Privacy Policy — Sounds Good Agency
PRIVACY POLICY
of Sounds good agency s.r.o., registered office: Palachovo náměstí 799/5, Starý Lískovec, 625 00 Brno, Company ID (IČO): 07547455, registered in the Commercial Register kept by the Regional Court in Brno under file no. C 108413 (hereinafter “we” or the “controller”).
We take the protection of personal data seriously. In this policy you will learn for what purpose, on what grounds and in what way we process your Personal Data. You will also find information about your rights in connection with the protection of personal data.
If you have any further questions about the processing of your Personal Data, please contact us at info@soundsgood.cz.
We need some Personal Data to conclude and perform the Contract, and we process some Personal Data on the basis of our legitimate interest. For some Personal Data, processing is required by law (for example, bookkeeping). In some cases we use Processors who may have access to your Personal Data, such as accounting firms or marketing specialists. Where necessary, we will ask for your consent to the processing of personal data.
When are we the controller? In relation to Users, we are the controller of Personal Data. An overview of the Personal Data we process, including the reasons for processing it, is set out below. If anything is unclear, do not hesitate to contact us at info@soundsgood.cz or at another email address given below for a specific processing purpose.
To make the text easier to read, we use the following terms in this Privacy Policy:
| GDPR | Regulation (EU) 2016/679 of the European Parliament and of the Council; |
| Client | a person who has concluded a contract for the provision of services with us; |
| Business Partner | a person who has concluded a contract with us within a business relationship (B2B); |
| Commercial Communication | usually an email or text message sent to the recipient to promote similar products and services; a commercial communication is often called a newsletter |
| Personal Data | any information about a User on the basis of which the User can be directly or indirectly identified; |
| Contract | a contract between Sounds good agency and a Client for the implementation and/or servicing of an e-commerce solution on the Shopify platform, or other similar contracts; |
| Joint Controllers | all companies listed in Article 4 of this Policy and in the Privacy Policy of Shopsys s.r.o. under Article 12 of that policy, whatever the scope of their control within the joint processing of Personal Data; |
| User / you | the natural person to whom the Personal Data relate; most often a client or a potential client, or a user of our Website, also referred to as “you”; |
| Website | also just the Web, means the website www.soundsgood.agency and its Czech version www.soundsgood.cz, operated by the controller; |
| Processing of Personal Data | any operation or set of operations performed on Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; |
| Processor | we use other entities that process Personal Data on the basis of a contract or other authorisation on behalf of the controller; |
| Special Categories of Personal Data | data that we regard as more sensitive. They concern, for example, your ethnic origin, your sexual orientation, whether you are a trade union member, your health and your beliefs. Genetic and biometric data are also considered a special category of data if they are processed for the purpose of uniquely identifying a natural person. We do not process this Personal Data. |
1. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?
How do we process your Personal Data? We process your Personal Data only to the extent necessary to achieve the purpose for which the data were collected, and we follow technical and organisational security rules when processing them. The processing of Personal Data is automated, but we do not carry out profiling. The specific processing purposes and the categories of Personal Data we process for each purpose are described in the following section. As a rule, we hold only the following data about you. If we process any other Personal Data about you, we will inform you of this directly for the specific processing purpose.
| → First name and surname, contact details (in particular email, phone number) | → Order notes and other information you provide to us when communicating with us (in particular your questions and our answers to your enquiries, communication with you) |
| → Billing details and bank details (data necessary for bookkeeping and payments) | → Cookies and IP address, activity data (including information about your device or operating system) |
| → Business identification details (in particular Company ID, company name, registered office) | → Comments you add to our posts on social networks (in particular Facebook, Instagram, X, YouTube), as well as the name (nickname) of your profile on these social networks and information you have made publicly available on your profiles |
Special Categories of Personal Data. We do not process any sensitive Personal Data about you.
2. SOUNDS GOOD AGENCY
In this section you will learn how we process Personal Data when you use our services through our Website. This section applies to you in particular if you visit our Website, become our client or partner, or want to join our team.
If you have any further questions about the processing of your Personal Data, you can contact us at info@soundsgood.cz.
