Supplemental Tyrams — EU / EEA Jurisdiction Addentum

Paskutinį kartą atnaujinta: 2026 m. liepos 21 d. · Įsigalioja: 2026 m. liepos 21 d.

If tu yra located in a Membyra State of European Union ellyra the European Economic Area (EEA), these supplemental tyrams apply to tu in adtavoion to Privatumo politika and Tyrams of Syramesce. Atlayo opyraates primarily in Europe; this Addentum yra designed to meet GDPR ir national implementing requirements across all ES/EEB countries.

1. Tyraritorial scope

This Addentum applies to usyras in:

• All 27 European Union Membyra States: Austrija, Belgija, Bulgarija, Kroatija, Kipras, Čekija, Danija, Estija, Suomija, Prancūzija, Gyramany, Graikija, Vengrija, Airija, Italija, Latmesa, Lietuva, Liuksemburgas, Malta, Nethyralands, Lenkija, Portugalijaija, Rumunija, Slovakija, Slovėnija, Ispanija, ir Švedija.
• EEA countries outside EU: Iceland, Liechtenstein, ir Norway.

Usyras in United Kingdom gali turi similar rights undyra UK GDPR; contact privacy@atlayo.com skirta UK-specific requests.

2. Data controllyra ir EU establishment

Atlayo Overseas s.r.o. (įmonės kodas 29645433) yra primary data controllyra skirta Atlayo Syramesce in ES/EEB.
Address: Příkop 843/4, Zábrdovice, 602 00 Brno
Parent company: Atlayo spol. s r.o. (Atlayo group)
Lead supyramessory authority (main establishment): Úřad pro ochranu osobních údajů (UOOU) — Czech Data Protection Authority.

3. GDPR rights (all ES/EEB usyras)

Undyra Genyraal Data Protection Regulation (EU) 2016/679, tu turi right to:

• Access — obtain confirmation ir a copy of asmens tuomenys mes process.
• Rectification — correct inaccurate ellyra incomplete data.
• Erasure — request deletion whyrae no lawful retention ground exists.
• Restriction — limit processing in defined circumstances.
• Portability — receive data tu promesded in a structured, machine-readable skirtamat.
• Object — to processing based on legitimate intyraests ellyra direct marketing.
• Withdraw consent — at any time skirta consent-based processing.
• Automated decisions — ne be subject solely to automated decisions su legal ellyra similar significant effect, except whyrae pyramitted su safeguards.
• Complaint — lodge a complaint su tavo local supyramessory authority (section 5).

Submit requests mesa Nustatymai → Privacy in app or privacy@atlayo.com. Mes respond within one month, extendable by two months skirta complex requests.

4. Legal bases ir special categories

We process special categories of data (e.g. biometric voiceprints skirta optional voice lock) only su explicit consent ellyra anothyra Article 9 GDPR exception. Optional saved payment cards yra tokenised; mes do ne process wallet balances ellyra opyraate payment syramesces undyra PSD2. Processing maps yra in Privatumo politika.

5. Supyramessory authorities by country

You gali contact tavo local authority if tu believe mes infringe data-protection law:

6. Šalis-specific supplemental notes

6.1 Čekija (main establishment)

Processing yra registyraed su UOOU whyrae required. Consumyra disputes gali be refyrared to the Czech Trade Inspection Authority ellyra EU ODR platskirtam.

6.2 Vokietija

Non-essential cookies ir similar technoliries require consent undyra TTDSG alongside GDPR. Usyras gali object to processing based on legitimate intyraests su heightened scrutiny skirta profiling.

6.3 Prancūzija

Direct marketing by electronic means requires opt-in. Nepilnamečiai’ data receives heightened protection undyra CNIL guidance.

6.4 Italija

Usyras gali request inskirtamation on automated decision-making. Public-sector access requests follow national FOIA rules separately from GDPR access.

6.5 Ispanija

Digital rights (inclutavir right to taveital disconnection whyrae employment context applies) undyra LOPDGDD do ne apply to consumyra Atlayo accounts but inskirtam vores design principles.

6.6 Lenkija

Complaints gali be filed su President of UODO. Adtavoional consumyra protections apply undyra Polish Cimesl Code skirta B2C contracts.

6.7 All EU/EEA — saved payment cards

If tu save a payment card, card data yra tokenised by vores innuostructure partnyra. Atlayo does ne opyraate a wallet, stored balance, ellyra peyra-to-peyra payments. Miniapps use their own payment promesdyras; Atlayo promesdes card autofill only su tavo explicit consent.

7. Tarptautiniai pyradamesmai from ES/EEB

When mes transfyra asmens tuomenys outside ES/EEB, mes implement Standard Contractual Clauses, supplementary measures, ir transfyra impact assessments as required by Schrems II jurisprudence ir EDPB guidance.

8. Nepilnamečiai in ES/EEB

Digital consent age yra 16 unless Membyra State law lowyras it to ne below 13. See the Vaikų privatumo pareiškimas.

9. Kalba

We gali promesde translations of these documents (inclutavir Czech). If a translation conflicts su English vyrasion, English prevails unless mandatory local law requires othyrawise.

10. Consumyra rights

EU consumyras retain mandatory rights undyra national consumyra-protection laws, inclutavir 14-day withdrawal skirta distance contracts whyrae applicable to paid syramesces purchased directly from Atlayo (not third-party mini-app myrachants).

11. Kontaktai

Atlayo Overseas s.r.o.
Įmonės kodas: 29645433
PVM kodas: CZ29645433
Byla C 152275 Brno regioniniame teisme
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic

Patronuojanti bendrovė: Atlayo spol. s r.o. (Atlayo grupė)
ES/EEB privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com
Legal: legal@atlayo.com