INTRODUCTION

At SecondBloom Auctions, located at 780 West Army Trail Rd. Suite 159 Carol Stream Illinois 60188, we take your privacy seriously. This Privacy Notice (also referred to as “Notice”) is designed to help you understand what personal data we collect, why we collect it, and how we use it. Personal data refers to any information that can be used to personally identify you, such as your name, email address, or phone number.

Please keep in mind that as an Illinois-based company, this Notice may be updated or supplemented to meet local legal requirements and provide additional information on our data processing practices. For specific products or services that involve unique data processing, this Notice may be supplemented by product-specific notices.

We encourage you to take the time to read this Notice in full. If you do not agree with the terms outlined in this privacy notice, please do not provide us with your personal data.

WHEN DOES THIS PRIVACY NOTICE APPLY?

This Notice applies when you:

-Visit or use our websites, applications, or social media channels
-Purchase or use our products, services, systems, or applications
-Subscribe to our newsletters or other marketing communications
-Provide goods or services to us
-Contact our customer support
-Attend our business events
-Or interact with us in any other way as a consumer, business customer, partner, supplier, contractor, or other person with a business relationship with us.

This Privacy Notice only applies to you if SecondBloom is considered the Data Controller for your personal data. If we are acting as a Data Processor, the Privacy Notice provided by the Data Controller will govern your personal data.

WHO IS SECONDBLOOM?

SecondBloom is an Illinois-based company that specializes in the sale of new and used horticultural assets through online auctions. When this Notice references “we,” “us,” or “the Company,” it refers to SecondBloom as the controller of your personal data.

At SecondBloom, we collect various types of data about our users depending on their interactions with our platform. This includes information provided by users directly, such as personal identification data (name, surname, title, date of birth) and contact information (email, phone number, address, country), as well as account login information (login ID, password, or other security codes). We may also collect images, quotes, and videos that can be used to identify a user, as well as financial data (credit card information, bank account data).

In addition to information provided directly by users, we also collect data automatically through interactions with our websites, applications, and digital channels. This includes device information (hardware model, IMEI number, MAC address, IP address, etc.), log information (time and duration of use of our products and services), location information (derived from IP address, Bluetooth beacons, or other location-based technologies), and information about the use of our digital channels.

We may also collect information from other sources, such as public databases, joint marketing partners, social media platforms, and other third parties. If a user has indicated they wish to receive personalized direct marketing communications, we may aggregate data from different sources to create a better understanding of their preferences and interests to serve them more relevant content.

SecondBloom may use different methods to collect information about your browsing behavior and preferences when you visit or use our website and apps, such as cookies and other tracking technologies. We also collect your IP address, browser type, operating system, referring website, and your general location. You can learn more about how we use cookies and other tracking technologies by reading our Cookie Notice.

We may use the information we collect for various legitimate business purposes, such as conducting due diligence, processing sales and billing, providing customer support, promoting direct marketing, securing our assets and interests, complying with legal obligations, defending legal claims, and improving our products and services.

If you choose to participate in any sweepstakes, contests, or other competitions through our website, we will use your information to facilitate your participation, identify you, prevent fraud, and fulfill any prizes you may win. Please read the terms and conditions of the respective competition for further information.

Please note that if you choose not to provide us with the requested information, we may not be able to provide you with the full functionality of our products and services. It is your responsibility to ensure that the information you share with us does not violate any laws or rights of third parties.

SecondBloom may use your data for marketing purposes in a variety of ways. We may send you promotional communications about our products, services, events, and promotions through channels such as email, phone, SMS text messages, and postal mailings. We may also contact you regarding information, products, and services from third-party providers that complement our products and services that we believe may be relevant to you because of your usage of our products. We may also tailor our communications to your preferences and behavior to provide you with a personalized experience, and may analyze and combine all information associated with your data and interactions with us.

You may also interact or communicate with us on social media channels, in which case your data will be processed by a third party that provides social listening services to us. We may use your data to gain a general view of the opinion of people about our brand and to improve our products and services.

We may also use your data for customer survey communications, market research campaigns, and other types of communications. We will only send these types of communications with your prior consent, unless it is not necessary according to the applicable laws and regulations.

