DrAtlas Terms of Use

Version 28.09.2026 — revizia 2 · In force from 28.09.2026

This document contains the general terms (Part I), the terms for patients (Part II), the professional and commercial terms for doctors (Part III), the rules for messages and documents (Part IV) and the rules on cancellation, closure and deletion (Part VI). The information on data processing (Part V) is in the Privacy Policy, and the data processing agreement for doctors (Annex 1) in the Data Processing Agreement (DPA). This is a translation; the Romanian version prevails in case of differences.

Part I — General terms for all users

1. Provider of the Platform

The DrAtlas mobile app, the web panel for doctors, the website and the related digital services (the "Platform" or "DrAtlas") are provided by:

ALTANET S.R.L.
Tax ID 15748710
Trade Register no.: J2003001373160
Registered office: Str. Amilcar Sandulescu 11 Bl. A32 Sc. 1 Ap. 13 Cod 200689
E-mail: hello@medi-max.ro

In this document, ALTANET S.R.L. is called "ALTANET", "DrAtlas" or "we". DrAtlas is the brand under which ALTANET provides the Platform. The medi-max.ro domain and the hello@medi-max.ro address are operated by ALTANET for the DrAtlas services.

2. Purpose and features of the Platform

DrAtlas is a technical intermediation and management platform through which, depending on the account type and available plan:

• anyone, including without an account, can search for doctors by specialty and location and view their profiles, services, the prices they publish, their availability and reviews;
• patients can book, reschedule or cancel appointments and, if they choose, add them to their phone calendar;
• users can create an account and sign in with e-mail and password or, where these options are active, with Google or Apple;
• patients and doctors can communicate through asynchronous messages and send documents;
• patients can keep their own medical documents and manage family members under this document;
• patients can publish and delete reviews after a completed appointment;
• users can report messages, conversations and reviews and can block a conversation;
• patients can download a copy of their data and delete their account in the app;
• doctors can manage their profile, schedule, services, appointments, messages, documents, patient records and staff accounts, according to the permissions configured;
• doctors can use the professional features included in their subscription plan.

The list describes the material features of the contract. Any new feature that significantly changes the purpose of the service, the payment, the data processed, the recipients or the medical risks will be added to this document before launch.

DrAtlas does not currently offer video consultations, automated medical questionnaires, automated diagnosis, automated medical recommendations, e-prescriptions or an AI-based medical assistant. If any of these is launched, these terms and the data information will be updated before activation.

The Platform is intended exclusively for appointments and medical services provided in Romania. Only doctors holding a valid right to practise in Romania are accepted, including doctors with studies or qualifications obtained abroad only after the necessary recognition and all authorisations to practise in Romania.

3. Role of the Platform and role of the doctor

ALTANET is not a medical practice and does not provide medical services. Consultations, diagnosis, treatment, prescriptions, interpretation of investigations and other medical decisions belong exclusively to the doctor or medical unit.

The doctor practises independently and under their own professional responsibility. Using the Platform does not reduce their legal, ethical, confidentiality or record-keeping obligations.

Requesting or confirming an appointment creates a direct relationship between the patient and the doctor/practice for the medical service. The consultation is paid directly to the doctor or practice. DrAtlas does not collect payment for consultations from patients.

4. The Platform is not for emergencies

The Platform, messages and notifications are not monitored permanently and do not guarantee a response time. In a medical emergency, call 112 or go to the nearest emergency department.

Do not use messages, the cancellation reason or documents to request immediate intervention.

5. Acceptance of this document

5.1. Patients

The patient enters into the contract by creating an account and ticking "I accept the DrAtlas Terms for patients and confirm I am at least 18 years old". Separately, they confirm they have read the Privacy Policy and give, through a distinct checkbox, explicit consent for health data. When signing in with Google or Apple, acceptance is given by continuing after the links to this document and the Privacy Policy are shown; consent for health data is asked separately, before using the features that need it.

5.2. Doctors and practices

The doctor or the authorised representative of the practice/clinic accepts:

• the general terms;
• the professional and commercial terms in Part III;
• the recurring payment mandate, if they activate a paid plan;
• the data processing agreement in Annex 1.

5.3. Privacy Policy and consents

The Privacy Policy is information about data processing. The user may be asked to confirm they have read it, but this confirmation is not a general consent to any processing.