A. USERS OF OUR WEBSITE
If you visit our Website, we process your Personal Data for the purposes listed in this table. If you are interested, you can subscribe to Commercial Communications on the Website or by email. To subscribe to Commercial Communications, you need to provide us, with your consent, with some of your Personal Data for processing.
| Why? | What data? | How? | How long? |
|---|---|---|---|
| Visiting the Website. Providing the basic functions of our Website, analytics, improving our services. We also process Personal Data so that we can show you relevant content or our advertising on other websites. You can set your preferences in the cookie bar. The legal basis for processing Personal Data is consent (analytics, marketing cookies) or our legitimate interest (necessary cookies). | Information about when and how you visit and browse our Website, which may include: IP address, date and time of access to our Website, information about your web browser, operating system or language settings, and the history of your behaviour on the Website. If you visit our Website on a mobile phone, we may also process data about your phone. | Cookies or other technologies for tracking User behaviour. | The processing period differs by type of cookie. Some process data only for the duration of the session (visit), others for longer. |
| Communication with website users, requests and complaints. By sending an enquiry, you give your consent to the processing of Personal Data for the purpose of handling the enquiry. | First name, surname, phone number, email, your company name, other information you provide to us. | To handle the enquiry, we process the Personal Data necessary for handling it. Communication takes place by phone, email or directly on our Website. | Closed enquiries are deleted regularly, at the latest 3.5 years after the enquiry was made. |
| Direct marketing, in particular sending commercial communications. If you have subscribed, we will send you a newsletter. If you no longer want to receive it, you can unsubscribe in the email footer. We process your personal data on the basis of your consent. | First name, surname, email address, company name and your job title. | We send a newsletter informing you about our services and news. | Data are processed for 2 years from the last time you actively opened the newsletter, unless you unsubscribe earlier. |
B. OUR CLIENTS
If you are considering using our services or have already concluded a Contract with us, we will process your data so that we can fulfil our obligations, or we will process them to comply with a legal obligation or on the basis of our legitimate interest.
| Why? | What data? | How? | How long? |
|---|---|---|---|
| Visiting the Website. Providing the basic functions of our Website, analytics, improving our services. We also process Personal Data so that we can show you relevant content or our advertising on other websites. You can set your preferences in the cookie bar. The legal basis for processing Personal Data is consent (analytics, marketing cookies) or our legitimate interest (necessary cookies). | Information about when and how you visit and browse our Website, which may include: IP address, date and time of access to our Website, information about your web browser, operating system or language settings, and the history of your behaviour on the Website. If you visit our Website on a mobile phone, we may also process data about your phone. | Cookies or other technologies for tracking User behaviour. | The processing period differs by type of cookie. Some process data only for the duration of the session (visit), others for longer. |
| Sending a quote. You can contact us to request a quote for our services through the contact form on our Website. By submitting the form, you give your consent to the processing of Personal Data for the purpose of sending a quote and the follow-up communication. | First name, surname, phone number, email, your company name, other information you provide to us. | To handle a request for a quote, we process the Personal Data necessary to prepare the quote and for any subsequent process of concluding the Contract. Communication takes place by phone, email or directly on our Website. | Closed requests are deleted regularly, at the latest 3.5 years after the request was made. If a Contract is signed, Personal Data are processed for the term of the Contract and then for 5 years after the Contract ends. |
| Concluding the Contract. Before we can provide our services to you, a Contract must first be concluded with us. | To conclude the Contract, we will need your first name, surname, date of birth and address, and the name of the company on whose behalf you act. | You provide us with these data when filling in the contact form and/or in our communication for the purpose of signing the Contract. | Data are processed for the term of the Contract and then for 5 years after the Contract ends. |
| Communication with customers, requests and complaints. You can send us an enquiry by email, through the website, or call us. By sending an enquiry, you give your consent to the processing of Personal Data for the purpose of handling the enquiry. | First name, surname, phone number, email, invoice number. | To handle an enquiry, request or complaint, we process the Personal Data necessary for handling it. Communication takes place by phone or email. | Closed enquiries and complaints are deleted regularly, at the latest 3 years after the enquiry was made or the complaint was resolved. |
| Direct marketing, in particular sending commercial communications. If you use our Services or have subscribed, we will send you a newsletter. If you no longer want to receive it, you can unsubscribe in the email footer. We process your personal data on the basis of our legitimate interest or your consent. | First name, surname, email address, company name and your job title. | We send a newsletter informing you about our services and news. | Data are processed for 2 years from the last time you actively opened the newsletter, unless you unsubscribe earlier. |
| Accounting. We receive a Fee for providing the Services and issue accounting and tax documents to you, which we then archive and work with for the proper keeping of our accounts and the fulfilment of legal obligations. | Data on the invoice - first name, surname, email address, billing address, or other identification of the User and details of the performance under the Contract. | After you fill in the payment information in your profile, we store these data to create the invoice. | We are required by law to archive or keep the relevant document; the period depends on what the law requires (3–10 years). |
| Sending information related to the performance of the Contract. This means any communication needed to perform the Contract. | First name, surname, email address, billing address, or other identification of the User and details of the performance under the Contract. | We also process your personal data to send you information about our contractual relationship. | Data are processed for the term of the contractual relationship and then for 5 years after the Contract ends. |
| Compliance with legal obligations. In certain cases we must process your personal data to fulfil obligations laid down by law. | In particular, this may include first name, surname, email address, billing details, or other identification of the User. | In this case we process your Personal Data to comply with applicable laws (fulfilment of a legal obligation). | We process your Personal Data for the period laid down by the applicable laws. |
C. BUSINESS PARTNERS
If you decide to work with us and become our Business Partner, we will process your Personal Data for the following purposes.