SecondBloom, we may use your data for different legitimate reasons and business purposes. To be able to process your data, we may rely on different legal bases, including:

-Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your data, you may withdraw your consent at any time
-The necessity to establish a contractual relationship with you and to perform our obligations under a contract
-The necessity for us to comply with legal obligations and to establish, exercise, or defend against legal claims

The necessity to pursue our legitimate interests, including:

-To ensure that our networks and information are secure
-To administer and generally conduct business within the Company
-To prevent or investigate suspected or actual violations of law, breaches of a business customer contract, or non-compliance with the SecondBloom policies
-To optimize or extend our marketing reach and communication relevance

-The necessity to respond to your requests
-The necessity to protect the vital interests of any person
-Any other legal basis anyhow permitted by local laws

We do not sell your personal data. We also do not share any of your personal data except in the limited cases described here. If it is necessary for the fulfillment of the purposes described in this notice, we may disclose your data to the following entities:

SecondBloom affiliates: due to our global nature, your data may be shared with certain SecondBloom affiliates. Access to your data within SecondBloom will be granted on a need-to-know basis

Service providers: like many businesses, we may outsource certain data processing activities to trusted third party service providers to perform functions and provide services to us, such as IT service providers, consulting providers, shipping providers, payment providers, electronic communication service platforms, Competition service providers

Business partners: we may share your data with trusted business partners so they can provide you with the services you request
Public and governmental authorities: when required by law, or as necessary to protect our rights, we may share your data with entities that regulate or have jurisdiction over SecondBloom

Professional advisors and others: we may share your data with other parties including professional advisors, such as banks, insurance companies, auditors, lawyers, accountants, other professional advisors

Other parties in connection with corporate transactions: we may also, from time to time, share your data in the course of corporate transactions, such as during a sale of a business or a part of a business to another company, or any reorganization, merger, joint venture, or other disposition of our business, assets, or stock

Upon your request in case of a personal data portability request

Due to our global nature, data you provide to us may be transferred to or accessed by SecondBloom affiliates and trusted third parties from many countries around the world. As a result, your data may be processed outside the country where you are located. We take steps to ensure that your data is protected and processed in accordance with this notice and applicable laws.

On SecondBloom, it is your responsibility to ensure that the data you provide to us is accurate, complete, and up-to-date. If you share data of other individuals with us, it is your responsibility to collect such data in compliance with local legal requirements and to inform those individuals about the content of this Notice and obtain their prior consent.

You have the right to review, change, or delete the data you have supplied to us, to the extent that we are not otherwise permitted or required to keep such data. You can also object to certain data processing operations and receive a copy of your data in a common machine-readable format, to the extent required by applicable law. If you have any other questions or inquiries related to the protection of your data on our platform, you can contact our Privacy Office.

We do not intentionally collect information from children under the age of 16 and advise that children under the age of 16 speak with and obtain their parent or guardian’s consent before sharing their data with us. Parents of children under the age of 16 are also advised to monitor their children’s use of our platform to ensure that their child does not share personal data without their permission.

We comply with Brazilian General Law on Data Protection (LGPD) and will obtain your consent in advance through a prior, free, informed, and unequivocal expression of will. We will also inform you of your LGPD rights and explain how to exercise them.

SecondBloom collects information from our users in the course of providing our services and/or when visiting our websites. This information may include data that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular user or device. This information is used to provide and improve our services and to personalize the user experience. You have the right to request access to the personal data we have collected about you, as well as the right to request that we delete it. If you would like to exercise these rights, please contact us at our Privacy Office. Additionally, as a California resident, you have certain rights under the California Consumer Privacy Act (CCPA).

SecondBloom may disclose your data for business purposes to the following categories of third parties:

Affiliates of SecondBloom
Service providers that we use to perform functions and provide services to us
Third parties with whom we share your data in connection with products or services we provide to you, and to accomplish our business purposes and objectives as set forth in this Notice.

We do not intentionally collect information from children under the age of sixteen (16) years as we do not offer services to them. Parents or guardians who set up a profile holding information about children under the age of sixteen (16) years can only do so by granting parental consent, which consent choices can be changed by the adults in the family. We do not direct services to children under the age of thirteen (13) years old. As a result, we do not knowingly process data or information from children under thirteen 13 years old.

We do not respond to “Do Not Sell” requests as we do not track your data across third party websites, nor do we sell your data to third parties to provide targeted advertising. We use cookies and other tracking technologies to make your online experience and interaction with our websites as informative, relevant and supportive as possible. In the twelve months prior to the effective date of this Privacy Notice, we have not sold any personal information of consumers, as those terms are defined under the CCPA.

You have the “Right to Know” and “Right to Delete” your personal information collected or maintained by us. Depending on your choices, certain offerings may be limited or unavailable. To execute your rights please contact our Privacy Office or make a verifiable request to exercise your rights by contacting us via phone. We may ask you to verify your identity before we can act on your request. If we cannot verify your identity, we may request additional information from you, which shall only be used for the purposes of verifying your identity while you are seeking to exercise your rights and for security or fraud-prevention purposes. We shall delete any new personal information collected for the purposes of verification as soon as practical after processing your request. An “authorized agent” means a natural person or a business entity registered with the Secretary of State that you have authorized to act on your behalf, provided you have provided the authorized agent written permission to do so and we could verify this and verified your own identity directly with the business.