Privacy Policy

At SURUS INVERSA SLU. we know the importance of your data, therefore we establish the most strict security measures and we only use your information for these clearly described purposes.

Transparency is one of the values we identify with the most, that is why we want you to know from the beginning that the privacy of your data is very important to us. This privacy policy explains which personal data we collect from our users and how we use it. Please, read carefully these terms before giving your personal information to this website.

We made all efforts to create a reliable and safe space, which is why we want to share with you our principles regarding privacy:

We never request any personal information unless it is necessary for offering our services.
We never share personal information from our users with anyone, unless we need to comply with any law or we have your express consent.
We never use your personal information for any other purpose that those expressed in this privacy policy.

Note that this Privacy Policy is subject to change depending on legal or own regulations. We recommend you to visit this page regularly. It will be applicable from the moment users fill any of the forms to collect personal information.

SURUS INVERSA SLU complies with Spain’s Act 3/2018, 5 December, of protection of personal data and guarantee of digital rights, as well as European regulations 2016/679 from the European Parliament on April 27th 2016 regarding data protection for physical individuals, and with Law 34/2002 from July 11th for Services from Information Society and E-Mail (LSSI).

Responsibility of handling

Identity: SURUS INVERSA SLU
Fiscal Identification Code: B86058567
Trademark: Escrapalia.com
Address: Camino de las Huertas, 18, 2º Pl, 28223 Pozuelo de Alarcón, Madrid
Phone number: 913 524 507
E-mail address: info@escrapalia.com

Principles we apply to your personal information

When handling your personal data, we apply the following principles which comply with current rules from the European General Data Protection Regulation:

Principle of lawful, fair and transparent processing: We will always ask for your consent when handling your personal data for one or more specific purposes, which will be notified to you previously with complete transparency.
Principle of data minimization: We will only request strictly necessary data according to the purposes of the request. As few as possible.
Principle of limited storage time: Your data will be stored for as long as it is necessary for their purpose. We will inform you about the corresponding period of time. In case of subscribers, we regularly revise our lists and remove users inactive for a long period of time.
Principle of integrity and confidentiality: Your data will be handled in a way that ensures safety and confidentiality for your personal information. Please be aware that we take all necessary measures to prevent non-authorized access or misuse of data from our users from third parties.

Minors

Products and services from SURUS INVERSA SLU., as well as marketing campaigns, are addressed to adults. We only collect and handle your personal information if you are at least 16 years old. Any data from someone younger than 16 years old will be removed.

If you are less than 16 years old and access this website, you should not register as user.

How we collect personal data in this website

Every time you register in our website.
When browsing our website.
When filling a contact form with your personal information.
When participating in our direct marketing campaigns.
When third-parties share your personal data with your authorization.
When commenting through the blog.
When participating in our social networks.
When filling a form showing interest in specific products or items.
When requesting additional information about a product to Surus Inversa employees.
When requesting information about a product in Escrapalia.com that you have seen in our digital marketing campaigns or ads in other platforms.

We appreciate that you help us keep your personal information updated. Let us know about any change in your contact information or preferences.

Information gathered by Escrapalia

When any user accesses this website, e.g. to search for products, request information about auction lots, reply to a post, subscribe or make an agreement, he/she is giving away personal information under Surus Inversa’s responsibility. This information can include personal data such as your IP address, name, physical location, e-mail address, phone number and other information. Through the facilitation of this information, the user is agreeing on the collection, use, management and storage of that information by Escrapalia.com as described in the Legal Notice and the present Privacy Policy.

A. When you register an account in Escrapalia, aiming to participate in offered auctions and services, this is the necessary information you are providing:

First and Last name
Address
Phone number
Email address
Company or personal ID number (DNI/CIF)
Company name (if appropriate)
Nationality
Birthdate

All this information is stored and can be accessed only through your personal login and password.

This information is used to verify your identity, authorize your registry and contact you on matters regarding your account. Furthermore, you will receive information about auctions that could be of your interest.

For the legitimate interest of Surus, we create an automated profile with the user's navigation on the web, with the preferences selected in their profile and their interaction with the newsletters.

The mobile phone number is used to verify the identity of the natural or legal person who is proceeding with the registration.

Following the statements described on article 21 of the LSSI regulation, we inform you that when a previous contractual relationship is in place, all email data provided by the user can be used for sending commercial communications regarding products or services related to the contract with the user.

You have the chance to oppose to receiving commercial communications when registering as a user as well as every time you receive a commercial communication, always for free.

When opposing, the user will state he/she does not consent her personal data to be treated and communicated for commercial or advertising purposes regarding products, services, offers, promotion of products similar to those offered, surveys, statistics, market analysis, and the creation of User profiles in order to customize and improve our services.

B. When you end up as winner of an auction and choose credit card as payment method, you will be redirected to a payment gateway, which will request the following additional information:

Name as it appears on the credit card
Valid credit card number
Credit card type
Expiration date
Billing address
Your credit card´s security number

Your credit card will be charged only if you win the auction and choose this payment method once it closes.

