Pink Sand PL WhatsApp
← Home

Pink Sand Crete privacy policy

Last updated: 2 November 2026

1. Who controls your data

The data controller is Tomasz Łaciński, sole trader operating as Pink Sand Crete, ul. Nowa 20/51, 92-446 Łódź, Poland, tax ID (NIP) 7282491365. Contact for data protection matters: info@pinksand.pl.

This policy covers pinksand.pl (including pinksand.pl/przewodniki), the Kretek / Crete Guide by Pink Sand app (app.pinksand.pl and the App Store and Google Play versions), and contact with us by email and WhatsApp.

2. What data we process and why

a) Enquiries and contact

When you send an enquiry through a form on pinksand.pl, or email or message us on WhatsApp, we process the details you give us: name, phone number, email address, dates, number of people, where you are staying and your message. We do this to answer your question and prepare a reply or an offer (Art. 6(1)(b) GDPR – steps taken at your request before entering into a contract). If you ask us to, we pass your enquiry to the provider of the service you are asking about (for example an accommodation provider, a tour operator or a car rental company), to the extent needed to check availability and confirm a booking. Please don't include health information or other special-category data in the form unless it is necessary.

b) Buying the e-book and Premium access

Name, email address and transaction data (Stripe payment ID, amount, date, status) – to conclude and perform the contract, deliver the e-book, personalise the PDF and assign Premium access (Art. 6(1)(b) GDPR). Marking the e-book with your details also protects our copyright (Art. 6(1)(f) GDPR). We never see or store your card details – Stripe processes them.

c) App account

Email address, account ID and sign-in method (Google or email) and whether you have Premium access – to run your account and give you access to the content (Art. 6(1)(b) GDPR).

d) Analytics and marketing (only with your consent)

On pinksand.pl/przewodniki and in the app we use Google Analytics (visit statistics) and the Meta Pixel (measuring the effectiveness of ads on Facebook and Instagram). These tools only start after you give consent in the consent window (Art. 6(1)(a) GDPR). You can withdraw consent at any time by reopening the privacy settings (link in the footer of /przewodniki and in the app profile). We don't use analytics or marketing tools on the other pages of pinksand.pl.

e) Referral programme

If you arrive through a referral link (with a ?ref= parameter), we store the referrer's code in your browser for 30 days and record the visit so the referral can be credited. This only happens with your marketing consent (Art. 6(1)(a) GDPR).

f) Legal obligations and claims

We keep accounting records because tax law requires it (Art. 6(1)(c) GDPR). We may also process data to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR).

3. Cookies and device storage

  • Necessary (no consent needed): remembering your language, theme, favourite places, offline app data, badges and your “memories”. This information stays in your browser or on your phone.
  • Analytics (with consent): Google Analytics.
  • Marketing (with consent): Meta Pixel, referral code (30 days).

Photos taken with the “Capture a memory” feature stay only on your device – we don't upload them anywhere.

pinksand.pl displays text in a font from Google Fonts. When the font loads, your browser connects to Google's servers, which receive your IP address (Art. 6(1)(f) GDPR – displaying the site correctly).

4. Who we share data with

We use trusted providers who process data on our behalf: Stripe (payments), Google / Firebase (app and function hosting, database, sign-in, analytics), Resend (sending emails), SEOHOST (website hosting), Meta (Pixel – only with consent). At your request, we pass enquiry details to the providers of the service you are asking about (accommodation providers, tour operators, car rental companies) – from then on they process them as independent controllers. If you buy the app in the App Store or Google Play, Apple or Google handles the payment under their own terms.

Some providers (Google, Meta, Resend, Stripe) may process data outside the European Economic Area. This is based on a European Commission decision (EU–US Data Privacy Framework) or standard contractual clauses.

5. How long we keep data

  • enquiries and correspondence – up to 12 months after our last contact; if a booking was made – until the limitation period for claims expires,
  • purchase and accounting data – 5 years from the end of the tax year,
  • app account – until it is deleted (you can ask us to delete it at info@pinksand.pl),
  • Google Analytics data – 14 months,
  • technical logs – up to 24 months.

6. Your rights

You have the right to access your data, have it corrected or deleted, restrict processing, data portability, object to processing based on legitimate interests, and withdraw consent at any time (without affecting earlier processing). You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (uodo.gov.pl), or the authority in your country of residence.

7. Do you have to give us your data?

Giving us your data is voluntary, but without contact details we can't reply to your enquiry, and without your name and email we can't complete a purchase.

8. Automated decisions

We don't make decisions about you based solely on automated processing, including profiling that has legal effects. The e-book is personalised automatically using your payment details.

9. Changes to this policy

We'll announce any significant changes on this page. The current version is always at pinksand.pl/en/privacy.html.