Privacy Policy

1. Data controller

The data controller responsible for the processing of personal data on this website is:

2. Scope of data collection

The following personal data is collected through the Village of Two diagnostic:

• Full name and email address — collected at the point of registration to deliver diagnostic results and to prepare for the follow-up session.
• Diagnostic responses — selections made across the six assessment areas (Foundation, Fireplace, The Walls, The Windows, The Roof, Climate), including descriptor choices and section scores.
• Free-text responses — optional written answers to anchor and reflection questions within the diagnostic. Used solely for session preparation and not shared with any third party. (This data is not transmitted via EmailJS.)
• Post-diagnostic feedback — optional written responses to feedback questions shown after submission. Used solely for product improvement.
• Referral source — optional selection indicating how the respondent heard about Village of Two. Used for internal purposes only.

No financial data, identification documents, or special category data as defined under Article 9 GDPR are collected.

3. Legal basis for processing

Personal data is processed on the following legal bases pursuant to Article 6 GDPR:

• Consent (Art. 6(1)(a) GDPR): The data subject provides explicit consent by ticking the consent checkbox prior to submitting the diagnostic. Consent may be withdrawn at any time by contacting the data controller at the address above. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Performance of a contract (Art. 6(1)(b) GDPR): Where the data subject has booked a follow-up session, processing of diagnostic data is necessary for the performance of that service.

4. Data storage and processors

Personal data is stored and processed using the following third-party services:

• Google LLC (Google Drive, Google Sheets) — diagnostic responses are stored in a private spreadsheet accessible solely to the data controller. Google LLC is headquartered in the United States. Data transfers are governed by Standard Contractual Clauses (SCCs) in accordance with Chapter V GDPR. Google's privacy policy is available at policies.google.com/privacy.
• Tiiny.site (Tiiny Host Ltd) — this website is hosted on Tiiny.site, which processes standard server log data (including IP addresses) in the course of serving web pages. No personal data submitted through the diagnostic is stored by Tiiny.site. Tiiny Host Ltd's privacy policy is available at tiiny.host/privacy-policy.
• EmailJS — form submission data is transmitted via EmailJS to send an email notification to the data controller when a diagnostic is submitted. This notification may include the respondent's name, email address, selected context, and summary diagnostic results. EmailJS is used only for submission notifications and not for marketing.

Personal data is not sold, used for advertising, or shared for marketing purposes. No advertising platforms or behavioural tracking tools are used on this site.

5. Retention period

Personal data is retained for a maximum period of 12 months from the date of last contact. Upon expiry of this period, all data relating to the data subject will be permanently deleted from all storage systems.

Data subjects may request deletion at any time prior to this period. Such requests will be fulfilled within 30 days.

6. Rights of data subjects

Under the GDPR, data subjects have the following rights with respect to their personal data:

• Right of access (Art. 15 GDPR): The right to obtain confirmation of whether personal data is being processed and, if so, access to that data.
• Right to rectification (Art. 16 GDPR): The right to request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): The right to request deletion of personal data.
• Right to restriction of processing (Art. 18 GDPR): The right to request that processing be restricted under certain conditions.
• Right to data portability (Art. 20 GDPR): The right to receive personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): The right to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): The right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact: villageof2coach@gmail.com. Requests will be responded to within 30 days.

7. Right to lodge a complaint

Data subjects have the right to lodge a complaint with the competent supervisory authority. The supervisory authority for Berlin is:

8. Cookies and tracking

This website does not use tracking cookies or analytics tools. No personal data is stored on the user's device via cookies by this website.

Google Fonts is used for typography. Loading this resource establishes a technical connection to Google's servers and may result in Google receiving the user's IP address. This processing is carried out on the basis of legitimate interest (Art. 6(1)(f) GDPR) in delivering a consistent visual presentation of the site. No personal data is stored locally as a result of this connection. Users who wish to prevent this connection may disable JavaScript or use a browser extension that blocks third-party font requests.

9. Amendments

This policy may be updated from time to time. The date of the most recent revision is indicated at the top of this page. Where changes are material, data subjects who have previously submitted the diagnostic will be notified by email.