null

Privacy policy

Privacy Policy – Signal Sounds Europe

Last updated: February 25, 2026

1. Definitions

For the purposes of this Policy:

  • Administrator / Controller:
    Sound Of You Sp. z o.o.
    KRS: 0001183687
    NIP: 5243045028
    REGON: 542237136
    Address: ul. Staniewicka 14A/16, 03-310 Warsaw, Poland
  • Brand: Signal Sounds Europe – a trading name used by Sound Of You Sp. z o.o.
  • GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  • Service / Website: the website operated by the Controller at: signalsounds.eu and/or soundofyou.eu (and any related subdomains).
  • User: any natural person visiting the Website or using one or more services or functionalities described in this Policy.

The Controller is the entity that determines the purposes and means of processing your personal data in connection with using the Website, placing orders, and using our services.

2. Scope of data processing

In connection with the use of the Website and our services, we process personal data to the extent necessary to:

  • provide you with access to the Website,
  • handle enquiries and orders,
  • conclude and perform contracts for the sale of goods and related services,
  • fulfil legal obligations, and
  • conduct analytics and marketing.

The detailed purposes, legal bases and retention periods are described in the sections below.

3. Categories of personal data we process

We may process in particular the following categories of data:

  • Identification and contact details: first name, last name, email address, telephone number, billing and delivery address, company name and tax number where applicable.
  • Account data: login/email, password (stored in hashed form), account settings, purchase history.
  • Order and transaction data: ordered products, order number, payment method, partial payment details (e.g. masked card data via payment provider), delivery method, tracking information, complaints/returns.
  • Communication data: content of emails, messages sent via our contact form, live chat, or social media, and basic metadata (date, time, channel).
  • Marketing data: your marketing preferences, newsletter subscriptions, information about your interests (e.g. wishlists, viewed products, purchase categories).
  • Technical/usage data: IP address, device and browser information, log data, cookie identifiers, information how you navigate our Website (visited pages, click paths, errors).
  • Recruitment data (only if you apply for a job): CV/resume, employment history, education, skills and any other information you choose to provide.

We do not intentionally process special categories of personal data (e.g. data concerning health, religion, political opinions, etc.).

4. Purposes and legal bases of processing

Your personal data may be processed for the following purposes and on the following legal bases, in particular as required by Article 6 GDPR:

4.1. Provision of the Website and basic services

  • Providing access to the Website, displaying content, ensuring basic functionality (such as cart and checkout), maintaining sessions, and ensuring IT security.
  • Legal basis: necessity to perform a contract or to take steps prior to entering into a contract, at your request (Article 6(1)(b) GDPR), and our legitimate interest in operating and securing the Website (Article 6(1)(f) GDPR).

4.2. Orders, contracts and customer service

  • Handling orders placed via the Website or other sales channels, including: order confirmation, payment processing, delivery, invoicing, complaints, returns and warranty/guarantee handling.
  • Communication with you regarding your orders and related services (e.g. status updates, delivery issues, product availability).
  • Legal basis: necessity to perform a contract or to take steps prior to entering into a contract (Article 6(1)(b) GDPR) and fulfilling legal obligations, in particular tax and accounting obligations (Article 6(1)(c) GDPR).

4.3. Contact forms and direct communication

  • Handling your enquiries submitted through contact forms, email, phone or social media.
  • Legal basis: necessity to perform a contract or to take steps prior to entering into a contract at your request (Article 6(1)(b) GDPR) or our legitimate interest in responding to enquiries and building customer relations (Article 6(1)(f) GDPR).

4.4. Analytics and statistics

  • Analysing how Users use the Website (e.g. pages visited, time spent, errors, conversion data) in order to improve the Website, products and services.
  • Conducting statistics on the use of contact forms, Website functions and sales channels.
  • Legal basis: our legitimate interest in improving the Website, services and user experience (Article 6(1)(f) GDPR).

