Data collected only where the auction process needs it.
Patria processes only the data needed to operate bidder accounts, participation, security, bids, watchlists and post-sale settlement. Non-essential marketing tracking is not active.
The Italian notice is the original version. Translations are provided for accessibility; data-subject rights are not reduced by a translation difference.
Controller and contacts
TSURIKA MARIYA, sole proprietorship, EU VAT IT07485510486, REA FI - 707146, registered office Via degli Alfani 8, 50121 Firenze (FI), Italia, acts as data controller for Patria services. Auction office: Via dei Servi 25, 50122 Firenze (FI), Italia.
Privacy requests can be sent to info@patria.auction, by telephone to +39 334 878 7874, or by certified email to tsurikam@pec.it. A DPO is not appointed for the current processing scope; that position is reassessed if the scale or risk of processing changes.
Data categories and purpose
The platform processes registration data supplied by the buyer, including name, birth date, telephone, email, country, requested limit and correspondence, together with bids, watchlist activity, invoices, settlement and complaint records.
Security data can include IP address, approximate IP country, user agent, browser language, screen and viewport size, time zone, touch capability, automation indicators, Cloudflare request identifiers, rate limits and server audit events. These signals support abuse and fraud prevention; they are not used for advertising.
Operational notifications about registrations, bids and post-sale work may be sent to authorized staff through the private Patria Telegram bot. The notice content is limited to information needed for the staff action.
Legal basis
The main legal bases are pre-contractual measures and contract performance, legal and accounting obligations, platform security and Patria's documented legitimate interest in protecting buyers, sellers, staff and audit trails.
Registration eligibility, anti-bot checks and bid acceptance use deterministic technical rules. Patria does not use advertising profiles or a hidden credit score. A user may request human review of a blocked or suspended account. Consent is reserved for future non-essential analytics or marketing, which are not active.
Cookies and tracking
The cookie notice records acknowledgement of essential technical cookies only. It does not enable profiling, remarketing or advertising pixels.
Security and anti-abuse services, including Turnstile on protected forms, may process short-lived challenge tokens, network and device signals and strictly necessary challenge storage. Patria does not use those signals for marketing.
Retention and required data
Bid, award, invoice, payment and accounting records are normally retained for the statutory civil and tax period, generally up to ten years, and longer only for an active claim or legal hold.
Account and application data without a transaction are reviewed after closure or prolonged inactivity and normally deleted or anonymized within 24 months unless security, fraud, dispute or legal duties require longer retention. Security logs are normally retained for up to 12 months; rotating backups follow the documented infrastructure schedule.
Providing identity, contact and account-security data is necessary to register and bid. Without it Patria cannot create a protected account, accept a bid or complete the sale. Marketing data is not required.
Rights and complaints
Data subjects may request access, rectification, update, portability where applicable, restriction, objection or deletion where compatible with legal, accounting, anti-fraud and dispute-retention duties. They may also withdraw a consent where consent is the legal basis, without affecting prior lawful processing.
A complaint may also be submitted to the Italian Data Protection Authority when the data subject believes that processing violates applicable law.
Providers and transfers
Current categories of recipient include Hetzner hosting, self-hosted Supabase services, Hostinger Mail, Cloudflare Turnstile, the Telegram Bot API used for restricted staff operations, professional advisers, banks, insurers, carriers, customs or public authorities where necessary.
Patria aims to use European infrastructure where practical. Cloudflare, Telegram or provider support and sub-processors may involve access outside the EEA. Where required, Patria relies on an adequacy decision, standard contractual clauses or another lawful transfer safeguard and limits the data sent to the operational minimum.
Privacy contact
support@patria.auction / support@patria.auction
+39 334 878 7874 / Via dei Servi 25, 50122 Firenze (FI), Italia
The Italian notice is the original version. Translations are provided for accessibility; data-subject rights are not reduced by a translation difference.