Legal
Privacy policy
On lucat.pl, we collect data only to schedule and hold a free consultation. Here you'll find everything about what happens to it, in plain language.
Last updated: October 6, 2026
The essentials in 30 seconds
Who
MagicDust sp. z o.o., owner of the Cold Unicorn brand. For data questions, email czesc@lucat.pl.
What data
Only what you enter in the form: your work email, phone number, chosen workshop, and an optional description.
Why
To schedule and hold the consultation and run the workshop you picked.
How long
Up to 12 months after our last contact if we don't start working together.
Cookies
Only the cookies the site needs to work. No analytics or ads.
Your rights
Access, rectification, erasure, restriction, objection, and lodging a complaint with the Polish data protection authority (UODO).
01
Who is responsible for your data
The data controller is MagicDust sp. z o.o., Malownicza 9, 42-261 Łysiec, Poland, Tax ID (NIP) 5732968488, KRS 0001212370, owner of the Cold Unicorn brand. In this policy, we refer to ourselves as “we.”
We have not appointed a Data Protection Officer. For anything related to your data, email czesc@lucat.pl.
02
Who this policy covers
- people who visit lucat.pl,
- people who submit the form or contact us about a free consultation.
Nothing is sold through lucat.pl, and we don't run campaigns from it. If you decide to work with Cold Unicorn or AURA after the consultation, you're covered by the coldunicorn.com privacy policy.
03
Why we process data, on what legal basis, and for how long
| Purpose and data | Legal basis | How long |
|---|---|---|
| Scheduling and holding the consultation and running the workshop you pickedwork email, phone number, chosen workshop, optional description, call notes | legitimate interest, i.e., responding to your request (Art. 6(1)(f) GDPR); if you ask us to prepare a proposal for working together, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) | up to 12 months after our last contact if we don't start working together |
| Establishing, exercising, or defending legal claimsdata needed for the specific matter | legitimate interest (Art. 6(1)(f) GDPR) | until the statute of limitations runs out |
| Website operation and securityIP address, browser data, server logs, essential cookies | legitimate interest, i.e., a secure, working website (Art. 6(1)(f) GDPR) | logs up to 60 days, cookies until they expire |
When these periods end, we delete the data or permanently anonymize it.
04
Who we share data with
We don't sell data. We share it only with companies that help us operate, and only to the extent necessary:
- website and email hosting providers (Seohost, Cyberfolks),
- Google Ireland Limited, the provider of Google Meet, which we use for consultations,
- a law firm, when needed,
- public authorities, when required by law.
05
Data transfers outside the European Economic Area
Your data generally stays in the EEA. We hold consultations on Google Meet, and Google may also process data on servers in the US. Such transfers are based on a European Commission adequacy decision (Art. 45 GDPR, the EU-U.S. Data Privacy Framework, under which Google LLC is certified) and standard contractual clauses (Art. 46 GDPR). We'll share the details on request.
06
Your rights
- Access
- you can find out what data we hold about you and what we do with it (Art. 15 GDPR).
- Rectification
- we'll correct data that is outdated or inaccurate (Art. 16).
- Erasure
- we'll delete data when there's no longer a basis to keep it (Art. 17).
- Restriction
- we'll pause processing while the matter is being resolved (Art. 18).
- Objection
- you can object to processing based on legitimate interest (Art. 21).
- Complaint
- you can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
We respond without undue delay, within one week at the latest, well inside the one-month limit under Art. 12(3) GDPR. Just email czesc@lucat.pl.
07
Do you have to provide your data?
Providing data in the form is voluntary, but without an email address and phone number we can't send you proposed times or schedule the consultation.
08
Automated decisions and profiling
We don't make decisions about you based solely on automated processing that would produce legal effects concerning you (Art. 22 GDPR).
09
Cookies
The site uses only cookies that are necessary for it to work and stay secure. We don't use analytics or advertising cookies. If that changes, we'll first ask for your consent in a banner, as required by Art. 399 of the Polish Electronic Communications Law.
You can delete or block cookies at any time in your browser settings.
10
How we protect data
Only people who need the data to prepare and hold the consultation have access to it. Each of them is authorized to process data and bound by confidentiality. The site runs over an encrypted connection.
11
Changes to this policy
If we change how we process data, we'll update this page and the date at the top.