Last updated: 10 October 2026
Editorial status: providers and data flows are described. STATERA’s applicable processing and international transfer arrangements, together with its specific retention policy, are still being reviewed. This notice will be removed only after that review is complete.
The controller is STATERA Personal-Training AG, Aeschengraben 20, 4051 Basel, Switzerland, represented by Tobias Malburg. For privacy enquiries, contact info@statera.swiss, +41 61 271 00 14 or our postal address. This notice covers visits to this website, contact enquiries and appointment organisation. Information required for subsequent personal training is discussed with you separately.
When you request our pages, web, storage and network services receive your IP address, request time, requested resource and technical browser and connection information. This supports delivery, troubleshooting and protection against abuse. For rate limiting of form and statistics requests, the application temporarily uses IP addresses in memory in a one-hour counting window; expired entries are cleared during subsequent requests. These IP addresses are not stored in the application’s contact or statistics tables. Infrastructure logs maintained by providers are separate.
The website, image storage and form database are provided through Manus, not Hostpoint web hosting. Manus is provided by Butterfly Effect Pte. Ltd., 109 North Bridge Road, #06-W112, Singapore 179097. The database uses PingCAP’s TiDB Cloud on AWS in the US East region (USA). Website and network services use international infrastructure; Manus identifies Singapore and the USA among its processing locations. Manus engages technical subprocessors for cloud and network services, as described in its linked subprocessor list. Website and form information is therefore not processed exclusively in Switzerland.
A callback enquiry requires your name, email address and phone number. The website database also stores language, submission time, a random request identifier and notification status. For a new request, the Manus notification service sends a message containing name, email, phone number and language to the project owner for follow-up. We use these details to answer your enquiry, make the requested callback and discuss next steps, not to subscribe you automatically to a newsletter. A callback request does not reserve an appointment. Contact details are not publicly accessible.
If you contact us by email or phone, we use your contact details, message content and necessary communication information to respond. The info@statera.swiss mailbox is hosted by Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland. Hostpoint states that its email service stores data in Switzerland. Delivery can also involve your own email and telecommunications providers. Ordinary email is not a secure channel for health records; please arrange a suitable method with us first.
We use Calendly, LLC, USA, to arrange the initial phone consultation. Clicking a booking link opens the external scheduling page. Our website loads no Calendly scripts or embeds and passes no prefilled contact, health or campaign data. On its page, Calendly processes technical access information, details you enter into the booking form and your selected appointment to organise the call. Calendly processes appointment information on our behalf and may act independently for its own website and account purposes. Our Calendly account is connected to Google Calendar. Necessary appointment and participant information is exchanged to check availability and create calendar entries. Google identifies Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for users in Switzerland unless specific service terms apply. Calendly processes data in the USA; Google uses international infrastructure including the USA. Privacy choices on our website do not automatically apply to the external scheduling page. You may instead request a callback or contact us directly.
You can also reach us through WhatsApp at +41 78 207 78 13. The link opens the service only when clicked; our website loads no WhatsApp widget or script and sends no automatic message. If you write to us, we use your phone number, any profile name and message content to respond. WhatsApp Ireland Limited provides the service to users in the European region. WhatsApp belongs to Meta and processes account, usage and connection information under its own privacy notice, including in the USA. End-to-end encryption of personal messages does not replace protection of devices or any backups. Please do not send health records or sensitive details through this channel. Phone and email remain available alternatives.
Our website form does not ask for symptoms, diagnoses or health records and has no free-text field for them. Please do not submit such sensitive information through public website features or external messaging channels. We discuss information needed for your personal training with you and arrange its handling separately. Website processing does not include an automated health assessment.
The application stores your selection for optional statistics and external content in your browser as statera-consent-v1 (localStorage) until you change it or clear browser data. With statistics enabled, the broad source category is stored as statera-channel in sessionStorage and removed when permission is withdrawn. You may reject optional functions and change your selection through the footer at any time. Fonts, the logo and video preview image are delivered through our website, without a request to Google Fonts or YouTube for those assets. Technical infrastructure and enabled external services may use their own cookies or storage technologies; their information should also be considered.
Only with your permission does the application send consultation-button clicks and successful callback enquiries to the website database. Records contain event type, time, language, a random event identifier and a broad source category: direct, Google, Meta or other. Referrer and campaign information is reduced to a category in the browser; full page addresses and click identifiers are not sent as statistics fields. Names, email addresses, phone numbers and symptoms are not part of these events. Infrastructure still processes technical connection information during transmission. A button click is not a booking completion. After withdrawal, the application sends no further optional events; you may separately request deletion of previously stored information. No Meta Pixel, Google Analytics or Google Ads tags are enabled in the application. Minimal-data statistics are not a guarantee of complete anonymity.
Reto’s video loads only after you click play; Google Maps loads after you activate the map or permit external content. Google services receive technical information including IP address, browser and device details and may process usage information. The video uses YouTube’s nocookie mode, which does not prevent all processing. Google operates international infrastructure including in the USA. Google generally identifies Google Ireland Limited for users in Switzerland and Google LLC in the USA for information indexed and displayed in Maps. Instagram, YouTube, LinkedIn and Maps links are ordinary external links, not automatically loaded social plugins. The relevant provider’s information and settings apply when you open them.
Tobias Malburg handles enquiries for STATERA. Under the current operational arrangement, no other employees or external advisers have access to incoming enquiries and the associated accounts. Providers used for hosting, database, notifications, email, scheduling and external content you enable also process information as necessary for their services. Providers may pursue their own legitimate operational, security or legal purposes. Information is not made public. Disclosure to authorities or to enforce legal claims occurs only where there is a legal basis.
Manus, the website database, Calendly and enabled Google or WhatsApp services involve processing particularly in Singapore, Ireland and the USA. Laws and public-authority access powers may differ from Switzerland. Manus publishes a data processing addendum containing standard contractual clauses with Swiss adaptations. Calendly’s addendum identifies the Swiss–US Data Privacy Framework and fallback standard contractual clauses as transfer mechanisms. These published provider terms do not mean that all arrangements applicable to STATERA have already been reviewed or concluded. Their application and coverage of the actual providers remain part of the review stated above. You may request information about applicable transfer mechanisms and safeguards from us.
We process information to operate and secure the website, respond to your requested contact, arrange appointments and prepare our services. Optional statistics and external embeds follow your voluntary choice. Swiss data protection law applies in particular. Where the GDPR applies, requested contact and scheduling rely on pre-contractual steps, necessary operation and security on legitimate interests, and optional statistics or content on consent. The website makes no automated decision about your suitability as a client.
Enquiry and appointment details are needed to respond to your contact and any subsequent support. A client relationship can also involve contract performance and legal retention duties. A fixed deletion period for enquiries without subsequent work and for optional statistics has not yet been set organisationally; the website currently has no automatic deletion routine. Specific periods and provider retention are being established as part of the review noted above. You may already request deletion at info@statera.swiss. Provider backups and necessary records may remain beyond deletion from active systems. We use HTTPS for website access and limit access to necessary people and services, but cannot guarantee absolute protection.
Subject to applicable law, you may request access, correction and deletion and withdraw consent for future processing. Other rights, including data delivery or portability, depend on legal conditions. Contact info@statera.swiss. We may request appropriate identity verification to avoid disclosure to unauthorised people. You may contact the Swiss Federal Data Protection and Information Commissioner and, where the GDPR applies, the competent supervisory authority. We update this notice when services or processing change; the date is shown above.