4.5. Marketing and personalisation

We process personal data for marketing purposes, which may include:

  • Contextual advertising – displaying marketing content that is not tailored to your individual profile (e.g. banners about our products on the Website).
    • Legal basis: our legitimate interest in promoting our products and services (Article 6(1)(f) GDPR).
  • Direct marketing – sending newsletters and email communications about products, promotions, events and news.
    • Legal basis: your consent (Article 6(1)(a) GDPR) and, where permitted, our legitimate interest in direct marketing to existing customers (Article 6(1)(f) GDPR).
    • You can withdraw your consent or object to direct marketing at any time, e.g. by using the unsubscribe link in each marketing email.
  • Behavioural/targeted advertising and profiling – using cookies and similar technologies to analyse your behaviour (e.g. viewed products, clicks, purchase history) and show you marketing content more closely aligned with your interests.
    • Legal basis: your consent to the use of non-essential cookies and similar technologies for marketing purposes (Article 6(1)(a) GDPR).
    • You can withdraw your consent at any time via our cookie banner/settings or your browser settings.

Profiling used for marketing purposes does not produce legal effects concerning you or similarly significantly affect you; it is used mainly to adjust offers, recommendations and advertising to your interests.

4.6. Claims, security and compliance

  • Establishing, pursuing or defending legal claims (e.g. in case of payment disputes or warranty issues).
  • Ensuring IT and data security, preventing fraud and abuse, monitoring access to systems.
  • Fulfilling legal obligations arising from EU or national law, including consumer, accounting and tax regulations.
  • Legal basis: our legitimate interest in protecting our rights, preventing abuse and ensuring security (Article 6(1)(f) GDPR) and fulfilment of legal obligations (Article 6(1)(c) GDPR).

4.7. Recruitment

  • Processing personal data of candidates applying for jobs at Sound Of You Sp. z o.o.
  • Legal basis: necessity to take steps at the request of the data subject prior to entering into an employment contract (Article 6(1)(b) GDPR) and, where required by local labour law, your consent (Article 6(1)(a) GDPR).

5. Obligation to provide data and consequences of not providing them

Providing personal data is voluntary, but in many cases necessary to:

  • conclude and perform a contract for the sale of goods or related services (e.g. we cannot process an order without your identification and contact details),
  • respond to your enquiry (we may not be able to answer if you do not provide at least an email address or other contact channel).

Where data are required by law (e.g. for tax/accounting purposes), failure to provide them may prevent us from fulfilling our legal obligations and therefore from performing the contract.

For marketing and non-essential cookies, providing your data and granting consent is voluntary, and refusal or withdrawal of consent will only result in not receiving marketing content or personalised offers.

6. Cookies and similar technologies

Our Website uses cookies and similar technologies. Cookies are small text files stored on your device (computer, smartphone, tablet) by your browser. They may be read by us or by our partners (e.g. Google). They usually contain the name of the website, storage time and a unique identifier.

6.1. Types and purposes of cookies

We use the following categories of cookies:

  • Necessary cookies – required for the proper functioning of the Website (e.g. maintaining a session, remembering cart contents, security). Without them, the Website or some of its functions may not work correctly.
  • Functional cookies – used to remember your choices and settings (e.g. preferred language, saved addresses), in order to improve convenience.
  • Analytical/statistical cookies – help us understand how Users use the Website (e.g. which pages are most visited, how Users navigate), which allows us to improve the Website.
  • Marketing cookies – used to display advertising tailored to your interests, including on other websites (behavioural advertising).

Some cookies are set by third-party providers (e.g. Google) and are subject to their privacy and cookie policies.

6.2. Legal basis and consent

  • Necessary cookies are used on the basis of our legitimate interest in ensuring the proper functioning and security of the Website (Article 6(1)(f) GDPR).
  • Functional, analytical and marketing cookies are used on the basis of your consent (Article 6(1)(a) GDPR), expressed via the cookie banner/settings. You can withdraw your consent at any time.

6.3. Cookie management

By default, most browsers allow the use of cookies. You can change your browser settings to block cookies or to notify you each time a cookie is placed. Instructions for managing cookies can typically be found in the help section of your browser (e.g. Chrome, Firefox, Safari, Edge).

Disabling or restricting cookies may cause difficulties in using the Website and limit some of its functionality.

7. Recipients and categories of recipients of personal data

In connection with the provision of services and operation of the Website, your personal data may be disclosed to the following categories of recipients:

  • IT and hosting providers – companies providing hosting, maintenance, development and security of our IT systems and Website (e.g. server providers, CDN providers such as Cloudflare).
  • Payment service providers – entities processing payments (e.g. card payments, online transfers, digital wallets).
  • Courier and logistics companies – entities delivering your orders, handling returns and claims.
  • Product suppliers and distributors – where necessary, for example for direct shipment (drop-shipping), warranty handling or repairs.
  • Marketing and analytics providers – entities supporting us in conducting analytics, statistics and marketing (e.g. Google – Google Analytics, advertising platforms).
  • Customer support tools – providers of email, CRM and live chat software used to manage communication with you.
  • Accounting and legal service providers – entities providing accounting, tax and legal services.
  • Public authorities – where required by law, e.g. tax offices, courts, law enforcement authorities.