Where ALTANET relies on consent — in particular explicit consent for certain health data — it is asked separately, through a clear, specific and demonstrable action. DrAtlas does not send marketing communications; if it introduces them, consent for them will be separate and optional.

We record the document version, the date, the time, the account and the acceptance action.

6. Account, identity and security

The user must provide real, complete and up-to-date data, keep their sign-in details confidential and report any unauthorised access immediately.

We may ask to verify identity, the status of doctor or the representation of another person where necessary and proportionate for security, avoiding patient mix-ups, fraud prevention, performance of the contract or the exercise of data rights.

Accounts are individual and are not shared. The user must protect their device, use a secure password and sign out of public or shared devices. After several sign-in attempts with a wrong password, the account may be locked temporarily and the holder is notified by e-mail.

DrAtlas may use e-mail, SMS verification and multi-factor authentication for sensitive operations.

7. Technical requirements

Use requires a compatible device, a supported operating system version, internet access and, for certain notifications, device permissions.

The list of supported versions is published on the help page. DrAtlas may end support for old versions for security or compatibility reasons, with prior notice where possible.

8. Acceptable use

You must not:

• use the Platform unlawfully, fraudulently or for fake appointments;
• pose as another person or as a doctor without a right to practise;
• access other people's accounts or data;
• circumvent security measures or technical limits;
• introduce malicious software, disrupt the service or test its security without authorisation;
• scrape, automatically collect or reuse the database without authorisation;
• upload content that is illegal, threatening, discriminatory, harassing, obscene, fraudulent or infringes the rights of others;
• use the Platform to unlawfully obtain medicines, certificates or other medical documents.

9. Intellectual property

The Platform, software, design, databases, the DrAtlas name and brand belong to ALTANET or are used under licence. Open source components are used under their licences, listed in the app ("About us" → "Open source licenses"). The user receives a limited, personal, non-exclusive, non-transferable and revocable right of use, only under this document.

Uploaded content remains its owner's. The user grants ALTANET only the technical rights needed to store it, send it to the recipient, display it and keep it secure, for as long as needed to provide the service.

10. Availability and third-party services

We make reasonable efforts to keep the Platform running, but there may be maintenance, updates, incidents or unavailability of networks and technical providers.

Features may depend on hosting, payment, e-mail, SMS, push notification, authentication or map providers, listed in the Privacy Policy. ALTANET remains responsible for choosing and managing its providers within its legal obligations.

11. Suspension and protective measures

We may limit, suspend or close an account for breach of the law or of this document, non-payment, fraud, invalid professional documents, risk to patients, unauthorised access or an obligation imposed by an authority.

Where the situation can be remedied and there is no urgent risk, we give the reason and a reasonable time to remedy it. We may act immediately in case of serious risk, fraud, a security incident or a legal obligation. We communicate by e-mail the measure, the reason, its duration and how to challenge it, where permitted.

12. Liability

ALTANET is liable for the technical provision of the Platform and its own legal obligations. It is not liable for the medical act, diagnosis, treatment, prescription, the doctor's professional conduct, the information the doctor enters or the performance of the medical service.

We do not exclude liability where the law does not allow it, including for intent, gross negligence, harm to life or physical integrity, breach of mandatory data obligations or consumer rights.

13. General provisions

13.1. Force majeure

Neither party is liable for non-performance caused by force majeure under the law. The affected party informs the other when reasonably possible and limits the effects. Data protection and return continue according to the nature of the obligation.

13.2. Severability and no waiver

If a clause is invalid, the others remain applicable. Not exercising a right immediately is not a waiver.

13.3. Assignment

The user cannot transfer the account. ALTANET may transfer the contract in a reorganisation, merger or sale of the business, informing users, keeping mandatory rights and complying with data rules.

13.4. Electronic evidence

Confirmations, e-mails, invoices, acceptance history, logs and authenticated actions may be used as evidence under the law, without excluding the user's right to challenge them.

13.5. Beta features

Features marked "beta" or "test" may be changed or withdrawn and must not be used as the only means for essential medical information. The beta label does not remove security and data protection obligations.

13.6. Language

This document is available in Romanian and English. In case of differences in interpretation, the Romanian version prevails, to the extent permitted by law.

13.7. Changes to this document

ALTANET may update this document for legislative, security, technical, functional or commercial changes. The version and the date it comes into force are shown at the top.

