User Privacy Notice

Effectief met ingang van 27 februari 2020

1. Scope of and updates to this Privacy Statement

2. Who to contact with questions or for more information

3. What personal information we collect and process

4. Purposes and legal basis for handling your information

5. International transfer

6. Storage and erasure

7. Data security

8. Privacy related requests and your preferences

9. Cookies & similar technologies and your preferences

10. Data Controllers

11. Other information regarding privacy

1. Scope of and updates to this Privacy Statement

Being the trusted choice for your global asset management and disposition needs starts with Ritchie Bros.' unrivaled commitment to customer service. As part of that commitment, we respect the privacy of our customers and users. Whether we are helping to appraise, sell, inspect, buy, refurbish, transport or finance your heavy equipment, trucks, and other assets around the world, we are guided by our desire to meet your needs in a convenient, fair and transparent manner – and that includes making sure you understand how we handle personal information and what corresponding rights are available to you.

Ritchie Bros. is a global organization with companies located around the world that operate our multi-channel solutions for buying and selling, as well as our related service offerings. Our brand solutions include:

This Privacy Statement applies to ritchiebros.com and other Ritchie Bros. websites, services and solutions that collect information and display or link to this Statement, and that are owned and operated by a member of the Ritchie Bros. group of companies. This Privacy Statement does not apply if the Ritchie Bros. website, service or solution does not display or link to it or where the website, service or solution makes its own privacy notice available. This Privacy Statement applies equally to our digital handling of your information as it does to our offline collection and handling.

To understand which Ritchie Bros. company is responsible for the collection and further processing of your personal information, see the section below entitled "Data Controllers". We may change this Privacy Statement at any time by posting the revised statement on this website and indicating the effective date of the revised statement. The revised Privacy Statement will be effective once posted unless we state otherwise.

We may also supplement or modify our privacy commitments in this Privacy Statement through other notices we make available to you or through contractual commitments we enter in writing.

Where we've provided a translation of the English language version of this Privacy Statement, such translation is provided for your convenience only. To the extent there is any inconsistency between the English language version and such translation, the English language version takes precedence.

2. Who to contact with questions or for more information

If you have any questions or comments about this Privacy Statement or our practices, you can reach our Data Protection Officer through our Data Privacy Office at:

Ritchie Bros. Data Privacy Office

c/o Ritchie Bros. Auctioneers Incorporated

9500 Glenlyon Parkway

Burnaby, British Columbia, Canada

V5J 0C6

3. What personal information we collect and process

Our multiple solutions are designed to help your business Move, Build and Grow.

Most of the information we collect, and process, is equipment related information and business contact information relating to, and provided by, our customers' employees or other workers.  In general, information is collected when a customer engages one of our brand solutions to provide services by entering a contract, creating an online account, coming into one of our auction locations to register for an auction, providing us information through a webform, or otherwise interacting with us.  Information may also be obtained from other sources.  For instance, brand solutions may share information, or an outside service provider is used to verify or supplement what we've received.  In some cases, the information we obtain is generated automatically when users engage with our digital services, such as browsing our websites, using our mobile applications, opening our communications or clicking on our advertisements.

While our solutions are generally not targeted at individuals buying or selling for personal, family or household purposes, individuals do engage with certain of our solutions from time to time for these purposes.

Some information we obtain from you may be more sensitive in nature and depends on the services you are engaging us to perform.  For instance, we may require ID numbers from a driver's license or other identity documentation to process transactions or facilitate the extension of financing to your business. Some of this information may be considered more sensitive in nature.

Certain of our brand solutions obtain and store personal information for the benefit of our corporate or government customers to provide those customers specific technology services.  In those circumstances, we are acting as a service provider and collect and process that information in accordance with our customers written instructions and our contractual arrangement.

Offering you the choice of multiple solutions for different needs means that each solution operates somewhat differently.  To learn more about the categories of information handled by specific solutions and their sources, read on.

