Privacy policy
Effective from vrijdag 6 november 2026. Early-access version. English text.
1. Controller
The controller of personal data is Atlayo Overseas s.r.o., company ID 29645433, VAT ID CZ29645433, registered office at Příkop 843/4, 602 00 Brno, Česká republika, entered in the commercial register: Krajský soud v Brně, spisová značka C 152275. Contact for personal data: hola@atlayo.com.
2. What we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking request and handling | first and last name, date of birth (for flights), email, phone, note, chosen offer | performance of a contract or steps before it (Art. 6(1)(b) GDPR) | until handled, then for the limitation period of claims, at most 4 years; accounting records as required by law |
| Price alerts and travel tips | email, watched route or destination, language, time of consent | consent (Art. 6(1)(a) GDPR), withdrawable at any time | until consent is withdrawn |
| Site security and abuse protection | shortened irreversible hash of the IP address, technical server logs | legitimate interest (Art. 6(1)(f) GDPR) | server logs 30 days, rate-limit hash at most one hour |
| Legal obligations | billing and accounting data | legal obligation (Art. 6(1)(c) GDPR) | as required by law, generally 10 years |
We do not collect travel-document data (document number and the like) at the moment. If a provider requires it for a trip, we will tell you beforehand and pass it only to that provider.
3. Who receives data
- Providers of the services you book (host, carrier): only the data needed to provide the service.
- Processors: hosting and email providers, booking and payment service providers. We will specify the recipients on request.
- The operator of a language model, if it is switched on. See the AI notice.
- Public authorities where the law requires it.
We do not transfer data outside the EU/EEA unless needed to provide the service you ordered (for example a flight to a non-EU country). In that case the provider’s rules apply.
4. Your rights
You have the right of access, rectification, erasure, restriction, portability and to object. You can withdraw consent at any time. Write to hola@atlayo.com. You may also lodge a complaint with a supervisory authority: in the Czech Republic the Office for Personal Data Protection (uoou.gov.cz), or the authority in your own country.
5. Automated decisions
The AI planner suggests places but decides nothing with legal effect, nor whether we serve you. We do not profile you for advertising.
6. Cookies
We use only strictly necessary cookies. See Cookies.