Privacy Policy

——————————————————————————————————————

IT Green Solutions Limited respects your privacy and is committed to protecting the personal data you share with us through our website, contact forms, email communication, business enquiries, support requests, consultancy engagements, and managed IT services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we keep it, who we may share it with, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Irish data protection law.

1. Who we are

The data controller responsible for your personal data is IT Green Solutions Limited, company number 665641, with registered address at 85 Terenure Road North, Dublin, Dublin 6W, Ireland, D6W E363.

You can contact us about privacy matters at info@itgs.ie.

2. Personal data we collect

We only collect personal data that is necessary for communication, service delivery, business administration, legal compliance, and the secure operation of our IT services. Depending on how you interact with us, we may collect:

• name and surname;

• business name or organisation name;

• job title or department;

• email address and phone number;

• address, billing details, purchase history, and payment-related information;

• information you provide through contact forms, email messages, meetings, proposals, or support requests;

• technical information required for IT support, Microsoft 365, cloud services, websites, devices, networks, backups, cybersecurity, and managed services;

• login, access, audit, diagnostic, device, licence, configuration, and security information where required to deliver support or protect systems;

• website usage data such as IP address, browser type, device type, cookie identifiers, pages viewed, and analytics information.

3. Why we process personal data

We process personal data for the following purposes:

• Responding to enquiries: to answer your questions, provide information, arrange a consultation, or prepare a proposal.

• Providing IT services: to deliver managed IT support, Microsoft 365 services, SharePoint, Entra ID, Intune, cybersecurity, backup, website, software, and cloud services.

• Customer relationship management: to maintain service records, manage support requests, provide updates, and ensure continuity of service.

• Quotes and contracts: to prepare service proposals, pricing documents, statements of work, contracts, and commercial records.

• Billing and accounting: to issue invoices, process payments, manage accounts, and meet tax and accounting obligations.

• Security and system protection: to monitor service health, investigate incidents, prevent unauthorised access, and protect customer environments.

• Website improvement: to understand website usage and improve performance, layout, content, and user experience.

• Legal and compliance obligations: to comply with Irish, EU, tax, accounting, regulatory, or legal duties.

4. Legal basis for processing

We only process personal data where we have a lawful basis to do so. The lawful bases we rely on may include:

• Contract: where processing is necessary to provide services or take steps before entering into a contract.

• Legitimate interests: where processing is necessary for business communication, service management, IT security, customer support, website improvement, and business administration.

• Legal obligation: where we must process information for tax, accounting, regulatory, or legal reasons.

• Consent: where you have given consent, for example for optional cookies or certain marketing communications.

Where processing is based on consent, you may withdraw your consent at any time.

5. IT support and customer systems

As part of our IT services, we may need access to customer systems, devices, Microsoft 365 environments, user accounts, cloud platforms, websites, backups, logs, security alerts, or technical records.

Any access is limited to what is necessary to deliver the agreed service, investigate issues, improve security, or support the customer’s IT environment.

Where we process personal data on behalf of a customer, the customer may act as the data controller and IT Green Solutions Limited may act as a data processor. In such cases, we process data according to the customer’s instructions and the applicable service agreement or data processing agreement.

6. Sharing personal data

We do not sell personal data. We may share personal data only where necessary with trusted third parties, such as:

• IT hosting providers;

• cloud service providers;

• Microsoft 365 and related technology providers;

• cybersecurity, monitoring, and backup providers;

• website hosting, development, or maintenance providers;

• professional advisers such as accountants, legal advisers, or consultants;

• payment, billing, administrative, or business support providers;

• public authorities, regulators, or law enforcement bodies where legally required.

Any third party that processes personal data on our behalf must only process it for the agreed purpose and must apply appropriate confidentiality, security, and data protection measures.

7. International transfers

Where possible, we use providers and services that process data within Ireland, the European Union, or the European Economic Area.

If personal data is transferred outside the EU or EEA, we will ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other legally recognised transfer mechanisms.

8. How long we keep personal data

We keep personal data only for as long as necessary for the purpose it was collected. In general:

• enquiry and contact form information is kept for as long as needed to respond and manage follow-up communication;

• customer and service records are kept for the duration of the business relationship and for a reasonable period afterwards;

• invoices, accounting, and tax records are kept for the period required by law;

• technical support records are kept for as long as needed to provide service continuity, security, and auditability;

• website analytics and cookie data are kept according to the settings of the relevant tools and your cookie preferences.

When personal data is no longer required, we will securely delete, anonymise, or archive it where appropriate.

9. Cookies

Our website may use cookies and similar technologies. Cookies are small files stored on your device that help the website work correctly, improve user experience, measure website traffic, and support website security.

Cookies may include essential cookies, analytics cookies, preference cookies, and marketing cookies where consent is provided. You can manage or disable cookies through your browser settings or through any cookie controls available on our website.

10. Marketing communications

We may occasionally contact business contacts with information about our services, updates, or relevant IT guidance. We will only send marketing communications where we have a lawful basis to do so. You can opt out at any time by contacting info@itgs.ie.

We will not sell your contact details to third parties for marketing purposes.

11. Your rights

Under GDPR, you have rights in relation to your personal data. These may include:

• the right to be informed about how your data is used;

• the right to access your personal data;

• the right to correct inaccurate or incomplete data;

• the right to request deletion of your data;

• the right to restrict processing;

• the right to object to processing;

• the right to data portability;

• the right to withdraw consent where processing is based on consent;

• the right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at info@itgs.ie.

12. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Irish Data Protection Commission. Website: www.dataprotection.ie.

13. Security of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, password protection, multi-factor authentication, encryption, security monitoring, backups, patching, endpoint protection, least-privilege access, and administrative procedures appropriate to the nature of the data and services involved.

14. Third-party websites

Our website may include links to third-party websites, tools, or platforms. We are not responsible for the privacy practices, content, or security of third-party websites. You should review the privacy policies of any external websites you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, business operations, or data protection practices. The latest version will be available at https://www.itgs.ie/privacy-policy/.

Contact

For questions about this document or our services, please contact:

Company	IT Green Solutions Limited
Address	85 Terenure Road North, Dublin, Dublin 6W, Ireland, D6W E363
Email	info@itgs.ie
Website	www.itgs.ie