3.1 Core asset disposition services

Our core asset disposition services include:

The list below describes examples of the collection and processing of personal information by category and source for the core asset disposition services. Check marks indicate the relevant brand practices.

Note that since online bidding and private treaty sales for Kruse Energy and Leake Auction are facilitated through, and managed and supported by, IronPlanet's online auction platform, bidders and sellers (in the case of private treaty) must first create an IronPlanet account. Accordingly, the information collected automatically (including through cookies or other similar tools) as identified under "IronPlanet" in the list below applies equally for Kruse and Leake online bidders and buyers.

Category: Account Registration Data

Description:

Data that identifies you – name, title, employment status, addresses, telephone numbers, email addresses, account password and in some cases, personal ID document numbers (driver's license, passport, national or state identity card, or SSN), age, nationality, tax identification numbers, and your signature

Description:

Data needed to complete a check of the US Federal System for Award Management and an End User Certificate facilitating the transfer of an asset to a party outside the US Department of Defense – name, social security number or other personal ID number, date of birth, place of birth, telephone number, address, purpose of buying, signature and if applicable, their role as officer, partner or agent with the purchaser

Description:

Social security number along with other identifying information on tax exemption forms

Category: Transaction Data

Description:

Data regarding self-listings, bids, purchases, or sales in a transaction

Description:

Data regarding your online purchase of tickets to our auction events

Category: Payment Data

Description:

Banking information (account numbers and payment details) and credit card information necessary to process a bidding deposit or transaction

Description:

Payment information (account numbers and payment details) and credit card information necessary to process ad placements or other services

Category: Shipping and Logistics Data

Description:

Shipping, billing, and other information you provide in connection with the purchase or shipping of an asset, as well as information required for bills of lading or customs clearance (such as tax identification numbers or other identification numbers)

Category: Industry Preference, Interest and Feedback Data

Description:

Data regarding industry and equipment interests and preferences or assets you wish to value or sell when you complete a webform, engage with us on social media or at tradeshows, or participate in surveys, feedback forms, our online community discussion platform, contests and focus groups

Category: Customer Service Data

Description:

Information relating to inquiries about services, dispute resolution, and, where applicable, recorded customer service calls

Category: Visitor and Incident Log Data

Description:

Log data collected in connection with your entering our physical offices or auction sites, or in the event of an incident (motor vehicle collision, injury or environmental event) you are involved in or witness while onsite

Category: CCTV Data

Description:

CCTV video footage at our physical offices and sites

Category: Online Account Usage Data

Description:

Data generated through actions you take which are linked to an online account, for instance when you create watchlists or saved searches, search inventory or results, change your communication and marketing preferences, register to bid or enter a Ritchie Bros. Auctioneers' auction ring online, whether you bid or not (including assigned bidder numbers, bid amounts, winning bids), or register for bidding privileges on an IronPlanet marketplace

Category: Geolocation Data

Description:

Geolocation data, including that of your mobile device when you enable the use of location services in your device settings or in app

Category: Device Connection Data

Description:

Computer and other device connection data, such as page view statistics, data traffic to and from websites, referral URL, your IP address, access times, browser, language settings and web server log information

Description:

Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, cookie ID, or IP address from which the device accessed our services

Category: Online Activity Data

Description:

Webpages of ours you visit, time of access, frequency and duration of visits, the links you click or other actions you take as part of your use of the website or mobile app

Description:

Information about your activities and interactions with sponsored or featured digital advertising content or our marketing emails, such as advertisements you were shown, when and where they were shown, and whether you clicked and took any subsequent action like filling out a webform or telephoning a seller on Mascus about their equipment

For further information about the collection of data using cookies, web beacons and similar tools when you interact with our digital services, such as website or email communications, interact with advertisements or initiate certain telephone calls, check out "Cookies & similar technologies and your preferences" below.

We combine or link the personal information we collect from you with information we receive from the other sources identified in the chart above. Where we receive data from third parties, we try to confirm the information was lawfully collected and disclosed to us.

