eBay Playbook Privacy & Cookie Notice

eBay Personnel: To learn more about personal data collected and processed when you access or use this site through your corporate account (via single sign on (SSO), please see the eBay Personnel Privacy Policy on the eBay Hub. 

In this eBay Playbook Privacy & Cookie Notice (“Notice”) we have compiled all essential information about our handling of your personal data and your corresponding rights for you. 

• Data that identifies you, such as your name, and email address for authenticated users. 
• Other information that you may provide as part of your use of the Site  
• Other data that we are required or entitled by applicable law to collect and process and that we need for your authentication or identification, or for the verification of the data we collect. 

• Online activity data regarding your interactions with our Site, and your communications with us. 
• Geolocation data, including your approximate (coarse) location data derived from your IP address. Please note that for most mobile devices, you can manage or disable the use of location services by all applications in the settings menu of your mobile device. 
• Device data and connection information such as, statistics regarding your use of our Sites, information on data traffic to and from websites, referral URL, your IP address, your access times,  your language settings and your weblog information. 

We use cookies and similar technologies to collect data while you use our Site We collect this data from the devices (including mobile devices) with which you use our Site. The data collected includes the following usage- and device-related information: 

• Device data including device type, manufacturer and model, operating system and version, browser type and settings, IP address, device ID or unique identifier such as advertising ID, individual device token, and cookie-related data (e.g. cookie ID). 
• Geolocation data including your approximate (coarse) location data derived from your IP address. Please note that most mobile devices allow you to manage or disable the use of location services for all applications in the settings menu. 

For more information about our use of these technologies and your choices, see Cookies & similar technologies. 

• Provision of our Site and ensuring its functionalities. 
• Responding to requests and communications from you. For these purposes, we may contact you via email. 
• Enforcement of our Terms of Use, this Privacy & Cookie Notice and other rules and policies. 

Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above: 

• eBay Affiliates 
• External service providers 

• Participation in investigations and proceedings (including judicial proceedings) conducted by public authorities or government agencies, in particular, for the purpose of detecting, investigating and prosecuting illegal acts. 
• Prevention, detection and mitigation (including compliance with reporting requirements) of illegal activities (e.g. fraud). 
• Complying with information requests from third parties based on any statutory information rights they have against us. 
• Ensuring the information security of our Site. 
• Retention and storage of your personal data to comply with specific legal retention requirements (for more information on eBay's storage of your data, see section 7. Storage duration and erasure). 

Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above: 

• Law enforcement agencies, courts, government agencies or public authorities, intergovernmental or supranational bodies 
• Third parties based on statutory information claims against us 
• Third parties who are involved in judicial proceedings, in particular, if they submit a legal order, court order or equivalent legal order to us. 
• eBay Affiliates 
• Third party service providers 

• Participation in investigations and proceedings (including judicial proceedings) conducted by courts, law enforcement agencies, government agencies or public authorities, intergovernmental or supranational bodies, in particular for the purpose of detecting, investigating and prosecuting illegal acts, unless there is a statutory obligation to this effect, and we may legitimately assume that the disclosure of the data is necessary to avert imminent disadvantages or to report a suspicion of an illegal act. In such cases, we will only disclose what we believe is necessary, and to the extent permitted by applicable laws, such as your name, city, zip code, telephone number, email address, IP address, fraud complaints. 
• Protection of the legitimate interests of third parties in connection with civil law disputes, including the investigation of such disputes, unless there is a statutory obligation to this effect, if we may legitimately assume that it is necessary to disclose the data to such third parties in order to avert imminent disadvantages.  In such cases, we will only disclose what we believe is necessary, and to the extent permitted by applicable laws, such as name, address, city, zip code, country, telephone number, email address and company name to the third party and bind the third party by a worldwide non-disclosure agreement to treat the data as confidential. 
• Prevention, detection, mitigation and investigation of fraud, security breaches and other prohibited or unlawful activities, including the assessment of corresponding risks, unless there is a statutory obligation to this effect. 
• Verifying that reports submitted to eBay (incl. unnamed reports) are not fraudulent or malicious.  
• Monitoring and improvement of the information security of our Site, unless there is a statutory obligation to this effect. 
• Measuring and improvement of the functionalities of our Site 
• Provision of our Site and ensuring its functionalities 
• Analysis and improvement of the Site, e.g. by reviewing site usage data or information from users about blocked or crashed pages in order to identify and solve problems and to provide you with an improved user experience. 
• Provision of shared content with eBay Affiliates. 
• Initiation, preparation and execution of a company acquisition, e.g. in the event of a merger with another company or takeover by another company. If such an event occurs, we will require the merged entity to comply with this Privacy & Cookie Notice with respect to your personal data. Should your personal data be processed for any purpose not specified in this Privacy & Cookie Notice, you will be informed in advance of the processing of your data for this new purpose. 
• Assertion of or defense against legal claims, including those asserted by one user against another. 
• To comply with an impending legal obligation.  

Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above: 

• eBay Affiliates 
• External service providers 
• Other users 
• Law enforcement agencies, courts, government agencies or public authorities, intergovernmental or supranational bodies 
• Third parties who are involved in judicial proceedings 
• Other companies in the context of a company acquisition 

• Communications by telephone or via electronic mail (such as email or text messages).  

You can find information about your right to withdraw your consent below under section 8. Rights as a data subject. 

Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above: 

• External service providers 
• eBay Affiliates 
• Other third parties with whom we partner to offer you specific functionalities of our Site (as described at the collection of the respective user consent) 

We will grant access to personal data about you to other eBay Affiliates for the aforementioned purposes. To the extent that other eBay Affiliates have access to your personal data, they will follow practices that are at least as restrictive as the practices described in this Privacy & Cookie Notice. 

The transmission of personal data between different eBay Affiliates (e.g. to enable cross border transactions and for other legally permitted purposes) is based on our worldwide data protection principles, which are binding internal data protection regulations (Binding Corporate Rules, BCRs), or on the basis of other appropriate safeguards (e.g. standard data protection clauses issued or approved by the European Commission (2021/914/EU). Through our Binding Corporate Rules, the eBay Affiliates undertake to protect your personal data and to comply with data protection obligations. Further information on our binding company-wide guidelines and our worldwide data protection principles can be found in the eBay Privacy Center. 

We may transfer your personal data to recipients (see section 5. Purposes and legal basis for data processing and categories of recipients) who may be located anywhere in the world. We will only transfer your personal data from the European Economic Area (EEA), United Kingdom or Switzerland to third countries, i.e. countries outside the EEA, on the basis of appropriate safeguards. Third countries providing an adequate level of data protection according to the European Commission currently include Andorra, Argentina, Canada (for companies covered by the Personal Information Protection and Electronic Documents Act), Switzerland, the Faroe Islands, Guernsey, the State of Israel, the Isle of Man, Japan, Jersey, New Zealand, South Korea, the United Kingdom, the United States (Data Privacy Framework) and Uruguay. In other cases, eBay provides the necessary safeguards, e.g. through the conclusion of data protection contracts adopted by the European Commission (e.g. standard data protection clauses (2021/914/EU) with the recipients, or through other measures provided for by law. A copy of the documentation of the measures taken by us is available on request. We regularly re-evaluate the measures taken to assess requirements deriving from new regulatory guidance and case law 

• You can withdraw your consent to the processing of your personal data by us at any time. As a result, we may no longer process your personal data based on this consent in the future. The withdrawal of consent has no effect on the lawfulness of processing based on consent before its withdrawal. 
• You have the right to obtain access to your personal data that is being processed by us. In particular, you may request information on the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information as to the personal data’s source (where they are not collected from you), the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details. Your right to access may be limited by national law. 
• You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. 
• You have the right to obtain from us the erasure of personal data concerning you, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims. The right to erasure may be limited by national law. 
• You have the right to obtain from us restriction of processing to the extent that 
• the accuracy of the data is disputed by you, 
• the processing is unlawful, but you oppose the erasure of the personal data, 
• we no longer need the data, but you need it to assert, exercise or defend legal claims or 
• you have objected to the processing. 
• You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller ("right to data portability"). 
• You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or the registered office of the controller. 

If your personal data is processed on the basis of our legitimate interests, you have the right to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling. If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. 

You can exercise your rights as a data subject by contacting your eBay partner.  

The exercise of the above data subjects' rights (e.g. right to access or erasure) is generally free of charge. Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge an appropriate fee (at most our actual costs) in accordance with the applicable statutory regulations or refuse to process the application. 

If you do not wish to receive communications from us, you can also unsubscribe by clicking on the link in the email you received. For technical reasons, the implementation may take a few days. For information on how to manage your cookie and similar technology preferences, see the next section Cookies & similar technologies. 

• They may be technically necessary for the operation of our Site 
• They help us to optimize our Site technically (e.g. monitoring of error messages and loading times) 
• They help us to improve your user experience (e.g. by saving the font size and data entered into web forms). 

We use cookies and similar technologies that remain on your device only as long as your browser is active (session cookies), as well as cookies and similar technologies that remain on your device longer (persistent cookies). We take appropriate security measures to prevent unauthorized access to our cookies and similar technologies.   

You are free to disable the use of cookies and similar technologies if this is supported by your device. You can manage your cookie settings in your browser or device settings. 

If you provide us with personal data relating to another person, you must obtain the consent of this person or the disclosure of the data to us must be otherwise legally permissible. You must inform the other person of how we process personal data in accordance with our User Privacy Notice. 

