Privacy policy
Version dated 4 November 2026.
1. Controller and contact
The controller is FAMILY-TECH spółka z ograniczoną odpowiedzialnością, ul. Krzywa 32, 16-010 Wasilków, Poland, tax ID (NIP) 9662162031.
For privacy matters, email destinat.biuro@gmail.com or call +48 503 521 542.
2. Data and purposes
Browsing involves connection data, including IP address, request time and browser information, needed to display the site, keep it secure and diagnose errors. Our legitimate interest is the legal basis — GDPR Article 6(1)(f).
When you contact us, we receive your message and contact details. We respond under GDPR Article 6(1)(b) for questions about entering into or performing a contract, or Article 6(1)(f) for other enquiries.
If you place an order, we need your email, PDF selection, language, country, currency, amount, payment status, declarations and accepted documents. This is for entering into and performing the contract — GDPR Article 6(1)(b). Legal sales and consumer-rights duties use Article 6(1)(c); preventing abuse and establishing or defending claims use Article 6(1)(f).
No customer account or physical delivery address is required. We do not use advertising trackers or external fonts. Section 9 explains optional analytics. Purchase declarations are not analytics or marketing consent.
3. Service providers and data transfers
The destinat.pl website is hosted by netcup GmbH. The hosting provider may process connection data and logs for operation, performance and security. We use Gmail for correspondence and purchase-related emails. Google Ireland Limited provides Gmail to users in the EEA. Google processes the recipient’s email address and the contents of messages such as order confirmations and access recovery emails.
When you start a payment through Stripe Checkout, Stripe receives the data needed to process the payment, such as your email address, order reference, amount and currency. You enter your card details directly with Stripe. We receive the transaction reference and status from the provider. Competent authorities may also receive data where required by law.
Providers may process data outside the EEA, including in the USA. Their documents explain how they process data and the grounds and safeguards for transfers, including standard contractual clauses.
https://www.netcup.com/en/contact/data-privacy
https://policies.google.com/privacy?hl=en
https://stripe.com/en-pl/privacy
4. Website language
Manually choosing a language saves the destinat_locale cookie with your language preference for 1 year. It remembers a setting you expressly selected. Change it using the language selector or remove the cookie in your browser.
Automatic matching to browser language does not set that cookie or use GPS, IP geolocation or an external location service.
5. Saved selection and music
After you choose a PDF or bundle, the browser remembers the product ID, language, currency and selected books so your choice can be restored when you return. This record contains no email, contact details, login details or card data. Remove it with “Clear selection” or your browser’s site-data settings.
Music enabled, mute and volume settings are saved in local browser storage. They remain until you change the settings or clear site data. These records support your chosen features rather than advertising tracking.
6. Purchase session
If you use an enabled checkout process, a protected cookie links the browser to order and file access for 30 days. Browsing the public catalogue alone does not create this session.
Clearing site data or changing browsers may interrupt session access. Use access recovery or contact the seller if needed. Session expiry does not delete purchase documents or end customer rights.
7. Data retention
We keep correspondence for as long as needed to resolve the matter, then only as required for legal duties or establishing, exercising and defending claims. The applicable retention period for sales documents depends on the document and legal requirements; it is separate from the 30-day session.
Technical-log retention depends on the hosting service and plan. We do not promise one deletion deadline for all connection data.
The language preference expires after a year. You can remove saved selections and music settings as explained above. Data no longer needed for the stated purposes is deleted or anonymised.
8. Your rights
Under GDPR conditions, you may access and correct your data, request erasure or restricted processing and, where applicable, portability. You may object to processing based on legitimate interests. Where consent is the legal basis, you can withdraw it without affecting earlier lawful processing.
Providing data is optional, but missing information needed for contact or an order may prevent us handling that matter. We do not make solely automated decisions with legal effects on you or use advertising profiling.
If you believe your data-protection rights have been infringed, you may complain to Poland’s Personal Data Protection Office: https://uodo.gov.pl
You can also contact us first at destinat.biuro@gmail.com.
9. Optional analytics
If the analytics feature is enabled, we load Google Analytics 4 only after you consent to analytics. Google Ireland Limited provides the service to users in the EEA. The purpose is to understand which pages, colouring books and characters are popular; consent is the legal basis — GDPR Article 6(1)(a). Without consent, we do not load the tool or send analytics events to Google.
Measurement covers public page paths, website language and clicks on colouring books and characters. These events do not include emails, form values, orders, tokens or URL parameters. Advertising features, Google Signals and automatic enhanced measurement are disabled. Measurement does not run on checkout, access-recovery or order pages. Connecting to Google involves transmitting connection data, including the IP address; section 3 explains provider policies and transfers.
Accept and reject buttons have equal prominence. We save your choice in browser storage for up to 180 days, separately for the site address and configured measurement property. After consent, GA4 may set _ga and _ga_* cookies for up to 180 days, without extending their expiry on activity. When activating the service, we set user and event data retention to 2 months without resetting it on new activity; aggregated reports follow separate Google rules.
You can refuse or withdraw consent through “Privacy settings”, available in the footer when the feature is enabled. Withdrawal blocks further measurement and removes GA4 cookies accessible to the site; it may reload the page. It does not automatically erase previously transmitted data or affect the lawfulness of earlier processing. Refusal does not restrict browsing or purchases. We do not start measurement when the browser signals Global Privacy Control or Do Not Track.