WOR Article 27
Works council (ondernemingsraad) readiness
Last updated
For Dutch HR leaders, legal counsel and works council members: how Dehurdle relates to Article 27 WOR, a DPIA summary, and a consent request template in Dutch and English.
Nobody listens in
Nobody can listen to sessions, live or afterwards, because audio isn't kept. Organization admins can see members' scores and transcripts, so agree who gets admin access with your works council (WOR Art. 27(1)(k)). The employer can limit admins to company-wide figures only, or to progress without transcripts. Every transcript an admin opens is logged.
Audio not stored
Live audio is streamed to Google for the conversation and is not stored after the session ends. Dehurdle creates no voiceprints or voice clones.
For development only
Scores are for personal development and coaching. The template below commits the employer never to use them, directly or indirectly, for hiring, pay, promotion, discipline or dismissal.
How Dehurdle relates to Article 27 WOR
Under Article 27, paragraph 1, sub k of the Dutch Works Councils Act (Wet op de ondernemingsraden - WOR), an employer needs the prior consent (instemmingsrecht) of the works council for arrangements concerning systems aimed at or suitable for monitoring the attendance, behavior or performance of employees. Here is how Dehurdle compares with traditional monitoring tools:
| Evaluation dimension | Traditional monitoring / surveillance | Dehurdle | WOR Art. 27 implications |
|---|---|---|---|
| Voice | Records and keeps calls, may create voiceprints, and can let supervisors listen live. | Audio is streamed to Google for the live conversation and is not stored after the session ends. No recordings, voiceprints or voice clones. | Nobody can listen to sessions, live or afterwards. |
| Visibility of results | Tracks activity minute by minute or records continuously. | Organization admins can see members' scores and transcripts. Transcripts and written feedback are deleted after the organization's retention period (default 365 days). | Agree with the works council who gets admin access and for which training. |
| Scorecards | Automated rankings used for performance improvement plans or dismissal. | Scores and feedback on five competencies per scenario, for coaching. Our Terms of Service prohibit using them as the sole or primary basis for employment decisions. | The template below commits the employer never to use them, directly or indirectly, for hiring, pay, promotion, discipline or dismissal. Any employee can ask for a human review. |
| Camera | Uploads video for analysis or reads emotions from faces. | Optional and off by default. Analysis runs in the browser and no video or images leave the device. Dehurdle does not infer emotions. | The organization decides whether the camera can be used at all. |
| Data rights | Employer keeps recordings indefinitely; employees cannot ask for erasure. | Employees can download a copy of all their personal data in the app, including transcripts, scores, feedback and coach chats. When an account is deleted, the name, email address and phone number are removed; practice records stay with the organization without them. | Supports access and erasure rights under the GDPR and UAVG. |
Recommendation for Dutch employers: Because organization admins can see members' scores and transcripts, Dehurdle may fall under the consent right in Art. 27(1)(k) WOR. Present the template below to your works council before rollout and confirm the position with your own legal counsel.
How audio is handled
Works councils often ask whether employees' voices are recorded. Here is what happens to audio during and after a session:
Step 1 · Streaming
Encrypted connection
Audio streams over an encrypted connection to Dehurdle's servers in India and on to Google Gemini Live in the USA.
Step 2 · Conversation
Live AI persona
Google Gemini Live processes the audio in real time and answers in the AI persona's voice.
Step 3 · End of session
Audio deleted
While the session runs, the server holds the audio in memory only. It is never written to disk or uploaded to storage, and is gone when the session ends.
Step 4 · Scorecard
Text and scores
The redacted transcript, scores, written feedback and speaking metrics are saved in Dehurdle's database in India.
Pre-filled data protection impact assessment (DPIA)
A pre-filled DPIA summary to support your own assessment under Article 35 GDPR and the guidelines of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
1. Systematic description of processing
Employees practice work conversations with an AI persona and receive a scorecard. Live audio is streamed to Google Gemini Live in the USA for the conversation. The transcript is scored by Google Gemini models in India and saved with the scorecard in Dehurdle's database in India (AWS, Mumbai). Whether participation is voluntary or part of a required training program is the employer's decision.