C. When the auction’s property is restricted to a specific type of users, you will need to submit your EndUserCertificate (EUC) whenever it is requested to participate. The information contained in your EUC will be shared with the corresponding authorities in order to certify the property transfer to the auction winner.

D. Escrapalia also gets information from all the people that access our website, as well as that information obtained through cookies and other tracking technologies. For more information, check our Cookies Policy.

If such IP addresses are suspected to be used for criminal purposes, we are obliged to inform security organizations about a potentially fraudulent activity as well as share all information we have.

If you suspect your personal information has been used for purposes other than those stated in this Privacy Policy, or if you have any doubts about how Escrapalia collects, stores, uses, or destroys your personal data, you can contact us to clarify anything you need to know.

You may deactivate or cancel your account anytime on www.escrapalia.com.

Why we handle your data

We use your data for different purposes, which we will describe in this section.

The information requested from users to create their Escrapalia account is for billing purposes if a lot is awarded at auction. At the same time, these data, if you accept to receive Newsletters, can be used to create a user profile and the content of the newsletter is of possible interest to you. For this same purpose, web cookies are used, both necessary and optional.
Escrapalia collects your contact data, information about your preferences and data about the use of websites and communications. Escrapalia can also use information about purchases or bids you make to determine those products that can be interesting to you and to contact you depending on your preferences.
The mobile phone is used to send a code by SMS to validate the user, just as it can be used to contact the user in case Surus Inversa SLU needs it.
Escrapalia can also use your personal data to develop individual user profiles through statistical processes. As a result of the development of profiles, you can received customized communications related to auctioned lots of your interest. Sending Newsletters and events information. Information about other lots and newsletters are only sent if you have previously agreed on it.
For sending follow-up information about auctions you are participating in.
For making a payment: Every time you make a purchase after being the winner of an auction. This information is necessary to properly manage the purchase, preparation and delivery of the invoice, collection orders and information related to the management of the auction.
Complying with legal regulations: in order to comply with legal regulations about information requests from legal institutions, regulatory organizations and law enforcement departments. Everyone involved in the handling of data is subject to laws that apply in the country they work in and are obliged to comply with them. These obligations include the transmission of personal data to legal institutions, regulatory organizations and law enforcement departments in special circumstances. SURUS INVERSA SLU. is legally compelled to hand over this information to those organizations.
There are other purposes for the handling of your personal data:
- To ensure compliance with conditions of use and applicable laws. This may include the development of tools and algorithms that help this website ensure confidentiality of the personal data collected.
- To support and improve services offered by this website.
- To manage social networks. Escrapalia is present in social networks. The handling of data about followers of Escrapalia.com official pages in social networks will be subject to this section. SURUS INVERSA SLU. will handle your data for the purpose of properly managing its presence in social data, informing about activities, products or services of Escrapalia.com. The user will have previously accepted conditions of use, privacy policy and access regulations stated by the social network. There may be also other purposes allowed by the social network.

Remarketing

Remarketing allows us to reach people that have previously visited Escrapalia.com and associate a specific audience to a specific message. Remarketing is a way to make users who visited our website do it again.

As a user of Escrapalia.com, we inform you that we are collecting information for this remarketing function at Escrapalia.com.

This information is collected by cookies from service providers. For more information about data collected by these cookies, check the Privacy Policies of these services:

Facebook / Instagram
Linkedin
Twitter
Pinterest
Google associated services

If you don’t want cookies to collect this information, you can disable the use of Google cookies through Google’s advertising settings. Location.

This type of services allow interaction with social networks and other external platforms directly from the pages of this website. Any interaction and information collected by this website will always be subject to the privacy settings of the user in each social network. In case a service for interacting with social networks is installed, there is a possibility that it collects information about web browsing even for users that are not using that service.

Advertising through other platforms

Escrapalia.com uses advertising platforms with the following providers to generate ads and campaigns:

Facebook / Instagram
Linkedin
Twitter
Pinterest
Google associated services
Other platforms: Milanuncios, Mascus, Machinery Trader, Autoline, Interempresas, Autocasión, Fotocasa, Idealista

When generating ads, the audience can be segmented by:

Location
Demographic data (age, gender, etc.)
Interests (activities, hobbies, etc.)
Their purchases on the Internet and other channels
Etc

Data collected through these platforms is subject to this Privacy Policy from the moment the user leaves information at these platforms in order to join a subscription bulletin or request information about a product.

How long your data is stored

If your data is used for different purposes which imply different storage periods, we will apply the longest storage period.

Your personal data will be stored as long as the user does not request removal.

In any case, we limit the access to your data to those people that need to use for their working purposes.

Regarding information that is no longer necessary, either access will be limited to complying with legal obligations or they will be safely removed.

