Privacy policy
In force from 9 November 2026.
This policy explains what data we collect when you use the RB Fan Zone app for iPhone and the website bilinski.boldare.com, why we collect it, who we share it with, how long we keep it and what your rights are. Below, the app and the website together are the Fan Zone.
1. Who is responsible for your data
The controller of your data is Boldare S.A., registered office at ul. Zwycięstwa 52, 44-100 Gliwice, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court in Gliwice, 10th Commercial Division of the National Court Register, under KRS number 0000914518, tax number (NIP) 6312698829, REGON 389585559, with share capital of PLN 100,000.00 paid in full (Boldare, we). Boldare runs the Fan Zone as Technology Partner of Roman Bilinski, FIA Formula 2 driver.
For anything about your personal data, write to ado@boldare.com, or by post to our registered office marked “Personal data protection”. We have appointed a data protection officer. You can reach them at the same e-mail address, or by post to our registered office marked “Data Protection Officer”.
2. What we collect and why
Player id
The first time you open the app, your iPhone creates a random player id. Each iPhone has its own. We never link it to your name, e-mail address or phone number. You create no account and set no password. The player id lets us link your results and fan profile to you.
Fan profile in the app
In the app we give you a fan number. We store the player id, the fan number, your nickname and when the profile was created and last changed. We need them to show your fan card.
Nickname
You choose your nickname yourself the first time you open the app. It is required: without it you get no fan number and cannot use the app. The nickname does not have to be your name. Do not put your surname or contact details in it. Your results go on the leaderboards under it. We refuse nicknames with swear words or insults, and nicknames that pose as Roman, Boldare or the Fan Zone’s staff. We check this automatically before we store a nickname.
Chase Bilinski
When you finish a round of the game, we receive the reaction times of your starts, your jump starts and too-slow reactions, your score, nickname, player id, the race weekend and when you sent it. We also receive the device details without which results cannot be compared fairly: your iPhone’s model and its iOS version.
We need them for the leaderboards of the race weekends and the practice leaderboard between them, to show your progress over the season and to refuse results that cannot be real.
Reports and hidden nicknames
When you report a nickname on a leaderboard, we store the reported nickname, where you saw it and when. We do not store who reported it.
We may hide a nickname that breaks the rules above. We then put it on the list of hidden nicknames with a short note on why. A hidden nickname disappears from the leaderboards and cannot be chosen again.
Messages to us
When you write to us, for example to use your rights, we process your e-mail address, your message and anything you put in it. We need them to answer you and to show how we handled your request.
Data on your device
The app keeps your player id, fan number, nickname, chosen language, the history of your results and which introduction screens have been shown in your iPhone’s storage. The website stores nothing on your device.
This data serves only to run the Fan Zone and stays on your device until you delete it. We use no cookies and no analytics or advertising tools. We do not track you across other apps or websites.
Technical data
Our hosting provider’s servers process your IP address and details of your browser or device on every connection, to deliver the website, answer the app and protect the Fan Zone from abuse. We do not store your IP address with your profile or results.
3. Legal basis
- We process your player id, fan profile, nickname and results because they are needed to provide the service you choose to use: the fan card, the game and the leaderboards (Article 6(1)(b) GDPR).
- We process device details, the checks of nicknames, reports, hidden nicknames, the refusal of results that cannot be real and technical data in our legitimate interest in fair leaderboards and a safe Fan Zone for everyone who uses it (Article 6(1)(f) GDPR).
- We process messages about your rights to meet our obligations under the GDPR (Article 6(1)(c) GDPR), and other messages in our legitimate interest in answering them (Article 6(1)(f) GDPR).
Do you have to give us data? No, it is voluntary, but you cannot use the app without it: without a nickname you get no fan number and cannot play, and without the player id and the device details we cannot store your score.
Automated decisions. We check nicknames automatically and refuse results that cannot be real. These decisions concern only the game and the leaderboards. They have no legal effects on you and do not similarly significantly affect you (Article 22 GDPR).
4. What others see
Your nickname and results on the Chase Bilinski leaderboards are public. Anyone who opens the Fan Zone sees them, Roman Bilinski included. We never show your player id publicly. Your fan number is on your fan card. If you share the card, others see it too.
5. Who we share data with
These companies process data on our behalf, under data processing agreements:
- Netlify, Inc. (USA): hosting of the website and the app’s server. The website is delivered by Netlify’s global network of servers, usually from the one nearest to you.
- Supabase Pte. Ltd. (Singapore): the database of fan profiles, Chase Bilinski results, reports and hidden nicknames. The data is stored in Frankfurt (European Union). Only our server connects to the database, never your device.
- Our e-mail provider: handling the messages you send us.
Netlify is based in the USA and Supabase in Singapore. Both may access data from outside the European Union, Supabase also through its company in the USA. Netlify takes part in the EU-U.S. Data Privacy Framework, for which the European Commission has decided that it ensures an adequate level of protection (Article 45 GDPR). Supabase’s access is protected by standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR). You can get a copy of these clauses by writing to ado@boldare.com.
We do not give Roman Bilinski fans’ personal data.
You get the app from the App Store, which runs under Apple’s terms. If you agree in your iPhone’s settings to share data with app developers, Apple may give us crash reports and aggregate statistics about the app.
6. How long we keep data
- Fan profile: until you ask us to delete it, and no longer than 3 months after the Fan Zone closes.
- Chase Bilinski results: until the end of the FIA Formula 2 season they come from and for 12 months after it, unless you ask us to delete them earlier.
- Reported nicknames: 12 months from the report.
- Hidden nicknames: until the Fan Zone closes, because without the list we could not refuse the nickname again.
- Messages to us: 3 years after your request is closed.
- Technical data at the hosting provider: up to 30 days.
- Data on your device: until you delete it.
7. Your rights
You can ask to access, correct or delete your data, or to restrict its processing, and you can ask to move the data we process under a contract with you.
How to use your rights. Write to ado@boldare.com with your nickname and the fan number from your fan card. If we have reasonable doubts that the data is yours, we will ask for more information. We answer without undue delay and within one month at the latest.
Right to object. You can object at any time to the processing of your data in our legitimate interest. We then stop, unless we show compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.
Deleting your data. Write to ado@boldare.com that you want your data deleted. We then delete your profile and results from our servers and confirm it in our answer.
Removing the app from your iPhone deletes only the data on your device. The data on our servers stays until you write to us. If you want to delete everything, write to us first and delete the data on your device after we answer.
When we cannot recognise you. We do not know your name or e-mail address. If you delete the data on your device, we may not be able to tell which data in the Fan Zone is yours. We then cannot act on a request about that data unless you give us information that lets us recognise you (Article 11 GDPR).
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw) or with the data protection authority of the country where you live, work or where the infringement took place.
8. Children and teenagers
The Fan Zone does not ask for your name, e-mail address or age, so we do not know how old you are. If you are under 16, read this policy with a parent or guardian. Do not put anything in your nickname that could identify you. A parent or guardian can use your rights described in section 7 on your behalf.
9. Changes to this policy
If we change this policy, we publish the new version on this page with a new date. If a change brings new data or new purposes, we also tell you in the app and on the website before it applies.