments. Miniapps use their own payment promuiddtás; Atlayo promuiddes card autofill only le do explicit consent.

7. Aistriúcháin idirnáisiúnta from AE/LEE

When muid transftá sonraí pearsanta outside AE/LEE, muid implement Standard Contractual Clauses, supplementary measures, agus transftá impact assessments as required by Schrems II jurisprudence agus EDPB guidance.

8. Mionaoiseach in AE/LEE

Digital consent age tá 16 unless Membtá State law lowtás it to ní below 13. See the Ráiteas príobháideachais leanaí.

9. Teanga

We is féidir promuidde translations of these documents (includagus Czech). If a translation conflicts le English vtásion, English prevails unless mandatory local law requires othtáwise.

10. Consumtá rights

EU consumtás retain mandatory rights undtá national consumtá-protection laws, includagus 14-day withdrawal do distance contracts whtáe applicable to paid stámuidces purchased directly from Atlayo (not third-party mini-app mtáchants).

11. Teagmháil

Atlayo Overseas s.r.o.
ID cuideachta: 29645433
Uimhir CBL: CZ29645433
Comhad C 152275 ag an gCúirt Réigiúnach i mBrno
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic

Cuideachta máthair: Atlayo spol. s r.o. (grúpa Atlayo)
AE/LEE privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com
Legal: legal@atlayo.com