1. Who we are
GOLFSTREAM s.r.o. (“BoboBook”, “we”, “us”) is the controller of the personal data described in this policy.
- Registered address: Geologická 34, 821 06 Bratislava, Slovakia
- Company ID (IČO): 48218545 · EU VAT: SK2120091039
- Privacy contact: office@golfstream.com.pl
Data Protection Officer: not appointed. Our activities do not require one. Contact us at the email above.
2. Scope
This policy covers the BoboBook websites and landing pages that link to it, and our beta waitlist.
It does not cover the BoboBook app. The app processes health records and will have its own privacy policy, which you will see and accept before creating an account. We do not collect any medical documents or health records through our websites.
3. What data we collect
- Email address when you join the waitlist or beta.
- Signup details: which page and form you signed up on, the date and time, the version of the sign-up text you saw, and whether you agreed to receive product news. We keep this as a record of your consent.
- Technical data: IP address, browser, device type and pages visited. Our hosting provider processes this to deliver and protect the website.
- Analytics and advertising data, only if you accept cookies: pages viewed, time on page, the ad or link that brought you to us, and whether you signed up. See our Cookie Policy.
- Messages you send to our contact email.
Please do not send us medical documents through the website or by email.
4. Why we use your data and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Send you beta invitations, launch news and your early-access offer | Email, signup details | Legitimate interests, Art. 6(1)(f): keeping the promise we made when you signed up |
| Send product news and tips | Consent, Art. 6(1)(a): only if you ticked the optional box | |
| Prove that you gave consent | Signup details | Legal obligation, Art. 6(1)(c) with Art. 7(1) |
| Run, secure and fix the website | Technical data | Legitimate interests, Art. 6(1)(f) |
| Measure website use and ad performance | Analytics and advertising data | Consent, Art. 6(1)(a) and ePrivacy rules |
| Answer your messages | Email, message | Legitimate interests, Art. 6(1)(f) |
You can withdraw consent at any time. Withdrawal does not affect processing that happened before. You can object to processing based on legitimate interests (see section 9).
5. Cookies and tracking
We use Google Analytics and the Meta Pixel only after you click “Accept all” in our cookie banner or switch them on in the settings. If you click “Reject all”, only strictly necessary cookies are used.
When you have accepted marketing cookies and join the waitlist, the Meta Pixel tells Meta that a signup (“Lead”) happened. We do not send your email address or any other contact details to Meta.
You can change your choice at any time with the “Cookie settings” link in the footer. Details of each cookie are in our Cookie Policy.
6. Who we share data with
We do not sell your personal data. We share it only with these providers:
| Provider | What they do | Role |
|---|---|---|
| Cloudflare, Inc. | Website hosting, security and delivery; stores the waitlist (Cloudflare D1 database) | Processor |
| Email sending service | Sends beta and launch emails. We will name the provider here before we send the first email. | Processor |
| Google Ireland Ltd. (Google Analytics) | Website analytics, only with your consent | Processor |
| Meta Platforms Ireland Ltd. (Meta Pixel) | Ad measurement, only with your consent | Joint controller with us for collecting and sending the data; Meta is an independent controller for its own later use |
Processors act only on our instructions under a data processing agreement. We may also disclose data where the law requires it, for example to a court or authority.
7. Transfers outside the EU
Cloudflare, Google and Meta may process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework, where the recipient is certified, or on the European Commission’s Standard Contractual Clauses.
You can ask us for a copy of the safeguards at office@golfstream.com.pl.
8. How long we keep data
| Data | How long |
|---|---|
| Waitlist email | Until you unsubscribe, or 12 months after the public launch if you do not create an account |
| Consent to product news | Until you withdraw it |
| Consent records | 3 years after consent ends, to prove it was given |
| Server and security logs | Up to 30 days |
| Analytics data | 14 months in Google Analytics |
| Messages to us | Up to 2 years after the conversation ends |
9. Your rights
Under the GDPR you have the right to:
- access your data and get a copy;
- correct inaccurate data;
- delete your data;
- restrict how we use it;
- receive your data in a portable format;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time.
To unsubscribe, click the link in any email or write to us. For anything else, write to office@golfstream.com.pl. We reply within one month. We may ask you to confirm your identity.
Complaints. You can complain to the data protection authority where you live or work, or where you think the problem happened. Our lead authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. We would appreciate the chance to fix the problem first.
10. Other information
Children. Our websites and waitlist are for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will delete the data.
Security. We use encrypted connections (HTTPS), access controls and reputable providers. No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
Automated decisions. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Providing your data. Giving us your email is voluntary. Without it, we cannot add you to the waitlist.
Changes. We may update this policy. We will change the date below and, for significant changes, tell you by email.
Last updated: 2 October 2026