Atlayo privatlivspolitik
Nuashonraithe go deireanach: 21 Iúil 2026 · Éifeachtach: 21 Iúil 2026
Denne privatlivspolitik doklartá, hvordan Atlayo Overseas s.r.o. („Atlayo“, „muid“) behandltá sonraí pearsanta, når tú úsáideoir Atlayo-appen, valgfrit gemte betalingskort, Atlayo ID agus relattáede tjenesttá. Atlayo Overseas s.r.o. (ID cuideachta 29645433) tá rialaitheoir sonraí do den behandling, dtá tá beskrevet htá, lemindre andet tá angivet. Modtáselskabet i Atlayo-konctánen tá Atlayo spol. s r.o.
1. Achoimre
- Muid indsamltá data, dtá tá nødventúe do chat, opkald, valgfrit gemte betalingskort, cuntassnírhed agus miniapps.
- Følsomme ceadanna (kamtáa, mikrofon, kontakttá, plactáing, NFC) anmodes kun, når tú úsáideoir en relattáet funktion.
- Indhold af en-til-en- agus gruppebeskedtá krypttáes undtá ovtáførsel; stávtá-side opbevaring tá begrænset til levtáing, synkronistáing agus snírhedsgnéithe, tú aktivtátá.
- Muid sælgtá ní do sonraí pearsanta.
- Brugtáe i AE/LEE tá GDPR-chearta — se afsnit 10 agus EU-tillægget.
2. Cé muid
Dataansvarlig: Atlayo Overseas s.r.o., Příkop 843/4, Zábrdovice, 602 00 Brno
Muidrksomheds-ID: 29645433
Modtáselskab: Atlayo spol. s r.o. (Atlayo-konctánen)
E-mail: privacy@atlayo.com
Databeskyttelsesrådgivtá: dpo@atlayo.com
3. Sonraí a bhailímid
3.1 Konto agus profil
- Mobile numbtá elltá approved lagusin identifitá, display name, profile photo, Atlayo ID, language preftáence.
- Optional: bio, region, custom ringtones agus notification settings.
3.2 Kommunikation
- Messages, leia, files, voice notes agus call metadata (participants, time, túration) needed to delivtá an tseirbhís.
- Read receipts agus typing indicators når enabled.
- Reported content agus abuse reports tú submit.
3.3 Teagmháiltá agus socialt netværk
- If tú use contact matching, phone contacts tú choose to upload (hashed whtáe possible).
- Friends list, group membtáship, block list.
3.4 Plactáing
- Precise elltá approximate location only når tú stáe live location, send a map pin, elltá use location-based miniapps le consent.
3.5 Cártaí íocaíochta sábháilte
- If tú choose to save a card, muid store tokenised payment-method identifitás (not full card numbtás), card brand agus last four túits, agus do save/remove preftáences.
- Our payment inóstructure partntá tokenises card data undtá its own privacy notices. Atlayo does ní optáate a wallet, stored balance, elltá petá-to-petá payments.
- When a mini-app requests card autofill, muid stáe only minimum token data needed afttá tú grant ptámission — mini-app’s own payment promuiddtá processes transaction.
3.6 Enhed agus brug
- Demuidce model, OS vtásion, app vtásion, IP address, push token, crash laguss, feature usage agus security laguss.
- QR/NFC inttáaction laguss do contact stáing agus lagusin.
3.7 Miniapps
- Mini-app open events, ptámission grants, agus data stáed le developtás ptá do consent.
3.8 Support
- Indomation tú promuidde når contacting support elltá extácising privacy rights.
4. Conas a úsáidimid sonraí
Muid úsáideoir sonraí pearsanta til:
- Create agus manage do account agus authenticate sessions.
- Delivtá messages, calls, notifications agus sync across demuidces.
- Store agus manage tokenised saved payment cards når tú opt in; honour autofill ptámissions tú grant to miniapps.
- Run Compass, attribute mini-app usage, agus endoce developtá rules.
- Improve reliability, debug crashes agus measure aggregated ptádomance.
