Effective as of June 27, 2024.
User Privacy Notice
1. Scope of and updates to this User Privacy Notice
Being the trusted global marketplace for insights, services and transaction solutions for commercial assets and vehicles starts with RB Global’s unrivaled commitment to customer service. As part of that commitment, we respect the privacy of our customers and users. Whether we are helping to appraise, sell, inspect, buy, refurbish, transport or finance your commercial assets and vehicles around the world, we are guided by our desire to meet your needs in a convenient, fair and transparent manner – and that includes making sure you understand how we handle personal information and what corresponding rights are available to you. This Privacy Notice applies equally to our digital handling of your information as it does to our offline collection and handling.
RB Global is a global organization with companies located around the world that operate our insights, service offerings, and multi-channel solutions for buying and selling. See a complete listing of our family of brands.
This User Privacy Notice (“Notice” or “Privacy Notice”) applies to rbglobal.com and other RB Global brand websites, services and solutions that collect information and display or link to this Privacy Notice, and that are owned and operated by a member of the RB Global group of companies. This Privacy Notice does not apply if the website, service or solution does not display or link to it or where the website, service or solution makes its own privacy notice available as follows:
Insurance Auto Auctions – US | Canada
Other than for the brands listed above, to understand which RB Global company is responsible for the collection and further processing of your personal information, see the section below entitled “Data Controllers“.
We may change this Privacy Notice at any time by posting the revised statement on this website and indicating the effective date of the revised statement. The revised Privacy Notice will be effective once posted unless we state otherwise.
We may also supplement or modify our privacy commitments in this Privacy Notice through other notices we make available to you or through contractual commitments we enter in writing.
Where we’ve provided a translation of the English language version of this Privacy Notice, such translation is provided for your convenience only. To the extent there is any inconsistency between the English language version and such translation, the English language version takes precedence.
2. Who to contact with questions or for more information
If you have any questions or comments about this Privacy Notice or our practices, you can reach our Data Protection Officer through our Data Privacy Office at:
RB Global Data Privacy Office
c/o RB Global, Inc.
Two Westbrook Corporate Center
Westchester, Illinois, 60154
Or use our privacy contact form.
3. What personal information we collect and process
Other than as part of applying for financing with Ritchie Bros. Financial Services, most of the information we collect, and process, is equipment or vehicle related information and business contact information relating to, and provided by, our customers’ employees or other representatives. In general, information is collected when a customer engages one of our brand solutions to provide services by entering a contract, creating an online account, coming into one of our auction locations, providing us information through a webform, or otherwise interacting with us. Information may also be obtained from other sources. For instance, brand solutions may share information internally, or an outside service provider is used to verify or supplement what we’ve received. In some cases, the information we obtain is generated automatically when users engage with our digital properties, such as browsing and interacting with our websites, using our mobile applications, opening our communications or engaging with our advertisements.
While our solutions are generally not targeted at individuals buying or selling for personal, family or household purposes, individuals do engage with certain of our solutions from time to time for these purposes.
Some information we obtain from you may be more sensitive in nature depending on the services you are engaging us to perform. For instance, we may require ID numbers from a driver’s license or other identity documentation to process transactions or facilitate the extension of financing to your business.
Certain of our solutions obtain and store personal information for the benefit of our corporate or government customers to provide those customers specific technology services. In those circumstances, we are acting as a service provider and collect and process that information in accordance with our customers written instructions and our contractual arrangement.
Offering you the choice of multiple solutions for different needs means that each solution operates somewhat differently. To learn more about the categories of information handled by specific solutions and their sources, read on.
3.1 Core asset disposition services
Our core asset disposition services include:
Brand | Details of Offering |
---|---|
Ritchie Bros. Auctioneers |
Offers unreserved public auctions by way of online bidding and limited onsite bidding, as well as other non-auction-related services (e.g. RB Logistics, private treaty, refurbishment) |
Marketplace-E GovPlanet SalvageSale |
Offers an online only marketplace with featured weekly online unreserved auctions Provides access to the MarketPlace-E online platform Powers sector-specific solutions GovPlanet, TruckPlanet and Salvage Sale Since you are required to have an IronPlanet account to use these specific solutions or to bid online, the categories of personal information collected, and sources, are the same |
Mascus |
Operates online public listing websites outside the US and Canada that are available through the web or a mobile app where buyers and sellers can list, sell and buy equipment privately. |
Ritchie List |
Operates an online public listing website in the US and Canada that is available through the web or a mobile app that enables a self-serve way to list, sell and buy equipment privately |
The list below describes examples of the collection and processing of personal information by category and source for the core asset disposition services. Check marks indicate the relevant brand practices.
