User Privacy Notice

1. Scope of and updates to this User Privacy Notice

Being the trusted global marketplace for insights, services and transaction solutions for commercial assets and vehicles starts with RB Global’s unrivaled commitment to customer service. As part of that commitment, we respect the privacy of our customers and users. Whether we are helping to appraise, sell, inspect, buy, refurbish, transport or finance your commercial assets and vehicles around the world, we are guided by our desire to meet your needs in a convenient, fair and transparent manner – and that includes making sure you understand how we handle personal information and what corresponding rights are available to you. This Privacy Notice applies equally to our digital handling of your information as it does to our offline collection and handling.

RB Global is a global organization with companies located around the world that operate our insights, service offerings, and multi-channel solutions for buying and selling. See a complete listing of our family of brands.

This User Privacy Notice (“Notice” or “Privacy Notice”) applies to rbglobal.com and other RB Global brand websites, services and solutions that collect information and display or link to this Privacy Notice, and that are owned and operated by a member of the RB Global group of companies. This Privacy Notice does not apply if the website, service or solution does not display or link to it or where the website, service or solution makes its own privacy notice available as follows:

Insurance Auto Auctions – US | Canada

Synetiq

DDI Technology

Rouse

SmartEquip

Xcira

VeriTread

Other than for the brands listed above, to understand which RB Global company is responsible for the collection and further processing of your personal information, see the section below entitled “Data Controllers“.

We may change this Privacy Notice at any time by posting the revised statement on this website and indicating the effective date of the revised statement. The revised Privacy Notice will be effective once posted unless we state otherwise.

We may also supplement or modify our privacy commitments in this Privacy Notice through other notices we make available to you or through contractual commitments we enter in writing.

Where we’ve provided a translation of the English language version of this Privacy Notice, such translation is provided for your convenience only. To the extent there is any inconsistency between the English language version and such translation, the English language version takes precedence.

2. Who to contact with questions or for more information

If you have any questions or comments about this Privacy Notice or our practices, you can reach our Data Protection Officer through our Data Privacy Office at:

RB Global Data Privacy Office c/o RB Global, Inc.

Two Westbrook Corporate Center

Suite #1000

Westchester, Illinois, 60154

Or use our privacy contact form.

3. What personal information we collect and process

Other than as part of applying for financing with Ritchie Bros. Financial Services, most of the information we collect, and process, is equipment or vehicle related information and business contact information relating to, and provided by, our customers’ employees or other representatives. In general, information is collected when a customer engages one of our brand solutions to provide services by entering a contract, creating an online account, coming into one of our auction locations, providing us information through a webform, or otherwise interacting with us. Information may also be obtained from other sources. For instance, brand solutions may share information internally, or an outside service provider is used to verify or supplement what we’ve received. In some cases, the information we obtain is generated automatically when users engage with our digital properties, such as browsing and interacting with our websites, using our mobile applications, opening our communications or engaging with our advertisements.

While our solutions are generally not targeted at individuals buying or selling for personal, family or household purposes, individuals do engage with certain of our solutions from time to time for these purposes.

Some information we obtain from you may be more sensitive in nature depending on the services you are engaging us to perform. For instance, we may require ID numbers from a driver’s license or other identity documentation to process transactions or facilitate the extension of financing to your business.

Certain of our solutions obtain and store personal information for the benefit of our corporate or government customers to provide those customers specific technology services. In those circumstances, we are acting as a service provider and collect and process that information in accordance with our customers written instructions and our contractual arrangement.

Offering you the choice of multiple solutions for different needs means that each solution operates somewhat differently. To learn more about the categories of information handled by specific solutions and their sources, read on.

3.1 Core asset disposition services

Our core asset disposition services include:

The list below describes examples of the collection and processing of personal information by category and source for the core asset disposition services. Check marks indicate the relevant brand practices.

