Organisational Performance Scorecard

Privacy Notice

RODi HR Ltd | RODi HR | Evolution Consulting

Effective date: 27 October 2026

1. Introduction

At RODi HR Ltd, we respect your privacy and are committed to protecting your personal information.

This Privacy Notice explains how we collect, use, store and protect personal information provided by individuals participating in our Organisational Performance Scorecard.

The assessment is offered by Evolution Consulting, a brand of RODi HR Ltd, including at The Business Show in London on 11–12 November 2026.

This notice also explains how we use information to deliver personalised assessment results, provide complimentary books, administer our 3-2-1 prize draw and manage optional follow-up and marketing communications.

We process personal information in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (EU GDPR), Irish data protection legislation and, where applicable, the UK General Data Protection Regulation (UK GDPR).

This notice supplements our general RODi HR Privacy Policy.

2. Who is responsible for your personal information?

The data controller responsible for the Organisational Performance Scorecard is:

RODi HR Ltd
Trading as RODi HR and Evolution Consulting
10F Effra Road
Rathmines
Dublin D06 WD68
Ireland

Email: info@rodihr.com

RODi HR Ltd is an Irish company operating under the RODi HR and Evolution Consulting brands.

RODi HR Ltd determines why and how personal information collected through the assessment is processed.

For privacy enquiries or requests relating to your personal information, please contact info@rodihr.com.

3. What personal information do we collect?

When you complete the Organisational Performance Scorecard, we collect the information you provide, including:

Personal and professional details

Your name
Email address
Job title
Company name
Organisational role or seniority

Organisational information

Approximate number of employees
Main organisational challenges
Responses to our 12 organisational performance assessment questions

Assessment results

Overall Organisational Performance Score
Scores across four organisational performance dimensions
Your identified strongest area
Your identified greatest opportunity for improvement

Participation information

Prize-draw eligibility and entry status
Whether you have collected a complimentary book and which title
Marketing communication preferences
Whether you have requested a follow-up discussion
Date and time of assessment submission
Whether you accessed the assessment through our exhibition stand or seminar

Our technology providers may also process technical information necessary to operate and secure the assessment, such as device, browser and connection information.

We do not intentionally request sensitive personal information, such as health information, religious beliefs or other special-category data. Please avoid including such information in any free-text responses.

4. How and why do we use your information?

We process information for the following purposes.

A. To provide your Organisational Performance Assessment

We use your answers to calculate your overall organisational performance score and identify your strongest performance area and greatest opportunity for improvement.

The assessment uses a consistent scoring methodology across 12 questions.

Lawful basis: Our legitimate interests under Article 6(1)(f) GDPR in providing the complimentary assessment requested by participants.

We consider this processing proportionate to the assessment service requested and limit the information collected to what is reasonably necessary.

B. To email your personalised assessment results

Everyone who completes the assessment and provides a valid email address will receive a personalised email containing:

Their overall Organisational Performance Score out of 100
Their strongest performance area
Their greatest opportunity for improvement

These emails are provided as part of the assessment service requested by participants.

You do not need to subscribe to marketing communications to receive your results.

Lawful basis: Our legitimate interests under Article 6(1)(f) GDPR in fulfilling the assessment request and delivering the results.

These emails will not contain unrelated promotional marketing unless separately permitted.

C. To provide your complimentary book

Participants who complete the assessment may receive one complimentary book from our available titles, in accordance with the published giveaway conditions.

We may record your email address, chosen book and collection status to verify assessment completion, administer the giveaway and prevent duplicate collections.

The complimentary book is not conditional on subscribing to marketing communications.

Lawful basis: Our legitimate interests under Article 6(1)(f) GDPR in administering the giveaway fairly and efficiently.

D. To administer our 3-2-1 prize draw

Eligible participants may be entered into our 3-2-1 prize draw.

We use the employee-count category and organisational role selected in the assessment to determine eligibility.

We may also use participant information to:

Record eligible entries
Administer the prize draw
Select winners fairly
Notify winners
Arrange delivery of prizes
Maintain appropriate competition records

Eligibility and participation are governed by the separate published prize-draw terms and conditions.

Entry is not conditional upon agreeing to receive marketing communications.