Marketing purposes: regarding the use of your information for marketing purposes, we will keep this information for that purpose during the next five years after you have authorized the receipt of communications for the last time, unless you request to be removed from them revoking the previous consent. Purposes related to the compliance with legal and regulatory obligations: specific information will be stored for as long as it is required by any applicable law (taxing, commercial, money laundering, etc.).

Data protection measures

We use several protection measures to ensure the safety, integrity and availability of your data. Even though it is impossible to ensure complete safety during the transmittal of data through Internet or any website against intrusions, both us and any outsourced or partner companies place all efforts to ensure physical, electronic and procedural protection measures to ensure data protection according to any applicable legal requirement. Amongst others, we use the following measures:

Limiting the access to your data only to those people that must do so according to their functions and who have signed a confidentiality agreement.
Storing sensible data (such as credit cards) only in encoded format.
Installing perimeter protection systems in computer structures (firewalls) to prevent unauthorized accesses, e.g. from hackers.
Monitoring regularly the access to computer systems to detect and prevent any misuse of personal information.
Handing a manual about Use Policies and information technologies control to any employee in our organization with access to information.
Implementing an Information Security System complying with UNE-EN ISO 27001 regulations and yearly audited by a certified organization.

In case we have given you (or you have chosen) a password for accessing specific parts of our websites or any other portal, app or service under our control, you are responsible of keeping it secretly and complying with any safety processes we notify to you. You cannot share your password with anyone .

Rights of users

We remind you that your rights are guaranteed. These are your rights:

Obtaining confirmation on whether or not Surus Inversa SLU. is handling your personal data.
Obtaining more details about how we use your information.
Accessing your personal data and requesting their modification or removal when, amongst other reasons, the data is no longer necessary for the purposes they were collected.
In some circumstances, users can request a limited handling of their data. In that case, we will only keep them for claiming purposes.
Revoking your consent for the handling of data for those purposes, in those cases where data handling depends on consent, as well as any marketing communication.
In some circumstances, users can deny data handling (including profiling). Surus Inversa SLU. will no longer handle data except for imperative legal reasons, or defending against potential claims.
Requesting the transmittal of data.
Users will also have the right to a proper legal consultancy and to present a claim to the authorities (in this case, the Spanish Data Protection Agency) if they consider that their personal data is used against any regulations.

Exercising these rights from your side is subject to special circumstances of general interest (e.g. for the prevention or detection of crimes) or for our own interest (e.g. keeping legal advice confidentiality). If you exercise any of these rights, we will make sure you are authorized to do so and will reply to you in a month or in the longest time allowed by Spanish laws in case it is shorter.

Legal basis

The use of your data according to previously described conditions complies with Spanish and European data protection regulations, following this legal basis:

You give your consent (You have authorized the handling of your data for specific purposes through a consent form and may revoke this given consent at any time).
Handling your data is necessary to manage a contract signed with you.
Handling your data is necessary to comply with our legal obligations.
We use your information for a lawful purpose and our reasons to do it balance potential damage to your data protection rights.

Data transfer

Many tools we use to handle your data are outsourced to a third party.

In order to offer services which are completely necessary for developing its activities, Escrapalia.com shares information with the following providers under their own privacy conditions:

Google Analytics: Web analysis service offered by Google Inc., a company based on Delaware and whose headquarters are located in 1600 Amphitheater Parkway, Mountain View (California), CA 94043, USA (“Google”). Google Analytics uses “cookies”, text files located in your computer to help Escrapalia.com analyze the use of the website by users. Information generated by cookies about the use of Escrapalia.com (including your IP address) will be directly transmitted and archived by Google in their servers in the USA.
Hosting: GoDaddy.com, LLC. Is based in the USA. More information in https://uk.godaddy.com/. GoDaddy.com, LLC handles data in order to provide hosting services to Escrapalia.com platform.
E-mail marketing and registered users: Through Zoho Corporation Pvt. Ltd., based in the USA. We handle and monitor the registry of users though tools offered by Zoho Corporation, subject to the EU-US Privacy Shield agreement, whose information is available here, and approved by the European Data Protection Committee. See Privacy Policy. For email marketing campaigns we use the Mailchimp platform and for the automatic sending of the platform's emails as information about your bids, the Sendgrid platform.
User segmentation: Piperlab, S.L, based in Spain, uses information gathered through Zoho Corporation tools to determine those products that can be interesting to you according to the preferences you show when interacting with Escrapalia.com (e-mail marketing campaigns, web browsing, etc.). For more information, see: https://piperlab.es/en/legal-notice/
Microsoft Azure: Cloud infrastructure where Escrapalia’s website is hosted and therefore its databases and programming code. We data such as lots, bids, users and their data are stored there, complying with their policies on privacy and data handling. For more information, check: https://azure.microsoft.com/en-gb/

The security policy is available to interested parties. It is available upon request at info@escrapalia.com.

If you have any question about the use we make of your information, please contact us through the e-mail info@escrapalia.com.

If you are not satisfied with the way we use your information or the way we respond to the exercise of any of these right, you can submit a complaint to the Spanish Data Protection Agency.