Privacy Policy

Last updated: March 2026 · FIBROWS CARLA SRL

1. Who we are

The data controller is FIBROWS CARLA SRL, VAT ID RO35732335, with contact address biohacking@elevatepmu.com, provider of the ELEVATE Biohacking online course.

2. What data we collect

• Identification data: first name, last name
• Contact data: email address, phone number
• Financial data: processed exclusively by Stripe — we do not store card data
• Technical data: IP address, browser type, pages visited (via analytics cookies, with your consent)

3. Why we collect this data

• Contract execution — providing access to the purchased course
• Course-related communication (updates, materials, evaluations)
• Fulfilling legal obligations (invoicing, accounting)
• Direct marketing — only with your explicit consent

4. Legal basis (GDPR)

We process your data on the basis of: Art. 6(1)(b) — contract execution; Art. 6(1)(c) — legal obligation; Art. 6(1)(f) — legitimate interest; Art. 6(1)(a) — consent (for marketing).

5. How long we retain your data

• Invoicing data: 10 years (legal tax obligation)
• Account/course access data: during active access + 2 years after
• Marketing data: until consent withdrawal

6. Who we share your data with

• GoHighLevel / Highlevel Inc. — CRM platform and online course (headquarters: Dallas, Texas, USA)
• Stripe Inc. — payment processor, PCI DSS Level 1 certified (headquarters: San Francisco, California, USA)
• Cloudflare Inc. — web infrastructure and security (headquarters: San Francisco, California, USA)

We do not sell your data.

International data transfers: GoHighLevel and Stripe are companies headquartered in the USA. The transfer of your data to these providers is based on Standard Contractual Clauses (SCC) adopted by the European Commission pursuant to Implementing Decision (EU) 2021/914, which ensures an adequate level of protection under GDPR Art. 46(2)(c). You can request a copy of these clauses at biohacking@elevatepmu.com.

7. Your rights

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with ANSPDCP (anspdcp.eu)

To exercise your rights: biohacking@elevatepmu.com

8. Cookies

Full details in Cookie Policy.

---