Category: Account Registration Data

Description:

Data that identifies you – name, title, employment status, addresses, telephone numbers, email addresses, account password and in some cases, personal ID document numbers (driver’s license, passport, national or state identity card, or SSN), age, nationality, tax identification numbers, and your signature

Description:

Data needed to complete a check of the US Federal System for Award Management and an End User Certificate facilitating the transfer of an asset to a party outside the US Department of Defense – name, social security number or other personal ID number, date of birth, place of birth, telephone number, address, purpose of buying, signature and if applicable, their role as officer, partner or agent with the purchaser

Category: Transaction Data

Description:

Data regarding self-listings, bids, purchases, or sales in a transaction

Category: Payment Data

Description:

Banking information (account numbers and payment details) and credit card information necessary to process a bidding deposit or transaction

Description:

Payment information (account numbers and payment details) and credit card information necessary to process ad placements or other services

Category: Shipping and Logistics Data

Description:

Shipping, billing, and other information you provide in connection with the purchase or shipping of an asset, as well as information required for bills of lading or customs clearance (such as tax identification numbers or other identification numbers)

Category: Industry Preference, Interest and Feedback Data

Description:

Data regarding industry and equipment interests and preferences or assets you wish to value or sell when you complete a webform, engage with us on social media or at tradeshows, or participate in surveys, feedback forms, our online community discussion platform, contests and focus groups

Category: Customer Service Data

Description:

Information relating to inquiries about services, dispute resolution, and, where applicable, recorded customer service calls

Category: Visitor and Incident Log Data

Description:

Log data collected in connection with your entering our physical offices or auction sites, or in the event of an incident (motor vehicle collision, injury or environmental event) you are involved in or witness while onsite

Category: CCTV Data

Description:

CCTV video footage at our physical offices and sites

Category: Online Account Usage Data

Description:

Data generated through actions you take which are linked to an online account, for instance when you create watchlists or saved searches, search inventory or results, change your communication and marketing preferences, enter a Ritchie Bros. Auctioneers’ auction ring online whether you bid or not (including assigned bidder numbers, bid amounts, winning bids), or register for bidding privileges on an IronPlanet marketplace, or participate in an auction

Category: Geolocation Data

Description:

Geolocation data, including that of your mobile device when you enable the use of location services in your device settings or in app

Category: Device Connection Data

Description:

Computer and other device connection data, such as page view statistics, data traffic to and from websites, referral URL, your IP address, access times, browser, language settings and web server log information

Description:

Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, cookie ID, or IP address from which the device accessed our services

Category: Online Activity Data

Description:

Webpages of ours you visit, time of access, frequency and duration of visits, the links you click or other actions you take as part of your use of the website or mobile app

Description:

Information about your activities and interactions with sponsored or featured digital advertising content or our marketing emails, such as advertisements you were shown, when and where they were shown, and whether you clicked and took any subsequent action like filling out a webform or telephoning a seller on Mascus about their equipment

Description:

Information about your usage or expected usage of our website and inquiries made to our interactive chatbot

For further information about the collection of data using cookies, web beacons and similar tools when you interact with our digital services, such as website or email communications, interact with advertisements or initiate certain telephone calls, check out "Cookies & similar technologies and your preferences" below.

We combine or link the personal information we collect from you with information we receive from the other sources identified in the chart above. Where we receive data from third parties, we try to confirm the information was lawfully collected and disclosed to us.

IronPlanet's other technology solutions – Marketplace Direct, Super Marketplace Direct, and GovPlanet Direct –power the direct marketplaces of some of our corporate and government customers.  To participate in their online sales events, you must have an IronPlanet account.  We do not handle the exchange of funds or otherwise participate in the closing of any transactions between you and our direct marketplace customers.  Information regarding your bidding activity – user name, location, bids placed – as a user of their direct marketplace is collected and made available to our customers for use and handling in accordance with their respective privacy policies.  As a service provider, we do not use this information for our own commercial purposes other than to perform the services of hosting and managing the functionality of the marketplaces for our customers.  If you have concerns about the use and handling of your information by these customers, you will need to contact them directly.

Mascus also provides tools for professionals to help manage their inventory, understand the used equipment market, publish listings on the Mascus online listing marketplace and reach bigger buying audiences.  Mascus' tools for professionals are part of the suite of tools offered under the Ritchie Bros. Asset Solutions brand.  Mascus systems power these tools for our professional customers.  For more information about the handling of personal information when interacting with these tools, refer to the Ritchie Bros. Asset Solutions section below.

3.2 Other asset disposition-related services

Our other asset disposition-related services include:

Ritchie Bros. Asset Solutions (RBAS) is a collection of tools – cloud-based inventory management system (IMS), managed and hosted custom webshops, mobile apps for inspection and inventory management, marketing tools and a data insights module – that we make available to our OEM, corporate and government customers on a subscription basis.  The tools are configured for use by our customers' end users – both for their employees and other personnel and for interested buyers of their equipment.

