Table of Contents

Privacy Policy

DGD Papers Ltd., trading as DGD Shredding & Technology and DGD Shredding (“we”, “us”, “our”), takes the protection of your personal data seriously. This Privacy Policy explains what personal data we collect through our website, how we use it, the lawful bases on which we process it, and the rights available to you under the General Data Protection Regulation (GDPR) and Irish data protection law.

You can use our website without providing personal data. Where you choose to contact us or use certain services, some processing of personal data may be necessary. Where we process personal data without a statutory basis, we obtain your consent.

While we apply appropriate technical and organisational measures to protect personal data processed through this website, no internet transmission can be guaranteed as completely secure. You are free to contact us by alternative means, such as by telephone, if you prefer.

Data Controller

The controller responsible for your personal data under the GDPR is:

DGD Papers Ltd., trading as DGD Shredding & Technology and DGD Shredding
Bay M1, Raheen Business Park
Raheen, Limerick
V94 ED34
Ireland

Data Protection Officer

We have appointed a Data Protection Officer who is responsible for overseeing questions in relation to this Privacy Policy and our data protection practices. If you have any questions about this policy, or wish to exercise any of your rights, please contact:

Michael Garvey, Data Protection Officer
Email: michael.garvey@dgdshredding.ie

Definitions

This policy uses terms defined in the GDPR. In summary:

  • Personal data means any information relating to an identified or identifiable natural person (a “data subject”), such as a name, identification number, location data, or an online identifier.
  • Processing means any operation performed on personal data, including collection, storage, use, disclosure, or erasure.
  • Controller means the person or body that determines the purposes and means of processing personal data (in this case, DGD).
  • Processor means a person or body that processes personal data on behalf of the controller.
  • Consent means any freely given, specific, informed and unambiguous indication of your wishes by which you agree to the processing of your personal data.

Data We Collect

Website usage data (server log files)

When you access our website, our systems automatically collect certain technical information, which may include your browser type and version, operating system, referring website, pages visited, date and time of access, IP address, and internet service provider.

This information is used to deliver and secure our website, to maintain the stability of our systems, and, where necessary, to assist law enforcement in the event of a cyber-attack. We do not use this information to identify individual visitors. This data is stored separately from any personal data you provide directly.

Analytics (Google Analytics)

We use Google Analytics, a web analytics service provided by Google, to understand how visitors use our website so that we can improve it. Google Analytics uses cookies to collect information such as pages visited, time spent on the site, and general location, and processes data including your IP address and online identifiers.

These analytics cookies are only set after you have given your consent through the cookie banner presented when you first visit our website. You can withdraw your consent at any time through the cookie settings on the website. For more information, see Google’s Privacy Policy at https://policies.google.com/privacy and our Cookies Policy.

Google may process this data outside the European Economic Area. Where it does, appropriate safeguards (such as the EU Standard Contractual Clauses) apply.

Contact via the website

If you contact us by email or through a contact form, the personal data you provide (such as your name, email address, telephone number, and the content of your message) is stored so that we can respond to and manage your enquiry. We do not transfer this data to third parties for their own purposes.

Recruitment

We do not accept job applications through this website. Applications are received only by email or in hard copy. Where you apply to us, we process your application data for the purpose of the recruitment process. If we do not enter into an employment relationship with you, your application documents are retained only as long as necessary for our legitimate interests (for example, to address any potential legal claim) and are then securely deleted.

Lawful Bases for Processing

We rely on the following lawful bases under Article 6(1) of the GDPR:

  • Consent (Article 6(1)(a)) — for analytics cookies and any processing where we ask for your agreement.
  • Contract (Article 6(1)(b)) — where processing is necessary to provide a service you have requested, or to take steps before entering into a contract, such as responding to a service enquiry.
  • Legal obligation (Article 6(1)(c)) — where we must process data to comply with the law, such as tax and accounting obligations.
  • Legitimate interests (Article 6(1)(f)) — where processing is necessary for our legitimate interests, such as responding to enquiries, managing our client relationships, and maintaining the security of our website, provided these interests are not overridden by your rights.

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law (for example, statutory retention periods for tax and business records). When data is no longer required, it is securely deleted.

Your Rights

Under the GDPR, you have the following rights in relation to your personal data. To exercise any of them, contact our Data Protection Officer at michael.garvey@dgdshredding.ie.

  • Right of access — to obtain confirmation of whether we process your data, and a copy of that data.
  • Right to rectification — to have inaccurate or incomplete data corrected.
  • Right to erasure (“right to be forgotten”) — to have your data deleted where one of the grounds in Article 17 applies.
  • Right to restriction of processing — to limit how we use your data in certain circumstances.
  • Right to data portability — to receive your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
  • Right to object — to object to processing based on legitimate interests, and to object at any time to processing for direct marketing purposes.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We will respond to any request without undue delay and within one month, as required by the GDPR.

Automated Decision-Making

We do not use automated decision-making or profiling.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
Website: https://www.dataprotection.ie

We would, however, appreciate the opportunity to address your concerns directly before you approach the DPC, so please consider contacting our Data Protection Officer in the first instance.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on our website, and material changes will be reflected in an updated revision date.

Last updated: 08/07/2026