Surplus.com Privacy Policy
Effective Date: 2/1/2024
This Privacy Policy is provided by The Surplus.com Corporation (“Surplus.com”), a Delaware Corporation. This Privacy Policy is intended to inform Surplus.com’s Users (as defined below), the Users of the Surplus.com website (“Website”), of Surplus.com’s practices related to Personal Data or Personally Identifiable Information.
Surplus.com respects data privacy and all data privacy rights. Surplus.com aims to process and store Personal Data received from Users and Customers or any third-party in accordance with applicable data protection laws.
-
Definitions.
-
“Customer” means a User of Surplus.com who creates a User Account with the Website.
-
“Data Subject”, “You”, or “Your” means any person whose Personal Data is collected or processed by Surplus.com.
-
“Personal Data” or “Data” is defined as any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identify of that natural person; (Art. 4, GDPR).
-
“Website” means the Surplus.com Website and associated services.
-
“User” means any user of the Surplus.com Website, including Customers. Users may be defined as individuals who utilize Surplus.com’s services for buying or selling.
-
“User Account” means an account provided by Surplus.com to Customers, which provides additional access to the Website and certain services specific only to Users who create a User Account.
-
Data Collected.
Surplus.com collects data in two manners. First, Surplus.com collects general data that the User generates automatically when the User connects to the Website. This information includes cookies, website analytics, IP address, device information, and other technical data that is not geared to identify the User, but rather is collected for record keeping purposes regarding who visits the Website (“Technical Data”).
Surplus.com also collects personally identifiable information, provided by the User by making a User Account. This information includes the User’s name, email address, mailing address, phone number, and other related data (“Customer Data”). Less invasive data is also collected, including contact information and preferences related to marketing and viewing of the Website (“Marketing Data”).
Additionally, there is often Data that is collected and retained pertaining to the transactions that occur through Surplus.com’s services (“Business Data”). Business Data is collected in a manner that is intuitively obvious to the User, making it easy to understand the information they provide is the Data collected. This Data includes, but is not limited to, information pertaining to the auctions, sale, posting, and displayed information provided by the User when attempting to sell a product or service through Surplus.com’s Website. Business Data is also obtained when Users place bids on these offered products or services by other Users. This Data includes, but is not limited to, financial information, communication between the Users, mailing addresses for deliveries, User government ID numbers, date of birth, and other related data that Surplus.com requires or is entitled to by applicable law to collect and process and that Surplus.com may need for the User’s authentication or identification, or for the verification of the Data Surplus.com has collected.
-
Data Collection Methods.
Surplus.com collects Data in a few ways. Users generate Data for Surplus.com when Users create User Accounts, place an order, subscribe to newsletters, fill out forms, use Surplus.com’s Live Chat feature, open a support ticket, or when entering information on the Website to provide Surplus.com with feedback. Users are not notified each time Data is collected, rather Users are on notice that information submitted through the Website is voluntary and Surplus.com preserves the right to collect such Data.
-
Use of Data.
Surplus.com collects all Data in order to fulfill our contract with the User.
-
Fulfillment of Contract. Surplus.com has a contractual duty to broker the sales between Users, please see Surplus.com’s Terms of Use Agreement. To accomplish this duty, Data is used first to enter into a contractual relationship with the User. Second, Data is used to enabling and performing transactions with other Users, including transmission of Personal Data, where necessary to perform the transaction, including transactions that are not completed, but started. Data is also used to enable the delivery of the purchased items. This Data is often on display, via an item page set up by a User, but will be retained by Surplus.com and transferred to other Users when appropriate for the transaction. This Data includes drop off/pick up locations for transactions, contact information of the User selling or buying the product, and other related information only necessary to enable the transfer.
-
Release of Data for Legal Obligations. Due to the transactional nature of Surplus.com’s Website, sometimes legal obligations or court orders require disclosure of Data. These proceedings, if valid, will be adhered to by Surplus.com.
-
Vital Interests of Another Natural Person. At some points, Data may be disclosed to prevent, detect, mitigate, or investigate unlawful activities that may result in impairment of a User’s vital interests or the vital interests of another natural person. In this event, Surplus.com may disclose Data to aid in the prevention of this harm.
-
Additional Information for Payments. In addition to Surplus.com’s duty to fulfill its contractual obligations to its Users, Surplus.com also maintains a duty of professional secrecy regarding its payment process. Data may be shared with third-party financial institutions in order to perform transactions. This Data is shared only with institutions that require such Data to perform the transaction. User’s agree to allow these third-party financial institutions to utilize their Data in a manner appropriate for the transaction. Third-party financial institutions shall not use User’s Data in any manner other than to aid the financial transaction.
-
Consent. For other purposes, not disclosed in another enumerated scenario listed in this section, Surplus.com may use Data from Users if Users consent.
-
Miscellaneous. In events not already described in this section, Surplus.com may use User’s Data to optimize the Website, the User experience, or the overall ease of Surplus.com’s services. This Data usage includes User’s preferences, general flow of the User experience, and User’s feedback. This type of Data is only used to make the User experience more optimal, and is not utilized by any third-party company.
-
Protection of Data.
Surplus.com takes makes security a priority and utilizes security measures to protect against unauthorized access to or the unauthorized modification, publication or destruction of Data. These security measures include internal audits of data collection, storage and processing practices and security as well as physical security measures to protect against unauthorized access to the systems where Surplus.com stores Data.
Surplus.com restricts Data access to Surplus.com employees, contract workers, and agents who need such information in order to provide, develop or improve the Website. These individuals are subject to confidentiality obligations and may be subject to disciplinary action, including dismissal and prosecution, if they fail to meet these obligations.