Category: Account Registration Data
Description:
Data that identifies you – name, title, employment status, addresses, telephone numbers, email addresses, account password and in some cases, personal ID document numbers (driver’s license, passport, national or state identity card, or SSN), age, nationality, tax identification numbers, and your signature
Personal information you provide when buying or selling at an auction or by private sale, purchasing value-added services (inspections, logistics, or repair & refurbishment), creating or updating an account or otherwise interacting with us
Information from your business colleagues or partners who add you to their online account
Personal Information contained on motor vehicle titles and other equipment registration documents we handle in a transaction
Personal information you provide when posting an ad on the marketplace, inquiring about a seller’s item, registering for an account or otherwise interacting with us
Information from your organization who posts equipment ads on the marketplace
Information from third-party business data providers or publicly available sources to supplement our sales leads and prospects
Description:
Data needed to complete a check of the US Federal System for Award Management and an End User Certificate facilitating the transfer of an asset to a party outside the US Department of Defense – name, social security number or other personal ID number, date of birth, place of birth, telephone number, address, purpose of buying, signature and if applicable, their role as officer, partner or agent with the purchaser
Information US individuals provide when registering an account to bid and when buying certain GovPlanet equipment
Category: Transaction Data
Description:
Data regarding self-listings, bids, purchases, or sales in a transaction
Personal information you provide when listing, buying or selling at an auction or by private sale, purchasing value-added services or otherwise interacting with us
Information collected automatically when you use our websites, mobile apps and webservices to bid or buy
Information from other solutions operated by members of the Ritchie Bros. group of companies
Category: Payment Data
Description:
Banking information (account numbers and payment details) and credit card information necessary to process a bidding deposit or transaction
Personal information you provide when listing, buying or selling at an auction or by private sale (including PurchaseSafe), purchasing value-added services, creating or updating an account or otherwise interacting with us
Description:
Payment information (account numbers and payment details) and credit card information necessary to process ad placements or other services
Personal information you provide when listing an ad on the website or entering into a listing contract
Category: Shipping and Logistics Data
Description:
Shipping, billing, and other information you provide in connection with the purchase or shipping of an asset, as well as information required for bills of lading or customs clearance (such as tax identification numbers or other identification numbers)
Personal information you provide when listing, buying or selling at an auction or by private sale, purchasing value-added services or otherwise interacting with us
Category: Industry Preference, Interest and Feedback Data
Description:
Data regarding industry and equipment interests and preferences or assets you wish to value or sell when you complete a webform, engage with us on social media or at tradeshows, or participate in surveys, feedback forms, our online community discussion platform, contests and focus groups
Personal information you provide when interacting with us
Category: Customer Service Data
Description:
Information relating to inquiries about services, dispute resolution, and, where applicable, recorded customer service calls
Personal information you provide when interacting with us
Category: Visitor and Incident Log Data
Description:
Log data collected in connection with your entering our physical offices or auction sites, or in the event of an incident (motor vehicle collision, injury or environmental event) you are involved in or witness while onsite
Personal information you provide when visiting our offices or auction sites
Category: CCTV Data
Description:
CCTV video footage at our physical offices and sites
Personal Information collected automatically when you visit our physical offices and sites
Category: Online Account Usage Data
Description:
Data generated through actions you take which are linked to an online account, for instance when you create watchlists or saved searches, search inventory or results, change your communication and marketing preferences, enter a Ritchie Bros. Auctioneers’ auction ring online whether you bid or not (including assigned bidder numbers, bid amounts, winning bids), or register for bidding privileges on an IronPlanet marketplace, or participate in an auction
Information collected automatically when you browse or login to our website, use our mobile apps and webservice
Category: Geolocation Data
Description:
Geolocation data, including that of your mobile device when you enable the use of location services in your device settings or in app
Information from your device collected automatically when you browse or login to our website, use our mobile apps and webservices using cookies, web beacons and similar tools
Category: Device Connection Data
Description:
Computer and other device connection data, such as page view statistics, data traffic to and from websites, referral URL, your IP address, access times, browser, language settings and web server log information
Information from your device we collect automatically when you browse or login to our website, use our mobile apps and webservices, and in some cases, using cookies, web beacons and similar tools
Description:
Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, cookie ID, or IP address from which the device accessed our services
Information from your device collected automatically when you browse or login to our website, use our mobile apps and webservices using cookies, web beacons and similar tools
Information collected by our electronic signature solution service provider on our behalf when interacting with contractual and related documents we send to you
Category: Online Activity Data
Description:
Webpages of ours you visit, time of access, frequency and duration of visits, the links you click or other actions you take as part of your use of the website or mobile app
Information collected automatically when you browse or login to our website, use our mobile apps and webservices using cookies, web beacons and similar tools
Description:
Information about your activities and interactions with sponsored or featured digital advertising content or our marketing emails, such as advertisements you were shown, when and where they were shown, and whether you clicked and took any subsequent action like filling out a webform or telephoning a seller on Mascus about their equipment
Information from our advertising and analytical service providers collected automatically when you browse or login to our website, use our mobile apps and webservices using cookies, web beacons and similar tools
Information collected by our phone call analytics service provider on our behalf when you call us at a phone number (displayed for instance on our marketing landing pages or webforms)
Information collected by our phone call analytics service provider on our behalf when you call a seller at the phone number displayed on the ad listing page
Description:
Information about your usage or expected usage of our website and inquiries made to our interactive chatbot
Information collected by the third-party provider of our chatbot assistant for purposes of providing you the service on our behalf
For further information about the collection of data using cookies, web beacons and similar tools when you interact with our digital services, such as website or email communications, interact with advertisements or initiate certain telephone calls, check out “Cookies & similar technologies and your preferences” below.
We combine or link the personal information we collect from you with information we receive from the other sources identified in the chart above. Where we receive data from third parties, we try to confirm the information was lawfully collected and disclosed to us.
IronPlanet’s other technology solutions – Marketplace Direct, Super Marketplace Direct, and GovPlanet Direct –power the direct marketplaces of some of our corporate and government customers. To participate in their online sales events, you must have an IronPlanet account. We do not handle the exchange of funds or otherwise participate in the closing of any transactions between you and our direct marketplace customers. Information regarding your bidding activity – user name, location, bids placed – as a user of their direct marketplace is collected and made available to our customers for use and handling in accordance with their respective privacy policies. As a service provider, we do not use this information for our own commercial purposes other than to perform the services of hosting and managing the functionality of the marketplaces for our customers. If you have concerns about the use and handling of your information by these customers, you will need to contact them directly.
Mascus also provides tools for professionals to help manage their inventory, understand the used equipment market, publish listings on the Mascus online listing marketplace and reach bigger buying audiences. Mascus’ tools for professionals are part of the suite of tools offered under the Ritchie Bros. Asset Solutions brand. Mascus systems power these tools for our professional customers. For more information about the handling of personal information when interacting with these tools, refer to the Ritchie Bros. Asset Solutions section below.