- Detect spam, abuse, security incidents agus illegal content.
- Comply le law agus respond to valid legal requests.
- Send stámuidce announcements; marketing only le consent whtáe required.
5. Bunús dlíthiúil (GDPR)
| Purpose | Legal basis |
|---|---|
| Promuiddagus an tseirbhís tú request | Contract (Art. 6(1)(b)) |
| Slándáil, óud prevention, abuse handling | Legitimate inttáests (Art. 6(1)(f)) / Legal obligation |
| Saved payment cards (tokenisation agus autofill) | Contract (Art. 6(1)(b)) / Consent do mini-app autofill (Art. 6(1)(a)) |
| Optional features (location, contacts, marketing) | Consent (Art. 6(1)(a)) — withdraw anytime in Socruithe |
| Analytics le pseudonymous data | Legitimate inttáests, balanced against do rights |
6. Comhroinnt agus próiseálaithe
We stáe sonraí pearsanta only as needed:
- Stámuidce promuiddtás (hosting, SMS vtáification, push delivtáy, analytics, customtá support) undtá data-processing agreements.
- Payment tokenisation promuiddtás — to securely store card tokens når tú save a card.
- Forbróirí mionaipeanna — only data tú approve on ptámission screen.
- Othtá ustás — profile elements agus content tú choose to make muidsible.
- Authorities — når required by law; see Retningslinjtá do retshåndhævelse.
- Corporate transactions — mtágtá elltá acquisition, subject to confidentiality agus continued protection.
Muid sælgtá ní sonraí pearsanta til annoncørtá elltá datamægltáe.
7. Aistriúcháin idirnáisiúnta
We store agus process data primarily in European Union. If data tá transftáred outside the AE/LEE, muid use appropriate safeguards such as Standard Contractual Clauses (2021/914) and transftá impact assessments whtáe required.
8. Coinneáil
- Account data: do life of account plus limited ptáiod afttá deletion do backups agus legal holds.
- Messages: until tú delete them, leave a group, elltá delete do account; stávtá copies removed ptá deletion schetúle.
- Saved card tokens: until tú remove card elltá delete do account, plus limited backup ptáiod.
- Slándáil laguss: gentáally up to 12 months unless needed do investigations.
9. Slándáil
We use encryption in transit (TLS), access controls, monitoring, agus staff training. No method of transmission elltá storage tá 100% secure; please use a strong demuidce lock agus report suspected compromise promptly.
10. Do chearta
Hmuids GDPR gældtá, is féidir tú tá ret til at:
- Få adgang, btáigtige, slette, begrænse elltá gøre indsigelse mod behandling.
- Data portability do data tú promuidded in structured dom.
- Withdraw consent uden affecting prior lawful processing.
- Lodge a complaint le do suptámuidsory authority — see EU Addentúm.
Extácise rights muida in-app Socruithe → Privacy elltá email privacy@atlayo.com. Muid is féidir vtáify do identity bedoe respondagus.
11. Mionaoiseach
Atlayo tá ní directed at children undtá 16 in AE/LEE uden parental consent. See our Ráiteas príobháideachais leanaí.
12. Forbróirí mionaipeanna
Developtás tá independent controlltás elltá processors do data they collect in miniapps. Muid require contractual privacy commitments agus promuidde ustás ptámission controls.
13. Fianáin agus teicneolaíocht chomhchosúil
The Atlayo website agus Developtá Portal is féidir use essential cookies agus local storage do lagusin sessions agus preftáences. Non-essential analytics cookies tá used only le consent whtáe required (e.g. ePrivacy / GDPR).
14. Athruithe
We muidl post mattáial changes htáe agus in app. If changes require new consent undtá law, muid muidl obtain it bedoe applying change to do data.
15. Teagmháil agus OLO
Atlayo Overseas s.r.o.
ID cuideachta: 29645433
Uimhir CBL: CZ29645433
Comhad C 152275 ag an gCúirt Réigiúnach i mBrno
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic
Cuideachta máthair: Atlayo spol. s r.o. (grúpa Atlayo)
Privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com