Privacy Notice
Your privacy is important to us. This notice explains how we collect, use, and protect your personal data. Effective May 2026.
PeakPersonality is dedicated to protecting your privacy and personal information. This Privacy Notice explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).
Who is the Controller and Who is the Processor?
PeakPersonality is located in the Netherlands, Van Hogenhoucklaan 62 2596 TG Den Haag, and provides personality assessments and coaching services aimed at professional athletes, teams, and organizations.
Depending on how you interact with us, roles are allocated as follows:
- For Website Visitors & Contact Forms: PeakPersonality acts as the independent Data Controller for personal data collected through our website's contact features ("Let's Connect").
- For Services Provided to Organizations: The organization acts as the Data Controller, as they determine the purposes and means of the assessment. PeakPersonality acts as the Data Processor and processes your personal data strictly on behalf of and in accordance with the instructions of your organization.
Why do we Process Data and Under What Legal Basis?
For PeakPersonality as Processor:
On behalf of your organization, personal data is processed for:
- Performing personality assessments to provide personalized individual and team insights.
- Offering detailed feedback through coaching services to enhance personal and team performance.
- Generating personalized coaching content to support individual development.
- Facilitating communication and providing customer support.
Additionally, data that has been fully and irreversibly anonymized may be processed by PeakPersonality for conducting statistical analysis and research to identify performance trends, validate our models, and continuously improve the quality and accuracy of our services.
The legal basis for processing your personal data is determined by your organization as the Data Controller:
- For performing personality assessments and offering coaching services, the processing is typically based on your Explicit Consent provided to your organization, or another valid lawful basis established by them.
- For facilitating communication and providing customer support, the processing is based on the Performance of a Contract with your organization or their legitimate interests.
- For PeakPersonality's internal research and analysis using completely anonymized data, the GDPR no longer applies as anonymized datasets do not constitute personal data.
For PeakPersonality as Controller:
We process identification data (Name, email, phone number, and message content) to facilitate communication and provide customer support.
Legal Basis: This processing is based on our Legitimate Interest to respond to your business inquiries.
Retention: This data is kept for up to 1 year after our last communication, unless a commercial agreement follows.
Profiling & AI
Evaluating personal characteristics through personality assessments constitutes profiling under the GDPR. PeakPersonality utilizes automated models, algorithms, and artificial intelligence (AI) to analyze and interpret performance data, test results, and personality traits.
If you participate in an assessment that utilizes these automated or AI-driven models, specific data processing rules apply. For detailed information regarding the underlying logic of our AI systems, their significance, the envisaged consequences for you, and your right to human intervention, please refer to our separate AI & Profiling Privacy Policy.
Minor Athletes (Under 16)
Given our involvement in professional sports, minor athletes may undergo assessments. PeakPersonality only processes data of minors under the age of 16 if the contracting client (the sports club or organization) guarantees that valid parental or guardian consent has been obtained in accordance with Article 8 GDPR.
Who are the Sub-processors?
We engage trusted third-party data sub-processors to our services, including:
- Scaleway for secure GDPR compliant data storage hosted within the EU.
- Google LLC / Google Workspace (USA): For company email communication and document management.
- External analytics partners who process assessment responses in a fully anonymized manner.
International Data Transfers: As Google is based in the United States, data transfers outside the EEA are secured under the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
What Data do we Process?
We process the following types of personal data on behalf of your organization:
- Identification data: Name, gender, age group, email address, phone number.
- Professional and group affiliation data: Employer or team details, your role or function level.
- Assessment data: Your responses to questionnaires, test results, analytical reports, and the timestamp of your assessments.
We do not process sensitive data (e.g., medical information, ethnic origin, religious beliefs).
How Long do we Keep Your Data?
We retain your personal data in an identifiable form for as long as we provide your organisation with our services, and for a subsequent period of two years to allow for longitudinal analysis and follow-up services. Following this period, all personal data is either permanently deleted from our systems or irreversibly converted into anonymized or aggregated data sets, which can no longer be associated with you.
Once data is completely and irreversibly anonymized, it no longer constitutes personal data under the GDPR, and PeakPersonality may use these datasets to identify performance trends and improve our models.
What are Your Rights?
Under GDPR, you have the right to Access, Rectification, Deletion, Restriction of Processing, Data Portability, Objection, and Withdrawal of Consent.
For Assessment Data: Because your organization is the Data Controller, you must direct your privacy requests to your organization. PeakPersonality will fully support your organization in fulfilling your request. If you contact us at info@peakpersonality.com, we will forward your request to the responsible contact person at your organization.
Complaints: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
Changes to this Privacy Notice
This Privacy Notice may be updated periodically and communicated on our website.
Thank you for your trust in PeakPersonality.