"Document shredding near me" is one of the most common searches that brings people to Lëtzclean Data, and the question behind it is always the same: I have boxes of confidential paper, I know the office bin is not the answer, and I want it gone properly, with proof. This guide covers how document shredding works in Luxembourg, the difference between on-site and off-site destruction, which security level you actually need, what to keep and what to shred, and how the certificate of destruction fits into GDPR.
Who needs document shredding in Luxembourg?
Any organisation that holds personal data on paper. In Luxembourg that is a long list: fiduciaries and accounting firms, law offices and notaries, medical and dental practices, HR departments, banks and fund administrators, insurance brokers, schools, and every SME with a filing cabinet of signed contracts, payslips and client correspondence. GDPR does not distinguish between a database and a folder. The same obligations apply to paper, and the CNPD, Luxembourg's data protection authority, expects you to be able to show how records were destroyed once their retention period ended.
Households need it too. Old bank statements, tax returns, medical letters, expired passports and utility bills are exactly what identity fraud is built from. If you have a decade of paperwork in the cellar, our store-or-shred guide helps you decide which pile is which.
On-site vs off-site shredding: what actually differs
There are two ways to have documents professionally destroyed, and the difference is not the shredder. It is where your paper is when it stops being readable.
| On-site shredding | Off-site shredding | |
|---|---|---|
| Where it is destroyed | At your premises, in a mobile shredding unit | At the provider's facility, after transport |
| Chain of custody | None. The paper never leaves intact | Sealed containers, vehicle, depot, then destruction |
| Can you witness it? | Yes, your staff watch it happen | No, you rely on the provider's process |
| Certificate | Issued the same day, on site | Issued after destruction at the facility |
| Best for | Confidential, regulated or client data | Large low-sensitivity volumes where cost matters most |
Lëtzclean Data does both. We recommend on-site for anything covered by professional secrecy or GDPR, because every handover in the chain of custody is a point where documents can go missing. The breaches that make the news are almost always transport and storage failures, not shredder failures. Off-site remains available when volume, not sensitivity, is the deciding factor.
Which security level do you need? DIN 66399 explained
Professional shredding in Europe is graded by DIN 66399, which defines particle sizes for paper (P-1 to P-7), hard drives (H), optical media (O), magnetic media (T), electronic media (E) and film (F). For paper, the levels that matter in practice are:
- P-1 and P-2: strip-cut. This is what most office shredders produce. Strips can be reassembled by hand or by software; treat it as "hard to read", not destroyed.
- P-3: cross-cut, suitable for internal documents with no personal data.
- P-4: cross-cut to a maximum particle of 160 mm². The standard level for personal data under GDPR: payslips, contracts, client files, medical records.
- P-5 and above: micro-cut for secret and top-secret material; rarely needed outside government, defence and some financial contexts.
What to shred, and what Luxembourg law says you must keep
Shredding the wrong thing is as much of a problem as keeping the wrong thing. Luxembourg's Code de commerce requires businesses to keep accounting books and supporting documents for ten years, and tax records follow the same horizon. Employment records, contracts and insurance policies each have their own retention logic. Confirm the specifics with your accountant or legal adviser; retention periods are not something to guess.
Once a document is past its retention period, GDPR's storage-limitation principle means keeping it becomes the risk. A practical approach for most Luxembourg SMEs:
- Shred now: duplicate printouts, superseded drafts, applications from candidates you did not hire (once any challenge period has passed), expired quotes, old marketing lists, anything past its retention date.
- Keep, securely: anything inside its statutory retention period. Sealed archive boxes off site are safer than an office corridor. Storagelux stores archive boxes door-to-door and returns them when you need them.
- Schedule the rest: write a destruction date on every archive box when you seal it. The annual shredding visit then becomes routine instead of a clear-out.
What document shredding costs in Luxembourg
Professional shredding is quoted per job rather than off a price list, because four things move the price: the volume (usually counted in archive boxes or wheeled bins), whether you need on-site or off-site destruction, whether hard drives or other media are being destroyed on the same visit, and the location. A one-off clear-out of a few dozen boxes is priced differently from a quarterly contract with locked consoles in the office.
What should be included at any price: witnessed destruction if on site, a certificate of destruction naming the date, the volume and the DIN level, and recycling of the shredded paper afterwards. If a quote does not mention the certificate, ask.
Hard drive shredding on the same visit
Most document clear-outs uncover old laptops, external drives and USB sticks in the same cupboard. These matter more than the paper: a single retired hard drive can hold every file your company produced in a decade, and wiping or encrypting is not a substitute for physical destruction. We shred and crush drives, SSDs, tapes and phones to DIN 66399 H-5 / L-3 / E-3 on the same visit as the paper, with serial numbers listed on the certificate. Devices then go into WEEE-compliant recycling rather than a skip.
How a shredding visit works
- Tell us what you have. Roughly how many archive boxes or bins, whether there are ring binders or lever-arch files, and whether any media needs destroying. Staples and paper clips can stay in.
- We agree a date. One-off clear-outs and recurring schedules both work.
- Destruction at your premises. Your team can watch the entire process. Nothing readable leaves the building.
- Certificate the same day. Date, volume, DIN level, media serial numbers where applicable. Keep it with your GDPR records: it is your evidence.
- Recycling. Shredded paper goes to recycling; destroyed electronics go through WEEE-compliant channels.
Frequently asked questions
Is document shredding required under GDPR?
GDPR does not name a method, but it requires that personal data is not kept longer than necessary and is protected against unauthorised access when disposed of. Putting personal data in a paper bin fails that test. Shredding to DIN 66399 P-4 with a certificate is the accepted way to demonstrate compliance.
Can I watch my documents being shredded?
Yes. On-site destruction is done at your premises and your staff can witness the whole process. That is the point of choosing on-site over off-site.
Do I need to remove staples, paper clips or binders?
Staples and paper clips can stay. Tell us about ring binders and lever-arch files when you request a quote so we can plan the volume correctly.
How long does a shredding visit take?
It depends on volume. A typical SME clear-out of a few dozen archive boxes is completed within the visit; large archives are scheduled in advance. You receive the certificate before we leave.
Do you also shred hard drives and USB sticks?
Yes, on the same visit. Drives, SSDs, tapes and phones are physically destroyed to DIN 66399 H-5 / L-3 / E-3 and listed by serial number on the certificate.
Need document shredding in Luxembourg?
Tell us how many boxes you have and whether any drives need destroying. We come back with a quote and available dates.