Data collected only where the auction process needs it.
Edition of 24 September 2026, version 2.0. Patria processes only the data needed to know who takes part in its auctions, to contact them and to manage bids, payments and security. We do not use personal data for marketing, and we do not sell it or pass it on to third parties for commercial purposes.
The Italian notice is the original version. Translations are provided for accessibility; data-subject rights are not reduced by a translation difference.
Controller and contacts
TSURIKA MARIYA, sole proprietorship, EU VAT IT07485510486, REA FI - 707146, registered office Via degli Alfani 8, 50121 Firenze (FI), Italia, acts as data controller for Patria services. Auction office: Via dei Servi 25, 50122 Firenze (FI), Italia.
Requests about personal data can be sent to info@patria.auction, by telephone to +39 334 878 7874, or by certified email (PEC) to tsurikam@pec.it. No data protection officer is appointed for the current scope of processing; this is reassessed if the scale or risk of processing changes.
Data we process and why
To register we ask for your first and last name, email address, telephone number, country and confirmation that you are at least 18 years old and, if you choose to give them, a bidding limit and a message. Your password is stored only in a non-reversible hashed form and cannot be seen by anyone, including Patria personnel.
During an auction we process bids, followed lots and knock-downs; after the sale, invoices, payments, collection or shipping, correspondence and complaints. When the law or fraud prevention requires it, for example for high amounts, we may ask the successful bidder for an identity document at the payment stage.
To keep the service secure we process technical request data: IP address, date and time, the page or function requested, the outcome, the browser type and technical signals from the anti-bot check and the device (such as language, time zone and screen size). They are used only to prevent abuse, unauthorised access and fraud, and never for advertising or profiling.
The service is only for persons aged 18 or over: Patria does not knowingly process data of minors.
Patria does not use personal data for marketing, does not sell it and does not pass it on to third parties for commercial purposes.
Notifications to Patria personnel
Authorised Patria personnel receive, by email and through Patria's private Telegram bot, the notifications they need for their work: new registrations (name, contact details, country, stated limit, message and confirmation of age 18+) and bids, knock-downs and payments (name, contact details, lot and amount). Notifications contain no passwords and no technical device data.
These messages remain in the mailboxes and Telegram history of authorised personnel; access is limited to the people who run the auctions.
Legal basis
We process data on the basis of pre-contractual measures and performance of the contract (account, bids, knock-down, payment, delivery and support), legal obligations (tax, accounting and anti-money-laundering) and Patria's legitimate interest in protecting the platform, participants and the proper conduct of auctions from abuse and fraud.
Bidding is enabled automatically once the email address is confirmed; the anti-bot check and bid acceptance follow predefined technical rules. Patria uses no advertising profiles and no hidden scores. You may ask for a block or suspension of your account to be reviewed by a person. Consent would be requested only for analytics or marketing, which are not active.
Essential cookies and technical tools
The site uses only first-party technical cookies and, on protected forms, the Cloudflare Turnstile anti-bot tool. The information banner records only that you have seen the notice about technical cookies: it does not enable analytics, profiling, remarketing or advertising pixels. Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, heatmaps, remarketing, advertising networks and third-party chat widgets are not active.
patria_cookie_notice — a Patria technical cookie that remembers that you have seen the cookie banner, so that it is not shown on every visit. Duration: 180 days. Set by the server for the patria.auction domain only (HttpOnly, SameSite=Lax, Secure).
sb-*-auth-token — a technical authentication cookie that keeps you signed in after you log in to your account and allows the session to be renewed securely. Duration: up to 400 days from the last sign-in or session renewal; it is set only after you sign in and is deleted when you sign out.
Cloudflare Turnstile — an anti-bot tool loaded only on protected forms (registration, sign-in and operational forms). It may process temporary tokens, network and device signals and, where the check requires it, strictly necessary cookies or local storage. Patria does not use this data for advertising or marketing.
patria_telegram_admin — a technical cookie reserved for authorised personnel who use Patria's operations panel in Telegram: it keeps the signed work session for up to 12 hours. It is never set for visitors or bidders.
Retention and required data
Bids, knock-downs, invoices, payments and accounting records are kept for the period required by civil and tax law (in Italy generally ten years) and, where necessary, for the duration of a dispute or of a legal retention obligation.
Account data are kept while the account is active. On a deletion request, or after a long period of inactivity, they are deleted or anonymised, except for data that the law or a pending dispute requires us to keep.
Server security logs containing IP addresses are kept for 90 days, unless they are needed to investigate an incident or a dispute already under way. Rotating backups follow the documented technical schedule.
Identity and contact data are necessary to register and bid: without them Patria cannot create a protected account, accept a bid or complete a sale.
Rights and complaints
You may request access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interest, within the limits of legal, accounting and anti-fraud obligations. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Requests should be sent to info@patria.auction; Patria replies within one month, as required by Regulation (EU) 2016/679.
You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that the processing infringes applicable law.
Recipients and transfers
The site and the database (Supabase, operated directly by Patria) run on Hetzner servers. Emails are sent and received through the Hostinger mail service. The anti-bot check on protected forms is provided by Cloudflare Turnstile, and operational notifications to personnel pass through Telegram (Bot API).
Where necessary, data are also received by the mailboxes and work devices of authorised personnel and, when required, by professional advisers, banks, carriers, customs and public authorities.
Cloudflare, Telegram or providers' technical support may involve processing or access outside the European Economic Area. In that case Patria relies on an adequacy decision, standard contractual clauses or another safeguard provided by law, and limits the data sent to the minimum necessary.
Privacy contact
PEC tsurikam@pec.it
+39 334 878 7874 / Via dei Servi 25, 50122 Firenze (FI), Italia
The Italian notice is the original version. Translations are provided for accessibility; data-subject rights are not reduced by a translation difference.