Lawful basis: Our legitimate interests under Article 6(1)(f) GDPR in administering a fair and transparent prize draw.

Where applicable, information may also be processed to comply with a specific legal obligation under Article 6(1)(c).

E. To respond to requests for a follow-up discussion

If you indicate that you would like to discuss your assessment results, we may contact you to arrange and conduct that discussion.

We will use your contact information and relevant assessment results for this purpose.

Lawful basis: Our legitimate interests under Article 6(1)(f) GDPR in responding to your express request for contact.

You may ask us not to contact you further at any time.

Requesting a discussion does not automatically subscribe you to marketing communications.

F. To send optional marketing communications

If you separately choose to receive marketing communications, we may send you:

Business insights and articles
Event invitations
News and updates
Information about our

G. To maintain security and meet legal obligations

We may process limited personal information to protect our systems, prevent misuse, maintain appropriate records, respond to data protection requests and comply with applicable legal obligations.

Lawful basis: Our legitimate interests under Article 6(1)(f) GDPR or compliance with legal obligations under Article 6(1)(c), depending on the processing activity.

5. Are you required to provide your information?

The assessment requires certain personal, professional and organisational information to calculate and deliver your personalised results.

If you choose not to provide the information marked as required, we may be unable to complete your assessment or send your results.

You are not required to:

Subscribe to marketing communications.
Request a follow-up discussion.
Agree to receive unrelated promotional materials.

These optional choices do not affect your assessment score, book entitlement or eligibility for the prize draw.

6. How are your assessment results calculated?

The Organisational Performance Scorecard contains 12 questions covering four dimensions:

Strategic Direction
Leadership & Accountability
Performance & Succession
Organisational Maturity

Each response is assigned a numerical value from 1 to 5.

The overall result is calculated using a normalised scoring formula and displayed on a scale of 0–100.

The four dimension scores are compared to determine the strongest area and greatest opportunity for improvement.

Where dimensions have equal scores, predefined tie-breaking rules are applied. The same dimension will not be displayed as both the strongest area and greatest opportunity.

The results are an indicative assessment based on the information you provide and are intended to encourage reflection on organisational performance. They do not constitute an independent organisational audit.

We also use predefined rules to determine prize-draw eligibility based on organisation size and the participant's selected role category.

These automated calculations are not used to make employment, financial, legal or similarly significant decisions about individuals.

We do not carry out solely automated decision-making that produces legal or similarly significant effects on participants.

7. Who has access to your information?

Access to identifiable participant information within RODi HR Ltd is limited to the individual responsible for managing the assessment, prize draw, book giveaway and participant communications.

We use third-party service providers to help deliver these activities.

Tally

Tally provides the online assessment platform used to collect responses, calculate results and manage assessment submissions. Where enabled, Tally is also used to send personalised results emails.

MailerLite

Where you opt into marketing, relevant contact details, communication preferences and selected assessment information may be transferred to MailerLite, our email marketing service provider.

We do not automatically add assessment participants to our marketing mailing list merely because they completed the assessment.

Google Workspace / Google Sheets

Where implemented, we may use a restricted Google Sheets register to record completed assessments and book collections, including checking whether a complimentary book has already been collected.

Integration services

Where necessary, we may use an integration provider to transfer information securely between the assessment, administrative and communication systems.

We require service providers processing information on our behalf to operate under appropriate data protection arrangements.

We may also disclose personal information where required by law or where necessary to establish, exercise or defend legal claims.

We do not sell participant information or provide our assessment participant list to unrelated businesses for their own marketing purposes.

8. Where is your information stored and processed?

RODi HR Ltd is established in Ireland.

We use third-party technology providers that may process or store personal information within the European Economic Area or in other countries.

Where personal information is transferred outside the EEA or UK and applicable data protection law requires safeguards, we rely on appropriate lawful transfer mechanisms. These may include adequacy decisions or regulations, Standard Contractual Clauses or UK-approved transfer safeguards, as applicable.

You can request information about relevant international transfer arrangements by contacting info@rodihr.com.

9. How long do we retain your information?

We retain personal information only for as long as reasonably necessary for the purposes described in this notice.

