Confidential paper
Bin: Locked security containerSecurely destroyed within 24 hours, then turned into tissue paper.
Anything with personal or sensitive data does not belong in the normal paper bin, but in the locked security container. Think of files, contracts, minutes, address lists and anything covered by the GDPR.
This belongs in it
- Files containing personal data
- Contracts and HR documents
- Minutes and internal reports
- Participant, customer and address lists
- Mail showing names and addresses
- Staples and paper clips may stay on
This does not belong in it
- Ordinary advertising mail (use paper & cardboard)
- Food waste and packaging
- Data carriers such as USB sticks and laptops (separate stream)
What happens to it?
- 1. Locked container
Documents go through a slot into a locked container that only De Graaf Security can open.
- 2. Secure transport
Collection is done with secure trucks, straight to a closed destruction site.
- 3. Destroyed within 24 hours
The paper is shredded within 24 hours in line with DIN 66399. Which security level applies is set out in the agreement with the organisation.
- 4. Certificate + new paper
You receive a certificate of destruction in your online portal. The shreds become tissue paper.
Where is it processed?
Destroyed at a closed, CA+ certified destruction site. Which site that is differs per assignment.
This is what it becomes
Good to know
Rules and legislation
The GDPR requires organisations to destroy personal data securely; the certificate of destruction is the proof. Which DIN 66399 security level is delivered is set out in the contract. Paper is also covered by the separation duty in the Dutch Environmental Activities Decree.
Sources
The figures and rules on this page were checked against the following sources.
- Wat is de DIN 66399 voor vertrouwelijke vernietiging?De Graaf Groep
- Gescheiden houden van bedrijfsafval en gevaarlijk afvalRijkswaterstaat — Circulair Materialenplan
- Afvalstromen en dienstverleningDe Graaf Groep
Checked on 18 August 2026