Material changes are communicated before they apply, by e-mail and/or in the Platform. For professional users the notice required by law is respected and, where Regulation (EU) 2019/1150 applies, at least 15 days, extended if technical or commercial adaptation needs more time. Urgent exceptions are limited to cases permitted by law, such as a legal obligation, a security risk or fraud prevention.

If a change requires new consent, we ask for it separately. Simply continuing to use the service does not replace express consent required by law. The user may end the contract before a change they do not accept comes into force, without affecting obligations already due.

13.8. Duration of the contract

The patient contract is concluded for an indefinite period and ends when the account is deleted or in the other cases set out here. The professional contract is concluded for an indefinite period; paid access runs in the chosen subscription periods and renews until cancelled.

Part II — Terms for patients

14. Eligibility and family members

The account is intended for persons aged at least 18 in Romania. Appointments for minors are made by a parent or legal representative from their own account and must concern medical services provided in Romania.

An adult may be added as a family member only with their agreement and if the account holder is authorised to manage their appointments. The holder is responsible for the accuracy of the data and for informing the represented person. Confirmations and reminders for appointments booked for a family member are sent to the account holder, not to the family member's phone.

If the represented person has or creates their own account, they can manage their future appointments themselves. Deleting the profile managed by someone else does not automatically delete the person's own account.

15. Doctor directory and ordering of results

The DrAtlas directory is not an official or exhaustive list of doctors in Romania. A doctor's absence does not mean they have no right to practise. Patients remain free to choose any doctor and any booking channel.

How search results are ordered:

1. the filters chosen by the patient (specialty, city, search text, payment methods, availability) only narrow the list;
2. if the patient allows location access, doctors are ordered from nearest to farthest;
3. without location, doctors are shown in the order they created their profile.

The doctor's subscription or paid plan does not affect their position. If DrAtlas introduces paid promotion, it will be marked distinctly and this document will be updated before activation.

16. Appointments

Using DrAtlas to search and book is free for patients. The price and conditions of the consultation are set by the doctor/practice. The prices on the profile are those published by the doctor and must be confirmed by them if the actual type of consultation differs.

An appointment is confirmed only when it appears as such in the Platform or in the notification sent. The doctor may accept, refuse, reschedule or cancel for professional or availability reasons.

The patient must cancel as early as possible if they cannot attend. Three cancellations or three no-shows, counted over the entire life of the account, may lead to a temporary limit on booking new appointments. No-shows are marked by the doctor. Before any measure, the case is reviewed by the DrAtlas team; it is not applied automatically. If applied, the patient receives an e-mail with the reason, its duration and how to challenge it, and can challenge it at hello@medi-max.ro. The restriction usually lasts 7 days — the exact duration is given in the e-mail — and ends automatically; appointments already booked are not affected.

A doctor may refuse future appointments from a particular patient for professional or safety reasons, no-shows or abuse, without unlawful discrimination. The restriction concerns that doctor/practice, not the patient's general access to care.

The "cancellation reason" field is administrative. Do not use it for detailed medical information, urgent requests or requests addressed to the doctor.

DrAtlas does not charge or manage fees for cancelling an appointment or for not showing up.

17. Reviews

Reviews can be published only after a completed appointment and must reflect the real experience. Detailed medical data, data about other people, threats, discrimination, obscenity, advertising, spam and false factual claims are not allowed.

DrAtlas checks the link between a review and an appointment. We publish the author's first name and last initial (for example "Ion P."), the rating and the review text; the full name is never shown. Before sending, the form shows which information becomes public.

Authors can delete their review at any time in the app; reviews cannot be edited, but after deleting one the author may leave another if the appointment allows it. Doctors cannot publish a reply under a review, but can report it. Reports are usually reviewed within 24 hours.

We do not remove a review just because it is negative. We may remove illegal content or content that breaks these rules; the author then receives an e-mail with the reason and how to challenge it. Challenges are sent to hello@medi-max.ro and usually receive a reply within 15 days.

18. Notifications

Confirmations, cancellations, rescheduling, reminders and message alerts may be sent by e-mail, SMS and push notifications.

Users configure the available channels and preferences. Some essential communications about security, the account, appointments or legal changes may be sent regardless of preferences.

