BOOK NOW

Privacy Policy

Last Updated: June 18, 2026

At 2PROBEATS S.R.L. ("we," "us," "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit 2probeats.com, purchase our digital products or online courses, or subscribe to our communications.

This policy complies with the EU General Data Protection Regulation (GDPR) and applicable Romanian laws.

1. Who We Are (Data Controller)

For the purposes of the GDPR, the Data Controller is:

Company: 2PROBEATS S.R.L.
Trade Registry No.: J40/3763/2017
Unique Registration Code (CUI): 37247892
Registered Office: Splaiul Independenței 202B, București, România
Website: https://2probeats.com
Email: contact@2probeats.com

We have not appointed a Data Protection Officer, as we are not legally required to do so under GDPR Art. 37. For any data protection enquiry, contact us at the email above.

2. What Personal Data We Collect and Why

We collect personal data only when necessary to provide our services, process transactions, or improve our website.

A. Purchases and Financial Transactions (WooCommerce)

When you purchase digital products or online courses, we collect your first name, last name, country, and full billing address.

Legal Basis: Legal obligation (GDPR Art. 6(1)(c)).
Purpose: Under Romanian fiscal law (Codul Fiscal), we are legally required to collect a valid billing address to issue correct tax invoices and report B2B/B2C transactions through the national RO e-Factura system.

B. Account Registration

If you create an account on our website — either directly, or automatically when you purchase an online course — we store your username, email address, hashed password, and purchase history.

Legal Basis: Contractual necessity (GDPR Art. 6(1)(b)).
Purpose: To allow you to access your digital downloads, view past orders, manage your profile, and access any online courses you have purchased.

C. Email Marketing and Newsletters

If you opt in to our newsletter, we collect your email address and name. We use MailerLite to manage our email campaigns and MailerCheck to validate and clean our subscriber list.

Legal Basis: Explicit consent (GDPR Art. 6(1)(a)).
Purpose: To send you updates, free resources, and promotional offers. You can unsubscribe at any time using the link at the bottom of our emails.

D. Analytics and Tracking

We may use third-party analytics tools (Google Analytics, Meta Pixel) to understand how visitors interact with our site.

Legal Basis: Explicit consent (GDPR Art. 6(1)(a)).
Purpose: These scripts only fire if you click "Accept" on our cookie consent banner. If you deny consent, your visit is not tracked. You can withdraw consent at any time by clearing your cookie preferences via the banner.

E. Embedded Content (YouTube)

Our website may embed videos from YouTube. When you interact with an embedded video, YouTube (Google LLC) may set cookies and collect data according to its own privacy policy. We use privacy-enhanced embeds (youtube-nocookie.com) where available.

F. Online Course Access and Video Streaming

When you purchase or access an online course on our website, the following additional data is processed:

  • Course enrollment data: which courses you have access to, when access was granted, and any access-related information stored by our learning management system (LearnPress).
  • Learning progress data: which lessons you have started or completed, timestamps, and overall course completion status. This allows you to resume lessons where you left off.
  • Video streaming data: when you watch course videos, our video streaming provider (Bunny.net) processes your IP address, basic device and browser information, and playback events (such as start, pause, completion). This is required to deliver the video stream and to prevent unauthorized access to paid content.

Legal Basis: Contractual necessity (GDPR Art. 6(1)(b)) for delivering the course you have purchased; Legitimate interest (GDPR Art. 6(1)(f)) for protecting paid content against unauthorized access.
Purpose: To deliver course access, track your learning progress so you can resume where you left off, and securely stream video content via signed access tokens.

3. Cookies

We use the following cookie categories:

  • Strictly necessary cookies: required for the site, checkout, account features, and online course functionality to work. This includes session cookies set by our learning management system (LearnPress) to keep you logged in and to remember your lesson progress, and cookies set by our video player (Bunny.net) to manage playback (such as volume and resume position). Always active.
  • Analytics cookies: Google Analytics, set only with consent.
  • Marketing cookies: Meta Pixel, set only with consent.