In some cases, and only if you have given your explicit consent, your personal data may be disclosed to other entities for their own marketing purposes.

All entities processing personal data on our behalf are bound by contracts that ensure appropriate safeguards and compliance with GDPR.

8. Data processing within the EEA

Your data is primarily processed within the European Economic Area (EEA) by us and by entities cooperating with us that are required under GDPR to maintain high standards of data protection.

Examples include:

  • Cloud and infrastructure providers located within the EEA,
  • Call handling or callback tools such as Callpage sp. z o.o. (Mokotowska 1, 00-640 Warsaw, Poland) – data collected via such tools generally do not allow us to directly identify a specific individual without additional information.

9. Data transfers outside the EEA

Some of our service providers may be located outside the EEA (e.g. in the United States). In such cases, we ensure that an adequate level of data protection is provided, in particular by:

  • using countries for which the European Commission has adopted an adequacy decision, or
  • concluding Standard Contractual Clauses (SCCs) adopted by the European Commission with the relevant recipients, and – where necessary – applying additional technical and organisational safeguards (e.g. encryption, pseudonymisation).

For example, for services provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), we rely on appropriate contractual safeguards and Google's internal data protection measures. You can find more information about how Google processes data at: https://policies.google.com/privacy/partners.

Where required by law, we will provide you with additional information about specific transfers outside the EEA upon request.

10. Retention periods

The period for which we process your personal data depends on the type of data and the purpose of processing:

  • Data related to orders and contracts: kept for the duration of the contract and thereafter for the period required by tax and accounting regulations (typically up to 5–6 years, depending on applicable law) and for the limitation period of potential claims.
  • Account data: stored for as long as you have an active account; after account deletion, some data may still be kept for the period necessary to comply with legal obligations or to defend claims.
  • Data from contact forms and communication: stored for the time necessary to handle your enquiry and for a period needed to secure potential claims (typically up to 3 years).
  • Marketing data (including data used for direct marketing and newsletters): stored until you withdraw your consent or object to processing, and for a limited period thereafter to document the fact of consent and its withdrawal (typically up to 2–3 years).
  • Data used for analytics: stored for the time necessary to perform analyses and compile statistics, usually in aggregated or pseudonymised form where possible.
  • Recruitment data: stored for the duration of the recruitment process and, with your consent, for a longer period indicated at the time of consent for future recruitment (e.g. 6–12 months).

After the expiry of the relevant period, personal data are irreversibly deleted or anonymised.

11. Your rights under GDPR

You have the following rights in connection with the processing of your personal data:

  • Right of access – to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of your data.
  • Right to rectification – to have inaccurate or incomplete personal data corrected.
  • Right to erasure ("right to be forgotten") – to request deletion of your data in cases provided for by law (e.g. where data are no longer necessary for the purposes for which they were collected, or you withdraw your consent and there is no other legal basis for processing).
  • Right to restriction of processing – for example, when you contest the accuracy of the data or object to processing, for the period of verification.
  • Right to data portability – to receive your data in a structured, commonly used and machine-readable format, and to transmit them to another controller, where processing is based on consent or contract and is carried out by automated means.
  • Right to object – at any time, to processing of your data based on our legitimate interests, including profiling; in particular you have an absolute right to object to the processing of your data for direct marketing purposes.
  • Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of the above rights, please contact us using the details provided in section 12.

You also have the right to lodge a complaint with the supervisory authority responsible for data protection:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warsaw, Poland
https://uodo.gov.pl

12. Contact details

If you have any questions about this Policy or the processing of your personal data, or if you wish to exercise your rights, you can contact us at:

  • Email: info@signalsounds.eu
  • Postal address:
    Sound Of You Sp. z o.o.
    ul. Staniewicka 14A/16
    03-310 Warsaw
    Poland

We will respond to your request within the time limits set out in GDPR (as a rule, within one month).

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, in particular to reflect changes in the law or in how we process personal data. The current version of the Policy is always available on our Website and applies from the date indicated at the top of the document.