DC DNA
Privacy statement
Version 28 August 2026
This statement describes exactly what the platform does today. DC DNA is having it reviewed by its data protection adviser before go-live; the processing described here will not change as a result.
Why we hold your details
Your employer works with DC DNA to plan training. The assessment shows what you already know, so the training you are offered fits your work. Your answers are not used to judge you individually outside this programme, and they play no part in decisions about your employment.
On what basis
Your employer decides that the training programme takes place and is responsible for your details; DC DNA processes them on their instructions. Before you start the assessment you are asked to agree separately to your answers being used to build a training plan. You may decline; in that case there is no assessment and your employer arranges the training another way.
What we hold
Name, work email address, and optionally your date of birth, role, location and employee number — supplied by your employer. From the assessment: your answers, the score per discipline, the language you used, and the moment you agreed. From the training: attendance per day and, if you complete it, the certificate.
Who sees what
DC DNA sees everything, including your answers. Your employer sees your name, your score per discipline and the recommended training — never the answers themselves. That separation is enforced in the database, not only in the screens.
Automated scoring
Open answers are scored with the help of an AI model. What is sent for scoring contains the question, the assessment criteria and your answer text — never your name or email address. The outcome is a recommendation: a DC DNA trainer reviews it and your employer approves it before any training is planned. No decision about you is taken by the model alone.
Where the data is
Inside the European Union. The platform and the database run in Frankfurt, email is sent through a European provider, and files are stored in Europe. Our suppliers process the data only on our instructions, under a written agreement.
Who we work with
Supabase (database and file storage, Frankfurt), Vercel (the application itself, Frankfurt), Resend (email, EU) and Anthropic (the AI model that scores open answers). Your employer can ask DC DNA for the current list at any time.
How long
Twelve months after your last activity in the programme, unless your employer has agreed a longer period. After that your name, email address, date of birth, role and employee number are removed automatically and only anonymous scores remain. Two things are shorter: the file your employer uploads to invite people is never stored at all, and reports generated in the portal are deleted from our servers after seven days. The certificate register is separate and is described below.
The public certificate register
If you complete a course, DC DNA issues a certificate with a number and a QR code. Anyone holding that certificate — or knowing your surname and date of birth — can check at app.dc-dna.com/verify whether it is genuine and still valid. That check returns a confirmation only: the certificate number, the course, the dates and whether it is valid, expired or revoked. It never returns your name, your employer, your email address or your scores. Your surname and date of birth are not stored in the register; only an irreversible code derived from them is, so the register cannot be read as a list of people. DC DNA is responsible for this register in its own right, on the basis of its legitimate interest in certificates that can be relied on; the entry stays for as long as the certificate can still be relied on. It survives the removal of your other details, because the certificate stays yours and stays valid. Do you want the entry to be findable by number only, and no longer by surname and date of birth? Ask DC DNA.
Your rights
You can ask to see, correct or delete your details, to limit what we do with them, or to object. Deleting removes your name, email address, date of birth, role and employee number, revokes your assessment links and deletes your certificate file; the score stays as an anonymous data point, so the team figures your employer already saw do not change, and the certificate stays verifiable — see the register below. Ask your employer or DC DNA directly. You can also complain to your national data protection authority.
Contact
DC DNA, Industrieweg 2E, 3144 CH Maassluis, info@dc-dna.com. For questions about your own details, your employer is the first point of contact.