Hi Christoph,
Surrogate Bidding functionality can be controlled through group access called "Surrogate Bidder" group. Do not assign this group to any of the internal users in this way no buyers will be able to place the bid through Surrogate bidding functionality.
Neel