Assessment responses and results

Identifiable assessment responses and results are retained for up to 12 months after submission.

After this period, they will be securely deleted or anonymised, unless a specific lawful reason requires longer retention.

Book collection records

Records used to administer the complimentary book giveaway will normally be deleted or anonymised within 12 months of the event, unless a longer period is justified.

Prize-draw records

Prize-draw administration records will normally be reviewed and deleted within 12 months after the draw has been completed, unless further retention is required for legal obligations or dispute resolution.

Assessment follow-up enquiries

Information retained solely for a requested follow-up discussion will normally be reviewed after six months.

Where an ongoing business or client relationship develops, relevant information may be retained under the separate retention arrangements applicable to that relationship.

Marketing contact details

Where you have opted into marketing, we may retain your contact details while your consent remains valid and the information continues to be relevant.

We review our marketing contact database at least every 12 months.

Where a contact has not meaningfully engaged with our communications for 24 months, we assess whether continued retention remains justified.

If you unsubscribe, we will stop sending marketing communications. We may retain limited suppression information to ensure your preference is respected.

We may also retain appropriate records of consent and withdrawal for accountability and legal compliance.

10. How do we protect your information?

We use technical and organisational measures appropriate to the nature and sensitivity of the personal information we process.

These include:

Restricting access to identifiable participant records.
Protecting accounts with appropriate authentication measures.
Using established technology service providers.
Applying appropriate security and confidentiality arrangements.
Limiting personal information to what is necessary.
Reviewing retention and deletion requirements.
Responding to identified security risks.

Our service providers maintain their own technical and organisational security measures under their applicable agreements.

Although no online system can guarantee absolute security, we take reasonable steps to protect your information against unauthorised access, loss, alteration or disclosure.

11. Your data protection rights

Under applicable data protection laws, and subject to relevant conditions and exceptions, you may have the right to:

Access: Request a copy of the personal information we hold about you.

Rectification: Ask us to correct inaccurate or incomplete information.

Erasure: Request deletion of your personal information in certain circumstances.

Restriction: Request that we restrict processing in certain circumstances.

Objection: Object to processing based on legitimate interests. You also have the right to object to processing for direct marketing at any time.

Data portability: Receive certain personal information in a structured, commonly used and machine-readable format where the legal requirements apply.

Withdrawal of consent: Withdraw your consent at any time where processing relies on consent.

Automated decision-making: Exercise applicable rights relating to qualifying automated decision-making.

To exercise your rights, please contact:

info@rodihr.com

We will respond within the time limits required by applicable data protection law, normally within one month, subject to permitted extensions.

We may request reasonable information to verify your identity where necessary.

12. Marketing communications and your choices

You will only receive our consent-based marketing communications if you actively opt in.

Marketing emails may be sent under either the RODi HR or Evolution Consulting brand, both operated by RODi HR Ltd.

Each marketing email will include an appropriate unsubscribe mechanism.

You can withdraw your marketing consent at any time by contacting info@rodihr.com.

Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

It will also not affect your right to receive the assessment results you requested or any valid prize-draw entry.

13. Cookies and technical information

Our assessment is delivered using Tally, a third-party online form platform.

Tally and other enabled services may process technical information required to operate, maintain and secure the assessment.

Where non-essential cookies or similar tracking technologies are used, applicable consent and information requirements will be observed.

For additional information about cookies used on the RODi HR website, please see our website's Cookies Policy.

14. Complaints

If you have concerns about how your personal information is processed, please contact us at info@rodihr.com so that we can investigate.

You also have the right to make a complaint to an appropriate data protection supervisory authority.

Ireland — Data Protection Commission

Website: https://www.dataprotection.ie

United Kingdom — Information Commissioner's Office

Website: https://ico.org.uk

Depending on your circumstances, you may also have the right to lodge a complaint with another competent supervisory authority.

15. Changes to this notice

We may update this Privacy Notice to reflect changes to our assessment, service providers, data processing arrangements or legal obligations.

The latest version will be published on the RODi HR website, with an updated effective date where appropriate.

Where a change materially affects the processing of your personal information, we will provide additional information where required.

16. Contact us

If you have questions about this Privacy Notice or wish to exercise your data protection rights, please contact: