AI & Profiling Privacy Policy

This policy complements our general Privacy Notice with details on AI and profiling. Effective May 2026.

This dedicated AI & Profiling Privacy Policy complements our general Privacy Notice. It provides detailed information to individuals (athletes, team members, and employees) whose personal data is processed using artificial intelligence (AI), automated models, algorithms, or psychometric profiling tools utilized by PeakPersonality.

Scope and Our Role as Data Processor

PeakPersonality is located in the Netherlands, Van Hogenhoucklaan 62, 2596 TG Den Haag, and provides personality assessments, analytical reports, and coaching services aimed at professional athletes, teams, and organizations. For these specific services, your organization acts as the Data Controller, as they determine the purposes and means of the assessment. PeakPersonality acts as the Data Processor.

We apply our automated models and AI algorithms to your data strictly on behalf of, and in accordance with the documented instructions of, your organization.

What Constitutes "Profiling" and "AI" in Our Services?

Under the GDPR, evaluating personal characteristics through personality assessments constitutes profiling. PeakPersonality utilizes automated models, algorithms, and artificial intelligence (AI) to analyze and interpret performance data, test results, and personality traits.

Our services natively involve profiling and AI-driven processing because we use specialized software and statistical models to analyze your responses to our questionnaires and generate a standardized personality and AI profile.

Categories of Data Subject to AI Processing

The automated systems analyze specific data points collected on behalf of your organization:

  • Assessment Data: Your specific responses to questionnaires, test results, analytical reports, and the timestamps of your assessments.
  • Identification and Contextual Data: Your name, gender, age group, email address, and phone number.
  • Professional Data: Your employer or team details, as well as your specific role or function level within the organization.

We do not process sensitive data (such as medical information, ethnic origin, or religious beliefs) within our AI models.

The Logic Involved in Our Automated Models

To ensure transparency under the GDPR, the underlying logic of our automated and AI processing consists of the following phases:

  • Psychometric Scoring: Our system applies established psychological models to score your raw questionnaire inputs.
  • Algorithmic Benchmarking: The algorithms compare your scoring patterns against anonymized baseline data and performance trends to contextualize your traits.
  • Pattern Analysis: Advanced analytical models synthesize these scores to identify core behavioral tendencies, team alignment factors, resilience levels, and performance readiness indicators.
  • Automated Report Generation: The system automatically compiles these findings into a structured analytical report containing personalized performance and team insights.

Significance and Envisaged Consequences for Data Subjects

The analytical reports and profiling insights generated by our AI systems are designed to help improve the individual performance of athletes or employees, as well as the overall dynamics of the team or organization.

Crucial Information Regarding Decision-Making:

  • No Solely Automated Decisions by PeakPersonality: PeakPersonality's AI models only generate analytical reports and recommendations. Our systems do not make final, legally binding, or significant decisions about you.
  • The Controller's Responsibility: The generated reports are provided to your organization (the Data Controller), which may use them as a supportive tool for coaching, talent development, scouting, or team selection. Your organization is legally required to ensure that human review remains involved in any final decisions that significantly impact your career, employment, or contractual status.

Your Rights Regarding Automated Processing

In addition to your general privacy rights (as detailed in our general Privacy Notice), you have specific rights concerning profiling and automated processing:

  • Right to Information: The right to obtain clear information about the logic involved in the assessment and its intended purpose.
  • Right to Object to Profiling: You have the right to object to profiling based on your organization's legitimate interests.
  • Right to Human Intervention: If your organization uses our AI outputs to make a significant decision about you, you have the right to request that a human reviews the decision, to express your point of view, and to contest the automated analysis. PeakPersonality will fully support your organization in facilitating these rights.

Because your organization is the Data Controller, you must direct all privacy and automated processing requests to your organization.

Security and Infrastructure

All automated processing and AI modeling take place within our secure, GDPR-compliant infrastructure. Your data is safely stored within the European Union using our hosting sub-processor, Scaleway.

For a complete list of our technical sub-processors and details on international data transfer safeguards, please refer directly to our general Privacy Notice.

For any inquiries, please contact your organization directly, or reach out to us at info@peakpersonality.com, and we will forward your request to the responsible contact person at your organization. You also retain the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Thank you for your trust in PeakPersonality.