3.2 Other asset disposition-related services
Our other asset disposition-related services include:
Ritchie Bros. Asset Solutions (RBAS) is a collection of tools – cloud-based inventory management system (IMS), managed and hosted custom webshops, mobile apps for inspection and inventory management, marketing tools and a data insights module – that we make available to our OEM, corporate and government customers on a subscription basis. The tools are configured for use by our customers’ end users – both for their employees and other personnel and for interested buyers of their equipment.
If you are an RBAS customer, your end users need to understand how you (and we) collect and process their personal information. Accordingly, if you use a custom webshop or mobile app, you agree to post an up-to-date and accurate privacy notice on those tools that complies with the laws applicable to your business. You also agree to obtain consent from your end users for the use and access of their personal information by us and other third parties.
Except as noted below, information about end users interacting with RBAS tools is collected and processed by us as a processor on behalf of our customer in which case we act on the instructions of, or as permitted by, our customer or their authorized internal end users. We don’t use the personal information we maintain about your end users who interact with your custom webshop to independently contact or market to them. If you are an end user and have questions or concerns regarding the handling of your information, refer to the privacy policies made available by our customer (who may be your employer) through the relevant RBAS tool.
If you are a representative of our corporate or government customer subscribing for services, we collect your business contact information to establish and maintain our relationship with our customer as their service provider (e.g. customer service and invoicing).
We also collect IMS end user credentials and interactions with the IMS to monitor, log, analyze and test the security of the systems, networks, databases and applications supporting the IMS and to ensure compliance by the customer with our contractual arrangements. We also use this interaction data to monitor and improve the general performance and usability of the IMS such as enhanced features, GUI layouts, and page responsiveness.
Information and data collected by us through management of RBAS tools will be used as necessary to comply with our legal and regulatory obligations.
Ritchie Bros. Financial Services (“RBFS”) facilitates financing and leasing solutions for auction customers and other equipment owners and dealers referred through our partner networks. RBFS does not offer financial products for personal, family or household purposes. RBFS also manages the PurchaseSafe program available to sellers and buyers on Ritchie List. Personal information collected includes:
Category of Information | Description | Source(s) |
---|---|---|
Application and Identity Data |
Data that identifies you as the principal or guarantor of a business applicant – name, residential address, birthdate, gender, social insurance or security number, phone numbers, email, ownership type and interest in the applicant, shareholder or member registers |
Information from third-party business data providers and publicly available sources to supplement leads and prospects
|
Application and Identity Data |
Identification documentation including driver’s licenses, passports or other government ID (e.g. social insurance or security number card) |
Personal information you provide when applying for financial or insurance products or otherwise interacting with our account managers |
Identity and Contact Data |
Data that identifies you – name, address, phone number, email, whether acting on behalf of a business or not |
Personal information you provide when relying on the PurchaseSafe program to acquire equipment in a private sale. |
Credit and Financial Data |
Current and historical financial information, including tax returns, assessment notices, void cheques, estimates of net worth and financial statements |
Personal information you provide when applying for financial or insurance products or otherwise interacting with our account managers |
Credit and Financial Data |
Credit bureau reports and other credit information |
Information from credit reporting agencies and or credit grantors |
Loan Approval Data |
Data regarding a credit approval (e.g. the amount to be financed by a lender partner) and other data associated with completion of a loan transaction with a lender partner (e.g. financing documents) |
Information received from a lender partner during the execution process
|
Industry Preference, Interest and Feedback Data |
Data regarding industry and equipment interests and preferences, assets you wish to purchase, your business structure and financing or leasing needs |
Information you provide when applying for financial or insurance products or otherwise interacting with our account managers |
Online Account Usage Data |
User data (e.g. account information, actions taken) relating to a user who creates a watchlist or saved searches on the Ritchie Bros. Auctioneers or IronPlanet website |
Information from other solutions operated by members of the Ritchie Bros. group of companies |
Auction Lead Data |
Successful buyer and runner-up bidder data (e.g. name, contact information, equipment bid on and purchased, price) for auction buyers and bidders from other disposition solutions operated by members the Ritchie Bros. group of companies |
Information from other solutions operated by members of the Ritchie Bros. group of companies |
Referred Lead Data |
Financing lead contact information and industry related information |
Information from third party lead referral partners (for example, publishers who advertise and promote our services) |
Online Activity Data |
Webpages and webforms viewed or submitted, time of landing, frequency and duration of viewing, the links you click or other actions you take as part of your use of the website or interaction with our email |
Information from your device collected automatically when you browse the IronPlanet or Ritchie Bros. Auctioneers websites or fill out a webform using cookies, web beacons and similar tools |
Online Activity Data |
Information about your activities and interactions with sponsored or featured digital advertising content or our marketing emails, such as advertisements you were shown, when and where they were shown, and whether you clicked and took any subsequent action like filling out a webform or adding equipment to a watchlist |
Information from our advertising and analytical service providers collected automatically when you browse equipment or login to the IronPlanet or Ritchie Bros. Auctioneers websites or interact with our emails using cookies, web beacons and similar tools |
Device Connection Data |
Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, cookie ID, and IP address from which the device accessed our services |
Information from your device collected automatically when you browse or login to the IronPlanet or Ritchie Bros. Auctioneers websites using cookies, web beacons and similar tools |
For further information about the collection of data using cookies, web beacons and similar tools when you interact with the Ritchie Bros. Auctioneers or IronPlanet website, our custom webforms or our email communications, check out “Cookies & similar technologies and your preferences” below.
We combine or link the personal information we collect from you with information we receive from the other sources identified in the chart above. Where we receive data from third parties, we try to confirm the information was lawfully collected and disclosed to us.