If you are an RBAS customer, your end users need to understand how you (and we) collect and process their personal information.  Accordingly, if you use a custom webshop or mobile app, you agree to post an up-to-date and accurate privacy notice on those tools that complies with the laws applicable to your business.  You also agree to obtain consent from your end users for the use and access of their personal information by us and other third parties.

Except as noted below, information about end users interacting with RBAS tools is collected and processed by us as a processor on behalf of our customer in which case we act on the instructions of, or as permitted by, our customer or their authorized internal end users.  We don't use the personal information we maintain about your end users who interact with your custom webshop to independently contact or market to them.  If you are an end user and have questions or concerns regarding the handling of your information, refer to the privacy policies made available by our customer (who may be your employer) through the relevant RBAS tool.

If you are a representative of our corporate or government customer subscribing for services, we collect your business contact information to establish and maintain our relationship with our customer as their service provider (e.g. customer service and invoicing).

We also collect IMS end user credentials and interactions with the IMS to monitor, log, analyze and test the security of the systems, networks, databases and applications supporting the IMS and to ensure compliance by the customer with our contractual arrangements.  We also use this interaction data to monitor and improve the general performance and usability of the IMS such as enhanced features, GUI layouts, and page responsiveness.

Information and data collected by us through management of RBAS tools will be used as necessary to comply with our legal and regulatory obligations.

Ritchie Bros. Financial Services (“RBFS”) facilitates financing and leasing solutions for auction customers and other equipment owners and dealers referred through our partner networks. RBFS does not offer financial products for personal, family or household purposes. RBFS also manages the PurchaseSafe program available to sellers and buyers on Ritchie List. Personal information collected includes:

For further information about the collection of data using cookies, web beacons and similar tools when you interact with the Ritchie Bros. Auctioneers or IronPlanet website, our custom webforms or our email communications, check out "Cookies & similar technologies and your preferences" below.

We combine or link the personal information we collect from you with information we receive from the other sources identified in the chart above. Where we receive data from third parties, we try to confirm the information was lawfully collected and disclosed to us.

PurchaseSafe transactions are completed utilizing the MarketPlace-E online platform. The same information identified above as collected under “Core asset disposition services” with respect to IronPlanet applies to a PurcahseSafe transaction.

4. Purposes and legal basis for handling your information

We use your personal information for a range of different business and other purposes and according to different legal bases of processing. We use information collected to primarily provide solutions and services, to respond to requests about our solutions and services, to protect our rights and the rights of others, to provide you with personalized digital advertising and marketing, to provide customer service, to detect, prevent, mitigate and investigate fraudulent or illegal activities, and to communicate with you about your account and our solutions and services. See the table below to learn more about examples of our processing purposes.

4.1 What we process information for

4.2 Data disclosure to OEMs and their dealers

As noted above, if you make a bid during a Ritchie Bros. Auctioneers or an IronPlanet sales event, we may disclose your bid and contact information with the OEM of the lot you bid on and any of the OEM’s dealers or representatives in your geographic area, if the OEM or dealer/representative entered into a contractual arrangement with us. We do not trade this information in exchange for money. OEMs and their dealers or representatives use this information to pursue their legitimate interest of understanding the lifecycle of their equipment and the secondary market for their equipment, to communicate with you about their products and services, and for other purposes disclosed in their privacy policies. Once disclosed, this information will be governed by the OEM’s or the OEM dealer’s privacy policy and will be subject to the laws of the jurisdiction in which the OEM or OEM dealer processes the information. See “Privacy related requests and your preferences” below on how to opt-out of this disclosure and how to request which OEMs and dealers your information was disclosed to during the 12-month period preceding the date of your request. For more information, visit our “Data Use and Disclosure FAQ“.

4.3 Data usage between RB Global corporate family members

In pursuit of our common interests we permit access to personal information among members of the RB Global corporate family for purposes consistent with this Privacy Notice. Where permitted by law, you may receive promotional and other communications from these related family members. See our “Data Use and Disclosure FAQ” for more information. To the extent that RB Global corporate family members have access to your personal information, they will follow practices that are at least as restrictive as the practices described in this Privacy Notice.

