Last updated: [09/21/2026]
This page explains how the GDPR applies to Forestry Services Ltd., the principles we follow, the lawful grounds on which we process personal data and how individuals can exercise their rights. For detailed information about collection, use, sharing and retention, please read our Privacy Policy.
At Forestry Services Ltd., we recognise that individuals have a fundamental right to the protection of their personal data. [FULL LEGAL COMPANY NAME], trading as Forestry Services Ltd., processes personal data in accordance with the GDPR, the Data Protection Act 2018 and other applicable Irish and European data protection laws.
For most personal data collected through our website and professional services, Forestry Services Ltd. acts as a data controller. This means that we determine why and how that data is processed.
In some projects, we may process personal data only on the documented instructions of a client or another organisation and act as a data processor. The role depends on the facts and, where required, will be governed by a written agreement.
Organisation Detail | Information |
|---|---|
Legal Name | [FULL LEGAL COMPANY NAME] |
Trading Name | Forestry Services Ltd. |
Registered Address | [REGISTERED BUSINESS ADDRESS] |
Company Registration Number | [CRO NUMBER] |
VAT Number | [VAT NUMBER IF APPLICABLE] |
Privacy Email | [PRIVACY EMAIL ADDRESS] |
Telephone | [TELEPHONE NUMBER] |
Website | www.forestryservices.ie |
Data Protection Contact | [NAME OR JOB TITLE] |
We process personal data only on a valid lawful basis, explain the processing clearly and avoid uses that individuals would not reasonably expect.
We collect data for specified, explicit and legitimate purposes and do not use it for an incompatible purpose unless permitted by law and accompanied by any required notice.
We seek to collect only data that is adequate, relevant and reasonably necessary for the identified purpose.
We take reasonable steps to keep personal data accurate and up to date and correct or delete inaccurate information where appropriate.
We do not retain identifiable information indefinitely. It is deleted or anonymised when no longer required, subject to legal, regulatory, contractual and legitimate record-keeping needs.
We apply technical and organisational safeguards against unauthorised or unlawful processing and accidental loss, destruction or damage.
We maintain measures appropriate to our activities, which may include processing records, processor contracts, retention controls, security procedures, staff guidance, risk assessments and data protection impact assessments.
Processing may be necessary to take requested steps before a contract or to perform a contract, including quotations, site visits, project management, reports and payments.
Processing may be required for Irish or European tax, accounting, company, employment, health and safety, environmental, forestry or regulatory duties.
We may process information where necessary for our legitimate interests or those of another person, provided those interests are not overridden by individual rights. Interests may include responding to enquiries, professional communications, service delivery and improvement, record keeping, security, fraud prevention and protection of legal rights. We assess necessity, proportionality and potential effects before relying on this basis.
We rely on consent where required, including for certain electronic marketing and non-essential cookies. Consent must be freely given, specific, informed and unambiguous and may be withdrawn at any time. Withdrawal does not affect earlier lawful processing.
These grounds are not normally relevant to ordinary website activities and are used only where their legal requirements are satisfied, such as a genuine emergency or a legally recognised public-interest task.
You have the right to clear information about the collection and use of your personal data. We provide this through our Privacy Policy, this page and service-specific notices where appropriate.
You may ask whether we process your personal data and request a copy together with information about purposes, categories, recipients, retention, sources, rights and relevant automated decision-making. This is commonly called a data subject access request.
You may ask us to correct inaccurate personal data or complete information that is incomplete.
You may request deletion where data is no longer required, consent is withdrawn without another lawful basis, an objection succeeds, processing is unlawful or deletion is legally required. This right does not apply where retention remains necessary for legal compliance, freedom of expression and information, important public-interest purposes or legal claims.
You may request restriction while accuracy is checked, where processing is unlawful but you prefer restriction to deletion, where we no longer need data but you need it for a legal claim, or while an objection is assessed. Restricted data is generally stored without further use except where law permits.
Where processing is automated and based on consent or contract, you may be entitled to receive data you provided in a structured, commonly used and machine-readable format and, where feasible, have it transmitted to another controller. This must not adversely affect others’ rights.
You may object to processing based on legitimate interests because of your particular situation. We will stop unless compelling legitimate grounds override your interests, rights and freedoms or processing is required for legal claims. You may object to direct marketing at any time, after which we will stop that use.
Where we rely on consent, withdraw it by contacting [PRIVACY EMAIL ADDRESS], using an unsubscribe link or changing Cookie Settings. Withdrawal does not affect earlier lawful processing.
Subject to exceptions, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. Forestry Service does not currently use this kind of decision-making for website visitors or clients.
Send your request to [PRIVACY EMAIL ADDRESS] or [DATA PROTECTION CONTACT AND FULL POSTAL ADDRESS]. Include your name, relevant contact details, the right you wish to exercise, enough information to identify the records or project, and your preferred response format where relevant. You do not need to use a special form or cite a GDPR article.
We may request proportionate information where reasonably necessary to verify identity and prevent unauthorised disclosure, alteration or erasure. If a representative acts for you, we may require evidence of authority and may contact you directly to confirm the instruction.
We respond without undue delay and normally within one month of a valid request. For a complex request or multiple requests, GDPR permits an extension of up to two further months. We will explain an extension within the initial month.
Requests are normally free. A reasonable administrative fee may be charged, or action refused, where a request is manifestly unfounded or excessive. We will explain a refusal and available complaint and legal remedies.
Rights are not absolute. A request may be limited where compliance would adversely affect another person’s rights, reveal another person’s data, breach confidentiality or legal privilege, conflict with statutory retention, prejudice lawful investigation, interfere with legal claims or fall within another lawful restriction. We will provide any part that can lawfully be supplied.
We implement safeguards appropriate to risk. If an incident causes accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data, we assess the consequences. Where required, we notify the Data Protection Commission without undue delay and, where feasible, within 72 hours of awareness. If high risk to individuals is likely, we also notify affected individuals unless a legal exception applies.
When designing or changing systems, services and processes, we consider measures such as limiting collection, restricting access, privacy-protective defaults, retention periods, supplier assessment, pseudonymisation, security controls and Data Protection Impact Assessments for likely high-risk processing.
When a provider processes personal data for us, we take reasonable steps to select an appropriate provider and enter the agreement required by Article 28 GDPR. Transfers outside the EEA use a lawful transfer mechanism and additional safeguards where required. More detail is available in our Privacy Policy or on request.
If you believe we have not handled your data properly, contact [PRIVACY EMAIL ADDRESS] with enough information for us to investigate. You may also complain to:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
www.dataprotection.ie
You may contact another competent EU or EEA supervisory authority, particularly where you live or work or where an alleged infringement occurred. Contacting us first does not affect your right to complain or seek a judicial remedy.
[FULL LEGAL COMPANY NAME]
Trading as Forestry Services Ltd.
[POSTAL ADDRESS]
[PRIVACY EMAIL ADDRESS]
[TELEPHONE NUMBER]