PurchaseSafe transactions are completed utilizing the MarketPlace-E online platform. The same information identified above as collected under “Core asset disposition services” with respect to IronPlanet applies to a PurcahseSafe transaction.
4. Purposes and legal basis for handling your information
We use your personal information for a range of different business and other purposes and according to different legal bases of processing. We use information collected to primarily provide solutions and services, to respond to requests about our solutions and services, to protect our rights and the rights of others, to provide you with personalized digital advertising and marketing, to provide customer service, to detect, prevent, mitigate and investigate fraudulent or illegal activities, and to communicate with you about your account and our solutions and services. See the table below to learn more about examples of our processing purposes.
4.1 What we process information for
Description of processing purpose | Legal Basis | Categories of Information Processed | Categories of Recipients |
---|---|---|---|
To prepare a contract with you or your business entity for products and services for execution and send it to you for execution |
|
|
|
To publish and promote your assets, listings and related content on the websites, marketplaces or in the applications of Ritchie Bros. multi-channel solutions or of cooperating third party publishers and advertisers |
|
|
|
To register you to bid in-person at a live auction event and assign you a bidding number; approve and monitor bidding limits or privileges on our transactional solutions (including on GovPlanet after conducting a check in the US Federal System for Award Management); and process bidding deposits or authorizations where required after performing identity and address verification and credit card checks |
|
|
|
To create an online account and set up a payment profile for you permitting you, and others added to your account, to access our websites, applications and other tools across the various Ritchie Bros. solutions, including the online bidding platform and mobile apps |
|
|
|
To enable and perform online and offline auction transactions with us, including processing motor vehicle titles or transfers of equipment requiring entry in national registries more efficiently, collecting and paying fees or money owed (including proving chain of ownership of assets to a buyer’s lender in order to facilitate the lender’s financing of the auction sale), processing payments (including processing tax exemptions and refunds), and connecting IronPlanet marketplace sellers and buyers to facilitate the pick-up and release of items (including in cases of terminated, failed or subsequently voided transactions), or to connect Mascus or Ritchie List advertisers and interested buyers to facilitate a possible transaction |
|
|
|
To provide auction-related and value-added services, including completing inspections, arranging for transportation and insurance of your assets, assisting with export and import of assets, storing of your assets, or facilitating repair and refurbishment of assets with our service providers |
|
|
|
To enable you to use certain services (ours or a cooperating third party) or make available functionality of our websites applications and tools where you request them, including processing geolocation data to provide you with location-based search results when using mobile apps |
|
|
|
To conduct credit checks by pulling credit reports and other credit information to assess creditworthiness and facilitate credit approvals or the leasing or financing of assets with our lending partners |
|
|
|
To communicate with you, either directly or through a cooperating third party, about:
|
|
|
|
To conduct research and surveys, gather feedback, facilitate your participation in contests and sweepstakes, create marketing collateral using your image or testimonial |
|
|
|
|
|
|
|
To participate in proceedings conducted by courts, public agencies or authorities, law enforcement, or other public bodies if there is a legal obligation to this effect or we legitimately consider disclosure of information is necessary to mitigate or prosecute illegal activity |
|
|
|
|
|
|
|
To comply with subpoenas, warrants or other legal processes or to cooperate with government or public authorities' or agencies' inspections or investigations, or protect the interests of a third party involved in legal disputes if we legitimately consider disclosure of information is necessary to avert severe disadvantages
|
|
|
|
To monitor and improve the information security of systems, applications and tools
|
|
|
|
To keep complete and accurate financial records of our transactions and trade registers as required by applicable law |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
To track whether a call is placed to a seller advertising assets for sale on the Mascus or Ritchie List sites to analyze buyer activity and combine with the user's other internet activity on the marketplace to generate buyer insight reports and assess the effectiveness of seller advertising
|
|
|
|
|
|
|
|
To facilitate OEMs and their dealers understanding the secondary market for their equipment and their communication with bidders and buyers at Ritchie Bros. Auctioneers and IronPlanet sales events about warranties, parts and other products and services. |
|
|
|
To analyze and generate leads and prospects for financing and other services for Ritchie Bros. Financial Services
|
|
|
|
To enhance, categorize and prioritize financing leads, prospects and applicants and score them based on predicted readiness to bid or buy, type of borrower and creditworthiness (including by sharing limited non-personal information with external service providers specializing in aggregating business credit data and supplying business credit reports)
|
|
|
|
To comply with audit obligations under our contractual arrangements with financing referral providers
|
|
|
|
|
|
|
|
4.2 Data disclosure to OEMs and their dealers
As noted above, if you make a bid during a Ritchie Bros. Auctioneers or an IronPlanet sales event, we may disclose your bid and contact information with the OEM of the lot you bid on and any of the OEM’s dealers or representatives in your geographic area, if the OEM or dealer/representative entered into a contractual arrangement with us. We do not trade this information in exchange for money. OEMs and their dealers or representatives use this information to pursue their legitimate interest of understanding the lifecycle of their equipment and the secondary market for their equipment, to communicate with you about their products and services, and for other purposes disclosed in their privacy policies. Once disclosed, this information will be governed by the OEM’s or the OEM dealer’s privacy policy and will be subject to the laws of the jurisdiction in which the OEM or OEM dealer processes the information. See “Privacy related requests and your preferences” below on how to opt-out of this disclosure and how to request which OEMs and dealers your information was disclosed to during the 12-month period preceding the date of your request. For more information, visit our “Data Use and Disclosure FAQ“.
4.3 Data usage between RB Global corporate family members
In pursuit of our common interests we permit access to personal information among members of the RB Global corporate family for purposes consistent with this Privacy Notice. Where permitted by law, you may receive promotional and other communications from these related family members. See our “Data Use and Disclosure FAQ” for more information. To the extent that RB Global corporate family members have access to your personal information, they will follow practices that are at least as restrictive as the practices described in this Privacy Notice.
