PRIVACY POLICY 

Padovafurs Srl (“Padovafurs“), REA N° PD-110457 and VAT N°00221060288 with registered office in Via Marsala 38, 35122 Padova, Italy, takes your data protection rights and our legal obligations seriously. This Privacy Policy (“Policy“) describes how we use your personal data collected via www.padovafurs.it, www.tosato1928.it and bunitaly.shop  (“Websites“), and by other means (e.g., via social media, cookies, etc.). Please read this Policy carefully.

Data Controller: Padovafurs Srl, Via Marsala 38, 35122 Padova, Italy, e-mail: info@padovafurs.it. You can contact us at this address for any question about this Policy and to exercise the rights described in Section 8.

Last updated: October 2026

 

  1. PERSONAL DATA WE MAY COLLECT ABOUT YOU

We will collect various types of personal data about you for the purposes described in this Policy, including:

  • Contact information (such as your name, email address, postal address, telephone number and any other personal data) that you provide by completing forms on the Websites, including if you subscribe to our newsletter and register and create an account on the Websites, or by completing registration forms, including online forms, for our events and private sales (such as sample sales);
  • Details of any transactions made by you;
  • Personal data that may be contained in communications you send to us, for example to report a problem or to submit queries, concerns or comments regarding the Websites or their content;
  • Information from surveys that we may, from time to time, conduct on the Websites for research purposes, if you choose to respond to, or participate in, them;
  • Payment information (card payments are processed directly by our secure payment service providers, and Padovafurs does not store your full card details);
  • Information about your use and navigation of our Websites, such as your IP address and other device identifiers, your operating system and browser type, and information about the Websites’ pages you visit, collected by cookies or other tracking technologies; and
  • Personal information collected from third parties, such as data that you agree to share with us on publicly accessible social networks (e.g., Facebook, Instagram, etc.) and/or that we may collect from other publicly accessible databases. In such cases, we will inform you of the source of the data at the latest at the time of our first communication with you, and in any case within one month of obtaining them.

 

You are under no obligation to provide any such information. Providing your personal data to us (in particular, your personal details, your email, your address, your payment information and bank code and your telephone number) is necessary for processing your order for the purchase of products on the Websites, supplying other services provided on the Websites upon your request, or when your personal data is needed to fulfil obligations required by law or regulations. The refusal to provide us with any personal data necessary for performing the above purposes may consequently prevent us from processing your order for the purchase of products sold on the Websites or fulfilling obligations required by law and other regulations. Therefore, failure to provide personal data may constitute, in some cases, a legitimate and justified reason for not processing your order for the purchase of products sold on the Websites or not providing the Websites’ services.

Disclosure of further personal data to us other than that required for fulfilling legal or contractual obligations and to properly browse our services with necessary traffic data is, on the contrary, optional and does not have any effect on the use of the Websites and of its services or on the purchase of products on the Websites. We will inform you at every step whether disclosing your personal data to us is required or optional by marking with an appropriate symbol (*) the information that is required or data needed for the purchase of products and/or for the provision of requested services on the Websites.

 

  1. MINIMUM AGE

Protecting the safety and privacy of children is very important to us. We do not accept registrations or orders submitted by, and will not knowingly collect or use personal data from anyone under the age of 18 years, or any other age limit set out by the law of his/her country of residence. By registering or making any purchase on the Website, you confirm that you have reached the age of majority in your country of residence.

 

  1. COOKIES

Our Website uses cookies. More information can be found in our Cookies Policy.

 

  1. USE MADE OF YOUR PERSONAL DATA

Whenever we process your personal data, we do so on the basis of a lawful “justification” (or legal basis) for processing. In the majority of cases, the processing of your personal data will be justified on one of the following bases:

  • processing is necessary to perform a contract with you or take steps that you have requested in order to enter into a contract (e.g., sale contract);
  • processing is necessary for us to comply with a legal obligation;
  • processing is in our legitimate interests as a business, and our interests are not overridden by your interests, fundamental rights or freedoms. Our legitimate interests may include our interest in using customer and Website user personal data to conduct and develop our business activities (including by carrying out standard marketing activities), with current and potential customers and Website users; and in establishing, exercising or defending legal claims; or
  • processing is based on your prior explicit consent, such as segmented and customized marketing activities.

