Version: 2026-08-30 (WebLegal, 30 August 2026).
Provider: AtlyTech s.r.o., IČO 29944627, DIČ CZ29944627, registered office Dandova 2619/13, Horní Počernice, 193 00 Praha 9, registered at Městský soud v Praze, oddíl C, vložka 454920.
Last updated: 30 August 2026
1. INTRODUCTION AND PERSONAL DATA CONTROLLER
Welcome to the AtlyTech website, accessible at https://atly.work. This privacy policy is intended to inform you of how we collect, use, and protect your personal data when you use our SaaS service. By using our site, you accept the practices described in this policy.
Personal data controller: AtlyTech s.r.o., a company registered under number 29944627, whose registered office is located at Dandova 2619/13, Horní Počernice, 193 00 Praha 9. For any question relating to the protection of your data, you may contact us by email at the following address: admin@atly.work or by telephone at +420 736 354 123.
We undertake to comply with applicable data-protection legislation, including the General Data Protection Regulation (GDPR) of the European Union. This privacy policy has been drafted to ensure the transparency and security of your personal information.
In the course of our activity, we collect different types of personal data, including personal identifiers, contact information, payment data, and connection information. These data are essential in order to provide you with our services and to improve your user experience.
We invite you to read this privacy policy carefully so as to understand our data-protection practices and your rights as a user. If you have any concerns or complaints regarding our handling of your personal data, please do not hesitate to contact us at info@atly.work.
This privacy policy is subject to regular updates to reflect changes in our practices or legal requirements. We encourage you to consult this page regularly to stay informed of any modifications.
2. DEFINITIONS
For the purposes of this Privacy Policy, the following terms shall have the meanings defined below:
2.1 Personal Data
Personal Data means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2.2 Personal Data Controller
Personal Data Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this policy, AtlyTech is the personal data controller.
2.3 Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
2.4 User
User means any natural person who accesses and uses the website atly.work.
2.5 Services
Services means the services provided by AtlyTech via the website atly.work, including, but not limited to, the SaaS services offered to users.
2.6 Cookies
Cookies means small text files that are placed on your device to help the website provide a better user experience. Cookies are used to retain user preferences, store information for items such as shopping carts, and provide anonymised tracking data to third-party applications such as Google Analytics.
2.7 Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.8 Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
These definitions are essential to understanding the rights and obligations of each party involved in the processing of personal data in the context of the services provided by AtlyTech.
3. DATA COLLECTED
In the course of using our website https://atly.work, we collect and process certain personal data. These data are collected in accordance with applicable regulations, in particular the General Data Protection Regulation (GDPR).
3.1 Types of data collected
We collect the following types of data:
- Personal identifiers: This includes information such as your last name, first name, and any other data enabling you to be identified directly.
- Contact details: We collect your email address, telephone number, and postal address in order to be able to contact you.
- Payment data: For transactions carried out on our platform, we collect payment information necessary to process your payments.
- Connection data: This includes information about your use of our site, such as your IP address, browser type, and pages visited.
3.2 Methods of collection
Data are collected directly from you when you:
- Create an account on our site.
- Make a purchase or a transaction.
- Complete online forms.
- Interact with our customer service.
3.3 Purpose of collection
The data collected are used to:
- Provide and manage our SaaS services.
- Process your orders and payments.
- Improve our website and our services.
- Communicate with you regarding your requests or our service offering.
3.4 Consent and automatic collection
Certain data, such as cookies, are collected automatically when you visit our site. You may manage your cookie preferences via your browser settings.
3.5 Sensitive data
We do not collect sensitive data as defined by the GDPR, unless this is explicitly required and with your prior consent.
By using our site, you accept the collection and use of your personal data as described in this privacy policy. For any question or request concerning your data, please contact us at the following address: info@atly.work.
4. PURPOSES OF COLLECTION
At AtlyTech, we collect and process your personal data for various legitimate and specific purposes, in accordance with applicable legal requirements, in particular the General Data Protection Regulation (GDPR). The main purposes of the collection of your data are the following:
4.1 Provision of Services
We use your personal data to provide you with our SaaS services, ensure the proper functioning of our platform, and offer you an optimal user experience. This includes management of your user account, provision of technical support, and customisation of our services according to your preferences.