4.4 Automated decision-making
Ritchie Bros. Auctioneers and IronPlanet use automated decision-making technologies to assist in determining a user’s bidding privileges and whether a deposit is required prior to bidding. This processing assists us in protecting our interests and the integrity of our auctions and efficiently make decisions to extend to you the contractual right to bid at an auction. Our decision on bidding privileges or a deposit may be reviewed by a Customer Care agent.
5. International transfer
Data the organization collects is transferred to database servers located in various regions, including Canada, European member states, Serbia and the United States. In addition, our personnel and our third-party service providers to whom your information is transferred for business purposes may also store and access (and in the case of service providers, onward transfer to) your personal information in other countries. These countries may offer a different level of data protection and may have different data protection rules than your country of residence. In certain circumstances courts, law enforcement agencies, regulatory agencies or security authorities in those other foreign jurisdictions may be entitled to access your information.
Under the General Data Protection Regulation (GDPR) and UK equivalent, information about individuals who are entitled to protection under those laws may only be transferred from their region to other regions if certain requirements are met. When we transfer your personal information from outside the EEA or UK, we rely on a variety of measures to support the transfer under applicable law.
As the European Commission and UK government consider Canada to be a country which provides adequate data protection, information may be transferred from the EEA or UK to Canada without additional measures. Certain of RB Global’s US operating companies also comply with the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF”, and together with the EU-U.S. DPF and UK Extension, the “Principles”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of all non-human resources personal data (as defined in the Principles) that is transferred from the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”) and Switzerland to the United States within the scope of the certification. The US operating companies have certified to the U.S. Department of Commerce that they adhere to the Principles. If there is any conflict between the terms in this privacy notice and the Principles, the Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit the Data Privacy Framework site.
The following US members of the RB Global group adhere to the Principles and are covered by the certification: Ritchie Bros. Auctioneers (America) Inc., IronPlanet, Inc., and Ritchie Bros. Asset Solutions Inc., Rouse Services LLC, Rouse Appraisals, LLC, Rouse Analytics, LLC, Rouse Sales, LLC, SmartEquip Inc, Xcira LLC, Insurance Auto Auctions of Georgia LLC, Insurance Auto Auctions Tennessee LLC, Auto Disposal Systems Inc. Decision Dynamics LLC, Impact Texas LLC, Automotive Recovery Services, Inc., Insurance Auto Auctions, Inc., and Insurance Auto Auctions Corp. For more information about the privacy practices of the Rouse, SmartEquip, Xcira, Insurance Auto Auctions and DDI Technology businesses, see their respective privacy notices linked in paragraph 1 above.
In cases where we transfer or disclose (or onward transfer) to third parties we may rely on a service provider’s certification to the Principles (if sent to the US) and/or contractual means to require administrative and technological safeguards designed to mitigate the threat of unauthorized access, use or disclosure of your information (such as standard data protection clauses issued or approved by the European Commission). We will remain liable under the Principles for any failure by a third party to comply with the Principles or our contractual arrangement with them unless, where permitted by applicable law, we prove we are not responsible for the event giving rise to the damage.
For information on how to exercise your privacy rights under the Principles, see “Privacy related requests and your preferences” below.
Please contact us if you have any questions about the transmission of information among members of the Ritchie Bros. corporate family or our transfers to service providers as specified in “Who to contact with questions or for more information”. We have designated JAMS, an alternative dispute resolution provider which has locations in the United States, EU, the UK and Switzerland, to address unresolved complaints concerning our handling of personal data received in reliance on the Principles. If you do not receive timely acknowledgment of your Principles-related complaint from us, or if we have not addressed your Principles-related complaint to your satisfaction, please visit JAMS by clicking here for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Under certain conditions, a binding arbitration option may be available to you in order to address complaints not resolved by any other means. For further information, please visit the DPF site by clicking here. Our US operations are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission with respect to all matters associated with the Principles.
6. Storage and erasure
-
Is the information necessary to provide the service or product? This covers things such as entering into a contract with you, performing the service requested or paid for, or maintaining appropriate business and financial records.
-
Is the information sensitive in nature?
-
What statutory, contractual or similar obligations exist? This covers things such as retaining information as a result of contractual obligations or due to anticipated or pending legal disputes. Certain laws also stipulate required retention periods for certain information.
-
What will the impact on the integrity of systems and applications be if the information is removed?
7. Data security
While we take reasonable administrative, technical and physical measures designed to protect the information you submit or that we collect online and offline against loss, theft and unauthorized use, disclosure, or modification, we cannot guarantee its absolute security. No Internet, email or mobile application transmission is ever fully secure or error free, nor are firewalls and physical access restrictions impenetrable.
If you believe your account has been abused, please contact us at customercare@ritchiebros.com.
8. Privacy related requests and your preferences
You may request to exercise the data subject rights described in this part by using our dedicated privacy contact form. If you prefer, you can send correspondence to RB Global, Attn: Data Privacy Office, Two Westbrook Corporate Center, Suite #1000, Westchester, Illinois, 60154, or call our Customer Service group.
California Residents. If you are a resident of California, see our State Privacy Disclosures page for specific information on Your California Privacy Rights.
Access to Information. In some jurisdictions, applicable law provides the right to be informed of and request access to the personal information we hold and process about you. For instance, for individuals with rights under the GDPR (and where appropriate, subject to our adherence to the Principles) , you may request information on the purposes of the processing, the categories of personal information concerned, the categories of recipients to whom the personal information have been or will be disclosed, the envisaged period for which the personal information will be stored, the existence of the right to request rectification or erasure of personal information or restriction of processing of personal information or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information as to the personal information’s source (where not collected from you), the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details. Access to information may be subject to certain exemptions.