4.4 Automated decision-making

Ritchie Bros. Auctioneers and IronPlanet use automated decision-making technologies to assist in determining a user’s bidding privileges and whether a deposit is required prior to bidding. This processing assists us in protecting our interests and the integrity of our auctions and efficiently make decisions to extend to you the contractual right to bid at an auction. Our decision on bidding privileges or a deposit may be reviewed by a Customer Care agent.

5. International transfer

Data the organization collects is transferred to database servers located in various regions, including Canada, European member states, Serbia and the United States. In addition, our personnel and our third-party service providers to whom your information is transferred for business purposes may also store and access (and in the case of service providers, onward transfer to) your personal information in other countries. These countries may offer a different level of data protection and may have different data protection rules than your country of residence. In certain circumstances courts, law enforcement agencies, regulatory agencies or security authorities in those other foreign jurisdictions may be entitled to access your information.

Under the General Data Protection Regulation (GDPR) and UK equivalent, information about individuals who are entitled to protection under those laws may only be transferred from their region to other regions if certain requirements are met. When we transfer your personal information from outside the EEA or UK, we rely on a variety of measures to support the transfer under applicable law.

As the European Commission and UK government consider Canada to be a country which provides adequate data protection, information may be transferred from the EEA or UK to Canada without additional measures. Certain of RB Global’s US operating companies also comply with the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF”, and together with the EU-U.S. DPF and UK Extension, the “Principles”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of all non-human resources personal data (as defined in the Principles) that is transferred from the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”) and Switzerland to the United States within the scope of the certification. The US operating companies have certified to the U.S. Department of Commerce that they adhere to the Principles. If there is any conflict between the terms in this privacy notice and the Principles, the Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit the Data Privacy Framework site.

The following US members of the RB Global group adhere to the Principles and are covered by the certification: Ritchie Bros. Auctioneers (America) Inc., IronPlanet, Inc., and Ritchie Bros. Asset Solutions Inc., Rouse Services LLC, Rouse Appraisals, LLC, Rouse Analytics, LLC, Rouse Sales, LLC, SmartEquip Inc, Xcira LLC, Insurance Auto Auctions of Georgia LLC, Insurance Auto Auctions Tennessee LLC, Auto Disposal Systems Inc. Decision Dynamics LLC, Impact Texas LLC, Automotive Recovery Services, Inc., Insurance Auto Auctions, Inc., and Insurance Auto Auctions Corp. For more information about the privacy practices of the Rouse, SmartEquip, Xcira, Insurance Auto Auctions and DDI Technology businesses, see their respective privacy notices linked in paragraph 1 above.

In cases where we transfer or disclose (or onward transfer) to third parties we may rely on a service provider’s certification to the Principles (if sent to the US) and/or contractual means to require administrative and technological safeguards designed to mitigate the threat of unauthorized access, use or disclosure of your information (such as standard data protection clauses issued or approved by the European Commission). We will remain liable under the Principles for any failure by a third party to comply with the Principles or our contractual arrangement with them unless, where permitted by applicable law, we prove we are not responsible for the event giving rise to the damage.

For information on how to exercise your privacy rights under the Principles, see “Privacy related requests and your preferences” below.

Please contact us if you have any questions about the transmission of information among members of the Ritchie Bros. corporate family or our transfers to service providers as specified in “Who to contact with questions or for more information”. We have designated JAMS, an alternative dispute resolution provider which has locations in the United States, EU, the UK and Switzerland, to address unresolved complaints concerning our handling of personal data received in reliance on the Principles. If you do not receive timely acknowledgment of your Principles-related complaint from us, or if we have not addressed your Principles-related complaint to your satisfaction, please visit JAMS by clicking here for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Under certain conditions, a binding arbitration option may be available to you in order to address complaints not resolved by any other means. For further information, please visit the DPF site by clicking here. Our US operations are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission with respect to all matters associated with the Principles.

6. Storage and erasure

We and our service providers store personal information in accordance with applicable data protection laws to the extent necessary for the purposes set out in this Privacy Notice or for which you are otherwise notified. We will destroy or obfuscate data in accordance with our data retention and deletion policy unless we are obliged to keep your personal data longer (i.e. for legal or audit purposes). In general, RB Global’s retention periods are 7 years. Permanent deletion of data can be difficult due to the impact on applications and systems. Where legally permissible, we may restrict further access or usage of data instead of deleting it.