DrAtlas does not send optional marketing, prevention or medical information communications. If it introduces them, they will not be on by default, can be turned off at any time and will not be mixed with the messages needed to provide the service.

By default, push notifications use a generic text ("You have a new notification"), with no medical content on the lock screen. Users can choose in their profile to see the details. Delivery may be delayed for technical reasons; users should check their appointments in the Platform.

Part III — Professional and commercial terms for doctors

19. Professional nature and eligibility

The professional platform is intended for doctors authorised in Romania, authorised medical practices, clinics and companies authorised to provide medical services in Romania. The responsible person or authorised representative may accept the contract on behalf of the clinic or entity. Doctors providing services within the clinic remain individually responsible for practising their profession and must comply with their professional obligations and the Platform rules that apply to their account.

The professional user confirms that they enter into the contract directly in connection with their professional or commercial activity, not as a consumer, and that the person accepting on behalf of an entity has the necessary power of representation.

The doctor declares they hold a valid right to practise, the necessary approvals and insurance, that they work within their competence and that the profile information is accurate. They inform ALTANET immediately if their right to practise is suspended or lost.

ALTANET checks the professional documents uploaded at sign-up, carries out periodic checks and may suspend publication until a check is complete.

20. Professional obligations

The doctor is responsible for:

• the medical act and the relationship with the patient;
• schedule, services, prices and availability;
• accepting, refusing, rescheduling and cancelling appointments, and marking no-shows correctly;
• confidentiality and medical records;
• medical consents and informing the patient;
• staff access and its revocation;
• communications sent to patients in their name;
• keeping the data for which they are the controller, including their own copies of medical records.

21. Staff accounts

The doctor/practice creates individual accounts only for authorised staff, sets each person's access rights, trains the staff and withdraws access immediately when the collaboration ends. Accounts are not shared.

Depending on the permissions granted by the doctor, staff may see appointments, change the schedule, see contact details, documents or records, and may or may not have access to patient–doctor messages; access to messages is a separate permission. The doctor/practice is responsible for granting, reviewing and withdrawing these permissions and for informing patients about the authorised persons.

22. Ranking and access to data

Doctors are ordered according to the criteria in section 15. The paid plan does not affect the order.

The doctor accesses only the patients and data for which they have a legitimate relationship through the Platform. They do not get access to the patient's relationships with other doctors.

After the contract ends, access and handover of data follow sections 51–53 and Annex 1.

23. Plan, free trial and price

The plan, features, duration, price, currency (lei), VAT where applicable, and billing period (monthly or yearly) are shown in the app before activation and in the confirmation. The offer in force is the one shown in the app at the time of activation.

DrAtlas may offer a free trial, with the duration shown before activation. The trial is granted once per doctor and per phone number and requires a valid card. Unless the doctor cancels before it ends, the trial converts automatically, on the date shown, into the paid plan indicated, at the confirmed price and frequency.

There is no automatic move to a more expensive or different plan than the one accepted. Any further upgrade requires confirmation of the price and effective date.

24. Stripe and the card

Subscription payments are processed by Stripe, under its contract and privacy policy. Full card details and the CVC are entered in the Stripe interface and are not received or stored by ALTANET.

ALTANET receives the payment status, the amount, the transaction identifier and the data strictly needed to match the payment with the subscription, as well as the card brand, the last four digits and the expiry month/year, used to show the saved card and to warn before it expires. ALTANET has no access to the full card number or the CVC.

By ticking the box accepting the commercial terms and pressing "Activate subscription — [price] [currency]/[period], renews automatically after [date]", the doctor:

1. accepts the professional and commercial terms;
2. confirms the plan, price, VAT and period;
3. authorises Stripe and ALTANET to initiate recurring charges until cancelled;
4. confirms they may use the payment method;
5. accepts electronic confirmations and invoices.

After activation, the doctor receives an e-mail with the plan, the price, the next charge date, the version of this document and how to cancel.

25. Automatic renewal

The subscription renews automatically for periods equal to the chosen plan. The payment method is charged at the start of each period.

Price increases are announced at least 30 days before they apply. The doctor may cancel before renewal at the new price. For yearly plans we send a reminder 7 days before renewal. If the saved card expires before renewal, we send a warning.