Rectification of Inaccurate or Incomplete Data. You have the right to ask us to correct inaccurate or incomplete personal information concerning you. For certain services, you may also use your online account profile page to review and edit some of your personal information.
Data Portability. For individuals with rights under the GDPR, you may request personal information about you, that you provided to us, be delivered to you in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).
Erasure. You can request that we erase your personal information and deactivate your applicable user account. Please note that exemptions and restrictions may apply depending on applicable law. In some cases, we will not erase the data, but instead restrict further processing (e.g. where the information is still necessary in relation to the purpose for which it was collected or is needed to establish, exercise or defend a legal claim). We may also obfuscate/pseudonymize or aggregate data where permitted.
Withdrawing Consent. Where you have provided your consent to our processing of your personal information you may withdraw your consent at any time. Please specify if the request is a general withdrawal or which specific consent you want to withdraw. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
Restricting Processing.In some jurisdictions, applicable law may give you the right to restrict the ways in which we use your personal information. For instance, under the GDPR, where:
-
you contest the accuracy of your personal information;
-
the processing is unlawful but you oppose the erasure of your personal information;
-
we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or
-
you have objected to the processing based on the grounds described in the next paragraph below and pending the verification whether we have legitimate grounds which override your own.
Objecting to Processing. The GDPR entitles individuals to object to our processing their personal information for certain specific purposes (including profiling) where such processing is based on our legitimate interest. If an individual entitled to do so objects to such processing we will no longer process their personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.
If personal information is processed by us for direct marketing purposes, individuals have the right to object at any time to the processing of their personal information for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Lodging Complaints. You have the right to lodge complaints about the personal information processing activities we carry out before competent supervisory authorities. We hope though that if you reach out to us first, we can resolve your complaint amicably. If not, then refer to the chart below under “Data Controllers” to see which supervisory authority to contact.
Email Communications. We use your email address to communicate with you in order to fulfill any contractual obligations with you (e.g. to send you invoices or settlement statements) and to notify you about important account information (e.g. updates to our terms of use or security notices). These communications are mandatory. Where permitted by applicable law, we may send you relevant marketing communications if you have registered and created a profile through one of our websites (including rbauction.com, ironplanet.com, truckplanet.com, or govplanet.com) and agreed to our terms of use for your profile. We may also send you marketing communications if you have contracted to sell with us or registered to bid in person at any of our live sales events and agreed to our terms at the time of registration. In certain jurisdictions, by doing so, you infer or imply your consent. If you reside in a country that requires that we obtain your express consent, we will ask for you to expressly opt-into communications. Marketing communications may come from the RB Global entity that you contracted with when creating a profile or registering to sell or bid, or from another member of the RB Global corporate family that provides products or services that we think may be of interest to you. If you are receiving marketing emails, you can unsubscribe from these marketing emails by clicking the unsubscribe link in any marketing email you receive.
Data disclosure to OEMs and their dealers. We provide you with the right to know what identifiable information and which OEMs and dealers and representatives we have disclosed information to for their use during the 12-month period preceding the date of your request. Depending on where you live, you may have the right to request data for a greater period of time. To obtain a list of these OEMs, OEM dealers or representatives who we have disclosed your identifiable information to and/or to stop any further disclosure, use the privacy contact form or other options noted above at the beginning of this section.
9. Cookies & similar technologies and your preferences
When you interact with our online offerings and digital content (e.g. emails or banner ads) or mobile apps, we, our service providers and selected third parties may use cookies and similar technologies (e.g. web beacons and mobile identifiers) to make our offerings, content and apps better, faster and safer, to personalize our advertising across the web, to provide users a personalized experience or to measure the effectiveness of our efforts.
Cookies are small text files that are automatically created by your browser and stored on your device when triggered by the online offering or mobile app. Web beacons operate in conjunction with cookies as a small imperceptible graphic image that tracks a user action when taken (e.g. clicking on a link in an email). Other scripts and code snippets load and operate when visiting our websites or using our apps which transmit data about your device and usage of the relevant website or application.
Our use of these technologies falls into three categories:
Category | Description |
---|---|
Operationally necessary | Enable users to navigate and use functionality of the websites, such as language preferences, log-in and webforms, as well as allow for non-identifiable statistical measurement of users’ interactions. |
Functionality related | Analyze the use of our websites in-depth so we can measure, evaluate and improve their performance and permit optimization and personalization. |
Advertising related | Understand your interests and deliver personalized ad experiences, advertising content across the web, or emails based on usage patterns and behavior online (a.k.a. re-marketing or re-targeting) |
Some of these technologies may be permanently placed on your device until you remove them (persistent cookies) while others are temporary and are removed after you close your browser (session cookies).
Our service providers use of your data on our behalf is subject to contractual arrangements between us and them. When you take certain actions, or engage with advertisements of our services, on other websites across the internet, selected third-party organizations place and use cookies and similar technologies to collect data about your activities. This data may be combined with other data they have acquired and used to profile your interests and serve you advertisements of interest. The processing of your data by these third parties is subject to their privacy practices over which we have no control.
You may click the button below to access our Cookie Consent Manager tool. It is a browser cookie-based tool that allows you to modify settings related to certain Functional or Advertising cookies and related technologies. It is not possible to modify settings to Operationally Required cookies and related technologies. The tool works by communicating the selected setting to third party companies to initiate a third party’s opt-in/opt-out mechanism, if available. The effect of such selection may be described in the third party’s cookie and/or privacy statements. If the tool is unable to integrate with a third party this will be noted in the Detailed Settings description within the tool with information about such third party. The Detailed Settings descriptions will also provide information about the cookies and other technology we use.
The tool only works on the Internet browser you use to make your choice and it will only function properly if your browser is set to accept third-party browser cookies. If you delete cookies, change browsers, computers or operating systems, you will need to make a new selection.