Retention periods vary by region, the service or product in question and applicable law. We consider the following factors:

• Is the information necessary to provide the service or product? This covers things such as entering into a contract with you, performing the service requested or paid for, or maintaining appropriate business and financial records.

• Is the information sensitive in nature?

• What statutory, contractual or similar obligations exist? This covers things such as retaining information as a result of contractual obligations or due to anticipated or pending legal disputes. Certain laws also stipulate required retention periods for certain information.

• What will the impact on the integrity of systems and applications be if the information is removed?

7. Data security

While we take reasonable administrative, technical and physical measures designed to protect the information you submit or that we collect online and offline against loss, theft and unauthorized use, disclosure, or modification, we cannot guarantee its absolute security. No Internet, email or mobile application transmission is ever fully secure or error free, nor are firewalls and physical access restrictions impenetrable.

If you believe your account has been abused, please contact us at customercare@ritchiebros.com.

8. Privacy related requests and your preferences

You may request to exercise the data subject rights described in this part by using our dedicated privacy contact form. If you prefer, you can send correspondence to RB Global, Attn: Data Privacy Office, Two Westbrook Corporate Center, Suite #1000, Westchester, Illinois, 60154, or call our Customer Service group.

California Residents. If you are a resident of California, see our State Privacy Disclosures page for specific information on Your California Privacy Rights.

Access to Information. In some jurisdictions, applicable law provides the right to be informed of and request access to the personal information we hold and process about you. For instance, for individuals with rights under the GDPR (and where appropriate, subject to our adherence to the Principles) , you may request information on the purposes of the processing, the categories of personal information concerned, the categories of recipients to whom the personal information have been or will be disclosed, the envisaged period for which the personal information will be stored, the existence of the right to request rectification or erasure of personal information or restriction of processing of personal information or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information as to the personal information’s source (where not collected from you), the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details. Access to information may be subject to certain exemptions.

Rectification of Inaccurate or Incomplete Data. You have the right to ask us to correct inaccurate or incomplete personal information concerning you. For certain services, you may also use your online account profile page to review and edit some of your personal information.

Data Portability. For individuals with rights under the GDPR, you may request personal information about you, that you provided to us, be delivered to you in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).

Erasure. You can request that we erase your personal information and deactivate your applicable user account. Please note that exemptions and restrictions may apply depending on applicable law. In some cases, we will not erase the data, but instead restrict further processing (e.g. where the information is still necessary in relation to the purpose for which it was collected or is needed to establish, exercise or defend a legal claim). We may also obfuscate/pseudonymize or aggregate data where permitted.

Withdrawing Consent. Where you have provided your consent to our processing of your personal information you may withdraw your consent at any time. Please specify if the request is a general withdrawal or which specific consent you want to withdraw. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.

Restricting Processing. In some jurisdictions, applicable law may give you the right to restrict the ways in which we use your personal information. For instance, under the GDPR, where:

• you contest the accuracy of your personal information;

• the processing is unlawful but you oppose the erasure of your personal information;

• we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or

• you have objected to the processing based on the grounds described in the next paragraph below and pending the verification whether we have legitimate grounds which override your own.

Objecting to Processing. The GDPR entitles individuals to object to our processing their personal information for certain specific purposes (including profiling) where such processing is based on our legitimate interest. If an individual entitled to do so objects to such processing we will no longer process their personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.

If personal information is processed by us for direct marketing purposes, individuals have the right to object at any time to the processing of their personal information for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Lodging Complaints. You have the right to lodge complaints about the personal information processing activities we carry out before competent supervisory authorities. We hope though that if you reach out to us first, we can resolve your complaint amicably. If not, then refer to the chart below under “Data Controllers” to see which supervisory authority to contact.

Email Communications. We use your email address to communicate with you in order to fulfill any contractual obligations with you (e.g. to send you invoices or settlement statements) and to notify you about important account information (e.g. updates to our terms of use or security notices). These communications are mandatory. Where permitted by applicable law, we may send you relevant marketing communications if you have registered and created a profile through one of our websites (including rbauction.com, ironplanet.com, truckplanet.com, or govplanet.com) and agreed to our terms of use for your profile. We may also send you marketing communications if you have contracted to sell with us or registered to bid in person at any of our live sales events and agreed to our terms at the time of registration. In certain jurisdictions, by doing so, you infer or imply your consent. If you reside in a country that requires that we obtain your express consent, we will ask for you to expressly opt-into communications. Marketing communications may come from the RB Global entity that you contracted with when creating a profile or registering to sell or bid, or from another member of the RB Global corporate family that provides products or services that we think may be of interest to you. If you are receiving marketing emails, you can unsubscribe from these marketing emails by clicking the unsubscribe link in any marketing email you receive.