2. Assessment of necessity & proportionality
Practicing with an AI persona replaces role-play with actors or practice on real customers. Data is kept to a minimum: audio is not stored after the session, there are no voiceprints or speaker identification, camera analysis is optional and runs on the device, and transcripts are deleted after the retention period agreed with the organization.
3. Lawful basis under GDPR & Dutch UAVG
The employer, as controller, determines the lawful basis, typically GDPR Article 6(1)(f) (legitimate interest in developing employees' skills) or Article 6(1)(b) (performance of a training agreement). Dehurdle does not identify anyone by voice or face, so it does not process biometric data for identification under Article 9.
4. Risk mitigation measures in place
Encryption in transit and at rest, single sign-on (SSO) access controls, a transcript retention period that Dehurdle sets at the organization's request, and automatic redaction of email addresses, phone numbers, payment card numbers and some national ID numbers before a transcript is saved. Transfers to India and the USA rely on the EU Standard Contractual Clauses. Dehurdle notifies the employer of a personal data breach without undue delay and within 72 hours, per the DPA.
Works council submission template
Copy this consent request, fill in the fields in square brackets, and adapt it for your organization's works council (ondernemingsraad).
Verzoek om instemming van de ondernemingsraad (artikel 27 lid 1 sub k WOR) Aan: de ondernemingsraad van [organisatie] Van: de directie van [organisatie] Datum: [datum] Onderwerp: voorgenomen besluit tot invoering van Dehurdle voor het oefenen van gespreksvaardigheden Geachte leden van de ondernemingsraad, De directie is voornemens Dehurdle beschikbaar te stellen aan medewerkers. Omdat beheerders binnen de organisatie de scores en transcripten van medewerkers kunnen inzien, vraagt de directie uw instemming op grond van artikel 27 lid 1 sub k van de Wet op de ondernemingsraden (WOR). 1. Doel Dehurdle is een AI-gesprekssimulator. Medewerkers oefenen werkgesprekken, zoals klantgesprekken, onderhandelingen en feedbackgesprekken, met een AI-persona en ontvangen een scorekaart met feedback. De resultaten worden uitsluitend gebruikt voor persoonlijke ontwikkeling en coaching. 2. Gebruik van resultaten - Scores en andere oefenresultaten worden nooit, direct of indirect, gebruikt voor besluiten over aanstelling, beloning, promotie, disciplinaire maatregelen of ontslag. - Iedere medewerker kan om een menselijke beoordeling van een scorekaart vragen. 3. Toegang - Niemand kan sessies beluisteren, live of achteraf, omdat audio niet wordt bewaard. - Beheerders binnen de organisatie kunnen de scores en transcripten van medewerkers inzien. De directie spreekt met de ondernemingsraad af wie beheerderstoegang krijgt en voor welke trainingen. 4. Gegevens - Audio wordt na afloop van de sessie niet bewaard. Dehurdle maakt geen stemafdrukken of stemklonen. - Transcripten en schriftelijke feedback worden bewaard gedurende de afgesproken bewaartermijn van [aantal] dagen (standaard 365 dagen) en daarna verwijderd. Scores blijven bewaard om de voortgang te volgen. - De gegevens worden in India gehost. Live spraak wordt door Google in de Verenigde Staten verwerkt. Op deze doorgiften zijn de EU-modelcontractbepalingen (Standard Contractual Clauses) van toepassing. - Camera-analyse is optioneel en draait op het apparaat van de medewerker. Er verlaten geen video of beelden het apparaat. - Dehurdle herkent geen emoties en leidt ook geen emoties af. - Dehurdle verwerkt de gegevens als onze verwerker op basis van een verwerkersovereenkomst (AVG en UAVG). Medewerkers behouden hun rechten onder de AVG, waaronder het recht op inzage en verwijdering. 5. Verzoek De directie verzoekt de ondernemingsraad om instemming met de invoering van Dehurdle onder de bovenstaande voorwaarden. Hoogachtend, [Naam] Namens de directie
Need help presenting Dehurdle to your works council?
We can join your works council briefing to walk through how audio and data are handled, where data is hosted, and co-determination questions.