You are always free to completely block cookies if your browser or device permits, although doing so will interfere with your use of some of our websites’ features or content. Review your browser settings to do so.
For more information about targeting and advertising cookies and how you can opt-out from a range of third parties generally, visit:
-
Network Advertising Initiative: http://www.networkadvertising.org/choices
-
U.S. Digital Advertising Alliance: http://www.aboutads.info/choices
-
Digital Advertising Alliance of Canada: http://youradchoices.ca
-
European Digital Advertising Alliance: http://www.youronlinechoices.eu
Note that using the opt-out tools provided by these initiatives are also browser and device specific. As well, deleting cookies can remove your opt-out preferences, so you will need to periodically refresh your opt-out preferences.
To set “Limit Ad Tracking” on various iOS devices, please click here.
To opt-out of Google interest-based ads on Android, open your Google Settings app > Ads > Enable “Opt out of interest-based advertising”
Certain of our service providers allow you to directly limit their ability to target you with advertising. Follow their respective instructions below. Please note this list is subject to change. Contact us as noted at the beginning of this Privacy Notice for the most up-to-date listing.
Provider | Details |
---|---|
Google Ads | Optout by updating your Google Ad Settings. There you will also find instructions to permanently opt-out through the use of an installed browser plug-in. |
Microsoft Ads (Bing Ads) | Optout by updating your Microsoft Ad Settings. |
Facebook Ads (including Custom Audiences) | You may adjust your settings by visiting Facebook's ad preferences page, logging-in and adjusting your settings. |
LinkedIn Ads (including Matched Audiences) | You may adjust your settings by visiting LinkedIn’s ad settings page, logging-in and adjusting your settings. |
Criteo | For more information about Criteo's privacy practices generally or to opt-out of further data collection by Criteo, please click here. |
Vizury | For more information about Vizury’s privacy practices generally or to opt-out of further data collection by Vizury, please click here. |
Hotjar | For more information about Hotjar’s privacy practices generally or to opt-out of further data collection by Hotjar, please click here. |
10. Data Controllers
The RB Global company responsible for the handling of your personal information depends on the brand you are interacting with and where you are located:
A. Core asset disposition services
Brand | Location | Ritchie Bros. controller | Notice Address | Lead Supervisory Authority (where applicable) |
---|---|---|---|---|
Ritchie Bros. Auctioneers | Inside the EEA and the United Kingdom | Joint Controllers: Ritchie Bros. Shared Services B.V. Ritchie Bros. Auctioneers (Canada) Ltd. Except for RB Logistics services, which are provided by: Ritchie Bros. B.V. |
Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority (outside the UK) Information Commissioner’s Office (inside the UK) |
Ritchie Bros. Auctioneers | Inside the EEA | Designated EEA Representative: Ritchie Bros. Shared Services B.V. | Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority |
Ritchie Bros. Auctioneers | Inside the United Kingdom | Designated UK Representative: Ritchie Bros. UK Limited | One Fleet Place, London England EC4M 7WS | Information Commissioner’s Office |
Ritchie Bros. Auctioneers | Any other region not otherwise specified | Ritchie Bros. Auctioneers (Canada) Ltd. | 9500 Glenlyon Parkway, Burnaby, BC V5J 0C6 | |
IronPlanet | Inside the EEA and the United Kingdom | Joint Controllers: IronPlanet Limited Ritchie Bros. Shared Services B.V. Ritchie Bros. Auctioneers (Canada) Ltd. |
Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority (outside the UK) Information Commissioner’s Office (inside the UK) |
IronPlanet | Inside the EEA | Designated EEA Representative: Ritchie Bros. Shared Services B.V. | Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority |
IronPlanet | Inside the United Kingdom | Designated UK Representative: Ritchie Bros. UK Limited | One Fleet Place, London England EC4M 7WS | Information Commissioner’s Office |
IronPlanet | Any other region not otherwise specified | Ritchie Bros. Auctioneers (Canada) Ltd. | 9500 Glenlyon Parkway, Burnaby, BC V5J 0C6 | |
Mascus | Any region | Mascus International B.V. | Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority (outside the UK) Information Commissioner’s Office (inside the UK) |
Mascus | Any region | Designated UK Representative: Ritchie Bros. UK Limited | One Fleet Place, London England EC4M 7WS | Information Commissioner’s Office |
B. Other asset disposition-related services
Brand | Location | Ritchie Bros. controller | Notice Address | Lead Supervisory Authority (where applicable) |
---|---|---|---|---|
Ritchie Bros. Financial Services | Inside the EEA and the United Kingdom | Ritchie Bros. Financial Services Ltd. | 9500 Glenlyon Parkway, Burnaby, BC V5J 0C6 | Dutch Data Protection Authority (outside the UK) Information Commissioner’s Office (inside the UK) |
Ritchie Bros. Financial Services | Inside the EEA | Designated EEA Representative: Ritchie Bros. Shared Services B.V. | Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority |
Ritchie Bros. Financial Services | Inside the United Kingdom | Designated UK Representative: Ritchie Bros. UK Limited | One Fleet Place, London England EC4M 7WS | Information Commissioner’s Office |
Ritchie Bros. Financial Services | Any other region not otherwise specified | Ritchie Bros. Financial Services Ltd. | 9500 Glenlyon Parkway, Burnaby, BC V5J 0C6 | |
Ritchie Bros. Asset Solutions | Any region | Mascus International B.V. | Bijster 3, 4817 HX Breda, The Netherlands | Dutch Data Protection Authority (outside the UK) Information Commissioner’s Office (inside the UK) |
Ritchie Bros. Asset Solutions | Inside the United Kingdom | Designated UK Representative: Ritchie Bros. UK Limited | One Fleet Place, London England EC4M 7WS | Information Commissioner’s Office |
11. Other information regarding privacy
11.1 Responsibilities for receipt of information through services
-
While we do not identify sellers and buyers on the IronPlanet marketplaces, certain sellers may offer inspection privileges in which case bidders will have access to name, address and contact information of an equipment manager to arrange for inspection
-
Once a buyer pays for items on the IronPlanet marketplace, they will receive information about the seller (name, address, contact information) to facilitate the pick-up of their purchases
-
Sellers advertising on the public Ritchie List and Mascus listings sites receive the contact information of interested buyers when an inquiry is made through the contact functionality
-
Interested buyers have access to the name and contact information of a seller advertising an item in a listing on the public Ritchie List and Mascus listing sites
11.2 Providing us with third party personal information
If you provide us with personal information relating to another person, you must obtain the consent of the person or the disclosure of the information to us must be otherwise legally permissible. You must inform the other person of how we process personal data in accordance with this Privacy Notice.