Some of the personal data that you provide to us (e.g. data by which we can identify you) are required to join our Small Business Ambassador Network or to receive communications from us. As described elsewhere in our Privacy & Cookie Notice, we may share this data with other eBay Affiliates group companies and with service providers, including for the dispatch of communications to you. 

Our Site is not intended for the use by children. We do not knowingly collect personal data from users who are considered children under applicable national laws. 

• Information that identifies you, such as your name, email address, for authenticated users 
• Other information that you may provide as part of your use of the Site   
• Other data that we are required or entitled by applicable law to collect and process and that we need for your authentication or identification, or for the verification of the data we collect.  

• Computer and connection information, such as your IP address 
• Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, individual device token, and cookie-related data (e.g. cookie ID). 

• Your general location data (e.g., IP address). 
• Please note that we may not collect each of these categories about every consumer. 

We receive personal information from a variety of sources, including directly from you, your devices, and from our third-party partners. The categories of sources from which personal information is collected includes: 

• You 
• eBay Affiliates (if you are an eBay user) 
• Service providers  
• Operating systems and platforms 
• Vendors and suppliers 

To understand the purposes for which we collect personal information, please review section 4 of our User Privacy Notice. 

The following table lists the categories of personal information disclosed for a business purpose and the categories of recipients who have received this personal information. Please note that not every one of the following categories may apply to your personal information.

• Internet or other electronic network activity information 
• Geolocation information 

• eBay Affiliates 
• Service providers 
• Vendors and suppliers 

We do not sell or share any personal information collected on the Site. 

We do not knowingly sell or share the personal information of consumers under the age of 16.  

The California Privacy Laws provide various rights to California residents. These include rights to access, deletion, correction, portability, opt-out, and non-discrimination. This section provides more information about each right and how California consumers can exercise these rights.  

We will make commercially reasonable efforts to identify your personal information that we collect, process, store, disclose and otherwise use, and to respond to your requests. We reserve the right to charge a reasonable fee, or decline to act upon a request, if it is excessive or overly burdensome. If we deny your request, we will explain the reasons in our response.  

For the Site to fulfill your request, you must provide sufficient information for us to reasonably verify that you are the consumer from whom we collected the personal information. The information you send for us to verify your identity will be used for this purpose only. If we are unable to verify your identity or if we suspect fraudulent activity, we may decline to comply with your request.  

Subject to exceptions, you may have the following rights: 

• Right to Access (also called a “Request to Know”). You may have the right to request that we disclose the personal information that we collect, use, disclose, and sell. This includes the right to request the categories of personal information we have collected about them, the categories of sources of personal information, the business or commercial purpose for collecting or selling personal information, the categories of third parties with whom we share or sell personal information, and the specific pieces of personal information we have collected. We try to fulfill access requests within 45 days of receiving the request. If we need more time or additional information to fulfill your request, we will write to let you know. 
• Right to Correct. You may have the right to request the correction of personal information we have collected from them.  If we need more time or additional information to fulfill your request, we will write to let you know. 
• Right to Delete. You may have the right to request the deletion of certain personal information. If we need more time or additional information to fulfill your request, we will write to let you know. 
• Right to Portability. You may have the right to receive personal information we hold about them in a structured, commonly used, and machine-readable format so that you can provide that personal information to another entity. When you make a request to know specific pieces of information, the report we will provide will be in a structured, commonly used, and machine-readable format. 
• Right Against Discrimination. You have the right not to be discriminated against for exercising any of the rights described in this section. eBay will not discriminate against you for exercising or requesting to exercise your privacy rights noted above. 
• Authorized Agents. You may use an authorized agent to submit the foregoing requests on your behalf. The agent will need to contact your eBay partner to submit the request. We may request evidence that you have authorized the agent to submit a request on your behalf.

You or your authorized agent can exercise the applicable  rights as a data subject by contacting your eBay partner. 

California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard for recognizing or honoring DNT signals, we don't respond to them at this time.

If you are a California resident, you are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of Personal Information to third parties for their direct marketing purposes in the preceding calendar year. The Site does not share personal information with third parties for their own direct marketing purposes. 

When you use our Site, we and authorized third-party providers make use of cookies and similar technologies. We make use of cookies and similar technologies which will not be saved on your device or which will only be saved on your device for as long as your browser is active (e.g. session cookies). Furthermore, we make use of cookies and similar technologies which will be saved on your device for a longer period (e.g. persistent cookies). Where possible, we take appropriate security measures to prevent unauthorized access to our cookies and similar technologies. A unique identifier (ID) ensures that only we and authorized third-party providers have access to data that has been collected by means of cookies and similar technologies. 

