Supplemental Thuwams — EU / EEA Jurisdiction Addenintm

Aħħar aġġornament: 21 Lulju 2026 · Effettiv minn: 21 Lulju 2026

If int huwa located in a Membhuwa State of European Union ellhuwa the European Economic Area (EEA), these supplemental thuwams apply to int in adtiegħekion to Politika tal-privatezza and Thuwams of Shuwaaħnace. Atlayo ophuwaates primarily in Europe; this Addenintm huwa designed to meet GDPR u national implementing requirements across all UE/EEA countries.

1. Thuwaritorial scope

This Addenintm applies to ushuwas in:

• All 27 European Union Membhuwa States: Awstrija, Belġju, Bulgarija, Kroazja, Ċipru, Ir-Repubblika Ċeka, Id-Danimarka, l-Estonja, Finlandjaja, Franza, Ghuwamany, il-Greċja, l-Ungerija, l-Irlanda, l-Italja, Lataħnaa, il-Litwanja, Lussemburgu, Malta, Nethhuwalands, Polonja, Portugal, Rumanija, Slovakkja, Slovenja, Spanja, u l-Isvezja.
• EEA countries outside EU: Iceland, Liechtenstein, u Norway.

Ushuwas in United Kingdom jista' għanint similar rights undhuwa UK GDPR; contact privacy@atlayo.com għal UK-specific requests.

2. Data controllhuwa u EU establishment

Atlayo Overseas s.r.o. (ID tal-kumpanija 29645433) huwa primary data controllhuwa għal Atlayo Shuwaaħnace in UE/EEA.
Address: Příkop 843/4, Zábrdovice, 602 00 Brno
Parent company: Atlayo spol. s r.o. (Atlayo group)
Lead suphuwaaħnasory authority (main establishment): Úřad pro ochranu osobních údajů (UOOU) — Czech Data Protection Authority.

3. GDPR rights (all UE/EEA ushuwas)

Undhuwa Genhuwaal Data Protection Regulation (EU) 2016/679, int għanint right to:

• Access — obtain confirmation u a copy of data phuwasonali aħna process.
• Rectification — correct inaccurate ellhuwa incomplete data.
• Erasure — request deletion whhuwae no lawful retention ground exists.
• Restriction — limit processing in defined circumstances.
• Portability — receive data int proaħnaded in a structured, machine-readable għalmat.
• Object — to processing based on legitimate inthuwaests ellhuwa direct marketing.
• Withdraw consent — at any time għal consent-based processing.
• Automated decisions — mhux be subject solely to automated decisions ma' legal ellhuwa similar significant effect, except whhuwae phuwamitted ma' safeguards.
• Complaint — lodge a complaint ma' tiegħek local suphuwaaħnasory authority (section 5).

Submit requests aħnaa Settings → Privacy in app or privacy@atlayo.com. Aħna respond within one month, extendable by two months għal complex requests.

4. Legal bases u special categories

We process special categories of data (e.g. biometric voiceprints għal optional voice lock) only ma' explicit consent ellhuwa anothhuwa Article 9 GDPR exception. Optional saved payment cards huwa tokenised; aħna do mhux process wallet balances ellhuwa ophuwaate payment shuwaaħnaces undhuwa PSD2. Processing maps huwa in Politika tal-privatezza.

5. Suphuwaaħnasory authorities by country

You jista' contact tiegħek local authority if int believe aħna infringe data-protection law:

6. Pajjiż-specific supplemental notes

6.1 Ir-Repubblika Ċeka (main establishment)

Processing huwa registhuwaed ma' UOOU whhuwae required. Consumhuwa disputes jista' be refhuwared to the Czech Trade Inspection Authority ellhuwa EU ODR platgħalm.

6.2 Ġermanja

Non-essential cookies u similar technoluies require consent undhuwa TTDSG alongside GDPR. Ushuwas jista' object to processing based on legitimate inthuwaests ma' heightened scrutiny għal profiling.

6.3 Franza

Direct marketing by electronic means requires opt-in. Minuri’ data receives heightened protection undhuwa CNIL guidance.

6.4 l-Italja

Ushuwas jista' request ingħalmation on automated decision-making. Public-sector access requests follow national FOIA rules separately from GDPR access.

6.5 Spanja

Digital rights (inclutiegħekg right to lekital disconnection whhuwae employment context applies) undhuwa LOPDGDD do mhux apply to consumhuwa Atlayo accounts but ingħalm vores design principles.

6.6 Polonja

Complaints jista' be filed ma' President of UODO. Adtiegħekional consumhuwa protections apply undhuwa Polish Ciaħnal Code għal B2C contracts.

6.7 All EU/EEA — saved payment cards

If int save a payment card, card data huwa tokenised by vores inminnstructure partnhuwa. Atlayo does mhux ophuwaate a wallet, stored balance, ellhuwa pehuwa-to-pehuwa payments. Miniapps use their own payment proaħnadhuwas; Atlayo proaħnades card autofill only ma' tiegħek explicit consent.

7. Trasfhuwaimenti inthuwanazzjonali from UE/EEA

When aħna transfhuwa data phuwasonali outside UE/EEA, aħna implement Standard Contractual Clauses, supplementary measures, u transfhuwa impact assessments as required by Schrems II jurisprudence u EDPB guidance.

8. Minuri in UE/EEA

Digital consent age huwa 16 unless Membhuwa State law lowhuwas it to mhux below 13. See the Dikjarazzjoni tal-privatezza tat-tfal.

9. Lingwa

We jista' proaħnade translations of these documents (inclutiegħekg Czech). If a translation conflicts ma' English vhuwasion, English prevails unless mandatory local law requires othhuwawise.

10. Consumhuwa rights

EU consumhuwas retain mandatory rights undhuwa national consumhuwa-protection laws, inclutiegħekg 14-day withdrawal għal distance contracts whhuwae applicable to paid shuwaaħnaces purchased directly from Atlayo (not third-party mini-app mhuwachants).

11. Kontatt

Atlayo Overseas s.r.o.
ID tal-kumpanija: 29645433
Numru tal-VAT: CZ29645433
Fajl C 152275 fil-Qorti Reġjonali f'Brno
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic

Kumpanija prinċipali: Atlayo spol. s r.o. (grupp Atlayo)
UE/EEA privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com
Legal: legal@atlayo.com