11.3 Children's privacy
Our solutions are not intended for use by children. We do not knowingly collect information from users or participants who are considered children under applicable laws. To participate in an auction or use our services, you must be 18 or older.
11.4 Logging in to IronPlanet's online marketplaces using your Ritchie Bros. Auctioneers web account
We permit you to use your Ritchie Bros. Auctioneers online web account credentials to log in to IronPlanet’s online marketplaces. To facilitate this cross-solution authentication, when you register an account with Ritchie Bros. Auctioneers, we automatically create a dormant account for you on IronPlanet that becomes active only when you first sign-in.
11.5 Logging in to a preferred provider's site using Ritchie Bros. credentials
We permit certain of our preferred partners to authenticate your online access to their website or webservices using your IronPlanet or Ritchie Bros. Auctioneers online credentials. If you choose to do so, when logging-in you will be redirected to our website to enter your credentials. Once you successfully login, you will be redirected again back to the partner’s site. Your personal information collected by the partner when using their site will be handled by them for the purposes they disclose to you (such as in their privacy notices).
11.6 Links and Social Media Presences
Our websites contain links to other sites including sites maintained by our customers, third party service providers or preferred or recommended providers. We are not responsible for the privacy practices of such other sites. We encourage our users to read the privacy notices of all websites they choose to visit that collect personal information.
RB Global maintains publicly accessible profiles in various social networks listed below. Our social media presence ensures an internet presence that is as comprehensive as possible – which supports our legitimate commercial and marketing interests.
Social networks are able to analyze your user behaviour when you visit their websites or other sites with integrated social media plug-ins, or you use their mobile apps. When you’re logged-in to your social media account and you visit our social media presence, or you click on a hyperlink to our social media presence and then log-in to your account, the social media operator associates your visit with your social media user account. It may also be possible for the operator to identify you when you are not logged-in or do not have an account. All of this is made possible by the placement of tracking tools on your browser or device that are associated with the social media operator. These allow the operator to receive information from our websites which it combines with information it receives elsewhere on the internet or from other sources.
Social media operators use the information gathered about you to create user profiles that store your preferences and interests. The profiles are used to tailor advertising to you based on your interests both within and outside of their respective social media sites and across any device you’ve used to access the social media site. The information is also used by operators to provide anonymous measurement statistics and demographic data to us as administrators of our social media presence. We use this data to create content more relevant to our target audiences. For details of other uses of this data by operators, please refer to their respective privacy notices. For further information about our collection of data using cookies, web beacons and similar tools when you interact with our digital services, check out “Cookies & similar technologies and your preferences“.
For individuals with rights under the GDPR, when you visit one our social media presences, we are jointly responsible as controllers together with the social media operator for the data processing activities triggered by your visit. You may assert your rights against either of us, but please note, despite having joint responsibility we have no real influence over the data processing activities conducted by the social media operator. Refer to the information below for the specifics of each social media operator.
Social Media Presence | Provider | Important Info. |
---|---|---|
Facebook Fanpages | Meta Platforms Ireland LimitedSerpentine Avenue, Block J, Dublin 4 Ireland |
The following agreement governs our joint responsibility for processing: https://www.facebook.com/legal/terms/page_controller_addendum You can set your advertising preferences vi your user account. Click below and login: https://www.facebook.com/settings?tab=ads For further details please refer to the Facebook privacy policy: https://www.facebook.com/about/privacy/ |
Instagram Profile | Meta Platforms, Inc.1601 Willow Road, Menlo Park, CA, 94025, USA |
For details on the processing of your information by Instagram, review to its privacy policy: https://privacycenter.instagram.com/policy |
X Pages | Twitter International Unlimited Company |
You may adjust your Twitter data privacy settings independently via your user account. To do so, click on this link and log in: https://twitter.com/personalization |
YouTube Channels | YouTube LLC 901 Cherry Ave., San Bruno, CA 94066, USA |
You can set your advertising preferences independently via your user account. To do so, click on this link and log in: https://myaccount.google.com/intro/data-and-personalization For further details please refer to the YouTube privacy policy: https://policies.google.com/privacy |
LinkedIn Profile | LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
|
The following agreement governs our joint responsibility for processing: https://legal.linkedin.com/pages-joint-controller-addendum If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out For details of how your personal data are processed, please refer to the LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy |
TikTok Profile | TikTok Pte. Ltd. 1 Raffles Quay, #26-10, South Tower, Singapore 048583 |
You can set your advertising preferences independently via your user account. To do so, click on this link and log in: https://www.tiktok.com/privacy/ads-and-your-data/en |
11.7 Regional disclosures
This Privacy Notice establishes our global principles for the collection, use, disclosure and storage of personal information that is processed by the RB Global member companies covered by this User Privacy Notice in the course of operations. Certain places where you are doing business with us or where the website or application you are interacting with is located or hosted may have specific requirements concerning personal information which may be found under our State Privacy Disclosures.