You can manage your preferences at any time via our cookie consent banner, powered by Complianz.

4. Who We Share Your Data With

We do not sell or rent your personal data. We share data only with trusted third-party processors necessary to run our business:

  • Payment Processor — PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg): processes payments securely. We do not store or process credit card or financial details on our servers. Necessary billing data is passed to PayPal to validate and complete the transaction.
  • Email Marketing — MailerLite (UAB MailerLite, Lithuania) and MailerCheck: subscriber names and emails for newsletter delivery and list hygiene.
  • Website Hosting — One Top Solution (https://www.onetopsolution.ro): hosts the website and stores account, order, course, and content data.
  • Content Delivery and Video Streaming — BunnyWay d.o.o. (Dunajska cesta 165, 1000 Ljubljana, Slovenia), operator of Bunny.net: hosts downloadable course assets and streams course videos. Processes IP address, device information, and playback data to deliver content and prevent unauthorized access. A Data Processing Agreement is in place under GDPR Art. 28.
  • Analytics — Google LLC (Google Analytics) and Meta Platforms Ireland Ltd. (Meta Pixel): only with your consent.

We host our website fonts locally to prevent your IP address from being shared with external font servers.

5. International Data Transfers

Most of our processors are based in the European Union (BunnyWay d.o.o. in Slovenia, UAB MailerLite in Lithuania, PayPal (Europe) S.à r.l. in Luxembourg, Meta Platforms Ireland Ltd. in Ireland).

Some processors (notably Google, and the global CDN edge infrastructure operated by Bunny.net) may transfer or process data outside the European Economic Area (EEA), primarily in the United States or at globally distributed edge locations. When your data is transferred outside the EEA, we rely on the legal safeguards required by the GDPR, including:

  • the EU–US Data Privacy Framework adequacy decision (where the processor is certified), and/or
  • Standard Contractual Clauses (SCCs) approved by the European Commission.

You can request a copy of the safeguards in place by contacting us.

6. How Long We Retain Your Data

We keep your personal information only for as long as necessary:

  • Tax and invoicing data: purchase history and billing details attached to tax invoices are retained for the mandatory period required by Romanian accounting law (up to 10 years) to comply with ANAF audits. This financial data cannot be erased upon request.
  • User accounts and course access: account data is retained for as long as the account exists. Inactive accounts that hold no active course enrollments will be reviewed and may be deleted after 2 years of inactivity. Accounts holding active course enrollments will not be deleted while the corresponding course remains available on the platform, in order to preserve your purchased access.
  • Course progress data: retained for the life of the account, so that you can resume lessons where you left off.
  • Marketing data: we retain your email address until you unsubscribe, at which point it is removed from our active mailing list.

7. Security

We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption in transit, access controls, regular software updates, signed access tokens for paid video content, and limiting data access to authorised persons only. No system is 100% secure; we cannot guarantee absolute security but commit to using industry-standard practices.

8. Children's Data

Our services are not directed at children. We do not knowingly collect personal data from anyone under 16 years of age (the digital-consent age set by Romania under GDPR Art. 8). If you believe a minor has provided us with personal data, contact us and we will delete it.

9. Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or significantly affects you.

10. Your Rights Under the GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — request deletion of your personal data. Note: this does not apply to data we are legally obligated to keep for tax and administrative purposes, and exercising this right will terminate access to any online courses tied to your account.
  • Right to restrict processing — ask us to suspend processing of your data.
  • Right to data portability — request your data in a structured, commonly used format.
  • Right to object — object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent — where we rely on consent (e.g. newsletters, cookies), you can withdraw it at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București
Website: https://www.dataprotection.ro
Email: anspdcp@dataprotection.ro

11. How to Contact Us

To exercise any of your rights, or if you have questions about this Privacy Policy:

Email: contact@2probeats.com

We will respond to your request within 30 days, as required by GDPR Art. 12(3).

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via email (if you are a subscriber) or via a notice on our website.