This site uses no cookies, does not track its visitors and carries no advertising. The only personal data we process is what you choose to leave us through the contact forms. Below, in plain words, what we collect and how we look after it.
The site is operated jointly by:
Bibliopathos S.r.l., via Enrico Toti 1, Verona, Italy, VAT IT05786460963
Bibliopathos Fine Arts S.r.l., viale Regina Giovanna 15, Milan, Italy, VAT IT11084230967
You may contact either company; the single point of contact for any request concerning your personal data is enzoferro@bibliopathos.it.
How we divide responsibilities. The two companies are joint controllers and have entered into the agreement required by art. 26 GDPR. In summary: Bibliopathos Fine Arts S.r.l. is responsible for running the website and IT systems, the privacy notice, security, relations with technical providers, keeping records of consent and responding to your requests; Bibliopathos S.r.l. contributes its own items and contacts to the shared catalogue and processes the data of customers interested in its items. You may nevertheless exercise your rights with either company. Further information on the content of the agreement is available on request.
"Request information" form. Name, email, phone (optional) and your message, together with the reference of the item you are interested in. We use them only to answer your enquiry and handle the possible transaction (pre-contractual steps taken at your request, art. 6.1.b GDPR).
Newsletter. Your email address and any interest categories you select, to send you our news: catalogues, fairs, new arrivals. The legal basis is the consent you give by subscribing (art. 6.1.a GDPR); you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal. We use the interest categories only to choose which communications to send you, not to profile you.
"What are you looking for?" form (desiderata). Name, email and a description of what you seek, so that we can let you know when a matching item becomes available. The basis is measures taken at your request and, for the subsequent contact, your consent.
Technical logs. Like every website, the server hosting bibliopathos.it (Aruba S.p.A., Italy) automatically records technical connection data, including IP addresses, for the security and operation of the site. The basis is our legitimate interest in keeping the site secure and working (art. 6.1.f GDPR). We do not use them to identify visitors.
Providing your data is optional; without the necessary data (for example name and email) we will not, however, be able to reply to you, subscribe you or handle your request.
Messages from the forms are stored in our contact archive on Supabase, a database hosted in the European Union (Ireland), and are delivered to us by email through Aruba (Italy). These providers act as data processors, exclusively on our behalf and on our instructions. We also receive a real-time alert through Telegram, which however contains none of your personal data (only the notice that a new contact has arrived and the file reference). We do not sell or pass on your data to third parties for their own marketing.
The form data is stored and processed within the European Union (Supabase, Ireland; Aruba, Italy). The company we hold the database contract with is Supabase Pte. Ltd, which is based in Singapore: the relationship is therefore governed by the standard contractual clauses approved by the European Commission, incorporated by the data processing agreement we have with it. Keeping the data in Ireland is an explicit choice of ours, which the agreement binds the provider to respect. The Telegram alert does not involve any transfer of personal data, as it contains none.
On the catalogue pages the indicative price in US dollars is calculated using an exchange rate that we update periodically and publish on this same site, together with the date it refers to. Your browser does not contact any external service to obtain it: no third party learns of your visit.
This site uses no cookies, whether its own or third-party, and no tracking or profiling tools. We carry out no profiling and no automated decision-making. This is why no banner is shown to you.
Information requests and desiderata that lead nowhere: up to 24 months, then deleted. Customer data (once a sale is concluded): for the duration of the business relationship and in any case for the civil and tax retention periods required by law (as a rule, ten years). Newsletter subscription: until you decide to unsubscribe. Server technical logs: a few months. You can ask us to delete your data at any time.
You may at any time ask to see the data concerning you, have it corrected or deleted, restrict its use, object to its processing and receive it in a portable format, as well as withdraw the consent given for the newsletter, by writing toenzoferro@bibliopathos.it: we will reply within one month. If you believe your data is being handled improperly, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with your local supervisory authority.
Last updated: July 2026.