Datenschutz

Privacy Policy

This page explains which personal data is collected on stefanialanfranchi.com and in the Energy Reset program, why it is collected, who receives it, and which rights you have.

1. Who is responsible

Stefania Lanfranchi Health is based in Switzerland. Data processing follows the Swiss Federal Act on Data Protection (FADP, SR 235.1). For visitors and clients in the European Economic Area, the EU General Data Protection Regulation (GDPR) applies in addition.

2. Which data is collected and why

2.1 Visiting the website

When you open a page, the hosting provider records technical data in server logs: IP address, date and time, the page requested, the referring page, browser type and operating system. This data is needed to deliver the page, keep the website secure and find errors. It is not combined with your name.

2.2 Registering for Energy Reset

The registration form asks for your name, e-mail address and, where the form provides a field, your phone number. This data is used to confirm your seat, send the invoice and payment details, communicate about the program, and deliver the sessions and materials.

If you arrived through an advertisement, the form also stores campaign parameters from the link you clicked (utm_source, utm_medium, utm_campaign, utm_content, utm_term, fbclid), the referring page, and the Meta cookie values _fbp and _fbc where present. This tells us which advertisement led to a registration. The parameters are kept in your browser's session storage and local storage under the key "er_attr" until you clear your browser data.

Legal basis for EEA residents: performance of a contract and steps before entering into a contract (Art. 6(1)(b) GDPR) for the registration itself, and legitimate interest in measuring advertising (Art. 6(1)(f) GDPR) for the campaign parameters.

2.3 Free supplement guide

To download the free guide "The Core 4", the form asks for your name and e-mail address. You can also tick a box to agree to receive marketing e-mails. We store your name, e-mail address, your marketing choice, the page you came from and, where present, the campaign parameters and the Meta cookie values described in section 2.2. The data is used to send you the guide by e-mail and, only if you ticked the box, to send you further e-mails about health, energy and our programs. You can unsubscribe at any time through the link in every e-mail.

Legal basis for EEA residents: performance of your request (Art. 6(1)(b) GDPR) for sending the guide, and your consent (Art. 6(1)(a) GDPR) for marketing e-mails.

2.4 Payment

Payment for the program is made by bank transfer against an invoice. The name and bank details visible on the transfer are used for bookkeeping and stored for as long as Swiss accounting law requires.

2.5 Contact by e-mail

If you write to us, we store your message and contact details to answer you and for follow-up questions.

2.6 Health-related information during the program

During Energy Reset you may share information about your sleep, energy, nutrition and habits, for example through the Energy and Sleep Score. This is sensitive personal data. It is used only to run the program with you, is shared with nobody outside the program without your consent, and is deleted when you ask for it or when it is no longer needed for the program.

3. Meta Pixel

The Energy Reset pages use the Meta Pixel, a tool of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel lets us see how many people who saw an advertisement on Facebook or Instagram visited the page, opened the registration form and registered, and lets us show our advertisements to people with similar interests.

The pixel sets the cookies _fbp and _fbc and sends the following events to Meta: PageView (page opened), ViewContent (price section viewed), InitiateCheckout (registration form opened), Lead (form submitted), CompleteRegistration (registration confirmed) and SupplementGuideDownload (free guide requested). Each event includes your IP address, browser information, the page address and a random event ID. No name or e-mail address is sent through the pixel.

Meta may combine this data with your Facebook or Instagram account and may transfer it to servers in the USA. How Meta handles this data is described in Meta's privacy policy.

You can limit this tracking: in your Facebook and Instagram account settings under "Ads" you can turn off ads based on data from partners, and in your browser you can block third-party cookies or delete the cookies _fbp and _fbc. The pixel also stops working when you use an ad blocker.

Legal basis for EEA residents: consent where your browser or device asks for it, otherwise legitimate interest in measuring and improving our advertising (Art. 6(1)(f) GDPR).

4. HighLevel (hosting, forms, CRM, e-mail)

The website, the registration form, the contact database and the e-mails we send run on the HighLevel platform of HighLevel LLC, 5473 Blair Rd Ste 100, PMB 383313, Dallas, Texas 75231-4227, USA. Data you enter in the form is stored on HighLevel's servers and may be processed in the USA and other countries. HighLevel states in its privacy policy that it participates in the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework for such transfers.

5. Google Fonts

The pages load the fonts Plus Jakarta Sans and Fraunces from Google servers. When a page opens, your browser sends a request to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland, which receives your IP address in the process. Google's handling of this data is described in Google's privacy policy.

6. Who receives your data

Your data is passed on only to the providers named above, which process it on our behalf, and to authorities where the law requires it. It is not sold and not passed on to other companies for their own advertising.

Some providers are based in the USA. Transfers there rely on the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework where the provider is certified, or on standard contractual clauses.

7. How long data is kept

• Server logs: deleted by the hosting provider according to its own retention schedule.
• Registration and program data: for the duration of the program and for follow-up, then deleted when you ask or when there is no reason to keep it.
• Invoices and payment records: 10 years, as required by Art. 958f of the Swiss Code of Obligations.
• E-mail correspondence: until the matter is closed, unless it belongs to the accounting records.

8. Your rights

You can ask us at any time which data we hold about you, have it corrected or deleted, receive a copy in a common format, and object to processing that is based on legitimate interest. If you gave consent, you can withdraw it at any time with effect for the future. Write to [email protected].

You can also complain to a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. In the EEA it is the data protection authority of your country of residence.

9. Security

Pages and forms are delivered over an encrypted connection (HTTPS). Access to the contact database is protected by login and limited to Stefania Lanfranchi.

10. Changes

This policy is updated when the website or the tools behind it change. The version on this page is the current one.

Last updated: 28 September 2026