Legal information

Privacy Policy

Last updated: 25 October 2026

This policy explains which personal data I process when you visit mondopilates.ch or contact me, why I do so, and what rights you have.

1. Controller

Elisa Della Santa, MondoPilates Elisa, Via del Sole 1, 6598 Tenero, Switzerland.

E-mail: e.dellasanta@me.com · Phone: +41 79 653 00 06

If you have any questions about data protection, you can write to me at this address.

2. Legal framework

I process data in accordance with the Swiss Federal Act on Data Protection (FADP). If you live in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) also applies; the legal basis is given in each section.

3. Visiting the website

The website is hosted on a server in Switzerland. On every visit, the server automatically records your IP address, the date and time, the page requested, the referring page and information about your browser and operating system in its log files.

This data is used to deliver the website, keep it secure, and detect and block abuse and attacks, including with automated tools. I do not use it to build profiles and do not combine it with other data.

The log files are deleted automatically after 14 days. Legal basis (GDPR): legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).

4. Contact form

When you fill in the contact form, I process the data you enter: first and last name, e-mail address, phone number (optional), the class you are interested in and your message. I use it only to answer your request and, where relevant, to arrange classes.

Your message is sent via the e-mail service StackMail (20i Ltd, United Kingdom) to my mailbox, which is provided by Apple (iCloud Mail). Apple may also process data outside Switzerland and the EU, in particular in the United States, on the basis of appropriate safeguards such as standard contractual clauses or the Data Privacy Framework.

To protect the form against spam, your IP address is held in memory for at most 15 minutes and is not stored.

I keep requests for at most 48 months after our last contact, unless you become a client or the law requires a longer retention period. Legal basis (GDPR): steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

5. WhatsApp, phone, e-mail and Instagram

The website contains plain links to WhatsApp, Instagram, phone and e-mail. No data is sent to these services until you click one of these links.

If you message me on WhatsApp or follow me on Instagram, the privacy policies of Meta Platforms, which operates these services, also apply. I use the data I receive through these channels only to communicate with you.

6. Map (OpenStreetMap)

To show where the studio is, the page embeds a map from OpenStreetMap, provided by the OpenStreetMap Foundation (United Kingdom). When the map loads, your browser connects to OpenStreetMap’s servers, which receive your IP address and technical information about your browser.

Legal basis (GDPR): legitimate interest in showing the studio’s location in a simple way (Art. 6(1)(f) GDPR). More information: https://osmfoundation.org/wiki/Privacy_Policy

7. Fonts

The website’s fonts (Cormorant Garamond and Inter) are hosted on the website’s own server, so no connection is made to Google or any other font provider.

8. Cookies and analytics

The website uses no cookies, no analytics or tracking tools and no advertising.

Cookie Policy

9. Disclosure and transfers abroad

I do not sell or pass on your data to third parties. I share it only with the providers named above, as far as necessary, or with authorities where the law requires it.

Some providers are based in the United Kingdom, which Switzerland and the EU recognise as providing adequate data protection, or in the United States, where transfers rely on the safeguards described in section 4.

10. Security

The website is only available over an encrypted connection (HTTPS). I take appropriate technical and organisational measures to protect data against loss and unauthorised access or use.

11. Your rights

You have the right to:

  • find out which data about you I hold and how it is processed
  • have inaccurate data corrected
  • have your data deleted
  • object to or restrict the processing
  • receive your data in a commonly used format (data portability)

To exercise these rights, write to e.dellasanta@me.com. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, https://www.edoeb.admin.ch) or, if you live in the EU, with the supervisory authority in your country.

12. Changes

This policy may be updated. The version published on this website applies.