In particular, we process your personal data for the following purposes:

  • Orders, contracts and requests: to manage your orders, your account, our commercial relationship and your requests for information. Legal basis: performance of a contract or pre-contractual steps taken at your request. Retention: for the duration of the relationship and thereafter for 10 years, to comply with tax and accounting obligations; requests not followed by a contract are kept for 3 years from the last contact.
  • Events and private sales: to manage your registration for and participation in our events and private sales (such as sample sales), including sending you practical information about the event. Legal basis: performance of pre-contractual steps taken at your request. Retention: 12 months from the end of the event, unless you have consented to receive marketing communications or you make a purchase, in which case the corresponding retention periods apply.
  • Legal obligations: to comply with tax, accounting and other obligations under applicable law. Legal basis: legal obligation. Retention: 10 years, or the longer period required by law.
  • Marketing communications: to send you newsletters and information about the products, collections, events and promotions of our brands (including TOSATO 1928 and BUN), by e-mail and, where you have provided your telephone number, by SMS or instant messaging. Legal basis: your consent or, for existing customers and for products similar to those already purchased, our legitimate interest (Art. 130(4) of the Italian Privacy Code), without prejudice to your right to object at any time. Retention: until you withdraw your consent or object, and in any case no longer than 24 months from your last interaction with us, unless renewed.
  • Profiling and personalised marketing: to send you communications tailored to your preferences and purchases. Legal basis: your consent. Retention: until you withdraw your consent, and in any case no longer than 12 months from the collection of the data used for profiling, unless renewed.
  • Operation, security and analytics of the Websites: to ensure the functioning and security of the Websites and to improve them. Legal basis: our legitimate interest or, for non-technical cookies, your consent. Retention: as indicated in the Cookies section below.
  • Legal claims: to establish, exercise or defend our rights in legal proceedings. Legal basis: our legitimate interest. Retention: for the applicable statute of limitations period.

 

  1. DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to any of our affiliate companies, or to our service providers who assist us in providing the services we offer, processing transactions, fulfilling requests for information, receiving and sending communications, updating marketing lists, analysing data, providing support services or in performing other tasks, from time to time. These service providers include, for example, providers of online forms, e-mail marketing and cloud services (such as Google and Brevo), acting as data processors on our behalf.

Your personal data will be accessible by authorized personnel of Padovafurs and service providers acting on our behalf on a need-to-know basis.

Your personal data will be processed by Padovafurs within the European Union. Where it is necessary to collaborate with third parties located outside the European Union, or to transfer data to cloud systems located outside the European Union, the transfer of your personal data will take place only on the basis of an adequacy decision of the European Commission (including, for the United States, the EU-US Data Privacy Framework, limited to certified recipients), the Standard Contractual Clauses adopted by the European Commission, Binding Corporate Rules or other appropriate safeguards provided for by Articles 44-49 of Regulation (EU) 2016/679 (GDPR). You may obtain information on the safeguards adopted by contacting us at info@padovafurs.it.

We will also respond to requests for personal data where required to do so by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on us.

 

  1. SECURITY

We place great importance on the security of all personal data associated with our users. We have adopted security measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access. For the best possible protection of your personal data outside the limits of our control, your device should be protected (such as by updated antivirus systems) and your internet service provider should take appropriate measures for the security of network data transmission (such as, for example, firewalls and anti-spam filtering).

While we take reasonable steps to protect your personal data, we cannot guarantee that the personal data you disclose to us will be 100% secure, nor that any data breach will not occur.

In the event of a personal data breach, we will notify the competent supervisory authority and, where required, inform you without undue delay, in accordance with applicable law.

 

  1. RETENTION OF YOUR PERSONAL DATA

Our general approach is to retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. The specific retention periods applicable to each processing purpose are set out in Section 4. Where no specific retention period is indicated, we will retain personal data only for as long as necessary for the relevant purpose, taking into account applicable legal, tax, accounting and limitation periods.

In specific circumstances we may also retain your personal data for longer periods of time corresponding to the applicable statute of limitations so that we have an accurate record of your dealings with us in the event of any complaints or challenges.

 

  1. YOUR RIGHTS

You have the following rights with respect to your personal data:

  • Right to withdraw consent – where applicable, you have the right to withdraw your consent at any time.  For example, if you wish to opt-out of receiving electronic marketing communications, you can change your settings in your account on the Websites, use the ‘unsubscribe’ link provided in our emails or contact us directly and we will stop sending you communications.
  • Right of access, rectification and erasure– you have the right to request access to and obtain a copy of any of your personal data that we may hold, to request correction of any inaccurate data relating to you. You also have the right to request the erasure of your personal data where, among other cases, it is no longer necessary for the purposes for which it was collected, you have withdrawn your consent or you have objected to the processing.
  • Right of data portability– Under certain conditions, you have the right to receive all such personal data which you have provided to us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.
  • Right to restriction of processing – you have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or assess an objection you have raised.
  • Right to object – you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests. You may also object at any time, without giving any reason, to the processing of your personal data for direct marketing purposes, including profiling related to such marketing.
  • Right to lodge a complaint – if you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

To exercise your rights, you can contact us at any time at info@padovafurs.it or by post at Padovafurs Srl, Via Marsala 38, 35122 Padova, Italy. We will respond without undue delay and in any case within one month of receiving your request; this period may be extended by two further months where necessary, taking into account the complexity and number of requests, in which case we will inform you.