The cookies and similar technologies used by us have various functions: 

• They can be (technically) necessary for the provision of our Site 
• They help us to technically enhance our Site e.g. monitoring of error messages and loading times) 
• They help us to improve your user experience (e.g. by saving the font size and data entered into web forms) 

Cookies are small text files (typically made up of letters and numbers) which are placed in the memory of your browser or device when you make use of our Site, in particular when you visit our website or when you open a message. Cookies allow for a recognition of a specific device or browser. There are different types of cookies: 

• Session cookies (also called session based cookies) expire at the end of your session (e.g. when closing your browser window) and enable the entity using them to track your activities during this one session 
• Persistent cookies remain stored on your device between sessions and enable us, for example, to track your settings or activities on several websites 
• First-party cookies are set by the provider whose online service you are using (e.g. the operator of the website you are visiting) 
• Third-party cookies are set by a provider other than the provider whose online service you are using (e.g. the operator of a website other than the one you are visiting) 

Web beacons (also known as pixel tags or clear GIFs) are small graphic images that are used in connection with the provision of our Site and which typically work in conjunction with cookies to track the use of an online service by its users. For example, when we send you emails, web beacons allow us to track if you opened the emails and clicked links to measure campaign performance and improve features. 

Similar technologies are technologies which enable the entity using it to track your user behavior. This can be done by local shared objects or local storage, such as flash cookies, HTML 5 cookies and other web application software methods, all of which store information in your browser or device. Additionally, there are other technologies that function without local storage in your end device and instead make use of, inter alia, browser functions. In this context, a "fingerprint" of your system is created that serves as a unique identifier. 

These technologies may function across all your browsers and in some cases are not fully managed by your browser, but may need to be managed directly from your installed applications or your device.  

Some functionalities of our Site can only be offered using cookies, web beacons and similar technologies. In general, these technologies enable us to track your user behavior and identify you - even across devices. You can find more information about the personal data that we collect using cookies and similar technologies in the Privacy Notice above. 

The cookies, web beacons and similar technologies used in connection with our Site serve the following functions: 

We use cookies, web beacons and similar technologies that are necessary for the operation of our Site. This includes technologies that allow you access to our Site, its local versions and functionalities, which are required to monitor the functioning of the Site, prevent fraudulent activity and improve security. 

We use cookies, web beacons or other similar technologies to assess the performance of our Site. This happens, inter alia, to analyze how visitors use our Site how users use our messaging tools, if and how items and links are viewed or how to improve our Site 

We use cookies, web beacons or other similar technologies that allow us to offer you enhanced functionality when accessing or using our Site. These technologies may, inter alia, store information you provided through a web form. 

We protect our cookies and similar technologies to ensure that only we or authorized service providers can evaluate them. For this purpose, we assign a unique identifier (ID) to them that is designed so that only we can process them. 

We utilize Google Analytics 4, an analysis tool of Google LLC and Google Ireland Ltd. ("Google") to continuously enhance our Site. This tool assigns data, sessions, and interactions to a pseudonymous user ID, enabling cross-device activity analysis by employing cookies on your device to analyze Site usage. The data collected by the cookies regarding the use of our Site is usually transferred to a Google server in the USA and stored there (see additional information for users in the European Economic Area below). 

On our behalf, Google processes this data to evaluate Site usage, compile reports on usage activities, and provide additional services related to Site usage. Google Analytics 4 does not log or store individual IP addresses. However, it does provide coarse geo-location data by deriving the following metadata from IP addresses: city (including the derived latitude and longitude of the city), continent, country, region, subcontinent (and their ID-based counterparts). For users located in the European Economic Area, IP-address data is used solely for geo-location data derivation before being immediately discarded; it is not logged, accessible, or used for any additional use cases. 

Data collected via Google Analytics 4 is automatically deleted after 2 months. Any data that has reached its retention period is automatically deleted monthly. 

You have the option to prevent data collection through Google Analytics cookies by either declining cookies when prompted or adjusting your browser settings. Additionally, you can prevent the collection of data related to your use of the Site via the Google Analytics cookie and the processing of this data by Google by installing the Google Analytics Opt-out Browser Add-on. Please be aware that deactivating cookies may limit your ability to use all the features of our Site, as some functionalities rely on cookies to operate correctly. 

Additional information about Google Analytics can be found in Google’s applicable Terms of Service and Privacy Policy. 

You can decide to what extent we may use cookies and similar technologies within the provision of our Site. Your choice options will depend on the purposes for which we use these technologies. 

If you wish to deactivate the use of any cookies – including cookies that are operationally necessary, performance-related or functionality-related – that we use within the provision of our Site, you may do so by using the settings in your browser or device, if this is supported by your browser or device. The settings must be made separately for each browser you use. 

Please note that you may not be able to use certain functionalities of our Site when you deactivate cookies and similar technologies. 

California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard for recognizing or honoring DNT signals, we don't respond to them at this time. We await the result of work by the privacy community and industry to determine when such a response is appropriate and what form it should take.