Data disclosure to OEMs and their dealers. We provide you with the right to know what identifiable information and which OEMs and dealers and representatives we have disclosed information to for their use during the 12-month period preceding the date of your request. Depending on where you live, you may have the right to request data for a greater period of time. To obtain a list of these OEMs, OEM dealers or representatives who we have disclosed your identifiable information to and/or to stop any further disclosure, use the privacy contact form or other options noted above at the beginning of this section.

9. Cookies & similar technologies and your preferences

When you interact with our online offerings and digital content (e.g. emails or banner ads) or mobile apps, we, our service providers and selected third parties may use cookies and similar technologies (e.g. web beacons and mobile identifiers) to make our offerings, content and apps better, faster and safer, to personalize our advertising across the web, to provide users a personalized experience or to measure the effectiveness of our efforts.

Cookies are small text files that are automatically created by your browser and stored on your device when triggered by the online offering or mobile app. Web beacons operate in conjunction with cookies as a small imperceptible graphic image that tracks a user action when taken (e.g. clicking on a link in an email). Other scripts and code snippets load and operate when visiting our websites or using our apps which transmit data about your device and usage of the relevant website or application.

Our use of these technologies falls into three categories:

Some of these technologies may be permanently placed on your device until you remove them (persistent cookies) while others are temporary and are removed after you close your browser (session cookies).

Our service providers use of your data on our behalf is subject to contractual arrangements between us and them. When you take certain actions, or engage with advertisements of our services, on other websites across the internet, selected third-party organizations place and use cookies and similar technologies to collect data about your activities. This data may be combined with other data they have acquired and used to profile your interests and serve you advertisements of interest. The processing of your data by these third parties is subject to their privacy practices over which we have no control.

You may click the button below to access our Cookie Consent Manager tool. It is a browser cookie-based tool that allows you to modify settings related to certain Functional or Advertising cookies and related technologies. It is not possible to modify settings to Operationally Required cookies and related technologies. The tool works by communicating the selected setting to third party companies to initiate a third party’s opt-in/opt-out mechanism, if available. The effect of such selection may be described in the third party’s cookie and/or privacy statements. If the tool is unable to integrate with a third party this will be noted in the Detailed Settings description within the tool with information about such third party. The Detailed Settings descriptions will also provide information about the cookies and other technology we use.

The tool only works on the Internet browser you use to make your choice and it will only function properly if your browser is set to accept third-party browser cookies. If you delete cookies, change browsers, computers or operating systems, you will need to make a new selection.

You are always free to completely block cookies if your browser or device permits, although doing so will interfere with your use of some of our websites’ features or content. Review your browser settings to do so.

For more information about targeting and advertising cookies and how you can opt-out from a range of third parties generally, visit:

• Network Advertising Initiative: http://www.networkadvertising.org/choices

• U.S. Digital Advertising Alliance: http://www.aboutads.info/choices

• Digital Advertising Alliance of Canada: http://youradchoices.ca

• European Digital Advertising Alliance: http://www.youronlinechoices.eu

Note that using the opt-out tools provided by these initiatives are also browser and device specific. As well, deleting cookies can remove your opt-out preferences, so you will need to periodically refresh your opt-out preferences.

To set “Limit Ad Tracking” on various iOS devices, please click here.

To opt-out of Google interest-based ads on Android, open your Google Settings app > Ads > Enable “Opt out of interest-based advertising”

Certain of our service providers allow you to directly limit their ability to target you with advertising. Follow their respective instructions below. Please note this list is subject to change. Contact us as noted at the beginning of this Privacy Notice for the most up-to-date listing.