26. Failed payment

If a payment fails, the doctor is notified by e-mail and in the account and asked to update the payment method. Stripe retries the payment automatically under its rules; meanwhile a doctor who had a paid subscription keeps access for 7 more days. If the retries fail, the subscription ends and the profile no longer appears in search or receives new appointments until a new payment. There is no such extra period for the first payment after the free trial. Data handover and patient protection obligations are not disproportionately blocked.

27. Cancellation, closure and refunds

27.1. Cancelling renewal

The doctor can stop renewal from the subscription settings. Access continues until the end of the period already paid. The started period is not refunded pro rata, except where required by law, for an erroneous or double charge or an unavailability attributable to ALTANET and accepted by it.

27.2. Scheduled closure

If the doctor asks to close the account, the default option is closure at the end of the paid period: renewal stops, the account closes automatically on that date, and until then the doctor can use the service, request their data and change their mind.

27.3. Immediate closure

If the doctor expressly requests immediate closure, access ends immediately, renewal is cancelled and the remaining period is not refunded, subject to mandatory exceptions. The service cannot continue after the account has actually been deleted.

27.4. Upgrade and downgrade

While the subscription is active, a newly chosen plan applies from the next renewal, without proration and without credit for the current period; until then the current plan's features remain available and the scheduled change can be cancelled. If there is no active access, the chosen plan is paid and activated immediately. No change to a more expensive plan is made without the price being shown and confirmed.

28. Termination by ALTANET and challenges

For a doctor/professional user, ALTANET communicates the reasons for a restriction, suspension or termination and respects the applicable notice, including the requirements of Regulation (EU) 2019/1150: for a suspension or restriction, the reasons are given at the latest when the decision takes effect; for a definitive termination, at least 30 days in advance. Urgent situations, fraud, serious risk and legal obligations are excepted.

Challenges are sent by e-mail to hello@medi-max.ro, are reviewed by the DrAtlas team and usually receive a reply within 15 days. If further checks are needed, the person is informed of the delay and progress.

DrAtlas is an online intermediation service within the meaning of Regulation (EU) 2019/1150. ALTANET is a small enterprise within the meaning of Recommendation 2003/361/EC, so it is not required to run an internal complaint-handling system or to designate mediators (Art. 11(5) and Art. 12(7)); challenges are nevertheless handled under the procedure above.

29. Independence, compliance and anti-corruption

ALTANET and the doctor/practice are independent contractors. Neither party can bind the other without a mandate.

The parties comply with the law on fraud, corruption, conflicts of interest and undue advantages.

30. Professional liability

The doctor is liable for the medical act, staff, appointments, professional information, confidentiality and compliance with the law. ALTANET is liable for its own obligations regarding the Platform, security and data.

Part IV — Rules for messages and documents

31. Nature of messaging

Messaging is an asynchronous channel made available to the patient and the doctor for administrative communications, information requests, preparing or following up an appointment and sending documents.

Messaging is not intended for emergencies and is not, in itself, a medical consultation, a diagnostic service, a prescription or a real-time chat.

If a doctor decides to send a medical opinion or recommendation by message, they do so under their own professional responsibility, only if they consider the channel appropriate and in compliance with applicable requirements. DrAtlas recommends that the doctor ask for a consultation when an assessment cannot be made safely through messages.

If, by its content and circumstances, a communication amounts to a telemedicine service, the doctor/medical unit is responsible for meeting the applicable legal conditions, including identification, information, consent, confidentiality and recording the medical act. The mere existence of the messaging channel does not turn all messages into consultations.

32. Confidentiality of messages

Messages and documents are intended for the sender, the recipient doctor and, if the doctor explicitly grants this permission, the practice's authorised staff. They are not public and are not used by ALTANET for commercial or advertising purposes.

Messages and documents are encrypted in transit (HTTPS) and stored on servers in Romania with restricted access; attachments are stored privately and are reachable only through temporary links. The DrAtlas admin panel has no feature for reading conversations: the team sees only the content of a reported message (section 35). Direct technical access to the database is limited to the server administrators, for maintenance and incident handling.

Messages are not end-to-end encrypted. Such a claim may be published only after a technical check showing that the keys are controlled exclusively by the participants.

Hosting is provided on ALTANET's own infrastructure in Romania, under the security measures described in the Privacy Policy.

