Privacy Policy

Energy Leak Audit & Website

Last updated: March 2026

1. Controller Information

The data controller responsible for personal data collected in connection with this website and the Energy Leak Audit service is:

Name: Monika Dainyte (selbständig)

Website: monikadainyte.com

Contact email: hello@monikadainyte.com (forwarded to m.dainyte@gmail.com for operational use)

Country of establishment: Germany

This Privacy Policy applies to personal data collected via monikadainyte.com, the Calendly booking page, the Google Forms intake form, the Tally testimonial form, the Energy Leak Audit session itself, and any email communication with the Provider.

The Provider primarily serves clients based in the European Union and the United Kingdom. This Policy is written to comply with both the EU General Data Protection Regulation (GDPR) and the UK GDPR.

2. What Personal Data We Collect

2.1 Data Collected at Booking (via Calendly)

When you book a session, Calendly collects the following on behalf of the Provider:

First name and last name
Email address
Phone number — collected as an emergency backup contact only, used solely if you cannot be reached by email (e.g. no-show or urgent schedule issue). It is never used for marketing or routine communication.
City
Job title

2.2 Intake Form Data (via Google Forms)

You will receive a short intake form to complete before your session. This collects:

Professional situation, role, industry, and work context
Energy and stress patterns, sleep habits, and daily routines
Goals and what you hope to get from the session
Any personal context you choose to share voluntarily

Responses are automatically stored in Google Sheets (linked to the Provider’s CRM).

2.3 Session Data

During and after the live session, the Provider creates:

Session notes written in Google Docs
A personalised audit analysis in Google Sheets (linked from the CRM)
A PDF report created in Canva and sent to you by email as an attachment within 24 hours

2.4 CRM Records (Google Sheets)

The Provider maintains a CRM in Google Sheets containing: your name, contact details, job title, city, Calendly booking link, link to your individual audit sheet, follow-up status, and testimonial response once received.

2.5 Post-Session Testimonial Form (via Tally)

Approximately 13–14 days after your session, an optional testimonial form is sent automatically via Calendly. It is entirely voluntary. If you consent to publication, your testimonial response and your chosen display format are stored in Google Sheets. See Section 5.5 for full details.

2.6 Website Visitors

When you visit monikadainyte.com (hosted on Squarespace), the following may be collected automatically:

IP address (anonymised where possible)
Browser type and device information
Pages visited, time spent, and referral source
Cookie data (see Section 9)

2.7 Email & Direct Contact

When you contact the Provider by email or via the website contact form, your email address and message content are processed. All operational emails are handled via m.dainyte@gmail.com (Google LLC). The address hello@monikadainyte.com forwards to this Gmail account. Google acts as a data processor under its Data Processing Agreement and Standard Contractual Clauses for EEA and UK data transfers.

2.8 Lead Magnets & Email List

If you sign up to receive a lead magnet, resource, or newsletter via the website, your email address and first name are collected via Squarespace’s built-in email tools. Where double opt-in is enabled, you will receive a confirmation email before being added to any mailing list. You may unsubscribe at any time via the link in any email.

2.9 Special Category Data

Information you share about your health, stress levels, sleep, burnout, or mental wellbeing is considered sensitive or special category data under GDPR Article 9. This information is shared voluntarily by you in the context of the audit. It is handled with heightened confidentiality and is never shared in any identifiable form.

3. Legal Bases for Processing (GDPR Art. 6 & 9)

Contractual necessity (Art. 6(1)(b)): Delivering the Energy Leak Audit, including intake, session, notes, analysis, and PDF report.
Consent (Art. 6(1)(a) / Art. 9(2)(a)): For use of anonymised data in research and content creation (Section 5.1); for publishing testimonials (Section 5.5); for email marketing where opted in (Section 5.2).
Legitimate interests (Art. 6(1)(f)): CRM record-keeping, business administration, service improvement, and direct correspondence.
Legal obligation (Art. 6(1)(c)): Retaining financial and invoicing records under German tax law.

4. How We Use Your Data

Confirm and manage your booking via Calendly
Process your payment via Stripe
Contact you in an emergency (no-show or unreachable by email) using the phone number provided
Send the Google Forms intake form and review your responses before the session
Conduct the live 75-minute video session via Google Meet (or Zoom where applicable)
Write session notes in Google Docs and build your personalised audit analysis in Google Sheets
Create your PDF report in Canva and send it to you as an email attachment via Gmail within 24 hours of the session
Maintain a CRM record in Google Sheets covering contact details, session links, follow-up status, and testimonial
Send an optional Tally testimonial form approximately 13–14 days after the session via Calendly
Publish testimonials in the format you selected, if you consented to publication
Send newsletters, lead magnets, or resources if you have opted in
Fulfil legal obligations (invoicing, tax records)
Create anonymised insights for research, framework development, and content creation (see Section 5.1)

5. Use of Data for Specific Purposes

5.1 Anonymised Research & Content Creation

With your consent (indicated by proceeding with the booking), we may use anonymised, non-identifying data from your intake form and session for the following purposes: developing proprietary frameworks in stress management, burnout recovery, resilience, sleep science, and performance; writing, including a future book or publication; creating podcast episodes, keynote presentations, workshops, and educational content; building AI-based tools or digital products for energy and stress management; and professional or academic research. Anonymised data will NEVER include your name, contact details, photo, or any combination of data points that could reasonably identify you. Contextual data that may appear in anonymised form includes: age range (e.g. "mid-30s"), professional role (e.g. "Operations Manager in tech"), industry, country (e.g. "UK"), and general patterns described (e.g. "difficulty setting boundaries after working hours").