| Why? | What data? | How? | How long? |
|---|---|---|---|
| Performance of concluded contracts. To properly fulfil the obligations arising from a concluded contract, we will need your personal data or the personal data of your employees, for example for communication with each other. | These are the data stated in the contract, or the first name, surname, email, phone number, delivery address and information about the performance concerned that are provided to us. | The personal data of you or your employees are processed for the purpose of performing the contract. | For the duration of our contractual relationship with you. |
| Bookkeeping. We issue accounting and tax documents to you, which we then archive and work with for the proper keeping of our accounts and the fulfilment of legal obligations. | Data on the invoice: first name, surname, email address, billing address, or other identification of the contractual partner and other necessary data. | We store the data provided to create the invoice. | We are required by law to archive accounting documents and accounting records (invoices) for 5 years from the end of the accounting period to which they relate. We are also required to archive tax documents used to calculate the tax base for 10 years from the end of the tax period in which the performance took place. |
3. WHO ARE OUR PROCESSORS?
Processors. We only use vetted Processors with whom we have concluded a written contract and who give us at least the same guarantees as we give you. The data that Processors may process, including the purpose and legal basis of the processing, are listed above. We will be happy to provide details about the processors on request.
Below we list the processors for the individual activities of the controller.
A. SOUNDS GOOD AGENCY
| Operation and security of the Website | Shopify, Firebase + Google |
| Standard analysis of Website traffic | Google Analytics |
| Provision of the Service | Shopify, Firebase + Google |
| Handling enquiries and communication with us | Shopify, Firebase + Google |
| Accounting | Internal team |
| Marketing | Ecomail, HubSpot, Leadspicker, Meta, LinkedIn, Google, X (Twitter) |
| Social networks | Instagram (including Threads), Facebook, YouTube, LinkedIn, Twitter |
| Satisfaction ratings | Shopify Directory |
| Job applicants, employees | Sloneek |
Legal obligations. In addition to our Processors, we may transfer Personal Data to third parties if required by law, or in response to lawful requests from public authorities or at the request of a court in legal proceedings.
4. JOINT CONTROLLERS
In addition to our own activities described in Article 2, we take part in several activities in which we are a joint controller of Personal Data within the meaning of Article 26 GDPR together with the relevant companies. These activities are:
- EXEC magazine, operated on the website exec.shopsys.cz/magazin,
- EXEC fresh newsletter, operated on the website exec.shopsys.cz/fresh,
- EXEC talks podcast, operated on the website exec.shopsys.cz/podcast,
- EXEC edge conference,
- EXEC Talks Live conference, operated on the website exec.shopsys.cz/exec-talks-live,
- EXEC e-commerce personality award,
- Velký test e-shopů (the Big E-shop Test), operated on the website www.velkytesteshopu.cz.
Where can you find details? Detailed information about the processing of Personal Data within these activities, including the processing purposes, the categories of data processed, how long they are kept and the Joint Controllers, can be found in the Privacy Policy of Shopsys s.r.o.
The Personal Data you provide are processed primarily by us as the controller; we specially train all relevant employees and our other collaborators in the processing of Personal Data. We are also part of a group of companies that together form a holding, within which Personal Data are shared to the extent defined below. These are parent, subsidiary or sister companies. These companies are therefore Joint Controllers of your Personal Data and maintain the same level of Personal Data security as we do.
The following companies are Joint Controllers of Personal Data together with us, and we are joint controllers with these companies of all Personal Data processed under this Policy:
- Shopsys Group SE, Company ID: 05765391, registered office náměstí Biskupa Bruna 3399/5, 702 00 Moravská Ostrava a Přívoz;
- ABUGO Group SE, Company ID: 22099166, registered office náměstí Biskupa Bruna 3399/5, 702 00 Moravská Ostrava a Přívoz.
