Privacy Policy

1. Types of personal data processed

The following categories of personal data may be processed through the Website:

• Browsing data: IP address, device used, browser and operating system, date and time of access, visited pages, referrer, also collected by means of technical and security cookies.

• User account data: first name, last name, email address, encrypted password, company name and role (e.g. producer, agency, broadcaster), billing details (address, VAT/tax number) where requested during registration or when making a purchase.

• Usage data: saved searches, playlists created, preferences, download history and licence purchase history (e.g. blanket, creator, try‑before‑you‑buy, instant download).

• Contact and communication data: content of messages sent via contact forms or email, including licensing or support requests.

If you voluntarily send emails to the addresses indicated on the Website, this entails the subsequent acquisition of the sender’s address and any other personal data included in the communication, which are necessary to reply.

2. Purposes and legal bases for processing

Personal data collected via the Website are processed for the following purposes:

• Technical operation of the Website
  Ensuring proper functioning of the pages, session management, secure connections and prevention of abuse or fraudulent activities.
  Legal basis: legitimate interest of the Data Controller and, where applicable, compliance with legal obligations.

• Registration and account management
  Creating and managing login credentials, authentication, password recovery, profile management, saving searches and playlists, managing account settings.
  Legal basis: performance of a contract or pre‑contractual measures taken at the user’s request.

• Licence, purchase and payment management
  Providing music licensing services, including purchase of single licences, blanket licences, creator licences and try‑before‑you‑buy packages, shopping cart management, order confirmations and issuing administrative/tax documentation.
  Legal basis: performance of a contract and compliance with legal obligations in tax and accounting matters.

• Customer support and operational communications
  Responding to information requests, technical or commercial support, licence extensions, download issues or account limit issues.
  Legal basis: performance of a contract and/or legitimate interest of the Data Controller in providing efficient customer service.

• Legal compliance and defence of rights
  Fulfilling legal obligations, responding to requests from public authorities and defending the Controller’s rights in court or out of court.
  Legal basis: compliance with legal obligations and legitimate interest in protecting rights.

• Direct marketing activities (if implemented)
  Sending newsletters and promotional communications regarding 7 Floor s.a.s. services and music, via email or other contact channels provided by the user, subject to explicit consent and, where implemented, double opt‑in.
  Legal basis: consent of the user, which may be withdrawn at any time.

Providing data for contractual and legal purposes is necessary to access the Website’s services; failure to provide such data may make it impossible to create an account or conclude a licence agreement.

3. Cookies and tracking technologies

The Website uses technical cookies and, where applicable, other tracking tools. Cookie management (types, purposes, duration and how to manage preferences) is described in detail in the Cookie Policy, which is accessible from the Website. Users can express and change their preferences via the dedicated cookie consent window (“cookie notification”) provided by the Tunebud platform.

3-bis. Embedded video content (YouTube and Vimeo)

The Website uses embedded video players provided by third‑party services, specifically YouTube and Vimeo, in order to display audiovisual content and showcase 7 Floor Music’s work. When you access a page on this Website that contains an embedded video, these third‑party providers may process information about your visit and associate it with your user profile on their platforms (if you are logged in), as well as use cookies or similar technologies for technical, analytical and, where applicable, marketing purposes.

The use of YouTube and Vimeo is subject to the respective providers’ privacy policies, which you are invited to consult for further details on how they process personal data:

• YouTube / Google Ireland Limited – Privacy Policy: https://policies.google.com/privacy

• Vimeo.com, Inc. – Privacy Policy: https://vimeo.com/privacy

Where required by applicable law, YouTube and Vimeo content is only loaded after you have given your consent through the cookie and content preferences on this Website, and you can withdraw such consent at any time using the available controls.

4. Methods of processing and data retention period

Personal data are processed using electronic tools and, where necessary, paper‑based tools, in accordance with the principles of fairness, lawfulness, transparency, data minimisation and storage limitation.

In particular:

• Account, licence and billing data: retained for the duration of the contractual relationship and, thereafter, for the period required by civil and tax law (generally up to 10 years).

• Contact and support data: retained for the time necessary to handle the relevant request and, where appropriate, for an additional period based on legal defence needs.

• Data used for marketing purposes: retained until consent is withdrawn and, in any case, for no longer than 24 months from the last meaningful interaction, unless different legal obligations apply.

• Browsing data: retained for limited periods, proportionate to the security and operational purposes of the Website, unless longer retention is required in case of security incidents or requests from authorities.

5. Recipients of personal data

For the purposes described above, personal data may be disclosed to:

• staff and collaborators of the Data Controller, duly authorised and instructed;

• providers of technical and organisational services for the Website, including the Tunebud platform, acting as data processors pursuant to Article 28 GDPR and processing data according to the Controller’s instructions;

• payment service providers, legal, tax and accounting consultants and other service providers supporting the Controller’s business activities;

• public authorities and supervisory bodies, where required by law or upon their request.

Personal data are not subject to general disclosure. Any transfers outside the European Economic Area carried out via service providers (e.g. hosting, analytics tools) take place in compliance with Articles 44 et seq. GDPR, based on adequacy decisions or appropriate safeguards (such as standard contractual clauses).

6. Data subjects’ rights

As a data subject, you may exercise at any time the rights provided for in Articles 15–22 GDPR, including:

• right of access to personal data;

• right to rectification of inaccurate data or to have incomplete data completed;

• right to erasure of data (“right to be forgotten”), in the cases provided for by GDPR;

• right to restriction of processing;

• right to data portability, where applicable;

• right to object to processing based on legitimate interest;

• right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Requests may be sent to the Data Controller via email at: 7floorsas@gmail.com.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it) if they consider that the processing of their personal data infringes applicable data protection law.

7. Changes to this Privacy Policy

This Privacy Policy may be updated and amended over time. The most recent version will always be available on this page, indicating the date of the latest update.