4.2 Payment Management
Your payment information is collected and processed to manage financial transactions linked to the use of our services. This includes invoicing, payment processing, and fraud prevention.
4.3 Communication and Support
We use your contact details to communicate with you regarding your use of our services, respond to your support requests, and provide you with important information about updates or changes to our services.
4.4 Improvement of our Services
The data collected help us analyse and improve our services, develop new features, and understand the needs and preferences of our users. This enables us to optimise our offering and ensure a high level of customer satisfaction.
4.5 Legal Compliance
We may be required to process your data in order to comply with our legal, regulatory, or administrative obligations. This includes cooperation with the competent authorities in the event of a legal request or judicial proceedings.
4.6 Security and Fraud Prevention
The security of your data is a priority for us. We process your information to detect, prevent, and respond to security incidents, as well as to fraudulent or illegal activities.
4.7 Marketing and Promotions
Subject to your explicit consent, we may use your data to send you marketing communications, promotional offers, and information about our products and services that may be of interest to you.
Each processing of data is carried out on the basis of an appropriate legal basis, such as consent, performance of a contract, compliance with a legal obligation, or the legitimate interest of our company. We undertake to respect your rights and to ensure the transparency of our data-processing practices.
5. LEGAL BASIS FOR PROCESSING
The processing of personal data by AtlyTech is based on several legal bases, in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation. The main legal bases on which we rely are as follows:
5.1 Consent
In certain cases, we process your personal data on the basis of your explicit consent. This includes, for example, the use of non-essential cookies or the sending of marketing communications. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.
5.2 Performance of a contract
The processing of your data may be necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. This includes, for example, management of your user account and the provision of the SaaS services to which you have subscribed.
5.3 Legal obligation
We may be required to process your personal data in order to comply with legal obligations to which we are subject. This may include the retention of certain information for tax reasons or the disclosure of data to the competent authorities.
5.4 Legitimate interests
The processing of your data may also be based on our legitimate interests, provided that these interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include, for example, the improvement of our services, fraud prevention, and the security of our platform.
Each processing of data is carefully assessed to ensure that it is justified by an appropriate legal basis and that your rights are respected. For any question concerning the legal basis of our processing, you may contact us at the following address: info@atly.work.
6. RECIPIENTS OF THE DATA
In the course of its activities, AtlyTech may share certain personal data collected with third parties. These recipients are carefully selected to ensure the protection of personal data and compliance with applicable regulations, in particular the GDPR.
6.1 Service providers
Personal data may be shared with third-party service providers who act as processors on behalf of AtlyTech. These providers supply essential services such as hosting, technical maintenance, payment processing, and other services necessary for the operation of our SaaS platform. Each provider is bound by a contract guaranteeing the security and confidentiality of the data.
6.2 Legal authorities
AtlyTech may be required to disclose personal data to the competent authorities where this is required by law, in particular in the context of judicial investigations, legal requests, or to protect the rights, property or safety of AtlyTech, its users or the public.
6.3 In the event of an acquisition
In the event of a merger, acquisition or sale of all or part of the company, personal data may be transferred to the acquiring entity. In that case, AtlyTech undertakes to inform users before the personal data are transferred and become subject to a different privacy policy.
AtlyTech ensures that all recipients comply with personal-data protection standards and process the data only for the purposes specified in this privacy policy.
7. DATA RETENTION PERIOD
At AtlyTech, we undertake to respect the principles of minimisation and limitation of the retention of personal data. In accordance with these principles, we retain your personal data only for the period necessary for the purposes for which they were collected, as stipulated in our privacy policy, or to satisfy applicable legal requirements.
7.1 General retention period
The personal data that we collect, in particular personal identifiers, contact information, payment data and connection information, are retained for a maximum period of three years after the end of your contractual relationship with us, unless a longer retention period is required or permitted by law.