Surplus.com does not maintain all its Data independently. In the event that Data is stored through third-party companies, these third-party companies only maintain the Data without interruption or alteration. This Data stored by third-party companies is not utilized by third-party companies in any manner, beyond what is previously disclosed in this Privacy Policy.
Data is maintained on an indefinite basis. There is not regular deletion, extraction, or modification of User’s Data. User Accounts are maintained indefinitely.
-
Cookies.
Cookies are portions of information about when and how Users access the Website. Surplus.com collects cookies from Users that utilize the Website to improve the User’s experience and Surplus.com’s services. Users can set their external browser to notify the User when a cookie is sent. Users can decide whether they accept or refuse the tracking of cookies. But, if the User chooses to turn off cookies, it may affect the User’s ability to access or use the Website.
-
Third-Party Services.
Surplus.com may need to share or transmit Data to third-party service providers to provide the services through the Website. Surplus.com will advise Users when Data is shared with third-party service providers or vendors. Disclosures of Data to third-party companies will only occur for transactions, or other types of services that Surplus.com utilizes third-party companies to fulfill their contractual obligations to Users.
For Third-party services, any collection, processing, transfer, or storage of Data will be handled according to the third-party’s privacy policy. Users should refer to these parties’ policies and terms of use for additional information.
-
California Privacy Rights.
California residents have a right to request that Surplus.com disclose what Personal Data we collect from you and whether, and how, we disclose or sell that Personal Data. California residents may also request that Surplus.com delete any Personal Data collected or maintained by Surplus.com from the User. To submit a request for a list of the categories of Personal Data collected from you or to request that Surplus.com delete your personal information, please email us at support@surplus.com.com or send a letter to our US-based legal counsel at the following address:
Surplus.com.com, LLC
c/o Revision Legal, PLLC
444 Cass St., Suite D
Traverse City, MI 49684
United States of America
-
Rights as a User.
-
Right to Access and Correction. Users may request that Surplus.com confirm to Users whether Surplus.com are processing User’s Personal Data and what Data Surplus.com is processing. If Users’ information is incorrect or incomplete, Users may request that the User information be corrected or completed. If Surplus.com has shared User’s information with third-parties, Surplus.com will inform them of the correction, to the extent required by law.
-
Right to Erasure. If the legal requirements exist, Users can request immediate deletion of User Personal Data from Surplus.com. This is especially the case when:
-
Users’ Personal Data is no longer needed for the purposes for which it was collected;
-
The legal basis for the processing was User consent only and the User has revoked it;
-
User has objected to processing for promotional purposes;
-
User has objected to processing based on the legal basis balance of interests for personal reasons and Surplus.com cannot prove that there are legitimate reasons for processing;
-
Users’ Personal Data has been processed unlawfully; or
-
Users’ Personal Data must be deleted in order to comply with legal requirements.
If Surplus.com has forwarded User’s Data to third-parties, Surplus.com will inform the User about the deletion, insofar as required by law. Please note that User’s erasure right is subject to restrictions. For example, Surplus.com may not or must not delete Data that Surplus.com still needs to retain due to legal retention requirements. Also, Data that Surplus.com needs in order to assert, exercise or defend Surplus.com’s legal rights is excluded from Users’ cancellation right.
-
Right to Object to Processing. If the legal requirements are met, Users’ can request a limitation of Data processing from Surplus.com. Relevant circumstances include when:
-
User disputes the accuracy of User’s Personal Data that Surplus.com has (Surplus.com must have the opportunity to verify this);
-
The processing is not lawful, and User requires a restriction of use instead of erasure (see the previous section);
-
Surplus.com no longer needs User’s information for the purposes of processing, but User needs it to assert, exercise or defend User’s rights;
-
User has raised an objection for personal reasons, Surplus.com can halt processing until the User’s objection has been evaluated.
If the User can show a valid right to restrict processing, Surplus.com marks the Data in question to ensure that it is processed only within the limits that apply to such restriction (for example, to defend legal claims or within the parameters of User’s consent).
-
Right to Data Portability. Users have the right to receive personally identifiable information Users have given to Surplus.com for fulfillment of the contract or on the basis of consent in a transferable format. In this case, Users can also request that Surplus.com transmit this Data directly to a third-party, insofar as this is technically feasible.
-
Right to Revoke Your Consent. If the User has given Surplus.com consent to the processing of User’s data, the User can withdraw it at any time for future processing. The lawfulness of the processing of User’s Data prior to revocation remains unaffected.
-
Right to Object to Direct Marketing. Users can also object at any time to the processing of User Personal Data for advertising purposes. Please note that there may be an overlap between Users revocation and the use of Users’ Data as part of an ongoing campaign.
-
Right to Object for Personal Reasons. Users have the right, for reasons that arise from Users’ particular situation, to object to Surplus.com’s processing of Users’ Data to the extent that the processing is based on a legitimate interest basis. Surplus.com will then stop processing Users’ data, unless Surplus.com can, in accordance with legal requirements, prove compelling legitimate reasons for further processing that outweigh Your rights.
-
European Union Right of Appeal to a Supervisory Authority. European Union residents have the right to file a complaint with a data protection authority. In particular, EU residents can contact the data protection authority, which is responsible for their place of residence or state, or who is responsible for the place where the violation of data protection law has taken place.
-
Asserting Rights
If a User wishes to assert any of the above described rights, please address the User’s request by stating the User’s current address, User’s date of birth and User’s e-mail address to: support@surplus.com
Surplus.com will use User’s information provided in this request exclusively for comparison with the information in our database and thus for the protection of User’s Personal Data against access by unauthorized third-parties.
Questions and Suggestions
If Users have any questions or suggestions about data protection, Surplus.com looks forward to receiving Users’ mail.
Please send written inquiries to: support@surplus.com