Has Daisycon carried out a Data Protection Impact Assessment (DPIA)?

Yes. The first DPIA took place in 2012. Since then it has been repeated periodically. Daisycon has also mapped out its (personal) data in a register of processing activities.