7.2 Criteria for determining the retention period
The data retention period is determined according to the following criteria:
- Nature of the data: Certain data may require a longer retention period because of their sensitive nature or their importance for security.
- Legal obligations: We may be required to retain certain data in order to comply with legal or regulatory obligations, such as tax laws or consumer-protection regulations.
- Purposes of processing: Data are retained for as long as necessary to achieve the purposes for which they were collected, such as the provision of services, customer-relationship management, or compliance with our contractual obligations.
7.3 Erasure and anonymisation
Upon expiry of the applicable retention period, we proceed to the erasure or anonymisation of personal data, unless their retention is necessary in order to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
7.4 Users' rights
In accordance with applicable regulation, you have the right to request the erasure of your personal data where they are no longer necessary for the purposes for which they were collected. To exercise this right, please contact us at the following address: info@atly.work.
We undertake to process your request as soon as possible and to inform you of the measures taken as a result.
8. RIGHTS OF DATA SUBJECTS
In accordance with the General Data Protection Regulation (GDPR), data subjects have several rights relating to their personal data. AtlyTech undertakes to respect these rights and to facilitate their exercise.
8.1 Right of access
Data subjects have the right to obtain confirmation that their personal data are being processed and, where that is the case, to access those data as well as certain additional information, such as the purposes of the processing, the categories of data concerned, and the recipients or categories of recipients to whom the data have been or will be disclosed.
8.2 Right to rectification
Data subjects have the right to request the rectification of inaccurate personal data concerning them. They also have the right to request that incomplete data be completed, including by providing a supplementary statement.
8.3 Right to erasure
Data subjects may request the erasure of their personal data in certain circumstances, in particular if the data are no longer necessary in relation to the purposes for which they were collected, if the consent on which the processing is based is withdrawn, or if the data have been unlawfully processed.
8.4 Right to restriction of processing
Data subjects have the right to request restriction of the processing of their personal data in certain situations, for example where the accuracy of the data is contested, for a period enabling the controller to verify the accuracy of the data.
8.5 Right to data portability
Data subjects have the right to receive the personal data concerning them which they have provided to a controller, in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
8.6 Right to object
Data subjects have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on the legitimate interest of the controller. AtlyTech shall then cease to process the personal data, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
8.7 Right to withdraw consent
Where the processing of personal data is based on consent, data subjects have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
8.8 Right to lodge a complaint
Data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if they consider that the processing of personal data relating to them infringes the GDPR.
To exercise these rights, data subjects may contact AtlyTech at the following address: info@atly.work.
9. DATA SECURITY
At AtlyTech, we take the security of your personal data very seriously. We have put in place appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
9.1 Technical Measures
- Encryption: We use advanced encryption protocols to protect data in transit and at rest.
- Firewalls and intrusion detection systems: Our systems are protected by firewalls and intrusion detection systems to prevent unauthorised access.
- Access control: Access to the data is strictly limited to employees and providers who need this information to perform their professional tasks. Each access is controlled and monitored.
9.2 Organisational Measures
- Staff training: Our employees receive regular training on data protection and security best practices.
- Security policies: We have put in place rigorous internal security policies which are regularly reviewed and updated to ensure that they remain effective and compliant with current standards.
- Incident management: We have an incident-management plan in place to react quickly and effectively to any data breach.
9.3 Evaluation and Continuous Improvement
We regularly carry out security audits and risk assessments to identify and mitigate new potential threats. We undertake to continuously improve our security practices to guarantee optimal protection of your data.
9.4 Notification in the Event of a Breach
In accordance with applicable regulation, in the event of a data breach likely to result in a risk to your rights and freedoms, we undertake to inform you as soon as possible as well as the competent supervisory authority.
We encourage you to contact us at info@atly.work if you have any questions or concerns regarding the security of your data.
10. INTERNATIONAL TRANSFERS
AtlyTech undertakes to ensure the protection of its users' personal data, including in the event of international transfers. The data collected may be transferred and processed in countries located outside the European Economic Area (EEA). These transfers are carried out in accordance with applicable data-protection laws, in particular the General Data Protection Regulation (GDPR).
