§Introduction
AAC Group ("we", "us", "our") is committed to protecting the privacy of everyone who interacts with our business — clients, partners, candidates, suppliers and visitors to www.aacgroup.ie.
This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
§What information we collect
We only collect the information we need to run our business and deliver projects safely. Depending on how you interact with us, this may include:
- Identity & contact data — your name, job title, company, email, phone number and postal address.
- Project enquiry data — the details you share when you ask for a quote, send a tender enquiry or request information about our services.
- Recruitment data — CVs, qualifications, references and right-to-work information when you apply for a role with us.
- Site & HSEQ records — induction, training and safety records required by law for everyone working on an AAC Group site.
- Technical data — IP address, browser type, device information and pages visited (collected automatically through cookies — see our Cookie Policy).
§How we use your information
We process your personal data for the following purposes and on the lawful bases set out below:
- To respond to enquiries and provide services — performance of a contract or steps prior to entering one.
- To manage projects, sites and supply chain — legitimate interests (running our business safely and to programme).
- To assess job applications and manage our workforce — performance of a contract and legal obligation.
- To meet our legal, regulatory and HSEQ obligations — compliance with law (including the Safety, Health and Welfare at Work Act 2005).
- To improve our website and communications — legitimate interests, with consent for non-essential cookies.
We do not sell your personal data and we do not use automated decision-making.
§How long we keep your data
We keep personal data only as long as needed for the purpose it was collected for, or as required by law. Typical retention periods:
- Enquiry and marketing data — up to 24 months after last contact.
- Project and contract records — 7 years after project completion (or longer where law requires).
- Unsuccessful job applications — 12 months.
- Employee records — duration of employment plus statutory retention.
- Health & safety records — minimum 7 years, longer for asbestos and hazardous-substance exposure records.
§Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Request erasure of data where there is no good reason for us to continue processing it;
- Object to processing based on legitimate interests;
- Restrict processing in certain circumstances;
- Receive your data in a portable format;
- Withdraw consent at any time where consent is the lawful basis.
To exercise any of these rights, email info@aacgroup.ie. You also have the right to lodge a complaint with the Data Protection Commission (www.dataprotection.ie).
§Security
We apply appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access — including access controls, encryption in transit, secure cloud infrastructure and ongoing staff training. No system can be guaranteed 100% secure, but we take security seriously and review our controls regularly.
§Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our business, services or the law. The version and date at the top of this page will always tell you when the policy was last reviewed.
§Contact us
If you have any questions about this Privacy Policy or how we handle your data:
AAC Group
Dublin, Ireland
Email — info@aacgroup.ie
Phone — +353 87 100 1252