This statement is designed to help you understand what personal data we hold, why we collect it, what we do with it and how we protect it. It also explains your rights in relation to how we hold and use your personal data, how to exercise those rights and what to do if you require more information or wish to make a complaint. It applies to all personal data we hold, irrespective of any relationship with us.

We respect your right to privacy.  If you have any questions about how we use your information, please write to Data Protection, Roughan & O’Donovan Consulting Engineers, Arena House, Sandyford, Dublin 18, D18 V8P6 or email 

What information do we collect?

Personal data collected

We collect personal data that you voluntarily provide to us; for example, when you communicate with us by phone, face-to-face or via email generally or when you ask us to send you newsletters or to sign you up for an event.  Such data may include:

  • your name, job title and name of employer and any personal data you send to us to provide you with business services;
  • your contact details, including your home address (where you have provided this to us), business address, email address and telephone number;
  • records of your attendance at events to which you have been invited by Roughan & O’Donovan.

If we are in regular contact with you, we may collect more information about our relationship with you.  

If you are a former employee of Roughan & O’Donovan, we may also process certain data about your previous employment with us, including your start and finish date, the teams you worked in and your next place of employment (if any or known to us).

Technical data collected

When you visit the Roughan & O’Donovan website, we gather statistical and other analytical information collected on an aggregate basis of all visitors to our website. This non-personal data comprises information that cannot be used to identify or contact you, such as demographic information regarding, for example, user IP addresses where they have been clipped or anonymised, browser types and other anonymous statistical data involving the use of our website. 

We also collect certain information using cookies. Cookies are small text files that web servers can store on your computer's hard drive when you visit a website. They allow the server to recognise you when you revisit the website and to tailor your web browsing experience to your specific needs and interests.

What do we use your personal data for?

We use your personal data for the following purposes:

  • to provide you with business services;
  • for administration, billing and other purposes reasonably incidental to the services being provided;
  • to keep you informed about our activities; 
  • to verify the accuracy of the data you have provided to us; 
  • to deal with your enquiries and requests (e.g. complaint handling); and
  • to maintain our list of contacts.

What are our legal grounds for processing personal data?

The legal grounds on which we collect, process and transfer your information are as follows:

  • your consent (where we have sought it and you have provided it to us) and, in which case, you can withdraw your consent at any time;
  • the processing is necessary for the performance of a contract with us; 
  • our legitimate interests in conducting our business in a responsible and commercially prudent manner;
  • our legitimate interest in maintaining a business relationship with you, as a business contact, and in communicating with you about our activities and in providing you with information about our events.

Sources of data

In some cases, your personal data has been supplemented by information obtained from publicly available sources, such as LinkedIn and your employer’s website.

Sharing of personal information

We do not share personal information with unaffiliated third parties, except as necessary for our legitimate professional and business needs, to carry out your requests, and/or as required or permitted by law or professional standards.

Transfers of your personal data outside the European Union

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (the "EEA"); for example, where we use third party cloud storage providers.

When we send personal data overseas, we make sure suitable safeguards are in place, in accordance with European data protection requirements, to protect the data. These safeguards will be one of the following:

  • Sending the data to a country that has been approved by the European authorities as having a suitably high standard of data protection law;
  • Putting in place a contract with the recipient containing terms approved by the European authorities as providing a suitable level of protection;
  • Sending the data to an organisation that is a member of a scheme approved by the European authorities as providing a suitable level of protection.

How long is your personal data kept for?

We will retain information about you for the period necessary to fulfil the purposes for which the information was collected. After that, we will delete it. The retention period may vary depending on the purposes for which the information was collected. 

Your rights

You have the following rights, in certain circumstances and subject to certain restrictions, in relation to your personal data:

  • the right to be provided with a copy of your personal data;
  • the right to request the rectification and/or erasure of your personal data;
  • the right to restrict the use of your personal data;
  • the right to object to the processing of your personal data, where we are processing it based on this being necessary for the purposes of our, or of a third party’s, legitimate interest; and
  • the right to receive your personal data in a structured, commonly used and machine-readable format or to require us to transmit that data to another controller, where we are processing the data based on your consent or where it is necessary for the performance of a contract with you.

To exercise any of the rights set out above, or if you have any questions about how we process your personal data, you can email us at or write to Data Protection, Roughan & O’Donovan, Arena House, Arena Road, Sandyford, Dublin 18, D18 V8P6. 

How to update your information

We are required to keep all personal data accurate and up-to-date.  To assist us in doing so, we ask you to contact your usual business contact at Roughan & O’Donovan or email with any relevant changes, such as change of business address or contact telephone numbers.

Security measures to keep your personal data safe

We employ appropriate technical and organisational security measures to help protect your personal data against loss and to guard against access by unauthorised persons.  


If you are not happy with the way we have used your information or addressed your rights, you may contact us by emailing or by writing to Data Protection, Roughan & O’Donovan, Arena House, Arena Road, Sandyford, Dublin 18, D18 V8P6.

You also have the right to make a complaint to the Data Protection Commissioner's Office. Its contact details are as follows: 

Telephone: +353 57 8684800 OR +353 (0)761 104 800 

Lo Call Number: 1890 252 231

Fax: +353 57 868 4757

Postal Address:

Data Protection Commissioner
Canal House
Station Road
R32 AP23 Co. Laois


If you no longer wish to receive communications from us, you can unsubscribe at any time by emailing us at

Changes to our Privacy Statement

We may update this privacy statement from time to time.  Any changes we make will be posted on this page.

Last updated 28 March 2019