 

  1. CHANGES TO THIS POLICY

We may occasionally change this Policy, for example, to comply with new requirements imposed by the applicable laws or technical requirements. We will post the updated Policy on the Websites. We may also notify you in case of material changes and seek your consent to those changes, where required by applicable law. You are thus encouraged to periodically review this page.

 

 

COOKIES

  1. WHAT IS A COOKIE?

 Cookies are text files containing small amounts of information that a user’s device (computer, tablet or mobile) downloads when it visits a website. They allow the site to “remember” your computer, but not specifically who is using it, and improve your user experience. By associating the identification numbers in the cookies with other customer information when, for example, you log-in to the site, then we know that the cookie information relates to you

 

  1. WHAT IS THE SCOPE OF COOKIES?

Cookies are used generally for different purposes, such as letting the user navigate between pages efficiently, implementing the user’s preferences and generally improving their browsing experience, by customizing the website according to their navigation and user profile. They can also help ensure that the adverts that the user sees online are more relevant to them and their interests.

 

  1. WHAT COOKIES DO WE USE?

Technical Cookies

Based on the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority (Garante) dated 10 June 2021, technical cookies include navigation or session cookies, functionality cookies and analytics cookies, the latter only where they are used to produce aggregated statistics, with measures that reduce their identifying power (such as masking part of the IP address), and are not combined with other information.

We do not need to seek your consent to use these cookies.

  • Navigation or Session Cookies: These cookies are strictly necessary session cookies essential to enable you to move around the websites and use their essential features, such as accessing secure areas of the websites. These cookies include session authentication cookies. Without these cookies, necessary services such as shopping baskets or e-billing cannot be provided.

If you choose to disable these cookies, you will be unable to use our sites for ordering our products, but only for browsing.

  • Analytics: These cookies are also known as performance cookies and collect information about how you use Padovafurs’s websites, so that we can improve the quality of our sites and services.  Some examples include which pages you visit most often, whether you get error messages from web pages. Performance cookies allow us to implement these choices and optimise the way our sites work. All the information that these cookies collect is aggregated and therefore they do not collect personal identification information.  Where analytics tools do not meet these conditions (for example, third-party analytics services that are not anonymised), they are treated as profiling cookies and are used only with your prior consent, as described below.
  • Functionality Cookies: Functionality cookies allow the website to remember your online settings (such as your user name, language or location) and provide enhanced, more personalised features.

These cookies can also be used to remember changes you made to text size, fonts and other parts of web page that you can customize. They may also be used to provide services you have asked for or to prevent you from receiving services you have already refused.

 

Profiling and Third-Party Cookies

With your prior consent, we and selected third parties (such as advertising and social media platforms) may use profiling cookies and similar tracking technologies to show you advertising in line with your interests, to measure the effectiveness of our campaigns and to analyse your use of the Websites with non-anonymised tools.

These cookies are installed only if you accept them through the cookie banner displayed on your first visit to the Websites. If you close the banner without making a choice, only technical cookies will be used. You can change or withdraw your consent at any time through the cookie settings link available on the Websites, without affecting the lawfulness of processing carried out before the withdrawal.

 

  1. INFORMATION SHARING

We do not share information collected through the use of cookies with any third party, except with our IT service providers (e.g. hosting providers) and, only for the profiling cookies you have consented to, with our advertising agencies/providers, exclusively for the purposes set out above.

 

  1. HOW TO MANAGE YOUR COOKIE PREFERENCES

At any time, you can accept, decline or withdraw your consent to non-technical cookies through the cookie settings link available on the Websites. You can also manage or delete cookies by changing your browser application settings.

Please note that if you disable completely cookies from the browser, then it is possible that some parts of our websites will not function properly such as the normal surfing of the site or the purchase activity.

 

  1. HOW TO CONTACT US

If you want to know more about cookies, have any question or want to send us suggestions, please contact us at Padovafurs Srl, Via Marsala 38, 35122 Padova, Italy. E-mail: info@padovafurs.it