10. Data Controllers

The RB Global company responsible for the handling of your personal information depends on the brand you are interacting with and where you are located:

A. Core asset disposition services

B. Other asset disposition-related services

11. Other information regarding privacy

11.1 Responsibilities for receipt of information through services

When using our solutions, you may receive or have access to another person’s information. For example:

• While we do not identify sellers and buyers on the IronPlanet marketplaces, certain sellers may offer inspection privileges in which case bidders will have access to name, address and contact information of an equipment manager to arrange for inspection

• Once a buyer pays for items on the IronPlanet marketplace, they will receive information about the seller (name, address, contact information) to facilitate the pick-up of their purchases

• Sellers advertising on the public Ritchie List and Mascus listings sites receive the contact information of interested buyers when an inquiry is made through the contact functionality

• Interested buyers have access to the name and contact information of a seller advertising an item in a listing on the public Ritchie List and Mascus listing sites

You may use the information received or which you’ve been given access only to interact with the other person as part of your transaction or to comply with regulatory obligations. You must comply with all applicable law and, in particular, provide the other person with any data subject rights to which they are entitled. You are solely responsible for determining whether you may lawfully use the information received or accessed for other purposes. Note that certain information may also be subject to usage restrictions in accordance with our terms of use or buyer terms and conditions.

11.2 Providing us with third party personal information

If you provide us with personal information relating to another person, you must obtain the consent of the person or the disclosure of the information to us must be otherwise legally permissible. You must inform the other person of how we process personal data in accordance with this Privacy Notice.

11.3 Children's privacy

Our solutions are not intended for use by children. We do not knowingly collect information from users or participants who are considered children under applicable laws. To participate in an auction or use our services, you must be 18 or older.

11.4 Logging in to IronPlanet's online marketplaces using your Ritchie Bros. Auctioneers web account

We permit you to use your Ritchie Bros. Auctioneers online web account credentials to log in to IronPlanet’s online marketplaces. To facilitate this cross-solution authentication, when you register an account with Ritchie Bros. Auctioneers, we automatically create a dormant account for you on IronPlanet that becomes active only when you first sign-in.

11.5 Logging in to a preferred provider's site using Ritchie Bros. credentials

We permit certain of our preferred partners to authenticate your online access to their website or webservices using your IronPlanet or Ritchie Bros. Auctioneers online credentials. If you choose to do so, when logging-in you will be redirected to our website to enter your credentials. Once you successfully login, you will be redirected again back to the partner’s site. Your personal information collected by the partner when using their site will be handled by them for the purposes they disclose to you (such as in their privacy notices).

11.6 Links and Social Media Presences

Our websites contain links to other sites including sites maintained by our customers, third party service providers or preferred or recommended providers. We are not responsible for the privacy practices of such other sites. We encourage our users to read the privacy notices of all websites they choose to visit that collect personal information.

RB Global maintains publicly accessible profiles in various social networks listed below. Our social media presence ensures an internet presence that is as comprehensive as possible – which supports our legitimate commercial and marketing interests.

Social networks are able to analyze your user behaviour when you visit their websites or other sites with integrated social media plug-ins, or you use their mobile apps. When you’re logged-in to your social media account and you visit our social media presence, or you click on a hyperlink to our social media presence and then log-in to your account, the social media operator associates your visit with your social media user account. It may also be possible for the operator to identify you when you are not logged-in or do not have an account. All of this is made possible by the placement of tracking tools on your browser or device that are associated with the social media operator. These allow the operator to receive information from our websites which it combines with information it receives elsewhere on the internet or from other sources.

Social media operators use the information gathered about you to create user profiles that store your preferences and interests. The profiles are used to tailor advertising to you based on your interests both within and outside of their respective social media sites and across any device you’ve used to access the social media site. The information is also used by operators to provide anonymous measurement statistics and demographic data to us as administrators of our social media presence. We use this data to create content more relevant to our target audiences. For details of other uses of this data by operators, please refer to their respective privacy notices. For further information about our collection of data using cookies, web beacons and similar tools when you interact with our digital services, check out “Cookies & similar technologies and your preferences“.

For individuals with rights under the GDPR, when you visit one our social media presences, we are jointly responsible as controllers together with the social media operator for the data processing activities triggered by your visit. You may assert your rights against either of us, but please note, despite having joint responsibility we have no real influence over the data processing activities conducted by the social media operator. Refer to the information below for the specifics of each social media operator.

11.7 Regional disclosures

This Privacy Notice establishes our global principles for the collection, use, disclosure and storage of personal information that is processed by the RB Global member companies covered by this User Privacy Notice in the course of operations. Certain places where you are doing business with us or where the website or application you are interacting with is located or hosted may have specific requirements concerning personal information which may be found under our State Privacy Disclosures.