Privacy Policy

Information on the processing of personal data "video surveillance"

Last updated: February 7, 2025

1. Who is the Data Controller (who decides what data to process and how)?

The Data Controller, as defined by Art. 4. par. 1, n. 7 of EU Regulation 2016/679 (General Data Protection Regulation, hereinafter referred to as GDPR) is Floor srl, with registered office in Via Ghisleri, 22 - 26100 Cremona (CR), CF and PI 01658620198, hereinafter referred to as the “Company”.

Pursuant to Art. 13 of the GDPR, the following information is provided regarding the processing of personal data.

2. Who are the interested parties (the recipients of this information)?

The interested party is the natural person to whom the personal data processed by the Company refers.

For the purposes of this disclosure, the interested party is anyone who accesses the Company's facility or who enters the range of the video cameras, hereinafter referred to as the "Interested Party".

3. What data is collected, the purposes and legal bases of the processing (for what reason is the data collected)?

Video surveillance (images and related footage) is carried out for organizational and production needs and/or for the protection of company assets and/or for security.

The legal basis that legitimises the processing is the legitimate interest of the Company (Art. 6.1 lett. b).

4. Is the provision of data mandatory or optional?

The provision of data, with regard to the processing referred to in the previous point 3, must be considered optional.

Any refusal by the interested party to be filmed implies that the same will not access the facility or will remain at a safe distance from the video-monitored areas.

5. Where is the data processed, how and for how long?

The data collected are processed at the Company's headquarters or at the offices of the subjects authorised to process them.

The data collected will be processed using electronic or otherwise automated, computerized and telematic tools, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in a way that guarantees their security in any case.

The data is stored for the time strictly necessary to manage the purposes for which the data is processed (“principle of limitation of storage”, art. 5, EU Regulation 2016/679) or in compliance with the deadlines set by current regulations and legal obligations. Specifically, with reference to the purposes indicated in point 3, the retention period of the recordings is 2 days.

In any case, the Company practices rules that prevent the storage of data for an indefinite period and therefore limits the storage time in compliance with the principle of minimization of data processing.

6. Who is authorised to process the data and to whom can they be communicated?

The processing of the collected data is carried out by internal personnel of the Company in compliance with current legislation.

The data collected, within the limits strictly relevant to the indicated processing purposes and if it is necessary or instrumental for the execution of the purposes themselves, may be processed by third parties appointed as external Data Processors, or, depending on the case, communicated to the subjects who will be necessary for the correct execution of the purposes set out in point 2 of this information.

The data collected may be provided in the event of a legitimate request, only in the cases provided for by law, by the Judicial Authority.

Under no circumstances and for no reason will your data be disclosed in any way.

7. Can the processed data be transferred to non-EU countries?

The data may be transferred abroad to non-European countries, and in particular to the United States, only after verification of the standard contractual clauses (Standard Contractual Clauses) adopted/approved by the European Commission pursuant to art. 46, par. 2, letters c) and d) of the GDPR or the binding rules for the company pursuant to art. 47 of the GDPR or, in their absence, pursuant to one of the derogating measures pursuant to art. 49 of the GDPR.

The transfer to the United States is authorized under the specific agreement called EU-US Data Privacy Framework (available here), for which no further consent is required.

8. What are the rights?

In relation to the personal data communicated, the interested party has the right to exercise the following rights:

1. (art. 7.3 EU Regulation 679/2016 – GDPR) withdrawal of consent;
2. (art. 15 EU Regulation 679/2016 – GDPR) access and request a copy;
3. (art. 16 EU Regulation 679/2016 – GDPR) request rectification;
4. (art. 17 EU Regulation 679/2016 – GDPR) request cancellation (“right to be forgotten”);
5. (art. 18 EU Regulation 679/2016 – GDPR) obtain the limitation of the processing;
6. (art. 20 EU Regulation 679/2016 – GDPR) receive them in a structured, commonly used and machine-readable format for the purposes of exercising the right to portability;
7. (art. 21 EU Regulation 679/2016 – GDPR) to oppose the processing.

The interested party may exercise his/her rights, as well as request further information relating to his/her Personal Data, by sending an email to [DEDICATED EMAIL ADDRESS] specifying in the subject the content of his/her request.

Requests relating to the exercise of the rights of the Interested Party will be processed without unjustified delay and, in any case, within one month of the request; only in cases of particular complexity and of the number of requests, this term may be extended by a further 2 (two) months.

We remind you that it is your right (pursuant to art. 77 of EU Regulation 679/2016 – GDPR) to lodge a complaint with the Data Protection Authority, whose contact details are available here.

9. Simplified information pursuant to art. 3.1 of the Video Surveillance Provision

The video-surveillance areas are indicated with special signs, in accordance with art. 3.1 of the Video Surveillance Provision, clearly visible in all ambient lighting conditions, where the purposes pursued are also recalled. These signs are placed before the range of action of the cameras or in any case in their immediate vicinity.