You may withdraw your consent for this purpose at any time by emailing hello@monikadainyte.com. Withdrawal does not affect any processing already completed.

5.2 Email Marketing

If you have opted in via a lead magnet or newsletter signup, we will send you periodic emails with content related to stress management, energy, performance, and wellbeing. You can unsubscribe at any time via the link in any email or by contacting hello@monikadainyte.com. You will not be added to any mailing list without your active opt-in consent.

5.3 Invoicing

A payment record or invoice is generated for each session for accounting and legal purposes. This contains your name and email address. It is retained for 10 years as required by German law.

5.4 Service Improvement

General patterns from sessions (fully anonymised) may be used to improve the audit methodology, intake form design, and PDF report format over time.

5.5 Testimonials

Testimonials are only published with your explicit prior consent, captured through the Tally form. The form gives you three options for how your feedback is used:

Share on my website and/or social media — you then choose your display format (see below)
Keep my feedback private — your response will not be published

If you consent to publication, you choose one of three display formats:

First name + job title + city + LinkedIn photo (most identifying)
Job title + city only (no name, no photo)
Fully anonymous — quote only, no identifying details

Your LinkedIn photo, where you consent to its use, is sourced from your LinkedIn profile. It is treated as personal data and stored in Google Sheets as part of your CRM record until you withdraw consent or request removal. Testimonials are published exactly in the format you selected. You may request removal at any time by contacting hello@monikadainyte.com; removal will happen within 5 business days.

6. Data Sharing & Third-Party Processors

We do not sell your personal data. We share data only with the following processors, strictly for the purposes described:

Calendly (calendly.com) — Booking, scheduling, and triggering the post-session testimonial form. Collects name, email, phone number, city, and job title at booking. Privacy Policy: calendly.com/privacy

Stripe (stripe.com) — Payment processing at the time of booking. Card details are not stored by the Provider. Privacy Policy: stripe.com/privacy

Google LLC — Gmail — All client email communication, including sending the PDF report as an attachment. Privacy Policy: policies.google.com/privacy

Google LLC — Google Forms — Pre-session intake form. Responses automatically flow to Google Sheets. Privacy Policy: policies.google.com/privacy

Google LLC — Google Sheets — CRM records, intake responses, individual audit analysis sheets, and testimonial data. Privacy Policy: policies.google.com/privacy

Google LLC — Google Docs — Session notes written during and after each audit. Privacy Policy: policies.google.com/privacy

Google LLC — Google Meet — Live video sessions. Sessions are not recorded by the Provider unless separately agreed in writing. Privacy Policy: policies.google.com/privacy

Canva (canva.com) — Used to create the personalised PDF report. Client data is entered manually by the Provider when building the report. Privacy Policy: canva.com/privacy

Tally (tally.so) — Post-session testimonial form sent approximately 13–14 days after the session. Voluntary. Responses transferred to the Provider’s Google Sheets CRM. Privacy Policy: tally.so/privacy

Squarespace (squarespace.com) — Website hosting for monikadainyte.com and email list management. Privacy Policy: squarespace.com/privacy

Zoom (zoom.us) — optional — May be used as an alternative to Google Meet in future. Privacy Policy: zoom.us/privacy

All Google services listed above are covered under a single Google Data Processing Agreement and Standard Contractual Clauses. Where any provider transfers data outside the EEA or UK, appropriate safeguards apply, including SCCs or UK International Data Transfer Agreements (IDTAs).

7. Data Retention

Booking data (Calendly — name, email, phone, city, job title): 3 years from session date, then deleted from the Provider’s CRM.
Intake form responses (Google Forms / Google Sheets): 3 years from session date, then deleted.
Session notes (Google Docs): 3 years from session date, then deleted.
Audit analysis sheets (Google Sheets): 3 years from session date, then deleted.
CRM records (Google Sheets): 3 years from last interaction, then reviewed for deletion.
Email correspondence and PDF reports (Gmail): 3 years, then reviewed for deletion.
Payment records and invoices: 10 years, as required under German law (HGB § 257, AO § 147).
Testimonial responses and published testimonials: until you withdraw consent and request removal.
Email marketing list: until you unsubscribe or request deletion.
Anonymised research data: retained indefinitely, as it no longer constitutes personal data under GDPR or UK GDPR.

8. Your Rights

8.1 EU Clients (GDPR)

Under the EU General Data Protection Regulation, you have the right to: access your data (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing (Art. 21); and to withdraw consent at any time (Art. 7(3)).

To exercise any of these rights, contact hello@monikadainyte.com. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority in Germany:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)

www.bfdi.bund.de

8.2 UK Clients (UK GDPR)

If you are based in the United Kingdom, you have equivalent rights under the UK GDPR and Data Protection Act 2018. You may lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

www.ico.org.uk

9. Cookies

monikadainyte.com uses cookies set by Squarespace for website functionality and analytics. A cookie consent banner is displayed on your first visit. You may adjust your cookie preferences at any time via the cookie settings in the website footer. For full details, see Squarespace’s cookie policy at squarespace.com/privacy.

10. Children’s Privacy

This service is intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data, please contact us immediately at hello@monikadainyte.com.

11. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, services, or legal requirements. The current version with its "Last updated" date is always available at monikadainyte.com/privacy. Where changes are material, we will notify affected users by email where possible.

12. Contact

For any privacy-related questions, data subject requests, or concerns, please contact:

Email: hello@monikadainyte.com

Website: monikadainyte.com