IronPlanet's other technology solutions – Marketplace Direct, Super Marketplace Direct, and GovPlanet Direct –power the direct marketplaces of some of our corporate and government customers.  To participate in their online sales events, you must have an IronPlanet account.  We do not handle the exchange of funds or otherwise participate in the closing of any transactions between you and our direct marketplace customers.  Information regarding your bidding activity – user name, location, bids placed – as a user of their direct marketplace is collected and made available to our customers for use and handling in accordance with their respective privacy policies.  As a service provider, we do not use this information for our own commercial purposes other than to perform the services of hosting and managing the functionality of the marketplaces for our customers.  If you have concerns about the use and handling of your information by these customers, you will need to contact them directly.

Mascus also provides tools for professionals to help manage their inventory, understand the used equipment market, publish listings on the Mascus online listing marketplace and reach bigger buying audiences.  Mascus' tools for professionals are part of the suite of tools offered under the Ritchie Bros. Asset Solutions brand.  Mascus systems power these tools for our professional customers.  For more information about the handling of personal information when interacting with these tools, refer to the Ritchie Bros. Asset Solutions section below.

3.2 Other asset disposition-related services

Our other asset disposition-related services include:

Ritchie Bros. Asset Solutions (RBAS) is a collection of tools – cloud-based inventory management system (IMS), managed and hosted custom webshops, mobile apps for inspection and inventory management, marketing tools and a data insights module – that we make available to our OEM, corporate and government customers on a subscription basis.  The tools are configured for use by our customers' end users – both for their employees and other personnel and for interested buyers of their equipment.

If you are an RBAS customer, your end users need to understand how you (and we) collect and process their personal information.  Accordingly, if you use a custom webshop or mobile app, you agree to post an up-to-date and accurate privacy notice on those tools that complies with the laws applicable to your business.  You also agree to obtain consent from your end users for the use and access of their personal information by us and other third parties.

Except as noted below, information about end users interacting with RBAS tools is collected and processed by us as a processor on behalf of our customer in which case we act on the instructions of, or as permitted by, our customer or their authorized internal end users.  We don't use the personal information we maintain about your end users who interact with your custom webshop to independently contact or market to them.  If you are an end user and have questions or concerns regarding the handling of your information, refer to the privacy policies made available by our customer (who may be your employer) through the relevant RBAS tool.

If you are a representative of our corporate or government customer subscribing for services, we collect your business contact information to establish and maintain our relationship with our customer as their service provider (e.g. customer service and invoicing).

We also collect IMS end user credentials and interactions with the IMS to monitor, log, analyze and test the security of the systems, networks, databases and applications supporting the IMS and to ensure compliance by the customer with our contractual arrangements.  We also use this interaction data to monitor and improve the general performance and usability of the IMS such as enhanced features, GUI layouts, and page responsiveness.

Information and data collected by us through management of RBAS tools will be used as necessary to comply with our legal and regulatory obligations.

Ritchie Bros. Financial Services facilitates financing and leasing solutions for auction customers and other equipment owners and dealers referred through our partner networks.  We do not offer financial products for personal, family or household purposes.  Personal information collected includes:

For further information about the collection of data using cookies, web beacons and similar tools when you interact with the Ritchie Bros. Auctioneers or IronPlanet website, our custom webforms or our email communications, check out "Cookies & similar technologies and your preferences" below.

We combine or link the personal information we collect from you with information we receive from the other sources identified in the chart above. Where we receive data from third parties, we try to confirm the information was lawfully collected and disclosed to us.

4. Purposes and legal basis for handling your information

We use your personal information for a range of different business and other purposes and according to different legal bases of processing.  We use information collected to primarily provide solutions and services, to respond to requests about our solutions and services, to protect our rights and the rights of others, to provide you with personalized digital advertising and marketing, to provide customer service, to detect, prevent, mitigate and investigate fraudulent or illegal activities, and to communicate with you about your account and our solutions and services.  See the table below to learn more about examples of our processing purposes.

4.1 What we process information for