33. What not to send by message

Do not send:

• the full card number, CVC, PIN or banking passwords;
• DrAtlas sign-in details or verification codes;
• copies of cards, screenshots from banking apps or internet banking details;
• data about another person without the right to share it;
• illegal, threatening, discriminatory, harassing, obscene, fraudulent or malicious content;
• excessive information not needed to communicate with the doctor.

DrAtlas and doctors will never ask for your password, PIN or CVC by message. If you receive such a request, do not reply and contact support through the official channel.

34. Documents and copies

When a patient sends a document to the doctor, the doctor may receive or create a copy in their own records. Deleting the document from the patient's account does not delete the doctor's copy.

Requests about the doctor's copy are addressed to the doctor/practice and handled within the limits of medical record-keeping obligations.

Documents must be sent only to the correct recipient. The user checks the doctor before sending.

35. Reporting content and abuse

In the app, any message received, conversation or review can be reported: press and hold the message, use the conversation menu or the review's report icon. The DrAtlas team sees only the reported content, not the whole conversation, and uses it solely to assess the report, for security and to take the necessary measures. The other user is not told who reported them. Either participant can also block a conversation.

Anyone, including without an account, can report public content they consider illegal through the reporting form. Reports can also be sent by e-mail to hello@medi-max.ro, optionally with a screenshot.

The DrAtlas team may ask for more information, warn the user, remove the content, limit features or suspend/close the patient's or doctor's account, depending on severity and after a human review. The author of removed content or the holder of a restricted account receives by e-mail a statement of reasons — what measure was taken, on what grounds and how to challenge it.

The single point of contact for users and authorities under Regulation (EU) 2022/2065 is hello@medi-max.ro; communication may be in Romanian or English. ALTANET is a small enterprise and benefits from the exemptions in Art. 19 of that Regulation for the additional obligations of online platforms.

36. Keeping messages

Administrative messages follow the life of the account and the periods in the Privacy Policy. Clinically relevant messages may be included by the doctor in the medical records and kept under their obligations, even if the patient deletes their account.

Part VI — Cancellation, closure and deletion

Sections 37–50 (Part V) are in the Privacy Policy.

51. Cancelling the doctor's subscription

Cancelling stops renewal. Access remains active until the end of the paid period. The doctor should use this time to manage appointments and make the copies of records they need.

52. Deleting a patient account

Patients can delete their account in Profile → Delete account or by e-mail to hello@medi-max.ro (details: account deletion).

Before deleting, they can download a copy of their data in Profile → Download my data: a ZIP archive with the account data, family members, appointments, messages and the documents they uploaded, in a structured format (JSON) plus the original files, sent through a temporary link by e-mail. The export does not replace the official records kept by the doctor.

On confirmation:

• the account is deactivated and identifying data is deleted or irreversibly anonymised;
• future appointments are cancelled and the doctor is informed;
• the profile, family members, tokens and sessions are deleted from the active system;
• messages, attachments and personal documents are deleted immediately;
• backups are overwritten within the period in section 45.

Medical records and clinical messages the doctor must keep, invoices, data needed for disputes or security and abuse reports are not deleted automatically, for the justified period.

53. Closing a doctor account

The default option is closure at the end of the paid period. If the doctor expressly asks for immediate closure, access ends immediately and the remaining period is not refunded, subject to legal exceptions. Without an active subscription, closure is immediate.

Before closing, the doctor should make the copies of documents they need, manage appointments and revoke staff access. A complete handover of records (patient list, medical history and documents, in JSON/CSV plus the original files) is requested at hello@medi-max.ro and provided within 30 days.

After closure, patient records are kept for 90 days, inaccessible to anyone, for handover on request; they are then permanently and automatically deleted under Annex 1, and disappear from backups when these are overwritten (at most 30 days). We do not keep records indefinitely.

54. Challenges and complaints

Complaints and challenges about suspensions or reports are sent by e-mail to hello@medi-max.ro. They are reviewed by the DrAtlas team and usually receive a reply within 15 days. If further checks are needed, the person is informed of the delay and progress. Official postal communications to ALTANET are sent to the registered office: Str. Amilcar Sandulescu 11 Bl. A32 Sc. 1 Ap. 13 Cod 200689.

Consumers can contact ANPC and the ADR mechanisms available through anpc.ro.

These terms are governed by Romanian law. Court jurisdiction is determined by law, without limiting consumers' mandatory rights.