10.1 Transfers to third countries
Transfers of data to third countries are carried out only if those countries offer an adequate level of data protection, as recognised by the European Commission, or if appropriate safeguards are put in place, such as standard contractual clauses approved by the European Commission.
10.2 Appropriate safeguards
For transfers to countries that do not benefit from an adequacy decision, AtlyTech uses appropriate safeguards to ensure the protection of the data. This includes the use of standard contractual clauses, binding corporate rules, or other mechanisms approved by the competent authorities.
10.3 Users' rights
Users have the right to request additional information on the safeguards put in place for international transfers of data. To exercise this right, users may contact AtlyTech at the following email address: info@atly.work.
10.4 Security measures
AtlyTech implements appropriate technical and organisational measures to protect personal data against any loss, misuse, unauthorised access, disclosure, alteration and destruction, including during international transfers.
By respecting these principles, AtlyTech ensures that its users' personal data are adequately protected, even when they are transferred beyond national borders.
11. COOKIES AND SIMILAR TECHNOLOGIES
11.1 Use of Cookies
AtlyTech uses cookies to improve the user experience on our website https://atly.work. Cookies are small text files stored on your device when you visit our site. They enable us to recognise your browser and to capture and remember certain information.
11.2 Types of Cookies Used
We use only essential cookies for the operation of our site. These cookies are necessary to provide you with the services available on our site and to use certain of its features, such as access to secure areas.
- Cookie name: session_id — Provider: AtlyTech — Category: Essential — Duration: Session — Purpose: Keep the user session active
- Cookie name: consent — Provider: AtlyTech — Category: Essential — Duration: 1 year — Purpose: Remember the user's consent preferences
11.3 Cookie Management
You may configure your browser to refuse all cookies or to alert you when cookies are sent. However, if you do not accept cookies, you may not be able to use certain parts of our site.
11.4 Absence of Third-Party Cookies
Currently, we do not use third-party services that place cookies on our site. This means that all data collected by the cookies are used only by AtlyTech and are not shared with third parties.
11.5 Changes to the Cookie Policy
We reserve the right to modify this cookie policy at any time. Any modification will be published on this page with an update date. We encourage you to consult this page regularly to stay informed of any modifications.
12. POLICY UPDATES
AtlyTech reserves the right to modify this Privacy Policy at any time in order to reflect changes in our data-processing practices or to comply with legislative and regulatory developments. Any substantial modification will be communicated to users via our website https://atly.work or by other appropriate means before the changes take effect.
12.1 Notification of Modifications
We will inform users of any important update to this policy by a visible notice on our website or by a direct message, such as an email, where this is possible. We encourage users to consult this page regularly to be informed of the latest modifications.
12.2 Date of Entry into Force
Modifications made to the Privacy Policy will enter into force on the date indicated in the notification. If you continue to use our services after the modifications enter into force, you agree to be bound by the revised Privacy Policy.
12.3 Renewed Consent
Where modifications would require renewed consent on your part, we will explicitly ask you to confirm your agreement with the new terms before you continue to use our services.
12.4 Archiving of Previous Versions
For reasons of transparency, we will retain previous versions of this Privacy Policy and make them available on request. You may contact us at info@atly.work to obtain copies of previous versions.
By staying informed of updates to our Privacy Policy, you help protect your rights and ensure a secure use of our services.
13. CONTACT AND COMPLAINTS
For any question, concern or complaint regarding this privacy policy or the processing of your personal data, you may contact our officer responsible for privacy protection at the following address: info@atly.work. We undertake to respond to your requests as soon as possible and to provide you with all necessary assistance to exercise your rights.
If you consider that your data-protection rights have not been respected, you also have the right to lodge a complaint with the competent supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), which you may contact via their official website or by post at the following address:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
We encourage you to contact us first regarding any concern, so that we may attempt to resolve the matter directly and promptly.