In addition to the Joint Controllers mentioned above, we also share Personal Data with other Joint Controllers, with whom we are Joint Controllers in relation to job applicants. These other Joint Controllers are:
- ABUGO Capital SE, Company ID: 22326332, registered office náměstí Biskupa Bruna 3399/5, 702 00 Moravská Ostrava a Přívoz;
- Survio s.r.o., Company ID: 28300785, registered office Palachovo náměstí 799/5, Starý Lískovec, 625 00 Brno;
- Reservio, s.r.o., Company ID: 29376033, registered office Palachovo náměstí 799/5, Starý Lískovec, 625 00 Brno;
- Reservio CZ, s.r.o., Company ID: 08394601, registered office Palachovo náměstí 799/5, Starý Lískovec, 625 00 Brno
- Smartsupp.com, s.r.o., Company ID: 03668681, registered office Palachovo náměstí 799/5, Starý Lískovec, 625 00 Brno;
- Shopsys s.r.o., Company ID: 27790487, registered office náměstí Biskupa Bruna 3399/5, Moravská Ostrava, 702 00 Ostrava;
- TGNCA s.r.o., Company ID: 09634231, registered office Emilie Floriánové 810/2, 466 01 Jablonec nad Nisou.
All these companies are Joint Controllers together with us and process Personal Data under Article 26 GDPR. The Joint Controllers have therefore concluded a joint controller agreement among themselves: the Joint Controllers of most Personal Data have one joint controller agreement with us, and the entities whose access to Personal Data is narrowly defined above have a second joint controller agreement with us.
You can exercise all the rights you have under applicable law (in particular the GDPR) and under this Privacy Policy with any of the companies listed above. Under the joint controller agreement, your request will then be passed on to the relevant company or to our DPO. We publish all relevant information required by the GDPR on our Website.
5. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?
Technical and organisational measures. Security is very important to us, which is why we work continuously to keep your Personal Data protected. When choosing measures, we take into account the scope of processing, the risks of processing and the state of our technology.
- We back up data regularly;
- we update antivirus software systems;
- we use the secure https protocol;
- access passwords to information systems (where Personal Data will be processed) and access permissions are controlled at the level of individuals.
Organisational measures. We have adopted, and undertake to maintain, the following measures:
- Our employees are bound by confidentiality;
- Our employees are properly trained, and regularly trained further, on the GDPR and familiarised with the rules for working securely on work devices;
- Access to all systems, including the information system, is personalised and protected by secure passwords.
6. YOUR RIGHTS AND HOW TO SUBMIT A REQUEST CONCERNING THE PROTECTION OF PERSONAL DATA
In connection with the protection of personal data, you are guaranteed the rights described below, which you can exercise by email at info@soundsgood.cz.
How quickly will we handle your request? We will reply within one month at the latest. If providing the information would endanger the privacy of other persons, or if providing it would be disproportionate to the risks or costs involved, we may not be able to comply. To handle your request as quickly as possible, we may need to verify your identity. For repeated requests, the controller is entitled to charge a reasonable fee for a copy of the Personal Data.
| Right of access | We will confirm whether we process your Personal Data. You have the right to information about the purposes of processing, the categories of personal data, the recipients to whom they are disclosed, and the processing period. You have the right to know whether any right has already been exercised. This is also subject to the rights and freedoms of other persons not being adversely affected. |
| Right to rectification | You have the right to request the correction of inaccurate personal data. You can also correct some data in your user profile. |
| Right to erasure | If there is no other reason to continue processing the data, we will delete or anonymise the data you request. |
| Right to restriction of processing | Please contact us if you believe that we are processing data incorrectly, whether regarding the reasons for processing or its scope. |
| Right to notification of rectification, erasure or restriction of processing | If you contact us with a request, we will inform you of the outcome. Sometimes we may not be able to comply (e.g. the email address you wrote to us from no longer works). |
| Right to data portability | At your request, we will provide the Personal Data you have given us to another controller in a structured, machine-readable format. |
| Right to object | If we process your data on the basis of legitimate interest (e.g. sending a newsletter to Users), it is up to us to demonstrate our legitimate interest. If your objection is justified, we will stop processing the Personal Data. |
| Right to withdraw consent | If you have changed your mind, please let us know. Processing for marketing and commercial purposes can be withdrawn at any time. |
| Automated individual decision-making, including profiling | Don't want decisions about you to be made by a computer? We respect your right, which is why we do not carry out profiling. We process Orders, so your Personal Data may be processed automatically. |
7. CONCLUSION
This Privacy Policy may only be changed in writing. You will be informed of any change through our Website.
If you have any questions about our Privacy Policy, please contact us at info@soundsgood.cz.
If you are not satisfied, you can file a complaint at any time with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice (more at https://www.uoou.cz/).
This Privacy Policy is effective from 19 October 2026.
