隐私政策

The purpose of the ATAS Limited Liability Company (hereinafter - ATAS) Privacy Policy is to provide a natural person - data subject, with information about the purpose, scope and protection of the personal data processing, as well as other personal data processing information of a data subject.

ATAS processes personal data in accordance with Regulation 2016/679 of the European Parliament and of the Council (EU) dated on 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and which repeals Directive 95/46/EC (General Data Regulation Directive) (hereinafter the Regulation), and other applicable regulations.

Contact information of ATAS - legal address: Katlakalna iela 1, Riga, Latvia, LV-1073; phone: +371 67775799; e-mail: finance@atas.net .

ATAS ensures confidentiality of personal data and has implemented appropriate technical and organizational measures to protect personal data. Trained and certified personal data protection specialists are involved in ensuring the compliance of ATAS processing of personal data.

ATAS Privacy Officers may be contacted by writing to dpo@fpda.lv. Please note that the above methods of contacting ATAS data protection specialists are not intended to request information as part of exercising your rights as a data subject.

We inform you that ATAS may make changes to this Privacy Policy (hereinafter the Policy), so you should check this Policy to make sure you are informed and aware of any changes.

THIS POLICY WAS LAST UPDATED ON 6 NOVEMBER, 2025

Purposes, legal basis of personal data processing and categories of data

ATAS processes personal data primarily for the following purposes:

• To activate a user account (based on Article 6(1)(a) of the Regulation, based on your freely given consent).

Categories of data to be processed: e-mail address;

• To carry out a purchase (on the basis of Article 6(1)(b) of the Regulation, on the basis of the concluded contractual relationship).

Categories of personal data subject to processing: name, surname, date of birth, e-mail, phone number, address, country, information on the purchase made and the purchase amount, taxpayer’s registration number, if applicable;

• To meet the accounting requirements, including the drawing up of relevant supporting documents and the performance of obligations (based on Article 6(1)(c) of the Regulation, in compliance with the requirements of normative acts).

Categories of personal data subject to processing: name, surname, date of birth, taxpayer's registration number, taxpayer's country, address, telephone number, e-mail address, bank account number and information about commercial bank account or information about PayPal user account;

• For the purpose of sending commercial messages and news (on the basis of Article 6(1)(a) of the Regulation, and on the basis of your freely given consent).

Categories of personal data processed: e-mail address

• Handling of requests, applications, proposals, objections and notifications (on the basis of Article 6(1)(b) of the Regulation, on the basis of the concluded contractual relationship).

Categories of personal data processed: e-mail address, name, surname, contact details and the information contained in the submission;

• Data stored automatically in order to ensure the functionality of the system, in accordance with the legitimacy of ATAS (based on Article 6(1)(f) of the Regulation).

Categories of personal data subject to processing: IP address, activity on the platform, data on the platform visits.

Please note that you are responsible for providing ATAS with accurate personal data and, in case of any changes, you are obliged to correct your inaccurate personal data by informing ATAS.

Recipients of personal data

Personal data from ATAS can be obtained by competent institutions in the manner prescribed by the legislation, which will be the fulfillment of a legal obligation, for example, ATAS will transfer data to the State Revenue Service, which is the tax control authority in Latvia.

ATAS uses personal data processors to process personal data. In such cases, ATAS takes necessary measures to ensure that such processors of personal data process personal data in accordance with ATAS instructions and in accordance with applicable laws and regulations, and requires appropriate security measures.

We engage processors to provide the https://atas.net/ platform services to you. These include, for example, customer and partner support services, advertising services and software providers. Payment service providers (for example, Adyen N.V. and PayPal (Europe) S.à r.l. et Cie, S.C.A.) act as independent controllers with respect to the payment data you enter directly in their payment form, and not as processors of ATAS. Please note that the processors have access to your personal data to the minimum extent necessary to perform their delegated tasks.

If, for the provision, maintenance or technical support of ATAS services or for other related purposes, it becomes necessary to transfer personal data to service providers outside the European Economic Area, ATAS will carry out such transfer only in accordance with the requirements of the Regulation, ensuring an appropriate legal basis and safeguards for the protection of personal data.

Duration of personal data storage

ATAS will retain personal data in accordance with the defined purposes for processing personal data and the legal basis for processing personal data for as long as at least one of these criteria exists:

• ATAS has a legal obligation to retain this data;
• ATAS needs to pursue its legitimate interests;
• ATAS needs to fulfill its contractual obligations;
• The data subject’s consent to the relevant processing of personal data is valid.

Security of information

ATAS implements all technical and organizational measures to protect your personal data, thus preventing possible violation of personal data, which means that access to your personal data is limited, ATAS employees are trained and strict confidentiality rules are established for both employees and processors of personal data. Protecting individuals' personal data is a priority for ATAS

Access to your personal data and other rights of the data subject

• In order to obtain information on the personal data subject to processing by ATAS with respect to a data subject, the data subject has the right to contact ATAS and obtain the information in the manner prescribed by laws and regulations, or by viewing it in their profile on the https://atas.net/ platform.
• The data subject has the right to request the restriction of the processing of personal data, to object to the processing of personal data, to request the correction of personal data and, in certain cases, their deletion, in accordance with the provisions of the Regulation.
• ATAS communicates with the data subject: by post, sending mail to the address indicated by the data subject, by registered letter, identifying it in advance; by e-mail, responding to the same e-mail in which the data subject sent the application, signed with a secure electronic signature; by communicating via the official electronic address (e-address).
• In the event of a personal data breach or suspected personal data breach, we recommend that you contact ATAS or contact ATAS data protection specialists. Complaints about personal data breach can also be submitted to the personal data supervisory authority - Data State Inspectorate (address: Elijas Street 17, Riga, Latvia, LV-1050).