FORGING
VULCAPAY
SolutionsProductsFeaturesIndustriesCompanyAbout usNewsBlogCareersContact us

Privacy Policy

Last updated: 8 June 2026

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit the VULCAPAY website or use our services. We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Czech Act No. 110/2019 Coll., on Personal Data Processing.

1. Data controller

The controller of your personal data is ATOL next s.r.o. (trading as “VULCAPAY”; “we”, “us”, “our”), IČO 22292683, with registered office at Zenklova 24/54, Libeň, 180 00 Praha 8, Czech Republic, registered with the Metropolitan Court in Prague under file no. C 414061.

General contact: info@vulcapay.cz. For data‑protection matters: privacy@vulcapay.cz.

2. What data we collect

  • Data you provide: your name, company, email, phone number and message when you contact us or submit an enquiry; and, where you become a client, account and onboarding information.
  • Data collected automatically: device, log, usage and cookie data (see our Cookie Policy).
  • Client data: where you become a client, identity (KYC) and transaction‑related data necessary to provide our services and meet our legal obligations.

3. Why we process your data and our legal bases

  • To respond to your enquiries and to provide and improve our services — performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interests (Art. 6(1)(f)).
  • To comply with legal obligations, including accounting, tax and anti‑money‑laundering and fraud‑prevention duties — compliance with a legal obligation (Art. 6(1)(c)).
  • To send you relevant communications, where permitted — your consent (Art. 6(1)(a)) or our legitimate interests.
  • To ensure security and to protect our rights and those of third parties — our legitimate interests.

4. Who we share your data with

We may share personal data with: our employees and authorised processors (such as IT, hosting, accounting, audit, legal and security providers) under written contracts; licensed banking and payment partners where relevant to providing a service to you; and public authorities, courts or other bodies where required by law. We require processors to protect your data appropriately and to process it only on our instructions.

5. International transfers

We process your data primarily within the EU/EEA. Where personal data is transferred outside the EEA, we ensure appropriate safeguards under the GDPR — for example an adequacy decision of the European Commission, or Standard Contractual Clauses.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above and as required by applicable Czech and EU law — for example, accounting documents are retained under Act No. 563/1991 Coll., on Accounting, and we may retain data for the relevant limitation periods under the Czech Civil Code (Act No. 89/2012 Coll.). When data is no longer needed, we delete or anonymise it.

7. Your rights

Under the GDPR you have the right to: access your data; request rectification of inaccurate data; request erasure; request restriction of processing; object to processing (including direct marketing); data portability; and to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at privacy@vulcapay.cz. We will respond within the time limits required by law (generally within one month).

8. Supervisory authority

If you believe we process your personal data unlawfully, you have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz. If you reside in another EEA state, you may also contact your local data‑protection authority.

9. Cookies

Our website uses cookies and similar technologies, as described in our Cookie Policy.

10. Automated decision‑making

We do not make decisions that produce legal effects, or similarly significantly affect you, based solely on automated processing, including profiling.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page with its effective date; we may also notify you of material changes by email.